last executing test programs: 19.708195475s ago: executing program 4 (id=5006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x10, 0x2, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x10000, 0x7, 0x100000001, 0x5, 0x1, 0x0, 0x2, 0x2}, 0x0, 0x0, &(0x7f00000003c0), 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 17.837720874s ago: executing program 4 (id=5011): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000000000, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 16.754887571s ago: executing program 1 (id=5014): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r2, 0xb) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019080)=@req3={0x6, 0x101, 0x101, 0xffffffff, 0x3, 0x5, 0x8}, 0x1c) syz_clone3(0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) 14.927162753s ago: executing program 3 (id=5016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000040000461104e000000000066050000020000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 14.737003139s ago: executing program 1 (id=5017): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 13.100462311s ago: executing program 1 (id=5019): mkdir(&(0x7f0000000300)='./bus\x00', 0x120) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0, 0x1400) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40050) 12.240652847s ago: executing program 2 (id=5020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) close(r5) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r6, 0x4) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 12.104214964s ago: executing program 1 (id=5021): openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup.cpu/cpuset.cpus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r4, &(0x7f0000001080)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11.501422144s ago: executing program 0 (id=5022): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01052cbd7000fedbdf251d00000008001d"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 9.944348596s ago: executing program 2 (id=5023): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) io_uring_enter(0xffffffffffffffff, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000084) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xf}, {0x5}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.942347821s ago: executing program 4 (id=5024): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) readahead(0xffffffffffffffff, 0x2, 0x1f) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @local, 0xd8fe}, 0x1c) eventfd(0x80000001) listen(r0, 0xfffffffb) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000001c06fffe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="74c2000090ff00001e0401a10402000091f997e30ec4257fd0438bdec2de8991bf64653bc48ec63cdfc6604ca9888cd1fac63ae959550a234cd887381c8915257122a6535d98ee2f049a68cae941002a1d6854da57c16727cf9c5d49de64be7056d464e71d240d0c6c4c7f7697842ffe58cab3ef72e4aa4be11ccbb174328796ef10774ee6b9fbd0771d362a74411ff2a1c4cf945611eb37dfa8b43288b5ac5f089d91bb00d7bcbcdea3a807df83999983b1eba3edd4586334fa4fae769b5f7fe5892aaace9daf59b50d87ca873ecb56c5"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000003c0), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r6, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000480)=0x7) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000000114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40dd6", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) 9.788543356s ago: executing program 0 (id=5025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a9229a7d3bd98f8b", 0x13) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) r6 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(0x0, 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 8.803831065s ago: executing program 0 (id=5026): r0 = fanotify_init(0x20, 0x80000) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000480)=""/103, 0x67) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000180)={0x2, 0xfc}, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) syslog(0x4, &(0x7f00000002c0)=""/18, 0x12) 8.791036949s ago: executing program 1 (id=5027): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 8.602417454s ago: executing program 3 (id=5028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRESHEX=0xee00, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c696f636861727365743d69736f383835392d342c00fb8602bc827d678ff4d12dba86cfc5eb005c9132d27dd6ec1c923fb62ce2b91d41de0069a0e4d9cc00c46db0687686104196b53eeedda4d051ba690ba658ce6beb"], 0x23, 0x61c3, &(0x7f000000c9c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe) unshare(0x8040600) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, &(0x7f0000001600), 0x0}, 0x20) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x741}}, 0x30) 8.571435888s ago: executing program 2 (id=5029): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 6.750619047s ago: executing program 2 (id=5030): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x0, 0x0) r1 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, 0x0, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x541200, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)="8d3684af94a7f3d83d2ce7877a7f0330c68cd35f88", 0x15) close_range(r4, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 6.615846197s ago: executing program 4 (id=5031): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_create(0x8, 0x80000) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 5.908018416s ago: executing program 3 (id=5032): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./bus\x00', 0x2000802, &(0x7f0000000380)={[{@uni_xlateno}, {@numtail}, {@utf8no}, {@numtail}, {@shortname_lower}, {@utf8no}, {@numtail}, {@fat=@umask={'umask', 0x3d, 0xffffffffffff3175}}, {@fat=@check_normal}, {@shortname_lower}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@utf8no}]}, 0xff, 0x27b, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f00000003c0)=0x5c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000", @ANYRESDEC], 0x48) sigaltstack(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@empty, @private=0xa010100, 0xfdfc, 0x2}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 4.897833993s ago: executing program 4 (id=5033): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001c40)={0x2, 0xff, @multicast2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) clock_adjtime(0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 4.816738556s ago: executing program 0 (id=5034): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) r0 = socket$rxrpc(0x21, 0x2, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@nl=@unspec, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x0, 0x1) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x6) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0245720, &(0x7f0000000000)={0x1000000}) 4.548113293s ago: executing program 3 (id=5035): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd70", @ANYRES32], 0x50}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r5, 0x1, 0xc, 0x0, &(0x7f0000000080)=0xe2a8d1d21b84a7f3) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.952835437s ago: executing program 4 (id=5036): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) capset(&(0x7f0000000080)={0x40013548}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)) sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xa0) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2800000, &(0x7f0000000000)=ANY=[], 0xfd, 0x5ab2, &(0x7f0000002140)="$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") 2.756595494s ago: executing program 3 (id=5037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x7101}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r5, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.658447599s ago: executing program 2 (id=5038): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x4d) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000240)=""/87, 0x57) getdents(r5, 0x0, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.598451843s ago: executing program 0 (id=5039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x3e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) syz_emit_vhci(&(0x7f0000002c00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x6}}}}, 0xf) sendto$inet6(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) connect$bt_rfcomm(r5, 0x0, 0x0) close(r5) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) write$FUSE_DIRENTPLUS(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="b00000000000007e0ac45f"], 0xb0) 1.972453434s ago: executing program 3 (id=5040): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x9d3, 0x3, 0x7008, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x1b, {0x8, 0xffffffff}, 0xd0, 0x9}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffff}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x14, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, 0x0, 0x3000d041) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad", 0x56}], 0x1}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r6) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 373.810392ms ago: executing program 2 (id=5041): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x4}]}]}, {0x0, [0x5f]}}, 0x0, 0x2f, 0x0, 0x3}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000300)) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup(r11) ioctl$KVM_SET_VAPIC_ADDR(r12, 0x4008ae93, &(0x7f00000002c0)=0x10000) r13 = pidfd_getfd(r6, r3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x1b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x3, 0x1, 0x5, 0x1, 0xfffffffffffffff7}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x2, 0x7, 0x6, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @ldst={0x0, 0x0, 0x3, 0x3, 0x6, 0xfffffffffffffffe, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x2, &(0x7f0000000240)=""/2, 0x41000, 0x50, '\x00', r4, 0x1c, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0xa, 0x5, 0x5}, 0x10, 0xc31b, r6, 0x1, &(0x7f0000000500)=[r12, r6], &(0x7f0000000540)=[{0x2, 0x2, 0x9, 0x1}], 0x10, 0x4}, 0x94) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '(\xb4@\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) 0s ago: executing program 0 (id=5042): r0 = socket$unix(0x1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x800000, 0x4, 0x16e, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x3, 0x2, 0x0, 0x10000}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4000082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x106, 0x9}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) syz_open_dev$vcsn(&(0x7f0000000080), 0x56, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0x69, 0x0, 0x0, 0x8c5}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) kernel console output (not intermixed with test programs): [ 1052.660240][T17629] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1052.859727][T17637] validate_nla: 6 callbacks suppressed [ 1052.859745][T17637] netlink: 'syz.2.3291': attribute type 1 has an invalid length. [ 1052.932412][T17629] I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.040914][T17629] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1053.051513][T17629] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1053.051564][T15191] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.059930][T17629] UDF-fs: Scanning with blocksize 2048 failed [ 1053.075633][T15191] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1053.083702][T15191] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1053.093323][T15191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.101098][T17629] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.119933][T17629] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1053.138583][T15191] usb 5-1: config 0 descriptor?? [ 1053.151293][T17629] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1053.161552][T17629] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1053.169316][T17629] UDF-fs: Scanning with blocksize 4096 failed [ 1053.176350][T17629] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 1054.101000][T17642] EXT4-fs: Ignoring removed orlov option [ 1054.110673][T17642] EXT4-fs (loop4): unable to read superblock [ 1054.690149][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.709584][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.720547][ T30] audit: type=1326 audit(8389662.674:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1054.721868][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1054.745023][T17645] hfs: can't find a HFS filesystem on dev loop2 [ 1054.755894][ T30] audit: type=1326 audit(8389662.674:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1054.778571][ T30] audit: type=1326 audit(8389662.674:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1054.801019][ C0] vkms_vblank_simulate: vblank timer overrun [ 1054.808074][ T30] audit: type=1326 audit(8389662.674:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1054.874876][ T30] audit: type=1326 audit(8389662.674:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1054.897114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.702634][ T30] audit: type=1326 audit(8389662.674:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1055.873573][ T30] audit: type=1326 audit(8389662.674:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1055.972272][ T30] audit: type=1326 audit(8389662.674:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1055.997801][T15191] usbhid 5-1:0.0: can't add hid device: -71 [ 1056.004268][T15191] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1056.015734][ T30] audit: type=1326 audit(8389662.674:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1056.043231][T15191] usb 5-1: USB disconnect, device number 39 [ 1056.067849][ T30] audit: type=1326 audit(8389662.674:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1060.010446][T17675] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1060.018209][T17675] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1060.026578][T17675] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1060.034442][T17675] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1062.732870][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'. [ 1066.944177][T17745] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3315'. [ 1067.225337][T17743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3314'. [ 1071.414367][T17779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3323'. [ 1076.931322][T17822] bridge0: port 3(syz_tun) entered blocking state [ 1076.939080][T17822] bridge0: port 3(syz_tun) entered disabled state [ 1076.950883][T17822] syz_tun: entered allmulticast mode [ 1076.974276][T17822] syz_tun: entered promiscuous mode [ 1076.983205][T17822] bridge0: port 3(syz_tun) entered