last executing test programs: 2m43.927537989s ago: executing program 3 (id=3480): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x98020, &(0x7f0000000040)=ANY=[], 0x1, 0x2c3, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) socket$igmp6(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, 0x0, 0x0}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x54) shutdown(r4, 0x2) symlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 2m42.606815062s ago: executing program 3 (id=3492): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) rseq(0x0, 0xfe51, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x234, 0x0, &(0x7f0000000000), 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 2m41.104531921s ago: executing program 3 (id=3484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 2m39.474402269s ago: executing program 3 (id=3487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xe4010000, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) r5 = syz_open_procfs(r1, &(0x7f00000021c0)='net/vlan/vlan0\x00') read$FUSE(r5, &(0x7f0000000140)={0x2020}, 0x2020) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='stack :'], 0x564) 2m38.07113628s ago: executing program 3 (id=3489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff020000000000000000000000000001890090780000000020410000000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000000000000000001c00000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/252], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700"/148, 0x94, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2m35.418247105s ago: executing program 3 (id=3498): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open$dir(&(0x7f0000000300)='./file0/file0\x00', 0x2001, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r5 = syz_open_pts(r4, 0x0) ppoll(&(0x7f0000000140)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) 2m33.187609385s ago: executing program 1 (id=3500): syz_open_dev$vim2m(&(0x7f0000000100), 0x8000, 0x2) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000540)=""/4103, 0x1007, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000008) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x3432564e, 0x1, @stepwise={0x300000, 0x6, 0x4, 0x4e, 0x7, 0x3}}) 2m33.035481988s ago: executing program 1 (id=3501): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) r4 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2m32.121496428s ago: executing program 1 (id=3503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m31.192401559s ago: executing program 1 (id=3506): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') syz_open_dev$vim2m(0x0, 0xca55, 0x2) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) 2m29.4266362s ago: executing program 1 (id=3509): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x220, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.089605603s ago: executing program 1 (id=3511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) write$tun(0xffffffffffffffff, 0x0, 0x3e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r4, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) 2m20.952666343s ago: executing program 32 (id=3498): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open$dir(&(0x7f0000000300)='./file0/file0\x00', 0x2001, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r5 = syz_open_pts(r4, 0x0) ppoll(&(0x7f0000000140)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) 2m12.605134163s ago: executing program 33 (id=3511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) write$tun(0xffffffffffffffff, 0x0, 0x3e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r4, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) 29.537597239s ago: executing program 6 (id=3730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff020000000000000000000000000001890090780000000020410000000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000000000000000001c000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700"/148, 0x94, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 24.610595289s ago: executing program 6 (id=3738): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000200)='x', 0xff82, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) syz_usb_control_io(r0, 0x0, 0x0) 20.544632571s ago: executing program 6 (id=3745): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe1f, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x1000}, &(0x7f0000000080)=0x8) r4 = syz_io_uring_setup(0xbdc, &(0x7f00000002c0)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 17.956200151s ago: executing program 2 (id=3750): socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000bc0)) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_io_uring_setup(0xa39, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000400)='virtiofs\x00', 0x204000, 0x0) 17.754372445s ago: executing program 5 (id=3752): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) r8 = fcntl$dupfd(r7, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) 16.478682259s ago: executing program 2 (id=3753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01"], 0x6c}}, 0x0) 16.397439309s ago: executing program 5 (id=3754): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000171000/0x4000)=nil, 0x4000, 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r2 = getpid() syz_pidfd_open(r2, 0x0) dup(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000006000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000172000018007000100727400"], 0xb4}}, 0x0) 14.539230087s ago: executing program 5 (id=3758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/249], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 13.007041727s ago: executing program 2 (id=3760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={r4, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000004c0)={0x0, 0x0, r5, r6, 0x4, 0x2, 0x0, 0x3, {0x3, 0x24, 0x694, 0x9, 0x0, 0x0, 0x3, 0x3, 0x6, 0xa, 0x1, 0x101, 0x6, 0x1, "dab63f9e416252e7b8dfbfc0c51090dedb6e10994a283bb221422502334119eb"}}) 12.260303653s ago: executing program 6 (id=3762): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x6, 0x0, 0x0, 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x41, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xfc, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0xa67, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a00"], 0x38}}, 0x40408c0) 11.182051768s ago: executing program 2 (id=3765): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="040e0cff1c20"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x80010001, @mcast1, 0xb}}}, 0x30) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x4800) 10.89473159s ago: executing program 6 (id=3766): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma -cpu'], 0xe) 8.419902516s ago: executing program 4 (id=3768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d4"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) shmctl$IPC_RMID(0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x3f, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x17, 0x0, 0x1, [@typed={0xc, 0x141, 0x0, 0x0, @u64=0x7fffffff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8.249519511s ago: executing program 2 (id=3770): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r5, r4, 0x0) 8.005142222s ago: executing program 0 (id=3771): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3a) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}}}, 0x48) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) 8.001611507s ago: executing program 6 (id=3772): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe1f, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x1000}, &(0x7f0000000080)=0x8) r4 = syz_io_uring_setup(0xbdc, &(0x7f00000002c0)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.286722532s ago: executing program 2 (id=3773): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc3, 0x80, 0x34325241, 0x0, [0x2], [0x80ffff], [], [0x80000001, 0x0, 0x0, 0x4]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000040)=0x1, 0xbab, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x5) accept(r3, 0x0, &(0x7f0000000000)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000ffffffff00110000009500"/24], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x200) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x891d, 0x0) 6.445842062s ago: executing program 4 (id=3774): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) r7 = fcntl$dupfd(r6, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) 6.050099808s ago: executing program 5 (id=3775): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0xfffffffffffffefd) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x1, {0x0, 0xf0}, 0xfd}, 0x18) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x129480, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7fffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x400c881}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.434423959s ago: executing program 4 (id=3776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 5.400186693s ago: executing program 0 (id=3777): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) r8 = fcntl$dupfd(r7, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) 4.445830848s ago: executing program 0 (id=3778): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x551083, 0x28) futex_waitv(&(0x7f0000001a40)=[{0x6, &(0x7f0000000340)=0x100, 0x2}, {0x7fff, &(0x7f00000003c0)=0x200, 0x2}, {0x7, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x5, 0x0}, {0x7, 0x0, 0x2}, {0x799, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x20000000003, &(0x7f0000000a00)=0x5, 0x82}, {0x2, &(0x7f0000000b00)=0xb, 0x82}, {0x6b4, 0x0}, {0x6, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x8, &(0x7f0000000cc0)=0x10001, 0x82}, {0x1, 0x0, 0x2}, {0x9, &(0x7f0000000d40)=0xfffffffffffff396, 0x80}, {0x265a, &(0x7f0000000d80)=0x9, 0x2}, {0x60, 0x0, 0x2}, {0x3, &(0x7f00000010c0)=0x4, 0x2}, {0x0, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0xffffffff, 0x0, 0x2}], 0x18, 0x0, 0x0, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) 3.74974543s ago: executing program 4 (id=3779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xe4010000, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.232019441s ago: executing program 0 (id=3780): pipe(&(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x3, 0x1000, 0x1, r0, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x6, 0x0, 0x4, r0, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x803}], "44942d"}, @ptr, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "84"}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x5e, 0x2, 0x1}, 0x28) 2.832851512s ago: executing program 4 (id=3781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x8001, 0x9, 0x9, 0x100000000, 0x0, r1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x86, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)={0x8, {{0x2, 0x4e26, @multicast1}}}, 0x90) 2.138745569s ago: executing program 0 (id=3782): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x800002}], 0x1, 0x2002, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = pidfd_getfd(r1, r1, 0x0) setns(r7, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x24000, 0x0) 1.301589703s ago: executing program 5 (id=3783): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0xc59f, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000000000001000', @ANYRESDEC=0x0]) write$FUSE_INIT(r5, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r6, 0x0, 0x3}) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.153963014s ago: executing program 4 (id=3784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x0, "3258c5c00e7f94ae1e008fba001a0000f4ff40000000000f2300e91aba2800", 0x34343459}) 1.141850589s ago: executing program 0 (id=3785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x2) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r5) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x4) ioctl$UI_DEV_CREATE(r5, 0x5501) 0s ago: executing program 5 (id=3786): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) r7 = fcntl$dupfd(r6, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) kernel console output (not intermixed with test programs): yscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1313.622191][ T30] audit: type=1326 audit(2000001805.240:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1314.222408][ T30] audit: type=1326 audit(2000001805.240:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1314.479552][ T30] audit: type=1326 audit(2000001805.251:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1314.839546][ T30] audit: type=1326 audit(2000001805.251:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1314.863558][ T30] audit: type=1326 audit(2000001805.251:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1315.223080][T17409] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1315.927232][T17421] loop0: detected capacity change from 0 to 1024 [ 1318.531148][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1318.816238][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1318.833202][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.888307][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1318.914705][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1318.949295][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.985275][ T9] usb 5-1: Product: syz [ 1318.996227][ T9] usb 5-1: Manufacturer: syz [ 1319.000958][ T9] usb 5-1: SerialNumber: syz [ 1319.017839][ T9] usb 5-1: config 0 descriptor?? [ 1320.503869][ T9] usb 5-1: USB disconnect, device number 18 [ 1323.160384][T17479] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 1323.301504][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1323.301523][ T30] audit: type=1326 audit(2000001815.686:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17485 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1323.459914][ T30] audit: type=1326 audit(2000001815.728:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17485 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1323.879728][T17500] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3002'. [ 1327.036449][ T30] audit: type=1326 audit(2000001819.612:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.2.