last executing test programs: 13m36.607174593s ago: executing program 1 (id=1576): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) (async) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x1000) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1d00) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0xa}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) setsockopt(r2, 0xd, 0x9, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2c}}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) r8 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_disconnect(r8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) syz_usb_connect$cdc_ncm(0x6, 0x8c, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0xb9, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "80"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x41, 0xd}, {0x6, 0x24, 0x1a, 0x6, 0x2b}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x1, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2d, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x84, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x8, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x81, 0x0, 0x4, 0x40, 0x12}, 0x39, &(0x7f0000000100)={0x5, 0xf, 0x39, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x7f, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x8, 0x0, 0xf1ad, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x7f, 0x5, 0x200, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x18, 0xb9, 0x1, 0xf899}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x7, 0x9, 0x8}]}, 0x2, [{0xf3, &(0x7f0000000140)=@string={0xf3, 0x3, "324c6d250f93f86848548654d5ef3cc1cd7747318f186334a511b69aaa5b73db32c8f87e24cb42f350762c6516075f855c2b7133fa66676ed2bfb7ed91392aaabdc3198f687562cecb8ed8bb98dc5fb4da5dff464c5357ccbb926cbc7dc83fdc1e027f7bab8ca98e895de5776e5e6739ccef12ff920a305d58ea86c86533006a9232d337a505062bc94c59db798a4beee3157075250313ffe8c63ae69cca92b79d316edb34341b20c039cadabbb7758dfaf1cb1bd2d8c14f08019702d40a099af1901ceebeddb0642a258644a2b3721c590dce0f78697f8423ad1a01ca3f96502ee90eb61524be4e55b00ba1648cbf1e70"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44d}}]}) 13m36.45502956s ago: executing program 1 (id=1579): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000300)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x160058, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x4) r3 = memfd_secret(0x80000) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) r6 = fcntl$dupfd(r0, 0x406, r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) r9 = dup(r8) read$eventfd(r9, &(0x7f0000000140), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') writev(r12, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x5353, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r16 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r15, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r16}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0x2, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x9e, &(0x7f0000000200)=""/158, 0x40f00, 0x20, '\x00', r2, @fallback=0x2e, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r5, 0x1, &(0x7f0000000a40)=[r6, r7, r9, r10, r11, r12, r13, r14, r16, r17], &(0x7f0000000a80)=[{0x5, 0x1, 0x4, 0x1}]}, 0x94) 13m32.261953599s ago: executing program 1 (id=1585): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0000}}, './file0\x00'}) io_uring_enter(r0, 0x17b, 0x9552, 0x75, &(0x7f0000000040)={[0xc]}, 0x8) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40019}, 0x11) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000300)=[{{r5, r6/1000+10000}, 0x14, 0x4}, {{0x0, 0x2710}, 0x0, 0x9, 0x2}], 0x30) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r7, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x820}, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) getpeername$qrtr(r0, &(0x7f0000000480), &(0x7f00000004c0)=0xc) io_setup(0xfd9, &(0x7f0000000500)=0x0) io_getevents(r8, 0x100, 0x4, &(0x7f0000000540)=[{}, {}, {}, {}], &(0x7f00000005c0)={0x77359400}) syz_open_dev$MSR(&(0x7f0000000600), 0x10001, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, &(0x7f0000000640)=0xc97, r9, &(0x7f0000000680)=0x6, 0xfc, 0x2) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x44010) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000007c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2}) syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x18, 0x1401, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{&(0x7f0000000940)={0xa, 0x4e20, 0xfffffffb, @private2, 0x8}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000980)="b0e52006f3a4", 0x6}, {&(0x7f00000009c0)="23bf067675ffbdf136f30713c1888e34c1c9eaa43d231f9bb6d17459cd833ed0e62d60eeb4bbee03cc0a8b9f458c7512087d86da3cd684773aeb099f12d70e7b65dba9b381f4acf17eff56e430c0abd09002e5e63f5f5ba2c61be5718c8e698908b28bdaa481845d11233bd84b4e62d9f29aed495b6957bbf2cf25833844dc7c4fada85ae1596f0f95d83bc3d72c97fe5e4190c597b06c8984f39fb7086661113436fb0b1646ec6cc3662c", 0xab}, {&(0x7f0000000a80)="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", 0xfe}, {&(0x7f0000000b80)="39276bf6855f8c38fffb6c0320f5577aff2cdbf6ba4284260354d8b8a27cb7e7baf3e98a40b5ab74383b1a342fd1e565945a6724d453a7afa7526795170c76cf48bd566d3cfb390774b2e6c552168cd29602742810401808ed68df477f74842992261f56130a29e6d19117c0824b689b8f884f0b31c3c566090fce00c8b5efa408ec875e3a417c8bead47588207f68ecf99e4402af8bd2a2967b7622f265e6896cd06f7719fd682fd5e9bfe61c7f1506c1d283a6486505d15e5d684735991cfffeab574905847e6ca12a197f89ce85de459f105dd4bab8b4b89a7bd0d1d25737075ccf7f0f937637bea74943a88e9129ff0f30", 0xf3}], 0x4, &(0x7f0000000cc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="5fffa6176bae52ac499a1f8e83d7bdfcebb2459a07e4ea4a2336444e6e58306c9919245123993f18d3795cf0e6583337689b446c9a24ba091076de0c5c69e4c4d5ea2cbc84c031349af21f9e7e6e87047eb9628382e7a6cbdbdf6234516e46413612f0255a72fa8b0035f60ce3738425a8ed4526db3069d5c015895b2e965ba49acd7a6fb0d5ebfad14184615325f70c77285e81fea6418983afb5703f08be00dad7548b1a9a7d3770c4753d9befcc1a1eb68cb9ca35b194cbd4", 0xba}], 0x1}}, {{&(0x7f0000000e00)={0xa, 0x4e20, 0x7ff, @mcast2, 0x6}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000e40)="df8cb3ed5dffc6c3b04f03fefac3b637075ed723f04cfb558d22a141ac589ae18e823ff0b2", 0x25}], 0x1, &(0x7f0000000ec0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@loopback]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @jumbo={0xc2, 0x4, 0x879}, @ra={0x5, 0x2, 0x5df}, @ra={0x5, 0x2, 0x1ff}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x7fff}, @ra={0x5, 0x2, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x90}}, {{&(0x7f0000000f80)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000fc0)="3ec10fbbe7a137deff588bcb6e731d2dcd32a980764e63b9d872c3ca2e780f332dfad25069a5eff4445a41942ab60bbfa2cd16607c3e62675891d8236db563e46459bb061af46f4801ccfd119ec17503e795a42288e617b844eac1c582f33a74ca96e3b10742ac8c575911a82ce283d0f13fb63e", 0x74}, {&(0x7f0000001040)="4a0b258831ac111068c9c5a26a778762e61f452b9c48a243fc724109a9f45399133f603b178e71b12471974abe5729b0983cfa4f09ef7529d62afcae86b8ed1cb731685d027e5b23a92de48454f93111528eb4ea7a28e87fc8e16bc700ab0e554b814f7dab759448907c698e4a66fdc90011bf71c87f9beb489108e3229133e2894f3ccdf64125fe2ac4622dbf16387f002a6b658f6d9460b50f46a5fa060ad87c2d6eb0bc37078d427ff0cce8994ac7c0aabfcbf70296", 0xb7}, {&(0x7f0000001100)="c71f8c59791cce01a1c4255800a0377c278e479417318205d6005f28ec6ec567e74162d1f6d3d27c533a4453d4d4652942079ead881b0dc4275d45eb2ae07f9ba6c74c86c85835e785f06c4cc7b0fd3fa215a2381e0b3cac5f4b803e23396eeac86be4f4fa3717575e4dea9d237998878ddc87e065180f50db500832ad283ddd3bcdfb5223febd414a96a93db335a5c7023f696f01308d50be0c818b87eaa6", 0x9f}], 0x3, &(0x7f0000001200)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x18}}], 0x4, 0x94) syz_open_dev$sg(&(0x7f0000001340), 0x0, 0x240001) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000013c0)={'pim6reg\x00', &(0x7f0000001380)=@ethtool_pauseparam={0x13, 0x9, 0x8, 0xfffffff9}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r0, &(0x7f0000001400), &(0x7f0000001440)=@tcp=r0}, 0x20) lsetxattr$smack_xattr_label(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)='security.SMACK64EXEC\x00', &(0x7f0000001540)={'/dev/sg#\x00'}, 0xa, 0x1) 13m30.485116162s ago: executing program 1 (id=1591): r0 = io_uring_setup(0x4351, &(0x7f0000000080)={0x0, 0xc982, 0x80, 0x3, 0x135}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000000)={0x8, 0x6}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) syz_io_uring_setup(0x9e, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3a, 0x3a, 0x8, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x3}, @datasec={0xc, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x5598, 0x10}], "1117"}, @var={0x81, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x6f, 0x0, 0x2e, 0x30, 0x61, 0x5f]}}, &(0x7f0000000340)=""/68, 0x5c, 0x44, 0x1, 0x2}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x4, 0x0}, 0x8) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x2200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x28, &(0x7f0000000880)=ANY=[@ANYBLOB="0000704843d013460af7871afac7484e7bae55c0941c108a39a977c5d6d0e52e478ff461522cc201687149eaa2f8e39ce9654ff1c521260212f388d5fad17a43c2b6566519c3249ad365cf9abd2221538450f731b062981bddb45396798119dd0000000000000072b65260f8239ef78bb4e06c3af75e130e83f4c5aa18a0257922c400000000000000", @ANYRES32=0x1, @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0xffffe68e, 0xe0, &(0x7f00000005c0)=""/224, 0x41000, 0x44, '\x00', 0x0, @sk_msg=0x7, r7, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x10, 0x3, 0xfff}, 0x10, r8, r9, 0x2, 0x0, &(0x7f0000000780)=[{0x5, 0x4, 0x7, 0x9}, {0x3, 0x1, 0x5, 0x3}], 0x10, 0x8001}, 0x94) syz_io_uring_submit(0x0, r3, 0x0) 13m25.968883841s ago: executing program 1 (id=1597): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0xfe7f, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m24.37491033s ago: executing program 1 (id=1605): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() io_uring_enter(0xffffffffffffffff, 0xc23, 0xb87f, 0x5, &(0x7f0000000040)={[0xc039]}, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) timer_delete(r1) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 13m8.438279647s ago: executing program 32 (id=1605): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() io_uring_enter(0xffffffffffffffff, 0xc23, 0xb87f, 0x5, &(0x7f0000000040)={[0xc039]}, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) timer_delete(r1) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 8m13.485377511s ago: executing program 0 (id=2642): syz_usb_connect(0x0, 0x1a2, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e10102030109029001020000000009040000020e0100000a2401002200020102092100000001220000090500000000000000a7008d566539461c701919d99a91c3af134dfaf61ea66b8f08810855d90c55c91f11c4a6d847caf7b449c6c760e60f6b890d99ed23074bf2538ca7bba727dfe7c00b90d0bc7f2da56768ed5ce8df38c07183564831596fd52da49a92adafa6277df5a120c898fc51ca04089f110dfbe1b258e9b9a83bf95fb0a4a24ca6acae78e1c291f671fcdca77c7128d319f7a4b51bbc2ed4bab8aac95498fb6033f760602c1a8b1eac2150072501000000000905000000000000000725010000000007250100000000090400000eb03748000a2401000000020102052405", @ANYRESOCT], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_create1(0x80000) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x33, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x18) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xffff0001}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000480)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0], 0x1}) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000008050000008fbda6e6630ef5ffff6a2f11ad8b1c025c97ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 8m8.952259053s ago: executing program 0 (id=2657): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) (fail_nth: 7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x6d) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x80000, {0x5, 0x0, 0x8001, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0xcad2313ba67c0ca7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x401}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f00000000c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m8.433079433s ago: executing program 0 (id=2662): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x69}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x50}}, 0x24040084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001a00010000000000fedbdf2502202000fd0000000000000008000300", @ANYRES32=r6, @ANYBLOB="0800020034"], 0x2c}}, 0x20004000) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000003c0)={0x8005, r0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xd, 0x2, 0x214, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x10, 0x7800, 0xe, 0x8}}) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000100)=r8) 8m7.357323665s ago: executing program 0 (id=2665): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x442141) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x89901) sendto$inet6(r0, &(0x7f0000000040)="449043a447cbcb5b5a618387a5fd6c5f6fa23bb96cb8a0e3926479b40bd4766ef1e3329190a4f3c68f1c4344b2be5c9bd48c70cc97046bb9600d7767ef0ca62cfa6bf23da4a229f9aafdcab98e180055f105f1f468dab6c2d501d6a55881da0cc77d8894daa340c0ec7834a96a1542b5686fcc9b966643ec7368bbb5cb2257cdac1f392b96b58c8889b2b15154024127b528df19fca6f062747fad22bd9f9162129713dda5a0b0dcee6257", 0xab, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x72, 0x38, 0xa, 0x40, 0x8087, 0xa5a, 0x60b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8c, 0x0, 0xf, [{{0x9, 0x4, 0x19, 0x7, 0x0, 0x73, 0xb0, 0xe2, 0xb9}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffff22, 0x0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 8m6.117101663s ago: executing program 0 (id=2669): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x800198b, 0x400, 0x1, 0x10003aa, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r8, 0xc0506107, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r10, 0x2000}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r10, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x6, 0xd, "42341f9b100000d60a00e52e378f00"}) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) splice(r10, 0x0, r9, 0x0, 0x7ffff000, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r9, 0x17, &(0x7f0000000440)={&(0x7f0000001000)={[{&(0x7f00000003c0)="e019635e0dea1ed9540b54fe761dc037f0449dd12bb1e7ec49ed9d754a1a4a1d46eb5d2a19697ceccb3f2a6f64132514d974b6710717dc3072a2897ee04344f6db79d154aa2a22b78e368dd8048fe50bf1cf31ff6d", 0x55, 0x2}]}, 0x1}, 0x1) ioctl$CEC_DQEVENT(r8, 0xc0506107, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x80016, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000380)={@empty, @dev={0xac, 0x14, 0x14, 0xa}, r12}, 0xc) syz_usb_connect(0x0, 0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003710559000905330510000000010200090502765fca"], 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x184, r14, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x15c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x130, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket(0x25, 0x5, 0x33c8952e) 8m0.188193238s ago: executing program 0 (id=2676): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x430840, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000140)={0xda88a49, 0x0}) 7m59.162766447s ago: executing program 33 (id=2676): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x430840, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000140)={0xda88a49, 0x0}) 4m24.29316135s ago: executing program 5 (id=3417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x1f, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000640)=0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000006c0)={{r2, r3+10000000}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000001c0)={0x0, 0x2, 0xb, {0xb, 0x123c3bda84dd12ab, "1a08c1b38fe79c67f1"}}, &(0x7f0000000200)={0x0, 0x3, 0x23, @string={0x23, 0x3, "84f4c785d85817f6c4b1d14c6c648f5a10bde5e10c1363348d9a1a861704294bdb"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x20, 0x9, 0xa0, "192d0a7c54e9880ee9da501b5ed4ada09066768d0208c16a8b3b68f7d44ae40fbd876103a6dc1333b088d037e87c2c88eff88dd8fa808c1e8f681b22a23f764dcd2d7b48fef16a27f9eea92352f43ac27fea37a7fbcfb9ad40092d897d6b61085b0ddc3f606f1c9f0ea9d1b5dbbb03247d6f3d77cffe25f5c3d78b1da3df828ad23ce57797eee70dca1ae1fb7ac742a06aa2f7a78ea7b96767c51d47600a2726"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000440)={0x20, 0x0, 0xb5, {0xb3, "327b20bc5cd99aac452d3ffd8e651276f13b6fd3a1a9ac9216b423fb87185de38ca023cc2b919e91018c8ae994d76f144f0249eca207159b4a9f866a924c92a8b1566d27299c069aef34a9907b1295bedd3244a5dc72d8c72e2810fbfb49cd95a54561cb725187d72250908d69319d07943da387424f9b81eac0f2bcdb62569f278264f7600c927e5c2285316f36c3261dc02213b1b7a7a875be4f7c645884d5e2e0a873b5e4c80ee01610b0466808f7ddcb8e"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x9}}) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0xffff76cc, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x3}, 0x1c) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000000180)={0x1, 0xffffffff, 0x6, 0x4, 0x8, 0x5}) 4m20.199885746s ago: executing program 5 (id=3430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000017f00000100000080ffffff0000000000000000004e2300000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c000000000000000000000000000000000020000000000000000020000000000200000000000000000000000000000010000000000000000000000000000000000a000000000000feffffffff7f400002000000000020080000000000000000010000000000000044000500fe8000000000000000ea0000000000aa000000003c00000002"], 0xfc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 4m19.945476161s ago: executing program 5 (id=3433): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000782e040018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000020b703000001040000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfe0, &(0x7f0000001e00)=""/4064, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4m19.79651755s ago: executing program 5 (id=3435): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000002, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000300000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) 4m19.609447236s ago: executing program 5 (id=3436): r0 = creat(0x0, 0x8) r1 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r1, &(0x7f0000000b00)=@l2={{0x7, 0x3a, 0x9, 0x3a, 0x9, 0x3a, 0x9, 0x3a, 0x4080, 0x3a, 0xf54, 0x3a, 0x8, 0x3a, 0x38}, 0x2f, 0x10, 0x20, '(%\''}, 0xb1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) fcntl$setflags(r0, 0x2, 0x1) 4m19.577662108s ago: executing program 5 (id=3438): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x4000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14c}}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x10b, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x6, 0xc}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000100)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000000000000100000d0a"], &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1}, 0x28) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x48180, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 4m16.351262109s ago: executing program 2 (id=3455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xe, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000008037b01"]) 4m15.902124058s ago: executing program 2 (id=3459): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x202, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60102, 0xc) fcntl$setstatus(r2, 0x4, 