blocking state [ 1076.990624][T17822] bridge0: port 3(syz_tun) entered forwarding state [ 1079.204178][T17817] blk_print_req_error: 4 callbacks suppressed [ 1079.204193][T17817] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.220123][T17817] hpfs: hpfs_map_sector(): read error [ 1079.285605][T17817] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.296124][T17817] FAT-fs (loop2): unable to read boot sector [ 1079.827496][T15191] IPVS: starting estimator thread 0... [ 1079.922360][T17844] IPVS: using max 29 ests per chain, 69600 per kthread [ 1081.889259][T17858] msdos: Unknown parameter 'msdos' [ 1082.036951][T15191] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1082.952196][T15191] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.976686][T15191] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1083.016921][ T5917] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1083.027781][T15191] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1083.040866][T15191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1083.049191][T15191] usb 3-1: SerialNumber: syz [ 1083.199550][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 1084.128695][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.140149][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1084.153603][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1084.163830][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.176190][ T5917] usb 4-1: Product: syz [ 1084.180829][ T5917] usb 4-1: Manufacturer: syz [ 1084.185867][ T5917] usb 4-1: SerialNumber: syz [ 1084.498386][T15191] usb 3-1: bad CDC descriptors [ 1084.563106][T15191] usb 3-1: USB disconnect, device number 37 [ 1086.403570][ T5917] usb 4-1: cannot find UAC_HEADER [ 1086.808210][ T5917] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1086.830440][ T5917] usb 4-1: USB disconnect, device number 42 [ 1086.907389][T17874] udevd[17874]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1087.020497][T17892] serio: Serial port ptm0 [ 1090.005721][T17913] NILFS (loop1): device size too small [ 1090.510480][ T5932] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1090.893211][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.916882][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.926835][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1090.939891][ T5932] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1090.960834][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.010953][ T5932] usb 4-1: config 0 descriptor?? [ 1091.163259][T17922] KVM: debugfs: duplicate directory 17922-6 [ 1091.951817][ T5932] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1092.234328][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3359'. [ 1093.033332][ T5917] usb 4-1: USB disconnect, device number 43 [ 1095.559512][T17944] fido_id[17944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1099.346616][T17974] tmpfs: Bad value for 'mpol' [ 1101.020797][ T5917] IPVS: starting estimator thread 0... [ 1101.151524][T17982] IPVS: using max 28 ests per chain, 67200 per kthread [ 1101.842869][T17992] i2c i2c-0: Invalid block read size 253 [ 1103.287399][T17995] uprobe: syz.1.3374:17995 failed to unregister, leaking uprobe [ 1104.589596][T18008] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1104.602004][T18008] FAT-fs (loop1): unable to read boot sector [ 1104.843451][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'. [ 1105.731381][T18015] netlink: 'syz.1.3377': attribute type 1 has an invalid length. [ 1105.931967][T18014] input: syz1 as /devices/virtual/input/input45 [ 1106.135362][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'. [ 1106.164105][T18014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3388'. [ 1107.814138][T18030] lo speed is unknown, defaulting to 1000 [ 1107.820329][T18030] lo speed is unknown, defaulting to 1000 [ 1107.827385][T18030] lo speed is unknown, defaulting to 1000 [ 1107.842367][T18030] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1107.861963][T18030] lo speed is unknown, defaulting to 1000 [ 1107.870122][T18030] lo speed is unknown, defaulting to 1000 [ 1108.994783][T18030] lo speed is unknown, defaulting to 1000 [ 1109.003531][T18030] lo speed is unknown, defaulting to 1000 [ 1109.010483][T18030] lo speed is unknown, defaulting to 1000 [ 1114.638774][T18087] EXT4-fs: Invalid want_extra_isize 257 [ 1114.732706][T18094] tmpfs: Bad value for 'mpol' [ 1115.837520][T18101] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1115.849629][T18101] EXT4-fs (loop4): unable to read superblock [ 1116.012795][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.909651][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.027518][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1117.062158][ T5917] IPVS: starting estimator thread 0... [ 1117.549677][T18109] IPVS: using max 29 ests per chain, 69600 per kthread [ 1118.013863][T18115] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1118.023388][T18115] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1118.033143][T18115] Mount JFS Failure: -5 [ 1118.037314][T18115] jfs_mount failed w/return code = -5 [ 1118.239535][T18115] JFS: discard option not supported on device [ 1118.246325][T18115] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1118.256061][T18115] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1118.265478][T18115] Mount JFS Failure: -5 [ 1118.501122][T18122] netlink: 'syz.4.3404': attribute type 1 has an invalid length. [ 1118.508956][T18122] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3404'. [ 1119.883053][T18123] ceph: No mds server is up or the cluster is laggy [ 1120.572257][T18126] delete_channel: no stack [ 1121.685214][T18142] kAFS: No cell specified [ 1121.919335][T18156] xfs: Unknown parameter 'ikeep' [ 1126.337150][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1126.392373][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1126.513981][T18215] nbd_handle_cmd: 2 callbacks suppressed [ 1126.513998][T18215] block nbd0: Attempted send on invalid socket [ 1126.538696][T18215] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1129.789984][T18240] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1129.800259][T18240] SQUASHFS error: Failed to read block 0x0: -5 [ 1129.806788][T18240] unable to read squashfs_super_block [ 1130.780402][T18250] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1130.882932][T18252] vfat: Bad value for 'gid' [ 1130.887656][T18252] vfat: Bad value for 'gid' [ 1132.634497][T18252] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1132.764119][T18263] netlink: 'syz.0.3431': attribute type 16 has an invalid length. [ 1132.772362][T18263] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1133.551903][T18272] netlink: 'syz.0.3434': attribute type 1 has an invalid length. [ 1133.559890][T18272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1134.429060][T18282] input: syz1 as /devices/virtual/input/input46 [ 1135.575928][T18291] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3440'. [ 1135.957242][T18293] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1136.037499][T18293] FAT-fs (loop1): unable to read boot sector [ 1141.454569][T18334] input: syz1 as /devices/virtual/input/input47 [ 1141.822051][T18339] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1143.435326][T18355] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1143.692753][T18355] MINIX-fs: unable to read superblock [ 1144.421007][T18362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1145.240638][T18365] netlink: 'syz.4.3455': attribute type 1 has an invalid length. [ 1145.248410][T18365] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3455'. [ 1146.969515][T18389] exfat: Deprecated parameter 'utf8' [ 1146.975931][T18389] exfat: Deprecated parameter 'namecase' [ 1147.001557][T18389] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1147.011415][T18389] exFAT-fs (loop4): unable to read boot sector [ 1147.017719][T18389] exFAT-fs (loop4): failed to read boot sector [ 1147.024210][T18389] exFAT-fs (loop4): failed to recognize exfat type [ 1147.238374][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1147.238390][ T30] audit: type=1326 audit(8389754.954:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1147.700265][ T30] audit: type=1326 audit(8389754.954:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1147.766978][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 1147.847666][ T30] audit: type=1326 audit(8389754.954:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1147.877208][ T30] audit: type=1326 audit(8389754.954:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1147.899511][ C0] vkms_vblank_simulate: vblank timer overrun [ 1147.968246][ T30] audit: type=1326 audit(8389754.954:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1148.050082][ T30] audit: type=1326 audit(8389754.954:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1148.858738][ T30] audit: type=1326 audit(8389754.964:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1148.880857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1148.933347][ T30] audit: type=1326 audit(8389754.964:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1149.729736][ T30] audit: type=1326 audit(8389754.964:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1149.759659][ T30] audit: type=1326 audit(8389755.184:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1149.762306][ T5866] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1149.781733][ C0] vkms_vblank_simulate: vblank timer overrun [ 1150.266997][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3468'. [ 1152.369381][T18435] netlink: 'syz.2.3474': attribute type 29 has an invalid length. [ 1152.563062][T18436] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1156.301548][T18465] input: syz1 as /devices/virtual/input/input48 [ 1156.559285][T18465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3478'. [ 1158.045433][T18477] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1158.054963][T18477] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1158.064662][T18477] Mount JFS Failure: -5 [ 1158.068818][T18477] jfs_mount failed w/return code = -5 [ 1158.271616][T18477] JFS: discard option not supported on device [ 1158.278071][T18477] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1158.287546][T18477] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1158.296992][T18477] Mount JFS Failure: -5 [ 1158.559484][T18481] netlink: 'syz.4.3483': attribute type 1 has an invalid length. [ 1158.567353][T18481] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3483'. [ 1161.654466][T18507] netlink: 'syz.0.3490': attribute type 4 has an invalid length. [ 1162.207722][T18512] overlayfs: failed to clone upperpath [ 1162.968697][T18523] Bluetooth: MGMT ver 1.23 [ 1163.814125][T18522] netlink: 'syz.0.3493': attribute type 1 has an invalid length. [ 1167.545728][T18555] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 3 [ 1167.569726][ T6026] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1167.576619][T18555] EXT4-fs (loop1): unable to read superblock [ 1167.769618][ T5932] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1168.323364][ T6026] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1168.333108][ T6026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.347667][ T6026] usb 3-1: Product: syz [ 1168.352425][ T6026] usb 3-1: Manufacturer: syz [ 1168.357432][ T6026] usb 3-1: SerialNumber: syz [ 1168.365830][ T6026] usb 3-1: config 0 descriptor?? [ 1168.441398][ T5932] usb 5-1: config index 0 descriptor too short (expected 7768, got 18) [ 1168.451736][ T5932] usb 5-1: config 0 has an invalid interface number: 97 but max is 0 [ 1168.484348][ T5932] usb 5-1: config 0 has no interface number 0 [ 1168.496976][ T5932] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1168.522233][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.554786][ T5932] usb 5-1: config 0 descriptor?? [ 1168.586315][ T5932] ftdi_sio 5-1:0.97: FTDI USB Serial Device converter detected [ 1168.604308][ T5932] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 1168.691464][ T5932] usb 3-1: USB disconnect, device number 38 [ 1170.493085][T18571] block device autoloading is deprecated and will be removed. [ 1170.762823][T18574] netdevsim netdevsim3: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 1170.776993][T18574] netdevsim netdevsim3: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 1171.747820][ T981] usb 5-1: USB disconnect, device number 40 [ 1171.802216][ T981] ftdi_sio 5-1:0.97: device disconnected [ 1171.958635][T18590] Bluetooth: MGMT ver 1.23 [ 1174.817170][T18603] overlayfs: failed to resolve './file0': -2 [ 1177.483238][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.489722][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.499063][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1179.621750][T18625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1179.645318][T18633] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1179.662607][T18633] hfs: can't find a HFS filesystem on dev loop1 [ 1179.672072][T18630] ceph: No mds server is up or the cluster is laggy [ 1179.917676][T18633] iso9660: Unknown parameter 'ÅÃþ̧7WuûôGºVO®‰Å…Q¡ÿȾ§aÈ“Œm/uK—´|ðèñJ§Ó¾on¦' [ 1181.794704][T18649] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1181.848916][T18648] KVM: debugfs: duplicate directory 18648-6 [ 1185.897929][T18683] xt_socket: unknown flags 0xe4 [ 1186.554218][T18689] Bluetooth: hci0: unsupported parameter 32780 [ 1186.560769][T18689] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1187.265075][T18694] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1187.646835][T18692] 9pnet_fd: Insufficient options for proto=fd [ 1188.256885][T18704] 9pnet_fd: Insufficient options for proto=fd [ 1193.086197][T18740] ip6gretap0 speed is unknown, defaulting to 1000 [ 1193.984770][T18740] lo speed is unknown, defaulting to 1000 [ 1193.992028][T18740] lo speed is unknown, defaulting to 1000 [ 1194.984766][T18748] affs: No valid root block on device nbd2 [ 1196.960623][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1197.711575][T18781] batadv_slave_0: entered promiscuous mode [ 1198.469897][T18765] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1198.802349][T18790] ntfs3(loop1): try to read out of volume at offset 0x0 [ 1199.023018][T18799] binder: BINDER_SET_CONTEXT_MGR already set [ 1199.029320][T18799] binder: 18792:18799 ioctl 4018620d 200000000100 returned -16 [ 1199.553817][T18800] mkiss: ax0: crc mode is auto. [ 1200.641517][T18810] IPVS: stopping backup sync thread 18812 ... [ 1200.650922][T18812] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1201.238410][T18818] sd 0:0:1:0: device reset [ 1201.668624][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 1203.370522][T18826] KVM: debugfs: duplicate directory 18826-6 [ 1208.796020][T18874] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 1208.820199][T18874] sctp: [Deprecated]: syz.3.3573 (pid 18874) Use of int in max_burst socket option. [ 1208.820199][T18874] Use struct sctp_assoc_value instead [ 1208.855275][T18881] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1208.878044][T18881] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1209.240380][T18892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3576'. [ 1209.580045][T18894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3577'. [ 1210.154422][T18889] syz.1.3575(18889): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1210.920901][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1210.920921][ T30] audit: type=1800 audit(8389818.544:700): pid=18895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3575" name="bus" dev="overlay" ino=3771 res=0 errno=0 [ 1212.550254][T18901] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3579'. [ 1214.016875][T18918] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1216.861802][T18945] macvtap1: entered promiscuous mode [ 1216.867106][T18945] batadv0: entered promiscuous mode [ 1216.873414][T18945] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1217.013528][T18947] ext4: Unknown parameter 'context' [ 1217.085967][T18945] batadv0: left promiscuous mode [ 1218.582268][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3592'. [ 1223.112522][T18990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3597'. [ 1224.067913][T19007] ..