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1327.071515][ T30] audit: type=1326 audit(2000001819.643:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.2.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1327.202536][T17536] netlink: 'syz.3.3011': attribute type 1 has an invalid length. [ 1327.553509][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1327.560892][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1327.621287][T17538] syz.1.3015 (17538): attempted to duplicate a private mapping with mremap. This is not supported. [ 1328.884605][T17556] virtio-fs: tag not found [ 1328.897031][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 1329.133763][T17558] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1329.150209][T17558] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1339.016770][T17652] pimreg3: entered allmulticast mode [ 1339.025426][T17645] delete_channel: no stack [ 1341.885133][ T30] audit: type=1326 audit(2000001835.191:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.3.3047" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fbdf8eec9 code=0x0 [ 1342.641338][T17672] loop2: detected capacity change from 0 to 512 [ 1342.829284][ T30] audit: type=1326 audit(2000001836.167:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1343.439366][ T30] audit: type=1326 audit(2000001836.167:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1343.617156][ T30] audit: type=1326 audit(2000001836.167:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1343.640498][ T30] audit: type=1326 audit(2000001836.167:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1343.706936][T17672] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 1344.250873][ T30] audit: type=1326 audit(2000001836.167:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1344.415721][ T30] audit: type=1326 audit(2000001836.167:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ee4b90de7 code=0x7ffc0000 [ 1344.941648][ T30] audit: type=1326 audit(2000001836.167:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0ee4b90d5c code=0x7ffc0000 [ 1345.070671][ T30] audit: type=1326 audit(2000001836.167:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0ee4b90c94 code=0x7ffc0000 [ 1345.093617][ T30] audit: type=1326 audit(2000001836.178:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0ee4b90c94 code=0x7ffc0000 [ 1351.429646][T17759] batman_adv: batadv0: Adding interface: dummy0 [ 1351.451672][T17759] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.561649][T17759] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1351.670462][T17767] netlink: 'syz.3.3073': attribute type 1 has an invalid length. [ 1352.146593][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1352.146611][ T30] audit: type=1326 audit(2000001845.962:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1352.193056][T17773] loop0: detected capacity change from 0 to 512 [ 1352.350296][T17773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1352.368490][T17772] loop2: detected capacity change from 0 to 1024 [ 1352.435397][ T30] audit: type=1326 audit(2000001845.972:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1352.455388][T17773] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.476819][T17780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3077'. [ 1352.760138][ T30] audit: type=1326 audit(2000001845.972:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1352.953564][ T30] audit: type=1326 audit(2000001845.972:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1353.794297][ T30] audit: type=1326 audit(2000001845.972:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1353.819189][ T30] audit: type=1326 audit(2000001846.004:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d90de7 code=0x7ffc0000 [ 1353.843165][ T30] audit: type=1326 audit(2000001846.004:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22b8d90d5c code=0x7ffc0000 [ 1353.874769][ T30] audit: type=1326 audit(2000001846.004:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1353.900773][ T30] audit: type=1326 audit(2000001846.004:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1353.925612][ T30] audit: type=1326 audit(2000001846.004:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.2.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22b8d8db2a code=0x7ffc0000 [ 1356.026309][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.376941][T17833] netlink: 'syz.3.3088': attribute type 1 has an invalid length. [ 1365.265607][T17886] netlink: 'syz.1.3101': attribute type 1 has an invalid length. [ 1372.539747][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1372.539768][ T30] audit: type=1326 audit(2000001867.336:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1372.685703][T17949] loop0: detected capacity change from 0 to 1024 [ 1372.813744][ T30] audit: type=1326 audit(2000001867.336:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1373.015929][ T30] audit: type=1326 audit(2000001867.336:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1373.381401][T17959] netlink: 'syz.3.3114': attribute type 1 has an invalid length. [ 1373.869694][ T30] audit: type=1326 audit(2000001867.336:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd51790de7 code=0x7ffc0000 [ 1374.020933][ T30] audit: type=1326 audit(2000001867.336:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efd51790d5c code=0x7ffc0000 [ 1374.058103][T17960] loop4: detected capacity change from 0 to 1024 [ 1374.103662][ T30] audit: type=1326 audit(2000001867.346:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd51790c94 code=0x7ffc0000 [ 1374.207284][T17962] loop2: detected capacity change from 0 to 1024 [ 1374.254085][ T30] audit: type=1326 audit(2000001867.346:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd51790c94 code=0x7ffc0000 [ 1374.324338][ T30] audit: type=1326 audit(2000001867.346:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efd5178db2a code=0x7ffc0000 [ 1374.399522][ T30] audit: type=1326 audit(2000001867.346:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1374.424010][ T30] audit: type=1326 audit(2000001867.346:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.0.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1374.994495][T17969] netlink: 'syz.1.3117': attribute type 23 has an invalid length. [ 1376.062756][T17975] netlink: 'syz.1.3118': attribute type 1 has an invalid length. [ 1379.620639][T17988] netlink: 'syz.0.3121': attribute type 10 has an invalid length. [ 1385.612292][ T5186] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 1386.082435][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1386.094583][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1388.380063][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1388.380077][ T30] audit: type=1326 audit(2000001883.996:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1389.198994][ T30] audit: type=1326 audit(2000001884.007:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1389.260118][T18087] loop4: detected capacity change from 0 to 1024 [ 1389.447633][ T30] audit: type=1326 audit(2000001884.007:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1389.482353][ T30] audit: type=1326 audit(2000001884.007:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2636190de7 code=0x7ffc0000 [ 1390.145732][ T30] audit: type=1326 audit(2000001884.007:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2636190d5c code=0x7ffc0000 [ 1390.223191][ T30] audit: type=1326 audit(2000001884.007:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2636190c94 code=0x7ffc0000 [ 1390.386058][ T30] audit: type=1326 audit(2000001884.007:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2636190c94 code=0x7ffc0000 [ 1390.405705][T18104] netlink: 'syz.0.3149': attribute type 1 has an invalid length. [ 1390.854612][T18087] hfsplus: failed to load catalog file [ 1391.457665][ T30] audit: type=1326 audit(2000001884.007:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f263618db2a code=0x7ffc0000 [ 1391.560913][ T30] audit: type=1326 audit(2000001884.007:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1391.600399][ T30] audit: type=1326 audit(2000001884.007:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.4.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1392.645803][T18116] virtio-fs: tag not found [ 1392.819828][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 1393.514253][T18120] wg2 speed is unknown, defaulting to 1000 [ 1394.759303][T18142] ptrace attach of "./syz-executor exec"[5870] was attempted by " [ 1394.885353][T18142] loop2: detected capacity change from 0 to 64 [ 1396.129534][T18156] loop4: detected capacity change from 0 to 1024 [ 1396.254875][T18161] loop0: detected capacity change from 0 to 1024 [ 1397.123015][T18166] netlink: 'syz.3.3166': attribute type 1 has an invalid length. [ 1397.421292][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1397.421311][ T30] audit: type=1800 audit(2000001893.371:588): pid=18156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3163" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1397.492363][ T30] audit: type=1800 audit(2000001893.371:589): pid=18168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3163" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1397.545834][ T30] audit: type=1804 audit(2000001893.623:590): pid=18168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3163" name="/newroot/595/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 1397.656011][T18171] virtio-fs: tag not found [ 1397.672641][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 1397.770470][T18120] lo speed is unknown, defaulting to 1000 [ 1397.856088][ T30] audit: type=1326 audit(2000001893.938:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1397.932780][ T30] audit: type=1326 audit(2000001893.938:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1398.316780][ T30] audit: type=1326 audit(2000001893.938:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1398.348557][ T30] audit: type=1326 audit(2000001893.938:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1398.375529][ T30] audit: type=1326 audit(2000001893.948:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d90de7 code=0x7ffc0000 [ 1398.400608][ T30] audit: type=1326 audit(2000001893.948:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22b8d90d5c code=0x7ffc0000 [ 1398.424687][ T30] audit: type=1326 audit(2000001893.948:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1398.895115][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3165'. [ 1401.518380][T18200] syz_tun: entered allmulticast mode [ 1401.835307][T18198] syz_tun: left allmulticast mode [ 1402.967028][T18214] netlink: 'syz.2.3178': attribute type 1 has an invalid length. [ 1403.504727][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1406.062228][T18245] bridge_slave_1: left allmulticast mode [ 1406.068017][T18245] bridge_slave_1: left promiscuous mode [ 1406.074702][T18245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.242300][T18245] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1408.044113][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 1412.482857][ T5186] Bluetooth: hci1: unexpected event for opcode 0x041b [ 1413.128675][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'. [ 1416.337560][T18328] loop2: detected capacity change from 0 to 512 [ 1417.159860][T18328] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1417.233992][T18328] EXT4-fs (loop2): 1 truncate cleaned up [ 1417.254240][T18328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1418.884551][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.431421][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1419.431447][ T30] audit: type=1326 audit(2000001916.603:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1419.656067][ T30] audit: type=1326 audit(2000001916.823:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1420.441137][ T30] audit: type=1326 audit(2000001916.823:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1420.467763][ T30] audit: type=1326 audit(2000001916.834:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1420.582493][ T30] audit: type=1326 audit(2000001916.834:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1420.606165][ T30] audit: type=1326 audit(2000001916.834:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fbdf90de7 code=0x7ffc0000 [ 1421.051008][ T30] audit: type=1326 audit(2000001916.834:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3fbdf90d5c code=0x7ffc0000 [ 1421.075344][ T30] audit: type=1326 audit(2000001916.834:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3fbdf90c94 code=0x7ffc0000 [ 1421.315416][ T30] audit: type=1326 audit(2000001916.834:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3fbdf90c94 code=0x7ffc0000 [ 1421.339128][ T30] audit: type=1326 audit(2000001916.834:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.3.