last executing test programs: 14.537368143s ago: executing program 2 (id=7037): semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4041) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000ffffffffff0eabaaaaaaaabb88a800008100000008004500002c00000000002f9078ac1e0001e00000010000655800189078040000000000000086dd0000000000"], 0xfdef) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r6, 0x8910, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x911, 0x12) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000080)={'veth0_macvtap\x00', @remote}) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xc, 0x1000}, {0x2}], 0x3) 13.271393935s ago: executing program 4 (id=7041): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0x0, [[0x5, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x1], [0x7]], '\x00', [{}, {}, {}, {0x7}], '\x00', 0x0, 0x0, 0x0, 0x2}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r7, 0x24, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) fsetxattr$smack_xattr_label(r8, &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000afc134530c00"/20], 0x14}, 0x1, 0x2, 0x0, 0x42000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(0x0, 0x400141042, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x66}, 0x5, 0x1, 0x8, 0x200, 0x13, 'syz1\x00', "97d5355c52cac475086fc39d4718e71e15927d42ed64594f028a13d5e7541f85", "6e62c0adcfe453f6dc7862a061d3dbd0f07dd1261f95aa5b4ef38d76a1c015ef", [{0x8, 0x5, {0x2, 0x5}}, {0x5, 0x0, {0x2, 0x9}}, {0x5, 0x3ff, {0x3, 0x6}}, {0x81, 0x401, {0x2, 0x1}}, {0x9, 0xf21d, {0x3, 0x5}}, {0x0, 0x2, {0x0, 0x3}}, {0x9, 0x2, {0x3, 0x4}}, {0x81, 0x6, {0x1, 0x3}}, {0x0, 0x8, {0x0, 0x9}}, {0x7f, 0xaa, {0x2, 0x400}}, {0x1, 0xfffd, {0x1}}, {0xfffc, 0x2, {0x1, 0x1}}, {0xff80, 0x6, {0x3, 0x8}}, {0x3, 0xa4}, {0xfd50, 0x0, {0x2, 0x7}}, {0x5, 0x6, {0x0, 0x1000}}, {0x5, 0x4, {0x2, 0x1}}, {0xf838, 0xfed6, {0x3, 0x5}}, {0x1, 0x6, {0x3, 0xfffffff8}}, {0x6, 0x6, {0x3, 0x10000000}}, {0x4, 0x7, {0x1, 0x3ff}}, {0x6, 0x9, {0x0, 0x3}}, {0x0, 0x6, {0x3, 0x6}}, {0x3, 0x4, {0x0, 0x1}}, {0x4, 0x9, {0x2, 0x4}}, {0x4, 0xffff, {0x3, 0x101}}, {0x7, 0x10, {0x0, 0x4}}, {0xf38, 0x9, {0x2, 0x8000}}, {0xffff, 0x3, {0x1, 0x6}}, {0xc, 0xc362, {0x2, 0xffff}}, {0x40, 0x1ff, {0x3, 0x7f}}, {0xed3, 0xc, {0x0, 0xd}}, {0x4, 0x5, {0x0, 0x2}}, {0x2d5c, 0x4, {0x1, 0x7fffffff}}, {0xf3da, 0x3ff, {0x2, 0x1}}, {0xac3e, 0x0, {0x2, 0x816}}, {0xffff, 0x9, {0x3, 0x9}}, {0x166c, 0x6, {0x1, 0x3ff}}, {0xffff, 0x57, {0x3, 0x6}}, {0x4, 0x0, {0x0, 0x401}}]}}}, {{0x254, 0x1, {{0x1, 0x101}, 0x4, 0xff, 0x3, 0x2, 0x1, 'syz1\x00', "da571c95eef80f97fc1ce5ed8791c7714ed0681169ea215b140e4ddd2681ce86", "0526e0cfe1413b9168a543ba2cd4a691b8bec660b90b2f0da4c0574d53490348", [{0x1, 0x7, {0x3, 0x3b4}}, {0x4e7, 0xfff0, {0x3, 0xfffffeff}}, {0x155, 0xe, {0x2, 0x6}}, {0x5, 0x9, {0x3, 0x7}}, {0x5, 0x7, {0x2, 0x9}}, {0xfff7, 0xffff, {0x0, 0x1ff}}, {0x8, 0x13f, {0x2, 0x8}}, {0x0, 0x401, {0x3, 0xcced}}, {0x8, 0x3, {0x3, 0x9}}, {0x2, 0x80, {0x3, 0x80}}, {0x5, 0xe375, {0x1, 0x6e5}}, {0x3, 0x8000, {0x3, 0x44}}, {0x7, 0x8, {0x2, 0xf4}}, {0x8, 0x8, {0x3}}, {0x0, 0x8000, {0x3, 0x8}}, {0x1dff, 0x7f, {0x2, 0xe}}, {0x8, 0x3, {0x1, 0x1}}, {0x5, 0x6, {0x3}}, {0x9, 0x0, {0x0, 0xfffff47c}}, {0x8000, 0x4, {0x1, 0x3}}, {0x1, 0x2, {0x3, 0x6}}, {0x3, 0x2, {0x3, 0x7}}, {0x5, 0x2, {0x2, 0x8}}, {0x7, 0x8, {0x3}}, {0x162, 0x6, {0x1, 0xffff59e4}}, {0x4, 0x1, {0x0, 0xe}}, {0x6, 0x7f, {0x1, 0x840a}}, {0x9, 0x5, {0x3, 0x3}}, {0xa5d, 0xa188, {0x3, 0x5}}, {0x1, 0x40, {0x1, 0x8}}, {0x1, 0x5, {0x1, 0x8}}, {0xfff, 0x4, {0x0, 0x7ff}}, {0x4, 0x6, {0x2, 0xb9}}, {0xfffa, 0xfff2, {0x3, 0xff}}, {0xe, 0x8, {0x0, 0x4}}, {0x5, 0x8, {0x2, 0x10000}}, {0x8, 0x101, {0x2}}, {0x4, 0x3, {0x3, 0xffffffff}}, {0x4, 0x7fff, {0x2, 0x9}}, {0xca48, 0x5, {0x2, 0x7fff}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x0, 0x81, 0x6, 0x3, 0x8, 'syz0\x00', "5e2e1cfa24f35907ac45a9395fb577a5992bf2efde92914bbb73c8fd84cf8ce6", "bfd17acd34e53faf8a660914852cc10eaffbf47252e94cbaf19216ef64732ddc", [{0x401, 0x6, {0x0, 0x9}}, {0xa, 0xa, {0x2}}, {0x0, 0xb96f, {0x2, 0x81}}, {0x4, 0x3, {0x0, 0x819b}}, {0x3442, 0x4, {0x1, 0xa3a6}}, {0x2, 0x74e5, {0x0, 0xfffffff6}}, {0x8, 0x3, {0x0, 0x8}}, {0xc60a, 0x2, {0x1, 0x7}}, {0xfff, 0x6da, {0x7, 0x4}}, {0x3ff, 0x40, {0x3}}, {0x39, 0x8, {0x2, 0x1}}, {0x4, 0x5, {0x1, 0xbddde0e}}, {0x3, 0x5, {0x3, 0x3}}, {0x1, 0xca, {0x1, 0xd}}, {0x3, 0x7fff, {0x0, 0x6}}, {0x6, 0x8, {0x3, 0x4}}, {0x0, 0x0, {0x3, 0xffffffff}}, {0x77eb, 0x5, {0x1, 0x2}}, {0x400, 0x5, {0x3, 0x1}}, {0x7f, 0x6, {0x2, 0xb}}, {0x6, 0x1e7, {0x1, 0x400}}, {0x8, 0x100, {0x3, 0x4}}, {0x6, 0x4, {0x0, 0xb}}, {0x0, 0x5, {0x2, 0x8}}, {0x2, 0x8000, {0x2, 0x80000000}}, {0x3, 0x4, {0x3, 0x2}}, {0x0, 0x3, {0x1, 0x10000}}, {0x2, 0x3, {0x0, 0x9}}, {0x3, 0x89, {0x2, 0x2}}, {0x1, 0x3, {0x3, 0x9}}, {0x4, 0x7fff, {0x6c055d623382059b, 0x6}}, {0x1000, 0x81, {0x0, 0x401}}, {0x4, 0x1, {0x0, 0x7}}, {0x5, 0xfff, {0x2, 0xa}}, {0xfff5, 0x40, {0x1, 0x7}}, {0x79, 0x4, {0x1, 0x3}}, {0x2, 0x57, {0x0, 0x9}}, {0xfee, 0x200, {0x2, 0x9}}, {0x7, 0x1, {0x3, 0x4}}, {0x9, 0x7, {0x3, 0x5}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x48004}, 0x0) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 13.123704822s ago: executing program 0 (id=7043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004d00)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000003640)=""/118, 0x76}, {&(0x7f0000000300)=""/41, 0x29}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/111, 0x6f}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000003440)=""/68, 0x44}], 0x9, &(0x7f0000000580)=""/236, 0xec}, 0x407}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/182, 0xb6}], 0x1, &(0x7f0000000780)=""/115, 0x73}, 0x480000}, {{&(0x7f00000033c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000900), 0x0, &(0x7f0000000940)=""/21, 0x15}, 0x5}, {{&(0x7f0000000800)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000004980)=[{&(0x7f0000000980)=""/232, 0xe8}, {&(0x7f0000000480)=""/30, 0x1e}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/172, 0xac}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f00000046c0)=""/186, 0xba}, {&(0x7f0000004780)=""/107, 0x6b}, {&(0x7f0000000b00)=""/8, 0x8}, {&(0x7f0000004800)=""/219, 0xdb}, {&(0x7f0000004900)=""/117, 0x75}], 0xa, &(0x7f0000000b40)=""/82, 0x52}, 0x7}, {{&(0x7f0000000bc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/110, 0x6e}, {&(0x7f0000000cc0)=""/220, 0xdc}], 0x2, &(0x7f0000000e00)=""/118, 0x76}, 0x151}, {{&(0x7f0000000e80)=@caif=@util, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1, &(0x7f0000001f40)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002f40)=""/51, 0x33}], 0x1, &(0x7f0000002fc0)=""/131, 0x83}, 0x5}, {{&(0x7f0000003080)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000003100)=""/245, 0xf5}, {&(0x7f0000003200)=""/138, 0x8a}, {&(0x7f00000032c0)=""/16, 0x10}, {&(0x7f0000003300)=""/101, 0x65}, {&(0x7f0000003380)=""/54, 0x36}, {&(0x7f0000004f40)=""/124, 0x7c}], 0x6}, 0xa}, {{&(0x7f00000034c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000003540)=""/224, 0xe0}, 0x1606}], 0x9, 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) preadv2(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r4, 0x0) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000300)=@name, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11.361702059s ago: executing program 0 (id=7044): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x3000000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$llc(0x1a, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xfffffffc, 0x4, 0xffffffff}, &(0x7f0000000240), &(0x7f0000000040)=0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}) r5 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000180)='X', 0x1}, {&(0x7f0000000240)='-', 0x1}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) r6 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0'}, 0xb) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) 10.753992505s ago: executing program 4 (id=7046): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000001900)=""/110, 0x6e}, {&(0x7f00000023c0)=""/235, 0xeb}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 10.696823309s ago: executing program 2 (id=7047): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000030601010000000000"], 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b0f, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00000000000000000000000000003e2936798d82642352ec9650262c85a89d9bb6fd7c76166d58c9560038872142085291c12ad9d11724b06fc77242741ea4e55a1e77923941751baae32179a9d3ab89ac22c4ed55e434562a4a58a5d322ab7b0426bf52add0323ceca4af73f850f6cd683c07ee3de90edc64f1a7b205b5efaf9513f8476b9e60c5def926e100e34ef5ca39c8a9805c911660c8ac670593a771346490e3c353d44d1cb852c24f7f58b3ab3509abc64ebb9b2cc7ecb13c43a8be7c8fc4a6514d46d1c3e51306d8a94db267835bd84005b3aca2e2ca"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f00000000000c0005000000000200000000050037000000020008000200", @ANYRES32=r9, @ANYBLOB="050036"], 0x40}, 0x4, 0x700000000000000}, 0x0) 9.786273389s ago: executing program 0 (id=7048): sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x25) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = epoll_create1(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x30002004}) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000780)=ANY=[@ANYBLOB="80340700ffffffffffff08021100000187272bc59a224900ffffffffffffff7f06002280000453ec897a040600f7f00e05002503000b040f0105720603030303030371070101ffffffd2037606018012000080ddab9a0e39463b2ba80935bf1b37a54e546794b021745027b18373942fd1d14cda4c9d44cbf31fea475a58fd9221", @ANYRES32=r3, @ANYBLOB="ba5bccbf8cfdb5f2fd99e254685e7c0a9e170d854254942f8af81b66089104828bbbbf5dd514c51caf3287f2f3369bd3159d91639b94547a8fbd6a11c0d8af663d3a9b31d16d5161e2b1377c8883b9f47d7b4d174097e87350067f80880a5dcaa57708175e30e9b5281fefbc07ee08d5e618955fff87976ce1075a5c9aa756013d595001ed27e89fc6024e6d58f7c022ed7d6b8ece223841453325cd5e4c628c02b2a1dba81882d4b670e12b96a1943b0f80bf5e10e8d1ab0e5954b146a1dc386ab3c149604bdb814d0c7c768d381b160c8b50a21b5de07a483b5a604cf71241dfacaddc86d6fca5056970af08200c2696cb8c695c5eb120a1837f5a3a7a954a1ced93d3f7555e39c1f0a6b74833848e233755208b9f47776ded4e612de0fc672396422db5e1247591a7094e807f947dae5eda2097eefc08640824fd256d8cf291989d52acff567bcfb3f932af7a9ce8f4a84620eb4e5d8205bdb320d037e64f86fcd93bdebba0e3a8418730d55907cf9da4b28cc196085cc4a0d38c2b60fa09e54b172769d55ef477249048dfc119971c67d66d1c649147b7c11d6f20201f0096caa9225d7d3fac56e5eba628e99857b510418cb7c0d72eadfe731cf5f5729851c2f618c2aeed2c1bbaa2939e4fa2a785d7f3a2a555124e80142de12cab0d5eb8f3a71ce3352fd35630aa110803cf81ed6e594319e24b4a1e640ce6b9cfd2b6d9f03a01b776ec01921dd6b570d58e5d711609dc9f1ba8be6c1e56573a984297d784792f0747f13cb4cd8689a60495bceb0def4dba9ec6f81881102474bfbbec758e2f03c26684c39e"], 0x404) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x11, @remote, 0x0, 0x3, 'dh\x00'}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01e7000000000000000004"], 0x18}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0xc000) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f00000002c0)=0xb0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="8000000008021100000008021100000050505050505000000000000000000000dffa000000200f15b29628b086ff2b238b695893fd79182d4bea05334aabb9f26f53a4b55cc404060003030000003c04017f760477"], 0x5c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000c000300686173683a697000050005000a000000050004"], 0x50}}, 0x0) 9.697039574s ago: executing program 3 (id=7050): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x19, &(0x7f00000003c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create(0x689) r3 = socket(0x11, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_pwait(r2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) (fail_nth: 6) 9.579112061s ago: executing program 4 (id=7051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004d00)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000003640)=""/118, 0x76}, {&(0x7f0000000300)=""/41, 0x29}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/111, 0x6f}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000003440)=""/68, 0x44}], 0x9, &(0x7f0000000580)=""/236, 0xec}, 0x407}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/182, 0xb6}], 0x1, &(0x7f0000000780)=""/115, 0x73}, 0x480000}, {{&(0x7f00000033c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000900), 0x0, &(0x7f0000000940)=""/21, 0x15}, 0x5}, {{&(0x7f0000000800)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000004980)=[{&(0x7f0000000980)=""/232, 0xe8}, {&(0x7f0000000480)=""/30, 0x1e}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/172, 0xac}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f00000046c0)=""/186, 0xba}, {&(0x7f0000004780)=""/107, 0x6b}, {&(0x7f0000000b00)=""/8, 0x8}, {&(0x7f0000004800)=""/219, 0xdb}, {&(0x7f0000004900)=""/117, 0x75}], 0xa, &(0x7f0000000b40)=""/82, 0x52}, 0x7}, {{&(0x7f0000000bc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/110, 0x6e}, {&(0x7f0000000cc0)=""/220, 0xdc}], 0x2, &(0x7f0000000e00)=""/118, 0x76}, 0x151}, {{&(0x7f0000000e80)=@caif=@util, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1, &(0x7f0000001f40)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002f40)=""/51, 0x33}], 0x1, &(0x7f0000002fc0)=""/131, 0x83}, 0x5}, {{&(0x7f0000003080)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000003100)=""/245, 0xf5}, {&(0x7f0000003200)=""/138, 0x8a}, {&(0x7f00000032c0)=""/16, 0x10}, {&(0x7f0000003300)=""/101, 0x65}, {&(0x7f0000003380)=""/54, 0x36}, {&(0x7f0000004f40)=""/124, 0x7c}], 0x6}, 0xa}, {{&(0x7f00000034c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000003540)=""/224, 0xe0}, 0x1606}], 0x9, 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) preadv2(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r4, 0x0) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000300)=@name, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9.392139714s ago: executing program 2 (id=7053): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) open(0x0, 0x40a80, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000001300)=""/4096}, 0x90) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r8}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x800}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x45}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r11, &(0x7f0000001680)="f31552c51ef81b5abfa9f8", 0xb) 9.386046602s ago: executing program 3 (id=7054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x1, 0x20000000}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1}, 0x48) r7 = socket(0x1, 0x2, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000780)) sendto$unix(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x6, 0x3, 0x6, 0x1, 0x7, 0xc9d0}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000300)={0x1, 0x2, 'client1\x00', 0x80000002, "feda128e289fabfc", "1f15f151ad62129d4b65d8423deaf5612fd98ea9387ef3469e0d395c3520ff23", 0x6, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0x1}}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @pic={0x0, 0x80}}) 8.355605864s ago: executing program 4 (id=7055): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) 7.768852068s ago: executing program 1 (id=7056): r0 = gettid() syz_open_procfs(r0, &(0x7f0000000180)='loginuid\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x3d4, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6d7f252aeb3cb940df51f9972a"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0xa, 0x4, "c0218d971d75"}, @NL80211_KEY_SEQ={0xc, 0x4, "ef33e7c1dcc3f534"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "42ce83630a2e049d519969e610"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "64dca51cd1"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x10, 0x4, "d2ea802a9a8e5f065d21a958"}, @NL80211_KEY_MODE={0x5}]}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "7ccf8ee45e0f23"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0xf1, 0xfa, "6e307dc71568324c60110931bdc7cfa39f6b3fb15494ab7d3adbe5dd9fe9b3a27d2f3ebd73ac2a8550889e30a6594004d1a0aa01f0d0c489312240e393a3779d8680a1762bca4025f52ea5892c4bf16ff44f4b00212166547925b180818523af3d9edf5ec7c2fc0612c159282531f90c250bdb1429d59be9cfc0cf14bbfdfc95d82a354e25061b6cc6c85c565b842536b8300be1e26f7b66ec5c11e831abf2d15f5556cf6b5dc9013d24b5afe9551158fb146e54c289e83c9999e4e8a6f1ed6d1b6ee488756e44e740b9f631e52a1765165faa67c5b04a824acce22f6baf212303879891b1b5b9c7787931ad5e"}, @NL80211_ATTR_FILS_ERP_REALM={0x101, 0xfa, "d7a21caad3c5063389583bc60361f4c7df49e921153174439891084920cd87eb4416f0cc3c24245d42858d7cecd0a0936d91a5df1f684a8d6b879d02d09b859db6af4ae651126267b1190a4b5f7eecc03b9f5b773f55c64c9da4c21a7485954578f5e5788f36d4edcca4b6e0e012864a60d6d3c7be4e47b7840961f3a3d5678a1b1808a14d00aaec9c47a34abd41d6e10a2b44969a6f1cbd64d5dc8b93b34e9bad979072a7c4b6fb431738481b6b8fa794d72198a63af2def6ef9425f1202f427876243c0bcfc187c0deeef362f264fa7efe3cfe8ec67705673a579e98bb3dd61fdc90c973538d12e71f74c883b649cd02b0b1b370b8c6294dd8b8cf16"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_RRK={0x5c, 0xfc, "ad53517c248e59d4eabdbd714cb4fb6d6275d8d9f9dbeb137a631d045ec4c32b96a9272aa9949c1ac2c93fb200e3ef6c6aee122841eb8714331a6e1714533cbea4034d6b138215be6e4a96124109ac4d298511b94be605e0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "edb089"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1a}]]}, 0x3d4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x7, 0x0, 0x8, @remote, @empty, 0x7, 0x1, 0x5d, 0xbc}}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd40, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x0, 0x0, 0x114}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r9, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) 7.701664166s ago: executing program 0 (id=7057): semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4041) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000ffffffffff0eabaaaaaaaabb88a800008100000008004500002c00000000002f9078ac1e0001e00000010000655800189078040000000000000086dd0000000000"], 0xfdef) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r6, 0x8910, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x911, 0x12) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000080)={'veth0_macvtap\x00', @remote}) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xc, 0x1000}, {0x2}], 0x3) 7.556011136s ago: executing program 3 (id=7058): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x3000000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$llc(0x1a, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xfffffffc, 0x4, 0xffffffff}, &(0x7f0000000240), &(0x7f0000000040)=0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}) r6 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000180)='X', 0x1}, {&(0x7f0000000240)='-', 0x1}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) r7 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000300)={'#! ', './file0'}, 0xb) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) 6.180972517s ago: executing program 3 (id=7059): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e35f41b193ff79bc71ec6a6bc3d57886de3d7b4cd07ec3ee777de774"}}]}]}, 0x5c}}, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r9, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}, {0x0}, {0x0}, {&(0x7f0000000200)="1b", 0x1}], 0x4}}], 0x1, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01011000000009040000000000000009cd8d1f0002000000090505020000fcffff09058b"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) 5.996878183s ago: executing program 1 (id=7060): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x90) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x2eda) listen(r6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000900)={0x1, 0x0, {0x0, 0x0, 0x200f}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r6}, 0x20) recvmmsg(r6, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/188, 0xbc}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r6, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 3.480251299s ago: executing program 2 (id=7061): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000001900)=""/110, 0x6e}, {&(0x7f00000023c0)=""/235, 0xeb}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 3.355080722s ago: executing program 1 (id=7062): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x800442d2, &(0x7f0000000080)={'macsec0\x00', @dev}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x18, &(0x7f0000000100)={0xfe, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r8, 0x26}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)}], 0x1}, 0x0) r9 = socket(0x25, 0x1, 0x0) recvfrom$inet(r9, 0x0, 0x0, 0x40000022, 0x0, 0x0) 2.729063955s ago: executing program 0 (id=7063): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.572275565s ago: executing program 0 (id=7064): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xc5, 0x1, 0xde, 0x40, 0x4bb, 0x901, 0x55ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6b, 0x3f, 0x1d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x20000, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x3, 0x81}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x10, 0x8, 0x0, 0x3}, @call_mgmt={0x3, 0x24, 0x1, 0x1, 0xca}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.534238435s ago: executing program 4 (id=7065): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r7, 0x80047437, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) 2.484439072s ago: executing program 1 (id=7066): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 1.36401205s ago: executing program 4 (id=7067): sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x25) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = epoll_create1(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x30002004}) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000780)=ANY=[@ANYBLOB="80340700ffffffffffff08021100000187272bc59a224900ffffffffffffff7f06002280000453ec897a040600f7f00e05002503000b040f0105720603030303030371070101ffffffd2037606018012000080ddab9a0e39463b2ba80935bf1b37a54e546794b021745027b18373942fd1d14cda4c9d44cbf31fea475a58fd9221", @ANYRES32=r3, @ANYBLOB="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"], 0x404) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x11, @remote, 0x0, 0x3, 'dh\x00'}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01e7000000000000000004"], 0x18}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0xc000) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f00000002c0)=0xb0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="8000000008021100000008021100000050505050505000000000000000000000dffa000000200f15b29628b086ff2b238b695893fd79182d4bea05334aabb9f26f53a4b55cc404060003030000003c04017f760477"], 0x5c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000c000300686173683a697000050005000a000000050004"], 0x50}}, 0x0) 1.262213181s ago: executing program 2 (id=7068): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) waitid(0x2, r0, &(0x7f0000000300), 0x1000000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendto$l2tp(r6, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c00000055719fb8c8e01518138bce650d201e0a378dc44cc59ee6995580dc18195a634582cfe4ea640be344497ece48582147703a2df1d3aaf3fe7268a956b714f256106203ae5c4223ea877a4b9ec66090323deda0446803bd6cd20005b095fc1aef2a8cfb48172043860476b77066c42b3cfdf35b072cfcab52dbc547c2b574f8043c6d3344b2f41e69afb92c79ac93aa5e953e04659d93dcb128ea61c684f9273343f004b3bbeee88dcdd3006c9ee89cc946b9cf5607f0a8dada9a434026c18e00", @ANYRES16=r8, @ANYBLOB="000326bd7000ffdbdf250e00000008000600188cffff24000280080008000000000005000d00000000000800040006000000080009000000000008000500272100002400028006000b000a0000000800060005000000080003000100000006000b0002000000080006000600000008000500ff070000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20048014) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) 1.261382379s ago: executing program 1 (id=7069): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x3000000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$llc(0x1a, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xfffffffc, 0x4, 0xffffffff}, &(0x7f0000000240), &(0x7f0000000040)=0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}) r6 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000180)='X', 0x1}, {&(0x7f0000000240)='-', 0x1}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) r7 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000300)={'#! ', './file0'}, 0xb) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) 1.199218922s ago: executing program 3 (id=7070): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0082, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltclass={0x24}, 0x24}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x48, &(0x7f0000000540)="a4726cee", 0x4) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000a, 0x11012, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={0x0, r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000ff0000000000000000711215000000000095000000000000001bdf93e732d969e55af44a9e64f8e337a09e2e12f9bdc78ca8409daf2c1d33c457adf69fd8f3f3a2e51cfebfb7c016e442eb0aad98f6f78b6ac90b103d97"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) 185.825795ms ago: executing program 1 (id=7071): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = open(0x0, 0x40a80, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000001300)=""/4096}, 0x90) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r9}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11, 0xffffffffffffffff, 0x0, 0x800}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x44}, 0x10, 0xd}}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r12, &(0x7f0000001680)="f31552c51ef81b5abfa9f8", 0xb) 84.170119ms ago: executing program 2 (id=7072): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x90) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x2eda) listen(r6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000900)={0x1, 0x0, {0x0, 0x0, 0x200f}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r6}, 0x20) recvmmsg(r6, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/188, 0xbc}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r6, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 0s ago: executing program 3 (id=7073): semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4041) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000ffffffffff0eabaaaaaaaabb88a800008100000008004500002c00000000002f9078ac1e0001e00000010000655800189078040000000000000086dd000000000000"], 0xfdef) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r6, 0x8910, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x911, 0x12) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000080)={'veth0_macvtap\x00', @remote}) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xc, 0x1000}, {0x2}], 0x3) kernel console output (not intermixed with test programs): _limit=64 [ 2469.500094][ T29] audit: type=1400 audit(1723525612.694:831571): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29293 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2469.500097][T29978] audit: audit_lost=191909 audit_rate_limit=0 audit_backlog_limit=64 [ 2469.500140][ T29] audit: type=1400 audit(1723525612.694:831572): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29293 comm="syz-executor" name="34" dev="tmpfs" ino=191 [ 2469.550566][ T29] audit: type=1400 audit(1723525612.704:831573): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=29975 comm="syz.2.6514" name="video9" dev="devtmpfs" ino=874 [ 2469.550679][T29978] audit: backlog limit exceeded [ 2469.585020][T29980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2469.587045][ T29] audit: type=1400 audit(1723525612.704:831574): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29293 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2470.181282][T15804] team0 (unregistering): Port device team_slave_1 removed [ 2470.239922][T15804] team0 (unregistering): Port device team_slave_0 removed [ 2470.791642][T29836] hsr_slave_0: entered promiscuous mode [ 2470.798659][T29836] hsr_slave_1: entered promiscuous mode [ 2472.903005][T29836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2472.939990][T29836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2472.985282][T22977] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2473.060044][ T5225] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 2473.069591][ T5225] Bluetooth: hci6: Injecting HCI hardware error event [ 2473.077526][ T5225] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2473.086844][ T5225] Bluetooth: hci3: Injecting HCI hardware error event [ 2473.095756][ T5225] Bluetooth: hci6: hardware error 0x00 [ 2473.111165][T19946] Bluetooth: hci3: hardware error 0x00 [ 2473.329538][T22977] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2473.342024][T22977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.369398][T24662] Bluetooth: hci1: command tx timeout [ 2473.466709][T22977] usb 3-1: config 0 descriptor?? [ 2473.680408][T30019] vivid-000: ================= START STATUS ================= [ 2473.688164][T30019] vivid-000: Generate PTS: true [ 2473.693069][T30019] vivid-000: Generate SCR: true [ 2473.698003][T30019] tpg source WxH: 320x180 (R'G'B) [ 2473.703031][T30019] tpg field: 1 [ 2473.706440][T30019] tpg crop: 320x180@0x0 [ 2473.710588][T30019] tpg compose: 320x180@0x0 [ 2473.715040][T30019] tpg colorspace: 8 [ 2473.718836][T30019] tpg transfer function: 0/2 [ 2473.723415][T30019] tpg quantization: 0/1 [ 2473.727605][T30019] tpg RGB range: 0/2 [ 2473.731513][T30019] vivid-000: ================== END STATUS ================== [ 2473.754097][T29836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2473.940325][T29836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2474.192469][T29836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2474.242203][T29836] 8021q: adding VLAN 0 to HW filter on device team0 [ 2474.282064][T24089] bridge0: port 1(bridge_slave_0) entered blocking state [ 2474.289375][T24089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2474.360659][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state [ 2474.367960][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2474.388708][ T29] kauditd_printk_skb: 4923 callbacks suppressed [ 2474.388726][ T29] audit: type=1400 audit(1723525617.744:834891): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=30010 comm="syz.2.6528" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 2474.393534][T28213] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2474.410837][ T29] audit: type=1400 audit(1723525617.744:834892): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=30010 comm="syz.2.6528" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 2474.426657][T29257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2474.450761][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2474.457324][ C1] audit: audit_lost=192446 audit_rate_limit=0 audit_backlog_limit=64 [ 2474.465614][ C1] audit: backlog limit exceeded [ 2474.470935][T30031] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2474.477920][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2474.477944][ C1] audit: audit_lost=192447 audit_rate_limit=0 audit_backlog_limit=64 [ 2474.477964][ C1] audit: backlog limit exceeded [ 2474.689478][T28213] usb 5-1: Using ep0 maxpacket: 8 [ 2475.032746][T28213] usb 5-1: config 0 has no interfaces? [ 2475.042873][T29836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2475.067261][T28213] usb 5-1: config 0 has no interfaces? [ 2475.077972][T28213] usb 5-1: config 0 has no interfaces? [ 2475.083480][T28213] usb 5-1: New USB device found, idVendor=0abf, idProduct=0000, bcdDevice= 0.00 [ 2475.094141][T28213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2475.129487][T28213] usb 5-1: config 0 descriptor?? [ 2475.174707][T19946] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2475.184482][ T5225] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 2475.655223][T22977] usb 3-1: Cannot set autoneg [ 2475.671470][T22977] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 2475.841224][T29836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2475.945258][T29836] veth0_vlan: entered promiscuous mode [ 2475.961778][T29836] veth1_vlan: entered promiscuous mode [ 2476.030496][T29836] veth0_macvtap: entered promiscuous mode [ 2476.045946][T29836] veth1_macvtap: entered promiscuous mode [ 2476.067775][T30059] loop0: detected capacity change from 0 to 7 [ 2476.077605][T29836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2476.090490][T29836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.096362][T30059] Dev loop0: unable to read RDB block 7 [ 2476.101541][T29836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2476.131082][T30059] loop0: unable to read partition table [ 2476.131107][T29836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.147612][T29836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2476.148827][T30059] loop0: partition table beyond EOD, [ 2476.158068][T29836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.158087][T29836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2476.158103][T29836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.159820][T29836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2476.174710][T30059] truncated [ 2476.201193][T29836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2476.202108][T30059] loop_reread_partitions: partition scan of loop0 (被xd) failed (rc=-5) [ 2476.226826][T29836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.237843][T29836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2476.252104][T29836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.269799][T29836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2476.280423][T29836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.291701][T29836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2476.308137][T29836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.321159][T29836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2476.370745][T29836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2476.387995][T29836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2476.399699][T29836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2476.413084][T29836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2477.182731][T17033] usb 5-1: USB disconnect, device number 69 [ 2477.308031][T15807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2477.344505][T15807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2477.405693][T28213] usb 3-1: USB disconnect, device number 94 [ 2477.614701][T15794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2477.645782][T15794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2479.609266][ T29] kauditd_printk_skb: 4327 callbacks suppressed [ 2479.609461][ T29] audit: type=1400 audit(1723525622.724:838854): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30087 comm="syz.0.6471" name="newroot" dev="tmpfs" ino=2 [ 2479.889679][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2479.895496][T30089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2479.897061][T29299] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2479.903206][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2479.909432][T29296] audit: audit_lost=192571 audit_rate_limit=0 audit_backlog_limit=64 [ 2479.915703][ C1] audit: audit_lost=192572 audit_rate_limit=0 audit_backlog_limit=64 [ 2479.915722][ C1] audit: backlog limit exceeded [ 2479.916753][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2479.923979][T30089] audit: audit_lost=192573 audit_rate_limit=0 audit_backlog_limit=64 [ 2480.574014][T28213] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2481.244296][T28213] usb 3-1: Using ep0 maxpacket: 8 [ 2481.349603][T28213] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2481.379176][T28213] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2482.169965][T28213] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2482.179815][T28213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.535030][T30119] autofs: Bad value for 'fd' [ 2482.845045][T15807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2482.935681][T15807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2483.129248][T30126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2484.209498][T17033] usb 3-1: USB disconnect, device number 95 [ 2484.321924][T30135] FAULT_INJECTION: forcing a failure. [ 2484.321924][T30135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2484.346802][T30135] CPU: 1 UID: 0 PID: 30135 Comm: syz.2.6559 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 2484.357591][T30135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2484.367654][T30135] Call Trace: [ 2484.370949][T30135] [ 2484.373891][T30135] dump_stack_lvl+0x241/0x360 [ 2484.378596][T30135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2484.383817][T30135] ? __pfx__printk+0x10/0x10 [ 2484.388416][T30135] ? __pfx_lock_release+0x10/0x10 [ 2484.393435][T30135] should_fail_ex+0x3b0/0x4e0 [ 2484.398112][T30135] _copy_from_iter+0x1f6/0x1960 [ 2484.402950][T30135] ? __virt_addr_valid+0x183/0x530 [ 2484.408061][T30135] ? __pfx_lock_release+0x10/0x10 [ 2484.413098][T30135] ? __alloc_skb+0x28f/0x440 [ 2484.417682][T30135] ? __pfx__copy_from_iter+0x10/0x10 [ 2484.422955][T30135] ? __virt_addr_valid+0x183/0x530 [ 2484.428057][T30135] ? __virt_addr_valid+0x183/0x530 [ 2484.433176][T30135] ? __virt_addr_valid+0x45f/0x530 [ 2484.438275][T30135] ? __check_object_size+0x49c/0x900 [ 2484.443550][T30135] netlink_sendmsg+0x73d/0xcb0 [ 2484.448478][T30135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2484.453744][T30135] ? __import_iovec+0x536/0x820 [ 2484.458579][T30135] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2484.463853][T30135] ? security_socket_sendmsg+0x87/0xb0 [ 2484.469308][T30135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2484.474571][T30135] __sock_sendmsg+0x221/0x270 [ 2484.479236][T30135] ____sys_sendmsg+0x525/0x7d0 [ 2484.483998][T30135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2484.489286][T30135] __sys_sendmsg+0x2b0/0x3a0 [ 2484.493961][T30135] ? __pfx___sys_sendmsg+0x10/0x10 [ 2484.499060][T30135] ? vfs_write+0x7c4/0xc90 [ 2484.503474][T30135] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2484.509783][T30135] ? do_syscall_64+0x100/0x230 [ 2484.514542][T30135] ? do_syscall_64+0xb6/0x230 [ 2484.519219][T30135] do_syscall_64+0xf3/0x230 [ 2484.523702][T30135] ? clear_bhb_loop+0x35/0x90 [ 2484.528361][T30135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2484.534250][T30135] RIP: 0033:0x7f6fee9799f9 [ 2484.538665][T30135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2484.558254][T30135] RSP: 002b:00007f6fef6ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2484.566651][T30135] RAX: ffffffffffffffda RBX: 00007f6feeb15f80 RCX: 00007f6fee9799f9 [ 2484.574629][T30135] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000014 [ 2484.582597][T30135] RBP: 00007f6fef6ab090 R08: 0000000000000000 R09: 0000000000000000 [ 2484.590558][T30135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2484.598518][T30135] R13: 0000000000000000 R14: 00007f6feeb15f80 R15: 00007ffe4304e7b8 [ 2484.606495][T30135] [ 2484.619464][ T29] kauditd_printk_skb: 2048 callbacks suppressed [ 2484.619484][ T29] audit: type=1400 audit(1723525627.964:840269): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30130 comm="syz.4.6560" name="netdev:wlan0" dev="debugfs" ino=135340 [ 2484.671458][ T29] audit: type=1400 audit(1723525627.964:840270): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30130 comm="syz.4.6560" name="netdev:wlan0" dev="debugfs" ino=135340 [ 2485.566195][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2485.566374][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2485.572713][T29836] audit: audit_lost=192786 audit_rate_limit=0 audit_backlog_limit=64 [ 2485.572731][T29836] audit: backlog limit exceeded [ 2485.579269][ C1] audit: audit_lost=192787 audit_rate_limit=0 audit_backlog_limit=64 [ 2485.579286][ C1] audit: backlog limit exceeded [ 2485.594028][ T29] audit: type=1400 audit(1723525627.964:840271): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30130 comm="syz.4.6560" name="netdev:wlan0" dev="debugfs" ino=135340 [ 2485.642729][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2487.183089][T30165] omfs: Invalid superblock (0) [ 2489.624413][T29299] audit_log_start: 2299 callbacks suppressed [ 2489.624433][T29299] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2489.624901][T30171] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2489.630425][T29299] audit: audit_lost=193196 audit_rate_limit=0 audit_backlog_limit=64 [ 2489.643749][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2489.643774][ C1] audit: audit_lost=193197 audit_rate_limit=0 audit_backlog_limit=64 [ 2489.643794][ C1] audit: backlog limit exceeded [ 2489.643966][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2489.643984][T29836] audit: audit_lost=193198 audit_rate_limit=0 audit_backlog_limit=64 [ 2489.644001][T29836] audit: backlog limit exceeded [ 2489.644032][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2494.715827][ T29] kauditd_printk_skb: 4077 callbacks suppressed [ 2494.715847][ T29] audit: type=1400 audit(1723525637.954:844821): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=30231 comm="syz.1.6593" opid=30231 ocomm="syz.1.6593" [ 2494.750195][ T29] audit: type=1400 audit(1723525638.104:844822): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30229 comm="syz.3.6591" name="61" dev="tmpfs" ino=344 [ 2494.787372][T30236] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2494.852733][T30238] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2494.859694][T30238] audit: audit_lost=193401 audit_rate_limit=0 audit_backlog_limit=64 [ 2494.868294][T30238] audit: backlog limit exceeded [ 2494.873695][T30238] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2494.881251][T30238] audit: audit_lost=193402 audit_rate_limit=0 audit_backlog_limit=64 [ 2494.889547][T30238] audit: backlog limit exceeded [ 2494.894659][T30238] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2496.346892][T30258] netlink: 'syz.4.6602': attribute type 3 has an invalid length. [ 2496.410455][T30258] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6602'. [ 2496.969465][T30270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6607'. [ 2496.978749][T30270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6607'. [ 2497.625804][T15129] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2498.328607][T15129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2498.349429][T15129] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2498.388285][T30281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2498.389618][T15129] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2498.433408][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.454078][T15129] usb 2-1: config 0 descriptor?? [ 2498.463469][T15129] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2498.467034][T30289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2499.488129][T28213] usb 2-1: USB disconnect, device number 69 [ 2499.809086][ T29] kauditd_printk_skb: 4148 callbacks suppressed [ 2499.809103][ T29] audit: type=1400 audit(1723525643.164:848388): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29836 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2499.856409][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2499.872326][T29836] audit: audit_lost=193598 audit_rate_limit=0 audit_backlog_limit=64 [ 2499.884835][ T29] audit: type=1400 audit(1723525643.164:848389): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29836 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2499.890722][T29836] audit: backlog limit exceeded [ 2499.928743][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2499.931260][ T29] audit: type=1400 audit(1723525643.164:848390): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29836 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2499.965671][T29836] audit: audit_lost=193599 audit_rate_limit=0 audit_backlog_limit=64 [ 2500.000394][T29836] audit: backlog limit exceeded [ 2500.005818][ T29] audit: type=1400 audit(1723525643.164:848391): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29836 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2500.134808][T30306] input: syz1 as /devices/virtual/input/input135 [ 2502.248770][T30338] syz.2.6627: attempt to access beyond end of device [ 2502.248770][T30338] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 2504.814251][ T29] kauditd_printk_skb: 3057 callbacks suppressed [ 2504.814270][ T29] audit: type=1400 audit(1723525648.174:851291): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2504.848802][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2504.862015][T30371] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2504.869065][T29296] audit: audit_lost=193653 audit_rate_limit=0 audit_backlog_limit=64 [ 2504.877657][T30371] audit: audit_lost=193654 audit_rate_limit=0 audit_backlog_limit=64 [ 2504.887256][T29296] audit: backlog limit exceeded [ 2504.894133][T30372] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2504.905448][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2504.913532][T30371] audit: backlog limit exceeded [ 2504.919903][T29296] audit: audit_lost=193655 audit_rate_limit=0 audit_backlog_limit=64 [ 2505.701372][T30377] netlink: 'syz.1.6640': attribute type 9 has an invalid length. [ 2505.722859][T30377] netlink: 91148 bytes leftover after parsing attributes in process `syz.1.6640'. [ 2505.764530][T30377] net_ratelimit: 6027 callbacks suppressed [ 2505.764551][T30377] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 2508.507497][T20178] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 2508.547772][T30422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2508.573054][T26801] IPVS: starting estimator thread 0... [ 2508.794229][T30424] IPVS: using max 17 ests per chain, 40800 per kthread [ 2509.695426][T20178] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2509.720254][T20178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2509.753103][T20178] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2509.770598][T20178] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2509.783387][T20178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.816861][T30413] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2509.827213][ T29] kauditd_printk_skb: 3284 callbacks suppressed [ 2509.827231][ T29] audit: type=1400 audit(1723525653.184:854309): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=30412 comm="syz.1.6649" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 2509.878253][ T29] audit: type=1400 audit(1723525653.214:854310): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=30412 comm="syz.1.6649" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 2509.885422][T20178] hub 2-1:1.0: bad descriptor, ignoring hub [ 2509.904466][ T29] audit: type=1400 audit(1723525653.224:854311): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5201 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2509.932664][T29293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2509.935639][T20178] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2509.947378][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2509.953989][ C1] audit: audit_lost=193745 audit_rate_limit=0 audit_backlog_limit=64 [ 2509.962084][ C1] audit: backlog limit exceeded [ 2509.967382][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2509.968013][T20178] cdc_wdm 2-1:1.0: skipping garbage [ 2509.973995][ C1] audit: audit_lost=193746 audit_rate_limit=0 audit_backlog_limit=64 [ 2509.974016][ C1] audit: backlog limit exceeded [ 2510.059195][T20178] cdc_wdm 2-1:1.0: skipping garbage [ 2510.087020][T20178] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2510.119054][T20178] cdc_wdm 2-1:1.0: Unknown control protocol [ 2510.192135][T20178] usb 2-1: USB disconnect, device number 70 [ 2510.864109][T15129] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 2511.084047][ T5225] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2511.095082][ T5225] Bluetooth: hci1: Injecting HCI hardware error event [ 2511.104393][ T5225] Bluetooth: hci1: hardware error 0x00 [ 2511.106464][T15129] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2511.173985][T15129] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2511.196164][T15129] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2511.210653][T15129] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2511.221069][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2511.246467][T30413] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2511.274546][T15129] hub 2-1:1.0: bad descriptor, ignoring hub [ 2511.303557][T15129] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2511.354794][T15129] cdc_wdm 2-1:1.0: skipping garbage [ 2511.371837][T15129] cdc_wdm 2-1:1.0: skipping garbage [ 2511.388454][T15129] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2511.397363][T15129] cdc_wdm 2-1:1.0: Unknown control protocol [ 2512.003602][T30474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2512.043344][T30475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2512.057667][T28213] IPVS: starting estimator thread 0... [ 2512.080453][T30474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2512.092431][T30475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2512.145156][T30476] IPVS: using max 20 ests per chain, 48000 per kthread [ 2512.214245][T28213] usb 2-1: USB disconnect, device number 71 [ 2512.274184][T30480] tipc: Started in network mode [ 2512.279199][T30480] tipc: Node identity 7f000001, cluster identity 4711 [ 2512.288262][T30480] tipc: Enabled bearer , priority 10 [ 2512.773999][T15129] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2513.083991][T15129] usb 4-1: Using ep0 maxpacket: 8 [ 2513.096645][T15129] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2513.114688][T15129] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2513.130273][T15129] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2513.143382][T15129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.173968][ T5225] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2513.404286][T26801] tipc: Node number set to 2130706433 [ 2514.418192][T30503] tipc: Started in network mode [ 2514.423211][T30503] tipc: Node identity 7f000001, cluster identity 4711 [ 2514.431487][T30503] tipc: Enabled bearer , priority 10 [ 2514.847605][ T29] kauditd_printk_skb: 4123 callbacks suppressed [ 2514.847647][ T29] audit: type=1400 audit(1723525658.204:858067): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=30498 comm="syz.2.6675" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 2514.945632][T15129] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2515.019209][T30505] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2515.037732][T30503] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2515.044524][T30503] audit: audit_lost=193870 audit_rate_limit=0 audit_backlog_limit=64 [ 2515.053288][T30503] audit: backlog limit exceeded [ 2515.059231][T30503] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2515.065989][T30503] audit: audit_lost=193871 audit_rate_limit=0 audit_backlog_limit=64 [ 2515.074153][T30503] audit: backlog limit exceeded [ 2515.082102][T30503] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2515.088698][T30503] audit: audit_lost=193872 audit_rate_limit=0 audit_backlog_limit=64 [ 2515.283928][T15129] usb 3-1: Using ep0 maxpacket: 8 [ 2515.482485][T15129] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2515.516108][T15129] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2515.535235][T22977] usb 4-1: USB disconnect, device number 74 [ 2515.543941][T20178] tipc: Node number set to 2130706433 [ 2515.551631][T15129] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2515.564125][T15129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2515.934065][T28213] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2516.144601][T28213] usb 5-1: Using ep0 maxpacket: 16 [ 2516.163411][T28213] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 2516.174046][T28213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2516.183026][T28213] usb 5-1: Product: syz [ 2516.190324][T28213] usb 5-1: Manufacturer: syz [ 2516.195849][T28213] usb 5-1: SerialNumber: syz [ 2516.208124][T28213] usb 5-1: config 0 descriptor?? [ 2517.042455][T30526] autofs: Bad value for 'fd' [ 2517.656155][T14110] usb 3-1: USB disconnect, device number 96 [ 2518.085182][T28213] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2518.094408][T28213] usb 5-1: MIDIStreaming interface descriptor not found [ 2518.129132][T30531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2518.246550][T28213] usb 5-1: USB disconnect, device number 70 [ 2518.417507][T30531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2518.429359][T15129] IPVS: starting estimator thread 0... [ 2518.655118][T30542] IPVS: using max 18 ests per chain, 43200 per kthread [ 2519.919122][ T29] kauditd_printk_skb: 3200 callbacks suppressed [ 2519.919136][ T29] audit: type=1400 audit(1723525662.784:860482): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30551 comm="syz.1.6688" saddr=172.20.20.10 src=55784 daddr=172.20.20.187 dest=16385 netif=lo [ 2519.948263][ T29] audit: type=1400 audit(1723525662.794:860483): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=30551 comm="syz.1.6688" opid=30551 ocomm="syz.1.6688" [ 2519.970670][T29299] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2519.979482][T29299] audit: audit_lost=194135 audit_rate_limit=0 audit_backlog_limit=64 [ 2519.983998][ T29] audit: type=1400 audit(1723525662.834:860484): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30551 comm="syz.1.6688" name="newroot" dev="tmpfs" ino=2 [ 2519.987842][T29299] audit: backlog limit exceeded [ 2520.081231][T30562] tipc: Enabling of bearer rejected, already enabled [ 2520.100383][T30562] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2520.107241][T30562] audit: audit_lost=194136 audit_rate_limit=0 audit_backlog_limit=64 [ 2520.115452][T30562] audit: backlog limit exceeded [ 2520.120427][T30562] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2520.923590][T30564] autofs: Unknown parameter 'no98E' [ 2521.082627][T30571] macvlan2: entered promiscuous mode [ 2521.095162][T30571] vlan1: entered promiscuous mode [ 2521.238190][T15129] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2521.282473][T30571] team0: Port device macvlan2 added [ 2521.362758][T30578] autofs: Bad value for 'fd' [ 2522.183911][T15129] usb 4-1: Using ep0 maxpacket: 8 [ 2522.277815][T15129] usb 4-1: device descriptor read/all, error -71 [ 2522.325162][T30583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2522.352179][T30583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2522.496434][T30593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6698'. [ 2522.520194][T30593] vlan1: entered allmulticast mode [ 2522.813567][T30601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6702'. [ 2528.864308][ T29] kauditd_printk_skb: 2364 callbacks suppressed [ 2528.864328][ T29] audit: type=1400 audit(1723525666.384:862751): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30605 comm="modprobe" name="/" dev="sda1" ino=2 [ 2529.014473][T29836] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2529.014479][T29257] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2529.014494][T29257] audit: audit_lost=194170 audit_rate_limit=0 audit_backlog_limit=64 [ 2529.020984][T29836] audit: audit_lost=194171 audit_rate_limit=0 audit_backlog_limit=64 [ 2529.028366][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2529.048855][T29257] audit: backlog limit exceeded [ 2529.050245][ C1] audit: audit_lost=194172 audit_rate_limit=0 audit_backlog_limit=64 [ 2529.063190][ C1] audit: backlog limit exceeded [ 2529.063373][T30605] audit: audit_backlog=67 > audit_backlog_limit=64 [ 2529.255636][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.262053][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.710988][T30621] autofs: Bad value for 'fd' [ 2530.412818][T30627] tipc: Enabling of bearer rejected, already enabled [ 2531.193913][T17026] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2531.464052][T17026] usb 4-1: Using ep0 maxpacket: 8 [ 2531.472554][T17026] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2531.486842][T17026] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2531.502277][T17026] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2531.625159][T17026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.024035][T17026] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2532.528830][T17026] usb 3-1: config 0 has no interfaces? [ 2532.534863][T17026] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 2532.545342][T17026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.558248][T17026] usb 