@ÿ: renamed from bond_slave_0 [ 1224.795743][T19018] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1228.210366][T19016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1229.555906][ T30] audit: type=1326 audit(8389837.514:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1230.209339][ T30] audit: type=1326 audit(8389837.514:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1230.278565][ T30] audit: type=1326 audit(8389838.134:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1230.301497][ T30] audit: type=1326 audit(8389838.134:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1230.406020][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 1230.425168][ T30] audit: type=1326 audit(8389838.134:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1230.449661][ T30] audit: type=1326 audit(8389838.134:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1230.474816][ T30] audit: type=1326 audit(8389838.134:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1230.497767][ T30] audit: type=1326 audit(8389838.144:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1230.521607][ T30] audit: type=1326 audit(8389838.144:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1230.548261][ T30] audit: type=1326 audit(8389838.144:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1231.000723][T19074] erofs (device nbd1): cannot find valid erofs superblock [ 1232.121050][T19082] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 3 [ 1232.332128][T19084] atomic_op ffff888078759998 conn xmit_atomic 0000000000000000 [ 1232.357709][ T5878] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1232.708207][T19082] EXT4-fs (loop1): unable to read superblock [ 1232.896142][T19082] squashfs: Unknown parameter 'xœìÝ1h$Uðofw' [ 1234.064342][T19101] caif0: entered allmulticast mode [ 1234.392260][T19106] ip6gretap0 speed is unknown, defaulting to 1000 [ 1234.502278][T19106] lo speed is unknown, defaulting to 1000 [ 1234.509284][T19106] lo speed is unknown, defaulting to 1000 [ 1236.501567][T19131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1237.696436][T19143] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1237.705888][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1239.045673][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1239.072251][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.078705][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.237355][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1242.907131][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3643'. [ 1242.949881][T19201] overlayfs: failed to clone upperpath [ 1247.189015][T19231] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1247.199400][T19231] EXT4-fs (loop2): unable to read superblock [ 1247.781176][T19235] rdma_op ffff88806a8c21f0 conn xmit_rdma 0000000000000000 [ 1248.155710][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1249.108703][T19251] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1250.401176][T19268] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3657'. [ 1250.485161][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3658'. [ 1250.617467][T19272] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1250.628727][T19272] hfsplus: unable to find HFS+ superblock [ 1250.988504][T19278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3660'. [ 1251.013383][T19278] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 1251.013383][T19278] program syz.4.3660 not setting count and/or reply_len properly [ 1252.120180][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1252.120220][ T30] audit: type=1326 audit(8389860.054:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffba098ec29 code=0x0 [ 1252.476196][T19288] netlink: 'syz.3.3664': attribute type 2 has an invalid length. [ 1252.484265][T19288] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.3664'. [ 1252.503609][T19288] vlan: entered promiscuous mode [ 1253.065108][T19297] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 1254.677844][T19311] overlayfs: failed to resolve './file0': -2 [ 1256.792548][T19330] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1259.149776][ T981] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1260.164402][T19359] netlink: 'syz.0.3678': attribute type 1 has an invalid length. [ 1260.342591][ T981] usb 5-1: config 3 has no interfaces? [ 1260.846379][ T981] usb 5-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 1260.879573][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.889706][ T981] usb 5-1: Product: syz [ 1260.906141][ T981] usb 5-1: Manufacturer: syz [ 1260.916854][ T981] usb 5-1: SerialNumber: syz [ 1261.465341][ T6026] usb 5-1: USB disconnect, device number 41 [ 1261.753754][T19377] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 1263.464100][T19379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3683'. [ 1263.489243][T19376] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3681'. [ 1265.203689][T19395] overlayfs: failed to clone lowerpath [ 1267.406726][ T981] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1267.516082][T19420] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1268.584825][T19431] overlayfs: failed to clone lowerpath [ 1268.670389][T19432] veth0_to_bond: entered allmulticast mode [ 1269.689136][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1271.397492][T19457] overlayfs: failed to clone upperpath [ 1272.769183][T19469] siw: device registration error -23 [ 1276.723282][T19511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3711'. [ 1277.420974][T19503] autofs: Unknown parameter 'journal_async_commit' [ 1278.322041][T19509] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1279.192631][T19522] 9pnet_fd: Insufficient options for proto=fd [ 1279.991060][T19534] netlink: 'syz.3.3720': attribute type 2 has an invalid length. [ 1279.998932][T19534] netlink: 'syz.3.3720': attribute type 9 has an invalid length. [ 1280.006863][T19534] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3720'. [ 1280.503095][ T30] audit: type=1800 audit(8389888.434:738): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3722" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1281.269929][ T5932] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1281.468248][T19559] netlink: 'syz.3.3727': attribute type 29 has an invalid length. [ 1281.515627][ T5932] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1281.550008][ T5932] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1281.554852][T19559] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3727'. [ 1282.149598][ T5932] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1282.462173][T19554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.755663][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1282.917855][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1282.963072][T19554] batadv_slave_0: entered promiscuous mode [ 1283.690173][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1283.696339][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1283.743784][T19564] ceph: No mds server is up or the cluster is laggy [ 1284.702190][T19583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3731'. [ 1285.756682][ T5932] usb 3-1: string descriptor 0 read error: -71 [ 1286.208275][ T5932] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1286.238723][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.477391][ T5932] usb 3-1: can't set config #1, error -71 [ 1286.499708][ T5932] usb 3-1: USB disconnect, device number 39 [ 1289.945423][T19637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3742'. [ 1291.322395][T19651] NILFS (loop2): device size too small [ 1291.391685][T19651] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1291.401335][T19651] exFAT-fs (loop2): unable to read boot sector [ 1291.407615][T19651] exFAT-fs (loop2): failed to read boot sector [ 1291.413910][T19651] exFAT-fs (loop2): failed to recognize exfat type [ 1293.643486][T19661] trusted_key: encrypted_key: insufficient parameters specified [ 1294.233827][T19662] erofs (device loop4): cannot find valid erofs superblock [ 1298.512346][T19721] netlink: 'syz.1.3760': attribute type 3 has an invalid length. [ 1298.600145][T19721] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3760'. [ 1300.303673][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.338450][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.362807][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1300.982121][T19744] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1300.991207][T19744] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1303.913425][T19783] tmpfs: Bad value for 'mpol' [ 1306.593173][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 1307.123676][T19812] netlink: 'syz.4.3780': attribute type 10 has an invalid length. [ 1307.874599][T19810] overlayfs: failed to clone upperpath [ 1307.928913][T19820] 9pnet_fd: Insufficient options for proto=fd [ 1307.939337][T19820] overlayfs: missing 'lowerdir' [ 1309.312434][T19812] : (slave bridge0): Enslaving as an active interface with an up link [ 1310.993811][T19812] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1311.811900][T19861] minix: Unknown parameter 'syz+' [ 1311.893486][T19812] qnx6: wrong signature (magic) in superblock #1. [ 1311.977828][T19812] qnx6: unable to read the first superblock [ 1312.419192][T19869] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3788'. [ 1312.428339][T19869] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3788'. [ 1312.513257][ T6026] kernel read not supported for file /input/event1 (pid: 6026 comm: kworker/0:7) [ 1313.352837][T19880] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1314.141999][T19892] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.152468][T19892] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.162516][T19892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1314.228417][T19892] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.269745][T19892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1314.293125][T19892] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1314.412944][T19892] UDF-fs: Scanning with blocksize 512 failed [ 1314.483623][T19892] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.479876][T19892] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.489332][T19892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1315.554281][T19892] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.586367][T19892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1315.644479][T19894] delete_channel: no stack [ 1315.673684][T19892] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1315.719912][T19892] UDF-fs: Scanning with blocksize 1024 failed [ 1315.739758][T19892] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.754419][T19892] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1316.011819][T19904] siw: device registration error -23 [ 1316.531953][T19892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1316.839795][T19892] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1316.859767][T19892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1316.894787][T19892] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1317.065608][T19892] UDF-fs: Scanning with blocksize 2048 failed [ 1317.331247][T19892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1317.479819][T19892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1317.509246][T19892] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1317.551693][T19892] UDF-fs: Scanning with blocksize 4096 failed [ 1317.557840][T19892] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 1319.364516][T19935] blk_print_req_error: 3 callbacks suppressed [ 1319.364535][T19935] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.379594][ T30] audit: type=1326 audit(8389927.314:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1319.380260][T19935] hfs: can't find a HFS filesystem on dev loop4 [ 1319.419136][ T30] audit: type=1326 audit(8389927.314:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1319.602406][ T30] audit: type=1326 audit(8389927.314:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1319.813750][T19943] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1320.349626][ T30] audit: type=1326 audit(8389927.314:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1320.419662][ T30] audit: type=1326 audit(8389927.314:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1320.442024][ T30] audit: type=1326 audit(8389927.314:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1320.464642][ T30] audit: type=1326 audit(8389927.314:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1320.487047][ T30] audit: type=1326 audit(8389927.314:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1320.530560][ T30] audit: type=1326 audit(8389927.314:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1320.610174][ T30] audit: type=1326 audit(8389927.314:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800f8ec29 code=0x7ffc0000 [ 1321.387525][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1323.086198][T19972] 9pnet_fd: Insufficient options for proto=fd [ 