last executing test programs: 4m7.524140945s ago: executing program 2 (id=678): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 4m5.109949395s ago: executing program 2 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) 4m3.463336842s ago: executing program 2 (id=686): pipe(&(0x7f0000000340)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x12000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m2.969287972s ago: executing program 2 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) mq_open(&(0x7f0000000140)='*{\x00', 0x40, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 4m2.303012468s ago: executing program 2 (id=690): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffe14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/if_inet6\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 4m0.603326684s ago: executing program 2 (id=693): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$KVM_VCPU(&(0x7f0000e9f000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3m44.925998286s ago: executing program 32 (id=693): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$KVM_VCPU(&(0x7f0000e9f000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1m24.755439984s ago: executing program 0 (id=1002): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00006ea000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000280)="66b8b60000000f23d00f21f86635300000010f23f80f20e06635000020000f22e0baf80c66b89415498366efbafc0c66ed0fc5e5690f005e8c0f01c4baf80c66b8e6ded48b66efbafc0cedf36d640fae0d66b9800000c00f326635008000000f30"}], 0x1, 0x10, 0x0, 0xffffffffffffffd7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x258000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m23.358962351s ago: executing program 5 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m22.607060836s ago: executing program 0 (id=1008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x258000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m19.864963819s ago: executing program 5 (id=1012): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x80, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x7e77, 0x2b49, 0x0, 0x0, 0x0) 1m16.787095747s ago: executing program 5 (id=1013): r0 = io_uring_setup(0x144c, &(0x7f0000000100)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r6, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x10000000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc011}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x14, r5, 0x31f}, 0x14}}, 0x24040040) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="03", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x300, 0x0) close(r0) 1m16.608735905s ago: executing program 0 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0xc02, 0x0) r5 = dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0xcbff9000) 1m16.607883245s ago: executing program 5 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {}, {}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) 1m13.762300516s ago: executing program 5 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x40}], 0x1c) r3 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000300)={0x0, [], 0x7}) sendmmsg$inet6(r2, 0x0, 0x0, 0x20040840) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) 1m12.561378291s ago: executing program 5 (id=1025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) accept$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 1m12.102554419s ago: executing program 0 (id=1029): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r9, 0x60b}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x0) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) pselect6(0xffec, &(0x7f00000000c0)={0x0, 0x0, 0x800000000, 0x57}, 0x0, 0x0, 0x0, 0x0) 1m10.370985715s ago: executing program 0 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x10000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x195) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0xc, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x49c781}) io_uring_enter(r4, 0x3516, 0x4, 0x0, 0x0, 0x0) 1m8.08766096s ago: executing program 0 (id=1035): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="d181ae1206ffb9"], 0xffdd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x541e, &(0x7f0000000040)=0x11) 55.913372241s ago: executing program 33 (id=1025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) accept$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 52.407303816s ago: executing program 34 (id=1035): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="d181ae1206ffb9"], 0xffdd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x541e, &(0x7f0000000040)=0x11) 13.077472697s ago: executing program 7 (id=1133): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11.73875462s ago: executing program 6 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 10.317648509s ago: executing program 6 (id=1139): r0 = socket$inet_dccp(0x2, 0x6, 0x0) close_range(0xffffffffffffffff, r0, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000700)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @val=@tracing}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 10.309480428s ago: executing program 7 (id=1140): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x3, 0x10000000008d}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0xffffffff, 0x80000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) capset(0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) 10.071223821s ago: executing program 4 (id=1142): syslog(0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000002580), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000002800)={0x6, 0x1, 0x0, "833461025a7802000000169916ea42230659496b79b29963084f401a544b75d0"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b80)={0x24, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x24}}, 0x0) 8.382040919s ago: executing program 7 (id=1143): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r7, 0x331, 0x0, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 8.337900002s ago: executing program 1 (id=1144): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000001100)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000500)={0x1, r2}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 8.227466913s ago: executing program 3 (id=1145): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x1) epoll_create(0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r2 = syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x24, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x3, 0x0, 0x0) 8.219399639s ago: executing program 4 (id=1146): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, 0x0) 8.107076333s ago: executing program 6 (id=1147): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 8.106686442s ago: executing program 3 (id=1148): syz_usb_connect(0x6, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000084818e08d112f7be1f128a002e31000044000146a6032035c06ed2bef7ff000000000907000003ff0169000524060000052400008000240f0100000000010fffffd37fa1aeb90000000009050500ad3dd2"], 0x0) msgget(0x1, 0x2b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc0445624, &(0x7f00000001c0)={0x980001, 0x0, @name="4869420cc72b2745c9d43d1b9442242a6e3aedafe5db4229bf90222640645495"}) 7.721073342s ago: executing program 7 (id=1149): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010600006a0c6f555782e11e13c2"], 0x14}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x181480, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r4, 0xfffff000, &(0x7f0000000000)) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) link(&(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg$inet6(r5, &(0x7f0000003bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000002905000032000000fe8000000000000000000000e2ffffbaae359d78c38eb862865739fc4444fd00ef9b9c8fc34a8758c5f648896dba9eda06d7bd559216d0ec08eec508a8d646f1f3d93f648c77b203c6e5", @ANYBLOB="5f04892b25dc42830cd570062faf66d7ac0bf0f7797aba7800afe705394a98d3b32e6b00829eef95d1acfeef929d3da83cd65762060f306860ae01b26bcec35d8769679262e546c4efa154e2ddbdc6a23f2aa88cdc877dd5e50037ad137d74d9cec288856f6db0089dd3b0d800d91b940fb1a76497bdf574308b7623d422123d06d7174e138d2cc9c9cba069a227a371e770062fdbf9c5279a36d543483cc4de611cf3279e191acb85893e69d108d75435bb0359b298aca5775b", @ANYBLOB='\x00\x00\x00\x00'], 0x20}}], 0x1, 0xff00) 6.845837439s ago: executing program 1 (id=1150): io_uring_setup(0x3846, &(0x7f0000000180)={0x0, 0x40000, 0x81, 0x6, 0xd0}) r0 = socket$netlink(0x10, 0x3, 0x15) gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000000040)=0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x40050) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) 6.403077617s ago: executing program 4 (id=1151): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @var={0x1, 0x0, 0x0, 0xe, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000004c0)=""/204, 0x43, 0xcc, 0x1, 0x0, 0x0, @void, @value}, 0x28) 6.33825773s ago: executing program 1 (id=1152): socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x200000008b}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x30) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc400, 0x3, 0x3131354f, 0x7, 0xc4, 0x0, 0xa, 0x80, 0x0, 0x1, 0x1, 0x1}}) 6.111036863s ago: executing program 7 (id=1153): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000ac0), 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x82643, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 5.285093428s ago: executing program 4 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x400, 0x0) getdents(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 5.067151424s ago: executing program 1 (id=1155): io_setup(0x23, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_getevents(0x0, 0x2, 0x1, &(0x7f0000000200)=[{}], 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) eventfd2(0xf6, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400000, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000012c0)={0x80000000, &(0x7f0000001200), &(0x7f0000001240)}) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 4.066911781s ago: executing program 3 (id=1156): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x73}], 0x1, 0x2, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x20000850) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x90, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x24040900) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="01002abd7000fddb"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x2, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.640061219s ago: executing program 6 (id=1157): socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x80, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x803, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x200000100000011, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.492868484s ago: executing program 7 (id=1158): bind$alg(0xffffffffffffffff, 0x0, 0x0) gettid() readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b000000000000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x5, 0x20000000, 0x0) 3.452622402s ago: executing program 4 (id=1159): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x802, 0x2, "81fb08cc2b000000f6c05b7225ffff00ffffff"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r9 = accept4(r4, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRESHEX=r9], 0x0) 3.395788366s ago: executing program 1 (id=1160): writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="ebc973c27c69833bbb601634af41b856596029d89faf799857d2bb9a743bb54601533844079bdbed3e8a082f7cf2109a908649db8b331d9d8535f9499efa69bde02e01dde7c7f0f7596b833510369335a41d6be85788158167acd31c3de17ae381ddf6ff3489c43a0a606fe3e7d2df82f5abc2696f53de82f678f9bd03504208b2539b1a01a384e181853ba39231b45f8f226fd3a7170c14ea3d36715bd2b78e15e1c5ce1bd29a0d2b187b", 0xab}, {0x0}, {0x0}, {&(0x7f0000000540)="534953abd194891d3a460388d539e5353b6b056690b152bfcce82879fa4954d9d48f476648d0eb2c72e68f287bbd3536fe25f1071781dd21d91fcdee6988", 0x3e}], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x74}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.340966104s ago: executing program 6 (id=1161): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010600006a0c6f"], 0x14}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x181480, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r4, 0xfffff000, &(0x7f0000000000)) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) link(&(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg$inet6(r5, &(0x7f0000003bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000002905000032000000fe8000000000000000000000e2ffffbaae359d78c38eb862865739fc4444fd00ef9b9c8fc34a8758c5f648896dba9eda06d7bd559216d0ec08eec508a8d646f1f3d93f648c77b203c6e5", @ANYBLOB="5f04892b25dc42830cd570062faf66d7ac0bf0f7797aba7800afe705394a98d3b32e6b00829eef95d1acfeef929d3da83cd65762060f306860ae01b26bcec35d8769679262e546c4efa154e2ddbdc6a23f2aa88cdc877dd5e50037ad137d74d9cec288856f6db0089dd3b0d800d91b940fb1a76497bdf574308b7623d422123d06d7174e138d2cc9c9cba069a227a371e770062fdbf9c5279a36d543483cc4de611cf3279e191acb85893e69d108d75435bb0359b298aca5775b", @ANYBLOB='\x00\x00\x00\x00'], 0x20}}], 0x1, 0xff00) 3.29296552s ago: executing program 3 (id=1162): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) listen(r0, 0x5) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1.627037373s ago: executing program 3 (id=1163): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r4, 0x0, 0x20005810) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000630124000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 556.742236ms ago: executing program 1 (id=1164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) read(r2, &(0x7f00000011c0)=""/221, 0x8) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 510.357657ms ago: executing program 3 (id=1165): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x4, 0x6, 0x3, 0x35315241, [0xc90, 0x9], [0x200, 0x7b4e13dc], 0x13a}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x20, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) 457.15942ms ago: executing program 6 (id=1166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a0001"], 0x24}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) 0s ago: executing program 4 (id=1167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x2}) close_range(r3, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0) kernel console output (not intermixed with test programs): backlog limit exceeded [ 258.924646][ T5826] audit: audit_lost=89722 audit_rate_limit=0 audit_backlog_limit=64 [ 258.924701][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.777832][ T7646] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 262.816982][ T7661] hub 6-0:1.0: USB hub found [ 262.824623][ T7661] hub 6-0:1.0: 1 port detected [ 263.817530][ C0] audit_log_start: 12329 callbacks suppressed [ 263.817551][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.819122][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.823751][ C0] audit: audit_lost=93076 audit_rate_limit=0 audit_backlog_limit=64 [ 263.830354][ T5194] audit: audit_lost=93077 audit_rate_limit=0 audit_backlog_limit=64 [ 263.836792][ C0] audit: backlog limit exceeded [ 263.844968][ T5194] audit: backlog limit exceeded [ 263.856195][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.875205][ T7674] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.881963][ T7674] audit: audit_lost=93078 audit_rate_limit=0 audit_backlog_limit=64 [ 263.890305][ T7674] audit: backlog limit exceeded [ 269.565977][ T29] kauditd_printk_skb: 19815 callbacks suppressed [ 269.572562][ T29] audit: type=1400 audit(1735773656.861:80896): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7715 comm="syz.1.470" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 269.656464][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.656529][ T7147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.664623][ T6207] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.669797][ T5819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.676786][ T7718] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.686896][ T5819] audit: audit_lost=98253 audit_rate_limit=0 audit_backlog_limit=64 [ 269.689260][ T29] audit: type=1400 audit(1735773657.341:80897): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7715 comm="syz.1.470" opid=7715 ocomm="syz.1.470" [ 269.697991][ T7147] audit: audit_lost=98254 audit_rate_limit=0 audit_backlog_limit=64 [ 269.768654][ T5819] audit: backlog limit exceeded [ 270.066024][ T7709] kvm: kvm [7698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x204500000800 [ 271.210146][ T7709] kvm: kvm [7698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x410000000000 [ 274.418359][ T7748] ntfs3(nullb0): Primary boot signature is not NTFS. [ 274.425683][ T7748] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 274.827185][ C0] audit_log_start: 14492 callbacks suppressed [ 274.827207][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 274.839874][ C0] audit: audit_lost=102419 audit_rate_limit=0 audit_backlog_limit=64 [ 274.847994][ C0] audit: backlog limit exceeded [ 274.984382][ T29] audit: type=1400 audit(1735773662.551:82934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5194 comm="udevd" name="/" dev="sda1" ino=2 [ 275.022629][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.029272][ C0] audit: audit_lost=102420 audit_rate_limit=0 audit_backlog_limit=64 [ 275.037403][ C0] audit: backlog limit exceeded [ 275.042743][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.049325][ C0] audit: audit_lost=102421 audit_rate_limit=0 audit_backlog_limit=64 [ 275.057467][ C0] audit: backlog limit exceeded [ 275.342674][ T7752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.807045][ T7758] ISOFS: Unable to identify CD-ROM format. [ 276.578598][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 276.606073][ T7763] syz.2.482 uses obsolete (PF_INET,SOCK_PACKET) [ 279.403259][ T7781] hub 6-0:1.0: USB hub found [ 279.409309][ T7781] hub 6-0:1.0: 1 port detected [ 280.277645][ T29] kauditd_printk_skb: 13537 callbacks suppressed [ 280.277679][ T29] audit: type=1400 audit(1735773667.881:86220): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7770 comm="syz.4.484" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 280.287212][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.313678][ T6207] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.332721][ T6207] audit: audit_lost=105866 audit_rate_limit=0 audit_backlog_limit=64 [ 280.341074][ T5194] audit: audit_lost=105867 audit_rate_limit=0 audit_backlog_limit=64 [ 280.341172][ T5194] audit: backlog limit exceeded [ 280.341961][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.342070][ T5194] audit: audit_lost=105868 audit_rate_limit=0 audit_backlog_limit=64 [ 280.342161][ T5194] audit: backlog limit exceeded [ 280.354455][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.843671][ T7824] omfs: Invalid superblock (0) [ 285.427591][ T5194] audit_log_start: 20118 callbacks suppressed [ 285.427608][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.440461][ T5194] audit: audit_lost=111334 audit_rate_limit=0 audit_backlog_limit=64 [ 285.448645][ T5194] audit: backlog limit exceeded [ 285.453797][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.460540][ T5194] audit: audit_lost=111335 audit_rate_limit=0 audit_backlog_limit=64 [ 285.468807][ T7836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.475589][ T7836] audit: audit_lost=111336 audit_rate_limit=0 audit_backlog_limit=64 [ 285.483719][ T7836] audit: backlog limit exceeded [ 285.513512][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.520941][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.782788][ T7841] ebtables: ebtables: counters copy to user failed while replacing table [ 286.589145][ T7845] fuse: Bad value for 'fd' [ 286.985020][ T7844] netlink: 61955 bytes leftover after parsing attributes in process `syz.0.502'. [ 287.019335][ T7844] netlink: 2 bytes leftover after parsing attributes in process `syz.0.502'. [ 290.373242][ T7879] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 290.454707][ T29] kauditd_printk_skb: 20394 callbacks suppressed [ 290.454727][ T29] audit: type=1400 audit(1735773678.461:92567): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7863 comm="syz.1.510" name="newroot" dev="tmpfs" ino=2 [ 290.480021][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.515444][ T29] audit: type=1400 audit(1735773678.461:92568): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7863 comm="syz.1.510" name="/" dev="devtmpfs" ino=1 [ 291.534278][ T29] audit: type=1400 audit(1735773678.461:92569): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7863 comm="syz.1.510" name="cpu" dev="devtmpfs" ino=85 [ 291.764955][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 291.772030][ T5827] audit: audit_lost=117321 audit_rate_limit=0 audit_backlog_limit=64 [ 291.780925][ T5827] audit: backlog limit exceeded [ 291.786167][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 291.792733][ T5827] audit: audit_lost=117322 audit_rate_limit=0 audit_backlog_limit=64 [ 291.801113][ T5827] audit: backlog limit exceeded [ 291.806681][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.195590][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.522'. [ 295.464924][ T29] kauditd_printk_skb: 14758 callbacks suppressed [ 295.464941][ T29] audit: type=1400 audit(1735773683.511:95282): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7910 comm="syz-executor" name="111" dev="tmpfs" ino=621 [ 295.552392][ T29] audit: type=1400 audit(1735773683.541:95283): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7910 comm="syz-executor" name="111" dev="tmpfs" ino=621 [ 295.660869][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.669137][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.675740][ C0] audit: audit_lost=121343 audit_rate_limit=0 audit_backlog_limit=64 [ 295.683869][ C0] audit: backlog limit exceeded [ 295.690531][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.697125][ C0] audit: audit_lost=121344 audit_rate_limit=0 audit_backlog_limit=64 [ 295.705281][ C0] audit: backlog limit exceeded [ 295.710501][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.529823][ T29] kauditd_printk_skb: 10140 callbacks suppressed [ 300.529842][ T29] audit: type=1400 audit(1735773688.561:97317): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7941 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 300.616391][ T29] audit: type=1400 audit(1735773688.571:97318): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7941 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 301.608807][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.616721][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.623307][ C0] audit: audit_lost=124063 audit_rate_limit=0 audit_backlog_limit=64 [ 301.631432][ C0] audit: backlog limit exceeded [ 301.634585][ T5826] audit: audit_lost=124064 audit_rate_limit=0 audit_backlog_limit=64 [ 301.637087][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.650915][ C0] audit: audit_lost=124065 audit_rate_limit=0 audit_backlog_limit=64 [ 301.654595][ T5826] audit: backlog limit exceeded [ 302.519799][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 302.530644][ T7963] netlink: 22 bytes leftover after parsing attributes in process `syz.0.535'. [ 302.540016][ T7963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.535'. [ 302.551022][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 305.620951][ T5817] audit_log_start: 15647 callbacks suppressed [ 305.620969][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.624338][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.635434][ T5817] audit: audit_lost=128522 audit_rate_limit=0 audit_backlog_limit=64 [ 305.636450][ C0] audit: audit_lost=128523 audit_rate_limit=0 audit_backlog_limit=64 [ 305.649934][ T5817] audit: backlog limit exceeded [ 305.651285][ C0] audit: backlog limit exceeded [ 305.670088][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.670151][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.676675][ C0] audit: audit_lost=128524 audit_rate_limit=0 audit_backlog_limit=64 [ 305.676692][ C0] audit: backlog limit exceeded [ 307.841267][ T8023] tipc: Started in network mode [ 307.866442][ T8023] tipc: Node identity 4, cluster identity 4711 [ 308.059795][ T8023] tipc: Node number set to 4 [ 309.417328][ T8084] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 310.254652][ T8092] Bluetooth: MGMT ver 1.23 [ 310.817805][ T5194] audit_log_start: 31234 callbacks suppressed [ 310.817825][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.818809][ T29] audit: type=1400 audit(1735773697.911:106170): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8085 comm="syz.1.557" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 310.824015][ T5194] audit: audit_lost=136857 audit_rate_limit=0 audit_backlog_limit=64 [ 310.836348][ T8089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.853187][ T5194] audit: backlog limit exceeded [ 310.872813][ T29] audit: type=1400 audit(1735773698.111:106171): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 310.872849][ T29] audit: type=1400 audit(1735773698.111:106172): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 310.911699][ T8089] audit: audit_lost=136858 audit_rate_limit=0 audit_backlog_limit=64 [ 310.921096][ T8089] audit: backlog limit exceeded [ 310.926711][ T8089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.197363][ T8162] TCP: out of memory -- consider tuning tcp_mem [ 314.934828][ T5869] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 316.460993][ T29] kauditd_printk_skb: 30669 callbacks suppressed [ 316.461013][ T29] audit: type=1400 audit(1735773703.741:110396): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8184 comm="syz.3.570" opid=8184 ocomm="syz.3.570" [ 316.461076][ T29] audit: type=1400 audit(1735773703.741:110397): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8184 comm="syz.3.570" name="newroot" dev="tmpfs" ino=2 [ 316.461171][ T29] audit: type=1400 audit(1735773703.741:110398): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8184 comm="syz.3.570" name="/" dev="devtmpfs" ino=1 [ 316.461220][ T29] audit: type=1400 audit(1735773703.741:110399): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8184 comm="syz.3.570" name="infiniband" dev="devtmpfs" ino=1270 [ 316.461252][ T29] audit: type=1400 audit(1735773703.741:110400): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=8184 comm="syz.3.570" name="rdma_cm" dev="devtmpfs" ino=1271 [ 316.461306][ T29] audit: type=1400 audit(1735773703.741:110401): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=8184 comm="syz.3.570" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 [ 316.461354][ T29] audit: type=1400 audit(1735773703.921:110402): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8184 comm="syz.3.570" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 316.461403][ T29] audit: type=1400 audit(1735773703.941:110403): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8182 comm="syz.1.571" name="newroot" dev="tmpfs" ino=2 [ 316.461435][ T29] audit: type=1400 audit(1735773703.941:110404): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8182 comm="syz.1.571" name="/" dev="devtmpfs" ino=1 [ 316.461482][ T29] audit: type=1400 audit(1735773703.941:110405): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8182 comm="syz.1.571" name="char" dev="devtmpfs" ino=1318 [ 316.664532][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 316.669740][ T5869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.669772][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.669798][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 316.669823][ T5869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.669859][ T5869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 316.669883][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.916748][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.019195][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.157075][ T8187] tty tty23: ldisc open failed (-12), clearing slot 22 [ 317.205242][ T5869] usb 5-1: usb_control_msg returned -71 [ 317.211017][ T5869] usbtmc 5-1:16.0: can't read capabilities [ 317.245583][ T5869] usb 5-1: USB disconnect, device number 6 [ 317.845316][ T8202] xt_SECMARK: unable to map security context 'unconfined' [ 318.309120][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.315539][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.003521][ T8205] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 320.494056][ T8225] random: crng reseeded on system resumption [ 320.785097][ T8205] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 321.003603][ T8230] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 321.464790][ T29] kauditd_printk_skb: 18981 callbacks suppressed [ 321.464803][ T29] audit: type=1400 audit(1735773709.501:114551): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5194 comm="udevd" name="/" dev="sda1" ino=2 [ 321.502457][ T8229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.509839][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.520154][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.526183][ T5194] audit: audit_lost=150684 audit_rate_limit=0 audit_backlog_limit=64 [ 321.526717][ C0] audit: audit_lost=150685 audit_rate_limit=0 audit_backlog_limit=64 [ 321.535439][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.542832][ C0] audit: backlog limit exceeded [ 321.549627][ T8229] audit: audit_lost=150686 audit_rate_limit=0 audit_backlog_limit=64 [ 321.556971][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 324.655345][ T5867] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 324.771466][ T8263] syz.3.591 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 325.515404][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 326.070700][ T5867] usb 5-1: device descriptor read/all, error -71 [ 326.858429][ T29] kauditd_printk_skb: 11985 callbacks suppressed [ 326.858473][ T29] audit: type=1400 audit(1735773714.321:117923): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8269 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 327.214690][ T29] audit: type=1400 audit(1735773714.321:117924): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8269 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 327.234310][ T29] audit: type=1400 audit(1735773714.321:117925): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8269 comm="syz-executor" name="123" dev="tmpfs" ino=659 [ 327.253559][ T29] audit: type=1400 audit(1735773714.321:117926): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=8269 comm="syz-executor" opid=8269 ocomm="syz-executor" [ 327.272434][ T29] audit: type=1400 audit(1735773714.321:117927): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8269 comm="syz-executor" name="123" dev="tmpfs" ino=659 [ 327.292276][ T29] audit: type=1400 audit(1735773714.321:117928): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8269 comm="syz-executor" name="123" dev="tmpfs" ino=659 [ 327.312211][ T29] audit: type=1400 audit(1735773714.321:117929): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=8269 comm="syz-executor" name="123" dev="tmpfs" ino=659 [ 327.332107][ T29] audit: type=1400 audit(1735773714.321:117930): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8269 comm="syz-executor" name="123" dev="tmpfs" ino=659 [ 327.351634][ T29] audit: type=1400 audit(1735773714.321:117931): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8269 comm="syz-executor" name="123" dev="tmpfs" ino=659 [ 327.664029][ T29] audit: type=1400 audit(1735773714.321:117932): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=8269 comm="syz-executor" name="123" dev="tmpfs" ino=659 [ 329.785836][ T8292] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 329.793851][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.599'. [ 331.905327][ C0] audit_log_start: 12561 callbacks suppressed [ 331.905350][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 331.918035][ C0] audit: audit_lost=157287 audit_rate_limit=0 audit_backlog_limit=64 [ 331.926142][ C0] audit: backlog limit exceeded [ 332.165921][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.172564][ T5176] audit: audit_lost=157288 audit_rate_limit=0 audit_backlog_limit=64 [ 332.180875][ T29] audit: type=1400 audit(1735773719.781:119379): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5816 comm="syz-executor" path="/124/cgroup" dev="tmpfs" ino=665 [ 332.218658][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.238569][ T5194] audit: audit_lost=157289 audit_rate_limit=0 audit_backlog_limit=64 [ 332.249152][ T8299] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.249521][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.544732][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 334.837602][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807db0d800: rx timeout, send abort [ 334.850523][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031373800: rx timeout, send abort [ 336.087943][ T8332] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 336.919020][ T29] kauditd_printk_skb: 9327 callbacks suppressed [ 336.919050][ T29] audit: type=1400 audit(1735773724.961:121105): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 336.926035][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.948759][ T5819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.961948][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.971371][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.971592][ T8337] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.978288][ T7147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.984721][ T5825] audit: audit_lost=159831 audit_rate_limit=0 audit_backlog_limit=64 [ 336.999526][ T5819] audit: audit_lost=159832 audit_rate_limit=0 audit_backlog_limit=64 [ 337.021968][ T7147] audit: audit_lost=159833 audit_rate_limit=0 audit_backlog_limit=64 [ 337.137714][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.610'. [ 337.147132][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.610'. [ 339.191067][ T8367] ip6t_REJECT: ECHOREPLY is not supported [ 342.041980][ T5194] audit_log_start: 13933 callbacks suppressed [ 342.041996][ T5194] audit: audit_backlog=66 > audit_backlog_limit=64 [ 342.042069][ T6207] audit: audit_backlog=66 > audit_backlog_limit=64 [ 342.048699][ T5176] audit: audit_backlog=66 > audit_backlog_limit=64 [ 342.065474][ T8389] audit: audit_backlog=66 > audit_backlog_limit=64 [ 342.068759][ T27] audit: audit_backlog=67 > audit_backlog_limit=64 [ 342.084628][ T5176] audit: audit_lost=163184 audit_rate_limit=0 audit_backlog_limit=64 [ 342.094341][ T5176] audit: backlog limit exceeded [ 342.101808][ T29] audit: type=1400 audit(1735773729.641:125014): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8385 comm="syz.0.624" opid=8385 ocomm="syz.0.624" [ 342.120534][ T6207] audit: audit_lost=163185 audit_rate_limit=0 audit_backlog_limit=64 [ 342.134964][ T5176] audit: audit_backlog=66 > audit_backlog_limit=64 [ 343.631155][ T8400] netlink: 'syz.2.628': attribute type 10 has an invalid length. [ 343.690572][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 343.720990][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.729895][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.743134][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.750411][ T8400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.757962][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.765266][ T8400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.073512][ T8400] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 344.092805][ T8406] bridge_slave_1: left allmulticast mode [ 344.135328][ T8406] bridge_slave_1: left promiscuous mode [ 344.142166][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.182691][ T8406] bridge_slave_0: left allmulticast mode [ 344.220212][ T8406] bridge_slave_0: left promiscuous mode [ 344.238028][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.332870][ T8406] bond0: (slave bridge0): Releasing backup interface [ 347.114775][ T29] kauditd_printk_skb: 3175 callbacks suppressed [ 347.114793][ T29] audit: type=1400 audit(1735773735.151:126723): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5828 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 347.154187][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.165364][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.195781][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.202586][ T5828] audit: audit_lost=163677 audit_rate_limit=0 audit_backlog_limit=64 [ 347.213802][ T5176] audit: audit_lost=163678 audit_rate_limit=0 audit_backlog_limit=64 [ 347.229193][ T5827] audit: audit_lost=163679 audit_rate_limit=0 audit_backlog_limit=64 [ 347.243655][ T8432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.254672][ T5176] audit: backlog limit exceeded [ 347.259576][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 351.610390][ T8471] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 352.355477][ T29] kauditd_printk_skb: 3380 callbacks suppressed [ 352.355519][ T29] audit: type=1400 audit(1735773740.381:128215): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8470 comm="syz-executor" name="113" dev="tmpfs" ino=642 [ 352.372395][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 352.388964][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 352.389003][ C0] audit: audit_lost=164314 audit_rate_limit=0 audit_backlog_limit=64 [ 352.389034][ C0] audit: backlog limit exceeded [ 352.390555][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 352.390571][ C0] audit: audit_lost=164315 audit_rate_limit=0 audit_backlog_limit=64 [ 352.390586][ C0] audit: backlog limit exceeded [ 352.390744][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 352.390759][ C0] audit: audit_lost=164316 audit_rate_limit=0 audit_backlog_limit=64 [ 357.485502][ T29] kauditd_printk_skb: 1364 callbacks suppressed [ 357.485556][ T29] audit: type=1400 audit(1735773745.491:129400): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 357.713642][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 357.720420][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 357.727414][ T5827] audit: audit_lost=164377 audit_rate_limit=0 audit_backlog_limit=64 [ 357.735762][ T5828] audit: audit_lost=164378 audit_rate_limit=0 audit_backlog_limit=64 [ 357.743858][ T5827] audit: backlog limit exceeded [ 357.749829][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 357.756480][ T5827] audit: audit_lost=164379 audit_rate_limit=0 audit_backlog_limit=64 [ 357.760160][ T29] audit: type=1400 audit(1735773745.591:129401): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 357.764598][ T5827] audit: backlog limit exceeded [ 362.766026][ T29] kauditd_printk_skb: 1663 callbacks suppressed [ 362.766048][ T29] audit: type=1400 audit(1735773750.001:130239): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8547 comm="syz.1.666" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 362.824737][ T29] audit: type=1400 audit(1735773750.251:130240): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8540 comm="syz.4.665" name="newroot" dev="tmpfs" ino=2 [ 362.845359][ T29] audit: type=1400 audit(1735773750.251:130241): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8540 comm="syz.4.665" name="/" dev="proc" ino=1 [ 362.865460][ T29] audit: type=1400 audit(1735773750.251:130242): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8540 comm="syz.4.665" name="/" dev="proc" ino=1 [ 363.310821][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 363.319647][ T29] audit: type=1400 audit(1735773750.251:130243): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8540 comm="syz.4.665" name="492" dev="proc" ino=21677 [ 363.319857][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 363.355094][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 363.359920][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 363.362293][ T8539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 363.368173][ C0] audit: audit_lost=164655 audit_rate_limit=0 audit_backlog_limit=64 [ 363.596835][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.607743][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.689331][ T8574] Process accounting resumed [ 364.576691][ T5869] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 364.586110][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.594145][ T5869] usb 1-1: SerialNumber: syz [ 364.902983][ T5869] usb 1-1: can't set config #1, error -71 [ 364.910269][ T5869] usb 1-1: USB disconnect, device number 3 [ 366.006494][ T8586] input: syz0 as /devices/virtual/input/input6 [ 367.419228][ T8604] capability: warning: `syz.1.683' uses 32-bit capabilities (legacy support in use) [ 368.480833][ T29] kauditd_printk_skb: 2496 callbacks suppressed [ 368.480852][ T29] audit: type=1400 audit(1735773756.011:132127): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8603 comm="syz.1.683" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 368.519481][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 368.526202][ T5827] audit: audit_lost=164861 audit_rate_limit=0 audit_backlog_limit=64 [ 368.534591][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 368.541181][ T5827] audit: backlog limit exceeded [ 368.543494][ T29] audit: type=1400 audit(1735773756.381:132128): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8606 comm="syz.2.684" opid=8606 ocomm="syz.2.684" [ 368.546303][ T5176] audit: audit_lost=164862 audit_rate_limit=0 audit_backlog_limit=64 [ 368.571159][ T29] audit: type=1400 audit(1735773756.481:132129): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8606 comm="syz.2.684" opid=8606 ocomm="syz.2.684" [ 368.574127][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 368.598138][ C0] audit: audit_lost=164863 audit_rate_limit=0 audit_backlog_limit=64 [ 369.129191][ T5870] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 369.203269][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.210652][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.298092][ T5870] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 369.327359][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.357935][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.424660][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.477772][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.488842][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.547645][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.620878][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.635938][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.674907][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 370.680575][ T8605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.717641][ T5870] usb 5-1: unable to read config index 3 descriptor/all [ 370.725093][ T5870] usb 5-1: can't read configurations, error -71 [ 371.822610][ T8605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.745221][ T8645] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 372.753254][ T8645] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 372.762146][ T8645] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 372.771019][ T8645] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 372.876633][ T8639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.992561][ T8605] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.030062][ T8605] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.054784][ T8605] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.071907][ T8605] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.592092][ T29] kauditd_printk_skb: 2364 callbacks suppressed [ 373.592113][ T29] audit: type=1400 audit(1735773761.521:133693): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 374.044800][ T29] audit: type=1400 audit(1735773761.671:133694): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8649 comm="syz.4.695" opid=8649 ocomm="syz.4.695" [ 374.064803][ T29] audit: type=1400 audit(1735773761.671:133695): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8649 comm="syz.4.695" opid=8649 ocomm="syz.4.695" [ 374.083911][ T29] audit: type=1400 audit(1735773761.671:133696): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8649 comm="syz.4.695" opid=8649 ocomm="syz.4.695" [ 374.144938][ T8656] audit: audit_backlog=65 > audit_backlog_limit=64 [ 374.151818][ T8656] audit: audit_lost=165133 audit_rate_limit=0 audit_backlog_limit=64 [ 374.176255][ T8655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 374.182801][ T8655] audit: audit_lost=165134 audit_rate_limit=0 audit_backlog_limit=64 [ 374.201252][ T8656] audit: backlog limit exceeded [ 374.221567][ T8655] audit: backlog limit exceeded [ 374.824366][ T8658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.898541][ T8658] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 374.971897][ T8658] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 379.131618][ T5816] audit_log_start: 2732 callbacks suppressed [ 379.131631][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.145507][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.152039][ C0] audit: audit_lost=165616 audit_rate_limit=0 audit_backlog_limit=64 [ 379.160114][ C0] audit: backlog limit exceeded [ 379.165770][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.172295][ C0] audit: audit_lost=165617 audit_rate_limit=0 audit_backlog_limit=64 [ 379.180368][ C0] audit: backlog limit exceeded [ 379.185760][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.192262][ C0] audit: audit_lost=165618 audit_rate_limit=0 audit_backlog_limit=64 [ 379.200369][ C0] audit: backlog limit exceeded [ 379.992712][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.004561][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.112959][ T8712] ALSA: mixer_oss: invalid OSS volume '' [ 384.401039][ T5827] audit_log_start: 898 callbacks suppressed [ 384.401056][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.414230][ T5827] audit: audit_lost=165733 audit_rate_limit=0 audit_backlog_limit=64 [ 384.434469][ T5827] audit: backlog limit exceeded [ 384.439463][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.451596][ T5827] audit: audit_lost=165734 audit_rate_limit=0 audit_backlog_limit=64 [ 384.459805][ T29] audit: type=1400 audit(1735773772.031:135557): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8717 comm="syz.4.712" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 384.491898][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.498726][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.505308][ C0] audit: audit_lost=165735 audit_rate_limit=0 audit_backlog_limit=64 [ 384.513388][ C0] audit: backlog limit exceeded [ 386.409156][ T8741] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 388.800168][ T8762] gfs2: not a GFS2 filesystem [ 389.170922][ T8758] smc: net device bond0 applied user defined pnetid SYZ0 [ 389.208813][ T8758] netlink: 116 bytes leftover after parsing attributes in process `syz.4.723'. [ 389.270438][ T8758] smc: net device bond0 erased user defined pnetid SYZ0 [ 389.409938][ T8766] audit_log_start: 1991 callbacks suppressed [ 389.409954][ T8766] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.412933][ T8767] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.416039][ T8766] audit: audit_lost=165810 audit_rate_limit=0 audit_backlog_limit=64 [ 389.416054][ T8766] audit: backlog limit exceeded [ 389.416076][ T8766] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.416087][ T8766] audit: audit_lost=165811 audit_rate_limit=0 audit_backlog_limit=64 [ 389.416099][ T8766] audit: backlog limit exceeded [ 389.416171][ T8766] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.416183][ T8766] audit: audit_lost=165812 audit_rate_limit=0 audit_backlog_limit=64 [ 389.426195][ T8765] audit: audit_backlog=65 > audit_backlog_limit=64 [ 390.376771][ T5133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 390.478921][ T5133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 390.548461][ T5133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 390.574068][ T5133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 390.589507][ T5133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 390.599916][ T5133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.195644][ T8777] chnl_net:caif_netlink_parms(): no params data found [ 393.263477][ T5133] Bluetooth: hci5: command tx timeout [ 394.507027][ T29] kauditd_printk_skb: 3104 callbacks suppressed [ 394.507046][ T29] audit: type=1400 audit(2000000008.580:138881): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 394.680088][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.692215][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.704013][ T5176] audit: audit_lost=166330 audit_rate_limit=0 audit_backlog_limit=64 [ 394.713092][ T29] audit: type=1400 audit(2000000008.630:138882): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5816 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 394.713898][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.739054][ C0] audit: audit_lost=166331 audit_rate_limit=0 audit_backlog_limit=64 [ 394.747277][ C0] audit: backlog limit exceeded [ 394.752997][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.759657][ C0] audit: audit_lost=166332 audit_rate_limit=0 audit_backlog_limit=64 [ 395.746352][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.773105][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.774778][ T5133] Bluetooth: hci5: command tx timeout [ 395.787401][ T8777] bridge_slave_0: entered allmulticast mode [ 395.796644][ T8777] bridge_slave_0: entered promiscuous mode [ 395.818465][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.843037][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.894808][ T8777] bridge_slave_1: entered allmulticast mode [ 395.916770][ T8777] bridge_slave_1: entered promiscuous mode [ 396.068726][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.081703][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.233294][ T8777] team0: Port device team_slave_0 added [ 397.227253][ T8777] team0: Port device