last executing test programs: 2m48.230702637s ago: executing program 1 (id=1130): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) 2m47.991759621s ago: executing program 1 (id=1131): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000004b40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704ac26b7bfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd65293261006c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11"], 0x1, 0x483, &(0x7f0000000580)="$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") fdatasync(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) lseek(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000011c0)={0x0, 0x9, 0x0, [0x9, 0x7, 0x38d, 0x10000, 0x2], [0x5, 0x1414, 0x2f, 0x80000000, 0x8, 0x8001, 0x8, 0xfffffffffffffff7, 0x2e, 0x9, 0x7ff, 0x80, 0x80000001, 0x1, 0x7ff, 0x8001, 0x7, 0x7fffffff, 0x0, 0x7, 0x9, 0x1, 0x0, 0x5, 0x8, 0x2, 0x1ff, 0x1ff, 0x5, 0x2, 0x5, 0x3, 0x5, 0x4, 0x2, 0x6, 0x5, 0x3, 0x7f, 0x0, 0xcf4a, 0x7, 0x8, 0xf, 0x7fff, 0x2, 0x0, 0x10001, 0xffffffffffff0751, 0xfea7, 0x7fff, 0x6, 0x6, 0x0, 0x7, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x8000000000000001, 0x7, 0x3, 0x8, 0x2, 0x1, 0xffffffff, 0x7, 0x0, 0x9, 0x8, 0x8, 0x8000000000000000, 0x6, 0x0, 0x3, 0x7, 0x7, 0x6, 0x2, 0x50, 0xfffffffffffffff9, 0xbca0, 0x4, 0x5, 0xc, 0x8, 0x4ce, 0xfffffffffffffff7, 0xfff, 0x0, 0x9, 0x58, 0x411b39e4, 0x9, 0x4, 0x4, 0x0, 0x569, 0x6, 0x80000000000, 0x200, 0x3, 0x9, 0x1, 0x38e, 0xecde, 0x2, 0x7, 0xb, 0xfffffffffffffff9, 0x2, 0xfffffffffffffffc, 0x8, 0x5f33, 0x401, 0x42, 0x6, 0x4, 0x7]}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) fstat(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) io_uring_setup(0x3a72, &(0x7f0000000080)={0x0, 0x9b51, 0x20, 0x3, 0x118}) 2m46.12778588s ago: executing program 1 (id=1132): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)) 2m41.730816977s ago: executing program 1 (id=1141): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @device_b, @from_mac=@device_b, {0x9, 0xc5}}, @tdls_disc_req={0xc, 0xa, {0xff, {0x65, 0x12, {@random="c1ce23a07a61"}}}}}, 0x2f) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[], 0x14) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 2m40.120948942s ago: executing program 1 (id=1149): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) io_uring_setup(0x6e1e, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r3, 0x1) eventfd2(0x0, 0x0) r5 = inotify_init1(0x0) vmsplice(r5, 0x0, 0x0, 0x0) inotify_add_watch(r5, 0x0, 0x52000775) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2m38.368000074s ago: executing program 1 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x8b4ad455cb10f9c5, 0x6, 0x6}, 0x17}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0) 2m22.988989984s ago: executing program 32 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x8b4ad455cb10f9c5, 0x6, 0x6}, 0x17}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0) 25.28954789s ago: executing program 4 (id=1417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 11.466121759s ago: executing program 0 (id=1434): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000002150a74d26098b9f000000000000000000e50003000000000085100000fcaea24a188f2b5333b712ffffff2500feff0000000085100000faffffff9500000000000000d7f66030ab68f8c3d6c2e9b3a1973f1570c287447c8fa163680135819a6f6a86080bdcd3885029ee408ec5e4b64e1f37abf2d2e8a8cda5db3d87cc4d0609e204507c"], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) setuid(0xee01) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000480)={0x53, 0x4, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000500)="880acad5f317", 0x0, 0x2, 0x10002, 0xfffffffd, 0x0}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000380)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) 10.59107239s ago: executing program 4 (id=1437): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0xffdffff8, 0xffffffff, 0x5, "ff000000000000000000000000000200"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000200)={0x6, 0x80, 0xe000, 0xb3, 0x16, "041000"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x4) 8.818683193s ago: executing program 4 (id=1439): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) 8.810677934s ago: executing program 0 (id=1440): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0x3}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f000034f000/0x2000)=nil, 0x2000, 0x6}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f00000002c0)="ec0b3b", 0x3, 0xcde}) 8.71178358s ago: executing program 2 (id=1441): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000066681900d46e5fec6dfb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x80080) r5 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002500)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) r7 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e07042d0c"], 0xa) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x14, 0x11, "fee8a2ab78fc17c2d1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90ce8b1c06000000000000000300000000000000001000", [0xfffffffffffffffd, 0x1]}}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x10040, 0x0) 7.355000409s ago: executing program 0 (id=1443): keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) listen(r0, 0x90004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f64b0c4c012706f220d62d5f388d8736f723d3705be682c7569643db7c9ec6412278d", @ANYRESHEX=0x0, @ANYBLOB=',decompose,\x00'], 0xfe, 0x6b3, &(0x7f0000000780)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) lseek(0xffffffffffffffff, 0x10001, 0x0) gettid() connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) 6.550920206s ago: executing program 2 (id=1444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c001f00120000008800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 5.97943363s ago: executing program 0 (id=1445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 5.436682211s ago: executing program 2 (id=1446): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x28, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.052411644s ago: executing program 2 (id=1447): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x62, 0x1, 0x0}, &(0x7f0000000380)=0x40) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES32=r4, @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES64=0x0]}, 0x0) r5 = syz_io_uring_setup(0x6148, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x2241, 0x1b86, 0x1, 0x0, 0x0) r6 = io_uring_setup(0x7ed4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x2f9}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 5.047337814s ago: executing program 4 (id=1448): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x3, 0x1000000, 0x0, 0x1, 0x0, 0x8}, {0x409, 0x0, 0xfffffffffffffffe, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in6=@empty, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote}}}}}, 0x2e) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 3.889613742s ago: executing program 3 (id=1449): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000002150a74d26098b9f000000000000000000e50003000000000085100000fcaea24a188f2b5333b712ffffff2500feff0000000085100000faffffff9500000000000000d7f66030ab68f8c3d6c2e9b3a1973f1570c287447c8fa163680135819a6f6a86080bdcd3885029ee408ec5e4b64e1f37abf2d2e8a8cda5db3d87cc4d0609e204507c"], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) setuid(0xee01) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000480)={0x53, 0x4, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000500)="880acad5f317", 0x0, 0x2, 0x10002, 0xfffffffd, 0x0}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000380)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) 