1326.741401][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 1327.235312][T19997] block nbd4: Attempted send on invalid socket [ 1327.260690][T19997] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.025058][T19997] block nbd4: Attempted send on invalid socket [ 1328.040973][T19997] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.055244][T19997] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1328.861970][T19997] block nbd4: Attempted send on invalid socket [ 1328.868462][T19997] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.879000][T19997] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1328.937635][T19997] block nbd4: Attempted send on invalid socket [ 1328.948789][T19997] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.961945][T19997] block nbd4: Attempted send on invalid socket [ 1328.968763][T19997] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.979519][T19997] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1328.991256][T19997] block nbd4: Attempted send on invalid socket [ 1328.997694][T19997] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.008051][T19997] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1329.040674][T19997] block nbd4: Attempted send on invalid socket [ 1329.047142][T19997] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.101585][T19997] block nbd4: Attempted send on invalid socket [ 1329.107975][T19997] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.153154][T19997] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1329.172152][T19997] block nbd4: Attempted send on invalid socket [ 1329.183686][T19997] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.359385][T19997] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1330.393477][T19997] block nbd4: Attempted send on invalid socket [ 1330.400527][T19997] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1330.805352][T20033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1331.117503][T19997] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1331.323296][T19997] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1331.915473][T19997] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1332.520707][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1332.520718][ T30] audit: type=1326 audit(8389940.484:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.3.3828" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc10f18ec29 code=0x0 [ 1339.558078][T20113] misc userio: Can't change port type on an already running userio instance [ 1342.323719][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3850'. [ 1344.163535][T20153] blk_print_req_error: 2 callbacks suppressed [ 1344.169953][T20153] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1344.180123][T20153] EXT4-fs (loop4): unable to read superblock [ 1346.109602][ T6026] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1346.516993][ T6026] usb 5-1: Using ep0 maxpacket: 32 [ 1347.375614][T20161] batadv_slave_0: entered promiscuous mode [ 1347.404563][ T6026] usb 5-1: device descriptor read/all, error -71 [ 1347.494816][T20177] overlayfs: missing 'workdir' [ 1348.172601][T20179] mkiss: ax0: crc mode is auto. [ 1351.396819][ T30] audit: type=1800 audit(8389959.334:793): pid=20204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3865" name="nullb0" dev="tmpfs" ino=2408 res=0 errno=0 [ 1353.239179][T20222] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1353.246789][T20222] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1353.253802][T20222] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1353.260778][T20222] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 1353.267601][T20222] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1353.274546][T20222] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1353.282357][T20222] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1353.290769][T20222] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1353.297521][T20222] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 1353.305456][T20222] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1353.313410][T20222] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1353.321309][T20222] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1353.328539][T20222] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1353.493661][T20222] syzkaller1: entered promiscuous mode [ 1353.499518][T20222] syzkaller1: entered allmulticast mode [ 1355.900051][T20248] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 1358.377097][T20262] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1362.061867][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.068459][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.089687][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1362.111989][T20293] overlayfs: failed to clone upperpath [ 1362.485506][T20291] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1362.493370][T20291] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1362.501766][T20291] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1362.509660][T20291] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1363.466463][ T30] audit: type=1800 audit(8389970.974:794): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3884" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1365.051274][ T6026] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1366.299598][T11172] IPVS: ip_vs_send_async error -101 [ 1366.729552][ T6026] usb 3-1: Using ep0 maxpacket: 16 [ 1366.735030][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1366.812715][ T6026] usb 3-1: device descriptor read/all, error -71 [ 1367.088599][T20314] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3888'. [ 1367.274421][T20312] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1367.305491][T20312] FAT-fs (loop4): unable to read boot sector [ 1369.491288][ T6042] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1369.492937][T20338] overlayfs: failed to clone upperpath [ 1369.799586][ T6042] usb 3-1: Using ep0 maxpacket: 32 [ 1369.818352][ T6042] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1369.830411][T11172] IPVS: ip_vs_send_async error -101 [ 1369.838126][ T6042] usb 3-1: config 0 has no interface number 0 [ 1369.851761][ T6042] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1370.346350][ T6042] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1370.369532][ T6042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.377551][ T6042] usb 3-1: Product: syz [ 1370.382474][ T6042] usb 3-1: Manufacturer: syz [ 1370.399542][ T6042] usb 3-1: SerialNumber: syz [ 1370.420360][ T6042] usb 3-1: config 0 descriptor?? [ 1370.461125][ T6042] smsc75xx v1.0.0 [ 1370.532342][ T6042] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1370.552548][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1370.623832][ T6042] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1370.938619][ T6042] usb 3-1: USB disconnect, device number 42 [ 1371.904586][T20371] netlink: 'syz.0.3908': attribute type 4 has an invalid length. [ 1372.068959][T20377] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3909'. [ 1373.601106][ T30] audit: type=1400 audit(8389981.564:795): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=20401 comm="syz.2.3921" [ 1375.114382][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'. [ 1376.872946][ T30] audit: type=1326 audit(8389984.824:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20433 comm="syz.0.3932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf8ec29 code=0x0 [ 1377.016813][T20443] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.026662][T20443] FAT-fs (loop2): unable to read boot sector [ 1378.190757][ T30] audit: type=1326 audit(8389986.004:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20442 comm="syz.2.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1378.237117][ T30] audit: type=1326 audit(8389986.004:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20442 comm="syz.2.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1378.916494][T20464] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1378.925939][T20464] (syz.2.3941,20464,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1378.933776][T20464] (syz.2.3941,20464,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1378.941347][T20464] (syz.2.3941,20464,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1378.950154][T20464] (syz.2.3941,20464,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1380.864147][ T30] audit: type=1326 audit(8389988.824:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1381.047975][ T30] audit: type=1326 audit(8389988.854:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1381.386086][ T30] audit: type=1326 audit(8389988.864:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1381.721342][ T30] audit: type=1326 audit(8389988.864:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1381.985808][ T30] audit: type=1326 audit(8389988.864:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1382.097546][ T30] audit: type=1326 audit(8389990.054:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20493 comm="syz.0.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1382.162345][ T30] audit: type=1326 audit(8389990.104:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20493 comm="syz.0.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1382.221292][ T30] audit: type=1326 audit(8389990.114:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20493 comm="syz.0.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1382.269182][ T30] audit: type=1326 audit(8389990.114:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20493 comm="syz.0.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1382.319806][ T30] audit: type=1326 audit(8389990.114:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20493 comm="syz.0.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf8ec29 code=0x7ffc0000 [ 1383.171514][T20527] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3965'. [ 1383.181122][T20527] openvswitch: netlink: Message has 512 unknown bytes. [ 1383.438082][T20527] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1383.448078][T20527] hfsplus: unable to find HFS+ superblock [ 1384.093679][T20551] bridge0: entered allmulticast mode [ 1384.124698][T20557] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1385.660299][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 1386.701958][T20617] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1386.738163][ T30] audit: type=1326 audit(8389994.694:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1386.793632][ T30] audit: type=1326 audit(8389994.694:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1386.837943][ T30] audit: type=1326 audit(8389994.724:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1386.909828][ T30] audit: type=1326 audit(8389994.724:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1386.969566][ T30] audit: type=1326 audit(8389994.724:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1387.032720][ T30] audit: type=1326 audit(8389994.994:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20642 comm="syz.1.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1387.089615][ T30] audit: type=1326 audit(8389995.014:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20642 comm="syz.1.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1387.149565][ T30] audit: type=1326 audit(8389995.014:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20642 comm="syz.1.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1387.208928][ T30] audit: type=1326 audit(8389995.014:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20642 comm="syz.1.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1387.256626][ T30] audit: type=1326 audit(8389995.154:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1389.116552][T20733] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.4064'. [ 1389.289946][ T6026] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1389.342425][T20754] netlink: 'syz.3.4073': attribute type 5 has an invalid length. [ 1389.461203][ T6026] usb 5-1: Using ep0 maxpacket: 8 [ 1389.475258][ T6026] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1389.487686][ T6026] usb 5-1: config 0 has no interface number 0 [ 1389.498147][ T6026] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1389.509240][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.529549][ T6026] usb 5-1: Product: syz [ 1389.536454][ T6026] usb 5-1: Manufacturer: syz [ 1389.541594][ T6026] usb 5-1: SerialNumber: syz [ 1389.558076][ T6026] usb 5-1: config 0 descriptor?? [ 1389.698881][T20777] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1389.779669][ T6026] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1389.802993][ T6026] uvcvideo 5-1:0.31: No valid video chain found. [ 1389.825035][ T6026] usb 5-1: USB disconnect, device number 45 [ 1389.841566][T20784] comedi comedi2: board detection failed [ 1390.246348][T20799] minix: Unknown parameter 'syz+' [ 1390.966177][T20813] random: crng reseeded on system resumption [ 1392.308167][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1392.308186][ T30] audit: type=1326 audit(8390000.264:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10f18ec29 code=0x7ffc0000 [ 1392.337300][ T30] audit: type=1326 audit(8390000.264:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10f18ec29 code=0x7ffc0000 [ 1392.361334][ T30] audit: type=1326 audit(8390000.264:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc10f18ec29 code=0x7ffc0000 [ 1392.385526][ T30] audit: type=1326 audit(8390000.264:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10f18ec29 code=0x7ffc0000 [ 1392.409118][ T30] audit: type=1326 audit(8390000.264:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10f18ec29 code=0x7ffc0000 [ 1392.434382][ T30] audit: type=1326 audit(8390000.264:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc10f18ec29 code=0x7ffc0000 [ 1392.457149][ T30] audit: type=1326 audit(8390000.264:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10f18ec29 code=0x7ffc0000 [ 1392.480926][ T30] audit: type=1326 audit(8390000.264:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10f18ec29 code=0x7ffc0000 [ 1393.203974][ T30] audit: type=1326 audit(8390001.164:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20899 comm="syz.2.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1393.253265][ T30] audit: type=1326 audit(8390001.194:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20899 comm="syz.2.