3-1: config 0 descriptor?? [ 2532.660464][T30644] vivid-000: ================= START STATUS ================= [ 2532.668646][T30644] vivid-000: Generate PTS: true [ 2532.673503][T30644] vivid-000: Generate SCR: true [ 2532.678569][T30644] tpg source WxH: 320x180 (R'G'B) [ 2532.683589][T30644] tpg field: 1 [ 2532.687043][T30644] tpg crop: 320x180@0x0 [ 2532.691182][T30644] tpg compose: 320x180@0x0 [ 2532.695645][T30644] tpg colorspace: 8 [ 2532.699435][T30644] tpg transfer function: 0/2 [ 2532.704053][T30644] tpg quantization: 0/1 [ 2532.708200][T30644] tpg RGB range: 0/2 [ 2532.712090][T30644] vivid-000: ================== END STATUS ================== [ 2532.787886][T20178] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2532.912863][T15129] usb 4-1: USB disconnect, device number 77 [ 2532.967616][T30634] ptrace attach of "./syz-executor exec"[29299] was attempted by "./syz-executor exec"[30634] [ 2532.981033][T14110] usb 3-1: USB disconnect, device number 97 [ 2533.023320][T20178] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 2533.037546][T20178] usb 1-1: config 0 has an invalid interface number: 80 but max is 0 [ 2533.047146][T20178] usb 1-1: config 0 has an invalid descriptor of length 158, skipping remainder of the config [ 2533.060754][T20178] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 2533.070706][T17026] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2533.079486][T20178] usb 1-1: config 0 has no interface number 0 [ 2533.086569][T20178] usb 1-1: config 0 has no interface number 1 [ 2533.093141][T20178] usb 1-1: too many endpoints for config 0 interface 35 altsetting 196: 189, using maximum allowed: 30 [ 2533.104975][T20178] usb 1-1: config 0 interface 35 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 189 [ 2533.118423][T20178] usb 1-1: too many endpoints for config 0 interface 80 altsetting 109: 32, using maximum allowed: 30 [ 2533.130229][T20178] usb 1-1: config 0 interface 80 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2533.143946][T20178] usb 1-1: config 0 interface 35 has no altsetting 0 [ 2533.150761][T20178] usb 1-1: config 0 interface 80 has no altsetting 0 [ 2533.183316][T20178] usb 1-1: New USB device found, idVendor=050f, idProduct=0190, bcdDevice=2b.a5 [ 2533.198031][T20178] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 2533.206478][T20178] usb 1-1: Manufacturer: syz [ 2533.217834][T20178] usb 1-1: config 0 descriptor?? [ 2533.266653][T17026] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2533.276949][T17026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2533.305233][T17026] usb 2-1: config 0 descriptor?? [ 2533.373948][T15129] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2533.565388][T15129] usb 4-1: Using ep0 maxpacket: 16 [ 2533.619952][T15129] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 2533.702803][T15129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2533.753426][T15129] usb 4-1: Product: syz [ 2533.788159][T15129] usb 4-1: Manufacturer: syz [ 2533.818635][T15129] usb 4-1: SerialNumber: syz [ 2533.862404][T15129] usb 4-1: config 0 descriptor?? [ 2533.875896][ T29] kauditd_printk_skb: 3713 callbacks suppressed [ 2533.875914][ T29] audit: type=1400 audit(1723525677.234:865274): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30657 comm="modprobe" name="modules" dev="sda1" ino=1120 [ 2533.988851][T29293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2533.996463][T29293] audit: audit_lost=194570 audit_rate_limit=0 audit_backlog_limit=64 [ 2534.004886][T29293] audit: backlog limit exceeded [ 2534.004896][ T29] audit: type=1400 audit(1723525677.234:865275): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30657 comm="modprobe" name="modules" dev="sda1" ino=1120 [ 2534.010132][T29293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2534.029484][T30659] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2534.040333][T29293] audit: audit_lost=194571 audit_rate_limit=0 audit_backlog_limit=64 [ 2534.057124][T30659] audit: audit_lost=194572 audit_rate_limit=0 audit_backlog_limit=64 [ 2534.058215][T30660] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2534.071939][T20178] cdc_subset 1-1:0.35: probe with driver cdc_subset failed with error -22 [ 2534.093053][T20178] cdc_subset 1-1:0.80: probe with driver cdc_subset failed with error -22 [ 2534.675823][T15129] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2534.683296][T15129] usb 4-1: MIDIStreaming interface descriptor not found [ 2534.690909][T20178] usb 1-1: USB disconnect, device number 78 [ 2534.776246][T15129] usb 4-1: USB disconnect, device number 78 [ 2536.946469][T30680] autofs: Bad value for 'fd' [ 2537.840528][T17026] usb 2-1: Cannot set autoneg [ 2537.847489][T17026] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2537.886300][T17026] usb 2-1: USB disconnect, device number 72 [ 2538.883976][T30696] audit_log_start: 2006 callbacks suppressed [ 2538.883997][T30696] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2538.896990][T30696] audit: audit_lost=194836 audit_rate_limit=0 audit_backlog_limit=64 [ 2538.903901][ T29] audit: type=1400 audit(1723525682.124:866493): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29299 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2538.907405][T30696] audit: backlog limit exceeded [ 2539.017818][T30695] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2539.018218][T30696] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2539.031492][T30695] audit: audit_lost=194837 audit_rate_limit=0 audit_backlog_limit=64 [ 2539.039907][T30695] audit: backlog limit exceeded [ 2539.049746][T30695] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2539.056595][T30695] audit: audit_lost=194838 audit_rate_limit=0 audit_backlog_limit=64 [ 2539.241163][T30701] tipc: Enabling of bearer rejected, already enabled [ 2543.014602][T15129] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2543.433956][T15129] usb 4-1: device descriptor read/64, error -71 [ 2543.904924][ T29] kauditd_printk_skb: 773 callbacks suppressed [ 2543.904968][ T29] audit: type=1400 audit(1723525687.264:867012): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15807 comm="kworker/u8:15" saddr=172.20.20.187 src=16385 daddr=172.20.20.10 dest=50206 netif=lo [ 2544.216061][T29299] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2544.216422][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2544.222780][T29836] audit: audit_backlog=67 > audit_backlog_limit=64 [ 2544.229092][ C1] audit: audit_lost=194924 audit_rate_limit=0 audit_backlog_limit=64 [ 2544.229113][ C1] audit: backlog limit exceeded [ 2544.236515][T29296] audit: audit_backlog=67 > audit_backlog_limit=64 [ 2544.243939][ C1] audit: audit_backlog=67 > audit_backlog_limit=64 [ 2544.248909][ T29] audit: type=1400 audit(1723525687.324:867013): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30709 comm="syz.1.6731" saddr=172.20.20.10 src=50206 daddr=172.20.20.187 dest=16385 netif=lo [ 2544.255007][ C1] audit: audit_lost=194925 audit_rate_limit=0 audit_backlog_limit=64 [ 2544.383976][T15129] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2544.674888][T30720] autofs: Bad value for 'fd' [ 2544.784676][T15129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2544.860693][T15129] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2544.936408][T15129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2544.952825][T15129] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2544.967205][T15129] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2544.978141][T15129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.032221][T15129] usb 4-1: config 0 descriptor?? [ 2546.196242][T15129] hdpvr 4-1:0.0: firmware version 0x1e dated q|RCi0 [ 2546.196242][T15129] pY [ 2546.582692][T30707] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 2546.623254][T30707] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 2547.829947][T15129] hdpvr 4-1:0.0: device init failed [ 2547.920148][T15129] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 2547.958895][T15129] usb 4-1: USB disconnect, device number 80 [ 2549.165447][T29836] audit_log_start: 1814 callbacks suppressed [ 2549.165465][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2549.182162][T30751] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2549.197513][T29257] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2549.204164][T30751] audit: audit_lost=195112 audit_rate_limit=0 audit_backlog_limit=64 [ 2549.204315][ T29] audit: type=1400 audit(1723525691.664:868272): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29257 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2549.212868][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2549.233875][T29257] audit: audit_lost=195113 audit_rate_limit=0 audit_backlog_limit=64 [ 2549.238053][ C1] audit: audit_lost=195114 audit_rate_limit=0 audit_backlog_limit=64 [ 2549.254226][ C1] audit: backlog limit exceeded [ 2549.259465][T29836] audit: audit_lost=195115 audit_rate_limit=0 audit_backlog_limit=64 [ 2549.430598][T30751] lo speed is unknown, defaulting to 1000 [ 2549.463723][T30751] lo speed is unknown, defaulting to 1000 [ 2549.491346][T30751] lo speed is unknown, defaulting to 1000 [ 2549.743960][T17033] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2549.994538][T17033] usb 4-1: Using ep0 maxpacket: 8 [ 2550.011829][T17033] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2550.043338][T17033] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2550.063416][T19946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2550.068997][T19946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2550.070530][T19946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2550.073379][T19946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2550.076555][T19946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2550.076880][T19946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2550.091346][T17033] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2550.091376][T17033] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2550.091422][T17033] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2550.091445][T17033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.139122][T17031] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2550.180470][T30751] infiniband syz1: set active [ 2550.181148][T15129] lo speed is unknown, defaulting to 1000 [ 2550.181281][T30751] infiniband syz1: added lo [ 2550.181731][T30751] syz1: rxe_create_cq: returned err = -12 [ 2550.181818][T30751] infiniband syz1: Couldn't create ib_mad CQ [ 2550.181935][T30751] infiniband syz1: Couldn't open port 1 [ 2550.197360][T30751] RDS/IB: syz1: added [ 2550.197396][T30751] smc: adding ib device syz1 with port count 1 [ 2550.197415][T30751] smc: ib device syz1 port 1 has pnetid [ 2550.198804][T15129] lo speed is unknown, defaulting to 1000 [ 2550.199603][T30751] lo speed is unknown, defaulting to 1000 [ 2550.328144][T17033] usb 4-1: usb_control_msg returned -32 [ 2550.328189][T17033] usbtmc 4-1:16.0: can't read capabilities [ 2550.333958][T17031] usb 1-1: Using ep0 maxpacket: 8 [ 2550.336267][T17031] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2550.336300][T17031] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2550.336324][T17031] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2550.336349][T17031] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2550.336389][T17031] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2550.336413][T17031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.615171][T17031] usb 1-1: usb_control_msg returned -32 [ 2551.615201][T17031] usbtmc 1-1:16.0: can't read capabilities [ 2552.156244][T19946] Bluetooth: hci2: command tx timeout [ 2552.712764][T17031] usb 4-1: USB disconnect, device number 81 [ 2552.712936][T30763] lo speed is unknown, defaulting to 1000 [ 2552.891163][T30751] lo speed is unknown, defaulting to 1000 [ 2553.426652][T30783] autofs: Bad value for 'fd' [ 2554.136346][T30763] chnl_net:caif_netlink_parms(): no params data found [ 2554.184249][ T29] kauditd_printk_skb: 1959 callbacks suppressed [ 2554.184268][ T29] audit: type=1400 audit(1723525697.544:869456): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29257 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2554.184311][ T29] audit: type=1400 audit(1723525697.544:869457): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29257 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2554.184348][ T29] audit: type=1400 audit(1723525697.544:869458): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29257 comm="syz-executor" name="88" dev="tmpfs" ino=483 [ 2554.206185][T19946] Bluetooth: hci2: command tx timeout [ 2554.214575][ T29] audit: type=1400 audit(1723525697.544:869459): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=29257 comm="syz-executor" name="88" dev="tmpfs" ino=483 [ 2554.229870][T30785] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2554.383517][T30785] audit: audit_lost=195379 audit_rate_limit=0 audit_backlog_limit=64 [ 2554.391566][T30785] audit: backlog limit exceeded [ 2554.396483][ C0] vkms_vblank_simulate: vblank timer overrun [ 2554.403313][T30764] tty tty1: ldisc open failed (-12), clearing slot 0 [ 2554.466013][T30785] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2554.472556][T30785] audit: audit_lost=195380 audit_rate_limit=0 audit_backlog_limit=64 [ 2554.493864][ T29] audit: type=1400 audit(1723525697.544:869460): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=29257 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=485 [ 2554.600594][T26801] usb 1-1: USB disconnect, device number 79 [ 2555.593749][T30792] autofs: Unknown parameter 'no98E' [ 2555.596873][T30751] lo speed is unknown, defaulting to 1000 [ 2555.979679][T30763] bridge0: port 1(bridge_slave_0) entered blocking state [ 2556.035500][T30763] bridge0: port 1(bridge_slave_0) entered disabled state [ 2556.088078][T30763] bridge_slave_0: entered allmulticast mode [ 2556.243572][T30763] bridge_slave_0: entered promiscuous mode [ 2556.294148][T19946] Bluetooth: hci2: command tx timeout [ 2556.394934][T30763] bridge0: port 2(bridge_slave_1) entered blocking state [ 2556.402140][T30763] bridge0: port 2(bridge_slave_1) entered disabled state [ 2556.409489][T30763] bridge_slave_1: entered allmulticast mode [ 2556.427577][T30763] bridge_slave_1: entered promiscuous mode [ 2556.675950][T30751] lo speed is unknown, defaulting to 1000 [ 2556.683542][T30763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2556.778149][T30763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2557.905835][T30813] tipc: Enabling of bearer rejected, already enabled [ 2557.916073][T14110] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2557.984849][T30763] team0: Port device team_slave_0 added [ 2558.045096][T30763] team0: Port device team_slave_1 added [ 2558.073956][T30751] lo speed is unknown, defaulting to 1000 [ 2558.134187][T14110] usb 4-1: Using ep0 maxpacket: 8 [ 2558.164952][T14110] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2558.204179][T14110] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2558.248158][T14110] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2558.269452][T30763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2558.279964][T14110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.332166][T30763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2558.475834][T19946] Bluetooth: hci2: command tx timeout [ 2558.761199][T30763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2559.386803][ T29] kauditd_printk_skb: 2178 callbacks suppressed [ 2559.386823][ T29] audit: type=1400 audit(1723525702.724:871167): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29836 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2559.468208][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2559.481497][ T29] audit: type=1400 audit(1723525702.724:871168): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29836 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2559.483700][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2559.502065][ T29] audit: type=1400 audit(1723525702.724:871169): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29836 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2559.530178][T29836] audit: audit_lost=195538 audit_rate_limit=0 audit_backlog_limit=64 [ 2559.540042][T30763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2559.547301][T29836] audit: backlog limit exceeded [ 2559.549314][T30818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2559.552153][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2559.552169][T29836] audit: audit_lost=195539 audit_rate_limit=0 audit_backlog_limit=64 [ 2559.571262][T30763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2559.693950][T30763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2559.736171][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2559.752605][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2559.780945][T30835] autofs: Unknown parameter 'no98E' [ 2560.121367][T17031] usb 4-1: USB disconnect, device number 82 [ 2560.376682][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2560.485389][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2560.493267][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2560.505417][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2560.768658][T30751] lo speed is unknown, defaulting to 1000 [ 2560.847944][T30763] hsr_slave_0: entered promiscuous mode [ 2560.888228][T30763] hsr_slave_1: entered promiscuous mode [ 2560.930534][T30763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2560.978223][T30763] Cannot create hsr debugfs directory [ 2561.229179][T30830] lo speed is unknown, defaulting to 1000 [ 2561.343466][T30850] netlink: 'syz.0.6768': attribute type 3 has an invalid length. [ 2562.508120][T30763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.702887][ T5225] Bluetooth: hci4: command tx timeout [ 2563.720551][T30863] vivid-000: ================= START STATUS ================= [ 2563.742496][T30863] vivid-000: Generate PTS: true [ 2563.750914][T30863] vivid-000: Generate SCR: true [ 2563.760143][T30863] tpg source WxH: 320x180 (R'G'B) [ 2563.767496][T30863] tpg field: 1 [ 2563.772093][T30863] tpg crop: 320x180@0x0 [ 2563.780492][T30863] tpg compose: 320x180@0x0 [ 2563.787491][T30863] tpg colorspace: 8 [ 2563.791367][T30863] tpg transfer function: 0/2 [ 2563.797333][T30863] tpg quantization: 0/1 [ 2563.801597][T30863] tpg RGB range: 0/2 [ 2563.805995][T30863] vivid-000: ================== END STATUS ================== [ 2564.629204][ T29] kauditd_printk_skb: 2167 callbacks suppressed [ 2564.629248][ T29] audit: type=1400 audit(1723525707.754:872732): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30866 comm="syz.3.6773" name="newroot" dev="tmpfs" ino=2 [ 2564.696613][T17026] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2564.776611][ T5225] Bluetooth: hci4: command tx timeout [ 2565.016940][ T29] audit: type=1400 audit(1723525707.754:872733): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30866 comm="syz.3.6773" name="/" dev="devtmpfs" ino=1 [ 2565.090027][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2565.097352][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2565.100758][T30763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.103898][ C1] audit: audit_lost=195742 audit_rate_limit=0 audit_backlog_limit=64 [ 2565.103918][ C1] audit: backlog limit exceeded [ 2565.104744][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2565.127574][T17026] usb 4-1: Using ep0 maxpacket: 8 [ 2565.134002][ C1] audit: audit_lost=195743 audit_rate_limit=0 audit_backlog_limit=64 [ 2565.134025][ C1] audit: backlog limit exceeded [ 2565.162305][T29836] audit: audit_lost=195744 audit_rate_limit=0 audit_backlog_limit=64 [ 2565.227213][T17026] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2565.242702][T17026] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2565.277482][T30870] tipc: Enabling of bearer rejected, already enabled [ 2565.321877][T17026] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2565.343844][T17026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.392812][T30879] autofs: Unknown parameter 'no98E' [ 2565.413673][T29109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2566.639902][T30763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2566.855719][ T5225] Bluetooth: hci4: command tx timeout [ 2567.075859][T29109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2567.156858][T17026] usb 4-1: USB disconnect, device number 83 [ 2567.759649][T30763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2567.917473][T29109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2568.594148][T17026] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2568.927919][ T5225] Bluetooth: hci4: command tx timeout [ 2569.364027][T17026] usb 4-1: Using ep0 maxpacket: 8 [ 2569.407780][T17026] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2569.425893][T17026] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2569.436084][T17026] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2569.446369][T17026] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2569.459855][T17026] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2569.470510][T17026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.626253][T29109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2569.650373][ T29] kauditd_printk_skb: 1971 callbacks suppressed [ 2569.650393][ T29] audit: type=1400 audit(1723525713.004:874139): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30903 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2569.704108][ T29] audit: type=1400 audit(1723525713.004:874140): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30903 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2569.778926][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2569.780959][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2569.792039][ C1] audit: audit_lost=195935 audit_rate_limit=0 audit_backlog_limit=64 [ 2569.793964][T29296] audit: audit_lost=195936 audit_rate_limit=0 audit_backlog_limit=64 [ 2569.800136][ C1] audit: backlog limit exceeded [ 2569.800936][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2569.813993][T29296] audit: backlog limit exceeded [ 2569.819727][ C1] audit: audit_lost=195937 audit_rate_limit=0 audit_backlog_limit=64 [ 2569.826000][T17026] usb 4-1: usb_control_msg returned -32 [ 2569.957197][T17026] usbtmc 4-1:16.0: can't read capabilities [ 2571.384487][T30915] autofs: Unknown parameter 'no98E' [ 2571.612822][T30830] chnl_net:caif_netlink_parms(): no params data found [ 2571.689068][T29109] bridge_slave_1: left allmulticast mode [ 2571.700346][T29109] bridge_slave_1: left promiscuous mode [ 2571.710195][T29109] bridge0: port 2(bridge_slave_1) entered disabled state [ 2572.935471][T26801] usb 4-1: USB disconnect, device number 84 [ 2572.964426][T29109] bridge_slave_0: left allmulticast mode [ 2573.029761][T29109] bridge_slave_0: left promiscuous mode [ 2573.044914][T29109] bridge0: port 1(bridge_slave_0) entered disabled state [ 2573.103990][T17031] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2573.293927][T17031] usb 2-1: Using ep0 maxpacket: 8 [ 2573.315677][T17031] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2573.339250][T17031] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2573.391168][T17031] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2573.438941][T17031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2574.694587][ T29] kauditd_printk_skb: 1445 callbacks suppressed [ 2574.694659][ T29] audit: type=1400 audit(1723525718.054:875566): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2574.828168][ T29] audit: type=1400 audit(1723525718.124:875567): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=29296 comm="syz-executor" opid=30917 ocomm="syz.1.6787" [ 2574.897967][ T29] audit: type=1400 audit(1723525718.124:875568): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=29296 comm="syz-executor" opid=30917 ocomm="syz.1.6787" [ 2574.940540][T29109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2574.958559][T29109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2574.978021][T29109] bond0 (unregistering): Released all slaves [ 2575.017108][ T29] audit: type=1400 audit(1723525718.374:875569): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30763 comm="syz-executor" name="3" dev="debugfs" ino=137955 [ 2575.070974][ T29] audit: type=1400 audit(1723525718.374:875570): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30763 comm="syz-executor" name="3" dev="debugfs" ino=137955 [ 2575.091841][ T29] audit: type=1400 audit(1723525718.374:875571): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30763 comm="syz-executor" name="3" dev="debugfs" ino=137955 [ 2575.123507][ T29] audit: type=1400 audit(1723525718.374:875572): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30763 comm="syz-executor" name="3" dev="debugfs" ino=137955 [ 2575.143208][ T29] audit: type=1400 audit(1723525718.374:875573): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30763 comm="syz-executor" name="3" dev="debugfs" ino=137955 [ 2575.173545][ T29] audit: type=1400 audit(1723525718.374:875574): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30763 comm="syz-executor" name="3" dev="debugfs" ino=137955 [ 2575.193354][ T29] audit: type=1400 audit(1723525718.374:875575): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30763 comm="syz-executor" name="3" dev="debugfs" ino=137955 [ 2575.205239][T30921] tipc: Started in network mode [ 2575.217936][T30921] tipc: Node identity 7f000001, cluster identity 4711 [ 2575.225409][T30921] tipc: Enabled bearer , priority 10 [ 2575.259346][T17034] usb 2-1: USB disconnect, device number 73 [ 2575.285211][T30763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2575.316972][T29109] tipc: Disabling bearer [ 2575.332901][T29109] tipc: Left network mode [ 2575.339681][T30763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2575.605148][T30763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2575.949036][T30763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2576.276315][T26801] tipc: Node number set to 2130706433 [ 2576.456775][T30830] bridge0: port 1(bridge_slave_0) entered blocking state [ 2576.479001][T30830] bridge0: port 1(bridge_slave_0) entered disabled state [ 2576.503318][T30830] bridge_slave_0: entered allmulticast mode [ 2576.524588][T30830] bridge_slave_0: entered promiscuous mode [ 2576.575682][T30830] bridge0: port 2(bridge_slave_1) entered blocking state [ 2576.633876][T30830] bridge0: port 2(bridge_slave_1) entered disabled state [ 2576.649017][T30830] bridge_slave_1: entered allmulticast mode [ 2576.665838][T30830] bridge_slave_1: entered promiscuous mode [ 2577.486367][T30830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2577.573087][T30830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2577.704509][T29109] hsr_slave_0: left promiscuous mode [ 2577.794156][T29109] hsr_slave_1: left promiscuous mode [ 2577.814233][T29109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2577.839274][T29109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2577.885741][T29109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2577.912786][T29109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2577.975843][T29109] veth1_macvtap: left promiscuous mode [ 2577.981441][T29109] veth0_macvtap: left promiscuous mode [ 2578.017907][T29109] veth1_vlan: left promiscuous mode [ 2578.023754][T29109] veth0_vlan: left promiscuous mode [ 2578.191195][T30974] netlink: 'syz.1.6801': attribute type 3 has an invalid length. [ 2578.342455][T29109] infiniband syz1: set down [ 2579.736249][T30983] autofs: Bad value for 'fd' [ 2579.763956][ T29] kauditd_printk_skb: 2532 callbacks suppressed [ 2579.763999][ T29] audit: type=1400 audit(1723525723.084:877406): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30979 comm="syz.3.6803" name="105" dev="tmpfs" ino=572 [ 2580.427903][T29257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2580.446204][T30985] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2580.452749][T30985] audit: audit_lost=196179 audit_rate_limit=0 audit_backlog_limit=64 [ 2580.453753][ T29] audit: type=1400 audit(1723525723.084:877407): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30979 comm="syz.3.6803" name="105" dev="tmpfs" ino=572 [ 2580.485963][T29257] audit: audit_lost=196180 audit_rate_limit=0 audit_backlog_limit=64 [ 2580.492371][ T29] audit: type=1400 audit(1723525723.084:877408): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=30979 comm="syz.3.6803" name="105" dev="tmpfs" ino=572 [ 2580.504064][T29257] audit: backlog limit exceeded [ 2580.520791][ T29] audit: type=1400 audit(1723525723.094:877409): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30979 comm="syz.3.6803" name="105" dev="tmpfs" ino=572 [ 2580.542814][ T29] audit: type=1400 audit(1723525723.094:877410): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30979 comm="syz.3.6803" name="105" dev="tmpfs" ino=572 [ 2580.924169][ T5225] Bluetooth: hci4: command tx timeout [ 2581.158453][T29109] team0 (unregistering): Port device team_slave_1 removed [ 2581.301393][T29109] team0 (unregistering): Port device team_slave_0 removed [ 2582.463493][T15794] smc: removing ib device syz1 [ 2582.514577][T17026] lo speed is unknown, defaulting to 1000 [ 2582.806638][T30830] team0: Port device team_slave_0 added [ 2582.831130][T30830] team0: Port device team_slave_1 added [ 2582.967459][T28213] IPVS: starting estimator thread 0... [ 2582.993132][T30830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2583.018396][T30830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2583.105166][T30997] IPVS: using max 19 ests per chain, 45600 per kthread [ 2583.176221][T30830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2583.278127][T30830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2583.310796][T30830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2583.513607][T30830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2584.291986][T30830] hsr_slave_0: entered promiscuous mode [ 2584.311128][T30830] hsr_slave_1: entered promiscuous mode [ 2584.544124][T30830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2584.561140][T30830] Cannot create hsr debugfs directory [ 2584.597988][T30763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2584.680870][T31021] netlink: 'syz.0.6814': attribute type 3 has an invalid length. [ 2584.949431][T29257] audit_log_start: 1365 callbacks suppressed [ 2584.949444][T29257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2584.962617][ T29] audit: type=1400 audit(1723525728.304:878757): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29257 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2584.963705][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2584.988467][ C1] audit: audit_lost=196187 audit_rate_limit=0 audit_backlog_limit=64 [ 2584.996562][ C1] audit: backlog limit exceeded [ 2585.001924][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2585.004017][ T4882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2585.008461][ C1] audit: audit_lost=196188 audit_rate_limit=0 audit_backlog_limit=64 [ 2585.015049][ T4882] audit: audit_lost=196189 audit_rate_limit=0 audit_backlog_limit=64 [ 2585.022968][ C1] audit: backlog limit exceeded [ 2585.318415][T30763] 8021q: adding VLAN 0 to HW filter on device team0 [ 2587.284866][T22147] bridge0: port 1(bridge_slave_0) entered blocking state [ 2587.292022][T22147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2587.310619][T22147] bridge0: port 2(bridge_slave_1) entered blocking state [ 2587.317944][T22147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2587.502989][T29109] IPVS: stop unused estimator thread 0... [ 2588.638911][T31051] netlink: 'syz.1.6824': attribute type 3 has an invalid length. [ 2588.674031][T31051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6824'. [ 2589.029149][T30830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2589.148625][T30830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2589.297515][T30830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2589.434152][T30830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2590.060522][ T29] kauditd_printk_skb: 3624 callbacks suppressed [ 2590.060562][ T29] audit: type=1400 audit(1723525733.024:881440): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31059 comm="syz.1.6826" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2590.424425][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2590.430969][T29836] audit: audit_lost=196504 audit_rate_limit=0 audit_backlog_limit=64 [ 2590.464250][T31064] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2590.468407][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2590.471552][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2590.483869][ C1] audit: audit_lost=196505 audit_rate_limit=0 audit_backlog_limit=64 [ 2590.492035][ C1] audit: backlog limit exceeded [ 2590.497298][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2590.503855][ C1] audit: audit_lost=196506 audit_rate_limit=0 audit_backlog_limit=64 [ 2590.514968][T30763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2590.696295][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.702611][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.926279][T31075] vivid-000: ================= START STATUS ================= [ 2590.937250][T31075] vivid-000: Generate PTS: true [ 2590.951246][T31075] vivid-000: Generate SCR: true [ 2590.963594][T31075] tpg source WxH: 320x180 (R'G'B) [ 2590.971194][T31075] tpg field: 1 [ 2590.976574][T31075] tpg crop: 320x180@0x0 [ 2590.980857][T31075] tpg compose: 320x180@0x0 [ 2590.986239][T31075] tpg colorspace: 8 [ 2590.990335][T31075] tpg transfer function: 0/2 [ 2590.995350][T31075] tpg quantization: 0/1 [ 2591.002220][T31075] tpg RGB range: 0/2 [ 2591.006365][T31075] vivid-000: ================== END STATUS ================== [ 2591.334930][T30830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2591.398974][T30830] 8021q: adding VLAN 0 to HW filter on device team0 [ 2591.535337][T15801] bridge0: port 1(bridge_slave_0) entered blocking state [ 2591.542467][T15801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2591.696937][T15801] bridge0: port 2(bridge_slave_1) entered blocking state [ 2591.704094][T15801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2592.495876][T31092] netlink: 'syz.3.6833': attribute type 3 has an invalid length. [ 2592.505960][T31092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6833'. [ 2593.711549][T30763] veth0_vlan: entered promiscuous mode [ 2593.842682][T30763] veth1_vlan: entered promiscuous mode [ 2593.984321][T30763] veth0_macvtap: entered promiscuous mode [ 2594.187053][T30763] veth1_macvtap: entered promiscuous mode [ 2594.343009][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2594.355934][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2594.387383][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2594.452909][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2594.582062][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2594.607561][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2594.658802][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2594.716124][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2594.800716][T30763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2594.875232][T30830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2594.898220][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2594.942786][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.024321][T14110] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 2595.025760][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.068769][ T29] kauditd_printk_skb: 5668 callbacks suppressed [ 2595.069802][ T29] audit: type=1400 audit(1723525738.424:885069): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=31115 comm="syz.1.6839" opid=31115 ocomm="syz.1.6839" [ 2595.099190][ T29] audit: type=1400 audit(1723525738.424:885070): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31115 comm="syz.1.6839" name="newroot" dev="tmpfs" ino=2 [ 2595.131231][ T29] audit: type=1400 audit(1723525738.424:885071): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31115 comm="syz.1.6839" name="/" dev="devtmpfs" ino=1 [ 2595.554762][ T29] audit: type=1400 audit(1723525738.424:885072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31115 comm="syz.1.6839" name="cpu" dev="devtmpfs" ino=85 [ 2595.688712][T29257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2595.693915][T31114] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2595.696281][T29257] audit: audit_lost=197187 audit_rate_limit=0 audit_backlog_limit=64 [ 2595.701708][T31114] audit: audit_lost=197188 audit_rate_limit=0 audit_backlog_limit=64 [ 2595.701726][T31114] audit: backlog limit exceeded [ 2595.701852][T31114] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2595.775324][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.853951][T14110] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2595.891479][T14110] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2595.907463][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.918421][T14110] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2595.946138][T14110] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2595.971636][T14110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.001007][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2596.057485][T31114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2596.066249][T30763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2596.105305][T30763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2596.178585][T30763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2596.232252][T30763] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.249592][T14110] hub 