2.88570033s ago: executing program 3 (id=1450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) 1.822925332s ago: executing program 2 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) fsmount(0xffffffffffffffff, 0x1, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 699.813998ms ago: executing program 2 (id=1452): fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0xc327}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 498.92174ms ago: executing program 3 (id=1453): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=']) 462.685073ms ago: executing program 0 (id=1454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c001f00120000008800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 403.853026ms ago: executing program 4 (id=1455): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x28, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 248.280035ms ago: executing program 3 (id=1456): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98", 0x2}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x67, 0x1, 0x4, 0x5, 0x7f, 0x81}) 127.469892ms ago: executing program 3 (id=1457): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 76.159005ms ago: executing program 4 (id=1458): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x44904}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xa) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1.070909ms ago: executing program 3 (id=1459): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x8000, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 0s ago: executing program 0 (id=1460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) fsmount(0xffffffffffffffff, 0x1, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) kernel console output (not intermixed with test programs): "[5767] was attempted by ""[6490] [ 121.491086][ T28] kauditd_printk_skb: 1094 callbacks suppressed [ 121.491101][ T28] audit: type=1326 audit(1770989621.183:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 121.525861][ T28] audit: type=1326 audit(1770989621.183:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 121.559172][ T28] audit: type=1326 audit(1770989621.183:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 121.590909][ T28] audit: type=1326 audit(1770989621.183:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 121.624696][ T28] audit: type=1326 audit(1770989621.183:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 121.673891][ T28] audit: type=1326 audit(1770989621.183:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 121.722590][ T6489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.742990][ T28] audit: type=1326 audit(1770989621.183:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 121.817914][ T28] audit: type=1326 audit(1770989621.223:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 121.844320][ T6492] warning: `syz.1.224' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.863630][ T28] audit: type=1326 audit(1770989621.223:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 121.907279][ T28] audit: type=1326 audit(1770989621.223:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 123.082159][ T6527] ptrace attach of "./syz-executor exec"[5770] was attempted by "./syz-executor exec"[6527] [ 123.102974][ T6527] loop3: detected capacity change from 0 to 1024 [ 123.182380][ T6527] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 123.194872][ T6527] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 123.206058][ T6527] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 123.207427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.216756][ T6527] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 123.234702][ T6527] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 123.792258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.020259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.355754][ T6542] netlink: 'syz.2.243': attribute type 16 has an invalid length. [ 124.363584][ T6542] netlink: 'syz.2.243': attribute type 17 has an invalid length. [ 124.434117][ T6542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.389906][ T6555] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[6555] [ 126.464593][ T6563] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.926087][ T6577] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[6577] [ 126.951722][ T28] kauditd_printk_skb: 685 callbacks suppressed [ 126.952769][ T28] audit: type=1326 audit(1770989626.633:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.038833][ T28] audit: type=1326 audit(1770989626.633:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.083985][ T28] audit: type=1326 audit(1770989626.633:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.134194][ T28] audit: type=1326 audit(1770989626.633:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.165388][ T28] audit: type=1326 audit(1770989626.633:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.245087][ T28] audit: type=1326 audit(1770989626.633:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.313948][ T28] audit: type=1326 audit(1770989626.633:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.364751][ T28] audit: type=1326 audit(1770989626.633:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.407745][ T28] audit: type=1326 audit(1770989626.633:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.433235][ T28] audit: type=1326 audit(1770989626.633:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 127.654258][ T6586] netlink: 'syz.0.261': attribute type 16 has an invalid length. [ 127.662527][ T6586] netlink: 'syz.0.261': attribute type 17 has an invalid length. [ 127.801195][ T6586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.064556][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 129.114285][ T6606] capability: warning: `syz.2.268' uses 32-bit capabilities (legacy support in use) [ 129.213626][ T6605] vlan2: entered allmulticast mode [ 129.409007][ T6605] bridge1: entered allmulticast mode [ 131.712291][ T6611] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[6611] [ 131.845273][ T6622] syzkaller0: entered promiscuous mode [ 131.850834][ T6622] syzkaller0: entered allmulticast mode [ 134.073208][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.087001][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.537703][ T6654] syzkaller0: entered promiscuous mode [ 135.543356][ T6654] syzkaller0: entered allmulticast mode [ 135.567414][ T6652] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[6652] [ 135.598792][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 135.598806][ T28] audit: type=1326 audit(1770989635.273:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 135.641795][ T28] audit: type=1326 audit(1770989635.273:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 135.715890][ T28] audit: type=1326 audit(1770989635.273:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 135.738472][ T28] audit: type=1326 audit(1770989635.273:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 135.770472][ T28] audit: type=1326 audit(1770989635.273:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 135.819621][ T28] audit: type=1326 audit(1770989635.273:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 135.871679][ T28] audit: type=1326 audit(1770989635.273:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 137.620207][ T28] audit: type=1326 audit(1770989635.273:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 137.673883][ T28] audit: type=1326 audit(1770989635.273:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 