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1393.634491][T20916] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4140'. [ 1393.870462][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 1393.992778][T19556] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1394.699989][T19556] usb 5-1: Using ep0 maxpacket: 8 [ 1394.713846][T19556] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1395.056915][T19556] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1395.078374][T19556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.104485][T19556] usb 5-1: Product: syz [ 1395.118544][T19556] usb 5-1: Manufacturer: syz [ 1395.144561][T19556] usb 5-1: SerialNumber: syz [ 1395.189402][T19556] usb 5-1: config 0 descriptor?? [ 1395.213503][T19556] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1395.239536][T19556] usb 5-1: setting power ON [ 1395.250043][T19556] dvb-usb: bulk message failed: -22 (2/0) [ 1395.262221][T19556] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1395.273438][T19556] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1395.289077][T19556] usb 5-1: media controller created [ 1395.331440][T19556] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1395.366000][T19556] usb 5-1: selecting invalid altsetting 6 [ 1395.380186][T19556] usb 5-1: digital interface selection failed (-22) [ 1395.387364][T19556] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1395.397554][T19556] usb 5-1: setting power OFF [ 1395.402819][T19556] dvb-usb: bulk message failed: -22 (2/0) [ 1395.408777][T19556] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1395.419642][ T6042] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1395.436525][T19556] (NULL device *): no alternate interface [ 1395.471637][T19556] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1395.500354][T19556] usb 5-1: USB disconnect, device number 46 [ 1395.590559][ T6042] usb 3-1: Using ep0 maxpacket: 16 [ 1395.603859][ T6042] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1395.619310][ T6042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.628205][ T6042] usb 3-1: Product: syz [ 1395.633704][ T6042] usb 3-1: Manufacturer: syz [ 1395.638523][ T6042] usb 3-1: SerialNumber: syz [ 1395.652377][ T6042] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1395.658691][ T6042] r8152-cfgselector 3-1: config 0 descriptor?? [ 1396.081806][ T6042] r8152-cfgselector 3-1: USB disconnect, device number 43 [ 1396.359663][ T5917] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1396.531317][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.558296][ T5917] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1396.577974][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.610785][ T5917] usb 5-1: config 0 descriptor?? [ 1396.919693][T19556] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1397.042007][ T5917] waterforce 0003:1044:7A4D.002A: item fetching failed at offset 1/3 [ 1397.052615][ T5917] waterforce 0003:1044:7A4D.002A: hid parse failed with -22 [ 1397.065103][ T5917] waterforce 0003:1044:7A4D.002A: probe with driver waterforce failed with error -22 [ 1397.092051][T19556] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1397.107032][T19556] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1397.129656][T19556] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1397.152195][T19556] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1397.162058][T19556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.170625][T19556] usb 3-1: Product: syz [ 1397.176180][T19556] usb 3-1: Manufacturer: syz [ 1397.183877][T19556] usb 3-1: SerialNumber: syz [ 1397.193461][T19556] usb 3-1: config 0 descriptor?? [ 1397.199858][T21004] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1397.207227][T21004] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1397.217043][T19556] usb 3-1: ucan: probing device on interface #0 [ 1397.249077][ T6026] usb 5-1: USB disconnect, device number 47 [ 1397.824256][T19556] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 1397.842203][T19556] usb 3-1: USB disconnect, device number 44 [ 1398.679975][ T6026] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1398.778035][T21051] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4203'. [ 1398.862370][ T6026] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1398.877372][ T6026] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1398.889613][ T6026] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1398.899181][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.907548][ T6026] usb 5-1: Product: syz [ 1398.913359][ T6026] usb 5-1: Manufacturer: syz [ 1398.918110][ T6026] usb 5-1: SerialNumber: syz [ 1399.144490][ T6026] usb 5-1: bad CDC descriptors [ 1399.163415][ T6026] usb 5-1: USB disconnect, device number 48 [ 1399.657825][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1399.657842][ T30] audit: type=1326 audit(8390007.614:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1399.727474][ T30] audit: type=1326 audit(8390007.614:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1399.777754][ T30] audit: type=1326 audit(8390007.624:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1399.833082][ T30] audit: type=1326 audit(8390007.624:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1399.856078][T21072] netlink: 'syz.1.4213': attribute type 4 has an invalid length. [ 1399.856588][ T30] audit: type=1326 audit(8390007.624:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1399.868722][T21072] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4213'. [ 1399.892381][ T30] audit: type=1326 audit(8390007.624:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1399.895975][T21076] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1399.895975][T21076] The task syz.2.4214 (21076) triggered the difference, watch for misbehavior. [ 1399.942634][ T30] audit: type=1326 audit(8390007.624:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1400.649866][ T6026] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1400.809652][ T6026] usb 5-1: Using ep0 maxpacket: 8 [ 1400.825043][ T6026] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1400.834277][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.842500][ T6026] usb 5-1: Product: syz [ 1400.846748][ T6026] usb 5-1: Manufacturer: syz [ 1400.851675][ T6026] usb 5-1: SerialNumber: syz [ 1400.859272][ T6026] usb 5-1: config 0 descriptor?? [ 1400.873072][ T6026] gspca_main: se401-2.14.0 probing 047d:5003 [ 1400.949623][ T5917] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1401.109586][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1401.116407][ T5917] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1401.124698][ T5917] usb 3-1: config 0 has no interface number 0 [ 1401.130929][ T5917] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1401.140895][ T5917] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1401.153185][ T5917] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1401.162903][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.171638][ T5917] usb 3-1: Product: syz [ 1401.175834][ T5917] usb 3-1: Manufacturer: syz [ 1401.180501][ T5917] usb 3-1: SerialNumber: syz [ 1401.188112][ T5917] usb 3-1: config 0 descriptor?? [ 1401.194005][T21112] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1401.201976][T21112] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1401.286119][ T6026] gspca_se401: Wrong descriptor type [ 1401.414345][T21112] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1401.423282][T21112] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1401.467701][T21120] batadv_slave_1: entered promiscuous mode [ 1401.903326][ T6026] usb 5-1: USB disconnect, device number 49 [ 1402.307492][ T5917] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1402.318567][ T5917] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1402.332881][ T5917] asix 3-1:0.251: probe with driver asix failed with error -71 [ 1402.353477][ T5917] usb 3-1: USB disconnect, device number 45 [ 1403.657504][ T6042] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1403.779550][ T30] audit: type=1326 audit(8390011.734:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21152 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1403.823288][ T30] audit: type=1326 audit(8390011.734:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21152 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1403.858170][ T6042] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1403.871321][ T30] audit: type=1326 audit(8390011.734:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21152 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1403.906357][T21159] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1403.917210][T21159] EXT4-fs (loop2): unable to read superblock [ 1403.953132][ T6042] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1403.964555][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.011481][T21165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4255'. [ 1404.061483][T21159] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1404.070780][T21159] FAT-fs (loop2): unable to read boot sector [ 1404.117228][ T6042] usb 5-1: config 0 descriptor?? [ 1404.430335][ T6026] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 1404.437946][ T6026] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 1404.633554][ T6026] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 1404.652026][ T6042] uclogic 0003:5543:0781.002C: unknown main item tag 0x1 [ 1404.659210][ T6042] uclogic 0003:5543:0781.002C: unknown main item tag 0x0 [ 1404.672893][ T6026] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 1404.698184][ T6026] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 1404.707297][ T6026] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 1404.719963][ T6026] hid-generic FFFC:0003:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1404.730045][ T6042] uclogic 0003:5543:0781.002C: hidraw1: USB HID v1.01 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 1404.866819][ T5917] usb 5-1: USB disconnect, device number 50 [ 1404.883726][T21173] fido_id[21173]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1404.948417][T21175] fido_id[21175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1405.166020][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1405.166042][ T30] audit: type=1326 audit(8390013.124:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21193 comm="syz.1.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1405.225169][ T30] audit: type=1326 audit(8390013.124:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21193 comm="syz.1.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1405.248031][ T30] audit: type=1326 audit(8390013.124:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21193 comm="syz.1.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1405.272804][ T30] audit: type=1326 audit(8390013.124:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21193 comm="syz.1.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1405.298855][ T30] audit: type=1326 audit(8390013.124:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21193 comm="syz.1.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1405.327545][ T30] audit: type=1326 audit(8390013.124:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21193 comm="syz.1.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1405.352169][ T30] audit: type=1326 audit(8390013.124:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21193 comm="syz.1.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1405.374956][ T30] audit: type=1326 audit(8390013.124:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21193 comm="syz.1.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1405.454086][ T30] audit: type=1326 audit(8390013.124:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21193 comm="syz.1.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1405.523014][T21204] ip6gretap0 speed is unknown, defaulting to 1000 [ 1405.890849][T21204] lo speed is unknown, defaulting to 1000 [ 1405.899623][T21204] lo speed is unknown, defaulting to 1000 [ 1406.269721][ T5917] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1406.570217][ T6026] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1406.822400][ T5917] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 1406.905986][ T6026] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1407.342539][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.359819][ T6026] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1407.363583][ T5917] usb 3-1: config 0 descriptor?? [ 1407.390746][ T5917] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 1407.398819][ T6026] usb 5-1: config 0 has no interface number 0 [ 1407.408681][ T6026] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1407.416833][ T5917] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 1407.433971][ T6026] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1407.465957][ T6026] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1407.506902][ T6026] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1407.521934][ T6026] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1407.541503][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1407.561509][ T6026] usb 5-1: Product: syz [ 1407.565777][ T6026] usb 5-1: SerialNumber: syz [ 1407.590498][ T6026] usb 5-1: config 0 descriptor?? [ 1407.718955][ T5917] usb 3-1: USB disconnect, device number 46 [ 1407.843669][ T6026] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input53 [ 1408.083997][ T6026] usb 5-1: USB disconnect, device number 51 [ 1408.259842][T21266] gfs2: path_lookup on [ 1408.259842][T21266] returned error -2 [ 1408.529629][ T5917] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1408.690024][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1408.699167][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.740016][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1408.765529][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1408.785385][ T5917] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1408.850961][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1408.907995][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1408.921733][ T5917] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1408.941518][ T5917] usb 3-1: Manufacturer: syz [ 1409.001927][ T5917] usb 3-1: config 0 descriptor?? [ 1409.282259][ T5917] rc_core: IR keymap rc-hauppauge not found [ 1409.288629][ T5917] Registered IR keymap rc-empty [ 1409.299575][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.319547][ T6042] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1409.330254][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.354126][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1409.375271][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input54 [ 