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3fbdf8db2a code=0x7ffc0000 [ 1422.241096][T18377] overlayfs: bad index found (index=index/00fb210001c34412b748494c00a3e43145cc370bf9da518a549c0c000000000000, ftype=2000, origin ftype=a000). [ 1426.692444][T13789] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1426.961022][T13789] usb 3-1: not running at top speed; connect to a high speed hub [ 1428.057450][T13789] usb 3-1: unable to read config index 0 descriptor/all [ 1428.155400][T13789] usb 3-1: can't read configurations, error -71 [ 1429.331517][T14113] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1429.531175][T14113] usb 5-1: Using ep0 maxpacket: 16 [ 1429.578287][T14113] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.660892][T14113] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1429.800300][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1429.800320][ T30] audit: type=1326 audit(2000001927.468:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1429.838198][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.845041][ T30] audit: type=1326 audit(2000001927.468:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1430.259689][ T30] audit: type=1326 audit(2000001927.468:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1430.294894][ T30] audit: type=1326 audit(2000001927.468:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1430.326818][T14113] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1430.448584][T14113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.448623][ T30] audit: type=1326 audit(2000001927.468:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1430.539165][T14113] usb 5-1: Product: syz [ 1430.564480][T14113] usb 5-1: Manufacturer: syz [ 1430.590585][ T30] audit: type=1326 audit(2000001927.468:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ee4b90de7 code=0x7ffc0000 [ 1430.624412][T14113] usb 5-1: SerialNumber: syz [ 1430.675270][T14113] usb 5-1: config 0 descriptor?? [ 1430.762005][ T30] audit: type=1326 audit(2000001927.468:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0ee4b90d5c code=0x7ffc0000 [ 1430.938743][ T30] audit: type=1326 audit(2000001927.468:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0ee4b90c94 code=0x7ffc0000 [ 1430.969933][ T30] audit: type=1326 audit(2000001927.468:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0ee4b90c94 code=0x7ffc0000 [ 1431.304248][ T30] audit: type=1326 audit(2000001927.468:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0ee4b8db2a code=0x7ffc0000 [ 1431.599609][T18465] netlink: 'syz.1.3242': attribute type 1 has an invalid length. [ 1436.193045][T14113] usb 5-1: USB disconnect, device number 19 [ 1436.587885][T18504] loop4: detected capacity change from 0 to 256 [ 1436.860116][T18506] loop2: detected capacity change from 0 to 40427 [ 1436.883570][T18506] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1436.892163][T18506] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1436.919132][T18506] F2FS-fs (loop2): invalid crc value [ 1436.986627][T18506] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1437.016983][T18506] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1437.025975][T18506] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1438.113025][T18515] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1438.236054][T18523] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 1439.345113][T18504] FAT-fs (loop4): Directory bread(block 64) failed [ 1439.363377][T18529] loop0: detected capacity change from 0 to 128 [ 1439.375684][T18504] FAT-fs (loop4): Directory bread(block 65) failed [ 1439.396192][T18529] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1439.420810][T18529] ext4 filesystem being mounted at /586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1439.483160][T18504] FAT-fs (loop4): Directory bread(block 66) failed [ 1439.490166][T18504] FAT-fs (loop4): Directory bread(block 67) failed [ 1439.506816][T18504] FAT-fs (loop4): Directory bread(block 68) failed [ 1439.530607][T18504] FAT-fs (loop4): Directory bread(block 69) failed [ 1439.540379][T18504] FAT-fs (loop4): Directory bread(block 70) failed [ 1439.558397][T18504] FAT-fs (loop4): Directory bread(block 71) failed [ 1439.566720][T18504] FAT-fs (loop4): Directory bread(block 72) failed [ 1439.574923][T18504] FAT-fs (loop4): Directory bread(block 73) failed [ 1441.259911][T18545] loop4: detected capacity change from 0 to 1024 [ 1441.419367][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1441.419385][ T30] audit: type=1800 audit(2000001939.688:693): pid=18545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3262" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1441.567159][T16466] Bluetooth: hci4: command 0x0406 tx timeout [ 1441.575412][ T30] audit: type=1800 audit(2000001939.688:694): pid=18545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3262" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1442.035141][ T30] audit: type=1804 audit(2000001940.328:695): pid=18545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3262" name="/newroot/611/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 1442.220220][ T5883] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1444.576576][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1444.590728][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1444.877392][ T30] audit: type=1326 audit(2000001943.310:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18573 comm="syz.1.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1444.913460][ T30] audit: type=1326 audit(2000001943.310:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18573 comm="syz.1.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1445.123364][ T30] audit: type=1326 audit(2000001943.394:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18573 comm="syz.1.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ee4b90de7 code=0x7ffc0000 [ 1445.397917][ T30] audit: type=1326 audit(2000001943.394:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18573 comm="syz.1.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0ee4b90d5c code=0x7ffc0000 [ 1445.421865][ T30] audit: type=1326 audit(2000001943.394:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18573 comm="syz.1.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0ee4b90c94 code=0x7ffc0000 [ 1445.749060][ T30] audit: type=1326 audit(2000001943.394:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18573 comm="syz.1.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0ee4b90c94 code=0x7ffc0000 [ 1445.820340][ T30] audit: type=1326 audit(2000001943.394:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18573 comm="syz.1.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0ee4b8db2a code=0x7ffc0000 [ 1446.063095][T18596] netlink: 'syz.3.3274': attribute type 3 has an invalid length. [ 1446.096751][T18596] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3274'. [ 1449.601204][T18626] loop0: detected capacity change from 0 to 256 [ 1449.662774][T18626] FAT-fs (loop0): Directory bread(block 64) failed [ 1449.669856][T18626] FAT-fs (loop0): Directory bread(block 65) failed [ 1449.677273][T18626] FAT-fs (loop0): Directory bread(block 66) failed [ 1449.685165][T18626] FAT-fs (loop0): Directory bread(block 67) failed [ 1449.692607][T18626] FAT-fs (loop0): Directory bread(block 68) failed [ 1449.700128][T18626] FAT-fs (loop0): Directory bread(block 69) failed [ 1449.707312][T18626] FAT-fs (loop0): Directory bread(block 70) failed [ 1449.714126][T18626] FAT-fs (loop0): Directory bread(block 71) failed [ 1449.721454][T18626] FAT-fs (loop0): Directory bread(block 72) failed [ 1449.729048][T18626] FAT-fs (loop0): Directory bread(block 73) failed [ 1449.825418][T18626] syz.0.3283: attempt to access beyond end of device [ 1449.825418][T18626] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 1450.014582][T18626] syz.0.3283: attempt to access beyond end of device [ 1450.014582][T18626] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1450.056766][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1450.056783][ T30] audit: type=1800 audit(2000001948.748:727): pid=18626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3283" name="file1" dev="loop0" ino=1048661 res=0 errno=0 [ 1453.737152][T18671] loop4: detected capacity change from 0 to 1024 [ 1454.007382][ T30] audit: type=1800 audit(2000001952.905:728): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3295" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1454.107833][ T30] audit: type=1800 audit(2000001952.968:729): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3295" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1456.670168][ T30] audit: type=1326 audit(2000001955.676:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1456.884479][ T30] audit: type=1326 audit(2000001955.676:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1457.041575][ T30] audit: type=1326 audit(2000001955.708:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1457.131723][ T30] audit: type=1326 audit(2000001955.708:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd51790de7 code=0x7ffc0000 [ 1457.598766][ T30] audit: type=1326 audit(2000001955.718:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efd51790d5c code=0x7ffc0000 [ 1457.635121][ T30] audit: type=1326 audit(2000001955.718:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd51790c94 code=0x7ffc0000 [ 1457.660029][ T30] audit: type=1326 audit(2000001955.718:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd51790c94 code=0x7ffc0000 [ 1457.835136][ T30] audit: type=1326 audit(2000001955.718:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efd5178db2a code=0x7ffc0000 [ 1457.886905][ T30] audit: type=1326 audit(2000001955.718:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1458.021090][T18701] loop4: detected capacity change from 0 to 64 [ 1458.356127][ T30] audit: type=1326 audit(2000001955.718:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.0.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1458.787979][T16827] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1458.798093][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1458.805690][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1458.843092][T18709] ceph: No mds server is up or the cluster is laggy [ 1459.449475][T16827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.488848][T16827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.548968][T16827] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1459.594640][T16827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.461643][T16827] usb 3-1: config 0 descriptor?? [ 1463.419108][T16827] usbhid 3-1:0.0: can't add hid device: -71 [ 1463.512447][T16827] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1463.634742][T16827] usb 3-1: USB disconnect, device number 34 [ 1465.290306][T16827] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1465.777765][T16827] usb 5-1: config 2 has an invalid interface number: 219 but max is 0 [ 1465.800354][T16827] usb 5-1: config 2 has no interface number 0 [ 1465.853713][T16827] usb 5-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 1465.890724][T16827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.942454][T16827] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1466.751727][T16827] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 1466.766479][T16827] pac7311 5-1:2.219: probe with driver pac7311 failed with error -110 [ 1469.090872][T16827] usb 5-1: USB disconnect, device number 20 [ 1470.328957][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3324'. [ 1470.400643][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3324'. [ 1470.564827][T18798] loop2: detected capacity change from 0 to 1024 [ 1471.063748][T18792] veth0: entered promiscuous mode [ 1471.154747][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1471.154767][ T30] audit: type=1800 audit(2000001970.898:752): pid=18798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3327" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1471.710172][ T30] audit: type=1800 audit(2000001970.898:753): pid=18798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3327" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1471.829733][ T30] audit: type=1804 audit(2000001971.602:754): pid=18798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3327" name="/newroot/633/file1/file1" dev="loop2" ino=20 res=1 errno=0 [ 1472.035961][T18817] loop4: detected capacity change from 0 to 2048 [ 1473.445767][T18828] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1473.786754][T18833] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3333'. [ 1473.870934][T18830] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3335'. [ 1474.145141][T18837] bridge_slave_1: left allmulticast mode [ 1474.151535][T18837] bridge_slave_1: left promiscuous mode [ 1474.158634][T18837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.035403][T18837] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1478.293060][ T30] audit: type=1326 audit(2000001978.384:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1478.416895][T16827] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1478.630718][ T30] audit: type=1326 audit(2000001978.384:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1479.187864][ T30] audit: type=1326 audit(2000001978.384:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1479.267592][T18867] loop2: detected capacity change from 0 to 1024 [ 1479.293313][T16827] usb 5-1: Using ep0 maxpacket: 16 [ 1479.421487][ T30] audit: type=1326 audit(2000001978.384:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1479.458711][T16827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.474200][T16827] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1479.484393][ T30] audit: type=1326 audit(2000001978.384:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d90de7 code=0x7ffc0000 [ 1479.845560][ T30] audit: type=1326 audit(2000001978.384:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22b8d90d5c code=0x7ffc0000 [ 1479.870578][ T30] audit: type=1326 audit(2000001978.384:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1479.930013][T16827] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1479.957928][T16827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.971305][ T30] audit: type=1326 audit(2000001978.384:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1480.045943][T16827] usb 5-1: Product: syz [ 1480.086376][T16827] usb 5-1: config 0 descriptor?? [ 1480.122068][ T30] audit: type=1326 audit(2000001978.384:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22b8d8db2a code=0x7ffc0000 [ 1480.156789][T16827] usb 5-1: can't set config #0, error -71 [ 1480.174769][T16827] usb 5-1: USB disconnect, device number 21 [ 1480.770749][ T30] audit: type=1326 