1-1:1.0: bad descriptor, ignoring hub [ 2596.290670][T14110] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2596.292902][T30763] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.311644][T14110] cdc_wdm 1-1:1.0: skipping garbage [ 2596.334073][T14110] cdc_wdm 1-1:1.0: skipping garbage [ 2596.358412][T14110] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2596.366535][T30763] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.413461][T30763] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.440255][T14110] cdc_wdm 1-1:1.0: Unknown control protocol [ 2596.497203][T14110] usb 1-1: USB disconnect, device number 80 [ 2596.795646][T30830] veth0_vlan: entered promiscuous mode [ 2596.871743][T30830] veth1_vlan: entered promiscuous mode [ 2597.015416][T15794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2597.066243][T31130] overlayfs: failed to resolve './file1': -2 [ 2597.070102][T15794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2597.383594][T30830] veth0_macvtap: entered promiscuous mode [ 2597.424590][T15129] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 2597.877890][T15129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2597.956318][T30830] veth1_macvtap: entered promiscuous mode [ 2598.045404][T15794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.053263][T15794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.094497][T15129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2598.142901][T15129] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2598.184777][T15129] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2598.228451][T15129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.238214][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2598.272990][T15129] usb 1-1: can't set config #1, error -71 [ 2598.292659][T15129] usb 1-1: USB disconnect, device number 81 [ 2598.322305][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.363204][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2598.544337][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.595670][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2598.657480][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.709039][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2598.785087][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.840013][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2598.867935][T31147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6847'. [ 2598.932047][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.043759][T30830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2599.193240][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2599.319222][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.413935][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2599.466693][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.542630][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2599.572430][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.608177][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2599.658006][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.683399][T30830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2599.725283][T30830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2599.795489][T30830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2599.880557][T30830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2599.902397][T30830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2599.954575][T30830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2599.970861][T30830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2600.112101][ T29] kauditd_printk_skb: 2487 callbacks suppressed [ 2600.112120][ T29] audit: type=1400 audit(1723525743.464:887104): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5201 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2600.148823][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2600.165061][T29296] audit: audit_lost=197342 audit_rate_limit=0 audit_backlog_limit=64 [ 2600.173680][T29296] audit: backlog limit exceeded [ 2600.183686][ T29] audit: type=1400 audit(1723525743.494:887105): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2600.206724][T30763] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2600.213224][T30763] audit: audit_lost=197343 audit_rate_limit=0 audit_backlog_limit=64 [ 2600.222130][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2600.228666][ C1] audit: audit_lost=197344 audit_rate_limit=0 audit_backlog_limit=64 [ 2600.236731][ C1] audit: backlog limit exceeded [ 2601.308038][T31171] overlayfs: failed to resolve './file1': -2 [ 2601.847515][T15819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2601.943969][T15819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2602.621433][T15819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2602.725469][T15819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2605.382910][ T29] kauditd_printk_skb: 2071 callbacks suppressed [ 2605.382945][ T29] audit: type=1400 audit(1723525748.724:888804): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31196 comm="syz.0.6860" name="newroot" dev="tmpfs" ino=2 [ 2605.467397][T29257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2605.467403][T30830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2605.467419][T30830] audit: audit_lost=197469 audit_rate_limit=0 audit_backlog_limit=64 [ 2605.475121][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2605.484049][T30830] audit: backlog limit exceeded [ 2605.489052][ C1] audit: audit_lost=197470 audit_rate_limit=0 audit_backlog_limit=64 [ 2605.505894][T30830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2605.508430][ C1] audit: backlog limit exceeded [ 2605.515460][T31200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6860'. [ 2605.520887][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2606.436592][T31219] overlayfs: failed to resolve './file1': -2 [ 2610.384619][ T29] kauditd_printk_skb: 2996 callbacks suppressed [ 2610.384632][ T29] audit: type=1400 audit(1723525753.734:891299): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30830 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2610.468230][ T29] audit: type=1400 audit(1723525753.734:891303): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30830 comm="syz-executor" name="3" dev="tmpfs" ino=27 [ 2610.646557][T31254] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2610.653108][T31254] audit: audit_lost=197639 audit_rate_limit=0 audit_backlog_limit=64 [ 2610.664475][T31246] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2610.667364][T31253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2610.671859][T31246] audit: audit_lost=197640 audit_rate_limit=0 audit_backlog_limit=64 [ 2610.678397][T31253] audit: audit_lost=197641 audit_rate_limit=0 audit_backlog_limit=64 [ 2610.678416][T31253] audit: backlog limit exceeded [ 2610.678449][T31253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2610.721975][T31257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2610.751622][T31257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2611.435677][T14110] IPVS: starting estimator thread 0... [ 2611.524050][T31260] IPVS: using max 23 ests per chain, 55200 per kthread [ 2613.190860][ T5225] Bluetooth: hci4: link tx timeout [ 2613.196776][ T5225] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2613.359240][T17034] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2613.594016][T17034] usb 2-1: Using ep0 maxpacket: 8 [ 2613.662291][T17034] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2613.757460][T17034] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2613.903908][T17034] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2613.912983][T17034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.261693][T31286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6882'. [ 2614.443989][ T5225] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2614.455039][ T5225] Bluetooth: hci2: Injecting HCI hardware error event [ 2614.465778][ T5225] Bluetooth: hci2: hardware error 0x00 [ 2615.378883][T19946] Bluetooth: hci4: command 0x0406 tx timeout [ 2615.393998][ T29] kauditd_printk_skb: 1818 callbacks suppressed [ 2615.394038][ T29] audit: type=1400 audit(1723525758.704:892830): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31287 comm="syz.2.6884" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2615.504663][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2615.511206][T29836] audit: audit_lost=197739 audit_rate_limit=0 audit_backlog_limit=64 [ 2615.627481][T17034] usb 2-1: USB disconnect, device number 74 [ 2615.663893][T29836] audit: backlog limit exceeded [ 2615.663901][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2615.663918][ T27] audit: audit_lost=197740 audit_rate_limit=0 audit_backlog_limit=64 [ 2615.669021][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2615.690346][T30830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2615.690602][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2615.703445][ C1] audit: audit_lost=197741 audit_rate_limit=0 audit_backlog_limit=64 [ 2616.607064][ T5225] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2616.912640][T31317] FAULT_INJECTION: forcing a failure. [ 2616.912640][T31317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2616.976758][T31317] CPU: 1 UID: 0 PID: 31317 Comm: syz.0.6894 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 2616.987577][T31317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2616.997651][T31317] Call Trace: [ 2617.000924][T31317] [ 2617.003850][T31317] dump_stack_lvl+0x241/0x360 [ 2617.008546][T31317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2617.013741][T31317] ? __pfx__printk+0x10/0x10 [ 2617.018336][T31317] should_fail_ex+0x3b0/0x4e0 [ 2617.023007][T31317] prepare_alloc_pages+0x1da/0x5d0 [ 2617.028116][T31317] __alloc_pages_noprof+0x166/0x6c0 [ 2617.033307][T31317] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 2617.039022][T31317] ? __mutex_lock+0x9a5/0xd70 [ 2617.043698][T31317] ? __mutex_lock+0x527/0xd70 [ 2617.048374][T31317] alloc_pages_mpol_noprof+0x3e8/0x680 [ 2617.053838][T31317] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 2617.059812][T31317] ? alloc_pages_noprof+0xef/0x170 [ 2617.064918][T31317] pipe_write+0x657/0x1a40 [ 2617.069342][T31317] ? __pfx_pipe_write+0x10/0x10 [ 2617.074188][T31317] ? bpf_lsm_file_permission+0x9/0x10 [ 2617.079554][T31317] ? security_file_permission+0x7f/0xa0 [ 2617.085099][T31317] vfs_write+0xa72/0xc90 [ 2617.089332][T31317] ? __pfx_pipe_write+0x10/0x10 [ 2617.094174][T31317] ? __pfx_vfs_write+0x10/0x10 [ 2617.098941][T31317] ksys_write+0x1a0/0x2c0 [ 2617.103262][T31317] ? __pfx_ksys_write+0x10/0x10 [ 2617.108103][T31317] ? do_syscall_64+0x100/0x230 [ 2617.112856][T31317] ? do_syscall_64+0xb6/0x230 [ 2617.117526][T31317] do_syscall_64+0xf3/0x230 [ 2617.122016][T31317] ? clear_bhb_loop+0x35/0x90 [ 2617.126683][T31317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2617.132565][T31317] RIP: 0033:0x7f3c64b799f9 [ 2617.136971][T31317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2617.156574][T31317] RSP: 002b:00007f3c658ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2617.164985][T31317] RAX: ffffffffffffffda RBX: 00007f3c64d16130 RCX: 00007f3c64b799f9 [ 2617.173039][T31317] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000006 [ 2617.180998][T31317] RBP: 00007f3c658ab090 R08: 0000000000000000 R09: 0000000000000000 [ 2617.188957][T31317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2617.196915][T31317] R13: 0000000000000001 R14: 00007f3c64d16130 R15: 00007ffce99766e8 [ 2617.204886][T31317] [ 2617.402210][T31324] autofs: Unknown parameter 'no98E' [ 2617.804230][T15129] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2618.563931][T15129] usb 2-1: Using ep0 maxpacket: 16 [ 2618.581361][T15129] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 2618.623759][T15129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.682195][T15129] usb 2-1: Product: syz [ 2618.686950][T15129] usb 2-1: Manufacturer: syz [ 2618.694417][T15129] usb 2-1: SerialNumber: syz [ 2618.818110][T15129] usb 2-1: config 0 descriptor?? [ 2619.665342][T15129] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2619.672502][T15129] usb 2-1: MIDIStreaming interface descriptor not found [ 2619.781898][T15129] usb 2-1: USB disconnect, device number 75 [ 2620.235421][T31350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6902'. [ 2620.406427][ T29] kauditd_printk_skb: 4348 callbacks suppressed [ 2620.406444][ T29] audit: type=1400 audit(1723525763.764:895946): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31356 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2620.501733][ T29] audit: type=1400 audit(1723525763.764:895947): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29257 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2620.537795][T31359] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2620.546326][T31359] audit: audit_lost=198153 audit_rate_limit=0 audit_backlog_limit=64 [ 2620.546662][T31358] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2620.554661][ T29] audit: type=1400 audit(1723525763.764:895948): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29257 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 2620.580596][T31359] audit: backlog limit exceeded [ 2620.581032][T30763] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2620.593102][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2620.599720][ C1] audit: audit_lost=198154 audit_rate_limit=0 audit_backlog_limit=64 [ 2620.944028][T20178] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 2621.576868][T20178] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2621.634156][T20178] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2621.664301][T20178] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2621.685771][T20178] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2621.764458][T20178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2621.771004][T31366] autofs: Unknown parameter 'no98E' [ 2621.848751][T31357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2621.887783][T20178] hub 3-1:1.0: bad descriptor, ignoring hub [ 2621.893727][T20178] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2621.958573][T20178] cdc_wdm 3-1:1.0: skipping garbage [ 2621.987254][T20178] cdc_wdm 3-1:1.0: skipping garbage [ 2622.026855][T20178] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2622.054682][T20178] cdc_wdm 3-1:1.0: Unknown control protocol [ 2622.098359][T31370] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6912'. [ 2622.145952][T31370] bridge_slave_1: left allmulticast mode [ 2622.173969][T31370] bridge_slave_1: left promiscuous mode [ 2622.208141][T31370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2622.281231][T31370] bridge_slave_0: left allmulticast mode [ 2622.311382][T31370] bridge_slave_0: left promiscuous mode [ 2622.359207][T31370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2622.425452][T20178] usb 3-1: USB disconnect, device number 98 [ 2623.054337][T17034] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 2623.266121][T17034] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2623.308188][T17034] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2623.347975][T17034] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2623.386146][T17034] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2623.426020][T17034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.453549][T31357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2623.465770][T17034] hub 3-1:1.0: bad descriptor, ignoring hub [ 2623.473245][T17034] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2623.481569][T17034] cdc_wdm 3-1:1.0: skipping garbage [ 2623.487509][T17034] cdc_wdm 3-1:1.0: skipping garbage [ 2623.496374][T17034] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2623.502375][T17034] cdc_wdm 3-1:1.0: Unknown control protocol [ 2623.829117][T17031] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2624.066421][T17031] usb 1-1: Using ep0 maxpacket: 16 [ 2624.497089][T31357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2624.574464][T31357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2624.584146][T17031] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 2624.593221][T17031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.671461][T17031] usb 1-1: Product: syz [ 2624.690022][T17031] usb 1-1: Manufacturer: syz [ 2624.713824][T17031] usb 1-1: SerialNumber: syz [ 2624.741618][T17031] usb 1-1: config 0 descriptor?? [ 2624.814551][T31401] tipc: Enabling of bearer rejected, already enabled [ 2624.847898][T17026] usb 3-1: USB disconnect, device number 99 [ 2625.313997][T15129] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2625.774047][ T29] kauditd_printk_skb: 2842 callbacks suppressed [ 2625.774067][ T29] audit: type=1400 audit(1723525769.104:897693): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31398 comm="syz.3.6923" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2625.813116][T15129] usb 4-1: Using ep0 maxpacket: 8 [ 2625.825457][T29296] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2625.832020][T29296] audit: audit_lost=198523 audit_rate_limit=0 audit_backlog_limit=64 [ 2625.843860][ T27] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2625.850970][T31391] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2625.854170][T31401] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2625.864201][T31401] audit: audit_lost=198524 audit_rate_limit=0 audit_backlog_limit=64 [ 2625.872306][T31401] audit: backlog limit exceeded [ 2625.877836][T31401] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2625.885196][T31401] audit: audit_lost=198525 audit_rate_limit=0 audit_backlog_limit=64 [ 2625.894807][T15129] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2625.947469][T15129] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2626.333409][T15129] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2626.493287][T15129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2626.571433][T31406] autofs: Unknown parameter 'no98E' [ 2626.591470][T17031] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2626.615976][T17031] usb 1-1: MIDIStreaming interface descriptor not found [ 2626.756560][T17031] usb 1-1: USB disconnect, device number 82 [ 2627.782584][T22977] usb 4-1: USB disconnect, device number 85 [ 2628.097538][T31425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6927'. [ 2628.227060][T31437] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6934'. [ 2628.273962][T15129] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 2628.476535][T15129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2628.504977][T15129] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2628.549305][T15129] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2628.585170][T15129] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2628.618985][T15129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2628.646622][T31430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2628.657037][T15129] hub 