0x6800) write$binfmt_format(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x200448c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000c00000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m15.020460456s ago: executing program 2 (id=3462): socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3880, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x0, 0x8, 0x2, 0x100}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6db}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x114, 0x30, 0x101, 0x0, 0x0, {}, [{0x100, 0x1, [@m_connmark={0xfc, 0x1, 0x0, 0x0, {{0x6e}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf8df803362adb335}}}]}, {0xaf, 0x6, "6c84e8a12e7862a9662c3b02678ed8d55ffd267239d311cd4e6be95f8adbac371c5d269a575138d939e27cfdf926779b7976aea0d7baaa20581ec722c98cf44d1b267e00c3c17adf54f5c7cd7636ca36d7108a9e564c637a0d94f7842bf04401000000681e029643ad7bc3da1ed80f48b20ebf2a1ea5710df7aec8b4f5923be3aa4466833b9b2f74980940ebff025c5cc739f6fe52d4aa4ee365d18d4e01fe7f02c100bcffb44e0f7920a3"}, {0xc}, {0xc}}}]}]}, 0x114}}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x4, 0x1}, @nested={0x4, 0xf}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0100000000000000000092af000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x1, 0x0) 4m13.607546518s ago: executing program 2 (id=3468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b000300000008000200", @ANYRES32=r1, @ANYBLOB="060004000000002305002a"], 0x48}, 0x1, 0x600000000000000, 0x0, 0x4004000}, 0x44004094) 4m13.209231591s ago: executing program 2 (id=3470): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={0x0}) 4m12.816906659s ago: executing program 2 (id=3474): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x700100, 0x0, 0x1000f4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0, 0x0, {0xffffffea}}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newtaction={0x128, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x114, 0x1, [@m_ife={0xe4, 0xa, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x73}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fffffff}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x13}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_SMAC={0xa, 0x4, @random="36e53b33b8fb"}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x59, 0x6, "9f9b1752caf80e2cd1f279d478f2ffcee19004f8c41f0a45808e4ed94a084e2c0a9ec7d71351233511b623dc4fe8eb9cc5b9a2940bc86412dbd530dc161fe28a6f4db8a9372a6232abaf7c3dd6cf3a891d008a9efd"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_ife={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x175d, 0x10100, 0x5, 0x262}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r9, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r9, &(0x7f00000040c0)={0x2020}, 0x2020) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(0x0, r10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fbdbdf251b00000008009a00020000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) 4m4.526028098s ago: executing program 34 (id=3438): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x4000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14c}}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x10b, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x6, 0xc}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000100)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000000000000100000d0a"], &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1}, 0x28) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x48180, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 3m57.684793052s ago: executing program 35 (id=3474): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x700100, 0x0, 0x1000f4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0, 0x0, {0xffffffea}}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newtaction={0x128, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x114, 0x1, [@m_ife={0xe4, 0xa, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x73}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fffffff}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x13}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_SMAC={0xa, 0x4, @random="36e53b33b8fb"}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x59, 0x6, "9f9b1752caf80e2cd1f279d478f2ffcee19004f8c41f0a45808e4ed94a084e2c0a9ec7d71351233511b623dc4fe8eb9cc5b9a2940bc86412dbd530dc161fe28a6f4db8a9372a6232abaf7c3dd6cf3a891d008a9efd"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_ife={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x175d, 0x10100, 0x5, 0x262}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r9, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r9, &(0x7f00000040c0)={0x2020}, 0x2020) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(0x0, r10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fbdbdf251b00000008009a00020000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) 11.223321676s ago: executing program 7 (id=4329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 9.855780916s ago: executing program 3 (id=4334): r0 = syz_io_uring_setup(0x25f, &(0x7f0000000080)={0x0, 0x2b47, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8, 0x3, r7}]}, 0x24}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) io_uring_enter(r0, 0x4, 0x0, 0x0, 0x0, 0x0) 9.717031067s ago: executing program 8 (id=4337): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000160000000800000002"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x14) setsockopt$packet_int(r1, 0x107, 0xb9f64e877ad4ae4f, &(0x7f0000000140)=0x8, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100000000000000a20000000000a0103000000001b000000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000802c0004802800018008000100666962001c0002800800014000000011080003400000000e080002400000000114000000110001000000e5ffffffffffffff000a00"/220], 0xdc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) 7.926558882s ago: executing program 3 (id=4339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) getpid() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setfsgid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 7.893051909s ago: executing program 8 (id=4340): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r1 = fanotify_init(0x0, 0x181000) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1, 0x1fd, 0x0) 6.810394625s ago: executing program 4 (id=4343): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) 6.799370994s ago: executing program 8 (id=4344): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$kcm(0x21, 0x2, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x110, 0x6, 0x0, 0xfffffffffffffe89) 6.373318992s ago: executing program 8 (id=4346): unshare(0x20060400) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, &(0x7f0000000180)=0x5, r0, 0x0, 0x3, 0xb) 5.655096027s ago: executing program 6 (id=4347): r0 = syz_open_dev$video(&(0x7f0000000000), 0x800000000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34565348, 0x2, @stepwise={0xb, 0x74, 0x41e5, 0xc, 0xca, 0x3}}) 5.654064129s ago: executing program 4 (id=4348): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x15, 0x1, 0x200, &(0x7f0000000880)="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"}) 5.625550317s ago: executing program 8 (id=4349): openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x1000) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x13) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3d15, 0x0, 0x0, 0x7, 0x0, "0001000000000000649300"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x81) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) 5.165109804s ago: executing program 6 (id=4350): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x400}}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x60}}, 0x0) 5.12981866s ago: executing program 7 (id=4351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x120, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x800000000000000}}, {{@in6=@mcast1, 0x0, 0x6c}, 0xa, @in=@private=0xa010100, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46057d9b04050000000000000003000300155eef2e5d020000380000000b0300070000000900200001000100870000040000000051e5746401000000dc000000040000000600000006000000ffffff7f0800"], 0x58) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) 5.046072028s ago: executing program 4 (id=4352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x20040010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) listen(r5, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001cc0)={0x2020}, 0x2020) 4.525981283s ago: executing program 6 (id=4353): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x802ca2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0x40008c4, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000380)={0x2, 'dvmrp1\x00', {0x3}, 0x2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='.\x00'/12, @ANYRES32=r3, @ANYBLOB="75aa264c3f366d0c49ef8e3557f98c0b7bf6c0a66b6e54ba843cc64ddac00b1cc1b8a71134279feabd4dd4d6b68f0a9e31d69cdc0fb26a385c70", @ANYRES64=0x0], 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r5, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x5, 0x6}, {0xb, 0x3}, {0xffe0, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') 4.130230551s ago: executing program 7 (id=4354): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002d00010026bd7000fcdbdf25040000008c83e8c132b17e64a6654dad157cf435600179b11e0b488793ac514e0b3e9fd17f18f44d1f24cad16f257079a989c7b9e3ac5039cfe92e394f18d45ae2921d69d596145936ac5335bd7f907a069ec5405e6ab5b9285955cdf718135fe275ebf4133d13ac41bacb329de9a12dac842c0000abc716cdf78b782405bc50e7ee02c804215f4de7abb23e62dfd97fa2690292e410eae1be95b6b17660859dde8075412d8ff5"], 0x14}, 0x1, 0x0, 0x30000000, 0x4000d}, 0x20000000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000", @ANYRES16=r5, @ANYBLOB="ad43000000040100000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vivid(0x0, 0x0, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) inotify_init1(0x0) getpid() epoll_create1(0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 3.521908351s ago: executing program 4 (id=4355): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) listen(r5, 0x0) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet(0x2, 0x3, 0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) write$P9_RSTATu(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x250441, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 3.520894539s ago: executing program 3 (id=4356): unshare(0x8000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x1e8, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) syz_open_dev$sg(&(0x7f0000000000), 0xeb, 0x210000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) 2.711263221s ago: executing program 6 (id=4357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x3, 0x8001, 0x0, 0x400fe02, 0x1, "4ae23ae1179c12747512740bba94224cbad08f", 0x7, 0x2}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xba) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f8000090503"], 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r4, &(0x7f00000000c0)=@other={'unlock', ' ', 'mem'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x3, 0x8001, 0x0, 0x400fe02, 0x1, "4ae23ae1179c12747512740bba94224cbad08f", 0x7, 0x2}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xba) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f8000090503"], 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) (async) write$vga_arbiter(r4, &(0x7f00000000c0)=@other={'unlock', ' ', 'mem'}, 0xb) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) (async) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) (async) 2.709778376s ago: executing program 3 (id=4358): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000003700), 0x1ff, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0) 2.506804633s ago: executing program 4 (id=4359): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) (async) r1 = fanotify_init(0x4, 0x101801) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r3 = fanotify_init(0x20, 0x1000) fanotify_mark(r3, 0x1, 0x1, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') (async) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x9, 0x12) (async, rerun: 32) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) (rerun: 32) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x0, &(0x7f0000000040)={0x0}) (async) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 64) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) (async) r7 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x10000000) r9 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r9, 0x0, 0x0, 0x7, 0x30, 0x14) (async, rerun: 64) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r11 = openat$cgroup_int(r10, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000500)=ANY=[@ANYRESHEX=r11, @ANYRESDEC], 0x27) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xe8e41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000020b000/0x2000)=nil, 0x2000, 0x4, 0x10010, r12, 0x0) 1.451136131s ago: executing program 3 (id=4360): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT], 0x1ac}}, 0x8001) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="160000", @ANYRES16=0x0, @ANYBLOB="100025bd7000ffdbdf2502000000060001004e240000060001004e230000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x40880, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000180)={0x9, 0x0, 0xffffffff, 0x1000, 0x1, 0x6}) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.size\x00') ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000380)={0x3, r2}) r3 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffffff, r3, 0x0, &(0x7f0000000780), 0x400) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000006740), 0x0, 0x81) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x8c0) r5 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, &(0x7f0000000000)=[r5], 0x1) 1.349642468s ago: executing program 7 (id=4361): prlimit64(0x0, 0x7, &(0x7f00000007c0)={0x2000000000b, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000030000000005e89afebba7c3799104da880000000200000005000000000000e4c865eb3017f6d2265fad6c0c3a9e506f6512bec7c21de406fa70979142d892c9f8b343c7c18a2f2971b82910351d74c092c2499d3c814f1a3c4fa2c22395d9926e14c8160a63e632ae4de82a446df0e3c9c9ed3654f4fc482a05ef78551be9960d1ae767ac68373a5abdce29dd69bdd6d820145178b2a27df1a6cb76e643c829022b10ebc119f79b36e98eb20e2575f461a68b45"], 0x0, 0x3e, 0x0, 0x8}, 0x28) (async) mount$9p_rdma(0x0, 0x0, 0x0, 0x1000800, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000080)={0x27, r3, 0x0, 0x1}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20000300000000000000130000000c0009800800010009000000435982c937154f27bd08d3a2ad2a598900f216e601291b9ad138f5be6a84d1"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000e5e500e44e58780db2537a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280050016000400000006000e000000000004001200"], 0x48}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.237179001s ago: executing program 6 (id=4362): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000001400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 391.934695ms ago: executing program 3 (id=4363): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r1, 0x4b6a, &(0x7f0000000340)={0x200f, 0x0, 0x0, 0xfeff, 0x3, "72710080ab003f00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r2, 0x3, {0x0, 0x0, 0x2}}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 289.770148ms ago: executing program 4 (id=4364): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x4533, &(0x7f00000000c0)={0x0, 0x7aff, 0x40, 0x3, 0x23e, 0x0, r0}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000095dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 197.315995ms ago: executing program 7 (id=4365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) sendto$inet6(r0, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="84ad3daa560315", 0x7, 0x4000890, 0x0, 0x0) 137.716472ms ago: executing program 6 (id=4366): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "000000013904030401010000000000010000e0efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 3.740997ms ago: executing program 8 (id=4367): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2501000000", @ANYRES32=r2, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000b000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 0s ago: executing program 7 (id=4368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x120, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x800000000000000}}, {{@in6=@mcast1, 0x0, 0x6c}, 0xa, @in=@private=0xa010100, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46057d9b04050000000000000003000300155eef2e5d020000380000000b0300070000000900200001000100870000040000000051e5746401000000dc000000040000000600000006000000ffffff7f0800"], 0x58) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) kernel console output (not intermixed with test programs): 7 comm="syz-executor" name="/" dev="tmpfs" ino=1 [ 1171.837330][ T30] audit: type=1400 audit(2000000969.724:17550): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=17657 comm="syz-executor" name="/" dev="tmpfs" ino=1 [ 1171.837695][ T30] audit: type=1400 audit(2000000969.724:17551): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17657 comm="syz-executor" name="syzkaller.npRRLi" dev="sda1" ino=2057 [ 1171.845955][ T30] audit: type=1400 audit(2000000969.734:17552): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17657 comm="syz-executor" name="syzkaller.npRRLi" dev="sda1" ino=2057 [ 1172.114828][ T5954] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1172.647270][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.647309][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.647351][ T5954] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice=1d.5e [ 1172.647376][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.697168][ T5954] usb 5-1: config 0 descriptor?? [ 1172.922745][T17830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.923231][T17830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.990412][T17841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.991067][T17841] batadv_slave_0: entered promiscuous mode [ 1172.991084][T17841] batadv_slave_0: entered allmulticast mode [ 1173.003738][T17843] FAULT_INJECTION: forcing a failure. [ 1173.003738][T17843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.003771][T17843] CPU: 0 UID: 0 PID: 17843 Comm: syz.8.3521 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1173.003795][T17843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1173.003807][T17843] Call Trace: [ 1173.003815][T17843] [ 1173.003824][T17843] dump_stack_lvl+0x189/0x250 [ 1173.003855][T17843] ? __pfx____ratelimit+0x10/0x10 [ 1173.003885][T17843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1173.003909][T17843] ? __pfx__printk+0x10/0x10 [ 1173.003936][T17843] ? __might_fault+0xb0/0x130 [ 1173.003977][T17843] should_fail_ex+0x414/0x560 [ 1173.004012][T17843] _copy_from_user+0x2d/0xb0 [ 1173.004038][T17843] __sys_bpf+0x1ed/0x860 [ 1173.004072][T17843] ? __pfx___sys_bpf+0x10/0x10 [ 1173.004115][T17843] ? ksys_write+0x22a/0x250 [ 1173.004146][T17843] ? __pfx_ksys_write+0x10/0x10 [ 1173.004170][T17843] ? rcu_is_watching+0x15/0xb0 [ 1173.004201][T17843] __x64_sys_bpf+0x7c/0x90 [ 1173.004230][T17843] do_syscall_64+0xfa/0x3b0 [ 1173.004248][T17843] ? lockdep_hardirqs_on+0x9c/0x150 [ 1173.004278][T17843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.004307][T17843] ? clear_bhb_loop+0x60/0xb0 [ 1173.004332][T17843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.004353][T17843] RIP: 0033:0x7f3e8f58e929 [ 1173.004371][T17843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.004390][T17843] RSP: 002b:00007f3e903db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1173.004413][T17843] RAX: ffffffffffffffda RBX: 00007f3e8f7b5fa0 RCX: 00007f3e8f58e929 [ 1173.004429][T17843] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 1173.004442][T17843] RBP: 00007f3e903db090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.004455][T17843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.004467][T17843] R13: 0000000000000001 R14: 00007f3e8f7b5fa0 R15: 00007ffda68ef2b8 [ 1173.004499][T17843] [ 1173.131263][ T5954] magicmouse 0003:05AC:0265.0023: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 1173.131303][ T5954] magicmouse 0003:05AC:0265.0023: magicmouse input not registered [ 1173.137227][ T5954] magicmouse 0003:05AC:0265.0023: probe with driver magicmouse failed with error -12 [ 1173.334811][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3565'. [ 1173.347522][ T5954] usb 5-1: USB disconnect, device number 73 [ 1175.336194][T17875] lo speed is unknown, defaulting to 1000 [ 1175.363952][ T5924] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1175.564671][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 1175.623643][ T5924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1175.623676][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.097278][ T5924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1176.097310][ T5924] pvrusb2: ********** [ 1176.097321][ T5924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1176.140566][ T5924] pvrusb2: Important functionality might not be entirely working. [ 1176.140604][ T5924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1176.142670][ T5924] pvrusb2: ********** [ 1176.307741][T17872] netlink: 'syz.4.3577': attribute type 30 has an invalid length. [ 1176.459546][T17887] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3583'. [ 1176.557423][T17890] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3584'. [ 1176.889669][ T30] kauditd_printk_skb: 2692 callbacks suppressed [ 1176.889690][ T30] audit: type=1400 audit(2000000974.774:20179): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17898 comm="syz.7.3586" name="newroot" dev="tmpfs" ino=2 [ 1177.227304][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1177.248748][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1177.255891][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1177.263290][ C1] audit: audit_lost=727 audit_rate_limit=0 audit_backlog_limit=64 [ 1177.272096][ C1] audit: backlog limit exceeded [ 1177.275453][ T30] audit: type=1400 audit(2000000974.774:20180): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17898 comm="syz.7.3586" name="/" dev="devtmpfs" ino=1 [ 1177.280515][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1177.296997][T17657] audit: audit_lost=728 audit_rate_limit=0 audit_backlog_limit=64 [ 1177.302355][ C1] audit: audit_lost=729 audit_rate_limit=0 audit_backlog_limit=64 [ 1177.314172][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.342082][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.530970][ T2342] pvrusb2: Invalid write control endpoint [ 1177.534855][ T5924] usb 5-1: USB disconnect, device number 74 [ 1177.591056][T17905] openvswitch: netlink: nsh attribute has 65438 unknown bytes. [ 1177.625333][T17905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1178.024266][T17917] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3587'. [ 1178.894299][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3589'. [ 1179.447314][ T2342] pvrusb2: Invalid write control endpoint [ 1179.473549][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1179.541731][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1180.085480][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1180.125812][ T2342] pvrusb2: Device being rendered inoperable [ 1180.179612][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1180.180933][T17930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1180.219267][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1180.281509][ T2342] pvrusb2: Attached sub-driver cx25840 [ 1180.332129][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1180.371229][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1180.481705][T17932] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3595'. [ 1180.593704][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3596'. [ 1180.825489][T17943] FAULT_INJECTION: forcing a failure. [ 1180.825489][T17943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.909412][T17943] CPU: 0 UID: 0 PID: 17943 Comm: syz.7.3600 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1180.909444][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1180.909457][T17943] Call Trace: [ 1180.909466][T17943] [ 1180.909476][T17943] dump_stack_lvl+0x189/0x250 [ 1180.909505][T17943] ? __pfx____ratelimit+0x10/0x10 [ 1180.909537][T17943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.909577][T17943] ? __pfx__printk+0x10/0x10 [ 1180.909617][T17943] should_fail_ex+0x414/0x560 [ 1180.909652][T17943] _copy_to_user+0x31/0xb0 [ 1180.909680][T17943] bpf_test_finish+0x1ab/0x700 [ 1180.909715][T17943] ? __pfx_bpf_test_finish+0x10/0x10 [ 1180.909757][T17943] ? bpf_test_init+0x133/0x170 [ 1180.909790][T17943] bpf_prog_test_run_xdp+0x79a/0x1000 [ 1180.909833][T17943] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1180.909864][T17943] ? __fget_files+0x2a/0x420 [ 1180.909890][T17943] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1180.909916][T17943] bpf_prog_test_run+0x2c4/0x340 [ 1180.909954][T17943] __sys_bpf+0x4a4/0x860 [ 1180.909986][T17943] ? __pfx___sys_bpf+0x10/0x10 [ 1180.910031][T17943] ? ksys_write+0x22a/0x250 [ 1180.910062][T17943] ? __pfx_ksys_write+0x10/0x10 [ 1180.910088][T17943] ? rcu_is_watching+0x15/0xb0 [ 1180.910120][T17943] __x64_sys_bpf+0x7c/0x90 [ 1180.910149][T17943] do_syscall_64+0xfa/0x3b0 [ 1180.910168][T17943] ? lockdep_hardirqs_on+0x9c/0x150 [ 1180.910198][T17943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.910219][T17943] ? clear_bhb_loop+0x60/0xb0 [ 1180.910244][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.910265][T17943] RIP: 0033:0x7fbde798e929 [ 1180.910285][T17943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.910303][T17943] RSP: 002b:00007fbde8760038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1180.910327][T17943] RAX: ffffffffffffffda RBX: 00007fbde7bb5fa0 RCX: 00007fbde798e929 [ 1180.910342][T17943] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1180.910356][T17943] RBP: 00007fbde8760090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.910370][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.910382][T17943] R13: 0000000000000000 R14: 00007fbde7bb5fa0 R15: 00007fff29d489e8 [ 1180.910415][T17943] [ 1181.392424][T17952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1181.438211][T17949] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1181.453230][T17949] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1181.968508][ T30] kauditd_printk_skb: 3151 callbacks suppressed [ 1181.968530][ T30] audit: type=1400 audit(2000000979.834:22335): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=17950 comm="syz.6.3603" opid=17950 ocomm="syz.6.3603" [ 1182.007305][T17952] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3603'. [ 1182.749690][ T30] audit: type=1400 audit(2000000979.834:22336): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=17950 comm="syz.6.3603" opid=17950 ocomm="syz.6.3603" [ 1182.810595][ T30] audit: type=1400 audit(2000000979.894:22337): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17950 comm="syz.6.3603" name="newroot" dev="tmpfs" ino=2 [ 1182.831579][ T30] audit: type=1400 audit(2000000979.894:22338): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17950 comm="syz.6.3603" name="dev" dev="tmpfs" ino=3 [ 1182.859485][ T30] audit: type=1400 audit(2000000979.954:22339): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=17945 comm="syz.3.3601" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1182.902246][T17961] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1182.913809][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1182.918864][T17962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1182.923597][T17657] audit: audit_lost=1062 audit_rate_limit=0 audit_backlog_limit=64 [ 1182.927355][T17961] audit: audit_lost=1063 audit_rate_limit=0 audit_backlog_limit=64 [ 1183.039567][T17966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.173157][T17971] fuse: Unknown parameter 'grou00000000000000000000' [ 1183.263906][ T9568] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.342562][T17975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3612'. [ 1183.498979][ T9568] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.581732][T17980] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3613'. [ 1183.654361][ T9568] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.801546][ T9568] : (slave netdevsim0): Releasing backup interface [ 1183.838819][ T9568] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 1183.888156][ T9568] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.953730][T17984] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3615'. [ 1184.049946][T17992] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3616'. [ 1184.470135][ T9568] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.727039][T18006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1184.758881][ T9568] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.161046][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3625'. [ 1185.187434][ T9568] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.524368][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3628'. [ 1185.573744][ T5899] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1186.121862][T18027] fuse: Bad value for 'fd' [ 1186.127068][ T9568] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.139831][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1186.157167][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1186.177022][ T5899] usb 4-1: config 218 has an invalid interface number: 135 but max is 0 [ 1186.201722][T18024] tipc: Started in network mode [ 1186.206809][T18024] tipc: Node identity 00000000000040120000006e70000001, cluster identity 4711 [ 1186.216354][T18024] tipc: Enabling of bearer rejected, failed to enable media [ 1186.251536][T18030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1186.353492][ T5899] usb 4-1: config 218 has no interface number 0 [ 1186.359859][ T5899] usb 4-1: config 218 interface 135 has no altsetting 0 [ 1186.420276][ T5899] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=38.d9 [ 1186.453492][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.471946][ T5899] usb 4-1: Product: syz [ 1186.515158][ T5899] usb 4-1: Manufacturer: syz [ 1186.538125][ T5899] usb 4-1: SerialNumber: syz [ 1186.582555][T18035] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3629'. [ 1186.979126][ T30] kauditd_printk_skb: 3396 callbacks suppressed [ 1186.979171][ T30] audit: type=1400 audit(2000000984.864:25549): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=17993 comm="syz.3.3618" name="115" dev="tmpfs" ino=629 [ 1186.993837][T18039] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3632'. [ 1187.069254][ T9568] bridge_slave_1: left allmulticast mode [ 1187.075845][ T9568] bridge_slave_1: left promiscuous mode [ 1187.082822][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1187.083004][T18014] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1187.097157][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.104387][T18014] audit: audit_lost=1126 audit_rate_limit=0 audit_backlog_limit=64 [ 1187.113659][T17657] audit: audit_lost=1127 audit_rate_limit=0 audit_backlog_limit=64 [ 1187.121984][T18014] audit: backlog limit exceeded [ 1187.128587][T17657] audit: backlog limit exceeded [ 1187.132145][ T30] audit: type=1400 audit(2000000984.904:25550): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17993 comm="syz.3.3618" path="/115/file0" dev="tmpfs" ino=634 [ 1187.138488][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1187.156467][T18014] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1187.172956][ T9568] bridge_slave_0: left allmulticast mode [ 1187.192434][ T9568] bridge_slave_0: left promiscuous mode [ 1187.238721][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.292739][ T9568] bridge_slave_1: left allmulticast mode [ 1187.313554][ T9568] bridge_slave_1: left promiscuous mode [ 1187.326239][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.361354][ T9568] bridge_slave_0: left allmulticast mode [ 1187.375905][ T9568] bridge_slave_0: left promiscuous mode [ 1187.389908][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.426856][T18048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1187.456340][T18045] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1187.467671][T18045] overlayfs: failed to set xattr on upper [ 1187.475614][T18045] overlayfs: ...falling back to redirect_dir=nofollow. [ 1187.482709][T18045] overlayfs: ...falling back to metacopy=off. [ 1187.492690][T18045] overlayfs: ...falling back to index=off. [ 1187.570968][T18045] overlayfs: ...falling back to uuid=null. [ 1187.830196][T18050] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3636'. [ 1188.705422][ T5899] usb 4-1: USB disconnect, device number 83 [ 1189.484796][ T5839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1189.997515][ T5839] usb 9-1: Using ep0 maxpacket: 8 [ 1190.008798][ T5839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1190.027034][ T5839] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1190.053702][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.080374][ T9568] bond2 (unregistering): (slave gretap2): Releasing backup interface [ 1190.664543][ T5839] usb 9-1: config 0 descriptor?? [ 1190.933822][ T5839] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1191.222687][T18061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.261782][T18061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.316541][ T5924] usb 9-1: USB disconnect, device number 2 [ 1191.552047][ T9568]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1191.566035][ T9568] bond_slave_0: left promiscuous mode [ 1191.578614][ T9568]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1191.590753][ T9568] bond_slave_1: left promiscuous mode [ 1191.604230][ T9568]  (unregistering): Released all slaves [ 1192.103539][ T30] kauditd_printk_skb: 1839 callbacks suppressed [ 1192.103594][ T30] audit: type=1400 audit(2000000989.644:27110): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18079 comm="syz.3.3646" name="119" dev="tmpfs" ino=652 [ 1192.296939][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1192.307969][T15795] audit: audit_lost=1222 audit_rate_limit=0 audit_backlog_limit=64 [ 1192.328948][ T30] audit: type=1400 audit(2000000989.644:27111): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18079 comm="syz.3.3646" name="119" dev="tmpfs" ino=652 [ 1192.331437][T15795] audit: backlog limit exceeded [ 1192.353793][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1192.358882][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1192.360329][T17657] audit: audit_lost=1223 audit_rate_limit=0 audit_backlog_limit=64 [ 1192.360349][T17657] audit: backlog limit exceeded [ 1192.360473][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1192.387488][ T9568] bond1 (unregistering): Released all slaves [ 1192.743221][ T9568] bond2 (unregistering): Released all slaves [ 1192.810334][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3647'. [ 1195.690691][ T9568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.718297][ T9568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.736324][ T9568] bond0 (unregistering): Released all slaves [ 1195.923535][T18082] netlink: 'syz.3.3646': attribute type 4 has an invalid length. [ 1196.911447][ T9568] tipc: Left network mode [ 1198.099543][T17579] audit_log_start: 1596 callbacks suppressed [ 1198.099563][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1198.112730][T17579] audit: audit_lost=1287 audit_rate_limit=0 audit_backlog_limit=64 [ 1198.121242][T17579] audit: backlog limit exceeded [ 1198.126375][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1198.133848][T17579] audit: audit_lost=1288 audit_rate_limit=0 audit_backlog_limit=64 [ 1198.141789][T17579] audit: backlog limit exceeded [ 1198.162693][T18120] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1198.163755][ T30] audit: type=1400 audit(2000000995.974:28521): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17579 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1198.169711][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1198.193939][ T30] audit: type=1400 audit(2000000995.974:28522): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17579 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1198.600263][T18134] loop9: detected capacity change from 0 to 8 [ 1198.641413][T18134] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1198.660267][T18134] loop9: partition table partially beyond EOD, truncated [ 1198.712349][T18134] loop9: p1 size 81768186 extends beyond EOD, truncated [ 1201.688150][T18165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1202.224779][ T5839] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1202.511040][ T5839] usb 5-1: device descriptor read/64, error -71 [ 1202.983516][ T5839] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1203.103727][ T30] kauditd_printk_skb: 3008 callbacks suppressed [ 1203.103750][ T30] audit: type=1400 audit(2000001000.984:31137): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=18177 comm="syz.3.3676" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1203.185007][T18181] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1203.185031][T18181] audit: audit_lost=1421 audit_rate_limit=0 audit_backlog_limit=64 [ 1203.185051][T18181] audit: backlog limit exceeded [ 1203.185166][T18181] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1203.185177][T18181] audit: audit_lost=1422 audit_rate_limit=0 audit_backlog_limit=64 [ 1203.185194][T18181] audit: backlog limit exceeded [ 1203.185328][T18181] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1203.185339][T18181] audit: audit_lost=1423 audit_rate_limit=0 audit_backlog_limit=64 [ 1203.185358][T18181] audit: backlog limit exceeded [ 1203.533484][ T5839] usb 5-1: device descriptor read/64, error -71 [ 1203.643982][ T5839] usb usb5-port1: attempt power cycle [ 1204.933175][ T9568] hsr_slave_0: left promiscuous mode [ 1205.059656][T18198] netlink: 'syz.4.3681': attribute type 21 has an invalid length. [ 1205.071250][T18198] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1205.091119][ T9568] hsr_slave_1: left promiscuous mode [ 1205.103917][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.144952][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.179224][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.191929][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.246921][ T9568] hsr_slave_0: left promiscuous mode [ 1205.259359][ T9568] hsr_slave_1: left promiscuous mode [ 1205.281989][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.301204][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.318452][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.332858][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.371186][T18204] netlink: 'syz.7.3684': attribute type 1 has an invalid length. [ 1205.511698][ T9568] veth1_macvtap: left promiscuous mode [ 1205.529755][ T9568] veth0_macvtap: left promiscuous mode [ 1205.539253][ T9568] veth1_vlan: left promiscuous mode [ 1205.549608][ T9568] veth0_vlan: left promiscuous mode [ 1205.568114][ T9568] veth1_macvtap: left promiscuous mode [ 