1409.398204][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.427051][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.450643][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.471244][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.479839][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.492736][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.509614][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.523125][ T6042] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1409.532536][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.546694][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.570982][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.578678][ T6042] usb 5-1: config 0 descriptor?? [ 1409.599626][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.620578][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.642524][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1409.675126][ T5917] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1409.685177][ T5917] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1409.764625][ T6026] usb 3-1: USB disconnect, device number 47 [ 1409.998258][ T6042] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 1410.005649][ T6042] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 1410.013617][ T6042] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 1410.021132][ T6042] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 1410.029001][ T6042] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 1410.043148][ T6042] cm6533_jd 0003:0D8C:0022.002D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1410.263811][ T6026] usb 5-1: USB disconnect, device number 52 [ 1410.325604][ T30] audit: type=1326 audit(8390018.284:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.379077][ T30] audit: type=1326 audit(8390018.284:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.424617][ T30] audit: type=1326 audit(8390018.284:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.452453][ T30] audit: type=1326 audit(8390018.284:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.475486][ T30] audit: type=1326 audit(8390018.304:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.500327][ T30] audit: type=1326 audit(8390018.304:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.525081][ T30] audit: type=1326 audit(8390018.304:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.548030][ T30] audit: type=1326 audit(8390018.314:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.571630][ T30] audit: type=1326 audit(8390018.314:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.596558][ T30] audit: type=1326 audit(8390018.314:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21332 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1410.649822][T19556] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1410.799544][T19556] usb 3-1: Using ep0 maxpacket: 8 [ 1410.814888][T19556] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1410.824258][T19556] usb 3-1: config 0 has no interface number 0 [ 1410.831428][T19556] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1410.843607][T19556] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1410.853572][T19556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.867662][T19556] usb 3-1: config 0 descriptor?? [ 1410.891717][T19556] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1411.209554][ T6042] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1411.361397][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1411.375292][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.387195][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.397260][ T6042] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1411.406884][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.417901][ T6042] usb 5-1: config 0 descriptor?? [ 1411.856392][ T6042] logitech 0003:046D:C294.002E: unknown main item tag 0x0 [ 1411.876156][ T6042] logitech 0003:046D:C294.002E: unknown main item tag 0x0 [ 1411.889755][ T6042] logitech 0003:046D:C294.002E: unknown main item tag 0x0 [ 1411.897298][ T6042] logitech 0003:046D:C294.002E: unknown main item tag 0x0 [ 1411.905232][ T6042] logitech 0003:046D:C294.002E: unknown main item tag 0x0 [ 1411.923624][ T6042] logitech 0003:046D:C294.002E: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.4-1/input0 [ 1411.948621][ T6042] logitech 0003:046D:C294.002E: no inputs found [ 1411.981219][T21392] ip6gretap0 speed is unknown, defaulting to 1000 [ 1412.074333][T19556] usb 5-1: USB disconnect, device number 53 [ 1412.142591][ T6026] usb 3-1: USB disconnect, device number 48 [ 1412.224293][T21392] lo speed is unknown, defaulting to 1000 [ 1412.231357][T21392] lo speed is unknown, defaulting to 1000 [ 1413.369559][ T6042] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1413.531437][ T6042] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1413.551484][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.579617][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.599695][ T6042] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1413.620757][ T6042] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1413.630325][ T6042] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1413.638455][ T6042] usb 3-1: Manufacturer: syz [ 1413.652567][ T6042] usb 3-1: config 0 descriptor?? [ 1414.092750][ T6042] appleir 0003:05AC:8243.002F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1414.341964][ T6042] usb 3-1: USB disconnect, device number 49 [ 1415.669613][ T6042] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1415.821609][ T6042] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1415.833275][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1415.844352][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1415.854153][ T6042] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1415.867184][ T6042] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1415.876305][ T6042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.887095][ T6042] usb 3-1: config 0 descriptor?? [ 1416.305573][ T6042] hid_parser_main: 3 callbacks suppressed [ 1416.305593][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.337111][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.346245][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.355018][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.363742][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.371641][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.379059][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.387675][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.395583][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.403582][ T6042] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1416.420050][ T6042] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1416.601982][ T6042] usb 3-1: USB disconnect, device number 50 [ 1417.513017][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1417.513033][ T30] audit: type=1326 audit(8390025.474:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.542722][ T30] audit: type=1326 audit(8390025.474:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.570392][ T30] audit: type=1326 audit(8390025.484:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.594076][ T30] audit: type=1326 audit(8390025.484:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.617946][ T30] audit: type=1326 audit(8390025.484:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.642166][ T30] audit: type=1326 audit(8390025.484:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.665252][ T30] audit: type=1326 audit(8390025.484:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.690081][ T30] audit: type=1326 audit(8390025.484:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.713213][ T30] audit: type=1326 audit(8390025.484:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.737021][ T30] audit: type=1326 audit(8390025.484:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1417.944752][T21602] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1417.955418][T21602] gfs2: error -5 reading superblock [ 1417.998405][T21606] netlink: 'syz.0.4438': attribute type 12 has an invalid length. [ 1418.029940][T21606] netlink: 'syz.0.4438': attribute type 29 has an invalid length. [ 1418.052206][T21606] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4438'. [ 1418.069237][T21606] netlink: 'syz.0.4438': attribute type 2 has an invalid length. [ 1418.213221][T21606] netlink: 'syz.0.4438': attribute type 3 has an invalid length. [ 1418.980020][T19556] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1419.161513][T19556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.219540][T19556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.259625][T19556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1419.344677][T19556] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1419.394668][T19556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.465824][T19556] usb 3-1: config 0 descriptor?? [ 1419.720093][T21650] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1419.750081][ T6026] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1419.920793][T19556] plantronics 0003:047F:FFFF.0031: reserved main item tag 0xe [ 1419.928902][ T6026] usb 5-1: Using ep0 maxpacket: 8 [ 1419.943509][ T6026] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1419.961302][T19556] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1419.980426][ T6026] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1419.999661][ T6026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1420.023907][ T6026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1420.058846][ T6026] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1420.087525][ T6026] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1420.105451][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.182246][T19556] usb 3-1: USB disconnect, device number 51 [ 1420.338009][ T6026] usb 5-1: GET_CAPABILITIES returned 0 [ 1420.348987][T21674] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4464'. [ 1420.369588][ T6026] usbtmc 5-1:16.0: can't read capabilities [ 1420.656993][T21641] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 1420.659636][ T6026] usb 5-1: USB disconnect, device number 54 [ 1421.232117][T13505] Bluetooth: hci5: Frame reassembly failed (-84) [ 1421.916499][T21738] netlink: 'syz.4.4489': attribute type 10 has an invalid length. [ 1422.419598][ T6042] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1422.583926][ T6042] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1422.593487][ T6042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.602239][ T6042] usb 5-1: Product: syz [ 1422.606817][ T6042] usb 5-1: Manufacturer: syz [ 1422.612582][ T6042] usb 5-1: SerialNumber: syz [ 1422.622179][ T6042] usb 5-1: config 0 descriptor?? [ 1422.693413][T21724] kexec: Could not allocate control_code_buffer [ 1423.037952][ T6042] airspy 5-1:0.0: Board ID: 00 [ 1423.046816][ T6042] airspy 5-1:0.0: Firmware version: [ 1423.187292][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.195208][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.205557][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1423.259720][ T5878] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1423.260080][ T5866] Bluetooth: hci5: command 0x1003 tx timeout [ 1423.547704][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4514'. [ 1424.056053][ T6042] airspy 5-1:0.0: Registered as swradio24 [ 1424.062089][ T6042] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1424.257790][ T6026] usb 5-1: USB disconnect, device number 55 [ 1424.318402][T21817] netlink: 'syz.1.4523': attribute type 4 has an invalid length. [ 1424.845824][T21836] overlayfs: overlapping lowerdir path [ 1424.855189][T21837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4531'. [ 1424.874796][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4531'. [ 1425.311332][T21858] vivid-000: disconnect [ 1425.316286][T21857] vivid-000: reconnect [ 1426.646756][T21934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4569'. [ 1426.777921][T21942] sctp: [Deprecated]: syz.3.4574 (pid 21942) Use of int in max_burst socket option deprecated. [ 1426.777921][T21942] Use struct sctp_assoc_value instead [ 1427.735853][T21965] lo: entered allmulticast mode [ 1427.745260][T21964] lo: left allmulticast mode [ 1428.000087][ T6042] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1428.164159][ T6042] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1428.173753][ T6042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.199496][ T6042] usb 5-1: Product: syz [ 1428.212267][ T6042] usb 5-1: Manufacturer: syz [ 1428.227210][ T6042] usb 5-1: SerialNumber: syz [ 1428.269566][ T6042] usb 5-1: config 0 descriptor?? [ 1428.292295][ T6042] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1428.376984][T21978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.465284][T21978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.505761][T21978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1428.563932][ T5917] lo speed is unknown, defaulting to 1000 [ 1429.164673][T21992] netlink: 'syz.2.4593': attribute type 1 has an invalid length. [ 1429.605226][T21992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1429.664429][T21994] erspan0: entered allmulticast mode [ 1429.724362][T21994] bond3: (slave erspan0): making interface the new active one [ 1429.742584][ T6042] gspca_sunplus: reg_w_riv err -71 [ 1429.747924][ T6042] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1429.770054][ T6042] usb 5-1: USB disconnect, device number 56 [ 1429.780047][T21994] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 1429.896100][T22007] syz_tun: entered allmulticast mode [ 1430.018253][T22017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.039281][T22017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.648165][T22043] syz_tun: entered allmulticast mode [ 1430.657933][T22042] syz_tun: left allmulticast mode [ 1431.061606][T22060] iso9660: Unknown parameter 'ioc' [ 1431.260746][T11172] IPVS: ip_vs_send_async error -101 [ 1434.812654][T22144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1434.910606][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4645'. [ 1434.932999][T19556] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1434.992424][T22144] syz_tun (unregistering): left allmulticast mode [ 1435.035137][T22144] bond0: (slave syz_tun): Releasing backup interface [ 1435.103244][T19556] usb 5-1: Using ep0 maxpacket: 8 [ 1435.116130][T19556] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1435.126046][T19556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.134470][T19556] usb 5-1: Product: syz [ 1435.138934][T19556] usb 5-1: Manufacturer: syz [ 1435.144038][T19556] usb 5-1: SerialNumber: syz [ 1435.155635][T19556] usb 5-1: config 0 descriptor?? [ 