audit(2000001978.384:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1487.664051][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3362'. [ 1487.902576][T18956] loop4: detected capacity change from 0 to 1024 [ 1489.128086][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1489.128111][ T30] audit: type=1326 audit(2000001989.753:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18940 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1489.257060][ T30] audit: type=1326 audit(2000001989.753:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18940 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1492.289343][ T30] audit: type=1326 audit(2000001993.070:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1492.519011][ T30] audit: type=1326 audit(2000001993.070:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1492.615394][ T30] audit: type=1326 audit(2000001993.070:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1492.648038][ T30] audit: type=1326 audit(2000001993.070:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8eec9 code=0x7ffc0000 [ 1492.679741][ T30] audit: type=1326 audit(2000001993.070:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ee4b90de7 code=0x7ffc0000 [ 1492.724623][ T30] audit: type=1326 audit(2000001993.070:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0ee4b90d5c code=0x7ffc0000 [ 1492.863514][T18989] loop0: detected capacity change from 0 to 512 [ 1492.938631][ T30] audit: type=1326 audit(2000001993.070:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0ee4b90c94 code=0x7ffc0000 [ 1493.040716][T18989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1493.088193][T18989] ext4 filesystem being mounted at /612/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1493.119322][ T30] audit: type=1326 audit(2000001993.070:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0ee4b90c94 code=0x7ffc0000 [ 1493.888126][T19005] loop2: detected capacity change from 0 to 16 [ 1493.904164][T19005] erofs (device loop2): mounted with root inode @ nid 36. [ 1493.929001][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1494.554033][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1494.554054][ T30] audit: type=1326 audit(2000001995.432:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1494.709252][ T30] audit: type=1326 audit(2000001995.432:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1495.005972][T19010] loop2: detected capacity change from 0 to 512 [ 1495.313997][T19010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1495.331642][T19010] ext4 filesystem being mounted at /639/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1495.854577][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.092723][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.295158][T19025] netlink: 'syz.3.3380': attribute type 1 has an invalid length. [ 1497.684324][ T30] audit: type=1326 audit(2000001998.739:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1498.419371][T19037] loop2: detected capacity change from 0 to 1024 [ 1498.458517][ T30] audit: type=1326 audit(2000001998.739:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1498.483317][ T30] audit: type=1326 audit(2000001998.739:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1498.768842][ T30] audit: type=1326 audit(2000001998.739:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1498.896668][ T30] audit: type=1326 audit(2000001998.739:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1499.053373][ T30] audit: type=1326 audit(2000001998.739:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d90de7 code=0x7ffc0000 [ 1499.474892][ T30] audit: type=1326 audit(2000001998.739:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22b8d90d5c code=0x7ffc0000 [ 1499.498735][ T30] audit: type=1326 audit(2000001998.739:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1499.524798][ T30] audit: type=1326 audit(2000001998.739:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1500.099345][ T30] audit: type=1326 audit(2000001998.739:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22b8d8db2a code=0x7ffc0000 [ 1500.223727][ T30] audit: type=1326 audit(2000001998.739:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1500.260504][ T30] audit: type=1326 audit(2000001998.739:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1500.297498][ T30] audit: type=1326 audit(2000001998.739:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1500.457714][ T30] audit: type=1326 audit(2000001998.739:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1500.556020][ T30] audit: type=1326 audit(2000001998.739:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1501.251425][ T30] audit: type=1326 audit(2000001998.739:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19031 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1503.131620][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1503.203855][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1504.571541][T19091] loop2: detected capacity change from 0 to 2048 [ 1504.779407][T19091] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 1505.755802][T14113] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1505.964799][T14113] usb 3-1: Using ep0 maxpacket: 32 [ 1506.006141][T19111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3401'. [ 1506.217325][T14113] usb 3-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.502376][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 1507.502391][ T30] audit: type=1326 audit(2000002009.059:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1507.567659][ T30] audit: type=1326 audit(2000002009.059:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1507.592624][ T30] audit: type=1326 audit(2000002009.090:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1507.616760][ T30] audit: type=1326 audit(2000002009.090:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fbdf90de7 code=0x7ffc0000 [ 1507.658288][ T30] audit: type=1326 audit(2000002009.101:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3fbdf90d5c code=0x7ffc0000 [ 1507.691019][ T30] audit: type=1326 audit(2000002009.101:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3fbdf90c94 code=0x7ffc0000 [ 1507.730211][ T30] audit: type=1326 audit(2000002009.101:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3fbdf90c94 code=0x7ffc0000 [ 1507.763198][ T30] audit: type=1326 audit(2000002009.101:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3fbdf8db2a code=0x7ffc0000 [ 1507.764410][T14113] usb 3-1: string descriptor 0 read error: -71 [ 1508.004282][T14113] usb 3-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 1508.025704][T14113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.063169][ T30] audit: type=1326 audit(2000002009.101:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1508.200572][ T30] audit: type=1326 audit(2000002009.101:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fbdf8eec9 code=0x7ffc0000 [ 1508.251129][T14113] usb 3-1: can't set config #76, error -71 [ 1508.262880][T14113] usb 3-1: USB disconnect, device number 35 [ 1509.201647][T19128] loop0: detected capacity change from 0 to 1024 [ 1509.368717][T19130] loop4: detected capacity change from 0 to 64 [ 1509.683526][T19130] netlink: 'syz.4.3406': attribute type 2 has an invalid length. [ 1516.890375][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1516.913766][ T30] audit: type=1326 audit(2000002018.906:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1516.950850][T19180] loop2: detected capacity change from 0 to 1024 [ 1517.156918][ T30] audit: type=1326 audit(2000002018.916:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1517.248349][ T30] audit: type=1326 audit(2000002018.916:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1517.272245][ T30] audit: type=1326 audit(2000002018.916:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d90de7 code=0x7ffc0000 [ 1517.297446][ T30] audit: type=1326 audit(2000002018.916:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22b8d90d5c code=0x7ffc0000 [ 1517.338273][ T30] audit: type=1326 audit(2000002018.916:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1517.589547][ T30] audit: type=1326 audit(2000002018.916:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1517.767343][ T30] audit: type=1326 audit(2000002018.916:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22b8d8db2a code=0x7ffc0000 [ 1517.910258][ T30] audit: type=1326 audit(2000002018.916:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1518.553643][ T30] audit: type=1326 audit(2000002018.916:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19176 comm="syz.2.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1518.577441][ C1] vkms_vblank_simulate: vblank timer overrun [ 1520.982533][T19213] loop2: detected capacity change from 0 to 1024 [ 1521.724086][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 1521.724104][ T30] audit: type=1326 audit(2000002023.997:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1521.820589][T19226] delete_channel: no stack [ 1522.319837][ T30] audit: type=1326 audit(2000002023.997:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1522.669872][ T30] audit: type=1326 audit(2000002024.911:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1522.694757][T19225] loop0: detected capacity change from 0 to 1024 [ 1523.045049][ T30] audit: type=1326 audit(2000002024.911:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1523.138362][ T30] audit: type=1326 audit(2000002024.911:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1523.229590][ T30] audit: type=1326 audit(2000002024.953:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1523.302004][ T30] audit: type=1326 audit(2000002024.984:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1523.326705][ T30] audit: type=1326 audit(2000002024.984:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1523.359146][ T30] audit: type=1326 audit(2000002024.984:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1523.385643][ T30] audit: type=1326 audit(2000002024.984:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19219 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1525.003910][T19239] wg2 speed is unknown, defaulting to 1000 [ 1526.714419][T19239] lo speed is unknown, defaulting to 1000 [ 1526.795320][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1526.795337][ T30] audit: type=1326 audit(2000002029.299:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1526.836550][T19260] loop2: detected capacity change from 0 to 1024 [ 1527.569786][ T30] audit: type=1326 audit(2000002029.309:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1527.666587][ T30] audit: type=1326 audit(2000002029.309:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1527.721557][ T30] audit: type=1326 audit(2000002029.309:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d90de7 code=0x7ffc0000 [ 1527.887356][T19269] virtio-fs: tag not found [ 1527.918296][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3442'. [ 1527.948270][ T30] audit: type=1326 audit(2000002029.309:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22b8d90d5c code=0x7ffc0000 [ 1528.191359][ T30] audit: type=1326 audit(2000002029.309:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1528.830375][ T30] audit: type=1326 audit(2000002029.309:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1528.853451][ T30] audit: type=1326 audit(2000002029.309:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22b8d8db2a code=0x7ffc0000 [ 1528.989295][ T30] audit: type=1326 audit(2000002029.309:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1529.033271][ T30] audit: type=1326 audit(2000002029.309:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1531.961951][T19300] netlink: 1180 bytes leftover after parsing attributes in process `syz.1.3452'. [ 1531.971396][T19300] openvswitch: netlink: Message has 5 unknown bytes. [ 1532.295976][T19303] tmpfs: Bad value for 'mpol' [ 1532.302333][T19303] netlink: 'syz.1.3453': attribute type 1 has an invalid length. [ 1532.310719][T19303] netlink: 'syz.1.3453': attribute type 2 has an invalid length. [ 1533.193149][T19309] loop2: detected capacity change from 0 to 1024 [ 1534.247078][T19313] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1534.254414][T19313] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1534.265677][T19313] vhci_hcd vhci_hcd.0: Device attached [ 1534.289618][T19322] vhci_hcd: connection closed [ 1534.356183][ T1162] vhci_hcd: stop threads [ 1534.486170][ T1162] vhci_hcd: release socket [ 1534.579049][ T1162] vhci_hcd: disconnect device [ 1535.223767][ T1162] hfsplus: b-tree write err: -5, ino 4 [ 1537.588877][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1537.588892][ T30] audit: type=1326 audit(2000002040.626:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1537.639051][T19354] loop2: detected capacity change from 0 to 1024 [ 1537.700672][T19358] ALSA: seq fatal error: cannot create timer (-16) [ 1537.766322][ T30] audit: type=1326 audit(2000002040.626:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1537.979756][ T30] audit: type=1326 audit(2000002040.626:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1538.149023][ T30] audit: type=1326 audit(2000002040.626:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1538.172597][ T30] audit: type=1326 audit(2000002040.626:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1538.220175][ T30] audit: type=1326 audit(2000002040.626:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d90de7 code=0x7ffc0000 [ 1538.891113][ T30] audit: type=1326 audit(2000002040.626:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22b8d90d5c code=0x7ffc0000 [ 1538.913995][ T30] audit: type=1326 audit(2000002040.626:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1538.966120][ T30] audit: type=1326 audit(2000002040.626:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1539.647319][ T30] audit: type=1326 audit(2000002040.626:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19350 comm="syz.2.