team_slave_1 added [ 397.481538][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.526259][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.649517][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.671434][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.680740][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.713962][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.824031][ T5133] Bluetooth: hci5: command tx timeout [ 398.293334][ T8777] hsr_slave_0: entered promiscuous mode [ 398.531607][ T8777] hsr_slave_1: entered promiscuous mode [ 398.626979][ T8777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.654544][ T8777] Cannot create hsr debugfs directory [ 398.992912][ T8864] xt_HMARK: spi-set and port-set can't be combined [ 399.630054][ T5828] audit_log_start: 1801 callbacks suppressed [ 399.630072][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.644902][ T29] audit: type=1400 audit(2000000013.580:140059): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8855 comm="syz.0.746" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 399.675144][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.681690][ T5176] audit: audit_lost=166542 audit_rate_limit=0 audit_backlog_limit=64 [ 399.701541][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.708149][ C0] audit: audit_lost=166543 audit_rate_limit=0 audit_backlog_limit=64 [ 399.716298][ C0] audit: backlog limit exceeded [ 399.721432][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.723166][ T5176] audit: backlog limit exceeded [ 399.727991][ C0] audit: audit_lost=166544 audit_rate_limit=0 audit_backlog_limit=64 [ 399.914793][ T5133] Bluetooth: hci5: command tx timeout [ 400.426299][ T8874] netlink: 'syz.0.749': attribute type 10 has an invalid length. [ 401.020799][ T8874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.032696][ T8874] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 401.041977][ T8874] syz.0.749 (8874) used greatest stack depth: 16688 bytes left [ 402.529498][ T8777] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 403.050601][ T8777] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 403.207182][ T8777] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 403.235654][ T8777] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 404.248215][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.518436][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.553689][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.562112][ T8066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.245229][ T29] kauditd_printk_skb: 2834 callbacks suppressed [ 405.245250][ T29] audit: type=1400 audit(2000000018.690:141442): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8902 comm="syz.1.759" opid=8902 ocomm="syz.1.759" [ 405.334396][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 405.335289][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.348934][ T8066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.356412][ T5827] audit: audit_lost=167029 audit_rate_limit=0 audit_backlog_limit=64 [ 405.365132][ T5827] audit: backlog limit exceeded [ 405.370193][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 405.370216][ C0] audit: audit_lost=167030 audit_rate_limit=0 audit_backlog_limit=64 [ 405.370233][ C0] audit: backlog limit exceeded [ 405.370492][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 405.370516][ C0] audit: audit_lost=167031 audit_rate_limit=0 audit_backlog_limit=64 [ 405.370531][ C0] audit: backlog limit exceeded [ 405.913249][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.903113][ T8942] tipc: Started in network mode [ 407.908863][ T8942] tipc: Node identity fe80000000000000000000000000000f, cluster identity 4711 [ 407.924496][ T8942] tipc: Enabling of bearer rejected, failed to enable media [ 408.569023][ T8777] veth0_vlan: entered promiscuous mode [ 408.589777][ T8777] veth1_vlan: entered promiscuous mode [ 408.693589][ T8777] veth0_macvtap: entered promiscuous mode [ 408.757045][ T8777] veth1_macvtap: entered promiscuous mode [ 408.819822][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.830601][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.840720][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.851472][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.861626][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.872337][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.882550][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.893333][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.911610][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.935785][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.946677][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.956781][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.967379][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.977481][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.988113][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.998207][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.009324][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.024198][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.050200][ T8777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.059300][ T8777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.068291][ T8777] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.077343][ T8777] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.448660][ T8066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.462807][ T8066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.504539][ T51] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 409.540854][ T8052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.575181][ T8052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.666798][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 409.697524][ T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.723940][ T51] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.747441][ T51] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 409.771588][ T51] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 409.795086][ T51] usb 2-1: Product: syz [ 409.799482][ T51] usb 2-1: Manufacturer: syz [ 409.814587][ T51] usb 2-1: SerialNumber: syz [ 409.827061][ T51] usb 2-1: config 0 descriptor?? [ 410.076003][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.094879][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.118355][ T51] usb 2-1: USB disconnect, device number 5 [ 410.530798][ T29] kauditd_printk_skb: 6242 callbacks suppressed [ 410.530815][ T29] audit: type=1400 audit(2000000024.600:145105): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8968 comm="syz.0.774" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 410.835294][ T29] audit: type=1400 audit(2000000024.900:145106): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 410.859207][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 410.895125][ T5827] audit: audit_lost=167892 audit_rate_limit=0 audit_backlog_limit=64 [ 410.897980][ T29] audit: type=1400 audit(2000000024.900:145107): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 410.903225][ T5827] audit: backlog limit exceeded [ 410.903334][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 410.954689][ T29] audit: type=1400 audit(2000000024.900:145108): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 410.983936][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 411.000883][ T5827] audit: audit_lost=167893 audit_rate_limit=0 audit_backlog_limit=64 [ 415.543213][ T29] kauditd_printk_skb: 1205 callbacks suppressed [ 415.543233][ T29] audit: type=1400 audit(2000000029.590:145946): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=8777 comm="syz-executor" opid=8983 ocomm="syz.5.777" [ 415.567797][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.579844][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 415.587336][ T8777] audit: audit_backlog=65 > audit_backlog_limit=64 [ 415.593885][ T8777] audit: audit_lost=168017 audit_rate_limit=0 audit_backlog_limit=64 [ 415.604599][ T5827] audit: audit_lost=168018 audit_rate_limit=0 audit_backlog_limit=64 [ 415.612674][ T5827] audit: backlog limit exceeded [ 415.615021][ T9001] audit: audit_backlog=66 > audit_backlog_limit=64 [ 415.617732][ T5827] audit: audit_backlog=66 > audit_backlog_limit=64 [ 415.617750][ T5827] audit: audit_lost=168019 audit_rate_limit=0 audit_backlog_limit=64 [ 415.617765][ T5827] audit: backlog limit exceeded [ 419.611961][ T9010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.554045][ T29] kauditd_printk_skb: 1436 callbacks suppressed [ 420.554075][ T29] audit: type=1400 audit(2000000034.620:146692): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8066 comm="kworker/u8:16" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 420.824630][ T29] audit: type=1400 audit(2000000034.670:146693): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9018 comm="syz.5.789" opid=9018 ocomm="syz.5.789" [ 420.889730][ T29] audit: type=1400 audit(2000000034.690:146694): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=9020 comm="syz.4.790" dev="cgroup2" ino=2 [ 420.908617][ T29] audit: type=1400 audit(2000000034.690:146695): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=9020 comm="syz.4.790" dev="cgroup2" ino=2 [ 420.926618][ T29] audit: type=1400 audit(2000000034.720:146696): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9020 comm="syz.4.790" name="newroot" dev="tmpfs" ino=2 [ 420.945878][ T29] audit: type=1400 audit(2000000034.720:146697): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9020 comm="syz.4.790" name="/" dev="devtmpfs" ino=1 [ 420.964810][ T29] audit: type=1400 audit(2000000034.720:146698): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=9020 comm="syz.4.790" name="ptmx" dev="devtmpfs" ino=615 [ 420.984459][ T29] audit: type=1400 audit(2000000034.720:146699): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9020 comm="syz.4.790" path="/dev/ptmx" dev="devtmpfs" ino=615 [ 421.004604][ T29] audit: type=1400 audit(2000000034.730:146700): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9020 comm="syz.4.790" name="newroot" dev="tmpfs" ino=2 [ 421.023895][ T29] audit: type=1400 audit(2000000034.730:146701): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9020 comm="syz.4.790" name="/" dev="devtmpfs" ino=1 [ 423.864973][ T5866] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 424.774522][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 424.785208][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.796582][ T5866] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.806376][ T5866] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 424.815760][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.893021][ T5866] usb 1-1: config 0 descriptor?? [ 425.963727][ T29] kauditd_printk_skb: 2766 callbacks suppressed [ 425.963755][ T29] audit: type=1400 audit(2000000039.240:148026): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9056 comm="syz.1.799" name="174" dev="tmpfs" ino=974 [ 425.994790][ T29] audit: type=1400 audit(2000000039.240:148027): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9056 comm="syz.1.799" name="174" dev="tmpfs" ino=974 [ 426.012668][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 426.013834][ T29] audit: type=1400 audit(2000000039.240:148028): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9056 comm="syz.1.799" path="/174/memory.swap.events" dev="tmpfs" ino=979 [ 426.029857][ T5176] audit: audit_lost=168731 audit_rate_limit=0 audit_backlog_limit=64 [ 426.040415][ T29] audit: type=1400 audit(2000000039.250:148029): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9056 comm="syz.1.799" name="newroot" dev="tmpfs" ino=2 [ 426.040455][ T29] audit: type=1400 audit(2000000039.250:148030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9056 comm="syz.1.799" name="/" dev="devtmpfs" ino=1 [ 426.040486][ T29] audit: type=1400 audit(2000000039.250:148031): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=9056 comm="syz.1.799" name="nullb0" dev="devtmpfs" ino=696 [ 426.106872][ T5176] audit: backlog limit exceeded [ 426.112167][ T29] audit: type=1400 audit(2000000039.250:148032): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9056 comm="syz.1.799" path="/dev/nullb0" dev="devtmpfs" ino=696 [ 427.661563][ T9072] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 427.812163][ T51] usb 1-1: USB disconnect, device number 5 [ 430.965203][ T29] kauditd_printk_skb: 1430 callbacks suppressed [ 430.965256][ T29] audit: type=1400 audit(2000000045.040:149076): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5828 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 431.207614][ T9095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 431.209342][ T8777] audit: audit_backlog=66 > audit_backlog_limit=64 [ 431.214258][ T9095] audit: audit_lost=168861 audit_rate_limit=0 audit_backlog_limit=64 [ 431.224222][ T9084] audit: audit_backlog=66 > audit_backlog_limit=64 [ 431.229255][ T9098] audit: audit_backlog=66 > audit_backlog_limit=64 [ 431.242994][ T9098] audit: audit_lost=168862 audit_rate_limit=0 audit_backlog_limit=64 [ 431.251410][ T9098] audit: backlog limit exceeded [ 431.264840][ T51] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 431.272798][ T9098] audit: audit_backlog=66 > audit_backlog_limit=64 [ 431.279355][ T9098] audit: audit_lost=168863 audit_rate_limit=0 audit_backlog_limit=64 [ 431.854669][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 431.867519][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.889697][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.930714][ T51] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.983476][ T51] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 431.992774][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.001637][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.812'. [ 432.014342][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 432.030459][ T51] usb 1-1: config 0 descriptor?? [ 432.041138][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.812'. [ 432.041252][ T51] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 432.143509][ T5179] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.226987][ T5179] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.245879][ T5179] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.287919][ T5179] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.375212][ T9095] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.423802][ T51] usb 1-1: USB disconnect, device number 6 [ 436.089397][ T29] kauditd_printk_skb: 1872 callbacks suppressed [ 436.089459][ T29] audit: type=1400 audit(2000000050.150:150493): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9120 comm="syz.1.816" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 436.139005][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 436.146786][ T5828] audit: audit_lost=169016 audit_rate_limit=0 audit_backlog_limit=64 [ 436.150945][ T29] audit: type=1400 audit(2000000050.170:150494): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="sda1" ino=2 [ 436.155557][ T5828] audit: backlog limit exceeded [ 436.173651][ T29] audit: type=1400 audit(2000000050.170:150495): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="var" dev="sda1" ino=1906 [ 436.173695][ T29] audit: type=1400 audit(2000000050.170:150496): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="var" dev="sda1" ino=1906 [ 436.173726][ T29] audit: type=1400 audit(2000000050.170:150497): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="sda1" ino=2 [ 436.173757][ T29] audit: type=1400 audit(2000000050.170:150498): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 [ 436.173790][ T29] audit: type=1400 audit(2000000050.170:150499): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wa pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 [ 437.260339][ T5866] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 437.308006][ T9152] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 437.374218][ T9154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.822'. [ 437.532769][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.860604][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.880867][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 437.899622][ T5866] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 437.909310][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.940005][ T5866] usb 6-1: config 0 descriptor?? [ 439.044786][ T9161] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 439.167724][ T5866] usbhid 6-1:0.0: can't add hid device: -71 [ 439.204617][ T5866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 439.233305][ T5866] usb 6-1: USB disconnect, device