1205.569923][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1205.579271][ T9568] veth0_macvtap: left promiscuous mode [ 1205.602438][ T9568] veth1_vlan: left promiscuous mode [ 1205.610621][ T9568] veth0_vlan: left promiscuous mode [ 1206.556589][ T9568] team0 (unregistering): Port device team_slave_1 removed [ 1206.622009][ T9568] team0 (unregistering): Port device team_slave_0 removed [ 1207.883918][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3688'. [ 1208.307737][ T30] kauditd_printk_skb: 3069 callbacks suppressed [ 1208.307753][ T30] audit: type=1400 audit(2000001006.194:33250): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1208.347357][ T30] audit: type=1400 audit(2000001006.194:33251): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14839 comm="syz-executor" name="sys" dev="tmpfs" ino=6 [ 1208.366673][ T30] audit: type=1400 audit(2000001006.234:33252): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=17579 comm="syz-executor" opid=18203 ocomm="syz.7.3684" [ 1208.386149][ T30] audit: type=1400 audit(2000001006.234:33253): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=17579 comm="syz-executor" opid=18203 ocomm="syz.7.3684" [ 1208.409819][ T30] audit: type=1400 audit(2000001006.294:33254): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1208.432762][ T30] audit: type=1400 audit(2000001006.294:33255): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 1208.456838][ T30] audit: type=1400 audit(2000001006.294:33256): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="fs" dev="sysfs" ino=2 [ 1208.482623][ T30] audit: type=1400 audit(2000001006.294:33257): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="fuse" dev="sysfs" ino=5443 [ 1208.510003][ T30] audit: type=1400 audit(2000001006.294:33258): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=15795 comm="syz-executor" name="/" dev="fusectl" ino=1 [ 1208.530016][ T30] audit: type=1400 audit(2000001006.294:33259): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=15795 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 [ 1209.201869][ T9568] team0 (unregistering): Port device team_slave_1 removed [ 1209.268461][ T9568] team0 (unregistering): Port device team_slave_0 removed [ 1209.860490][T18197] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3682'. [ 1209.870130][T18198] netlink: 'syz.4.3681': attribute type 4 has an invalid length. [ 1209.878021][T18198] netlink: 'syz.4.3681': attribute type 5 has an invalid length. [ 1209.887119][T18198] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1210.301056][T18228] fuse: Bad value for 'user_id' [ 1210.313886][T18228] fuse: Bad value for 'user_id' [ 1210.367519][T18230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.739662][T18234] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1212.272809][T18240] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3693'. [ 1212.303675][T18240] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3693'. [ 1213.313981][ T30] kauditd_printk_skb: 1536 callbacks suppressed [ 1213.314022][ T30] audit: type=1400 audit(2000001011.204:34448): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=16107 comm="syz-executor" opid=18229 ocomm="syz.3.3692" [ 1213.516670][ T30] audit: type=1400 audit(2000001011.234:34449): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=16107 comm="syz-executor" opid=18229 ocomm="syz.3.3692" [ 1213.539793][T18253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1213.547376][ T30] audit: type=1400 audit(2000001011.354:34450): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18249 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1213.566991][T18253] audit: audit_lost=1859 audit_rate_limit=0 audit_backlog_limit=64 [ 1213.583536][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1213.590101][T17579] audit: audit_lost=1860 audit_rate_limit=0 audit_backlog_limit=64 [ 1213.598239][T18253] audit: backlog limit exceeded [ 1213.603177][T18253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1213.633213][T18252] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1213.875663][T18258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3700'. [ 1214.117223][ T6020] Bluetooth: hci1: Frame reassembly failed (-84) [ 1214.959351][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3708'. [ 1215.363715][T18280] netlink: 'syz.8.3705': attribute type 29 has an invalid length. [ 1215.463485][T18280] netlink: 'syz.8.3705': attribute type 29 has an invalid length. [ 1215.697638][T18280] netlink: 500 bytes leftover after parsing attributes in process `syz.8.3705'. [ 1215.913643][ T5155] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1216.039899][T18281] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd8": -EINTR [ 1217.341976][T18305] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 1217.360348][T18305] PKCS7: Only support pkcs7_signedData type [ 1217.867649][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 1218.604758][ T30] kauditd_printk_skb: 2043 callbacks suppressed [ 1218.604779][ T30] audit: type=1400 audit(2000001016.494:36132): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=14839 comm="syz-executor" opid=18278 ocomm="syz.6.3709" [ 1219.142569][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1219.152278][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1219.158927][ C1] audit: audit_lost=1982 audit_rate_limit=0 audit_backlog_limit=64 [ 1219.166881][ C1] audit: backlog limit exceeded [ 1219.172286][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1219.178869][ C1] audit: audit_lost=1983 audit_rate_limit=0 audit_backlog_limit=64 [ 1219.186822][ C1] audit: backlog limit exceeded [ 1219.192109][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1219.198695][ C1] audit: audit_lost=1984 audit_rate_limit=0 audit_backlog_limit=64 [ 1220.179953][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3720'. [ 1221.369499][T18330] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3721'. [ 1221.394214][ T5977] Bluetooth: hci1: Frame reassembly failed (-84) [ 1221.487927][ T5977] Bluetooth: hci1: Frame reassembly failed (-84) [ 1222.868576][T18344] FAULT_INJECTION: forcing a failure. [ 1222.868576][T18344] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.881524][T18344] CPU: 0 UID: 0 PID: 18344 Comm: syz.7.3728 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1222.881554][T18344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1222.881568][T18344] Call Trace: [ 1222.881578][T18344] [ 1222.881588][T18344] dump_stack_lvl+0x189/0x250 [ 1222.881618][T18344] ? __pfx____ratelimit+0x10/0x10 [ 1222.881650][T18344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1222.881674][T18344] ? __pfx__printk+0x10/0x10 [ 1222.881708][T18344] ? __pfx___might_resched+0x10/0x10 [ 1222.881737][T18344] should_fail_ex+0x414/0x560 [ 1222.881773][T18344] should_failslab+0xa8/0x100 [ 1222.881807][T18344] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1222.881838][T18344] ? __alloc_skb+0x112/0x2d0 [ 1222.881867][T18344] __alloc_skb+0x112/0x2d0 [ 1222.881895][T18344] netlink_sendmsg+0x5c6/0xb30 [ 1222.881932][T18344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1222.881967][T18344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1222.881997][T18344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1222.882024][T18344] __sock_sendmsg+0x21c/0x270 [ 1222.882060][T18344] ____sys_sendmsg+0x505/0x830 [ 1222.882093][T18344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1222.882130][T18344] ? import_iovec+0x74/0xa0 [ 1222.882157][T18344] ___sys_sendmsg+0x21f/0x2a0 [ 1222.882186][T18344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1222.882253][T18344] ? __fget_files+0x2a/0x420 [ 1222.882273][T18344] ? __fget_files+0x3a0/0x420 [ 1222.882303][T18344] __x64_sys_sendmsg+0x19b/0x260 [ 1222.882334][T18344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1222.882371][T18344] ? __pfx_ksys_write+0x10/0x10 [ 1222.882398][T18344] ? rcu_is_watching+0x15/0xb0 [ 1222.882427][T18344] ? do_syscall_64+0xbe/0x3b0 [ 1222.882452][T18344] do_syscall_64+0xfa/0x3b0 [ 1222.882470][T18344] ? lockdep_hardirqs_on+0x9c/0x150 [ 1222.882507][T18344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.882528][T18344] ? clear_bhb_loop+0x60/0xb0 [ 1222.882553][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.882574][T18344] RIP: 0033:0x7fbde798e929 [ 1222.882594][T18344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1222.882613][T18344] RSP: 002b:00007fbde8760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.882635][T18344] RAX: ffffffffffffffda RBX: 00007fbde7bb5fa0 RCX: 00007fbde798e929 [ 1222.882651][T18344] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1222.882665][T18344] RBP: 00007fbde8760090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.882678][T18344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.882691][T18344] R13: 0000000000000000 R14: 00007fbde7bb5fa0 R15: 00007fff29d489e8 [ 1222.882724][T18344] [ 1223.326953][T18351] netlink: 'syz.6.3727': attribute type 4 has an invalid length. [ 1223.442393][ T51] Bluetooth: hci1: command 0x1003 tx timeout [ 1223.493750][ T5155] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1223.913916][ T30] kauditd_printk_skb: 1934 callbacks suppressed [ 1223.913941][ T30] audit: type=1400 audit(2000001021.574:37515): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=18341 comm="syz.6.3727" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1224.026644][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1224.042095][T14839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1224.043468][ T30] audit: type=1400 audit(2000001021.894:37516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1224.048924][T14839] audit: audit_lost=2169 audit_rate_limit=0 audit_backlog_limit=64 [ 1224.077312][T18352] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1224.087495][T17579] audit: audit_lost=2170 audit_rate_limit=0 audit_backlog_limit=64 [ 1224.097536][T18352] audit: audit_lost=2171 audit_rate_limit=0 audit_backlog_limit=64 [ 1224.106679][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1224.113436][T17579] audit: backlog limit exceeded [ 1224.267907][T18353] lo speed is unknown, defaulting to 1000 [ 1225.187102][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1225.563073][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1225.594221][T18357] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1225.703536][T11957] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1225.998631][T18374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1226.010687][T11957] usb 9-1: device descriptor read/64, error -71 [ 1226.902285][T18374] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3738'. [ 1226.954889][T11957] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1227.076722][T18388] fuse: Bad value for 'fd' [ 1227.233450][T11957] usb 9-1: device descriptor read/64, error -71 [ 1228.213607][T11957] usb usb9-port1: attempt power cycle [ 1228.477346][T18395] loop6: detected capacity change from 0 to 524287999 [ 1228.966254][ T30] kauditd_printk_skb: 2094 callbacks suppressed [ 1228.966371][ T30] audit: type=1400 audit(2000001026.854:38956): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=14839 comm="syz-executor" opid=18373 ocomm="syz.6.3738" [ 1229.225921][ T30] audit: type=1400 audit(2000001026.854:38957): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=14839 comm="syz-executor" opid=18373 ocomm="syz.6.3738" [ 1229.235525][T18403] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1229.273465][T17657] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1229.273858][T18403] audit: audit_lost=2390 audit_rate_limit=0 audit_backlog_limit=64 [ 1229.280014][T17657] audit: audit_lost=2391 audit_rate_limit=0 audit_backlog_limit=64 [ 1229.280033][T17657] audit: backlog limit exceeded [ 1229.280059][T17657] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1229.303412][ T30] audit: type=1400 audit(2000001026.864:38958): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18402 comm="kworker/u8:9" name="/" dev="sda1" ino=2 [ 1229.304350][T18402] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1229.476199][T18398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.207888][T18412] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1232.842072][T18439] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1233.139845][T18439] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1233.443493][T11957] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1233.614206][T11957] usb 9-1: Using ep0 maxpacket: 16 [ 1233.740361][T11957] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.769902][T11957] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.797747][T11957] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1233.888051][T18449] 9pnet_fd: Insufficient options for proto=fd [ 1233.916003][T11957] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1233.946131][T11957] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.961261][T11957] usb 9-1: config 0 descriptor?? [ 1233.973835][ T30] kauditd_printk_skb: 2171 callbacks suppressed [ 1233.973856][ T30] audit: type=1400 audit(2000001031.844:40687): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=14839 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1315 [ 1233.979802][T11957] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input51 [ 1233.980168][ T30] audit: type=1400 audit(2000001031.844:40688): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=14839 comm="syz-executor" name="246" dev="tmpfs" ino=1311 [ 1234.036296][T16107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1234.037741][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1234.044466][T16107] audit: audit_lost=2540 audit_rate_limit=0 audit_backlog_limit=64 [ 1234.049764][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1234.064230][T18453] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1234.064989][T17579] audit: audit_lost=2541 audit_rate_limit=0 audit_backlog_limit=64 [ 1234.071220][T18453] audit: audit_lost=2542 audit_rate_limit=0 audit_backlog_limit=64 [ 1234.079188][T17579] audit: backlog limit exceeded [ 1234.102805][ T5190] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1234.140352][ T5190] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1234.170107][ T5190] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1234.186917][ T5190] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1234.204306][T18459] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3763'. [ 1234.416484][T18466] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3765'. [ 1234.497223][T18469] netlink: 4452 bytes leftover after parsing attributes in process `syz.3.3767'. [ 1234.758411][T11957] usb 9-1: USB disconnect, device number 6 [ 1234.775524][ T43] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1234.933660][ T43] usb 4-1: device descriptor read/64, error -71 [ 1235.244127][ T43] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1235.653061][ T43] usb 4-1: device descriptor read/64, error -71 [ 1235.695672][T18477] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3770'. [ 1235.765518][ T43] usb usb4-port1: attempt power cycle [ 1235.814896][T18481] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3772'. [ 1236.593448][ T43] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1236.636346][ T43] usb 4-1: device descriptor read/8, error -71 [ 1237.193494][ T43] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1237.254152][ T43] usb 4-1: device descriptor read/8, error -71 [ 1237.332195][T18490] netlink: 'syz.8.3775': attribute type 29 has an invalid length. [ 1237.344172][T18490] netlink: 'syz.8.3775': attribute type 29 has an invalid length. [ 1237.356769][T18490] netlink: 500 bytes leftover after parsing attributes in process `syz.8.3775'. [ 1237.938629][T18490] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd8": -EINTR [ 1238.044239][ T43] usb usb4-port1: unable to enumerate USB device [ 1238.206934][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1238.513851][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1238.559983][T18508] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3783'. [ 1238.683485][ T24] usb 9-1: device descriptor read/64, error -71 [ 1238.709465][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.716776][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.887951][T18514] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3778'. [ 1238.897312][T18514] tipc: Started in network mode [ 1238.902229][T18514] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 1238.911907][T18514] tipc: Enabling of bearer rejected, failed to enable media [ 1238.923613][T11957] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1238.935916][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1238.994492][ T30] kauditd_printk_skb: 3278 callbacks suppressed [ 1238.994511][ T30] audit: type=1400 audit(2000001036.884:43420): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18509 comm="syz.3.3784" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1239.023559][ T30] audit: type=1400 audit(2000001036.904:43421): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1239.036816][T14839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1239.042991][ T30] audit: type=1400 audit(2000001036.904:43422): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1239.064775][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1239.069042][ T30] audit: type=1400 audit(2000001036.904:43423): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1239.075275][ C1] audit: audit_lost=2725 audit_rate_limit=0 audit_backlog_limit=64 [ 1239.075296][ C1] audit: backlog limit exceeded [ 1239.109448][T14839] audit: audit_lost=2726 audit_rate_limit=0 audit_backlog_limit=64 [ 1239.118263][T14839] audit: backlog limit exceeded [ 1239.118435][ T24] usb 9-1: device descriptor read/64, error -71 [ 1239.135492][T11957] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 1239.146339][T11957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.166483][T11957] pwc: Logitech ViewPort AV 100 webcam detected. [ 1239.264919][ T24] usb usb9-port1: attempt power cycle [ 1239.369137][T11957] pwc: Failed to set LED on/off time (-71) [ 1239.383859][T11957] pwc: send_video_command error -71 [ 1239.389282][T11957] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1239.403653][T11957] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 1239.429693][T11957] usb 4-1: USB disconnect, device number 88 [ 1239.629491][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1239.647268][T18527] CIFS: iocharset name too long [ 1239.720873][ T24] usb 9-1: device descriptor read/8, error -71 [ 1239.955155][T18540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1239.996258][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1240.072096][ T24] usb 9-1: device descriptor read/8, error -71 [ 1240.203613][ T24] usb usb9-port1: unable to enumerate USB device [ 1241.435310][T18561] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1241.437200][T18562] netlink: 'syz.6.3800': attribute type 10 has an invalid length. [ 1241.463220][T18562] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1241.491973][T18562] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1241.506516][T18562] bridge0: port 3(netdevsim0) entered disabled state [ 1241.643874][T18562] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1243.768072][T18589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1244.007777][ T30] kauditd_printk_skb: 3877 callbacks suppressed [ 1244.007797][ T30] audit: type=1400 audit(2000001041.894:46515): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1244.042632][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1244.050558][T15795] audit: audit_lost=2989 