3-1:1.0: bad descriptor, ignoring hub [ 2628.670810][T15129] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2628.692150][T15129] cdc_wdm 3-1:1.0: skipping garbage [ 2628.713438][T15129] cdc_wdm 3-1:1.0: skipping garbage [ 2628.737069][T15129] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2628.758622][T15129] cdc_wdm 3-1:1.0: Unknown control protocol [ 2629.095273][T17026] usb 3-1: USB disconnect, device number 100 [ 2629.360635][T31439] syz.3.6933: attempt to access beyond end of device [ 2629.360635][T31439] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2629.663932][T17026] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 2629.893889][T17026] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2629.927095][T17026] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2629.958494][T17026] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2629.977825][T14110] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2629.994387][T17026] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2630.012536][T17026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.036259][T31430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2630.073663][T17026] hub 3-1:1.0: bad descriptor, ignoring hub [ 2630.112960][T17026] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2630.128920][T17026] cdc_wdm 3-1:1.0: skipping garbage [ 2630.150841][T17026] cdc_wdm 3-1:1.0: skipping garbage [ 2630.189608][T17026] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2630.208360][T17026] cdc_wdm 3-1:1.0: Unknown control protocol [ 2630.233840][T14110] usb 1-1: Using ep0 maxpacket: 16 [ 2630.268936][T14110] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 2630.294750][T14110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2631.086833][T14110] usb 1-1: Product: syz [ 2631.090395][T29257] audit_log_start: 3899 callbacks suppressed [ 2631.090409][T29257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2631.091108][T14110] usb 1-1: Manufacturer: syz [ 2631.103817][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2631.103838][ C1] audit: audit_lost=198822 audit_rate_limit=0 audit_backlog_limit=64 [ 2631.103854][ C1] audit: backlog limit exceeded [ 2631.104107][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2631.104118][ C1] audit: audit_lost=198823 audit_rate_limit=0 audit_backlog_limit=64 [ 2631.104134][ C1] audit: backlog limit exceeded [ 2631.104413][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2631.104424][ C1] audit: audit_lost=198824 audit_rate_limit=0 audit_backlog_limit=64 [ 2631.104433][ C1] audit: backlog limit exceeded [ 2631.719763][T31430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2631.933257][T31430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2632.409324][T14110] usb 1-1: SerialNumber: syz [ 2632.430386][T14110] usb 1-1: config 0 descriptor?? [ 2632.554270][T22977] usb 3-1: USB disconnect, device number 101 [ 2632.744351][T14110] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2632.751394][T14110] usb 1-1: MIDIStreaming interface descriptor not found [ 2633.214219][T15129] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2633.464058][T15129] usb 2-1: Using ep0 maxpacket: 8 [ 2633.512682][T15129] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2633.674155][T15129] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2633.714004][T15129] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2633.739225][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.876701][T14110] usb 1-1: USB disconnect, device number 83 [ 2634.225674][T15129] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2634.446160][T15129] usb 4-1: Using ep0 maxpacket: 32 [ 2634.477733][T15129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2634.496593][T15129] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 2634.516546][T15129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.542619][T15129] usb 4-1: config 0 descriptor?? [ 2635.809075][T20178] usb 2-1: USB disconnect, device number 76 [ 2635.822588][T15129] lenovo 0003:17EF:60EE.0034: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 2636.354996][ T29] kauditd_printk_skb: 2665 callbacks suppressed [ 2636.355137][ T29] audit: type=1400 audit(1723525779.474:903026): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31494 comm="syz.4.6954" name="newroot" dev="tmpfs" ino=2 [ 2636.847622][ T29] audit: type=1400 audit(1723525779.474:903027): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31494 comm="syz.4.6954" name="/" dev="proc" ino=1 [ 2636.866322][ T29] audit: type=1400 audit(1723525779.474:903028): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31494 comm="syz.4.6954" name="/" dev="proc" ino=1 [ 2636.885715][ T29] audit: type=1400 audit(1723525779.474:903029): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31494 comm="syz.4.6954" name="44" dev="proc" ino=141771 [ 2636.906291][ T29] audit: type=1400 audit(1723525779.474:903030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31494 comm="syz.4.6954" name="newroot" dev="tmpfs" ino=2 [ 2636.925899][ T29] audit: type=1400 audit(1723525779.474:903031): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31494 comm="syz.4.6954" name="/" dev="proc" ino=1 [ 2636.945999][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2636.946197][T31500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2636.952503][ C1] audit: audit_lost=198944 audit_rate_limit=0 audit_backlog_limit=64 [ 2636.952524][ C1] audit: backlog limit exceeded [ 2637.093348][T31504] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6955'. [ 2637.178362][T31500] syz.2.6947: attempt to access beyond end of device [ 2637.178362][T31500] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2637.210395][T14110] usb 4-1: USB disconnect, device number 86 [ 2638.184549][T17034] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2638.413057][T31518] tipc: Enabling of bearer rejected, already enabled [ 2638.469432][T17034] usb 4-1: Using ep0 maxpacket: 8 [ 2638.494823][T17034] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2638.516363][T17034] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2638.550018][T17034] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2638.590850][T17034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2639.770785][T31523] syz.0.6957: attempt to access beyond end of device [ 2639.770785][T31523] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2640.957592][T17034] usb 4-1: USB disconnect, device number 87 [ 2641.710378][ T29] kauditd_printk_skb: 2358 callbacks suppressed [ 2641.710469][ T29] audit: type=1400 audit(1723525784.784:905358): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz.3.6966" name="newroot" dev="tmpfs" ino=2 [ 2642.224402][ T29] audit: type=1400 audit(1723525784.784:905359): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz.3.6966" name="/" dev="proc" ino=1 [ 2642.238183][T29257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2642.245741][ T29] audit: type=1400 audit(1723525784.784:905360): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz.3.6966" name="/" dev="proc" ino=1 [ 2642.250609][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2642.268371][ T29] audit: type=1400 audit(1723525784.784:905361): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz.3.6966" name="494" dev="proc" ino=141038 [ 2642.274463][ C1] audit: audit_lost=198956 audit_rate_limit=0 audit_backlog_limit=64 [ 2642.293735][ T29] audit: type=1400 audit(1723525784.784:905362): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz.3.6966" name="newroot" dev="tmpfs" ino=2 [ 2642.320772][ C1] audit: backlog limit exceeded [ 2642.322445][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2646.558943][T31595] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6979'. [ 2646.568058][T31595] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6979'. [ 2646.577107][T31595] netlink: 'syz.4.6979': attribute type 5 has an invalid length. [ 2646.584910][T31595] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6979'. [ 2646.715402][ T29] kauditd_printk_skb: 2509 callbacks suppressed [ 2646.715422][ T29] audit: type=1400 audit(1723525790.074:906701): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=31566 comm="syz.1.6972" [ 2646.745883][T31583] syz.1.6972: attempt to access beyond end of device [ 2646.745883][T31583] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2646.814075][ T29] audit: type=1400 audit(1723525790.104:906702): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31566 comm="syz.1.6972" name="newroot" dev="tmpfs" ino=2 [ 2646.855546][T30763] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2646.870246][T30763] audit: audit_lost=199359 audit_rate_limit=0 audit_backlog_limit=64 [ 2646.884167][ T29] audit: type=1400 audit(1723525790.104:906703): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31566 comm="syz.1.6972" name="/" dev="sysfs" ino=1 [ 2646.926730][T30763] audit: backlog limit exceeded [ 2646.957208][T29836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2646.967369][T30830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2646.974159][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2646.980652][ C1] audit: audit_lost=199360 audit_rate_limit=0 audit_backlog_limit=64 [ 2647.519579][T17034] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2647.803975][T14110] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2648.023990][T17034] usb 5-1: Using ep0 maxpacket: 8 [ 2648.037285][T17034] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2648.079269][T17034] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2648.156004][T17034] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2648.176130][T14110] usb 1-1: Using ep0 maxpacket: 8 [ 2648.204552][T14110] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2648.229987][T17034] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2648.253194][T14110] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2648.284610][T17034] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2648.303876][T14110] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2648.313022][T17034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.321118][T14110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.578203][T17034] usb 5-1: usb_control_msg returned -32 [ 2649.534064][T17034] usbtmc 5-1:16.0: can't read capabilities [ 2649.804264][T31621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6987'. [ 2651.465833][T22977] usb 1-1: USB disconnect, device number 84 [ 2651.715088][ T5225] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2651.726358][ T5225] Bluetooth: hci4: Injecting HCI hardware error event [ 2651.736963][T24662] Bluetooth: hci4: hardware error 0x00 [ 2651.746068][ T29] kauditd_printk_skb: 1469 callbacks suppressed [ 2651.746084][ T29] audit: type=1400 audit(1723525794.944:907961): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=31631 comm="syz.1.6993" opid=31631 ocomm="syz.1.6993" [ 2652.405487][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.412483][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.667720][ T29] audit: type=1400 audit(1723525795.074:907962): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31633 comm="syz.3.6991" name="151" dev="tmpfs" ino=818 [ 2653.167077][T17034] usb 5-1: USB disconnect, device number 71 [ 2653.233954][T29296] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2653.234049][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2653.243456][ T29] audit: type=1400 audit(1723525795.074:907963): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=31633 comm="syz.3.6991" name="151" dev="tmpfs" ino=818 [ 2653.247676][ C1] audit: audit_lost=199432 audit_rate_limit=0 audit_backlog_limit=64 [ 2653.247696][ C1] audit: backlog limit exceeded [ 2653.247940][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2653.286129][ C1] audit: audit_lost=199433 audit_rate_limit=0 audit_backlog_limit=64 [ 2653.294202][ C1] audit: backlog limit exceeded [ 2654.960149][T24662] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2656.452816][T31665] syz.1.6998: attempt to access beyond end of device [ 2656.452816][T31665] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2656.894802][ T29] kauditd_printk_skb: 2935 callbacks suppressed [ 2656.894820][ T29] audit: type=1400 audit(1723525800.044:908914): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31659 comm="syz.3.7000" saddr=172.20.20.10 src=60540 daddr=172.20.20.187 dest=16385 netif=lo [ 2657.172985][ T29] audit: type=1400 audit(1723525800.054:908915): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15801 comm="kworker/u8:13" saddr=172.20.20.187 src=16385 daddr=172.20.20.10 dest=60540 netif=lo [ 2657.279864][ T29] audit: type=1400 audit(1723525800.114:908916): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=24 comm="ksoftirqd/1" saddr=172.20.20.10 src=60540 daddr=172.20.20.187 dest=16385 netif=lo [ 2657.334534][T26801] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2657.378562][T30763] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2657.392954][ T29] audit: type=1400 audit(1723525800.144:908917): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2657.453876][T30763] audit: audit_lost=200096 audit_rate_limit=0 audit_backlog_limit=64 [ 2657.523834][ T29] audit: type=1400 audit(1723525800.144:908918): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31659 comm="syz.3.7000" name="newroot" dev="tmpfs" ino=2 [ 2657.547331][T26801] usb 3-1: Using ep0 maxpacket: 8 [ 2657.560561][T31672] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2657.567228][T31672] audit: audit_lost=200097 audit_rate_limit=0 audit_backlog_limit=64 [ 2657.575445][T31672] audit: backlog limit exceeded [ 2657.581964][T26801] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2657.590701][T26801] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2657.605862][T26801] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2657.621546][T26801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2660.563933][T17033] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2660.804184][T17033] usb 4-1: Using ep0 maxpacket: 8 [ 2660.830565][T17033] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2660.864664][T17033] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2660.881550][T17033] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2660.891986][T17033] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2660.905570][T17033] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2660.967888][T17033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2661.260689][T31711] vivid-000: ================= START STATUS ================= [ 2661.276151][T31711] vivid-000: Generate PTS: true [ 2661.309321][T31711] vivid-000: Generate SCR: true [ 2661.314697][T31711] tpg source WxH: 320x180 (R'G'B) [ 2661.365788][T31711] tpg field: 1 [ 2661.424810][T31711] tpg crop: 320x180@0x0 [ 2661.429710][T31711] tpg compose: 320x180@0x0 [ 2661.437971][T31711] tpg colorspace: 8 [ 2661.444734][T31711] tpg transfer function: 0/2 [ 2661.456538][T31711] tpg quantization: 0/1 [ 2661.461418][T31711] tpg RGB range: 0/2 [ 2661.467724][T31711] vivid-000: ================== END STATUS ================== [ 2661.494416][T17033] usb 4-1: usb_control_msg returned -32 [ 2661.500032][T17033] usbtmc 4-1:16.0: can't read capabilities [ 2662.014199][ T29] kauditd_printk_skb: 2773 callbacks suppressed [ 2662.014244][ T29] audit: type=1400 audit(1723525805.144:911578): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=31698 comm="syz.3.7010" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 2662.375253][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2662.375332][T31722] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2662.381844][T31722] audit: audit_lost=200136 audit_rate_limit=0 audit_backlog_limit=64 [ 2662.381861][T31722] audit: backlog limit exceeded [ 2662.381883][T31722] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2662.388559][T29296] audit: audit_lost=200137 audit_rate_limit=0 audit_backlog_limit=64 [ 2662.417205][T31719] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2662.423807][ T29] audit: type=1400 audit(1723525805.154:911579): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2662.450376][T31719] audit: audit_lost=200138 audit_rate_limit=0 audit_backlog_limit=64 [ 2662.634739][T17033] usb 3-1: USB disconnect, device number 102 [ 2663.587534][T17026] usb 4-1: USB disconnect, device number 88 [ 2663.627492][T31732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7018'. [ 2663.654086][T31732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7018'. [ 2667.070848][ T29] kauditd_printk_skb: 2802 callbacks suppressed [ 2667.070865][ T29] audit: type=1400 audit(1723525810.424:913594): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.28 dest=43172 netif=eth0 [ 2667.097254][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2667.106443][T31772] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2667.131328][T31772] audit: audit_lost=200401 audit_rate_limit=0 audit_backlog_limit=64 [ 2667.142696][T31771] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2667.149446][T29296] audit: audit_lost=200402 audit_rate_limit=0 audit_backlog_limit=64 [ 2667.164198][T31772] audit: backlog limit exceeded [ 2667.169274][T31771] audit: audit_lost=200403 audit_rate_limit=0 audit_backlog_limit=64 [ 2667.178110][T31771] audit: backlog limit exceeded [ 2667.183376][T31771] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2667.476522][T22977] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2668.476704][T22977] usb 5-1: Using ep0 maxpacket: 8 [ 2668.534556][T22977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2668.688889][T22977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2668.699602][T22977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2668.714095][T22977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2668.727295][T22977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2668.947276][T22977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2669.585919][T22977] usb 5-1: usb_control_msg returned -32 [ 2669.634039][T22977] usbtmc 5-1:16.0: can't read capabilities [ 2670.632423][T31794] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7035'. [ 2670.716513][T31794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7035'. [ 2671.987540][T20178] usb 5-1: USB disconnect, device number 72 [ 2672.074002][ T29] kauditd_printk_skb: 2180 callbacks suppressed [ 2672.074020][ T29] audit: type=1400 audit(1723525815.424:915070): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30763 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2672.165079][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2672.166670][T31804] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2672.178559][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2672.178580][ C1] audit: audit_lost=200639 audit_rate_limit=0 audit_backlog_limit=64 [ 2672.178600][ C1] audit: backlog limit exceeded [ 2672.178659][T29296] audit: audit_lost=200640 audit_rate_limit=0 audit_backlog_limit=64 [ 2672.178679][T29296] audit: backlog limit exceeded [ 2672.178697][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2672.178711][T29296] audit: audit_lost=200641 audit_rate_limit=0 audit_backlog_limit=64 [ 2672.316324][T31804] syz.2.7037: attempt to access beyond end of device [ 2672.316324][T31804] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2673.624464][T20178] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2673.813881][T20178] usb 2-1: Using ep0 maxpacket: 8 [ 2673.829004][T20178] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2673.984587][T20178] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2674.033924][T20178] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2674.064364][T20178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.698654][T17034] usb 2-1: USB disconnect, device number 77 [ 2675.717870][T31835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7047'. [ 2675.857274][T31840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2675.940899][T31840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2676.389460][T22977] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2677.111226][ T29] kauditd_printk_skb: 2045 callbacks suppressed [ 2677.111245][ T29] audit: type=1400 audit(1723525820.434:916828): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31846 comm="syz.3.7054" name="166" dev="tmpfs" ino=898 [ 2677.441815][ T29] audit: type=1400 audit(1723525820.444:916829): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31846 comm="syz.3.7054" name="166" dev="tmpfs" ino=898 [ 2677.446191][T31853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2677.461962][ T29] audit: type=1400 audit(1723525820.454:916830): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31846 comm="syz.3.7054" name="newroot" dev="tmpfs" ino=2 [ 2677.487469][T31848] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2677.494065][T31848] audit: audit_lost=200738 audit_rate_limit=0 audit_backlog_limit=64 [ 2677.502111][T31848] audit: backlog limit exceeded [ 2677.507135][T31854] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2677.514325][T31848] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2677.521466][T31848] audit: audit_lost=200739 audit_rate_limit=0 audit_backlog_limit=64 [ 2677.572643][T22977] usb 3-1: Using ep0 maxpacket: 8 [ 2677.589182][T22977] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2677.604642][T22977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2677.633870][T22977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2677.654585][T22977] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2677.671441][T22977] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2677.682087][T22977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2677.950943][T22977] usb 3-1: usb_control_msg returned -32 [ 2678.083832][T22977] usbtmc 3-1:16.0: can't read capabilities [ 2681.817741][T28213] usb 3-1: USB disconnect, device number 103 [ 2682.168661][ T29] kauditd_printk_skb: 1574 callbacks suppressed [ 2682.168703][ T29] audit: type=1400 audit(1723525825.524:917751): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=31873 comm="syz.3.7059" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 2682.394196][T17033] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2682.415233][T29296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2682.421819][T29296] audit: audit_lost=200959 audit_rate_limit=0 audit_backlog_limit=64 [ 2682.430503][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2682.448674][T30830] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2682.585398][T31879] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2682.591969][T31879] audit: audit_lost=200960 audit_rate_limit=0 audit_backlog_limit=64 [ 2682.597057][T30830] audit: audit_lost=200961 audit_rate_limit=0 audit_backlog_limit=64 [ 2682.600081][T31879] audit: backlog limit exceeded [ 2682.608248][ T27] audit: audit_lost=200962 audit_rate_limit=0 audit_backlog_limit=64 [ 2682.733864][T17033] usb 4-1: Using ep0 maxpacket: 8 [ 2682.741956][T17033] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2682.775958][T17033] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2682.827174][T17033] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2682.850880][T17033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2683.477285][T20178] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2684.029567][T20178] usb 1-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 2684.051054][T20178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.079471][T20178] usb 1-1: Product: syz [ 2684.084580][T20178] usb 1-1: Manufacturer: syz [ 2684.089292][T20178] usb 1-1: SerialNumber: syz [ 2684.095936][T20178] usb 1-1: config 0 descriptor?? [ 2684.165203][T17030] usb 4-1: USB disconnect, device number 89 [ 2684.340985][T20178] kaweth 1-1:0.0: Firmware present in device. [ 2684.588828][T31905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2685.025172][T31887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2685.058619][T17026] IPVS: starting estimator thread 0... [ 2685.065353][T31887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2685.085367][T31905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2685.186380][T31914] IPVS: using max 18 ests per chain, 43200 per kthread [ 2685.256889][T20178] kaweth 1-1:0.0: Error reading configuration (-32), no net device created [ 2685.277313][T20178] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 2685.334238][T20178] usb 1-1: USB disconnect, device number 85 [ 2685.771009][T17030] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2686.044527][ T30] INFO: task syz.4.6724:30685 blocked for more than 143 seconds. [ 2686.125229][T17030] usb 2-1: Using ep0 maxpacket: 8 [ 2686.334513][ T30] Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 2686.363329][T17030] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2686.387929][T17030] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2686.393814][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2686.398180][T17030] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2686.416919][T17030] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2686.429776][ T30] task:syz.4.6724 state:D stack:24672 pid:30685 tgid:30685 ppid:29293 flags:0x00004004 [ 2686.430070][T17030] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2686.473666][ T30] Call Trace: [ 2686.475532][T17030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2686.478745][ T30] [ 2686.493813][ T30] __schedule+0x17ae/0x4a10 [ 2686.498360][ T30] ? __pfx___schedule+0x10/0x10 [ 2686.503261][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 2686.512731][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2686.518018][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2686.524028][ T30] ? do_task_dead+0x39/0xd0 [ 2686.532785][ T30] do_task_dead+0xc4/0xd0 [ 2686.540652][ T30] do_exit+0x1e7c/0x27f0 [ 2686.554328][ T30] ? __pfx_do_exit+0x10/0x10 [ 2686.572457][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2686.639548][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2686.645633][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2686.656537][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 2686.688021][ T30] do_group_exit+0x207/0x2c0 [ 2686.753829][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2686.759089][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2686.771871][ T30] get_signal+0x1695/0x1730 [ 2686.778280][ T30] ? __pfx_get_signal+0x10/0x10 [ 2686.793051][T17030] usb 2-1: usb_control_msg returned -32 [ 2686.793385][ T30] arch_do_signal_or_restart+0x96/0x860 [ 2686.934930][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2686.942002][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2686.948094][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 2686.953879][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 2686.959482][ T30] do_syscall_64+0x100/0x230 [ 2686.964092][ T30] ? clear_bhb_loop+0x35/0x90 [ 2686.968760][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2686.974739][ T30] RIP: 0033:0x7fbadd1799f9 [ 2686.979549][ T30] RSP: 002b:00007fff071cc2e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2686.989669][T17030] usbtmc 2-1:16.0: can't read capabilities [ 2687.002694][ T30] RAX: fffffffffffffdfc RBX: 000000000026cd53 RCX: 00007fbadd1799f9 [ 2687.015132][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbadd31613c [ 2687.023132][ T30] RBP: 00007fbadd31613c R08: 00007fbadd315f80 R09: 00007fff071cc5cf [ 2687.038171][ T30] R10: 00007fff071cc3e0 R11: 0000000000000246 R12: 0000000000000032 [ 2687.052723][ T30] R13: 00007fff071cc3e0 R14: 00007fff071cc400 R15: 000000000026cd21 [ 2687.896120][ T29] kauditd_printk_skb: 2429 callbacks suppressed [ 2687.896138][ T29] audit: type=1400 audit(1723525830.784:919785): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31915 comm="syz.1.7071" name="newroot" dev="tmpfs" ino=2 [ 2687.983901][ T30] [ 2687.987130][ T30] [ 2687.987130][ T30] Showing all locks held in the system: [ 2687.995136][ T30] 1 lock held by khungtaskd/30: [ 2688.003597][ T29] audit: type=1400 audit(1723525830.784:919786): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31915 comm="syz.1.7071" name="/" dev="devtmpfs" ino=1 [ 2688.022931][ T30] #0: ffffffff8e7382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2688.033237][ T30] 2 locks held by getty/4967: [ 2688.038052][ T30] #0: ffff88802ad6f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2688.048140][ T29] audit: type=1400 audit(1723525830.784:919787): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31915 comm="syz.1.7071" name="char" dev="devtmpfs" ino=1129 [ 2688.067626][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 2688.077821][ T30] 2 locks held by kworker/u8:13/15801: [ 2688.083350][ T29] audit: type=1400 audit(1723525831.244:919788): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2688.102000][ T30] 5 locks held by kworker/u8:0/22147: [ 2688.107660][ T30] 2 locks held by syz.4.6724/30695: [ 2688.114979][ T30] 1 lock held by syz.3.7073/31919: [ 2688.120210][ T30] #0: ffff88807b89b118 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 2688.130927][ T29] audit: type=1400 audit(1723525831.244:919789): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2688.149652][ T30] 1 lock held by syz.3.7073/31921: [ 2688.155574][ T30] [ 2688.157961][ T30] ============================================= [ 2688.157961][ T30] [ 2688.169785][ T29] audit: type=1400 audit(1723525831.244:919790): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="usbtmc0" dev="devtmpfs" ino=4869 [ 2688.188953][ T30] NMI backtrace for cpu 0 [ 2688.193289][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 2688.203783][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2688.213830][ T30] Call Trace: [ 2688.217100][ T30] [ 2688.220025][ T30] dump_stack_lvl+0x241/0x360 [ 2688.224702][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2688.229889][ T30] ? __pfx__printk+0x10/0x10 [ 2688.234465][ T30] ? vprintk_emit+0x631/0x770 [ 2688.239127][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 2688.244151][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2688.249103][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2688.254555][ T30] ? _printk+0xd5/0x120 [ 2688.258704][ T30] ? __pfx__printk+0x10/0x10 [ 2688.263287][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2688.268129][ T30] ? __pfx__printk+0x10/0x10 [ 2688.272712][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2688.277732][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2688.283706][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2688.289684][ T30] watchdog+0xfee/0x1030 [ 2688.293929][ T30] ? watchdog+0x1ea/0x1030 [ 2688.298353][ T30] ? __pfx_watchdog+0x10/0x10 [ 2688.303022][ T30] kthread+0x2f0/0x390 [ 2688.307084][ T30] ? __pfx_watchdog+0x10/0x10 [ 2688.311754][ T30] ? __pfx_kthread+0x10/0x10 [ 2688.316343][ T30] ret_from_fork+0x4b/0x80 [ 2688.320755][ T30] ? __pfx_kthread+0x10/0x10 [ 2688.325340][ T30] ret_from_fork_asm+0x1a/0x30 [ 2688.330112][ T30] [ 2688.333585][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2688.338863][ C1] NMI backtrace for cpu 1 [ 2688.338876][ C1] CPU: 1 UID: 0 PID: 15794 Comm: kworker/u8:1 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 2688.338897][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2688.338908][ C1] Workqueue: events_unbound toggle_allocation_gate [ 2688.338930][ C1] RIP: 0010:kasan_check_range+0x24/0x290 [ 2688.338951][ C1] Code: 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f 82 56 02 00 00 <48> 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb [ 2688.338965][ C1] RSP: 0018:ffffc90003e07358 EFLAGS: 00000002 [ 2688.338983][ C1] RAX: 0000000000000001 RBX: 0000000000000038 RCX: ffffffff81702e6a [ 2688.338996][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff934f1840 [ 2688.339007][ C1] RBP: 0000000000000002 R08: ffffffff934f1848 R09: 1ffffffff269e308 [ 2688.339019][ C1] R10: dffffc0000000000 R11: fffffbfff269e309 R12: ffff88804c928000 [ 2688.339031][ C1] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff88804c928bd0 [ 2688.339043][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 2688.339057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2688.339069][ C1] CR2: 00007f1336ae3ff0 CR3: 000000000e534000 CR4: 00000000003506f0 [ 2688.339084][ C1] DR0: 0000000000000621 DR1: 0000000000000000 DR2: 0000000000000000 [ 2688.339094][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2688.339105][ C1] Call Trace: [ 2688.339112][ C1] [ 2688.339119][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2688.339137][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2688.339158][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2688.339183][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2688.339201][ C1] ? nmi_handle+0x14f/0x5a0 [ 2688.339217][ C1] ? nmi_handle+0x2a/0x5a0 [ 2688.339233][ C1] ? kasan_check_range+0x24/0x290 [ 2688.339250][ C1] ? default_do_nmi+0x63/0x160 [ 2688.339268][ C1] ? exc_nmi+0x123/0x1f0 [ 2688.339285][ C1] ? end_repeat_nmi+0xf/0x53 [ 2688.339304][ C1] ? mark_lock+0x9a/0x350 [ 2688.339324][ C1] ? kasan_check_range+0x24/0x290 [ 2688.339343][ C1] ? kasan_check_range+0x24/0x290 [ 2688.339361][ C1] ? kasan_check_range+0x24/0x290 [ 2688.339379][ C1] [ 2688.339385][ C1] [ 2688.339392][ C1] mark_lock+0x9a/0x350 [ 2688.339414][ C1] __lock_acquire+0x115d/0x2040 [ 2688.339440][ C1] lock_acquire+0x1ed/0x550 [ 2688.339458][ C1] ? __pte_offset_map_lock+0x1ba/0x300 [ 2688.339477][ C1] ? __pfx_switch_ldt+0x10/0x10 [ 2688.339494][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2688.339514][ C1] ? rcu_is_watching+0x15/0xb0 [ 2688.339534][ C1] ? __pte_offset_map+0x2c4/0x380 [ 2688.339551][ C1] ? __pfx___pte_offset_map+0x10/0x10 [ 2688.339572][ C1] _raw_spin_lock+0x2e/0x40 [ 2688.339590][ C1] ? __pte_offset_map_lock+0x1ba/0x300 [ 2688.339607][ C1] __pte_offset_map_lock+0x1ba/0x300 [ 2688.339628][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 2688.339646][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2688.339663][ C1] ? walk_to_pmd+0x19b/0x240 [ 2688.339685][ C1] ? kmem_cache_alloc_node_noprof+0x89/0x320 [ 2688.339704][ C1] __text_poke+0x2c5/0xd30 [ 2688.339722][ C1] ? kmem_cache_alloc_lru_noprof+0x84/0x2b0 [ 2688.339742][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 2688.339760][ C1] ? __pfx___text_poke+0x10/0x10 [ 2688.339776][ C1] ? preempt_schedule_common+0x84/0xd0 [ 2688.339795][ C1] ? preempt_schedule+0xe1/0xf0 [ 2688.339813][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 2688.339832][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 2688.339849][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 2688.339865][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 2688.339885][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2688.339906][ C1] text_poke_bp_batch+0x8cd/0xb30 [ 2688.339928][ C1] ? kmem_cache_alloc_bulk_noprof+0x147/0x790 [ 2688.339948][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 2688.339973][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 2688.339996][ C1] text_poke_finish+0x30/0x50 [ 2688.340012][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 2688.340031][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 2688.340052][ C1] static_key_enable+0x1a/0x20 [ 2688.340069][ C1] toggle_allocation_gate+0xb5/0x250 [ 2688.340088][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2688.340106][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2688.340130][ C1] ? process_scheduled_works+0x945/0x1830 [ 2688.340149][ C1] process_scheduled_works+0xa2c/0x1830 [ 2688.340179][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2688.340202][ C1] ? assign_work+0x364/0x3d0 [ 2688.340222][ C1] worker_thread+0x86d/0xd40 [ 2688.340248][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2688.340268][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2688.340286][ C1] kthread+0x2f0/0x390 [ 2688.340306][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2688.340324][ C1] ? __pfx_kthread+0x10/0x10 [ 2688.340344][ C1] ret_from_fork+0x4b/0x80 [ 2688.340362][ C1] ? __pfx_kthread+0x10/0x10 [ 2688.340382][ C1] ret_from_fork_asm+0x1a/0x30 [ 2688.340407][ C1] [ 2688.341065][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2688.836735][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 2688.847221][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2688.857265][ T30] Call Trace: [ 2688.860531][ T30] [ 2688.863448][ T30] dump_stack_lvl+0x241/0x360 [ 2688.868129][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2688.873331][ T30] ? __pfx__printk+0x10/0x10 [ 2688.877931][ T30] ? vscnprintf+0x5d/0x90 [ 2688.882258][ T30] panic+0x349/0x860 [ 2688.886165][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2688.892306][ T30] ? __pfx_panic+0x10/0x10 [ 2688.896723][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2688.902083][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2688.907617][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2688.912972][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2688.919112][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2688.925254][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2688.931392][ T30] watchdog+0x102d/0x1030 [ 2688.935728][ T30] ? watchdog+0x1ea/0x1030 [ 2688.940143][ T30] ? __pfx_watchdog+0x10/0x10 [ 2688.944813][ T30] kthread+0x2f0/0x390 [ 2688.948961][ T30] ? __pfx_watchdog+0x10/0x10 [ 2688.953719][ T30] ? __pfx_kthread+0x10/0x10 [ 2688.958314][ T30] ret_from_fork+0x4b/0x80 [ 2688.962721][ T30] ? __pfx_kthread+0x10/0x10 [ 2688.967298][ T30] ret_from_fork_asm+0x1a/0x30 [ 2688.972061][ T30] [ 2688.975302][ T30] Kernel Offset: disabled [ 2688.979614][ T30] Rebooting in 86400 seconds..