number 2 [ 440.504959][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.511367][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.067185][ T29] kauditd_printk_skb: 2414 callbacks suppressed [ 443.067304][ T29] audit: type=1400 audit(2000000055.160:151712): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9180 comm="syz.0.831" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 443.253105][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 443.259868][ T5827] audit: audit_lost=169426 audit_rate_limit=0 audit_backlog_limit=64 [ 443.475094][ T9186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 443.481680][ T9186] audit: audit_lost=169427 audit_rate_limit=0 audit_backlog_limit=64 [ 443.490020][ T9186] audit: backlog limit exceeded [ 443.494968][ T9186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 443.501539][ T9186] audit: audit_lost=169428 audit_rate_limit=0 audit_backlog_limit=64 [ 443.509670][ T9186] audit: backlog limit exceeded [ 443.514854][ T9186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 444.944873][ T9209] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 448.140701][ T29] kauditd_printk_skb: 1768 callbacks suppressed [ 448.140719][ T29] audit: type=1400 audit(2000000061.980:152638): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9219 comm="syz.4.844" opid=9219 ocomm="syz.4.844" [ 448.166679][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 448.175044][ T29] audit: type=1400 audit(2000000062.170:152639): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9217 comm="syz.0.842" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 448.198140][ T5176] audit: audit_lost=169710 audit_rate_limit=0 audit_backlog_limit=64 [ 448.201882][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 448.212856][ C0] audit: audit_lost=169711 audit_rate_limit=0 audit_backlog_limit=64 [ 448.214548][ T5176] audit: backlog limit exceeded [ 448.221146][ C0] audit: backlog limit exceeded [ 448.224640][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 448.227219][ T9226] audit: audit_backlog=65 > audit_backlog_limit=64 [ 448.966507][ T9231] can0: slcan on ttyS3. [ 449.635981][ T9231] can0 (unregistered): slcan off ttyS3. [ 449.781052][ T9238] fuse: Unknown parameter 'group_i00000000000000000000' [ 450.641649][ T9248] xt_hashlimit: max too large, truncated to 1048576 [ 450.648851][ T9248] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 453.201218][ T9271] audit_log_start: 1910 callbacks suppressed [ 453.201237][ T9271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 453.214245][ T9271] audit: audit_lost=169954 audit_rate_limit=0 audit_backlog_limit=64 [ 453.222617][ T9271] audit: backlog limit exceeded [ 453.228263][ T9254] audit: audit_backlog=65 > audit_backlog_limit=64 [ 453.234918][ T9254] audit: audit_lost=169955 audit_rate_limit=0 audit_backlog_limit=64 [ 453.243053][ T9254] audit: backlog limit exceeded [ 453.248159][ T9254] audit: audit_backlog=65 > audit_backlog_limit=64 [ 453.255026][ T9254] audit: audit_lost=169956 audit_rate_limit=0 audit_backlog_limit=64 [ 453.263145][ T9254] audit: backlog limit exceeded [ 453.268409][ T9254] audit: audit_backlog=65 > audit_backlog_limit=64 [ 455.404661][ T9282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.798970][ T9288] batadv1: entered promiscuous mode [ 456.806020][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 456.917008][ T9301] fuse: Bad value for 'fd' [ 457.717720][ T9303] atomic_op ffff888029cdd998 conn xmit_atomic 0000000000000000 [ 458.520461][ T9307] audit_log_start: 1757 callbacks suppressed [ 458.520479][ T9307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 458.533532][ T9307] audit: audit_lost=170224 audit_rate_limit=0 audit_backlog_limit=64 [ 458.536747][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 458.541767][ T9307] audit: backlog limit exceeded [ 458.548600][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 458.553270][ T9307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 458.566493][ T9307] audit: audit_lost=170225 audit_rate_limit=0 audit_backlog_limit=64 [ 458.574708][ T9307] audit: backlog limit exceeded [ 458.580007][ T9307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 458.586531][ T29] audit: type=1400 audit(2000000072.210:154783): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9302 comm="syz.1.865" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 462.520998][ T9323] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 462.547555][ T9323] CIFS mount error: No usable UNC path provided in device string! [ 462.547555][ T9323] [ 462.557881][ T9323] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 462.794985][ T9344] netlink: 108 bytes leftover after parsing attributes in process `syz.0.876'. [ 462.804549][ T9344] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 462.812557][ T9344] netlink: 52 bytes leftover after parsing attributes in process `syz.0.876'. [ 463.847984][ T8777] audit_log_start: 2047 callbacks suppressed [ 463.848014][ T8777] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.857833][ T29] audit: type=1400 audit(2000000076.950:155523): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9337 comm="syz.5.874" name="20" dev="tmpfs" ino=119 [ 463.903337][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.910138][ C0] audit: audit_lost=170663 audit_rate_limit=0 audit_backlog_limit=64 [ 463.918325][ T29] audit: type=1400 audit(2000000076.950:155524): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9337 comm="syz.5.874" name="20" dev="tmpfs" ino=119 [ 463.937059][ C0] audit: backlog limit exceeded [ 463.937799][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.948758][ C0] audit: audit_lost=170664 audit_rate_limit=0 audit_backlog_limit=64 [ 463.957009][ C0] audit: backlog limit exceeded [ 463.962307][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.813213][ T9331] delete_channel: no stack [ 468.983085][ T29] kauditd_printk_skb: 3689 callbacks suppressed [ 468.983105][ T29] audit: type=1400 audit(2000000083.050:157201): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9400 comm="syz.4.890" opid=9400 ocomm="syz.4.890" [ 469.031644][ T29] audit: type=1400 audit(2000000083.100:157202): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9402 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 469.094079][ T9404] bond0: option all_slaves_active: invalid value (9) [ 469.840719][ T29] audit: type=1400 audit(2000000083.100:157203): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9402 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 469.864128][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 469.870875][ T9405] audit: audit_backlog=65 > audit_backlog_limit=64 [ 469.895155][ T5817] audit: audit_lost=171343 audit_rate_limit=0 audit_backlog_limit=64 [ 469.895239][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 469.895251][ C0] audit: audit_lost=171344 audit_rate_limit=0 audit_backlog_limit=64 [ 469.895260][ C0] audit: backlog limit exceeded [ 469.903659][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.451117][ T9419] block device autoloading is deprecated and will be removed. [ 471.463996][ T9419] syz.4.892: attempt to access beyond end of device [ 471.463996][ T9419] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 473.444596][ T9431] fuse: Unknown parameter 'd' [ 473.580821][ T9440] 9pnet_virtio: no channels available for device syz [ 474.088567][ T29] kauditd_printk_skb: 1994 callbacks suppressed [ 474.088584][ T29] audit: type=1400 audit(2000000088.160:158710): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9444 comm="syz.0.901" opid=9444 ocomm="syz.0.901" [ 474.181337][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 474.188179][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 474.194773][ C0] audit: audit_lost=171508 audit_rate_limit=0 audit_backlog_limit=64 [ 474.202856][ C0] audit: backlog limit exceeded [ 474.334667][ T5827] audit: audit_lost=171509 audit_rate_limit=0 audit_backlog_limit=64 [ 474.474597][ T29] audit: type=1400 audit(2000000088.190:158711): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="sda1" ino=2 [ 474.474780][ T9448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 474.510962][ T29] audit: type=1400 audit(2000000088.190:158712): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="var" dev="sda1" ino=1906 [ 474.530527][ T29] audit: type=1400 audit(2000000088.190:158713): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="var" dev="sda1" ino=1906 [ 474.793634][ T9452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.272402][ T9455] tipc: Started in network mode [ 475.277667][ T9455] tipc: Node identity fe80000000000000000000000000000f, cluster identity 4711 [ 475.292002][ T9455] tipc: Enabling of bearer rejected, failed to enable media [ 476.648825][ T9457] affs: No valid root block on device nbd4 [ 476.727086][ T9468] ax25_connect(): syz.5.907 uses autobind, please contact jreuter@yaina.de [ 477.325712][ T9473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.907'. [ 477.341600][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 477.350597][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.907'. [ 479.265938][ T29] kauditd_printk_skb: 1765 callbacks suppressed [ 479.265961][ T29] audit: type=1400 audit(2000000092.700:159997): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9474 comm="syz.5.910" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 479.442422][ T9480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.633687][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.640299][ C0] audit: audit_lost=171671 audit_rate_limit=0 audit_backlog_limit=64 [ 479.648450][ C0] audit: backlog limit exceeded [ 479.705132][ T9484] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.711693][ T9484] audit: audit_lost=171672 audit_rate_limit=0 audit_backlog_limit=64 [ 479.728769][ T29] audit: type=1400 audit(2000000093.200:159998): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9474 comm="syz.5.910" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 479.873945][ T9487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.880820][ T9487] audit: audit_lost=171673 audit_rate_limit=0 audit_backlog_limit=64 [ 484.959112][ T29] kauditd_printk_skb: 1479 callbacks suppressed [ 484.959132][ T29] audit: type=1400 audit(2000000098.210:160616): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9510 comm="syz.1.920" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 485.019344][ T29] audit: type=1400 audit(2000000098.710:160617): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9510 comm="syz.1.920" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 485.480113][ T9518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.486925][ T9518] audit: audit_lost=171961 audit_rate_limit=0 audit_backlog_limit=64 [ 485.495116][ T9518] audit: backlog limit exceeded [ 485.500404][ T9518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.507069][ T9518] audit: audit_lost=171962 audit_rate_limit=0 audit_backlog_limit=64 [ 485.515849][ T9518] audit: backlog limit exceeded [ 485.523835][ T9518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.530505][ T9518] audit: audit_lost=171963 audit_rate_limit=0 audit_backlog_limit=64 [ 489.820142][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.929'. [ 489.864665][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.929'. [ 489.873707][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.929'. [ 490.842264][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.929'. [ 490.888162][ T29] kauditd_printk_skb: 3354 callbacks suppressed [ 490.888185][ T29] audit: type=1400 audit(2000000104.300:161988): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9553 comm="syz.5.928" name="27" dev="tmpfs" ino=156 [ 490.932513][ T29] audit: type=1400 audit(2000000104.300:161989): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9553 comm="syz.5.928" name="27" dev="tmpfs" ino=156 [ 491.544605][ T9563] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.551160][ T9563] audit: audit_lost=172625 audit_rate_limit=0 audit_backlog_limit=64 [ 491.560155][ T9563] audit: backlog limit exceeded [ 491.565331][ T9563] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.571851][ T9563] audit: audit_lost=172626 audit_rate_limit=0 audit_backlog_limit=64 [ 491.579983][ T9563] audit: backlog limit exceeded [ 491.651493][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.658270][ C0] audit: audit_lost=172627 audit_rate_limit=0 audit_backlog_limit=64 [ 493.327459][ T9581] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 493.336785][ T9581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'. [ 493.355026][ T9581] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 493.364030][ T9581] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 495.004151][ T9594] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 495.012060][ T9594] netlink: 224 bytes leftover after parsing attributes in process `syz.3.937'. [ 495.939988][ T29] kauditd_printk_skb: 1841 callbacks suppressed [ 495.940032][ T29] audit: type=1400 audit(2000000110.010:163161): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9599 comm="syz-executor" name="29" dev="tmpfs" ino=169 [ 496.623469][ T29] audit: type=1400 audit(2000000110.040:163162): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="sda1" ino=2 [ 496.714728][ T29] audit: type=1400 audit(2000000110.040:163163): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="var" dev="sda1" ino=1906 [ 496.927713][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.934355][ T5827] audit: audit_lost=172851 audit_rate_limit=0 audit_backlog_limit=64 [ 497.158869][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.165488][ C0] audit: audit_lost=172852 audit_rate_limit=0 audit_backlog_limit=64 [ 497.173571][ C0] audit: backlog limit exceeded [ 497.413763][ T9607] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.420474][ T9607] audit: audit_lost=172853 audit_rate_limit=0 audit_backlog_limit=64 [ 497.975721][ T9607] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 497.982760][ T9607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 497.991859][ T9607] vhci_hcd vhci_hcd.0: Device attached [ 498.011928][ T9608] vhci_hcd: connection closed [ 498.278650][ T35] vhci_hcd: stop threads [ 498.321788][ T35] vhci_hcd: release socket [ 498.354544][ T35] vhci_hcd: disconnect device [ 498.775677][ T9613] netlink: 'syz.1.944': attribute type 6 has an invalid length. [ 498.794027][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.944'. [ 498.812719][ T5866] vhci_hcd: vhci_device speed not set [ 501.022103][ T29] kauditd_printk_skb: 1402 callbacks suppressed [ 501.022124][ T29] audit: type=1400 audit(2000000115.090:163940): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9634 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 501.033680][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.054536][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.054560][ C0] audit: audit_lost=173062 audit_rate_limit=0 audit_backlog_limit=64 [ 501.054577][ C0] audit: backlog limit exceeded [ 501.061664][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.061688][ C0] audit: audit_lost=173063 audit_rate_limit=0 audit_backlog_limit=64 [ 501.061705][ C0] audit: backlog limit exceeded [ 501.061903][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.061926][ C0] audit: audit_lost=173064 audit_rate_limit=0 audit_backlog_limit=64 [ 502.691786][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.698264][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.262466][ T9654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.170240][ T29] kauditd_printk_skb: 2179 callbacks suppressed [ 506.170260][ T29] audit: type=1400 audit(2000000120.240:164964): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 506.210460][ T29] audit: type=1400 audit(2000000120.270:164965): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="sda1" ino=2 [ 506.241034][ T29] audit: type=1400 audit(2000000120.270:164966): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="var" dev="sda1" ino=1906 [ 506.272610][ T29] audit: type=1400 audit(2000000120.270:164967): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="var" dev="sda1" ino=1906 [ 506.302038][ T29] audit: type=1400 audit(2000000120.270:164968): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="sda1" ino=2 [ 506.329938][ T29] audit: type=1400 audit(2000000120.270:164969): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 [ 506.360597][ T29] audit: type=1400 audit(2000000120.270:164970): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wa pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 [ 506.391031][ T29] audit: type=1400 audit(2000000120.270:164971): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 [ 506.420071][ T29] audit: type=1400 audit(2000000120.270:164972): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 [ 506.480657][ T29] audit: type=1400 audit(2000000120.550:164973): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 511.176056][ C0] audit_log_start: 4231 callbacks suppressed [ 511.176080][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 511.188675][ C0] audit: audit_lost=174450 audit_rate_limit=0 audit_backlog_limit=64 [ 511.196788][ C0] audit: backlog limit exceeded [ 511.363057][ T9708] audit: audit_backlog=65 > audit_backlog_limit=64 [ 511.369689][ T9708] audit: audit_lost=174451 audit_rate_limit=0 audit_backlog_limit=64 [ 511.377849][ T9708] audit: backlog limit exceeded [ 511.382737][ T9708] audit: audit_backlog=65 > audit_backlog_limit=64 [ 511.389310][ T9708] audit: audit_lost=174452 audit_rate_limit=0 audit_backlog_limit=64 [ 511.397449][ T9708] audit: backlog limit exceeded [ 511.402336][ T9708] audit: audit_backlog=65 > audit_backlog_limit=64 [ 512.981581][ T9726] x_tables: unsorted underflow at hook 3 [ 513.177181][ T9729] x_tables: unsorted entry at hook 3 [ 513.197801][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 514.286506][ T5133] Bluetooth: hci5: command 0x0406 tx timeout [ 514.862164][ T9740] delete_channel: no stack [ 518.037040][ T5816] audit_log_start: 2665 callbacks suppressed [ 518.037073][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.050183][ T5816] audit: audit_lost=174899 audit_rate_limit=0 audit_backlog_limit=64 [ 518.058713][ T5816] audit: backlog limit exceeded [ 518.063794][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.070532][ T5816] audit: audit_lost=174900 audit_rate_limit=0 audit_backlog_limit=64 [ 518.072880][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.079096][ T5816] audit: backlog limit exceeded [ 518.079124][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.174883][ T9752] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.181919][ T9752] audit: audit_lost=174901 audit_rate_limit=0 audit_backlog_limit=64 [ 523.047403][ T29] kauditd_printk_skb: 1880 callbacks suppressed [ 523.047444][ T29] audit: type=1400 audit(2000000137.120:168898): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5828 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 523.777758][ T9793] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 523.786519][ T9793] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 523.787880][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.824919][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.831574][ T5828] audit: audit_lost=175075 audit_rate_limit=0 audit_backlog_limit=64 [ 523.832466][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.841954][ T9794] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.846316][ C0] audit: audit_lost=175076 audit_rate_limit=0 audit_backlog_limit=64 [ 523.861059][ C0] audit: backlog limit exceeded [ 523.867482][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.874071][ C0] audit: audit_lost=175077 audit_rate_limit=0 audit_backlog_limit=64 [ 524.331968][ T9795] vlan2: entered promiscuous mode [ 524.341512][ T9795] nlmon0: entered promiscuous mode [ 524.367271][ T9795] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 524.730098][ T9801] tipc: Started in network mode [ 524.736001][ T9801] tipc: Node identity 7, cluster identity 4711 [ 524.744538][ T9801] tipc: Node number set to 7 [ 524.928522][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 528.055160][ T29] kauditd_printk_skb: 2183 callbacks suppressed [ 528.055178][ T29] audit: type=1400 audit(2000000142.130:169924): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9833 comm="syz.5.1003" name="kvm" dev="debugfs" ino=73 [ 528.088678][ T9835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.096765][ T9836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.103306][ T9836] audit: audit_lost=175464 audit_rate_limit=0 audit_backlog_limit=64 [ 528.120322][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.134877][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.141422][ T5827] audit: audit_lost=175465 audit_rate_limit=0 audit_backlog_limit=64 [ 528.153635][ T5817] audit: audit_lost=175466 audit_rate_limit=0 audit_backlog_limit=64 [ 528.169628][ T9835] audit: audit_lost=175467 audit_rate_limit=0 audit_backlog_limit=64 [ 528.182885][ T5817] audit: backlog limit exceeded [ 530.705580][ T9850] netlink: 'syz.4.1005': attribute type 3 has an invalid length. [ 532.292470][ T9860] netlink: 'syz.5.1006': attribute type 4 has an invalid length. [ 533.351507][ T29] kauditd_printk_skb: 1578 callbacks suppressed [ 533.351529][ T29] audit: type=1400 audit(2000000147.250:171140): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9865 comm="syz.5.1012" saddr=172.20.20.170 src=20002 daddr=172.20.20.170 dest=20002 netif=lo [ 533.880141][ T29] audit: type=1400 audit(2000000147.290:171141): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9865 comm="syz.5.1012" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 534.355182][ T29] audit: type=1400 audit(2000000147.770:171142): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9865 comm="syz.5.1012" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 535.578417][ T8777] audit: audit_backlog=65 > audit_backlog_limit=64 [ 535.588274][ T29] audit: type=1400 audit(2000000148.270:171143): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9865 comm="syz.5.1012" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 535.672940][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 535.705854][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 535.718950][ C0] audit: audit_lost=175588 audit_rate_limit=0 audit_backlog_limit=64 [ 535.727053][ C0] audit: backlog limit exceeded [ 535.734012][ T9870] audit: audit_backlog=65 > audit_backlog_limit=64 [ 535.899758][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 535.924811][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.938847][ T9885] vlan2: entered promiscuous mode [ 536.937094][ T9901] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 536.937094][ T9901] program syz.5.1018 not setting count and/or reply_len properly [ 537.972838][ T9887] Bluetooth: hci5: command 0x0406 tx timeout [ 538.828781][ T8777] audit_log_start: 2217 callbacks suppressed [ 538.828799][ T8777] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.844554][ T8777] audit: audit_lost=176025 audit_rate_limit=0 audit_backlog_limit=64 [ 538.852673][ T8777] audit: backlog limit exceeded [ 538.871902][ T29] audit: type=1400 audit(2000000152.180:172069): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9909 comm="syz.1.1022" opid=9909 ocomm="syz.1.1022" [ 538.891194][ T29] audit: type=1400 audit(2000000152.180:172070): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9909 comm="syz.1.1022" name="220" dev="tmpfs" ino=1220 [ 538.906867][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.910398][ T29] audit: type=1400 audit(2000000152.180:172071): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9909 comm="syz.1.1022" name="220" dev="tmpfs" ino=1220 [ 538.918413][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.936138][ T29] audit: type=1400 audit(2000000152.180:172072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9909 comm="syz.1.1022" name="220" dev="tmpfs" ino=1220 [ 538.942415][ C0] audit: audit_lost=176026 audit_rate_limit=0 audit_backlog_limit=64 [ 541.081896][ T9934] syzkaller0: entered promiscuous mode [ 541.119140][ T9934] syzkaller0: entered allmulticast mode [ 543.817461][ T9959] cgroup: fork rejected by pids controller in /syz0 [ 544.404864][ T29] kauditd_printk_skb: 2389 callbacks suppressed [ 544.404884][ T29] audit: type=1400 audit(2000000157.490:173367): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 544.502278][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.508856][ C0] audit: audit_lost=176392 audit_rate_limit=0 audit_backlog_limit=64 [ 544.516925][ C0] audit: backlog limit exceeded [ 544.530661][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.538199][T10049] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.539128][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.545092][ T5816] audit: audit_backlog=66 > audit_backlog_limit=64 [ 544.551267][ C0] audit: audit_lost=176393 audit_rate_limit=0 audit_backlog_limit=64 [ 544.551287][ C0] audit: backlog limit exceeded [ 547.851577][T10068] Cannot find del_set index 4 as target [ 549.001218][T10075] befs: (nullb0): No write support. Marking filesystem read-only [ 549.013996][T10075] befs: (nullb0): invalid magic header [ 549.605279][ T5817] audit_log_start: 1544 callbacks suppressed [ 549.605297][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.618545][ T5817] audit: audit_lost=176600 audit_rate_limit=0 audit_backlog_limit=64 [ 549.627219][ T5817] audit: backlog limit exceeded [ 549.632091][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.638671][ T5817] audit: audit_lost=176601 audit_rate_limit=0 audit_backlog_limit=64 [ 549.646890][ T5817] audit: backlog limit exceeded [ 549.651769][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.658522][ T5817] audit: audit_lost=176602 audit_rate_limit=0 audit_backlog_limit=64 [ 549.667428][ T5817] audit: backlog limit exceeded [ 549.667558][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.665081][ T5827] audit_log_start: 1804 callbacks suppressed [ 554.665098][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.677819][ T5827] audit: audit_lost=176797 audit_rate_limit=0 audit_backlog_limit=64 [ 554.686067][ T5827] audit: backlog limit exceeded [ 554.691086][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.691116][ T29] audit: type=1400 audit(2000000168.730:175520): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 554.697695][ T5827] audit: audit_lost=176798 audit_rate_limit=0 audit_backlog_limit=64 [ 554.697711][ T5827] audit: backlog limit exceeded [ 554.697890][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.726958][ T29] audit: type=1400 audit(2000000168.730:175521): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 554.730225][ T5827] audit: audit_lost=176799 audit_rate_limit=0 audit_backlog_limit=64 [ 557.060291][ T9887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 557.074978][ T9887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 557.085798][ T9887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 557.095541][ T9887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 557.103137][ T9887] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 557.110833][ T9887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 559.164726][ T5823] Bluetooth: hci0: command tx timeout [ 559.338789][T10141] netlink: 'syz.3.1061': attribute type 39 has an invalid length. [ 559.733851][ T29] kauditd_printk_skb: 2131 callbacks suppressed [ 559.733870][ T29] audit: type=1400 audit(2000000173.800:176747): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10128 comm="syz.1.1056" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 559.781680][ T29] audit: type=1400 audit(2000000173.830:176748): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5806 comm="syz-executor" opid=5811 ocomm="syz-executor" [ 559.864243][ T29] audit: type=1400 audit(2000000173.930:176749): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.869151][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 559.883778][ T29] audit: type=1400 audit(2000000173.930:176750): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.883825][ T29] audit: type=1400 audit(2000000173.930:176751): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.940282][ T29] audit: type=1400 audit(2000000173.930:176752): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.968821][ T5176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 559.975637][ T5176] audit: audit_lost=177102 audit_rate_limit=0 audit_backlog_limit=64 [ 559.979266][ T29] audit: type=1400 audit(2000000173.930:176753): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5827 comm="syz-executor" name="230" dev="tmpfs" ino=1276 [ 560.768467][ T9887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.789027][ T9887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.808744][ T9887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.824034][ T9887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.833739][ T9887] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 560.841048][ T9887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 561.181803][T10102] netlink: 'syz.4.1049': attribute type 4 has an invalid length. [ 561.250793][ T5823] Bluetooth: hci0: command tx timeout [ 563.001976][ T9887] Bluetooth: hci3: command tx timeout [ 563.174929][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.181437][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.240048][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 563.250570][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.264609][ T5868] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 563.312639][T10151] chnl_net:caif_netlink_parms(): no params data found [ 563.324868][ T9887] Bluetooth: hci0: command tx timeout [ 563.438959][ T5868] usb 2-1: not running at top speed; connect to a high speed hub [ 563.448577][ T5868] usb 2-1: config 1 has an invalid interface number: 35 but max is 0 [ 563.457670][ T5868] usb 2-1: config 1 has no interface number 0 [ 563.485460][ T5868] usb 2-1: config 1 interface 35 has no altsetting 0 [ 563.512903][ T5868] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=bf.ea [ 563.533967][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.575961][ T5868] usb 2-1: Product: syz [ 563.580200][ T5868] usb 2-1: Manufacturer: syz [ 563.586161][ T5868] usb 2-1: SerialNumber: syz [ 563.865404][T10124] chnl_net:caif_netlink_parms(): no params data found [ 564.257014][T10151] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.264302][T10151] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.271679][T10151] bridge_slave_0: entered allmulticast mode [ 564.278974][T10151] bridge_slave_0: entered promiscuous mode [ 564.327685][ T5868] usb_ehset_test 2-1:1.35: probe with driver usb_ehset_test failed with error -32 [ 564.359613][T10151] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.376843][ T5868] usb 2-1: USB disconnect, device number 6 [ 564.394707][T10151] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.413039][T10151] bridge_slave_1: entered allmulticast mode [ 564.420229][T10151] bridge_slave_1: entered promiscuous mode [ 564.836513][ T29] kauditd_printk_skb: 2115 callbacks suppressed [ 564.836554][ T29] audit: type=1400 audit(2000000178.820:178485): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=972 comm="kworker/0:2" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 564.836571][T10151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.839255][T10151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.915315][ T29] audit: type=1400 audit(2000000178.880:178486): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 565.038485][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 565.045835][ T29] audit: type=1400 audit(2000000178.890:178487): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 565.070740][ T5817] audit: audit_lost=177231 audit_rate_limit=0 audit_backlog_limit=64 [ 565.079318][ T5817] audit: backlog limit exceeded [ 565.084363][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 565.091181][ T5817] audit: audit_lost=177232 audit_rate_limit=0 audit_backlog_limit=64 [ 565.091292][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 565.099382][ T29] audit: type=1400 audit(2000000178.900:178488): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10188 comm="syz.3.1071" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 565.133935][ T9887] Bluetooth: hci3: command tx timeout [ 565.614721][ T9887] Bluetooth: hci0: command tx timeout [ 565.657876][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.667178][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.675258][T10124] bridge_slave_0: entered allmulticast mode [ 565.682333][T10124] bridge_slave_0: entered promiscuous mode [ 565.693200][T10151] team0: Port device team_slave_0 added [ 565.703221][T10151] team0: Port device team_slave_1 added [ 565.730679][T10124] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.738463][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.754181][T10124] bridge_slave_1: entered allmulticast mode [ 565.762197][T10124] bridge_slave_1: entered promiscuous mode [ 565.962626][T10124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.985614][T10151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.992586][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.063932][T10151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.080349][T10151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.087452][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.113584][T10151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.175201][ T9887] Bluetooth: hci3: command tx timeout [ 567.398929][T10124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.664467][T10218] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 569.822372][ T9887] Bluetooth: hci3: command tx timeout [ 569.848316][ T5828] audit_log_start: 1582 callbacks suppressed [ 569.848329][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 569.862087][ T29] audit: type=1400 audit(2000000183.920:179591): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5828 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 569.881447][ T5828] audit: audit_lost=177394 audit_rate_limit=0 audit_backlog_limit=64 [ 569.881980][T10233] audit: audit_backlog=65 > audit_backlog_limit=64 [ 569.890342][ T5828] audit: backlog limit exceeded [ 569.896606][T10233] audit: audit_lost=177395 audit_rate_limit=0 audit_backlog_limit=64 [ 569.901372][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 569.909393][T10233] audit: backlog limit exceeded [ 569.915872][ T5828] audit: audit_lost=177396 audit_rate_limit=0 audit_backlog_limit=64 [ 569.915894][ T5828] audit: backlog limit exceeded [ 570.015117][T10124] team0: Port device team_slave_0 added [ 570.039237][T10151] hsr_slave_0: entered promiscuous mode [ 570.069975][T10151] hsr_slave_1: entered promiscuous mode [ 570.094051][T10151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.125505][T10151] Cannot create hsr debugfs directory [ 570.136558][T10124] team0: Port device team_slave_1 added [ 570.395315][T10124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.405789][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.472953][T10124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.353269][T10124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.371057][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.469964][T10255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.826209][T10124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.536365][T10124] hsr_slave_0: entered promiscuous mode [ 573.595101][T10124] hsr_slave_1: entered promiscuous mode [ 573.613128][T10124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.631490][T10124] Cannot create hsr debugfs directory [ 574.366839][T10151] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 574.606767][T10266] xt_policy: too many policy elements [ 574.680926][T10151] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 574.814925][T10124] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 574.933336][ T29] kauditd_printk_skb: 2085 callbacks suppressed [ 574.933358][ T29] audit: type=1400 audit(2000000188.860:180849): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10124 comm="syz-executor" name="1" dev="debugfs" ino=29307 [ 575.013066][T10273] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.019744][T10273] audit: audit_lost=177673 audit_rate_limit=0 audit_backlog_limit=64 [ 575.024502][ T29] audit: type=1400 audit(2000000188.860:180850): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10124 comm="syz-executor" name="ports" dev="debugfs" ino=29232 [ 575.027960][T10273] audit: backlog limit exceeded [ 575.052815][T10273] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.059641][T10273] audit: audit_lost=177674 audit_rate_limit=0 audit_backlog_limit=64 [ 575.064715][T10274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.067777][T10273] audit: backlog limit exceeded [ 575.074200][T10274] audit: audit_lost=177675 audit_rate_limit=0 audit_backlog_limit=64 [ 575.165638][T10151] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 575.176438][T10151] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 575.188485][T10124] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 575.316955][T10124] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 575.331172][T10124] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 576.184026][T10151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.244072][T10124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.263297][T10124] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.366388][T10283] sg_write: data in/out 246879826/56 bytes for SCSI command 0xeb-- guessing data in; [ 576.366388][T10283] program syz.3.1094 not setting count and/or reply_len properly [ 576.901800][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.908989][ T7612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.941184][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.948379][ T7612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.078353][T10151] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.188980][T10124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.430281][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.437481][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.455446][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 577.842794][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.850000][ T8052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.134142][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'. [ 579.919709][T10124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.707497][ T29] kauditd_printk_skb: 3791 callbacks suppressed [ 580.707519][ T29] audit: type=1400 audit(2000000194.060:183339): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=10319 comm="syz.3.1103" opid=10319 ocomm="syz.3.1103" [ 580.774558][T10323] xt_CT: No such helper "snmp_trap" [ 580.936507][ T29] audit: type=1400 audit(2000000194.330:183340): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=10317 comm="syz.1.1102" opid=10317 ocomm="syz.1.1102" [ 580.969060][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.976032][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.982567][ C0] audit: audit_lost=178110 audit_rate_limit=0 audit_backlog_limit=64 [ 580.990716][ C0] audit: backlog limit exceeded [ 580.995938][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.996953][T10326] audit: audit_backlog=65 > audit_backlog_limit=64 [ 581.002542][ C0] audit: audit_lost=178111 audit_rate_limit=0 audit_backlog_limit=64 [ 581.017217][ C0] audit: backlog limit exceeded [ 582.820223][T10151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.391618][T10124] veth0_vlan: entered promiscuous mode [ 583.437165][T10124] veth1_vlan: entered promiscuous mode [ 583.495057][T10124] veth0_macvtap: entered promiscuous mode [ 583.522936][T10124] veth1_macvtap: entered promiscuous mode [ 583.666963][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.695174][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.718679][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.765674][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.794572][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.814243][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.824890][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.835897][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.845837][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.856339][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.869940][T10124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.880053][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.890689][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.901179][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.911688][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.922115][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.933224][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.943157][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.953701][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.963774][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.974563][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.985659][T10124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.995633][T10124] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.004359][T10124] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.013722][T10124] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.063161][T10124] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.294285][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.311730][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.344146][T10151] veth0_vlan: entered promiscuous mode [ 585.365484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.380979][T10151] veth1_vlan: entered promiscuous mode [ 585.404829][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.178849][ T29] kauditd_printk_skb: 5736 callbacks suppressed [ 586.178867][ T29] audit: type=1400 audit(2000000199.580:186592): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=10365 comm="syz.4.1110" opid=10365 ocomm="syz.4.1110" [ 586.183488][T10151] veth0_macvtap: entered promiscuous mode [ 586.218386][T10151] veth1_macvtap: entered promiscuous mode [ 586.234848][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.244542][ T29] audit: type=1400 audit(2000000199.840:186593): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10365 comm="syz.4.1110" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 586.257305][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 586.268176][T10124] audit: audit_backlog=66 > audit_backlog_limit=64 [ 586.274861][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 586.274880][ C0] audit: audit_lost=178941 audit_rate_limit=0 audit_backlog_limit=64 [ 586.274896][ C0] audit: backlog limit exceeded [ 586.277094][ T5176] audit: audit_backlog=66 > audit_backlog_limit=64 [ 586.281942][T10124] audit: audit_lost=178942 audit_rate_limit=0 audit_backlog_limit=64 [ 586.296546][ T5176] audit: audit_lost=178943 audit_rate_limit=0 audit_backlog_limit=64 [ 586.334562][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.344592][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.355089][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.365010][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.376036][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.386436][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.396979][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.406880][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.417384][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.427519][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.438324][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.452455][T10151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.790975][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.809246][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.824643][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.845642][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.856533][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.872890][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.886824][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.904276][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.924565][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.944028][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.954570][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.969550][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.980782][T10151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.109898][T10151] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.123138][T10151] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.147949][T10151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.204721][T10151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.591775][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.929801][T10381] Bluetooth: MGMT ver 1.23 [ 587.935518][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.086758][ T7278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.133774][ T7278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.429931][T10351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.975045][T10444] xt_bpf: check failed: parse error [ 591.185627][T10447] audit_log_start: 9188 callbacks suppressed [ 591.185676][T10447] audit: audit_backlog=65 > audit_backlog_limit=64 [ 591.186456][T10442] audit: audit_backlog=65 > audit_backlog_limit=64 [ 591.204521][T10447] audit: audit_lost=181045 audit_rate_limit=0 audit_backlog_limit=64 [ 591.220813][T10446] audit: audit_backlog=65 > audit_backlog_limit=64 [ 591.224559][T10447] audit: backlog limit exceeded [ 591.264109][T10446] audit: audit_lost=181046 audit_rate_limit=0 audit_backlog_limit=64 [ 591.270985][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 591.277218][T10416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 591.278825][ C0] audit: audit_lost=181047 audit_rate_limit=0 audit_backlog_limit=64 [ 591.285695][ T29] audit: type=1400 audit(2000000205.000:189507): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10413 comm="modprobe" name="/" dev="sda1" ino=2 [ 591.497949][T10439] syz.4.1117: attempt to access beyond end of device [ 591.497949][T10439] nbd4: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 593.703546][T10461] vlan2: entered promiscuous mode [ 593.745025][T10461] vlan2: entered allmulticast mode [ 593.750499][T10461] hsr_slave_1: entered allmulticast mode [ 593.809342][T10450] kvm: kvm [10448]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 596.203218][ T29] kauditd_printk_skb: 6959 callbacks suppressed [ 596.203238][ T29] audit: type=1400 audit(2000000210.270:191242): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10483 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 596.261592][ T29] audit: type=1400 audit(2000000210.270:191243): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10483 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 596.300237][ T29] audit: type=1400 audit(2000000210.270:191244): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10483 comm="syz-executor" name="2" dev="tmpfs" ino=23 [ 596.322387][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.340039][ T5827] audit: audit_lost=182794 audit_rate_limit=0 audit_backlog_limit=64 [ 596.353218][T10482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.370088][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.374477][T10486] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.376673][ C0] audit: audit_lost=182795 audit_rate_limit=0 audit_backlog_limit=64 [ 596.391296][ C0] audit: backlog limit exceeded [ 601.219146][ T29] kauditd_printk_skb: 881 callbacks suppressed [ 601.219164][ T29] audit: type=1400 audit(2000000215.290:192046): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 601.289224][ T29] audit: type=1400 audit(2000000215.330:192047): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="sda1" ino=2 [ 601.306039][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.307711][ T29] audit: type=1400 audit(2000000215.330:192048): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="var" dev="sda1" ino=1906 [ 601.324661][ T5828] audit: audit_lost=182823 audit_rate_limit=0 audit_backlog_limit=64 [ 601.332950][ T29] audit: type=1400 audit(2000000215.330:192049): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="var" dev="sda1" ino=1906 [ 601.359657][ T5828] audit: backlog limit exceeded [ 601.359855][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.364861][ T29] audit: type=1400 audit(2000000215.330:192050): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5176 comm="syslogd" name="/" dev="sda1" ino=2 [ 601.389924][ T5828] audit: audit_lost=182824 audit_rate_limit=0 audit_backlog_limit=64 [ 602.467612][T10530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 604.558690][T10545] batman_adv: batadv0: Adding interface: gretap1 [ 604.577487][T10553] Unsupported ieee802154 address type: 0 [ 604.597644][T10545] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.710956][T10545] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 606.246714][ T29] kauditd_printk_skb: 2186 callbacks suppressed [ 606.246734][ T29] audit: type=1400 audit(2000000220.320:193339): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 606.302364][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 606.317775][ T5827] audit: audit_lost=183124 audit_rate_limit=0 audit_backlog_limit=64 [ 606.333919][ T5827] audit: backlog limit exceeded [ 606.353046][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 606.362013][ T29] audit: type=1400 audit(2000000220.320:193340): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 606.404597][ T29] audit: type=1400 audit(2000000220.320:193341): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 606.434157][ T5827] audit: audit_lost=183125 audit_rate_limit=0 audit_backlog_limit=64 [ 606.442690][ T5827] audit: backlog limit exceeded [ 606.448858][ T29] audit: type=1400 audit(2000000220.320:193342): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 609.463916][T10597] tipc: Enabled bearer , priority 0 [ 611.864753][ T29] kauditd_printk_skb: 2746 callbacks suppressed [ 611.864775][ T29] audit: type=1400 audit(2000000225.230:194757): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=10608 comm="syz.3.1163" opid=10608 ocomm="syz.3.1163" [ 611.928431][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.936052][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.942825][ C0] audit: audit_lost=183570 audit_rate_limit=0 audit_backlog_limit=64 [ 611.951067][ C0] audit: backlog limit exceeded [ 611.955270][ T29] audit: type=1400 audit(2000000225.360:194758): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10608 comm="syz.3.1163" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 611.956763][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.978567][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.991297][ C0] audit: audit_lost=183571 audit_rate_limit=0 audit_backlog_limit=64 [ 611.997766][ T29] audit: type=1400 audit(2000000225.860:194759): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10608 comm="syz.3.1163" saddr=10.128.0.169 src=30008 daddr=10.128.10.61 dest=57968 netif=eth0 [ 611.999423][ C0] audit: backlog limit exceeded [ 612.074587][ T5867] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 612.186806][ T9887] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 612.198144][ T9887] CPU: 1 UID: 0 PID: 9887 Comm: kworker/u9:0 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 612.209049][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 612.219133][ T9887] Workqueue: hci4 hci_rx_work [ 612.223986][ T9887] Call Trace: [ 612.227288][ T9887] [ 612.230242][ T9887] dump_stack_lvl+0x241/0x360 [ 612.234947][ T9887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.240154][ T9887] ? __pfx__printk+0x10/0x10 [ 612.244754][ T9887] ? __kmalloc_cache_noprof+0x243/0x390 [ 612.250297][ T9887] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 612.255579][ T9887] sysfs_create_dir_ns+0x2ce/0x3a0 [ 612.260687][ T9887] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.266414][ T9887] kobject_add_internal+0x435/0x8d0 [ 612.271617][ T9887] kobject_add+0x152/0x220 [ 612.276034][ T9887] ? do_raw_spin_unlock+0x13c/0x8b0 [ 612.281406][ T9887] ? device_add+0x3e7/0xbf0 [ 612.285909][ T9887] ? __pfx_kobject_add+0x10/0x10 [ 612.290850][ T9887] ? _raw_spin_unlock+0x28/0x50 [ 612.295790][ T9887] ? get_device_parent+0x165/0x410 [ 612.300903][ T9887] device_add+0x4e5/0xbf0 [ 612.305243][ T9887] hci_conn_add_sysfs+0xe8/0x200 [ 612.310183][ T9887] le_conn_complete_evt+0xc9f/0x12e0 [ 612.315475][ T9887] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.321192][ T9887] ? __mutex_unlock_slowpath+0x21e/0x790 [ 612.326828][ T9887] ? __pfx___mutex_lock+0x10/0x10 [ 612.331859][ T9887] ? skb_pull_data+0x112/0x230 [ 612.336628][ T9887] hci_le_conn_complete_evt+0x18c/0x420 [ 612.342179][ T9887] hci_event_packet+0xa55/0x1540 [ 612.347122][ T9887] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.352407][ T9887] ? __pfx_hci_event_packet+0x10/0x10 [ 612.357779][ T9887] ? do_raw_spin_unlock+0x13c/0x8b0 [ 612.362986][ T9887] ? hci_send_to_monitor+0xd8/0x7f0 [ 612.368184][ T9887] ? kcov_remote_start+0x97/0x7d0 [ 612.373221][ T9887] hci_rx_work+0x3f3/0xdb0 [ 612.377670][ T9887] ? process_scheduled_works+0x976/0x1840 [ 612.383394][ T9887] process_scheduled_works+0xa66/0x1840 [ 612.388964][ T9887] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.394955][ T9887] ? assign_work+0x364/0x3d0 [ 612.399551][ T9887] worker_thread+0x870/0xd30 [ 612.404143][ T9887] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 612.410038][ T9887] ? __kthread_parkme+0x169/0x1d0 [ 612.415062][ T9887] ? __pfx_worker_thread+0x10/0x10 [ 612.420186][ T9887] kthread+0x2f0/0x390 [ 612.424279][ T9887] ? __pfx_worker_thread+0x10/0x10 [ 612.429402][ T9887] ? __pfx_kthread+0x10/0x10 [ 612.434006][ T9887] ret_from_fork+0x4b/0x80 [ 612.438444][ T9887] ? __pfx_kthread+0x10/0x10 [ 612.443042][ T9887] ret_from_fork_asm+0x1a/0x30 [ 612.447843][ T9887] [ 612.450964][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.468662][ T9887] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.483071][ T9887] Bluetooth: hci4: failed to register connection device [ 612.544525][ T5867] usb 5-1: device descriptor read/64, error -71 [ 612.641566][ T9887] ================================================================== [ 612.649682][ T9887] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xd7/0x140 [ 612.657692][ T9887] Read of size 8 at addr ffff888079f13188 by task kworker/u9:0/9887 [ 612.665682][ T9887] [ 612.668009][ T9887] CPU: 0 UID: 0 PID: 9887 Comm: kworker/u9:0 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 612.678864][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 612.688934][ T9887] Workqueue: hci4 hci_rx_work [ 612.693646][ T9887] Call Trace: [ 612.696944][ T9887] [ 612.699889][ T9887] dump_stack_lvl+0x241/0x360 [ 612.704586][ T9887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.709802][ T9887] ? __pfx__printk+0x10/0x10 [ 612.714402][ T9887] ? _printk+0xd5/0x120 [ 612.718565][ T9887] ? __virt_addr_valid+0x183/0x530 [ 612.723696][ T9887] ? __virt_addr_valid+0x183/0x530 [ 612.728821][ T9887] print_report+0x169/0x550 [ 612.733342][ T9887] ? __virt_addr_valid+0x183/0x530 [ 612.738468][ T9887] ? __virt_addr_valid+0x183/0x530 [ 612.743598][ T9887] ? __virt_addr_valid+0x45f/0x530 [ 612.748710][ T9887] ? __phys_addr+0xba/0x170 [ 612.753208][ T9887] ? l2cap_sock_ready_cb+0xd7/0x140 [ 612.758401][ T9887] kasan_report+0x143/0x180 [ 612.762908][ T9887] ? l2cap_sock_ready_cb+0xd7/0x140 [ 612.768108][ T9887] l2cap_sock_ready_cb+0xd7/0x140 [ 612.773123][ T9887] l2cap_le_start+0x4e0/0x17d0 [ 612.777963][ T9887] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 612.784277][ T9887] ? l2cap_connect_cfm+0x626/0x1090 [ 612.789472][ T9887] ? __pfx_l2cap_le_start+0x10/0x10 [ 612.794678][ T9887] ? kasan_quarantine_put+0xdc/0x230 [ 612.799976][ T9887] ? l2cap_connect_cfm+0x456/0x1090 [ 612.805171][ T9887] ? l2cap_connect_cfm+0x456/0x1090 [ 612.810365][ T9887] l2cap_connect_cfm+0x668/0x1090 [ 612.815382][ T9887] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 612.820829][ T9887] ? hci_cb_lookup+0x3a0/0x3c0 [ 612.825586][ T9887] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 612.831033][ T9887] hci_connect_cfm+0x162/0x240 [ 612.835788][ T9887] ? __pfx_hci_connect_cfm+0x10/0x10 [ 612.841061][ T9887] ? hci_conn_add_sysfs+0x122/0x200 [ 612.846262][ T9887] le_conn_complete_evt+0xd3e/0x12e0 [ 612.851546][ T9887] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.857255][ T9887] ? __mutex_unlock_slowpath+0x21e/0x790 [ 612.862881][ T9887] ? __pfx___mutex_lock+0x10/0x10 [ 612.867906][ T9887] ? skb_pull_data+0x112/0x230 [ 612.872669][ T9887] hci_le_conn_complete_evt+0x18c/0x420 [ 612.878209][ T9887] hci_event_packet+0xa55/0x1540 [ 612.883145][ T9887] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.888424][ T9887] ? __pfx_hci_event_packet+0x10/0x10 [ 612.893788][ T9887] ? do_raw_spin_unlock+0x13c/0x8b0 [ 612.898987][ T9887] ? hci_send_to_monitor+0xd8/0x7f0 [ 612.904176][ T9887] ? kcov_remote_start+0x97/0x7d0 [ 612.909192][ T9887] hci_rx_work+0x3f3/0xdb0 [ 612.913610][ T9887] ? process_scheduled_works+0x976/0x1840 [ 612.919328][ T9887] process_scheduled_works+0xa66/0x1840 [ 612.924880][ T9887] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.930869][ T9887] ? assign_work+0x364/0x3d0 [ 612.935454][ T9887] worker_thread+0x870/0xd30 [ 612.940037][ T9887] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 612.945928][ T9887] ? __kthread_parkme+0x169/0x1d0 [ 612.950947][ T9887] ? __pfx_worker_thread+0x10/0x10 [ 612.956043][ T9887] kthread+0x2f0/0x390 [ 612.960101][ T9887] ? __pfx_worker_thread+0x10/0x10 [ 612.965202][ T9887] ? __pfx_kthread+0x10/0x10 [ 612.969784][ T9887] ret_from_fork+0x4b/0x80 [ 612.974191][ T9887] ? __pfx_kthread+0x10/0x10 [ 612.978773][ T9887] ret_from_fork_asm+0x1a/0x30 [ 612.983535][ T9887] [ 612.986628][ T9887] [ 612.988951][ T9887] Allocated by task 10619: [ 612.993366][ T9887] kasan_save_track+0x3f/0x80 [ 612.998052][ T9887] __kasan_kmalloc+0x98/0xb0 [ 613.002649][ T9887] __kmalloc_noprof+0x285/0x4c0 [ 613.007522][ T9887] sk_prot_alloc+0xe0/0x210 [ 613.012026][ T9887] sk_alloc+0x38/0x370 [ 613.016087][ T9887] bt_sock_alloc+0x3c/0x340 [ 613.020582][ T9887] l2cap_sock_create+0x13d/0x2f0 [ 613.025510][ T9887] bt_sock_create+0x161/0x230 [ 613.030175][ T9887] __sock_create+0x4c0/0xa30 [ 613.034760][ T9887] __sys_socket+0x150/0x3c0 [ 613.039253][ T9887] __x64_sys_socket+0x7a/0x90 [ 613.043922][ T9887] do_syscall_64+0xf3/0x230 [ 613.048428][ T9887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.054318][ T9887] [ 613.056646][ T9887] Freed by task 10620: [ 613.060716][ T9887] kasan_save_track+0x3f/0x80 [ 613.065399][ T9887] kasan_save_free_info+0x40/0x50 [ 613.070429][ T9887] __kasan_slab_free+0x59/0x70 [ 613.075186][ T9887] kfree+0x196/0x430 [ 613.079075][ T9887] __sk_destruct+0x479/0x5f0 [ 613.083657][ T9887] l2cap_sock_release+0x15b/0x1d0 [ 613.088673][ T9887] sock_close+0xbc/0x240 [ 613.092910][ T9887] __fput+0x23c/0xa50 [ 613.096888][ T9887] task_work_run+0x24f/0x310 [ 613.101488][ T9887] syscall_exit_to_user_mode+0x13f/0x340 [ 613.107132][ T9887] do_syscall_64+0x100/0x230 [ 613.111717][ T9887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.117607][ T9887] [ 613.119917][ T9887] The buggy address belongs to the object at ffff888079f13000 [ 613.119917][ T9887] which belongs to the cache kmalloc-2k of size 2048 [ 613.133958][ T9887] The buggy address is located 392 bytes inside of [ 613.133958][ T9887] freed 2048-byte region [ffff888079f13000, ffff888079f13800) [ 613.147834][ T9887] [ 613.150152][ T9887] The buggy address belongs to the physical page: [ 613.156560][ T9887] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079f17000 pfn:0x79f10 [ 613.166625][ T9887] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 613.175116][ T9887] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 613.183615][ T9887] page_type: f5(slab) [ 613.187589][ T9887] raw: 00fff00000000240 ffff88801ac42000 ffffea0001fa3210 ffffea0000d47a10 [ 613.196164][ T9887] raw: ffff888079f17000 0000000000080007 00000001f5000000 0000000000000000 [ 613.204754][ T9887] head: 00fff00000000240 ffff88801ac42000 ffffea0001fa3210 ffffea0000d47a10 [ 613.213421][ T9887] head: ffff888079f17000 0000000000080007 00000001f5000000 0000000000000000 [ 613.222085][ T9887] head: 00fff00000000003 ffffea0001e7c401 ffffffffffffffff 0000000000000000 [ 613.230752][ T9887] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 613.239406][ T9887] page dumped because: kasan: bad access detected [ 613.245820][ T9887] page_owner tracks the page as allocated [ 613.251522][ T9887] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5817, tgid 5817 (syz-executor), ts 514308639176, free_ts 513575710431 [ 613.272452][ T9887] post_alloc_hook+0x1f3/0x230 [ 613.277221][ T9887] get_page_from_freelist+0x3651/0x37a0 [ 613.282760][ T9887] __alloc_pages_noprof+0x292/0x710 [ 613.287952][ T9887] alloc_pages_mpol_noprof+0x3e8/0x680 [ 613.293405][ T9887] alloc_slab_page+0x6a/0x110 [ 613.298073][ T9887] allocate_slab+0x5a/0x2b0 [ 613.302570][ T9887] ___slab_alloc+0xc27/0x14a0 [ 613.307237][ T9887] __slab_alloc+0x58/0xa0 [ 613.311562][ T9887] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 613.317974][ T9887] kmalloc_reserve+0x111/0x2a0 [ 613.322728][ T9887] __alloc_skb+0x1f3/0x440 [ 613.327135][ T9887] audit_log_start+0x186/0xa30 [ 613.331890][ T9887] common_lsm_audit+0xdd/0x1ce0 [ 613.336732][ T9887] smack_log+0x421/0x540 [ 613.340967][ T9887] smk_tskacc+0x300/0x370 [ 613.345288][ T9887] smack_inode_permission+0x2dc/0x380 [ 613.350653][ T9887] page last free pid 9735 tgid 9731 stack trace: [ 613.356971][ T9887] free_unref_page+0xd2c/0x1000 [ 613.361815][ T9887] __slab_free+0x2c2/0x380 [ 613.366221][ T9887] qlist_free_all+0x9a/0x140 [ 613.370800][ T9887] kasan_quarantine_reduce+0x14f/0x170 [ 613.376246][ T9887] __kasan_slab_alloc+0x23/0x80 [ 613.381086][ T9887] kmem_cache_alloc_noprof+0x1d9/0x380 [ 613.386534][ T9887] alloc_vfsmnt+0x27/0x4d0 [ 613.390937][ T9887] vfs_create_mount+0x7c/0x3f0 [ 613.395691][ T9887] __se_sys_fsmount+0x4dd/0xce0 [ 613.400552][ T9887] do_syscall_64+0xf3/0x230 [ 613.405048][ T9887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.410947][ T9887] [ 613.413265][ T9887] Memory state around the buggy address: [ 613.418879][ T9887] ffff888079f13080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.426929][ T9887] ffff888079f13100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.434977][ T9887] >ffff888079f13180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.443020][ T9887] ^ [ 613.447333][ T9887] ffff888079f13200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.455421][ T9887] ffff888079f13280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.463475][ T9887] ================================================================== [ 613.653770][ T9887] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 613.661011][ T9887] CPU: 0 UID: 0 PID: 9887 Comm: kworker/u9:0 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 613.671873][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 613.681917][ T9887] Workqueue: hci4 hci_rx_work [ 613.686595][ T9887] Call Trace: [ 613.689856][ T9887] [ 613.692773][ T9887] dump_stack_lvl+0x241/0x360 [ 613.697441][ T9887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.702624][ T9887] ? __pfx__printk+0x10/0x10 [ 613.707199][ T9887] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 613.713166][ T9887] ? vscnprintf+0x5d/0x90 [ 613.717483][ T9887] panic+0x349/0x880 [ 613.721363][ T9887] ? check_panic_on_warn+0x21/0xb0 [ 613.726528][ T9887] ? __pfx_panic+0x10/0x10 [ 613.731015][ T9887] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 613.736980][ T9887] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 613.743293][ T9887] check_panic_on_warn+0x86/0xb0 [ 613.748215][ T9887] ? l2cap_sock_ready_cb+0xd7/0x140 [ 613.753447][ T9887] end_report+0x77/0x160 [ 613.757695][ T9887] kasan_report+0x154/0x180 [ 613.762202][ T9887] ? l2cap_sock_ready_cb+0xd7/0x140 [ 613.767608][ T9887] l2cap_sock_ready_cb+0xd7/0x140 [ 613.772637][ T9887] l2cap_le_start+0x4e0/0x17d0 [ 613.777453][ T9887] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 613.783764][ T9887] ? l2cap_connect_cfm+0x626/0x1090 [ 613.788960][ T9887] ? __pfx_l2cap_le_start+0x10/0x10 [ 613.794243][ T9887] ? kasan_quarantine_put+0xdc/0x230 [ 613.799564][ T9887] ? l2cap_connect_cfm+0x456/0x1090 [ 613.804764][ T9887] ? l2cap_connect_cfm+0x456/0x1090 [ 613.809956][ T9887] l2cap_connect_cfm+0x668/0x1090 [ 613.815000][ T9887] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 613.820450][ T9887] ? hci_cb_lookup+0x3a0/0x3c0 [ 613.825205][ T9887] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 613.830655][ T9887] hci_connect_cfm+0x162/0x240 [ 613.835407][ T9887] ? __pfx_hci_connect_cfm+0x10/0x10 [ 613.840675][ T9887] ? hci_conn_add_sysfs+0x122/0x200 [ 613.845863][ T9887] le_conn_complete_evt+0xd3e/0x12e0 [ 613.851131][ T9887] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 613.856833][ T9887] ? __mutex_unlock_slowpath+0x21e/0x790 [ 613.862456][ T9887] ? __pfx___mutex_lock+0x10/0x10 [ 613.867473][ T9887] ? skb_pull_data+0x112/0x230 [ 613.872223][ T9887] hci_le_conn_complete_evt+0x18c/0x420 [ 613.877758][ T9887] hci_event_packet+0xa55/0x1540 [ 613.882685][ T9887] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 613.887954][ T9887] ? __pfx_hci_event_packet+0x10/0x10 [ 613.893332][ T9887] ? do_raw_spin_unlock+0x13c/0x8b0 [ 613.898545][ T9887] ? hci_send_to_monitor+0xd8/0x7f0 [ 613.903728][ T9887] ? kcov_remote_start+0x97/0x7d0 [ 613.908735][ T9887] hci_rx_work+0x3f3/0xdb0 [ 613.913142][ T9887] ? process_scheduled_works+0x976/0x1840 [ 613.918852][ T9887] process_scheduled_works+0xa66/0x1840 [ 613.924415][ T9887] ? __pfx_process_scheduled_works+0x10/0x10 [ 613.930432][ T9887] ? assign_work+0x364/0x3d0 [ 613.935031][ T9887] worker_thread+0x870/0xd30 [ 613.939617][ T9887] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 613.945631][ T9887] ? __kthread_parkme+0x169/0x1d0 [ 613.950651][ T9887] ? __pfx_worker_thread+0x10/0x10 [ 613.955764][ T9887] kthread+0x2f0/0x390 [ 613.959844][ T9887] ? __pfx_worker_thread+0x10/0x10 [ 613.964941][ T9887] ? __pfx_kthread+0x10/0x10 [ 613.969519][ T9887] ret_from_fork+0x4b/0x80 [ 613.973915][ T9887] ? __pfx_kthread+0x10/0x10 [ 613.978487][ T9887] ret_from_fork_asm+0x1a/0x30 [ 613.983239][ T9887] [ 613.986556][ T9887] Kernel Offset: disabled [ 613.990880][ T9887] Rebooting in 86400 seconds..