audit_rate_limit=0 audit_backlog_limit=64 [ 1244.058560][T15795] audit: backlog limit exceeded [ 1244.063542][ T30] audit: type=1400 audit(2000001041.924:46516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1244.084316][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1244.084666][T18592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1244.097461][T18592] audit: audit_lost=2990 audit_rate_limit=0 audit_backlog_limit=64 [ 1244.099610][T15795] audit: audit_lost=2991 audit_rate_limit=0 audit_backlog_limit=64 [ 1244.105496][T18592] audit: backlog limit exceeded [ 1244.409358][ T5899] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1245.188471][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 1245.298630][T18601] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3809'. [ 1245.487843][ T5899] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1245.643883][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.778922][ T5899] usb 9-1: Product: syz [ 1245.982371][ T5899] usb 9-1: Manufacturer: syz [ 1245.987715][ T5899] usb 9-1: SerialNumber: syz [ 1246.018965][ T5899] usb 9-1: config 0 descriptor?? [ 1246.045868][ T5899] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1246.162950][T18609] loop9: detected capacity change from 0 to 8 [ 1246.190441][T18609] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1246.197619][T18609] loop9: partition table partially beyond EOD, truncated [ 1246.220516][T18609] loop9: p1 size 81768186 extends beyond EOD, truncated [ 1246.402197][T18616] netlink: 'syz.4.3819': attribute type 4 has an invalid length. [ 1246.523980][ T5899] gspca_sonixj: reg_r err -71 [ 1246.528820][ T5899] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1246.548219][ T5899] usb 9-1: USB disconnect, device number 11 [ 1248.034374][T18625] could not allocate digest TFM handle poly1305-generic [ 1248.654928][T18656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1249.018215][ T30] kauditd_printk_skb: 2791 callbacks suppressed [ 1249.018285][ T30] audit: type=1400 audit(2000001046.894:49115): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=18651 comm="syz.3.3829" path="/proc/mdstat" dev="proc" ino=4026532011 [ 1249.169617][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1249.176772][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1249.193800][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1249.200806][T17579] audit: audit_lost=3056 audit_rate_limit=0 audit_backlog_limit=64 [ 1249.213717][T17657] audit: audit_lost=3057 audit_rate_limit=0 audit_backlog_limit=64 [ 1249.226549][T18658] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1249.233240][T18658] audit: audit_lost=3058 audit_rate_limit=0 audit_backlog_limit=64 [ 1249.241402][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1249.241425][ C1] audit: audit_lost=3059 audit_rate_limit=0 audit_backlog_limit=64 [ 1252.614019][T18682] FAULT_INJECTION: forcing a failure. [ 1252.614019][T18682] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.647079][T18682] CPU: 0 UID: 0 PID: 18682 Comm: syz.8.3838 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1252.647110][T18682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1252.647124][T18682] Call Trace: [ 1252.647133][T18682] [ 1252.647143][T18682] dump_stack_lvl+0x189/0x250 [ 1252.647174][T18682] ? __pfx____ratelimit+0x10/0x10 [ 1252.647206][T18682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.647229][T18682] ? __pfx__printk+0x10/0x10 [ 1252.647263][T18682] ? __pfx___might_resched+0x10/0x10 [ 1252.647292][T18682] should_fail_ex+0x414/0x560 [ 1252.647328][T18682] should_failslab+0xa8/0x100 [ 1252.647361][T18682] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1252.647400][T18682] ? smk_parse_smack+0x1b1/0x1f0 [ 1252.647431][T18682] kstrndup+0x80/0x160 [ 1252.647457][T18682] smk_parse_smack+0x1b1/0x1f0 [ 1252.647485][T18682] smk_import_entry+0x20/0x1d0 [ 1252.647512][T18682] smk_fill_rule+0x52/0x630 [ 1252.647544][T18682] smk_parse_long_rule+0xbc3/0xee0 [ 1252.647579][T18682] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 1252.647623][T18682] smk_write_rules_list+0x239/0x370 [ 1252.647656][T18682] ? __pfx_smk_write_change_rule+0x10/0x10 [ 1252.647691][T18682] vfs_write+0x27b/0xa90 [ 1252.647729][T18682] ? __pfx_vfs_write+0x10/0x10 [ 1252.647759][T18682] ? __fget_files+0x2a/0x420 [ 1252.647785][T18682] ? __fget_files+0x3a0/0x420 [ 1252.647802][T18682] ? __fget_files+0x2a/0x420 [ 1252.647831][T18682] ksys_write+0x145/0x250 [ 1252.647863][T18682] ? __pfx_ksys_write+0x10/0x10 [ 1252.647888][T18682] ? rcu_is_watching+0x15/0xb0 [ 1252.647917][T18682] ? do_syscall_64+0xbe/0x3b0 [ 1252.647942][T18682] do_syscall_64+0xfa/0x3b0 [ 1252.647959][T18682] ? lockdep_hardirqs_on+0x9c/0x150 [ 1252.647989][T18682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.648009][T18682] ? clear_bhb_loop+0x60/0xb0 [ 1252.648035][T18682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.648055][T18682] RIP: 0033:0x7f3e8f58e929 [ 1252.648074][T18682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.648092][T18682] RSP: 002b:00007f3e903db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1252.648114][T18682] RAX: ffffffffffffffda RBX: 00007f3e8f7b5fa0 RCX: 00007f3e8f58e929 [ 1252.648130][T18682] RDX: 000000000000001d RSI: 0000200000000880 RDI: 0000000000000003 [ 1252.648144][T18682] RBP: 00007f3e903db090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.648157][T18682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.648170][T18682] R13: 0000000000000000 R14: 00007f3e8f7b5fa0 R15: 00007ffda68ef2b8 [ 1252.648214][T18682] [ 1254.025130][ T30] kauditd_printk_skb: 1802 callbacks suppressed [ 1254.025222][ T30] audit: type=1400 audit(2000001051.914:50352): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=14839 comm="syz-executor" path="/261/cgroup.cpu" dev="tmpfs" ino=1395 [ 1254.094719][T14839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1254.133489][T14839] audit: audit_lost=3248 audit_rate_limit=0 audit_backlog_limit=64 [ 1254.142036][T18694] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1254.160681][T18695] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1254.163597][ T30] audit: type=1400 audit(2000001051.884:50343): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16107 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1254.169453][T18694] audit: audit_lost=3249 audit_rate_limit=0 audit_backlog_limit=64 [ 1254.203910][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1254.208436][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1254.217236][ C1] audit: audit_lost=3250 audit_rate_limit=0 audit_backlog_limit=64 [ 1254.231073][T18696] loop2: detected capacity change from 0 to 7 [ 1254.257459][T18696] Dev loop2: unable to read RDB block 7 [ 1254.276372][T18697] xt_hashlimit: Unknown mode mask 220, kernel too old? [ 1254.294373][T18696] loop2: unable to read partition table [ 1254.300320][T18696] loop2: partition table beyond EOD, truncated [ 1254.315008][T18696] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1255.713546][T18711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.320642][T18718] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3847'. [ 1259.038026][ T30] kauditd_printk_skb: 1656 callbacks suppressed [ 1259.038046][ T30] audit: type=1400 audit(2000001056.924:51633): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1259.072892][T14839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1259.090319][ T30] audit: type=1400 audit(2000001056.954:51634): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=16107 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1259.123183][T18730] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1259.130848][T14839] audit: audit_lost=3376 audit_rate_limit=0 audit_backlog_limit=64 [ 1259.148566][T18730] audit: audit_lost=3377 audit_rate_limit=0 audit_backlog_limit=64 [ 1259.153405][ T30] audit: type=1400 audit(2000001056.954:51635): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1259.181562][T14839] audit: backlog limit exceeded [ 1259.189774][ T30] audit: type=1400 audit(2000001056.954:51636): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9566 comm="kworker/u8:15" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1259.190058][T18730] audit: backlog limit exceeded [ 1260.708857][T18744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3858'. [ 1261.607834][T18761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1261.883667][T18764] netlink: 'syz.6.3861': attribute type 15 has an invalid length. [ 1261.906551][T18764] 8021q: VLANs not supported on ip6_vti0 [ 1261.917965][T18764] netlink: 'syz.6.3861': attribute type 10 has an invalid length. [ 1262.661052][T18767] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3863'. [ 1263.488075][T18771] loop6: detected capacity change from 0 to 7 [ 1263.517383][T18775] fuse: Unknown parameter 'us00000000000000000000' [ 1263.528490][T18771] Dev loop6: unable to read RDB block 7 [ 1263.536722][T18775] batadv_slave_1: entered promiscuous mode [ 1263.551336][T18774] batadv_slave_1: left promiscuous mode [ 1263.593154][T18771] loop6: AHDI p1 p2 p3 p4 [ 1263.607838][T18771] loop6: partition table partially beyond EOD, truncated [ 1263.643666][T18771] loop6: p1 start 926365495 is beyond EOD, truncated [ 1263.660687][T18771] loop6: p2 size 47 extends beyond EOD, truncated [ 1263.675949][T18771] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1263.721780][T18781] gretap0: entered promiscuous mode [ 1263.752734][T18781] gretap0: left promiscuous mode [ 1264.043750][ T30] kauditd_printk_skb: 3123 callbacks suppressed [ 1264.043771][ T30] audit: type=1400 audit(2000001061.884:53944): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1264.093079][T18787] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1264.103494][T18786] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1264.113391][T18787] audit: audit_lost=3650 audit_rate_limit=0 audit_backlog_limit=64 [ 1264.136193][T18786] audit: audit_lost=3651 audit_rate_limit=0 audit_backlog_limit=64 [ 1264.141548][ T30] audit: type=1400 audit(2000001061.884:53945): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1264.164438][T18789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1264.166733][ T30] audit: type=1400 audit(2000001061.884:53946): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1264.172736][T18789] audit: audit_lost=3652 audit_rate_limit=0 audit_backlog_limit=64 [ 1264.172756][T18789] audit: backlog limit exceeded [ 1264.195043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1264.266751][T18794] libceph: resolve '00' (ret=-3): failed [ 1264.354065][T18798] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3876'. [ 1264.466369][T18796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1265.466637][T18805] pim6reg: entered allmulticast mode [ 1265.906368][T18814] fuse: Unknown parameter 'user_i00000000000000000000' [ 1269.311875][ T30] kauditd_printk_skb: 2749 callbacks suppressed [ 1269.311906][ T30] audit: type=1400 audit(2000001067.084:55926): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18845 comm="syz.7.3892" name="newroot" dev="tmpfs" ino=2 [ 1269.568850][ T30] audit: type=1400 audit(2000001067.084:55927): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18845 comm="syz.7.3892" name="/" dev="devtmpfs" ino=1 [ 1269.643581][ T30] audit: type=1400 audit(2000001067.084:55928): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=18845 comm="syz.7.3892" name="ttyS3" dev="devtmpfs" ino=619 [ 1269.667265][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1269.667456][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1269.674088][T17579] audit: audit_lost=3909 audit_rate_limit=0 audit_backlog_limit=64 [ 1269.680553][ C1] audit: audit_lost=3910 audit_rate_limit=0 audit_backlog_limit=64 [ 1269.692171][T17579] audit: backlog limit exceeded [ 1269.698085][ C1] audit: backlog limit exceeded [ 1269.703431][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1270.431885][T18863] fuse: Unknown parameter 'user_i00000000000000000000' [ 1274.413561][ T30] kauditd_printk_skb: 2079 callbacks suppressed [ 1274.413584][ T30] audit: type=1400 audit(2000001072.144:57724): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=18899 comm="syz.8.3907" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1274.461024][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1274.493799][T17657] audit: audit_lost=4006 audit_rate_limit=0 audit_backlog_limit=64 [ 1274.514081][T17657] audit: backlog limit exceeded [ 1274.520400][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1274.539690][ T30] audit: type=1400 audit(2000001072.284:57725): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=18896 comm="syz.7.3905" path="anon_inode:[pidfd]" dev="pidfs" ino=18906 [ 1274.576198][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1274.583449][ C1] audit: audit_lost=4007 audit_rate_limit=0 audit_backlog_limit=64 [ 1274.591664][ C1] audit: backlog limit exceeded [ 1274.598108][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1275.000428][T18910] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 1275.510327][T18914] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1276.706770][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1277.272271][T18942] xt_hashlimit: Unknown mode mask 2002, kernel too old? [ 1278.033229][T18949] loop2: detected capacity change from 0 to 7 [ 1278.056706][T18949] Dev loop2: unable to read RDB block 7 [ 1278.062383][T18949] loop2: unable to read partition table [ 1278.081038][T18949] loop2: partition table beyond EOD, truncated [ 1278.092638][T18949] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1279.426553][ T30] kauditd_printk_skb: 3043 callbacks suppressed [ 1279.426570][ T30] audit: type=1400 audit(2000001077.314:60228): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1279.476681][T18978] omfs: Invalid superblock (0) [ 1279.486711][ T30] audit: type=1400 audit(2000001077.354:60229): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="205" dev="tmpfs" ino=1098 [ 1279.508987][ T30] audit: type=1400 audit(2000001077.354:60230): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1279.529819][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1279.536672][T15795] audit: audit_lost=4189 audit_rate_limit=0 audit_backlog_limit=64 [ 1279.549965][T18977] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1279.557102][T18980] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1279.557157][T18981] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1279.570800][T15795] audit: backlog limit exceeded [ 1279.576485][ T30] audit: type=1400 audit(2000001077.354:60231): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1280.152086][T18997] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input54 [ 1280.483566][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3939'. [ 1281.319438][T19007] sp0: Synchronizing with TNC [ 1281.415894][T19009] netlink: 'syz.4.3941': attribute type 21 has an invalid length. [ 1281.730085][T19016] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3943'. [ 1281.743566][ T5155] Bluetooth: hci6: command 0x0405 tx timeout [ 1281.768985][ T5899] IPVS: starting estimator thread 0... [ 1281.863480][T19017] IPVS: using max 27 ests per chain, 64800 per kthread [ 1282.741829][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3946'. [ 1282.768730][T19024] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3946'. [ 1282.857225][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3946'. [ 1283.729229][T19035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1283.745320][T19033] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3947'. [ 1284.657549][T19035] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3949'. [ 1284.666768][ T30] kauditd_printk_skb: 3098 callbacks suppressed [ 1284.666826][ T30] audit: type=1400 audit(2000001082.154:62607): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1284.826696][ T30] audit: type=1400 audit(2000001082.584:62608): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5822 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1284.849479][ C0] vkms_vblank_simulate: vblank timer overrun [ 1285.139742][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1285.143973][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1285.146448][T17579] audit: audit_lost=4432 audit_rate_limit=0 audit_backlog_limit=64 [ 1285.160857][T17579] audit: backlog limit exceeded [ 1285.163540][T14839] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1285.165849][T17579] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1285.173240][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1285.179524][T17579] audit: audit_lost=4433 audit_rate_limit=0 audit_backlog_limit=64 [ 1288.374114][T19076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1288.388147][T19076] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1288.531588][T19078] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3964'. [ 1288.563492][T11957] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1288.766087][T11957] usb 4-1: Using ep0 maxpacket: 16 [ 1288.787065][T11957] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.834732][T11957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1288.886407][T11957] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1288.908786][T11957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.638144][T11957] usb 4-1: Product: syz [ 1289.642417][T11957] usb 4-1: Manufacturer: syz [ 1289.647703][T11957] usb 4-1: SerialNumber: syz [ 1289.674094][ T30] kauditd_printk_skb: 3673 callbacks suppressed [ 1289.674114][ T30] audit: type=1400 audit(2000001087.554:65084): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17579 comm="syz-executor" name="79" dev="tmpfs" ino=447 [ 1289.719636][T19097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1289.724205][T19098] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1289.732819][T19098] audit: audit_lost=4834 audit_rate_limit=0 audit_backlog_limit=64 [ 1289.733786][T19097] audit: audit_lost=4835 audit_rate_limit=0 audit_backlog_limit=64 [ 1289.749342][ T30] audit: type=1400 audit(2000001087.554:65085): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=17579 comm="syz-executor" name="79" dev="tmpfs" ino=447 [ 1289.753379][T19098] audit: backlog limit exceeded [ 1289.774680][T19099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1289.783202][T19097] audit: backlog limit exceeded [ 1289.784906][T19100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1289.788809][T19097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1290.548620][T11957] usb 4-1: 0:2 : does not exist [ 1290.570520][T11957] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1290.850692][T19110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1290.992634][T19098] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3973'. [ 1291.169847][T11957] usb 4-1: USB disconnect, device number 89 [ 1291.177378][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3976'. [ 1291.293886][T19111] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1291.750575][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3979'. [ 1291.884999][T11957] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1291.899827][T19128] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3981'. [ 1291.909913][T19128] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3981'. [ 1292.087254][T19117] bond_slave_0: entered promiscuous mode [ 1292.093163][T19117] bond_slave_1: entered promiscuous mode [ 1292.227931][T19117] vlan2: entered promiscuous mode [ 1292.233382][T19117] bond0: entered promiscuous mode [ 1293.071600][T11957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1293.091394][T11957] usb 