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22b8d8db2a code=0x7ffc0000 [ 1541.567098][T19380] genirq: Flags mismatch irq 8. 00200000 (comedi_parport) vs. 00200000 (rtc0) [ 1551.270110][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1551.270129][ T30] audit: type=1326 audit(2000002054.987:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.0.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1551.373734][ T30] audit: type=1326 audit(2000002054.987:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.0.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1551.947199][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3493'. [ 1552.791593][T19468] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1552.796589][T19469] overlayfs: missing 'lowerdir' [ 1561.628546][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1561.635526][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1561.689804][T19539] lo speed is unknown, defaulting to 1000 [ 1562.683258][T19547] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1565.777041][T19572] netlink: 'syz.0.3518': attribute type 1 has an invalid length. [ 1567.451849][T19576] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 1567.993711][T19586] loop0: detected capacity change from 0 to 512 [ 1568.009368][T19586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1568.029889][T19586] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 1568.984606][T16466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1568.997684][T16466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1569.018594][T16466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1569.031533][T16466] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1569.040375][T16466] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1569.852309][T19592] lo speed is unknown, defaulting to 1000 [ 1570.996344][T16466] Bluetooth: hci5: command tx timeout [ 1572.034181][T19592] chnl_net:caif_netlink_parms(): no params data found [ 1572.251459][T19620] loop4: detected capacity change from 0 to 512 [ 1572.429790][T19620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1572.443181][T19620] ext4 filesystem being mounted at /660/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1572.987473][T16466] Bluetooth: hci5: command tx timeout [ 1573.146476][T19592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.154077][T19592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.161522][T19592] bridge_slave_0: entered allmulticast mode [ 1573.171765][T19592] bridge_slave_0: entered promiscuous mode [ 1573.181669][T19592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.225687][T19592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.234007][T19592] bridge_slave_1: entered allmulticast mode [ 1573.246244][T19592] bridge_slave_1: entered promiscuous mode [ 1574.807284][T19592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.831493][T19592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.959436][T16466] Bluetooth: hci5: command tx timeout [ 1574.987053][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.005571][T19592] team0: Port device team_slave_0 added [ 1575.028690][T19592] team0: Port device team_slave_1 added [ 1575.154058][T19592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.164143][T19592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.196875][T19592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.214599][T19592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.224364][T19592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.253140][T19592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.361588][T19592] hsr_slave_0: entered promiscuous mode [ 1575.369612][T19592] hsr_slave_1: entered promiscuous mode [ 1575.376266][T19592] debugfs: 'hsr0' already exists in 'hsr' [ 1575.384560][T19592] Cannot create hsr debugfs directory [ 1575.446966][ T30] audit: type=1326 audit(2000002080.393:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1575.470166][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.524546][T19646] loop4: detected capacity change from 0 to 1024 [ 1575.561749][ T30] audit: type=1326 audit(2000002080.424:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1575.585586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.653981][ T30] audit: type=1326 audit(2000002080.424:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1575.676848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.719142][ T30] audit: type=1326 audit(2000002080.424:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2636190de7 code=0x7ffc0000 [ 1575.741823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.921224][ T30] audit: type=1326 audit(2000002080.424:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2636190d5c code=0x7ffc0000 [ 1575.945596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.327526][ T30] audit: type=1326 audit(2000002080.424:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2636190c94 code=0x7ffc0000 [ 1576.477914][ T30] audit: type=1326 audit(2000002080.424:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2636190c94 code=0x7ffc0000 [ 1576.665710][ T30] audit: type=1326 audit(2000002080.424:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f263618db2a code=0x7ffc0000 [ 1576.724457][T19592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1576.949953][T16466] Bluetooth: hci5: command tx timeout [ 1577.305772][ T30] audit: type=1326 audit(2000002080.435:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1577.328935][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.336284][ T30] audit: type=1326 audit(2000002080.435:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.4.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1577.359278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.385634][T19592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1577.565464][T19592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1577.622729][T19592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1579.093735][ T5186] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1579.106034][ T5186] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1579.118104][ T5186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1579.135322][ T5186] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1579.152032][ T5186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1579.842820][T19680] loop0: detected capacity change from 0 to 1024 [ 1579.983748][T19671] lo speed is unknown, defaulting to 1000 [ 1580.030563][T19592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.164637][T19592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.211625][T16378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.219610][T16378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.223597][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1580.223615][ T30] audit: type=1326 audit(2000002085.411:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19675 comm="syz.0.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efd5178ef03 code=0x7ffc0000 [ 1580.275839][ T30] audit: type=1326 audit(2000002085.463:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19675 comm="syz.0.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1580.306536][ T30] audit: type=1326 audit(2000002085.474:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19675 comm="syz.0.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1580.365723][ T30] audit: type=1326 audit(2000002085.474:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19675 comm="syz.0.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1580.505097][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.512298][ T6859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.551966][ T30] audit: type=1326 audit(2000002085.474:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19675 comm="syz.0.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1581.191292][ T5186] Bluetooth: hci6: command tx timeout [ 1581.526136][T19671] chnl_net:caif_netlink_parms(): no params data found [ 1583.189111][ T5186] Bluetooth: hci6: command tx timeout [ 1583.234626][T19671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.863595][T19671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.872411][T19671] bridge_slave_0: entered allmulticast mode [ 1583.881897][T19671] bridge_slave_0: entered promiscuous mode [ 1583.904970][T19671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.912479][T19671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.920509][T19671] bridge_slave_1: entered allmulticast mode [ 1583.932204][T19671] bridge_slave_1: entered promiscuous mode [ 1584.092429][ T30] audit: type=1326 audit(2000002089.463:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1584.133194][ T30] audit: type=1326 audit(2000002089.463:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1584.169571][T19717] loop0: detected capacity change from 0 to 1024 [ 1584.192935][ T30] audit: type=1326 audit(2000002089.463:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1584.201013][T19671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.343054][T19719] loop2: detected capacity change from 0 to 1024 [ 1584.413429][ T30] audit: type=1326 audit(2000002089.463:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd51790de7 code=0x7ffc0000 [ 1584.499543][T19671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.535946][ T30] audit: type=1326 audit(2000002089.494:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efd51790d5c code=0x7ffc0000 [ 1585.008337][T19592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1585.090796][ T30] audit: type=1326 audit(2000002089.494:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd51790c94 code=0x7ffc0000 [ 1585.256287][ T5186] Bluetooth: hci6: command tx timeout [ 1585.296153][ T30] audit: type=1326 audit(2000002089.494:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd51790c94 code=0x7ffc0000 [ 1585.322350][ T30] audit: type=1326 audit(2000002089.494:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efd5178db2a code=0x7ffc0000 [ 1585.344828][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.366425][ T30] audit: type=1326 audit(2000002089.494:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1585.368558][T19671] team0: Port device team_slave_0 added [ 1585.395699][ T30] audit: type=1326 audit(2000002089.494:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1585.449784][ T30] audit: type=1326 audit(2000002089.494:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1585.472330][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.527835][ T30] audit: type=1326 audit(2000002089.494:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1585.551479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.598568][ T30] audit: type=1326 audit(2000002089.494:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1585.634679][T19671] team0: Port device team_slave_1 added [ 1585.691094][ T30] audit: type=1326 audit(2000002089.494:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efd5178eec9 code=0x7ffc0000 [ 1585.765299][T19671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1585.781809][ T30] audit: type=1326 audit(2000002089.494:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efd5178ef03 code=0x7ffc0000 [ 1585.838105][T19671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.037210][T18500] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1586.046525][T19671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.060022][T19671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.067524][T19671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.095825][T19671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.193733][T18500] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.219877][T18500] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1586.274508][T18500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.340319][T18500] usb 5-1: Product: syz [ 1586.355333][T18500] usb 5-1: Manufacturer: syz [ 1586.362677][T19671] hsr_slave_0: entered promiscuous mode [ 1586.375128][T19671] hsr_slave_1: entered promiscuous mode [ 1586.377003][T18500] usb 5-1: SerialNumber: syz [ 1586.396796][T18500] usb 5-1: config 0 descriptor?? [ 1586.413251][T19671] debugfs: 'hsr0' already exists in 'hsr' [ 1586.415795][T18500] ims_pcu 5-1:0.0: Zero length descriptor [ 1586.428459][T18500] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 1586.462426][T19671] Cannot create hsr debugfs directory [ 1586.642062][T19731] binder: 19728:19731 ioctl 4018620d 0 returned -22 [ 1586.899386][T19592] veth0_vlan: entered promiscuous mode [ 1587.016727][T19741] loop0: detected capacity change from 0 to 128 [ 1587.060921][T19592] veth1_vlan: entered promiscuous mode [ 1587.068824][T19741] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1587.110326][T19741] ext4 filesystem being mounted at /651/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1587.275382][ T5186] Bluetooth: hci6: command tx timeout [ 1587.347290][T19592] veth0_macvtap: entered promiscuous mode [ 1587.359684][T19592] veth1_macvtap: entered promiscuous mode [ 1587.383040][T19592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.919767][T19592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.988919][ T6858] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.011220][ T6858] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.041364][ T5883] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1588.068117][ T6858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.079525][ T6858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.195128][T19671] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1588.365954][T19750] bridge0: port 3(team0) entered disabled state [ 1588.373379][T19750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.553544][T19750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1588.572358][T19750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1588.589399][T16827] usb 5-1: USB disconnect, device number 22 [ 1588.808692][T19761] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1588.842418][T19750] vlan2: left allmulticast mode [ 1588.847552][T19750] dummy0: left allmulticast mode [ 1588.863731][T19671] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1588.925701][T19751] wg2 speed is unknown, defaulting to 1000 [ 1588.925747][ T60] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1588.931677][T19751] syz2: Port: 1 Link DOWN [ 1588.941343][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.094875][T19671] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1589.140064][T19671] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1589.373413][ T6868] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1589.429782][ T6868] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.445981][ T6868] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1589.491593][ T6868] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.855035][ T6868] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1589.876321][ T6868] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.913245][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.926102][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.033052][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.072305][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.524673][T19671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.577991][T19671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.593926][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.601258][ T6858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.869521][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.877651][ T6858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1592.588128][T18500] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1592.788487][T19801] ubi31: attaching mtd0 [ 1592.812967][T19801] ubi31: scanning is finished [ 1592.817804][T19801] ubi31: empty MTD device detected [ 1593.091835][T18500] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1593.229373][T18500] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1593.972369][T18500] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1593.981455][T18500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.053899][T19801] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1595.692092][T19671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.640487][T19828] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3572'. [ 1599.127088][T18500] usb 5-1: can't set config #27, error -110 [ 1600.305766][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1600.305785][ T30] audit: type=1804 audit(2000002105.997:1425): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3577" name="/newroot/4/file0" dev="tmpfs" ino=39 res=1 errno=0 [ 1600.474971][T19751] usb 5-1: USB disconnect, device number 23 [ 1601.118629][T19671] veth0_vlan: entered promiscuous mode [ 1601.143180][T19671] veth1_vlan: entered promiscuous mode [ 1601.322587][T19671] veth0_macvtap: entered promiscuous mode [ 1601.383709][T19671] veth1_macvtap: entered promiscuous mode [ 1601.569660][T19671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.602077][T19671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1602.479190][T16378] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.586216][T16378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.359683][T16378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.370253][T16378] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.574026][T19890] loop4: detected capacity change from 0 to 512 [ 1603.606504][T19890] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1603.921054][T19890] EXT4-fs (loop4): 1 truncate cleaned up [ 1603.949288][T19890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1604.235281][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.955001][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.008933][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.169283][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.202917][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.583199][T19900] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1606.440276][ T30] audit: type=1326 audit(2000002112.923:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1606.989331][ T30] audit: type=1326 audit(2000002112.965:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1607.061365][ T30] audit: type=1326 audit(2000002112.965:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1607.084403][ T30] audit: type=1326 audit(2000002112.965:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1607.108276][ T30] audit: type=1326 audit(2000002112.965:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8d8eec9 code=0x7ffc0000 [ 1607.132794][ T30] audit: type=1326 audit(2000002112.965:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b8d90de7 code=0x7ffc0000 [ 1607.160695][ T30] audit: type=1326 audit(2000002112.965:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22b8d90d5c code=0x7ffc0000 [ 1607.319074][T19911] loop2: detected capacity change from 0 to 1024 [ 1607.350145][ T30] audit: type=1326 audit(2000002113.868:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1607.376855][ T30] audit: type=1326 audit(2000002113.868:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22b8d90c94 code=0x7ffc0000 [ 1607.562325][ T30] audit: type=1326 audit(2000002113.868:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22b8d8db2a code=0x7ffc0000 [ 1608.634304][T19925] netlink: 'syz.6.3590': attribute type 1 has an invalid length. [ 1610.085479][ T5186] Bluetooth: hci5: Malformed HCI Event [ 1611.338083][T16827] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1612.450570][T19951] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 1615.323320][T19977] netlink: 'syz.5.3604': attribute type 1 has an invalid length. [ 1617.199386][T19990] ubi31: attaching mtd0 [ 1617.219951][T19990] ubi31: scanning is finished [ 1618.120393][T19990] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1619.377175][T16827] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1619.843908][T16827] usb 3-1: Using ep0 maxpacket: 16 [ 1619.856599][T20015] loop0: detected capacity change from 0 to 2048 [ 1620.053159][T20015] EXT4-fs: Ignoring removed bh option [ 1620.075145][T16827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.102410][T16827] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1620.226650][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1620.238418][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1620.613475][T16827] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1620.624222][T16827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.632400][T16827] usb 3-1: Product: syz [ 1620.652353][T16827] usb 3-1: Manufacturer: syz [ 1620.722539][T20015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1620.776645][T16827] usb 3-1: SerialNumber: syz [ 1620.831731][T16827] usb 3-1: config 0 descriptor?? [ 1620.857175][T20015] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1620.881132][T16827] usb 3-1: can't set config #0, error -71 [ 1620.934623][T16827] usb 3-1: USB disconnect, device number 36 [ 1620.959918][T20015] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 1621.069599][T20036] loop6: detected capacity change from 0 to 512 [ 1621.078872][T20015] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1621.078872][T20015] [ 1621.825811][T20015] EXT4-fs (loop0): Total free blocks count 0 [ 1621.832172][T20015] EXT4-fs (loop0): Free/Dirty block details [ 1621.865915][T20037] loop4: detected capacity change from 0 to 4096 [ 1621.929466][T20037] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1621.972577][T20037] EXT4-fs (loop4): unsupported descriptor size 255 [ 1621.983530][T20015] EXT4-fs (loop0): free_blocks=2415919104 [ 1622.266692][T20015] EXT4-fs (loop0): dirty_blocks=48 [ 1622.272005][T20015] EXT4-fs (loop0): Block reservation details [ 1622.402788][T20045] tipc: Enabling of bearer rejected, failed to enable media [ 1622.744406][T20015] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 1623.036042][T20038] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1623.765204][T20036] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 1625.337421][T20072] ubi31: attaching mtd0 [ 1625.359164][T20072] ubi31: scanning is finished [ 1625.864772][ T6859] EXT4-fs: 7 callbacks suppressed [ 1625.864791][ T6859] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1625.942837][ T6859] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1625.942837][ T6859] [ 1625.970667][T20072] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1626.054652][ T6859] EXT4-fs (loop0): Total free blocks count 0 [ 1626.061473][ T6859] EXT4-fs (loop0): Free/Dirty block details [ 1626.068038][ T6859] EXT4-fs (loop0): free_blocks=2415919104 [ 1626.074090][ T6859] EXT4-fs (loop0): dirty_blocks=16 [ 1626.079229][ T6859] EXT4-fs (loop0): Block reservation details [ 1626.085606][ T6859] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1626.257516][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.398166][T20086] loop5: detected capacity change from 0 to 2048 [ 1627.512960][T20089] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1628.330487][T18500] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1628.950598][T18500] usb 3-1: Using ep0 maxpacket: 16 [ 1628.967648][T18500] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.007944][T18500] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1629.376599][T19751] libceph: connect (1)[c::]:6789 error -101 [ 1629.388744][T19751] libceph: mon0 (1)[c::]:6789 connect error [ 1629.405338][T20100] ceph: No mds server is up or the cluster is laggy [ 1629.487933][T18500] usb 3-1: string descriptor 0 read error: -71 [ 1629.550123][T18500] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1629.716934][T18500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.761533][T18500] usb 3-1: config 0 descriptor?? [ 1629.769468][T18500] usb 3-1: can't set config #0, error -71 [ 1629.837064][T18500] usb 3-1: USB disconnect, device number 37 [ 1632.065028][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1632.065049][ T30] audit: type=1326 audit(2000002139.808:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1632.215689][T20135] random: crng reseeded on system resumption [ 1632.677758][ T30] audit: type=1326 audit(2000002139.808:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1632.700805][ T30] audit: type=1326 audit(2000002139.808:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1632.723801][ T30] audit: type=1326 audit(2000002139.808:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1632.821083][ T30] audit: type=1326 audit(2000002139.808:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1632.918939][T20138] loop5: detected capacity change from 0 to 512 [ 1632.920127][T20137] loop6: detected capacity change from 0 to 1024 [ 1632.987964][ T30] audit: type=1326 audit(2000002139.808:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f619eb90de7 code=0x7ffc0000 [ 1633.010769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.023769][T20138] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1633.091954][T20140] loop2: detected capacity change from 0 to 128 [ 1633.099765][T20140] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1633.116201][T20140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1633.128808][ T30] audit: type=1326 audit(2000002139.808:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f619eb90d5c code=0x7ffc0000 [ 1633.168573][ T30] audit: type=1326 audit(2000002139.808:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f619eb90c94 code=0x7ffc0000 [ 1633.207006][ T30] audit: type=1326 audit(2000002139.808:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f619eb90c94 code=0x7ffc0000 [ 1633.314083][T20142] ieee802154 phy0 wpan0: encryption failed: -22 [ 1633.560220][ T30] audit: type=1326 audit(2000002140.753:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f619eb8db2a code=0x7ffc0000 [ 1633.583226][T20138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 1633.583350][T20138] System zones: 1-12 [ 1633.724789][T20138] EXT4-fs (loop5): 1 truncate cleaned up [ 1633.731552][T20138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1634.900429][T19592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.008350][T20159] loop4: detected capacity change from 0 to 512 [ 1637.566783][T20159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1637.598418][T20159] ext4 filesystem being mounted at /690/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1639.768570][T20186] sctp: [Deprecated]: syz.6.3651 (pid 20186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1639.768570][T20186] Use struct sctp_sack_info instead [ 1640.544928][T20188] virtio-fs: tag not found [ 1640.697760][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 1641.946195][T19687] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1642.024580][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1642.324174][T19687] usb 6-1: Using ep0 maxpacket: 16 [ 1643.342533][T19687] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.373720][T19687] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1643.599543][T19687] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1643.610417][T19687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.618716][T19687] usb 6-1: Product: syz [ 1643.619810][T20215] loop0: detected capacity change from 0 to 64 [ 1643.637869][T19687] usb 6-1: Manufacturer: syz [ 1643.643442][T19687] usb 6-1: SerialNumber: syz [ 1643.658312][T20215] hfs: unable to locate alternate MDB [ 1643.673779][T19687] usb 6-1: config 0 descriptor?? [ 1643.685032][T20215] hfs: continuing without an alternate MDB [ 1644.597156][T18500] usb 6-1: USB disconnect, device number 2 [ 1645.377448][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1645.377462][ T30] audit: type=1326 audit(2000002153.802:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a758eec9 code=0x7ffc0000 [ 1645.422547][ T30] audit: type=1326 audit(2000002153.844:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8a758eec9 