137.730952][ T28] audit: type=1326 audit(1770989635.273:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 139.169939][ T6681] loop3: detected capacity change from 0 to 16 [ 139.211010][ T6681] erofs: (device loop3): mounted with root inode @ nid 36. [ 139.641746][ T6685] syzkaller0: entered promiscuous mode [ 139.647571][ T6685] syzkaller0: entered allmulticast mode [ 139.806181][ T6688] netlink: 104 bytes leftover after parsing attributes in process `syz.3.299'. [ 140.335973][ T6705] syzkaller0: entered promiscuous mode [ 140.345925][ T6707] netlink: 104 bytes leftover after parsing attributes in process `syz.3.308'. [ 140.374021][ T6705] syzkaller0: entered allmulticast mode [ 140.597880][ T6709] syzkaller0: entered promiscuous mode [ 140.624554][ T6709] syzkaller0: entered allmulticast mode [ 143.053071][ T6730] netlink: 104 bytes leftover after parsing attributes in process `syz.2.318'. [ 143.229779][ T6733] syzkaller0: entered promiscuous mode [ 143.243907][ T6733] syzkaller0: entered allmulticast mode [ 144.131489][ T6753] netlink: 104 bytes leftover after parsing attributes in process `syz.0.327'. [ 145.942647][ T6761] syzkaller0: entered promiscuous mode [ 145.953859][ T6761] syzkaller0: entered allmulticast mode [ 147.118217][ T6783] syzkaller0: entered promiscuous mode [ 147.136384][ T6783] syzkaller0: entered allmulticast mode [ 147.207020][ T6786] netlink: 104 bytes leftover after parsing attributes in process `syz.0.340'. [ 147.521727][ T6792] syzkaller0: entered promiscuous mode [ 147.532623][ T6792] syzkaller0: entered allmulticast mode [ 148.871403][ T6826] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[6826] [ 148.894130][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 148.894146][ T28] audit: type=1326 audit(1770989648.573:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 148.900975][ T6826] loop3: detected capacity change from 0 to 1024 [ 148.945879][ T6826] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 148.955478][ T6826] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 148.966484][ T6826] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 148.976242][ T6826] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 148.987711][ T6826] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 149.061073][ T28] audit: type=1326 audit(1770989648.573:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 149.083888][ T28] audit: type=1326 audit(1770989648.573:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 149.107853][ T28] audit: type=1326 audit(1770989648.573:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 149.132202][ T28] audit: type=1326 audit(1770989648.573:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 149.203864][ T28] audit: type=1326 audit(1770989648.583:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 149.274027][ T28] audit: type=1326 audit(1770989648.583:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 149.340617][ T28] audit: type=1326 audit(1770989648.583:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 149.355147][ T6836] syzkaller0: entered promiscuous mode [ 149.375659][ T28] audit: type=1326 audit(1770989648.583:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 149.397456][ T6836] syzkaller0: entered allmulticast mode [ 149.408483][ T28] audit: type=1326 audit(1770989648.583:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 149.807041][ T6828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.174227][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.374006][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 150.396555][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.410419][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.421274][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 150.432174][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.450701][ T23] usb 4-1: config 0 descriptor?? [ 151.338412][ T23] wacom 0003:056A:00B8.0001: unknown main item tag 0x0 [ 151.526106][ T23] wacom 0003:056A:00B8.0001: unknown main item tag 0x0 [ 151.533144][ T23] wacom 0003:056A:00B8.0001: unknown main item tag 0x0 [ 151.551165][ T23] wacom 0003:056A:00B8.0001: unknown main item tag 0x0 [ 151.559459][ T23] wacom 0003:056A:00B8.0001: unknown main item tag 0x0 [ 151.567826][ T23] wacom 0003:056A:00B8.0001: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 151.583373][ T23] wacom 0003:056A:00B8.0001: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.3-1/input0 [ 151.606897][ T23] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B8.0001/input/input5 [ 151.801425][ T23] usb 4-1: USB disconnect, device number 2 [ 151.946365][ T6829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.239470][ T6862] syzkaller0: entered promiscuous mode [ 152.263114][ T6862] syzkaller0: entered allmulticast mode [ 152.608664][ T6869] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[6869] [ 152.696174][ T6867] syzkaller0: entered promiscuous mode [ 152.712076][ T6867] syzkaller0: entered allmulticast mode [ 154.050481][ T6879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.188945][ T6902] syzkaller0: entered promiscuous mode [ 155.194973][ T6902] syzkaller0: entered allmulticast mode [ 155.327304][ T6904] syzkaller0: entered promiscuous mode [ 155.334237][ T6904] syzkaller0: entered allmulticast mode [ 156.212138][ T6880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.815669][ T6920] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[6920] [ 156.914744][ T28] kauditd_printk_skb: 469 callbacks suppressed [ 156.914760][ T28] audit: type=1326 audit(1770989656.523:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.044433][ T28] audit: type=1326 audit(1770989656.523:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.143647][ T28] audit: type=1326 audit(1770989656.523:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.221277][ T28] audit: type=1326 audit(1770989656.523:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.247816][ T28] audit: type=1326 audit(1770989656.523:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.270346][ T28] audit: type=1326 audit(1770989656.523:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.293548][ T28] audit: type=1326 audit(1770989656.523:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.293598][ T28] audit: type=1326 audit(1770989656.523:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.293640][ T28] audit: type=1326 audit(1770989656.523:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.293683][ T28] audit: type=1326 audit(1770989656.523:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 157.595684][ T6926] syzkaller0: entered promiscuous mode [ 157.595708][ T6926] syzkaller0: entered allmulticast mode [ 157.699757][ T6929] syzkaller0: entered promiscuous mode [ 157.705726][ T6929] syzkaller0: entered allmulticast mode [ 161.523469][ T6969] syzkaller0: entered promiscuous mode [ 161.530525][ T6969] syzkaller0: entered allmulticast mode [ 161.545575][ T6970] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[6970] [ 161.742767][ T6975] syzkaller0: entered promiscuous mode [ 161.749234][ T6975] syzkaller0: entered allmulticast mode [ 161.924525][ T28] kauditd_printk_skb: 367 callbacks suppressed [ 161.924540][ T28] audit: type=1326 audit(1770989661.623:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 161.966012][ T28] audit: type=1326 audit(1770989661.653:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 162.002135][ T28] audit: type=1326 audit(1770989661.653:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 162.024791][ T28] audit: type=1326 audit(1770989661.653:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 