5-1: no configurations [ 1293.102534][T11957] usb 5-1: can't read configurations, error -22 [ 1294.716056][ T30] kauditd_printk_skb: 2474 callbacks suppressed [ 1294.716078][ T30] audit: type=1400 audit(2000001092.604:67331): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19155 comm="syz-executor" name="177" dev="tmpfs" ino=963 [ 1294.777843][ T30] audit: type=1400 audit(2000001092.604:67332): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19155 comm="syz-executor" name="177" dev="tmpfs" ino=963 [ 1294.800360][ T30] audit: type=1400 audit(2000001092.604:67333): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=19155 comm="syz-executor" name="177" dev="tmpfs" ino=963 [ 1294.826539][ T30] audit: type=1400 audit(2000001092.634:67334): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19155 comm="syz.3.3990" name="177" dev="tmpfs" ino=963 [ 1294.837397][T14839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1294.845816][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1294.858814][ C1] audit: audit_lost=4913 audit_rate_limit=0 audit_backlog_limit=64 [ 1294.866822][ C1] audit: backlog limit exceeded [ 1294.870478][T15795] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1294.871983][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1294.885873][T19164] netlink: 'syz.3.3990': attribute type 29 has an invalid length. [ 1294.924441][T19166] netlink: 788 bytes leftover after parsing attributes in process `syz.7.3991'. [ 1296.255550][ T5839] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1296.833556][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 1296.850582][ T5839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1296.882622][ T5839] usb 4-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 1296.920155][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.929354][ T5839] usb 4-1: Product: syz [ 1296.939135][ T5839] usb 4-1: Manufacturer: syz [ 1296.948540][ T5839] usb 4-1: SerialNumber: syz [ 1297.236126][T19191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4003'. [ 1297.449677][T19200] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4006'. [ 1297.527994][T19200] openvswitch: netlink: Flow actions attr not present in new flow. [ 1297.536503][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1297.556400][ T5839] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 1297.566324][T19202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4007'. [ 1297.568743][ T5839] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1297.619863][ T5839] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1297.639125][ T5839] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1297.667836][ T5839] usb 4-1: USB disconnect, device number 90 [ 1297.691286][ T5839] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1297.708702][ T9] usb 9-1: device descriptor read/64, error -71 [ 1297.730217][ T5839] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1297.751873][T19207] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1297.763019][T19207] overlayfs: overlapping lowerdir path [ 1297.771025][ T5839] visor 4-1:1.0: device disconnected [ 1298.004406][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1298.080158][T19212] fuse: Bad value for 'fd' [ 1298.155163][ T9] usb 9-1: device descriptor read/64, error -71 [ 1298.278264][ T9] usb usb9-port1: attempt power cycle [ 1298.322638][T19214] xt_recent: Unsupported userspace flags (000000de) [ 1298.580954][T19207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1298.590236][T19207] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1298.597930][T19218] fuse: Bad value for 'fd' [ 1298.612936][T19207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1298.622420][T19207] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1298.637930][T19207] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1298.644755][T19207] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1298.653416][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1298.662526][T19207] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1298.673806][T19207] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1298.694477][ T9] usb 9-1: device descriptor read/8, error -71 [ 1298.943501][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1299.099112][ T9] usb 9-1: device descriptor read/8, error -71 [ 1299.594094][ T9] usb usb9-port1: unable to enumerate USB device [ 1299.723358][ T30] kauditd_printk_skb: 3373 callbacks suppressed [ 1299.723379][ T30] audit: type=1400 audit(2000001097.604:70248): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19236 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1299.848208][T16107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1299.855498][T19235] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1299.874478][T19230] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1299.891482][T16107] audit: audit_lost=5068 audit_rate_limit=0 audit_backlog_limit=64 [ 1299.899921][T19235] audit: audit_lost=5069 audit_rate_limit=0 audit_backlog_limit=64 [ 1299.913474][T19230] audit: audit_lost=5070 audit_rate_limit=0 audit_backlog_limit=64 [ 1299.931778][T16107] audit: backlog limit exceeded [ 1299.936958][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1299.945772][T19235] audit: backlog limit exceeded [ 1299.950708][T19235] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1300.120529][T19241] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4018'. [ 1300.133234][T19241] openvswitch: netlink: Flow actions attr not present in new flow. [ 1300.167065][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.173594][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.624822][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1300.746308][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 1300.753612][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 1301.864314][T19265] lo speed is unknown, defaulting to 1000 [ 1302.023449][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1302.121632][T19269] 9pnet_virtio: no channels available for device syz [ 1302.266985][T19271] overlayfs: failed to clone upperpath [ 1302.765059][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1302.783605][ T5155] Bluetooth: hci6: command 0x0405 tx timeout [ 1302.789802][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 1304.296484][T19273] lo speed is unknown, defaulting to 1000 [ 1304.391142][T19289] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4030'. [ 1304.451682][T19289] openvswitch: netlink: Flow actions attr not present in new flow. [ 1304.743597][ T30] kauditd_printk_skb: 2255 callbacks suppressed [ 1304.743644][ T30] audit: type=1400 audit(2000001102.544:72049): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=17579 comm="syz-executor" opid=19254 ocomm="syz.7.4024" [ 1305.211867][ T30] audit: type=1400 audit(2000001102.544:72050): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=17579 comm="syz-executor" opid=19254 ocomm="syz.7.4024" [ 1305.241870][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1305.248533][ C1] audit: audit_lost=5223 audit_rate_limit=0 audit_backlog_limit=64 [ 1305.256533][ C1] audit: backlog limit exceeded [ 1305.262002][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1305.268624][ C1] audit: audit_lost=5224 audit_rate_limit=0 audit_backlog_limit=64 [ 1305.268727][T16107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1305.276558][ C1] audit: backlog limit exceeded [ 1305.287067][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1308.918655][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 1309.318351][T19313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4037'. [ 1309.516217][T19313] openvswitch: netlink: Flow key attr not present in new flow. [ 1309.695608][T19332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.833785][ T30] kauditd_printk_skb: 1850 callbacks suppressed [ 1309.833805][ T30] audit: type=1400 audit(2000001107.714:73606): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19333 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1309.882557][T14839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1309.882699][T19334] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1309.890507][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1309.890530][ C1] audit: audit_lost=5324 audit_rate_limit=0 audit_backlog_limit=64 [ 1309.890549][ C1] audit: backlog limit exceeded [ 1309.919320][T19334] audit: audit_lost=5325 audit_rate_limit=0 audit_backlog_limit=64 [ 1309.927329][T19334] audit: backlog limit exceeded [ 1309.932386][ T30] audit: type=1400 audit(2000001107.714:73607): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19333 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1309.952038][T14839] audit: audit_lost=5326 audit_rate_limit=0 audit_backlog_limit=64 [ 1310.152119][T19336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1310.405004][T19338] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1310.907148][T19343] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4046'. [ 1310.935127][T19336] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4045'. [ 1310.960194][T19343] team0: entered promiscuous mode [ 1310.997459][T19343] team_slave_0: entered promiscuous mode [ 1311.018841][ T5155] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 1311.029150][T19343] team_slave_1: entered promiscuous mode [ 1311.044677][T19343] batadv_slave_1: entered promiscuous mode [ 1312.557156][T19356] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1312.678953][T19356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.689487][T19356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.721945][T19356] bridge0: entered allmulticast mode [ 1312.892240][T19356] syz.3.4051 (19356) used obsolete PPPIOCDETACH ioctl [ 1313.142968][T19365] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4053'. [ 1313.365124][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4055'. [ 1313.374595][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4055'. [ 1313.388336][T19369] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4055'. [ 1313.402878][T19370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4055'. [ 1314.072461][T19388] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4058'. [ 1314.333221][T19403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.211164][ T5155] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1315.213448][T19412] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4063'. [ 1315.234102][ T5155] Bluetooth: hci6: Injecting HCI hardware error event [ 1315.246335][ T51] Bluetooth: hci6: hardware error 0x00 [ 1315.260383][T19405] audit_log_start: 3346 callbacks suppressed [ 1315.260403][T19405] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1315.318889][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1315.325536][ C1] audit: audit_lost=5440 audit_rate_limit=0 audit_backlog_limit=64 [ 1315.333505][ C1] audit: backlog limit exceeded [ 1315.378827][T16107] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1315.386293][ T30] audit: type=1400 audit(2000001112.694:76615): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=19406 comm="syz.6.4065" opid=19406 ocomm="syz.6.4065" [ 1315.406113][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1315.406140][ C1] audit: audit_lost=5441 audit_rate_limit=0 audit_backlog_limit=64 [ 1315.412737][ T30] audit: type=1400 audit(2000001112.704:76616): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1315.420637][ C1] audit: backlog limit exceeded [ 1317.166642][T19438] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4073'. [ 1317.551356][T19450] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4076'. [ 1317.560713][T19450] openvswitch: netlink: Flow key attr not present in new flow. [ 1317.597089][ T51] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1318.725337][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4079'. [ 1318.735112][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1320.701459][T19468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1320.717382][ T30] kauditd_printk_skb: 2809 callbacks suppressed [ 1320.717403][ T30] audit: type=1400 audit(2000001118.024:79088): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=19474 comm="modprobe" path="/usr/lib/libselinux.so.1" dev="sda1" ino=1731 [ 1320.748409][T14839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1320.758994][T19479] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1320.766068][T14839] audit: audit_lost=5555 audit_rate_limit=0 audit_backlog_limit=64 [ 1320.774316][T19479] audit: audit_lost=5556 audit_rate_limit=0 audit_backlog_limit=64 [ 1320.782494][T14839] audit: backlog limit exceeded [ 1320.788982][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1320.791574][ T30] audit: type=1400 audit(2000001118.074:79089): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=19470 comm="syz.6.4084" opid=19470 ocomm="syz.6.4084" [ 1320.796451][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1320.822381][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1321.123491][T19489] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 1321.132283][T19489] PKCS7: Only support pkcs7_signedData type [ 1321.860373][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4089'. [ 1322.415380][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4090'. [ 1322.480457][T19498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.776571][T19507] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4093'. [ 1323.065869][T19518] overlayfs: failed to clone lowerpath [ 1323.095296][T19518] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4099'. [ 1323.364418][T11957] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1323.534698][T11957] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 1323.545867][T11957] usb 4-1: config 0 has no interface number 0 [ 1323.553709][T11957] usb 4-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1323.565939][T11957] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.576370][T11957] usb 4-1: config 0 interface 109 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1323.643483][T11957] usb 4-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 1323.670829][T11957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.700806][T19529] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4101'. [ 1323.720835][T11957] usb 4-1: config 0 descriptor?? [ 1323.751213][T11957] cxacru 4-1:0.109: cxacru_bind: interface has incorrect endpoints [ 1323.782373][T11957] cxacru 4-1:0.109: usbatm_usb_probe: bind failed: -19! [ 1323.827079][T19533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.931194][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4104'. [ 1323.951212][T19535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.974732][T11957] usb 4-1: USB disconnect, device number 91 [ 1324.070157][T19533] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4103'. [ 1325.835909][ T30] kauditd_printk_skb: 3193 callbacks suppressed [ 1325.835928][ T30] audit: type=1400 audit(2000001123.724:81958): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=19547 comm="syz.7.4109" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1326.297604][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1326.304937][T19555] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1326.312397][T19555] audit: audit_lost=5666 audit_rate_limit=0 audit_backlog_limit=64 [ 1326.320325][T19555] audit: backlog limit exceeded [ 1326.336041][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1326.342788][ C1] audit: audit_lost=5667 audit_rate_limit=0 audit_backlog_limit=64 [ 1326.343449][T17579] audit: audit_lost=5668 audit_rate_limit=0 audit_backlog_limit=64 [ 1326.350809][ C1] audit: backlog limit exceeded [ 1326.367993][ T30] audit: type=1400 audit(2000001124.024:81959): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17579 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1326.564870][T19556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1327.689593][T19566] FAULT_INJECTION: forcing a failure. [ 1327.689593][T19566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1327.703142][T19566] CPU: 0 UID: 0 PID: 19566 Comm: syz.3.4113 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1327.703173][T19566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1327.703186][T19566] Call Trace: [ 1327.703196][T19566] [ 1327.703206][T19566] dump_stack_lvl+0x189/0x250 [ 1327.703237][T19566] ? lockdep_hardirqs_on+0x9c/0x150 [ 1327.703274][T19566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1327.703306][T19566] ? dump_stack+0x9/0x20 [ 1327.703336][T19566] should_fail_ex+0x414/0x560 [ 1327.703372][T19566] prepare_alloc_pages+0x213/0x610 [ 1327.703404][T19566] __alloc_frozen_pages_noprof+0x123/0x370 [ 1327.703433][T19566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1327.703468][T19566] ? policy_nodemask+0x27c/0x720 [ 1327.703496][T19566] ? __lock_acquire+0xab9/0xd20 [ 1327.703523][T19566] alloc_pages_mpol+0x232/0x4a0 [ 1327.703560][T19566] alloc_pages_noprof+0xa9/0x190 [ 1327.703594][T19566] get_free_pages_noprof+0xf/0x80 [ 1327.703617][T19566] kasan_populate_vmalloc+0x33/0x1a0 [ 1327.703643][T19566] ? do_raw_spin_unlock+0x122/0x240 [ 1327.703677][T19566] alloc_vmap_area+0xd51/0x1490 [ 1327.703725][T19566] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1327.703754][T19566] ? __kasan_kmalloc+0x93/0xb0 [ 1327.703785][T19566] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 1327.703815][T19566] ? __get_vm_area_node+0x13f/0x300 [ 1327.703853][T19566] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1327.703874][T19566] __get_vm_area_node+0x1f8/0x300 [ 1327.703912][T19566] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1327.703945][T19566] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1327.703967][T19566] ? is_bpf_text_address+0x26/0x2b0 [ 1327.704016][T19566] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1327.704047][T19566] ? __might_fault+0xb0/0x130 [ 1327.704078][T19566] ? _parse_integer_limit+0x1ae/0x1f0 [ 1327.704116][T19566] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1327.704134][T19566] __vmalloc_noprof+0xb1/0xf0 [ 1327.704165][T19566] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1327.704189][T19566] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1327.704215][T19566] bpf_prog_alloc+0x3c/0x1a0 [ 1327.704238][T19566] bpf_prog_load+0x735/0x1930 [ 1327.704283][T19566] ? __pfx_bpf_prog_load+0x10/0x10 [ 1327.704340][T19566] ? bpf_lsm_bpf+0x9/0x20 [ 1327.704360][T19566] ? security_bpf+0x7e/0x300 [ 1327.704384][T19566] __sys_bpf+0x5f1/0x860 [ 1327.704417][T19566] ? __pfx___sys_bpf+0x10/0x10 [ 1327.704462][T19566] ? ksys_write+0x22a/0x250 [ 1327.704493][T19566] ? __pfx_ksys_write+0x10/0x10 [ 1327.704530][T19566] __x64_sys_bpf+0x7c/0x90 [ 1327.704560][T19566] do_syscall_64+0xfa/0x3b0 [ 1327.704578][T19566] ? lockdep_hardirqs_on+0x9c/0x150 [ 1327.704609][T19566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.704629][T19566] ? clear_bhb_loop+0x60/0xb0 [ 1327.704656][T19566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.704677][T19566] RIP: 0033:0x7f8534f8e929 [ 1327.704697][T19566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1327.704716][T19566] RSP: 002b:00007f8535d1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1327.704739][T19566] RAX: ffffffffffffffda RBX: 00007f85351b6080 RCX: 00007f8534f8e929 [ 1327.704756][T19566] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 1327.704770][T19566] RBP: 00007f8535d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.704783][T19566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.704797][T19566] R13: 0000000000000001 R14: 00007f85351b6080 R15: 00007fff33d574e8 [ 1327.704840][T19566] [ 