1435.373246][T19556] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1436.336461][T22174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1436.919630][T19556] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1436.937988][T19556] usb 5-1: USB disconnect, device number 57 [ 1437.112204][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4658'. [ 1439.250917][T22218] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4666'. [ 1439.279870][T22218] openvswitch: netlink: Message has 512 unknown bytes. [ 1440.596175][ T5917] hid_parser_main: 6 callbacks suppressed [ 1440.596196][ T5917] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1440.649790][ T5917] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1440.823607][T22248] fido_id[22248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1441.162287][T22264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4681'. [ 1442.054897][T22266] syzkaller0: entered promiscuous mode [ 1442.063736][T22266] syzkaller0: entered allmulticast mode [ 1443.229930][ T5917] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1443.277138][T22289] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4690'. [ 1443.324517][T22291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1443.381891][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1443.388557][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1443.411024][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1443.459571][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.476066][ T5917] usb 3-1: Product: syz [ 1443.481822][ T5917] usb 3-1: Manufacturer: syz [ 1443.486701][ T5917] usb 3-1: SerialNumber: syz [ 1443.521738][ T5917] usb 3-1: config 0 descriptor?? [ 1443.535094][ T5917] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1444.156758][ T5917] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1444.397383][T22300] libceph: resolve 'c' (ret=-3): failed [ 1445.252444][ T5917] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1445.502802][ T5917] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1445.939555][ T5917] em28xx 3-1:0.0: board has no eeprom [ 1446.049588][ T5917] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1446.057584][ T5917] em28xx 3-1:0.0: dvb set to bulk mode. [ 1446.284973][T22313] kvm: pic: non byte write [ 1446.429551][ T981] em28xx 3-1:0.0: Binding DVB extension [ 1446.467391][ T5917] usb 3-1: USB disconnect, device number 52 [ 1446.475757][T22328] pim6reg1: entered promiscuous mode [ 1446.485189][ T5917] em28xx 3-1:0.0: Disconnecting em28xx [ 1446.501201][T22328] pim6reg1: entered allmulticast mode [ 1446.532593][ T981] em28xx 3-1:0.0: Registering input extension [ 1446.547159][ T5917] em28xx 3-1:0.0: Closing input extension [ 1446.581338][T22332] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[22332] [ 1446.793064][ T5917] em28xx 3-1:0.0: Freeing device [ 1447.006987][T22334] ip6gretap0 speed is unknown, defaulting to 1000 [ 1448.453856][T22334] lo speed is unknown, defaulting to 1000 [ 1448.461560][T22334] lo speed is unknown, defaulting to 1000 [ 1449.895798][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4715'. [ 1454.220041][T22391] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1456.819238][T22421] binder: BINDER_SET_CONTEXT_MGR already set [ 1456.846369][T22421] binder: 22420:22421 ioctl 4018620d 200000000100 returned -16 [ 1456.886663][T22421] binder: BINDER_SET_CONTEXT_MGR already set [ 1456.916637][T22421] binder: 22420:22421 ioctl 4018620d 200000004a80 returned -16 [ 1463.174861][T22505] overlayfs: failed to clone upperpath [ 1464.488873][T22517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1466.549629][ T5917] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1466.904656][T13505] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1466.919120][T13505] Bluetooth: hci5: Frame reassembly failed (-84) [ 1467.140771][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.151058][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1467.163262][ T5917] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1467.172649][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1467.181011][ T5917] usb 5-1: SerialNumber: syz [ 1467.642571][ T5917] usb 5-1: 0:2 : does not exist [ 1467.760205][ T5917] usb 5-1: USB disconnect, device number 58 [ 1468.040942][T22545] udevd[22545]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1468.941813][ T5878] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1477.427069][T22640] binder: BINDER_SET_CONTEXT_MGR already set [ 1477.520849][T22640] binder: 22636:22640 ioctl 4018620d 200000000100 returned -16 [ 1477.606891][T22645] binder: BINDER_SET_CONTEXT_MGR already set [ 1477.659515][T22645] binder: 22636:22645 ioctl 4018620d 2000000002c0 returned -16 [ 1484.640198][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.646857][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.659144][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1486.809905][T22734] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1486.834920][T22734] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1486.844394][T22734] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1486.854222][T22734] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1486.863624][T22734] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1486.873214][T22734] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1486.880856][T22734] UDF-fs: Scanning with blocksize 512 failed [ 1486.887451][T22734] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1486.896998][T22734] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1486.975051][T22734] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1486.984848][T22734] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1486.994409][T22734] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1487.003973][T22734] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1487.011660][T22734] UDF-fs: Scanning with blocksize 1024 failed [ 1487.018162][T22734] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1487.027846][T22734] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1487.037375][T22734] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1487.047150][T22734] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1487.056855][T22734] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1487.066520][T22734] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1487.074188][T22734] UDF-fs: Scanning with blocksize 2048 failed [ 1487.080610][T22734] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1487.090075][T22734] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1487.099887][T22734] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1487.109818][T22734] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1487.117434][T22734] UDF-fs: Scanning with blocksize 4096 failed [ 1487.123530][T22734] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1491.112774][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1491.112791][ T30] audit: type=1326 audit(8390099.074:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22777 comm="syz.3.4819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc10f18ec29 code=0x0 [ 1492.125179][T22787] tipc: Enabled bearer , priority 0 [ 1492.175935][T22787] syzkaller0: entered promiscuous mode [ 1492.205308][T22787] syzkaller0: entered allmulticast mode [ 1492.460003][T11172] IPVS: ip_vs_send_async error -101 [ 1492.620664][T22787] tipc: Resetting bearer [ 1492.647299][T22803] netlink: 'syz.4.4824': attribute type 10 has an invalid length. [ 1493.223778][T22786] tipc: Resetting bearer [ 1493.258025][T22786] tipc: Disabling bearer [ 1493.395094][T22803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.404388][T22803] : (slave team0): Enslaving as an active interface with an up link [ 1493.526750][T22805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1493.546030][T22808] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1493.556035][T22808] bond2: (slave macvlan3): Enslaving as a backup interface with a down link [ 1494.410297][T22824] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1494.625843][ T30] audit: type=1326 audit(8390102.424:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1494.657483][T22817] kvm: pic: non byte read [ 1494.671906][T22817] pic_ioport_write: 93 callbacks suppressed [ 1494.671929][T22817] kvm: pic: level sensitive irq not supported [ 1495.381089][T22817] kvm: pic: non byte read [ 1495.434392][ T30] audit: type=1326 audit(8390102.434:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1495.462175][ T30] audit: type=1326 audit(8390102.434:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1495.486770][ T30] audit: type=1326 audit(8390102.434:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1495.517173][ T30] audit: type=1326 audit(8390102.434:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1495.540324][ T30] audit: type=1326 audit(8390102.434:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1495.563016][ T30] audit: type=1326 audit(8390102.434:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1495.595937][ T30] audit: type=1326 audit(8390102.434:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1495.810325][T22817] kvm: pic: level sensitive irq not supported [ 1495.810393][T22817] kvm: pic: non byte read [ 1495.870121][ T30] audit: type=1326 audit(8390102.434:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22833 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1498.757993][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1498.798857][T22863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1500.261820][T22880] dummy0: entered promiscuous mode [ 1500.267152][T22880] vlan2: entered promiscuous mode [ 1507.722153][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4861'. [ 1509.929325][T22950] netlink: 'syz.0.4863': attribute type 4 has an invalid length. [ 1510.862052][T22967] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1515.404267][T23004] tipc: Enabling of bearer rejected, failed to enable media [ 1515.407480][T23010] blk_print_req_error: 2 callbacks suppressed [ 1515.407497][T23010] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1515.450375][T23010] EXT4-fs (loop4): unable to read superblock [ 1516.340901][T23021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4883'. [ 1516.350056][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4883'. [ 1517.140046][T23030] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4880'. [ 1521.810138][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4893'. [ 1523.501465][T23082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1523.744925][T23086] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1528.138989][ T5917] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1528.941747][T23135] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1529.582969][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.593409][ T5917] usb 3-1: config 0 has no interfaces? [ 1529.603604][ T5917] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1529.613333][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.564925][ T5917] usb 3-1: Product: syz [ 1530.571319][ T5917] usb 3-1: Manufacturer: syz [ 1530.576345][ T5917] usb 3-1: SerialNumber: syz [ 1530.584294][ T5917] usb 3-1: config 0 descriptor?? [ 1530.590267][ T5917] usb 3-1: can't set config #0, error -71 [ 1530.611057][ T5917] usb 3-1: USB disconnect, device number 53 [ 1532.165881][T23171] overlayfs: failed to clone upperpath [ 1532.788896][T23175] program syz.4.4923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1535.165532][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1535.165546][ T30] audit: type=1800 audit(8390142.504:954): pid=23193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4929" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1538.861763][ T30] audit: type=1800 audit(8390146.384:955): pid=23222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4934" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1540.269528][ T30] audit: type=1326 audit(8390148.224:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1540.294529][T23240] netlink: 948 bytes leftover after parsing attributes in process `syz.0.4941'. [ 1540.536530][ T30] audit: type=1326 audit(8390148.224:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1541.342005][ T30] audit: type=1326 audit(8390148.224:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1542.332510][ T30] audit: type=1326 audit(8390148.224:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1543.258943][ T30] audit: type=1326 audit(8390148.224:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1543.287162][ T30] audit: type=1326 audit(8390148.224:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1543.312025][ T30] audit: type=1326 audit(8390148.224:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8310b8d590 code=0x7ffc0000 [ 1543.338993][ T30] audit: type=1326 audit(8390148.224:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1543.366124][ T30] audit: type=1326 audit(8390148.224:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1543.483649][ T30] audit: type=1326 audit(8390148.224:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23224 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8310b8ec29 code=0x7ffc0000 [ 1544.826434][T19556] lo speed is unknown, defaulting to 1000 [ 1544.832304][ T5932] lo speed is unknown, defaulting to 1000 [ 1544.838179][T19556] 3yz0: Port: 1 Link DOWN [ 1545.189588][ T6026] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1546.014239][ T6026] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1546.026409][ T6026] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1546.036819][ T6026] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1546.046218][ T6026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.058174][T23283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1546.163413][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.193068][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.202986][ T6026] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1546.203323][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1546.509460][ T6026] usb 3-1: USB disconnect, device number 54 [ 1549.227365][T23321] input: syz1 as /devices/virtual/input/input56 [ 1550.072246][T23307] udevd[23307]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1550.319584][ T6026] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1551.679645][ T6026] usb 3-1: Using ep0 maxpacket: 8 [ 1551.710499][ T6026] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1551.719979][ T6026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.728115][ T6026] usb 3-1: Product: syz [ 1552.296486][ T6026] usb 3-1: Manufacturer: syz [ 1552.314851][ T6026] usb 3-1: SerialNumber: syz [ 1552.563858][ T6026] usb 3-1: config 0 descriptor?? [ 1553.633975][T11172] IPVS: ip_vs_send_async error -101 [ 1554.494321][ T6026] usb 3-1: can't set config #0, error -71 [ 1554.513373][ T6026] usb 3-1: USB disconnect, device number 55 [ 1554.579505][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1554.579522][ T30] audit: type=1326 audit(8390162.534:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1554.831389][ T30] audit: type=1326 audit(8390162.534:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1555.268691][ T30] audit: type=1326 audit(8390162.544:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1555.295840][ T30] audit: type=1326 audit(8390162.544:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1555.319018][ T30] audit: type=1326 audit(8390162.544:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1555.573749][ T30] audit: type=1326 audit(8390162.544:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1555.704333][T23370] sp0: Synchronizing with TNC [ 1556.357991][ T30] audit: type=1326 audit(8390162.544:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1556.382042][ T30] audit: type=1326 audit(8390162.544:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1556.647626][ T30] audit: type=1326 audit(8390162.544:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1558.367902][ T30] audit: type=1326 audit(8390162.544:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23353 comm="syz.1.