162.924321][ T28] audit: type=1326 audit(1770989661.653:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 163.024193][ T28] audit: type=1326 audit(1770989661.653:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 163.108218][ T28] audit: type=1326 audit(1770989661.653:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 163.163854][ T28] audit: type=1326 audit(1770989661.653:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 163.238311][ T28] audit: type=1326 audit(1770989661.653:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 163.332500][ T28] audit: type=1326 audit(1770989661.663:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feecf95c84e code=0x7ffc0000 [ 167.023445][ T7014] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[7014] [ 167.049945][ T7014] loop3: detected capacity change from 0 to 1024 [ 167.064343][ T7014] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 167.072973][ T7014] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 167.084453][ T7014] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 167.094287][ T7014] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 167.104587][ T7014] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 167.196174][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 167.196190][ T28] audit: type=1326 audit(1770989666.733:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 167.279497][ T28] audit: type=1326 audit(1770989666.733:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 167.303134][ T28] audit: type=1326 audit(1770989666.733:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 167.331575][ T28] audit: type=1326 audit(1770989666.733:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 167.356977][ T28] audit: type=1326 audit(1770989666.733:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 168.035403][ T28] audit: type=1326 audit(1770989666.733:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 168.150449][ T28] audit: type=1326 audit(1770989666.733:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 168.232141][ T7022] syzkaller0: entered promiscuous mode [ 168.235879][ T28] audit: type=1326 audit(1770989666.733:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 168.261681][ T28] audit: type=1326 audit(1770989666.733:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 168.285039][ T28] audit: type=1326 audit(1770989666.733:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 168.293705][ T7022] syzkaller0: entered allmulticast mode [ 168.647851][ T7028] netlink: 104 bytes leftover after parsing attributes in process `syz.0.412'. [ 170.079070][ T7038] syzkaller0: entered promiscuous mode [ 170.123831][ T7038] syzkaller0: entered allmulticast mode [ 170.916286][ T7047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.419'. [ 171.135802][ T7051] syz.0.421 uses obsolete (PF_INET,SOCK_PACKET) [ 171.369617][ T7053] syzkaller0: entered promiscuous mode [ 171.382114][ T7053] syzkaller0: entered allmulticast mode [ 173.705415][ T7069] syzkaller0: entered promiscuous mode [ 173.710976][ T7069] syzkaller0: entered allmulticast mode [ 174.449056][ T7079] netlink: 104 bytes leftover after parsing attributes in process `syz.0.432'. [ 174.802162][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 175.186119][ T7090] bridge2: port 1(veth5) entered blocking state [ 175.195055][ T7090] bridge2: port 1(veth5) entered disabled state [ 175.201984][ T7090] veth5: entered allmulticast mode [ 175.237964][ T7090] veth5: entered promiscuous mode [ 175.906880][ T7106] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[7106] [ 175.920575][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 175.920591][ T28] audit: type=1326 audit(1770989675.613:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 175.961152][ T28] audit: type=1326 audit(1770989675.613:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 175.983933][ T28] audit: type=1326 audit(1770989675.613:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 176.006548][ T28] audit: type=1326 audit(1770989675.613:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 176.039422][ T28] audit: type=1326 audit(1770989675.613:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 176.062635][ T28] audit: type=1326 audit(1770989675.613:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 176.086157][ T28] audit: type=1326 audit(1770989675.613:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 176.109195][ T28] audit: type=1326 audit(1770989675.613:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 176.137972][ T28] audit: type=1326 audit(1770989675.613:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 176.161085][ T28] audit: type=1326 audit(1770989675.613:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 178.435633][ T7119] kvm: kvm [7117]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe962 [ 183.548513][ T7168] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[7168] [ 183.558781][ T28] kauditd_printk_skb: 200 callbacks suppressed [ 183.558795][ T28] audit: type=1326 audit(1770989683.253:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.636063][ T28] audit: type=1326 audit(1770989683.253:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.704191][ T28] audit: type=1326 audit(1770989683.253:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.735534][ T28] audit: type=1326 audit(1770989683.253:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.757439][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'. [ 183.769729][ T28] audit: type=1326 audit(1770989683.283:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.796887][ T28] audit: type=1326 audit(1770989683.283:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.824886][ T28] audit: type=1326 audit(1770989683.283:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.854016][ T28] audit: type=1326 audit(1770989683.283:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.876795][ T28] audit: type=1326 audit(1770989683.283:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.907497][ T28] audit: type=1326 audit(1770989683.283:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 183.951971][ T7174] bridge1: port 1(veth3) entered blocking state [ 183.966781][ T7174] bridge1: port 1(veth3) entered disabled state [ 183.988379][ T7174] veth3: entered allmulticast mode [ 184.006201][ T7174] veth3: entered promiscuous mode [ 187.736424][ T7212] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[7212] [ 188.231266][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 188.355636][ T7201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.455848][ T7220] bridge3: port 1(veth7) entered blocking state [ 188.492552][ T7220] bridge3: port 1(veth7) entered disabled state [ 188.508071][ T7220] veth7: entered allmulticast mode [ 188.737628][ T7220] veth7: entered promiscuous mode [ 191.481253][ T7235] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 191.707752][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 193.044290][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.236097][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 194.585134][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.591546][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.673343][ T7338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.005087][ T5769] Bluetooth: hci2: command 0x0406 tx timeout [ 199.129279][ T7317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.324855][ T7358] x_tables: duplicate entry at hook 3 [ 199.344539][ T7358] netlink: 'syz.0.518': attribute type 16 has an invalid length. [ 199.352894][ T7358] netlink: 