1328.050582][T19566] syz.3.4113: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1328.067763][T19566] CPU: 0 UID: 0 PID: 19566 Comm: syz.3.4113 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1328.067793][T19566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1328.067807][T19566] Call Trace: [ 1328.067815][T19566] [ 1328.067825][T19566] dump_stack_lvl+0x189/0x250 [ 1328.067854][T19566] ? lockdep_hardirqs_on+0x9c/0x150 [ 1328.067887][T19566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1328.067929][T19566] warn_alloc+0x214/0x310 [ 1328.067949][T19566] ? kasan_quarantine_put+0xdd/0x220 [ 1328.067976][T19566] ? lockdep_hardirqs_on+0x9c/0x150 [ 1328.068007][T19566] ? __pfx_warn_alloc+0x10/0x10 [ 1328.068029][T19566] ? kfree+0x18e/0x440 [ 1328.068053][T19566] ? __get_vm_area_node+0x13f/0x300 [ 1328.068090][T19566] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1328.068112][T19566] ? __get_vm_area_node+0x211/0x300 [ 1328.068149][T19566] __vmalloc_node_range_noprof+0x326/0x12f0 [ 1328.068184][T19566] ? is_bpf_text_address+0x26/0x2b0 [ 1328.068232][T19566] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1328.068261][T19566] ? __might_fault+0xb0/0x130 [ 1328.068292][T19566] ? _parse_integer_limit+0x1ae/0x1f0 [ 1328.068330][T19566] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1328.068347][T19566] __vmalloc_noprof+0xb1/0xf0 [ 1328.068378][T19566] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1328.068400][T19566] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1328.068426][T19566] bpf_prog_alloc+0x3c/0x1a0 [ 1328.068448][T19566] bpf_prog_load+0x735/0x1930 [ 1328.068492][T19566] ? __pfx_bpf_prog_load+0x10/0x10 [ 1328.068548][T19566] ? bpf_lsm_bpf+0x9/0x20 [ 1328.068567][T19566] ? security_bpf+0x7e/0x300 [ 1328.068590][T19566] __sys_bpf+0x5f1/0x860 [ 1328.068622][T19566] ? __pfx___sys_bpf+0x10/0x10 [ 1328.068666][T19566] ? ksys_write+0x22a/0x250 [ 1328.068697][T19566] ? __pfx_ksys_write+0x10/0x10 [ 1328.068733][T19566] __x64_sys_bpf+0x7c/0x90 [ 1328.068761][T19566] do_syscall_64+0xfa/0x3b0 [ 1328.068779][T19566] ? lockdep_hardirqs_on+0x9c/0x150 [ 1328.068808][T19566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.068830][T19566] ? clear_bhb_loop+0x60/0xb0 [ 1328.068855][T19566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.068875][T19566] RIP: 0033:0x7f8534f8e929 [ 1328.068894][T19566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.068912][T19566] RSP: 002b:00007f8535d1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1328.068945][T19566] RAX: ffffffffffffffda RBX: 00007f85351b6080 RCX: 00007f8534f8e929 [ 1328.068960][T19566] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 1328.068973][T19566] RBP: 00007f8535d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.068985][T19566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.068997][T19566] R13: 0000000000000001 R14: 00007f85351b6080 R15: 00007fff33d574e8 [ 1328.069028][T19566] [ 1328.069261][T19566] Mem-Info: [ 1328.357888][T19566] active_anon:278 inactive_anon:16554 isolated_anon:0 [ 1328.357888][T19566] active_file:26030 inactive_file:35212 isolated_file:0 [ 1328.357888][T19566] unevictable:768 dirty:239 writeback:0 [ 1328.357888][T19566] slab_reclaimable:6055 slab_unreclaimable:102982 [ 1328.357888][T19566] mapped:35803 shmem:13990 pagetables:1214 [ 1328.357888][T19566] sec_pagetables:0 bounce:0 [ 1328.357888][T19566] kernel_misc_reclaimable:0 [ 1328.357888][T19566] free:1293089 free_pcp:17023 free_cma:0 [ 1328.403791][T19566] Node 0 active_anon:1112kB inactive_anon:66216kB active_file:103780kB inactive_file:140848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143136kB dirty:928kB writeback:0kB shmem:54424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11040kB pagetables:4720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1328.438808][T19566] Node 1 active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:28kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1328.473593][T19566] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1328.502992][T19566] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1328.510519][T19566] Node 0 DMA32 free:1262560kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1108kB inactive_anon:64272kB active_file:102020kB inactive_file:140780kB unevictable:1536kB writepending:928kB present:3129332kB managed:2560916kB mlocked:0kB bounce:0kB free_pcp:46684kB local_pcp:28332kB free_cma:0kB [ 1328.544311][T19566] lowmem_reserve[]: 0 0 1 1 1 [ 1328.550160][T19566] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1760kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1328.579895][T19566] lowmem_reserve[]: 0 0 0 0 0 [ 1328.585523][T19566] Node 1 Normal free:3894416kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:0kB unevictable:1536kB writepending:28kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23464kB local_pcp:18792kB free_cma:0kB [ 1328.618488][T19566] lowmem_reserve[]: 0 0 0 0 0 [ 1328.624130][T19566] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1328.641071][T19566] Node 0 DMA32: 2220*4kB (UME) 1706*8kB (UME) 1144*16kB (UME) 1017*32kB (UME) 264*64kB (UME) 299*128kB (UME) 244*256kB (UME) 403*512kB (UM) 209*1024kB (UME) 14*2048kB (UME) 153*4096kB (UM) = 1266720kB [ 1328.686776][T19566] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1328.731538][T19566] Node 1 Normal: 212*4kB (UME) 54*8kB (UME) 49*16kB (UME) 244*32kB (UME) 90*64kB (UME) 23*128kB (UME) 4*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 945*4096kB (M) = 3894416kB [ 1328.763894][T19566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.773766][T19566] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.783381][T19566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.793083][T19566] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.802760][T19566] 72619 total pagecache pages [ 1328.807766][T19566] 0 pages in swap cache [ 1328.812077][T19566] Free swap = 124996kB [ 1328.816603][T19566] Total swap = 124996kB [ 1328.821406][T19566] 2097051 pages RAM [ 1328.825479][T19566] 0 pages HighMem/MovableOnly [ 1328.830371][T19566] 424715 pages reserved [ 1328.834758][T19566] 0 pages cma reserved [ 1329.058454][T19567] 9pnet_virtio: no channels available for device syz [ 1329.703502][ T43] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1329.895729][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.943860][ T43] usb 4-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 1329.969557][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.006646][ T43] usb 4-1: config 0 descriptor?? [ 1330.458476][ T43] ortek 0003:05A4:8003.0024: unknown main item tag 0x0 [ 1330.469601][ T43] ortek 0003:05A4:8003.0024: unknown main item tag 0x0 [ 1330.493856][ T43] ortek 0003:05A4:8003.0024: unknown main item tag 0x0 [ 1330.510973][ T43] ortek 0003:05A4:8003.0024: unknown main item tag 0x0 [ 1330.520003][T19586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1330.523408][ T43] ortek 0003:05A4:8003.0024: unknown main item tag 0x0 [ 1330.583701][ T43] ortek 0003:05A4:8003.0024: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.3-1/input0 [ 1330.611429][T19584] openvswitch: netlink: Key 19 has unexpected len 0 expected 4 [ 1330.863169][T19588] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4120'. [ 1330.893799][ T30] kauditd_printk_skb: 1582 callbacks suppressed [ 1330.893852][ T30] audit: type=1400 audit(2000001128.774:83274): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19585 comm="syz.8.4120" name="113" dev="tmpfs" ino=629 [ 1331.082453][ T30] audit: type=1400 audit(2000001128.774:83275): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=19585 comm="syz.8.4120" name="113" dev="tmpfs" ino=629 [ 1331.187948][ T30] audit: type=1400 audit(2000001128.774:83276): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=19585 comm="syz.8.4120" path="/113" dev="tmpfs" ino=629 [ 1331.299537][ T30] audit: type=1400 audit(2000001128.964:83277): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19589 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1331.483662][T19590] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1331.490203][T19590] audit: audit_lost=5758 audit_rate_limit=0 audit_backlog_limit=64 [ 1331.498160][T19590] audit: backlog limit exceeded [ 1331.503025][T19590] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1331.509670][T19590] audit: audit_lost=5759 audit_rate_limit=0 audit_backlog_limit=64 [ 1331.517656][T19590] audit: backlog limit exceeded [ 1332.519022][T19599] netlink: 'syz.7.4123': attribute type 1 has an invalid length. [ 1332.526955][T19599] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4123'. [ 1332.536157][T19599] netlink: 'syz.7.4123': attribute type 1 has an invalid length. [ 1332.544146][T19599] netlink: 'syz.7.4123': attribute type 2 has an invalid length. [ 1332.551952][T19599] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4123'. [ 1332.626095][T19599] syz.7.4123: attempt to access beyond end of device [ 1332.626095][T19599] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1332.640055][T19599] hfs: can't find a HFS filesystem on dev nbd7 [ 1333.368990][ T9] usb 4-1: USB disconnect, device number 92 [ 1335.919366][ T30] kauditd_printk_skb: 1832 callbacks suppressed [ 1335.919812][ T30] audit: type=1400 audit(2000001133.794:84852): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19625 comm="syz-executor" name="115" dev="tmpfs" ino=639 [ 1335.990596][T19624] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1336.019093][T19627] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1336.031828][T19628] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1336.038745][T19627] audit: audit_lost=5846 audit_rate_limit=0 audit_backlog_limit=64 [ 1336.047085][T19624] audit: audit_lost=5847 audit_rate_limit=0 audit_backlog_limit=64 [ 1336.058136][ T30] audit: type=1400 audit(2000001133.794:84853): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=19625 comm="syz-executor" name="115" dev="tmpfs" ino=639 [ 1336.063830][T19629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1336.088721][T19627] audit: backlog limit exceeded [ 1336.094119][T19624] audit: backlog limit exceeded [ 1336.259012][T19628] loop6: detected capacity change from 0 to 7 [ 1336.290817][T19628] Dev loop6: unable to read RDB block 7 [ 1336.306826][T19628] loop6: AHDI p1 p2 p3 p4 [ 1336.321064][T19628] loop6: partition table partially beyond EOD, truncated [ 1336.348471][T19628] loop6: p1 start 926365495 is beyond EOD, truncated [ 1336.375652][T19628] loop6: p2 size 47 extends beyond EOD, truncated [ 1336.447179][T19628] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1337.308405][T19635] /dev/nbd7: Can't open blockdev [ 1337.633871][ T5899] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1337.840917][ T5899] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1337.872921][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.076266][ T5899] usb 5-1: config 0 descriptor?? [ 1338.347913][T19638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.369134][T19638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.416313][ T5899] kaweth 5-1:0.0: Firmware present in device. [ 1339.598982][T19652] netlink: 'syz.7.4139': attribute type 1 has an invalid length. [ 1339.610250][ T5899] kaweth 5-1:0.0: Statistics collection: 0 [ 1339.634126][T19652] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4139'. [ 1339.639087][ T5899] kaweth 5-1:0.0: Multicast filter limit: 0 [ 1339.664519][ T5899] kaweth 5-1:0.0: MTU: 0 [ 1339.682664][ T5899] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1339.821758][ T5899] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 1339.868258][ T5899] usb 5-1: USB disconnect, device number 80 [ 1340.928806][ C1] audit_log_start: 1948 callbacks suppressed [ 1340.928832][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1340.941452][ C1] audit: audit_lost=5878 audit_rate_limit=0 audit_backlog_limit=64 [ 1340.943918][T17579] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1340.949401][ C1] audit: backlog limit exceeded [ 1340.961214][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1340.967803][ C1] audit: audit_lost=5879 audit_rate_limit=0 audit_backlog_limit=64 [ 1340.975778][ C1] audit: backlog limit exceeded [ 1340.977141][T17579] audit: audit_lost=5880 audit_rate_limit=0 audit_backlog_limit=64 [ 1340.980848][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1340.989975][T19673] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1341.017418][T19663] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1341.917472][T19676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4148'. [ 1343.544416][T19683] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1343.649565][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4156'. [ 1343.652388][T19702] netlink: 'syz.8.4154': attribute type 3 has an invalid length. [ 1343.703168][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4154'. [ 1343.714549][T19690] could not allocate digest TFM handle poly1305-generic [ 1343.922070][T19710] sg_write: data in/out 989/200 bytes for SCSI command 0x93-- guessing data in; [ 1343.922070][T19710] program syz.7.4159 not setting count and/or reply_len properly [ 1344.007002][T19710] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4159'. [ 1345.941919][ T30] kauditd_printk_skb: 3797 callbacks suppressed [ 1345.941940][ T30] audit: type=1400 audit(2000001143.824:88991): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=19743 comm="syz.4.4170" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1346.475938][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1346.486232][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1346.492930][ C1] audit: audit_lost=6388 audit_rate_limit=0 audit_backlog_limit=64 [ 1346.501010][ C1] audit: backlog limit exceeded [ 1346.503161][ T30] audit: type=1400 audit(2000001143.824:88992): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9562 comm="kworker/u8:3" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1346.518117][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1346.535415][ C1] audit: audit_lost=6389 audit_rate_limit=0 audit_backlog_limit=64 [ 1346.543470][ C1] audit: backlog limit exceeded [ 1346.545851][T16107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1346.999862][ T5839] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1347.289598][ T5839] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.518748][ T5839] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1347.528279][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.553365][ T5839] usb 5-1: Product: syz [ 1347.580585][ T5839] usb 5-1: Manufacturer: syz [ 1347.586926][ T5839] usb 5-1: SerialNumber: syz [ 1347.605617][ T5839] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1348.456795][ T5839] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1348.491291][ T5839] usb 5-1: USB disconnect, device number 81 [ 1348.719539][T19786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.010561][T19791] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4184'. [ 1349.063793][T17356] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1349.446995][T17356] usb 4-1: device descriptor read/64, error -71 [ 1349.693434][T17356] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1349.853472][T17356] usb 4-1: device descriptor read/64, error -71 [ 1349.964021][T17356] usb usb4-port1: attempt power cycle [ 1350.029378][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 1350.052185][T19815] ipvlan2: entered promiscuous mode [ 1350.138423][T19820] netlink: 136 bytes leftover after parsing attributes in process `syz.8.4197'. [ 1350.436320][T17356] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1350.474389][T17356] usb 4-1: device descriptor read/8, error -71 [ 1351.269907][ T30] kauditd_printk_skb: 3998 callbacks suppressed [ 1351.269923][ T30] audit: type=1400 audit(2000001148.514:91949): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=19823 comm="syz.4.4199" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 [ 1351.312441][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1351.314985][ T30] audit: type=1400 audit(2000001149.194:91950): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1351.319662][T19789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1351.338188][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.339163][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1351.357514][ C1] audit: audit_lost=6738 audit_rate_limit=0 audit_backlog_limit=64 [ 1351.365480][ C1] audit: backlog limit exceeded [ 1351.365515][T19789] audit: audit_lost=6739 audit_rate_limit=0 audit_backlog_limit=64 [ 1351.371152][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1351.378737][T15795] audit: audit_lost=6740 audit_rate_limit=0 audit_backlog_limit=64 [ 1351.386324][T17356] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1351.433418][T17356] usb 4-1: device descriptor read/8, error -71 [ 1351.730950][T19836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1351.732089][T17356] usb usb4-port1: unable to enumerate USB device [ 1352.563682][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1352.674277][T19839] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4204'. [ 1352.936047][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1353.092665][ T9] usb 5-1: config index 0 descriptor too short (expected 4626, got 18) [ 1353.263432][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1353.287559][ T9] usb 5-1: config 0 has no interface number 0 [ 1353.323769][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1353.353499][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.361614][ T9] usb 5-1: Product: syz [ 1353.373726][ T9] usb 5-1: Manufacturer: syz [ 1353.378392][ T9] usb 5-1: SerialNumber: syz [ 1353.398195][ T9] usb 5-1: config 0 descriptor?? [ 1353.621970][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1353.643484][ T9] usb 5-1: selecting invalid altsetting 1 [ 1353.649290][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1353.766587][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1354.542792][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1354.563775][ T9] usb 5-1: media controller created [ 1354.599347][T19859] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4211'. [ 1354.610110][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1354.633948][ T6020] Bluetooth: hci1: Frame reassembly failed (-84) [ 1354.763501][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1354.796955][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1354.834464][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1356.216893][ T9] usb 5-1: USB disconnect, device number 82 [ 1356.281094][T16107] audit_log_start: 2375 callbacks suppressed [ 1356.281113][T16107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1356.282543][T19876] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1356.288951][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1356.294004][ T30] audit: type=1400 audit(2000001154.164:94052): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19876 comm="modprobe" name="usr" dev="sda1" ino=1480 [ 1356.300395][ C1] audit: audit_lost=6832 audit_rate_limit=0 audit_backlog_limit=64 [ 1356.307217][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1356.325650][ C1] audit: backlog limit exceeded [ 1356.345535][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1356.352096][ C1] audit: audit_lost=6833 audit_rate_limit=0 audit_backlog_limit=64 [ 1356.353361][ T30] audit: type=1400 audit(2000001154.164:94053): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19876 comm="modprobe" name="lib" dev="sda1" ino=1642 [ 1356.708630][ T5155] Bluetooth: hci1: command 0x1003 tx timeout [ 