code=0x7ffc0000 [ 1645.591663][ T30] audit: type=1326 audit(2000002153.844:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a758eec9 code=0x7ffc0000 [ 1645.659537][ T30] audit: type=1326 audit(2000002153.844:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a758eec9 code=0x7ffc0000 [ 1645.697042][ T30] audit: type=1326 audit(2000002153.844:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8a7590de7 code=0x7ffc0000 [ 1645.724532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.768504][ T30] audit: type=1326 audit(2000002153.844:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff8a7590d5c code=0x7ffc0000 [ 1645.792447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.813328][T20226] loop5: detected capacity change from 0 to 1024 [ 1645.828367][ T30] audit: type=1326 audit(2000002153.844:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff8a7590c94 code=0x7ffc0000 [ 1645.895354][ T30] audit: type=1326 audit(2000002153.844:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff8a7590c94 code=0x7ffc0000 [ 1645.948249][ T30] audit: type=1326 audit(2000002153.844:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff8a758db2a code=0x7ffc0000 [ 1646.086107][ T30] audit: type=1326 audit(2000002154.138:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a758eec9 code=0x7ffc0000 [ 1647.045814][T20247] loop4: detected capacity change from 0 to 512 [ 1647.059008][T20245] virtio-fs: tag not found [ 1647.090661][T20245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'. [ 1647.381122][T20255] use of bytesused == 0 is deprecated and will be removed in the future, [ 1647.389870][T20255] use the actual size instead. [ 1648.774777][T20247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.875014][T20247] ext4 filesystem being mounted at /693/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1649.164555][T20266] loop0: detected capacity change from 0 to 512 [ 1649.381054][T20266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1649.394980][T20266] ext4 filesystem being mounted at /680/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1651.452898][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.749750][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.021186][T20306] virtio-fs: tag not found [ 1654.173696][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1654.173714][ T30] audit: type=1326 audit(2000002163.030:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1654.804003][ T30] audit: type=1326 audit(2000002163.030:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1654.955374][ T30] audit: type=1326 audit(2000002163.030:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1654.979965][T20313] loop4: detected capacity change from 0 to 1024 [ 1654.986601][ T30] audit: type=1326 audit(2000002163.030:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1655.013127][ T30] audit: type=1326 audit(2000002163.030:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2636190de7 code=0x7ffc0000 [ 1655.013653][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3681'. [ 1655.037410][ T30] audit: type=1326 audit(2000002163.030:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2636190d5c code=0x7ffc0000 [ 1655.209123][ T30] audit: type=1326 audit(2000002163.030:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2636190c94 code=0x7ffc0000 [ 1655.308558][ T5186] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 1655.593284][T20327] /dev/nullb0: Can't open blockdev [ 1655.610146][T20327] netlink: 'syz.2.3685': attribute type 1 has an invalid length. [ 1656.144124][T20322] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3686'. [ 1656.179164][ T30] audit: type=1326 audit(2000002163.030:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2636190c94 code=0x7ffc0000 [ 1656.435049][T20318] loop5: detected capacity change from 0 to 1024 [ 1656.926945][ T30] audit: type=1326 audit(2000002163.030:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f263618db2a code=0x7ffc0000 [ 1656.980448][ T30] audit: type=1326 audit(2000002163.030:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.4.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1657.376324][T19751] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1658.329757][T19751] usb 3-1: device descriptor read/64, error -71 [ 1658.739168][T19751] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1659.708644][T19751] usb 3-1: device descriptor read/64, error -71 [ 1659.880060][T19751] usb usb3-port1: attempt power cycle [ 1660.581287][T20356] loop4: detected capacity change from 0 to 128 [ 1661.055512][T19751] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1661.079673][T20360] delete_channel: no stack [ 1661.495326][T19751] usb 3-1: Using ep0 maxpacket: 16 [ 1661.521984][T19751] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.556733][T19751] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1661.582109][T19751] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1661.730277][T19751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.812915][T19751] usb 3-1: Product: syz [ 1661.929867][T19751] usb 3-1: Manufacturer: syz [ 1662.020912][T19751] usb 3-1: SerialNumber: syz [ 1662.216797][T19751] usb 3-1: config 0 descriptor?? [ 1662.256924][T20371] loop0: detected capacity change from 0 to 1024 [ 1662.576044][T19751] usb 3-1: USB disconnect, device number 40 [ 1664.158187][T16827] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1664.328756][T16827] usb 6-1: Using ep0 maxpacket: 32 [ 1664.345078][T16827] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1664.428281][T16827] usb 6-1: config 0 has no interface number 0 [ 1664.463426][T16827] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.643873][T16827] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1664.955956][T16827] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1664.978812][T16827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.000951][T16827] usb 6-1: config 0 descriptor?? [ 1665.077769][T20390] loop6: detected capacity change from 0 to 64 [ 1665.175902][T19751] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1666.038366][T20374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.047632][T20374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.064939][T19751] usb 3-1: device descriptor read/64, error -71 [ 1666.555455][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1666.555474][ T30] audit: type=1326 audit(2000002176.005:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1666.595834][T19751] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1666.689787][ T30] audit: type=1326 audit(2000002176.005:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1666.716553][ T30] audit: type=1326 audit(2000002176.005:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1666.757214][ T30] audit: type=1326 audit(2000002176.005:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1666.782744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1666.797173][T20400] loop4: detected capacity change from 0 to 1024 [ 1666.809496][T19751] usb 3-1: device descriptor read/64, error -71 [ 1666.882714][ T30] audit: type=1326 audit(2000002176.005:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263618eec9 code=0x7ffc0000 [ 1666.908404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1666.917814][ T30] audit: type=1326 audit(2000002176.005:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2636190de7 code=0x7ffc0000 [ 1666.941527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1666.964500][T19751] usb usb3-port1: attempt power cycle [ 1666.997976][ T30] audit: type=1326 audit(2000002176.005:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2636190d5c code=0x7ffc0000 [ 1667.021181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.349078][T16827] usbhid 6-1:0.1: can't add hid device: -71 [ 1667.375885][ T30] audit: type=1326 audit(2000002176.005:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2636190c94 code=0x7ffc0000 [ 1667.399046][T16827] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1667.408641][ T30] audit: type=1326 audit(2000002176.005:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2636190c94 code=0x7ffc0000 [ 1667.432256][ T30] audit: type=1326 audit(2000002176.005:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f263618db2a code=0x7ffc0000 [ 1667.451225][T16827] usb 6-1: USB disconnect, device number 3 [ 1667.689892][T20408] delete_channel: no stack [ 1673.559897][T19687] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1674.783949][T19687] usb 5-1: device descriptor read/64, error -71 [ 1674.962708][T20461] hsr0: entered promiscuous mode [ 1675.912209][T19687] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1678.675753][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3727'. [ 1678.782711][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.789465][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1682.798343][T20490] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1683.591698][T20490] usb 3-1: device descriptor read/64, error -71 [ 1683.881333][T20534] virtio-fs: tag not found [ 1683.888309][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3736'. [ 1683.925344][T20490] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1684.220036][T20490] usb 3-1: device descriptor read/64, error -71 [ 1684.483356][T20490] usb usb3-port1: attempt power cycle [ 1685.689052][ T5186] Bluetooth: hci5: command 0x0406 tx timeout [ 1687.574688][T20560] ceph: No mds server is up or the cluster is laggy [ 1688.018780][T20490] libceph: connect (1)[c::]:6789 error -101 [ 1688.174074][T20490] libceph: mon0 (1)[c::]:6789 connect error [ 1688.802280][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1688.802294][ T30] audit: type=1326 audit(2000002199.395:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1688.895204][ T30] audit: type=1326 audit(2000002199.395:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1689.051552][ T30] audit: type=1326 audit(2000002199.395:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1690.422808][T20583] virtio-fs: tag not found [ 1690.461833][T20568] loop6: detected capacity change from 0 to 1024 [ 1690.468585][ T30] audit: type=1326 audit(2000002199.395:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1690.505330][ T30] audit: type=1326 audit(2000002199.395:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1690.531952][ T30] audit: type=1326 audit(2000002199.395:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f619eb90de7 code=0x7ffc0000 [ 1690.578408][ T30] audit: type=1326 audit(2000002199.395:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f619eb90d5c code=0x7ffc0000 [ 1690.601869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.667616][ T30] audit: type=1326 audit(2000002199.395:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f619eb90c94 code=0x7ffc0000 [ 1690.690935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.698743][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3748'. [ 1690.758328][ T30] audit: type=1326 audit(2000002199.395:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f619eb90c94 code=0x7ffc0000 [ 1690.806169][ T30] audit: type=1326 audit(2000002199.395:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f619eb8db2a code=0x7ffc0000 [ 1691.070395][T20593] virtio-fs: tag not found [ 1692.165749][T20568] hfsplus: failed to load root directory [ 1692.456874][T20600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3753'. [ 1693.923682][T20604] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3754'. [ 1693.933344][T20604] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3754'. [ 1697.074825][T20637] netlink: 'syz.0.3761': attribute type 1 has an invalid length. [ 1697.129708][T20633] virtio-fs: tag not found [ 1697.156669][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3762'. [ 1700.173147][ T5186] Bluetooth: hci6: command 0x0406 tx timeout [ 1701.139114][T20671] netlink: 'syz.4.3768': attribute type 1 has an invalid length. [ 1702.617563][T20678] loop6: detected capacity change from 0 to 1024 [ 1702.625532][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1702.625553][ T30] audit: type=1326 audit(2000002213.882:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1703.224347][ T30] audit: type=1326 audit(2000002213.882:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1703.247830][ T30] audit: type=1326 audit(2000002213.882:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1703.307356][ T30] audit: type=1326 audit(2000002213.882:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1703.482816][ T30] audit: type=1326 audit(2000002213.882:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619eb8eec9 code=0x7ffc0000 [ 1703.540883][ T30] audit: type=1326 audit(2000002213.882:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f619eb90de7 code=0x7ffc0000 [ 1704.099472][ T30] audit: type=1326 audit(2000002213.882:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f619eb90d5c code=0x7ffc0000 [ 1704.135713][ T30] audit: type=1326 audit(2000002213.882:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f619eb90c94 code=0x7ffc0000 [ 1704.268453][ T30] audit: type=1326 audit(2000002213.882:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f619eb90c94 code=0x7ffc0000 [ 1704.323821][T20678] hfsplus: failed to load catalog file [ 1704.333451][ T30] audit: type=1326 audit(2000002213.882:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20672 comm="syz.6.