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba098ec29 code=0x7ffc0000 [ 1560.454254][T23382] netlink: 'syz.0.4974': attribute type 4 has an invalid length. [ 1560.462354][T23382] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4974'. [ 1570.157344][T23477] ptrace attach of "./syz-executor exec"[11263] was attempted by ""[23477] [ 1570.246138][T23478] netlink: 'syz.1.4995': attribute type 16 has an invalid length. [ 1570.501694][T23481] delete_channel: no stack [ 1570.521209][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4996'. [ 1571.439594][ T5917] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1571.609573][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1571.669052][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.690106][ T5917] usb 3-1: config 0 has no interfaces? [ 1572.028768][T23490] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1572.038789][T23490] vxfs: unable to read disk superblock at 1 [ 1572.046506][T23490] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1572.056605][T23490] vxfs: unable to read disk superblock at 8 [ 1572.062819][T23490] vxfs: can't find superblock. [ 1572.204403][ T5917] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1572.213539][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.640750][ T5917] usb 3-1: config 0 descriptor?? [ 1573.480306][T23497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.497921][T23497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.772821][T23497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.400801][T23497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.524718][T23497] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4997'. [ 1575.354806][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1575.354827][ T30] audit: type=1107 audit(8390182.704:1010): pid=23503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1575.397854][T23482] syz.0.4998 (23482): drop_caches: 2 [ 1576.666576][T23514] tipc: New replicast peer: 255.255.255.255 [ 1576.683059][T23514] tipc: Enabled bearer , priority 10 [ 1578.723924][T23534] overlayfs: failed to clone upperpath [ 1579.891893][T23540] ceph: No mds server is up or the cluster is laggy [ 1579.898703][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1579.906143][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1580.735990][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1580.744183][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1583.311593][ T981] usb 3-1: USB disconnect, device number 56 [ 1585.606326][T23582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5022'. [ 1586.641632][T23591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5023'. [ 1587.410641][ T6026] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1587.632189][ T6026] usb 5-1: Using ep0 maxpacket: 8 [ 1587.839666][ T6026] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1587.849065][ T6026] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1587.857963][ T6026] usb 5-1: Product: syz [ 1588.816135][ T6026] usb 5-1: Manufacturer: syz [ 1588.821705][ T6026] usb 5-1: SerialNumber: syz [ 1589.000596][ T6026] usb 5-1: config 0 descriptor?? [ 1589.511751][ T6026] usb 5-1: can't set config #0, error -71 [ 1589.542095][ T6026] usb 5-1: USB disconnect, device number 59 [ 1591.688679][T23617] netlink: 'syz.2.5030': attribute type 2 has an invalid length. [ 1591.697021][T23617] netlink: 'syz.2.5030': attribute type 11 has an invalid length. [ 1591.705292][T23617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5030'. [ 1595.863091][T23651] Bluetooth: MGMT ver 1.23 [ 1595.873775][ T5866] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1596.495228][ T981] IPVS: starting estimator thread 0... [ 1702.359441][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1702.366431][ C0] rcu: 1-...!: (1 GPs behind) idle=6d6c/0/0x1 softirq=110815/110827 fqs=0 [ 1702.376951][ C0] rcu: (detected by 0, t=10505 jiffies, g=104781, q=339 ncpus=2) [ 1702.384787][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1702.384819][ C1] NMI backtrace for cpu 1 [ 1702.384843][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1702.384862][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1702.384873][ C1] RIP: 0010:lock_is_held_type+0x14e/0x190 [ 1702.384899][ C1] Code: 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 09 aa 3e 07 48 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc 90 0f 0b 90 48 c7 c7 53 2d ba 8d e8 1c 16 00 00 [ 1702.384914][ C1] RSP: 0018:ffffc90000a08c68 EFLAGS: 00000082 [ 1702.384930][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 4f15ec201df1c300 [ 1702.384942][ C1] RDX: ffff88801d2fdac0 RSI: ffffffff8dd9240a RDI: ffffffff8c03aa60 [ 1702.384954][ C1] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 1702.384965][ C1] R10: dffffc0000000000 R11: fffff5200014117c R12: ffff88807bc68340 [ 1702.384978][ C1] R13: ffff88807bc68000 R14: ffff88807bc68330 R15: ffff888047f22c00 [ 1702.384991][ C1] FS: 0000000000000000(0000) GS:ffff888125ae7000(0000) knlGS:0000000000000000 [ 1702.385004][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1702.385016][ C1] CR2: 00007fe36deb2d58 CR3: 00000000760a8000 CR4: 00000000003526f0 [ 1702.385031][ C1] Call Trace: [ 1702.385041][ C1] [ 1702.385048][ C1] advance_sched+0x1d2/0xc90 [ 1702.385072][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1702.385091][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1702.385112][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1702.385130][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1702.385163][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1702.385184][ C1] ? read_tsc+0x9/0x20 [ 1702.385208][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1702.385245][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1702.385271][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1702.385289][ C1] [ 1702.385296][ C1] [ 1702.385303][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1702.385320][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1702.385338][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 4a 23 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1702.385353][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1702.385366][ C1] RAX: 4f15ec201df1c300 RBX: ffffffff8196a2b7 RCX: 4f15ec201df1c300 [ 1702.385379][ C1] RDX: 0000000000000001 RSI: ffffffff8dba2d53 RDI: ffffffff8c03aa60 [ 1702.385391][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 1702.385403][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8fc39670 [ 1702.385421][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5fb58 [ 1702.385434][ C1] ? do_idle+0x1e7/0x510 [ 1702.385462][ C1] default_idle+0x13/0x20 [ 1702.385482][ C1] default_idle_call+0x73/0xb0 [ 1702.385502][ C1] do_idle+0x1e7/0x510 [ 1702.385527][ C1] ? __pfx_do_idle+0x10/0x10 [ 1702.385556][ C1] cpu_startup_entry+0x44/0x60 [ 1702.385578][ C1] start_secondary+0x101/0x110 [ 1702.385597][ C1] common_startup_64+0x13e/0x147 [ 1702.385624][ C1] [ 1702.385811][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g104781 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1702.703640][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1702.713606][ C0] rcu: RCU grace-period kthread stack dump: [ 1702.719488][ C0] task:rcu_preempt state:R running task stack:26696 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1702.733066][ C0] Call Trace: [ 1702.736350][ C0] [ 1702.739285][ C0] __schedule+0x1798/0x4cc0 [ 1702.743815][ C0] ? __lock_acquire+0xab9/0xd20 [ 1702.748674][ C0] ? __pfx___schedule+0x10/0x10 [ 1702.753538][ C0] ? schedule+0x91/0x360 [ 1702.757779][ C0] schedule+0x165/0x360 [ 1702.761936][ C0] schedule_timeout+0x12b/0x270 [ 1702.766788][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1702.772159][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1702.777467][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1702.783020][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1702.787975][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1702.793087][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1702.798392][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1702.803700][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1702.808923][ C0] ? finish_swait+0xcd/0x1f0 [ 1702.813533][ C0] rcu_gp_kthread+0x99/0x390 [ 1702.818146][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1702.823352][ C0] ? __kthread_parkme+0x7b/0x200 [ 1702.828294][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1702.833422][ C0] kthread+0x711/0x8a0 [ 1702.837586][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1702.842789][ C0] ? __pfx_kthread+0x10/0x10 [ 1702.847386][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1702.852759][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1702.857951][ C0] ? __pfx_kthread+0x10/0x10 [ 1702.862559][ C0] ret_from_fork+0x4bc/0x870 [ 1702.867160][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1702.872291][ C0] ? __switch_to_asm+0x39/0x70 [ 1702.877055][ C0] ? __switch_to_asm+0x33/0x70 [ 1702.882021][ C0] ? __pfx_kthread+0x10/0x10 [ 1702.886609][ C0] ret_from_fork_asm+0x1a/0x30 [ 1702.891412][ C0] [ 1702.894434][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1702.900750][ C0] CPU: 0 UID: 0 PID: 23661 Comm: syz.0.5042 Not tainted syzkaller #0 PREEMPT(full) [ 1702.910113][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1702.920253][ C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 1702.927027][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 36 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 e1 74 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 c5 74 [ 1702.946905][ C0] RSP: 0018:ffffc9001bb7f240 EFLAGS: 00000246 [ 1702.953011][ C0] RAX: ffffffff81b4645b RBX: 1ffff110170e7ffd RCX: 0000000000080000 [ 1702.961093][ C0] RDX: ffffc9000cdfb000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1702.969082][ C0] RBP: ffffc9001bb7f3c0 R08: ffffffff8fc39677 R09: 1ffffffff1f872ce [ 1702.977194][ C0] R10: dffffc0000000000 R11: fffffbfff1f872cf R12: ffff8880b873ffe8 [ 1702.985196][ C0] R13: dffffc0000000000 R14: ffff8880b863b200 R15: 0000000000000001 [ 1702.993701][ C0] FS: 00007fe36deb26c0(0000) GS:ffff8881259e7000(0000) knlGS:0000000000000000 [ 1703.002638][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1703.009221][ C0] CR2: 000000110c2a905a CR3: 000000006ac90000 CR4: 00000000003526f0 [ 1703.017388][ C0] DR0: 0000000000000005 DR1: 0000000000000000 DR2: 0000000000000000 [ 1703.025383][ C0] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 1703.033566][ C0] Call Trace: [ 1703.036934][ C0] [ 1703.039889][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1703.045141][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1703.051489][ C0] ? free_pgd_range+0x144b/0x14c0 [ 1703.056528][ C0] ? rcu_is_watching+0x15/0xb0 [ 1703.061328][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1703.066524][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1703.071733][ C0] flush_tlb_mm_range+0x6b1/0x12d0 [ 1703.076848][ C0] ? unlink_file_vma_batch_add+0xda/0x1e0 [ 1703.082570][ C0] ? free_pgtables+0x8e0/0x9c0 [ 1703.087332][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1703.092886][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 1703.097998][ C0] tlb_flush_mmu+0x1a7/0x680 [ 1703.102694][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 1703.107286][ C0] vms_clear_ptes+0x42c/0x540 [ 1703.111975][ C0] ? __pfx_vms_clear_ptes+0x10/0x10 [ 1703.117184][ C0] ? mas_find+0xa7d/0xd30 [ 1703.121510][ C0] ? may_expand_vm+0x1af/0x2f0 [ 1703.126283][ C0] mmap_region+0x954/0x1c70 [ 1703.130893][ C0] ? __schedule+0x17ae/0x4cc0 [ 1703.135575][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1703.140587][ C0] ? mm_get_unmapped_area+0xa7/0xd0 [ 1703.145790][ C0] ? shmem_get_unmapped_area+0x2cf/0x910 [ 1703.151517][ C0] ? cap_mmap_addr+0xb0/0x100 [ 1703.156188][ C0] ? bpf_lsm_mmap_addr+0x9/0x20 [ 1703.161048][ C0] ? security_mmap_addr+0x71/0x270 [ 1703.166304][ C0] do_mmap+0xc45/0x10d0 [ 1703.170482][ C0] ? __pfx_do_mmap+0x10/0x10 [ 1703.175161][ C0] ? down_write_killable+0x178/0x230 [ 1703.180478][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 1703.186113][ C0] ? apparmor_mmap_file+0xc4/0xe0 [ 1703.191314][ C0] vm_mmap_pgoff+0x2a6/0x4d0 [ 1703.196019][ C0] ? __se_sys_futex+0x36f/0x400 [ 1703.200878][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1703.205996][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 1703.210935][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 1703.215727][ C0] do_syscall_64+0xfa/0xfa0 [ 1703.220233][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1703.225522][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.231610][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1703.236375][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.242386][ C0] RIP: 0033:0x7fe36cf8ec29 [ 1703.246911][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1703.266890][ C0] RSP: 002b:00007fe36deb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1703.275315][ C0] RAX: ffffffffffffffda RBX: 00007fe36d1d6090 RCX: 00007fe36cf8ec29 [ 1703.283915][ C0] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 1703.292062][ C0] RBP: 00007fe36d011e41 R08: ffffffffffffffff R09: 00000000ec776000 [ 1703.300115][ C0] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 1703.308177][ C0] R13: 00007fe36d1d6128 R14: 00007fe36d1d6090 R15: 00007fffddc879f8 [ 1703.316256][ C0]