'syz.0.518': attribute type 17 has an invalid length. [ 199.395540][ T7358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.848977][ T7367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.175973][ T7374] nbd: must specify at least one socket [ 200.825490][ T7377] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[7377] [ 200.838779][ T28] kauditd_printk_skb: 529 callbacks suppressed [ 200.838794][ T28] audit: type=1326 audit(1770989700.533:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 200.893964][ T28] audit: type=1326 audit(1770989700.533:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 200.937523][ T28] audit: type=1326 audit(1770989700.533:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 200.981591][ T28] audit: type=1326 audit(1770989700.533:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 201.006683][ T28] audit: type=1326 audit(1770989700.543:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 201.031983][ T28] audit: type=1326 audit(1770989700.543:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 201.063713][ T28] audit: type=1326 audit(1770989700.543:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 201.089185][ T28] audit: type=1326 audit(1770989700.543:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 201.157523][ T28] audit: type=1326 audit(1770989700.543:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 201.224385][ T28] audit: type=1326 audit(1770989700.543:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 202.391580][ T5769] Bluetooth: hci3: link tx timeout [ 202.397455][ T5769] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.470817][ T7398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.865348][ T7417] netlink: 341 bytes leftover after parsing attributes in process `syz.1.536'. [ 204.727698][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 204.734675][ T7387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.353404][ T7434] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[7434] [ 207.440550][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 207.446704][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 207.494707][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 207.494722][ T28] audit: type=1326 audit(1770989707.183:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 207.555640][ T28] audit: type=1326 audit(1770989707.183:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 207.578372][ T28] audit: type=1326 audit(1770989707.183:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 207.623933][ T28] audit: type=1326 audit(1770989707.183:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 207.646460][ T28] audit: type=1326 audit(1770989707.183:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 207.684090][ T28] audit: type=1326 audit(1770989707.183:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 207.734059][ T28] audit: type=1326 audit(1770989707.183:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 207.794425][ T28] audit: type=1326 audit(1770989707.183:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 207.838781][ T28] audit: type=1326 audit(1770989707.183:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 209.523882][ T28] audit: type=1326 audit(1770989707.193:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 210.722081][ T7457] syzkaller0: entered promiscuous mode [ 210.733857][ T7457] syzkaller0: entered allmulticast mode [ 215.374315][ T5859] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 215.604213][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 215.618498][ T5859] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 215.639696][ T5859] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.650736][ T5859] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 215.660264][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.690514][ T5859] usb 1-1: config 0 descriptor?? [ 215.947807][ T5859] usbhid 1-1:0.0: can't add hid device: -71 [ 215.960779][ T5859] usbhid: probe of 1-1:0.0 failed with error -71 [ 215.971373][ T5859] usb 1-1: USB disconnect, device number 2 [ 216.070475][ T7485] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 216.100102][ T7488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.556'. [ 216.143253][ T7489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.556'. [ 216.914859][ T7525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.562'. [ 218.297045][ T7528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.434902][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 222.640856][ T7554] syzkaller0: entered promiscuous mode [ 222.662300][ T7554] syzkaller0: entered allmulticast mode [ 223.863482][ T51] Bluetooth: hci3: unexpected event 0x17 length: 9 > 6 [ 224.427381][ T7566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.956978][ T7584] netlink: 104 bytes leftover after parsing attributes in process `syz.1.580'. [ 228.011462][ T7626] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[7626] [ 228.021865][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 228.021880][ T28] audit: type=1326 audit(1770989727.713:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.080424][ T28] audit: type=1326 audit(1770989727.713:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.103303][ T28] audit: type=1326 audit(1770989727.713:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.135085][ T28] audit: type=1326 audit(1770989727.713:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.190615][ T28] audit: type=1326 audit(1770989727.713:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.217798][ T28] audit: type=1326 audit(1770989727.713:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.241743][ T28] audit: type=1326 audit(1770989727.713:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.283449][ T28] audit: type=1326 audit(1770989727.713:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.408987][ T28] audit: type=1326 audit(1770989727.713:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.500421][ T28] audit: type=1326 audit(1770989727.713:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feecf99bf79 code=0x7ffc0000 [ 228.841581][ T7635] binder: 7632:7635 ioctl 4018620d 0 returned -22 [ 231.643737][ C1] sched: RT throttling activated [ 249.565900][ T7798] block device autoloading is deprecated and will be removed. [ 252.383970][ T5859] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 252.631525][ T5859] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 252.663959][ T5859] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 252.685799][ T5859] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.704503][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 252.712573][ T5859] usb 3-1: SerialNumber: syz [ 252.757091][ T5859] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 252.774108][ T5859] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 252.788213][ T5859] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 253.290757][ T27] usb 3-1: USB disconnect, device number 2 [ 254.614928][ T7847] syz_tun: entered allmulticast mode [ 255.586621][ T51] Bluetooth: hci3: link tx timeout [ 255.592129][ T51] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 255.694292][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 255.883920][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 255.909124][ T23] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 255.918218][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.928902][ T23] usb 4-1: config 0 has no interface number 0 [ 255.949642][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 255.959033][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.967803][ T23] usb 4-1: Product: syz [ 255.972148][ T23] usb 4-1: Manufacturer: syz [ 255.976981][ T23] usb 4-1: SerialNumber: syz [ 256.005308][ T23] usb 4-1: config 0 descriptor?? [ 256.021822][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.031422][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.035663][ T23] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 256.044351][ T23] usb 4-1: No valid video chain found. [ 256.274988][ T5152] usb 4-1: USB disconnect, device number 3 [ 256.307576][ T7846] syz_tun: left allmulticast mode [ 257.605521][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 261.175623][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 267.351803][ T7972] tipc: Enabled bearer , priority 0 [ 267.377892][ T7970] tipc: Disabling bearer [ 275.620731][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 277.203640][ T8033] tipc: Enabling of bearer rejected, failed to enable media [ 281.196300][ T8071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.286552][ T8135] nbd0: detected capacity change from 0 to 63 [ 284.345597][ T51] block nbd0: Receive control failed (result -32) [ 284.358219][ T24] block nbd0: Dead connection, failed to find a fallback [ 284.373976][ T24] block nbd0: shutting down sockets [ 284.380751][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.391575][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 284.400925][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 284.410299][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 284.418194][ T24] Buffer I/O error on dev nbd0, logical block 2, async page read [ 284.433883][ T24] Buffer I/O error on dev nbd0, logical block 3, async page read [ 284.443020][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.453105][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 284.462818][ T96] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.472036][ T96] Buffer I/O error on dev nbd0, logical block 1, async page read [ 284.480464][ T96] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.489645][ T96] Buffer I/O error on dev nbd0, logical block 2, async page read [ 284.504429][ T24] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.513615][ T24] Buffer I/O error on dev nbd0, logical block 3, async page read [ 284.524254][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 284.533347][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 284.553821][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 284.564309][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 284.573918][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 284.584267][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 284.594949][ T8081] ldm_validate_partition_table(): Disk read failed. [ 284.604035][ T8081] Dev nbd0: unable to read RDB block 0 [ 284.611700][ T8081] nbd0: unable to read partition table [ 284.626658][ T8081] ldm_validate_partition_table(): Disk read failed. [ 284.635379][ T8081] Dev nbd0: unable to read RDB block 0 [ 284.642929][ T8081] nbd0: unable to read partition table [ 285.001448][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 285.324339][ T8139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.906809][ T8174] nbd1: detected capacity change from 0 to 63 [ 286.920361][ T51] block nbd1: Receive control failed (result -104) [ 288.896283][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 289.857931][ T8208] nbd: nbd0 already in use [ 291.656882][ T8211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.666457][ T8226] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[8226] [ 291.734242][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 291.734258][ T28] audit: type=1326 audit(1770989791.433:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 291.894213][ T28] audit: type=1326 audit(1770989791.433:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 292.032045][ T28] audit: type=1326 audit(1770989791.433:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 292.099848][ T28] audit: type=1326 audit(1770989791.433:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 292.127796][ T28] audit: type=1326 audit(1770989791.433:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 292.161285][ T28] audit: type=1326 audit(1770989791.433:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 292.189282][ T28] audit: type=1326 audit(1770989791.433:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 292.228262][ T28] audit: type=1326 audit(1770989791.433:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 292.261656][ T28] audit: type=1326 audit(1770989791.433:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 292.290241][ T28] audit: type=1326 audit(1770989791.433:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 293.843832][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 293.984890][ T8254] nbd2: detected capacity change from 0 to 63 [ 294.033522][ T51] block nbd2: Receive control failed (result -104) [ 295.723028][ T8267] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[8267] [ 297.306800][ T8272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.915901][ T8304] syzkaller0: entered promiscuous mode [ 299.726082][ T8304] syzkaller0: entered allmulticast mode [ 300.272628][ T8311] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[8311] [ 300.285227][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 300.374202][ T28] audit: type=1326 audit(1770989799.983:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 300.513128][ T28] audit: type=1326 audit(1770989799.983:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 300.565021][ T28] audit: type=1326 audit(1770989799.983:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 300.673877][ T28] audit: type=1326 audit(1770989799.983:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 300.847462][ T28] audit: type=1326 audit(1770989799.983:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 301.764722][ T28] audit: type=1326 audit(1770989799.983:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 301.884144][ T28] audit: type=1326 audit(1770989799.983:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 301.962795][ T28] audit: type=1326 audit(1770989799.983:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 302.058841][ T28] audit: type=1326 audit(1770989799.983:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 302.097025][ T28] audit: type=1326 audit(1770989799.983:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 303.376529][ T8330] x_tables: duplicate entry at hook 3 [ 304.556608][ T8350] syzkaller0: entered promiscuous mode [ 304.569568][ T8350] syzkaller0: entered allmulticast mode [ 305.577000][ T8371] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[8371] [ 306.013925][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 306.013943][ T28] audit: type=1326 audit(1770989805.293:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 306.114981][ T28] audit: type=1326 audit(1770989805.293:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 306.178622][ T28] audit: type=1326 audit(1770989805.293:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 306.374884][ T28] audit: type=1326 audit(1770989805.293:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 306.553963][ T28] audit: type=1326 audit(1770989805.293:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 306.601841][ T8389] x_tables: duplicate entry at hook 3 [ 306.703661][ T28] audit: type=1326 audit(1770989805.293:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 306.857550][ T28] audit: type=1326 audit(1770989805.293:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 