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f619eb8db2a code=0x7ffc0000 [ 1705.953447][T20709] tipc: New replicast peer: 255.255.255.255 [ 1705.961599][T20709] tipc: Enabled bearer , priority 10 [ 1707.775754][T20721] sock: sock_timestamping_bind_phc: sock not bind to device [ 1709.071372][T20734] input: syz1 as /devices/virtual/input/input10 [ 1709.247434][ T31] INFO: task syz.3.3498:19494 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1709.390675][ T31] Not tainted syzkaller #0 [ 1709.541625][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1709.663290][ T31] task:syz.3.3498 state:D stack:23608 pid:19494 tgid:19484 ppid:5874 task_flags:0x400140 flags:0x00080002 [ 1709.695704][ T31] Call Trace: [ 1709.705109][ T31] [ 1709.708120][ T31] __schedule+0x1798/0x4cc0 [ 1709.719956][ T31] ? __pfx___schedule+0x10/0x10 [ 1709.726141][ T31] ? schedule+0x91/0x360 [ 1709.745772][ T31] schedule+0x165/0x360 [ 1709.781456][ T31] schedule_timeout+0x9a/0x270 [ 1709.801322][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1709.816430][ T31] ? wait_for_completion+0x267/0x5d0 [ 1709.828186][ T31] wait_for_completion+0x2bf/0x5d0 [ 1709.833540][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1709.839403][ T31] ? remove_client_context+0x19c/0x1e0 [ 1709.846158][ T31] disable_device+0x1c6/0x320 [ 1709.850888][ T31] ? __pfx_disable_device+0x10/0x10 [ 1709.856506][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 1709.862131][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1709.868163][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 1709.874165][ T31] nldev_dellink+0x2d1/0x320 [ 1709.879165][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1709.896097][ T31] ? apparmor_capable+0x137/0x1b0 [ 1709.925175][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1709.934282][ T31] ? security_capable+0x7e/0x2e0 [ 1710.061106][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1710.066375][ T31] rdma_nl_rcv+0x6ae/0x980 [ 1710.088921][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1710.098905][ T31] ? __lock_acquire+0xab9/0xd20 [ 1710.103836][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1710.118024][ T31] netlink_unicast+0x82f/0x9e0 [ 1710.137333][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1710.142860][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1710.156180][ T31] ? skb_put+0x11b/0x210 [ 1710.161020][ T31] netlink_sendmsg+0x805/0xb30 [ 1710.175719][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.181401][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1710.203951][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1710.209370][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.222837][ T31] __sock_sendmsg+0x21c/0x270 [ 1710.227678][ T31] ____sys_sendmsg+0x505/0x830 [ 1710.241997][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1710.247654][ T31] ? import_iovec+0x74/0xa0 [ 1710.261200][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1710.265944][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.289688][ T31] ? __fget_files+0x2a/0x420 [ 1710.294880][ T31] ? __fget_files+0x3a0/0x420 [ 1710.308213][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1710.313223][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1710.327730][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1710.332646][ T31] do_syscall_64+0xfa/0xfa0 [ 1710.346766][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1710.352285][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.375763][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1710.380789][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.394292][ T31] RIP: 0033:0x7f3fbdf8eec9 [ 1710.398788][ T31] RSP: 002b:00007f3fbedbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1710.409182][ T31] RAX: ffffffffffffffda RBX: 00007f3fbe1e6180 RCX: 00007f3fbdf8eec9 [ 1710.418725][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1710.427252][ T31] RBP: 00007f3fbe011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1710.435637][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.443771][ T31] R13: 00007f3fbe1e6218 R14: 00007f3fbe1e6180 R15: 00007fff7fbc73b8 [ 1710.452375][ T31] [ 1710.455855][ T31] INFO: task syz.1.3511:19539 blocked for more than 144 seconds. [ 1710.468874][ T31] Not tainted syzkaller #0 [ 1710.474088][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1710.483039][ T31] task:syz.1.3511 state:D stack:24352 pid:19539 tgid:19538 ppid:5879 task_flags:0x400140 flags:0x00080003 [ 1710.501753][ T31] Call Trace: [ 1710.506810][ T31] [ 1710.510949][ T31] __schedule+0x1798/0x4cc0 [ 1710.515708][ T31] ? __pfx___schedule+0x10/0x10 [ 1710.521298][ T31] ? schedule+0x91/0x360 [ 1710.525883][ T31] schedule+0x165/0x360 [ 1710.531455][ T31] schedule_preempt_disabled+0x13/0x30 [ 1710.541346][ T31] __mutex_lock+0x7e6/0x1350 [ 1710.546170][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1710.551234][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 1710.557024][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1710.562292][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1710.568052][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1710.574052][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1710.579460][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1710.584352][ T31] rdma_dev_change_netns+0x39/0x300 [ 1710.589896][ T31] rdma_dev_exit_net+0x203/0x340 [ 1710.595125][ T31] ? __pfx___might_resched+0x10/0x10 [ 1710.601388][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1710.607614][ T31] ? net_generic+0x1e/0x240 [ 1710.612176][ T31] ? mutex_is_locked+0x17/0x50 [ 1710.617026][ T31] ? rtnl_is_locked+0x15/0x20 [ 1710.621744][ T31] ops_undo_list+0x49a/0x990 [ 1710.626560][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1710.632510][ T31] ? ops_init+0x469/0x5c0 [ 1710.637348][ T31] setup_net+0x2d6/0x320 [ 1710.641642][ T31] ? __pfx_setup_net+0x10/0x10 [ 1710.646606][ T31] ? copy_net_ns+0x337/0x4e0 [ 1710.651224][ T31] ? down_read_killable+0x1d1/0x350 [ 1710.656517][ T31] ? preinit_net+0x478/0x730 [ 1710.661319][ T31] copy_net_ns+0x34e/0x4e0 [ 1710.665876][ T31] create_new_namespaces+0x3f3/0x720 [ 1710.671500][ T31] ? security_capable+0x7e/0x2e0 [ 1710.676999][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1710.683748][ T31] ksys_unshare+0x4c8/0x8c0 [ 1710.689078][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1710.694442][ T31] __x64_sys_unshare+0x38/0x50 [ 1710.699950][ T31] do_syscall_64+0xfa/0xfa0 [ 1710.704884][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1710.710552][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.716760][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1710.721703][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.728071][ T31] RIP: 0033:0x7f0ee4b8eec9 [ 1710.732683][ T31] RSP: 002b:00007f0ee5ac9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1710.741712][ T31] RAX: ffffffffffffffda RBX: 00007f0ee4de5fa0 RCX: 00007f0ee4b8eec9 [ 1710.750057][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 1710.758659][ T31] RBP: 00007f0ee4c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1710.767211][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.775833][ T31] R13: 00007f0ee4de6038 R14: 00007f0ee4de5fa0 R15: 00007ffc2d6f5618 [ 1710.784260][ T31] [ 1710.995036][ T31] [ 1710.995036][ T31] Showing all locks held in the system: [ 1711.065167][ T31] 2 locks held by ksoftirqd/1/23: [ 1711.080249][ T31] #0: ffff8880b863a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1711.116120][ T31] #1: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1711.147065][ T31] 1 lock held by khungtaskd/31: [ 1711.166108][ T31] #0: ffffffff8e33d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1711.199184][ T31] 2 locks held by getty/5627: [ 1711.213949][ T31] #0: ffff8880340cd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1711.242800][ T31] #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1711.270812][ T31] 1 lock held by syz.2.2591/15905: [ 1711.276137][ T31] 2 locks held by syz.3.3498/19494: [ 1711.291415][ T31] #0: ffffffff9a079ff8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 1711.307182][ T31] #1: ffff888032254700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1711.328253][ T31] 2 locks held by syz.1.3511/19539: [ 1711.334311][ T31] #0: ffffffff8f72dc10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1711.368015][ T31] #1: ffff888032254700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1711.384894][ T31] 2 locks held by syz-executor/19592: [ 1711.404117][ T31] #0: ffff8880339c4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1711.432764][ T31] #1: ffff8880339c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1711.449178][ T31] 5 locks held by syz-executor/19671: [ 1711.455020][ T31] #0: ffff888042fa4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1711.465584][ T31] #1: ffff888042fa40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1711.476368][ T31] #2: ffffffff8f89fd48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1711.487420][ T31] #3: ffff8880552d1338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1711.497760][ T31] #4: ffffffff8e342d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1711.511427][ T31] 3 locks held by kworker/0:5/19757: [ 1711.516929][ T31] #0: ffff88813fe59948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1711.529192][ T31] #1: ffffc9000b85fba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1711.542650][ T31] #2: ffffffff8e342d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1711.555651][ T31] 1 lock held by syz.4.3784/20733: [ 1711.561249][ T31] #0: ffffffff8f73ad48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1711.570729][ T31] 2 locks held by syz.0.3785/20734: [ 1711.576524][ T31] #0: ffff8880326c8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1711.587363][ T31] #1: ffff8880326c80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1711.601093][ T31] [ 1711.603469][ T31] ============================================= [ 1711.603469][ T31] [ 1711.628021][ T31] NMI backtrace for cpu 0 [ 1711.628045][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1711.628064][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1711.628076][ T31] Call Trace: [ 1711.628083][ T31] [ 1711.628093][ T31] dump_stack_lvl+0x189/0x250 [ 1711.628123][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1711.628145][ T31] ? __pfx__printk+0x10/0x10 [ 1711.628183][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1711.628206][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1711.628229][ T31] ? __pfx__printk+0x10/0x10 [ 1711.628256][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1711.628284][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1711.628308][ T31] watchdog+0xf60/0xfa0 [ 1711.628337][ T31] ? watchdog+0x1e2/0xfa0 [ 1711.628364][ T31] kthread+0x711/0x8a0 [ 1711.628385][ T31] ? __pfx_watchdog+0x10/0x10 [ 1711.628408][ T31] ? __pfx_kthread+0x10/0x10 [ 1711.628427][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1711.628447][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1711.628468][ T31] ? __pfx_kthread+0x10/0x10 [ 1711.628487][ T31] ret_from_fork+0x4bc/0x870 [ 1711.628514][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1711.628539][ T31] ? __switch_to_asm+0x39/0x70 [ 1711.628555][ T31] ? __switch_to_asm+0x33/0x70 [ 1711.628570][ T31] ? __pfx_kthread+0x10/0x10 [ 1711.628586][ T31] ret_from_fork_asm+0x1a/0x30 [ 1711.628615][ T31] [ 1711.628628][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1711.790916][ C1] NMI backtrace for cpu 1 [ 1711.790960][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1711.790979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1711.790990][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1711.791018][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 71 2a 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1711.791036][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1711.791058][ C1] RAX: 584e3cf9552b9400 RBX: ffffffff819721d7 RCX: 584e3cf9552b9400 [ 1711.791071][ C1] RDX: 0000000000000001 RSI: ffffffff8db9af31 RDI: ffffffff8c03bf60 [ 1711.791083][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 1711.791096][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8fc30770 [ 1711.791110][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad2b58 [ 1711.791121][ C1] FS: 0000000000000000(0000) GS:ffff888125b0a000(0000) knlGS:0000000000000000 [ 1711.791139][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1711.791150][ C1] CR2: 000055ab4d0aaf40 CR3: 0000000030b06000 CR4: 00000000003526f0 [ 1711.791165][ C1] Call Trace: [ 1711.791174][ C1] [ 1711.791181][ C1] default_idle+0x13/0x20 [ 1711.791206][ C1] default_idle_call+0x73/0xb0 [ 1711.791223][ C1] do_idle+0x1e7/0x510 [ 1711.791251][ C1] ? __pfx_do_idle+0x10/0x10 [ 1711.791283][ C1] cpu_startup_entry+0x44/0x60 [ 1711.791307][ C1] start_secondary+0x101/0x110 [ 1711.791329][ C1] common_startup_64+0x13e/0x147 [ 1711.791359][ C1] [ 1711.792033][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1711.962442][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1711.971942][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1711.982178][ T31] Call Trace: [ 1711.985736][ T31] [ 1711.988674][ T31] dump_stack_lvl+0x99/0x250 [ 1711.993345][ T31] ? __asan_memcpy+0x40/0x70 [ 1711.998026][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1712.003327][ T31] ? __pfx__printk+0x10/0x10 [ 1712.008099][ T31] vpanic+0x237/0x6d0 [ 1712.012190][ T31] ? __pfx_vpanic+0x10/0x10 [ 1712.016883][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1712.022516][ T31] panic+0xb9/0xc0 [ 1712.026406][ T31] ? __pfx_panic+0x10/0x10 [ 1712.031024][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1712.036951][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1712.043296][ T31] watchdog+0xf9f/0xfa0 [ 1712.047570][ T31] ? watchdog+0x1e2/0xfa0 [ 1712.051933][ T31] kthread+0x711/0x8a0 [ 1712.056028][ T31] ? __pfx_watchdog+0x10/0x10 [ 1712.060804][ T31] ? __pfx_kthread+0x10/0x10 [ 1712.065511][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1712.071019][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1712.076483][ T31] ? __pfx_kthread+0x10/0x10 [ 1712.081167][ T31] ret_from_fork+0x4bc/0x870 [ 1712.085863][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1712.091254][ T31] ? __switch_to_asm+0x39/0x70 [ 1712.096025][ T31] ? __switch_to_asm+0x33/0x70 [ 1712.100970][ T31] ? __pfx_kthread+0x10/0x10 [ 1712.105587][ T31] ret_from_fork_asm+0x1a/0x30 [ 1712.110557][ T31] [ 1712.114180][ T31] Kernel Offset: disabled [ 1712.118601][ T31] Rebooting in 86400 seconds..