1356.715763][T15798] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1356.790712][T19881] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4218'. [ 1360.190174][T19918] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4230'. [ 1360.254482][T19918] bridge0: entered promiscuous mode [ 1360.272801][T19918] bridge0: port 3(macvlan2) entered blocking state [ 1360.284197][T19918] bridge0: port 3(macvlan2) entered disabled state [ 1360.293113][T19918] macvlan2: entered allmulticast mode [ 1360.313575][T19918] bridge0: entered allmulticast mode [ 1360.391593][T19918] macvlan2: left allmulticast mode [ 1360.437948][T19918] bridge0: left allmulticast mode [ 1360.471604][T19918] bridge0: left promiscuous mode [ 1360.500315][T19926] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4233'. [ 1360.519758][T19926] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4233'. [ 1360.715223][T19926] dummy0: entered promiscuous mode [ 1360.745042][T19926] hsr2: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 1360.912543][T19934] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4234'. [ 1361.437556][T19937] audit_log_start: 2805 callbacks suppressed [ 1361.437576][T19937] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1361.454022][T19938] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1361.466053][T19938] audit: audit_lost=7054 audit_rate_limit=0 audit_backlog_limit=64 [ 1361.476066][T19937] audit: audit_lost=7055 audit_rate_limit=0 audit_backlog_limit=64 [ 1361.491411][T19939] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1361.501214][ T30] audit: type=1400 audit(2000001158.714:96201): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=19927 comm="syz.3.4234" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1361.502136][T16107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1361.523796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1361.533939][ T30] audit: type=1400 audit(2000001158.724:96202): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15795 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1361.538901][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1361.559109][ C0] vkms_vblank_simulate: vblank timer overrun [ 1361.565195][ T30] audit: type=1400 audit(2000001158.724:96203): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15795 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1361.643031][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.817150][T19939] xt_connbytes: Forcing CT accounting to be enabled [ 1361.824417][T19939] set match dimension is over the limit! [ 1362.163452][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.273200][T19947] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4241'. [ 1362.935282][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1363.133341][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1363.240524][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1363.247725][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1363.256962][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.268879][ T9] usb 4-1: config 0 descriptor?? [ 1364.133474][ T5839] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1364.327416][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.355402][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.411737][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1364.445692][ T5839] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1364.470166][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.504603][ T5839] usb 5-1: config 0 descriptor?? [ 1364.694023][ T9] corsair-cpro 0003:1B1C:0C10.0025: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1364.742015][ T5839] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1364.926491][ T5839] usb 5-1: USB disconnect, device number 83 [ 1365.000702][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4257'. [ 1365.011144][T19992] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4257'. [ 1365.030986][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 1365.372490][T19949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.384715][T19949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.452008][ T9] corsair-cpro 0003:1B1C:0C10.0025: probe with driver corsair-cpro failed with error -71 [ 1365.481535][ T9] usb 4-1: USB disconnect, device number 97 [ 1366.372330][T20011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1366.491017][ T30] kauditd_printk_skb: 3615 callbacks suppressed [ 1366.491037][ T30] audit: type=1400 audit(2000001164.374:99259): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20015 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1366.646760][ T30] audit: type=1400 audit(2000001164.404:99260): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.140 dest=59802 netif=eth0 [ 1366.674674][T20018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1366.682973][T20018] audit: audit_lost=7243 audit_rate_limit=0 audit_backlog_limit=64 [ 1366.694909][ T30] audit: type=1400 audit(2000001164.404:99261): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20015 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1366.753035][T20011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1366.760929][T20011] audit: audit_lost=7244 audit_rate_limit=0 audit_backlog_limit=64 [ 1366.768937][T20011] audit: backlog limit exceeded [ 1366.793880][T20011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1366.800495][T20011] audit: audit_lost=7245 audit_rate_limit=0 audit_backlog_limit=64 [ 1366.811968][T20011] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4261'. [ 1367.845476][T20030] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1367.867766][T20030] netlink: 'syz.3.4268': attribute type 9 has an invalid length. [ 1367.893473][T20030] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1367.922547][T20030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1368.711265][T20044] random: crng reseeded on system resumption [ 1368.760493][T20047] IPVS: length: 129 != 8 [ 1370.630395][T20057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1370.639614][T20057] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1370.774683][T20065] tipc: Started in network mode [ 1370.779635][T20065] tipc: Node identity 00000000000040120000006e70000001, cluster identity 4711 [ 1370.788913][T20065] tipc: Enabling of bearer rejected, failed to enable media [ 1371.213736][T20066] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4276'. [ 1371.228023][T20066] hub 8-0:1.0: USB hub found [ 1371.321829][T20066] hub 8-0:1.0: 1 port detected [ 1372.261841][T20066] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4276'. [ 1372.746085][ T30] kauditd_printk_skb: 1958 callbacks suppressed [ 1372.746109][ T30] audit: type=1400 audit(2000001168.584:100801): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=20059 comm="syz.4.4278" opid=20059 ocomm="syz.4.4278" [ 1372.795514][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1372.802123][T15795] audit: audit_lost=7385 audit_rate_limit=0 audit_backlog_limit=64 [ 1372.812796][T14839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1372.822540][T14839] audit: audit_lost=7386 audit_rate_limit=0 audit_backlog_limit=64 [ 1372.830806][T14839] audit: backlog limit exceeded [ 1372.840973][T15795] audit: backlog limit exceeded [ 1372.855947][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1372.860958][ T30] audit: type=1400 audit(2000001168.594:100802): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20059 comm="syz.4.4278" name="newroot" dev="tmpfs" ino=2 [ 1372.862652][ C1] audit: audit_lost=7387 audit_rate_limit=0 audit_backlog_limit=64 [ 1373.977866][ T5924] libceph: connect (1)[c::]:6789 error -22 [ 1373.985672][T20077] ceph: No mds server is up or the cluster is laggy [ 1374.005194][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 1377.795045][ T30] kauditd_printk_skb: 4747 callbacks suppressed [ 1377.795074][ T30] audit: type=1400 audit(2000001175.664:104100): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=20156 comm="syz.8.4307" path="/dev/video3" dev="devtmpfs" ino=936 [ 1377.887864][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1377.895757][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1377.898909][T14839] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1377.902314][ C1] audit: audit_lost=7871 audit_rate_limit=0 audit_backlog_limit=64 [ 1377.911143][ T30] audit: type=1400 audit(2000001175.664:104101): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=20156 comm="syz.8.4307" path="/dev/video3" dev="devtmpfs" ino=936 [ 1377.916795][ C1] audit: backlog limit exceeded [ 1377.917594][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1377.939910][T17657] audit: audit_lost=7872 audit_rate_limit=0 audit_backlog_limit=64 [ 1377.941210][ C1] audit: audit_lost=7873 audit_rate_limit=0 audit_backlog_limit=64 [ 1378.099780][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4311'. [ 1378.617559][T20185] lo speed is unknown, defaulting to 1000 [ 1383.116718][T20224] sctp: [Deprecated]: syz.8.4331 (pid 20224) Use of int in max_burst socket option. [ 1383.116718][T20224] Use struct sctp_assoc_value instead [ 1383.133808][ T30] kauditd_printk_skb: 2890 callbacks suppressed [ 1383.133829][ T30] audit: type=1400 audit(2000001180.994:106127): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1383.173689][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1383.175419][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1383.186835][ C1] audit: audit_lost=8162 audit_rate_limit=0 audit_backlog_limit=64 [ 1383.194839][ C1] audit: backlog limit exceeded [ 1383.196726][T15795] audit: audit_lost=8163 audit_rate_limit=0 audit_backlog_limit=64 [ 1383.200232][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1383.214372][ C1] audit: audit_lost=8164 audit_rate_limit=0 audit_backlog_limit=64 [ 1383.222318][ C1] audit: backlog limit exceeded [ 1383.233476][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1383.781590][T20235] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4335'. [ 1388.145939][ T30] kauditd_printk_skb: 2180 callbacks suppressed [ 1388.145988][ T30] audit: type=1400 audit(2000001186.024:107792): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15795 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1388.307898][T15795] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1388.314486][T20275] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1388.314509][T20275] audit: audit_lost=8337 audit_rate_limit=0 audit_backlog_limit=64 [ 1388.314525][T20275] audit: backlog limit exceeded [ 1388.314541][T20275] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1388.314555][T20275] audit: audit_lost=8338 audit_rate_limit=0 audit_backlog_limit=64 [ 1388.314571][T20275] audit: backlog limit exceeded [ 1388.314605][T20275] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1388.314619][T20275] audit: audit_lost=8339 audit_rate_limit=0 audit_backlog_limit=64 [ 1392.922688][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'. [ 1393.043966][T20328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4364'. [ 1393.066259][T20328] macvtap1: entered promiscuous mode [ 1393.071838][T20328] macvtap1: entered allmulticast mode [ 1393.083547][T20328] bond0: entered allmulticast mode [ 1393.088851][T20328] bond_slave_0: entered allmulticast mode [ 1393.095271][T20328] bond_slave_1: entered allmulticast mode [ 1393.115661][T20328] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1393.154287][ T30] kauditd_printk_skb: 2035 callbacks suppressed [ 1393.154308][ T30] audit: type=1400 audit(2000001191.034:109516): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=17657 comm="syz-executor" name="binderfs" dev="tmpfs" ino=932 [ 1393.189231][T17657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1393.193906][T14884] ------------[ cut here ]------------ [ 1393.202100][T14884] WARNING: CPU: 0 PID: 14884 at kernel/softirq.c:387 __local_bh_enable_ip+0x180/0x1c0 [ 1393.210912][T17657] audit: audit_lost=8444 audit_rate_limit=0 audit_backlog_limit=64 [ 1393.211708][T14884] Modules linked in: [ 1393.220352][T17657] audit: backlog limit exceeded [ 1393.224421][T14884] CPU: 0 UID: 0 PID: 14884 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1393.224449][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1393.224461][T14884] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 1393.224489][T14884] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 ed a0 8f 80 e1 07 80 c1 03 38 [ 1393.224508][T14884] RSP: 0018:ffffc90003fdf4c0 EFLAGS: 00010046 [ 1393.224530][T14884] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1393.224544][T14884] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89d750a3 [ 1393.224558][T14884] RBP: ffffc90003fdf548 R08: ffff8880b863bd83 R09: 1ffff110170c77b0 [ 1393.224574][T14884] R10: dffffc0000000000 R11: ffffed10170c77b1 R12: ffff8880b863bd80 [ 1393.224591][T14884] R13: ffff88805cebb870 R14: dffffc0000000000 R15: 1ffff920007fbe98 [ 1393.224608][T14884] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 1393.224625][T14884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1393.224641][T14884] CR2: 00007fc79a96bf98 CR3: 000000005ada2000 CR4: 00000000003526f0 [ 1393.224661][T14884] Call Trace: [ 1393.224671][T14884] [ 1393.224682][T14884] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1393.224710][T14884] ? do_raw_spin_unlock+0x122/0x240 [ 1393.224741][T14884] ? rt_set_nexthop+0x693/0xa80 [ 1393.224765][T14884] rt_set_nexthop+0x693/0xa80 [ 1393.224794][T14884] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 1393.224840][T14884] ? ip_route_output_key_hash+0xde/0x2e0 [ 1393.224873][T14884] ip_route_output_key_hash+0x1b9/0x2e0 [ 1393.224908][T14884] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1393.224945][T14884] ? make_kuid+0x1d9/0x680 [ 1393.224973][T14884] ? lockdep_unlock+0x89/0x120 [ 1393.225007][T14884] ? __pfx_make_kuid+0x10/0x10 [ 1393.225042][T14884] ip_route_output_flow+0x2a/0x150 [ 1393.225076][T14884] rxrpc_init_peer+0x50a/0xc60 [ 1393.225120][T14884] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 1393.225160][T14884] ? __lock_acquire+0xab9/0xd20 [ 1393.225192][T14884] ? do_raw_spin_lock+0x121/0x290 [ 1393.225225][T14884] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1393.225257][T14884] rxrpc_new_incoming_peer+0x281/0x5a0 [ 1393.225298][T14884] rxrpc_new_incoming_call+0x612/0x14f0 [ 1393.225344][T14884] rxrpc_io_thread+0x18b2/0x2cd0 [ 1393.225370][T14884] ? rxrpc_io_thread+0x1171/0x2cd0 [ 1393.225431][T14884] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1393.225466][T14884] ? do_raw_spin_lock+0x121/0x290 [ 1393.225506][T14884] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1393.225561][T14884] ? __kthread_parkme+0x1a1/0x200 [ 1393.225595][T14884] kthread+0x711/0x8a0 [ 1393.225629][T14884] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1393.225654][T14884] ? __pfx_kthread+0x10/0x10 [ 1393.225685][T14884] ? _raw_spin_unlock_irq+0x23/0x50 [ 1393.225715][T14884] ? lockdep_hardirqs_on+0x9c/0x150 [ 1393.225744][T14884] ? __pfx_kthread+0x10/0x10 [ 1393.225774][T14884] ret_from_fork+0x3fc/0x770 [ 1393.225801][T14884] ? __pfx_ret_from_fork+0x10/0x10 [ 1393.225830][T14884] ? __switch_to_asm+0x39/0x70 [ 1393.225854][T14884] ? __switch_to_asm+0x33/0x70 [ 1393.234465][ T30] audit: type=1400 audit(2000001191.034:109517): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=17657 comm="syz-executor" name="171" dev="tmpfs" ino=928 [ 1393.241308][T14884] ? __pfx_kthread+0x10/0x10 [ 1393.241348][T14884] ret_from_fork_asm+0x1a/0x30 [ 1393.241395][T14884] [ 1393.241419][T14884] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1393.241436][T14884] CPU: 0 UID: 0 PID: 14884 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1393.241460][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1393.241474][T14884] Call Trace: [ 1393.241484][T14884] [ 1393.241494][T14884] dump_stack_lvl+0x99/0x250 [ 1393.241519][T14884] ? __asan_memcpy+0x40/0x70 [ 1393.241547][T14884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1393.241572][T14884] ? __pfx__printk+0x10/0x10 [ 1393.241616][T14884] panic+0x2db/0x790 [ 1393.241646][T14884] ? __pfx_panic+0x10/0x10 [ 1393.241666][T14884] ? show_trace_log_lvl+0x4fb/0x550 [ 1393.241703][T14884] ? ret_from_fork_asm+0x1a/0x30 [ 1393.241737][T14884] __warn+0x31b/0x4b0 [ 1393.241758][T14884] ? __local_bh_enable_ip+0x180/0x1c0 [ 1393.241785][T14884] ? __local_bh_enable_ip+0x180/0x1c0 [ 1393.241808][T14884] report_bug+0x2be/0x4f0 [ 1393.241837][T14884] ? __local_bh_enable_ip+0x180/0x1c0 [ 1393.241861][T14884] ? __local_bh_enable_ip+0x180/0x1c0 [ 1393.241884][T14884] ? __local_bh_enable_ip+0x182/0x1c0 [ 1393.241907][T14884] handle_bug+0x84/0x160 [ 1393.241931][T14884] exc_invalid_op+0x1a/0x50 [ 1393.241954][T14884] asm_exc_invalid_op+0x1a/0x20 [ 1393.241975][T14884] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 1393.242000][T14884] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 ed a0 8f 80 e1 07 80 c1 03 38 [ 1393.242020][T14884] RSP: 0018:ffffc90003fdf4c0 EFLAGS: 00010046 [ 1393.242041][T14884] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1393.242056][T14884] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89d750a3 [ 1393.242072][T14884] RBP: ffffc90003fdf548 R08: ffff8880b863bd83 R09: 1ffff110170c77b0 [ 1393.242089][T14884] R10: dffffc0000000000 R11: ffffed10170c77b1 R12: ffff8880b863bd80 [ 1393.242106][T14884] R13: ffff88805cebb870 R14: dffffc0000000000 R15: 1ffff920007fbe98 [ 1393.242136][T14884] ? rt_set_nexthop+0x693/0xa80 [ 1393.242170][T14884] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1393.242199][T14884] ? do_raw_spin_unlock+0x122/0x240 [ 1393.242234][T14884] ? rt_set_nexthop+0x693/0xa80 [ 1393.242261][T14884] rt_set_nexthop+0x693/0xa80 [ 1393.242293][T14884] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 1393.242344][T14884] ? ip_route_output_key_hash+0xde/0x2e0 [ 1393.242382][T14884] ip_route_output_key_hash+0x1b9/0x2e0 [ 1393.242421][T14884] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1393.242463][T14884] ? make_kuid+0x1d9/0x680 [ 1393.242494][T14884] ? lockdep_unlock+0x89/0x120 [ 1393.242531][T14884] ? __pfx_make_kuid+0x10/0x10 [ 1393.242570][T14884] ip_route_output_flow+0x2a/0x150 [ 1393.242609][T14884] rxrpc_init_peer+0x50a/0xc60 [ 1393.242658][T14884] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 1393.242692][T14884] ? __lock_acquire+0xab9/0xd20 [ 1393.242727][T14884] ? do_raw_spin_lock+0x121/0x290 [ 1393.242763][T14884] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1393.242799][T14884] rxrpc_new_incoming_peer+0x281/0x5a0 [ 1393.242843][T14884] rxrpc_new_incoming_call+0x612/0x14f0 [ 1393.242894][T14884] rxrpc_io_thread+0x18b2/0x2cd0 [ 1393.242921][T14884] ? rxrpc_io_thread+0x1171/0x2cd0 [ 1393.242989][T14884] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1393.243027][T14884] ? do_raw_spin_lock+0x121/0x290 [ 1393.243072][T14884] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1393.243131][T14884] ? __kthread_parkme+0x1a1/0x200 [ 1393.243177][T14884] kthread+0x711/0x8a0 [ 1393.243213][T14884] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1393.243241][T14884] ? __pfx_kthread+0x10/0x10 [ 1393.243276][T14884] ? _raw_spin_unlock_irq+0x23/0x50 [ 1393.243307][T14884] ? lockdep_hardirqs_on+0x9c/0x150 [ 1393.243341][T14884] ? __pfx_kthread+0x10/0x10 [ 1393.243375][T14884] ret_from_fork+0x3fc/0x770 [ 1393.243403][T14884] ? __pfx_ret_from_fork+0x10/0x10 [ 1393.243435][T14884] ? __switch_to_asm+0x39/0x70 [ 1393.243463][T14884] ? __switch_to_asm+0x33/0x70 [ 1393.243493][T14884] ? __pfx_kthread+0x10/0x10 [ 1393.243525][T14884] ret_from_fork_asm+0x1a/0x30 [ 1393.243577][T14884] [ 1393.252461][T14884] Kernel Offset: disabled