306.995858][ T28] audit: type=1326 audit(1770989805.293:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 307.136112][ T28] audit: type=1326 audit(1770989805.293:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 307.166496][ T8393] syzkaller0: entered promiscuous mode [ 307.209492][ T8393] syzkaller0: entered allmulticast mode [ 307.251258][ T28] audit: type=1326 audit(1770989805.293:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 309.154582][ T8409] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[8409] [ 313.724421][ T8457] x_tables: duplicate entry at hook 3 [ 314.176054][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 314.894964][ T8457] netlink: 'syz.2.802': attribute type 16 has an invalid length. [ 314.902816][ T8457] netlink: 'syz.2.802': attribute type 17 has an invalid length. [ 314.927894][ T8457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.550080][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.557169][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.764978][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 30 seconds [ 318.217604][ T8485] x_tables: duplicate entry at hook 3 [ 318.353227][ T8485] netlink: 'syz.2.812': attribute type 16 has an invalid length. [ 318.387413][ T8485] netlink: 'syz.2.812': attribute type 17 has an invalid length. [ 318.454028][ T8485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.379039][ T8529] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[8529] [ 324.389051][ T28] kauditd_printk_skb: 184 callbacks suppressed [ 324.389066][ T28] audit: type=1326 audit(1770989824.083:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 324.445198][ T28] audit: type=1326 audit(1770989824.083:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 324.474648][ T28] audit: type=1326 audit(1770989824.113:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 324.504420][ T28] audit: type=1326 audit(1770989824.113:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 324.531436][ T28] audit: type=1326 audit(1770989824.113:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 324.559897][ T28] audit: type=1326 audit(1770989824.113:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 324.588800][ T28] audit: type=1326 audit(1770989824.113:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 324.619752][ T28] audit: type=1326 audit(1770989824.113:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 324.647394][ T28] audit: type=1326 audit(1770989824.113:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 324.681220][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 30 seconds [ 324.702066][ T28] audit: type=1326 audit(1770989824.113:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 325.314434][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 328.088638][ T8559] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[8559] [ 332.254120][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 333.787221][ T8596] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[8596] [ 333.816182][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 333.816197][ T28] audit: type=1326 audit(1770989833.493:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 333.943008][ T28] audit: type=1326 audit(1770989833.493:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 333.973873][ T28] audit: type=1326 audit(1770989833.493:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 334.067075][ T28] audit: type=1326 audit(1770989833.493:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 334.163886][ T28] audit: type=1326 audit(1770989833.493:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 334.219070][ T28] audit: type=1326 audit(1770989833.493:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 334.282269][ T28] audit: type=1326 audit(1770989833.493:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 336.433789][ T28] audit: type=1326 audit(1770989833.493:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 336.552221][ T28] audit: type=1326 audit(1770989833.493:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 336.636465][ T28] audit: type=1326 audit(1770989833.493:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 338.484089][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 338.595289][ T8638] x_tables: duplicate entry at hook 3 [ 338.644641][ T8638] netlink: 'syz.0.848': attribute type 16 has an invalid length. [ 338.720830][ T8638] netlink: 'syz.0.848': attribute type 17 has an invalid length. [ 338.780958][ T8638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.570514][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.857'. [ 347.608874][ T5137] udevd[5137]: worker [8081] /devices/virtual/block/nbd1 is taking a long time [ 348.254178][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 60 seconds [ 354.352695][ T8746] syzkaller0: entered promiscuous mode [ 354.358441][ T8746] syzkaller0: entered allmulticast mode [ 355.753975][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 60 seconds [ 357.033591][ T5137] udevd[5137]: worker [8150] /devices/virtual/block/nbd2 is taking a long time [ 357.426907][ T8782] syzkaller0: entered promiscuous mode [ 357.432470][ T8782] syzkaller0: entered allmulticast mode [ 357.576285][ T8786] syzkaller0: entered promiscuous mode [ 357.581866][ T8786] syzkaller0: entered allmulticast mode [ 360.113115][ T8827] x_tables: duplicate entry at hook 3 [ 360.200147][ T8828] netlink: 'syz.0.886': attribute type 16 has an invalid length. [ 360.275148][ T8828] netlink: 'syz.0.886': attribute type 17 has an invalid length. [ 360.389092][ T8828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.304563][ T8842] syzkaller0: entered promiscuous mode [ 362.323621][ T8842] syzkaller0: entered allmulticast mode [ 365.329995][ T8879] x_tables: duplicate entry at hook 3 [ 365.345396][ T8879] netlink: 'syz.1.910': attribute type 16 has an invalid length. [ 365.512752][ T8879] netlink: 'syz.1.910': attribute type 17 has an invalid length. [ 365.530726][ T8879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.452364][ T8886] syzkaller0: entered promiscuous mode [ 366.613315][ T8886] syzkaller0: entered allmulticast mode [ 369.125483][ T8940] syzkaller0: entered promiscuous mode [ 369.147340][ T8940] syzkaller0: entered allmulticast mode [ 370.819610][ T8952] syzkaller0: entered promiscuous mode [ 370.835679][ T8952] syzkaller0: entered allmulticast mode [ 375.188304][ T9029] syzkaller0: entered promiscuous mode [ 375.222679][ T9029] syzkaller0: entered allmulticast mode [ 376.415863][ T9050] syzkaller0: entered promiscuous mode [ 376.437684][ T9050] syzkaller0: entered allmulticast mode [ 378.427867][ T9087] syzkaller0: entered promiscuous mode [ 378.464766][ T9087] syzkaller0: entered allmulticast mode [ 378.892105][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.898702][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.905295][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 90 seconds [ 381.388283][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.945'. [ 381.693062][ T9106] syzkaller0: entered promiscuous mode [ 381.724057][ T9106] syzkaller0: entered allmulticast mode [ 384.553090][ T9149] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 384.639979][ T9149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.294937][ T27] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 385.326596][ T9162] syzkaller0: entered promiscuous mode [ 385.332294][ T9162] syzkaller0: entered allmulticast mode [ 385.430461][ T9166] syzkaller0: entered promiscuous mode [ 385.440943][ T9166] syzkaller0: entered allmulticast mode [ 385.488078][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 385.514180][ T27] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 385.545204][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.584632][ T27] usb 3-1: config 0 descriptor?? [ 385.591320][ T9147] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 385.854277][ T9179] syzkaller0: entered promiscuous mode [ 385.879214][ T9147] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 385.898604][ T9179] syzkaller0: entered allmulticast mode [ 385.924154][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 90 seconds [ 386.021753][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 386.716114][ T27] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 386.730580][ T27] usb 3-1: USB disconnect, device number 3 [ 386.783280][ T9189] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 386.817838][ T9189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.988459][ T9191] fido_id[9191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 387.331744][ T9209] syzkaller0: entered promiscuous mode [ 387.341827][ T9209] syzkaller0: entered allmulticast mode [ 387.488156][ T9217] syzkaller0: entered promiscuous mode [ 387.499256][ T9217] syzkaller0: entered allmulticast mode [ 387.726011][ T9222] syzkaller0: entered promiscuous mode [ 387.743844][ T9222] syzkaller0: entered allmulticast mode [ 388.050641][ T9238] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 388.116544][ T9238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.610689][ T9253] syzkaller0: entered promiscuous mode [ 388.623793][ T9253] syzkaller0: entered allmulticast mode [ 388.785433][ T9260] syzkaller0: entered promiscuous mode [ 388.790995][ T9260] syzkaller0: entered allmulticast mode [ 389.919234][ T9274] syzkaller0: entered promiscuous mode [ 391.413133][ T9274] syzkaller0: entered allmulticast mode [ 392.113583][ T9301] syzkaller0: entered promiscuous mode [ 392.125037][ T9301] syzkaller0: entered allmulticast mode [ 392.194071][ T9302] syzkaller0: entered promiscuous mode [ 392.199669][ T9302] syzkaller0: entered allmulticast mode [ 397.264610][ T9321] ======================================================= [ 397.264610][ T9321] WARNING: The mand mount option has been deprecated and [ 397.264610][ T9321] and is ignored by this kernel. Remove the mand [ 397.264610][ T9321] option from the mount to silence this warning. [ 397.264610][ T9321] ======================================================= [ 397.299901][ T9321] 9pnet_fd: Insufficient options for proto=fd [ 398.545796][ T9339] syzkaller0: entered promiscuous mode [ 398.562333][ T9339] syzkaller0: entered allmulticast mode [ 398.725899][ T9342] syzkaller0: entered promiscuous mode [ 398.731452][ T9342] syzkaller0: entered allmulticast mode [ 398.869972][ T9344] syzkaller0: entered promiscuous mode [ 398.887284][ T9344] syzkaller0: entered allmulticast mode [ 402.788945][ T9394] syzkaller0: entered promiscuous mode [ 402.808408][ T9394] syzkaller0: entered allmulticast mode [ 403.038961][ T9398] syzkaller0: entered promiscuous mode [ 403.059525][ T9398] syzkaller0: entered allmulticast mode [ 405.038929][ T9412] syzkaller0: entered promiscuous mode [ 405.044789][ T9412] syzkaller0: entered allmulticast mode [ 405.628166][ T9426] fuse: Bad value for 'fd' [ 405.635014][ T9424] syzkaller0: entered promiscuous mode [ 405.640576][ T9424] syzkaller0: entered allmulticast mode [ 405.918531][ T9430] usb usb7: usbfs: process 9430 (syz.3.1032) did not claim interface 0 before use [ 406.259919][ T9435] syzkaller0: entered promiscuous mode [ 406.279046][ T9435] syzkaller0: entered allmulticast mode [ 407.841430][ T9439] capability: warning: `syz.1.1034' uses deprecated v2 capabilities in a way that may be insecure [ 409.146536][ T9443] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1035'. [ 409.883956][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 120 seconds [ 410.158775][ T9452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1037'. [ 410.718909][ T9454] fuse: Bad value for 'fd' [ 410.855291][ T9458] syzkaller0: entered promiscuous mode [ 410.860845][ T9458] syzkaller0: entered allmulticast mode [ 412.800963][ T9482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1048'. [ 414.072266][ T9490] fuse: Bad value for 'fd' [ 414.431867][ T9495] syzkaller0: entered promiscuous mode [ 416.226630][ T9495] syzkaller0: entered allmulticast mode [ 416.255652][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 120 seconds [ 418.562548][ T9515] syzkaller0: entered promiscuous mode [ 418.598485][ T9515] syzkaller0: entered allmulticast mode [ 419.069832][ T9523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1060'. [ 420.384795][ T9529] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[9529] [ 422.405835][ T9535] syz_tun: entered allmulticast mode [ 422.412795][ T9534] syz_tun: left allmulticast mode [ 423.597004][ T9540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.865671][ T9557] syzkaller0: entered promiscuous mode [ 423.877265][ T9557] syzkaller0: entered allmulticast mode [ 423.963569][ T9562] syzkaller0: entered promiscuous mode [ 423.982020][ T9562] syzkaller0: entered allmulticast mode [ 424.376664][ T9574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1070'. [ 426.334098][ T9582] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[9582] [ 427.106872][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1076'. [ 428.195395][ T9608] syzkaller0: entered promiscuous mode [ 428.200942][ T9608] syzkaller0: entered allmulticast mode [ 428.649451][ T9634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1082'. [ 428.966945][ T9610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.423133][ T9642] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[9642] [ 431.437991][ T9660] syzkaller0: entered promiscuous mode [ 433.606461][ T9660] syzkaller0: entered allmulticast mode [ 433.969056][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1092'. [ 434.912574][ T9676] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[9676] [ 435.186704][ T9682] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1098'. [ 435.475804][ T9672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.983795][ T5853] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 436.104032][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 436.104050][ T28] audit: type=1326 audit(1770989935.793:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 436.163911][ T28] audit: type=1326 audit(1770989935.793:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 436.241496][ T28] audit: type=1326 audit(1770989935.803:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 436.274522][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 436.301770][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.336840][ T28] audit: type=1326 audit(1770989935.803:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 436.382755][ T9698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1103'. [ 436.409177][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.478563][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.848005][ T5853] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.867808][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.773787][ T28] audit: type=1326 audit(1770989935.803:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 437.795888][ T5853] usb 3-1: config 0 descriptor?? [ 437.874383][ T28] audit: type=1326 audit(1770989935.803:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 437.920392][ T28] audit: type=1326 audit(1770989935.803:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 437.951609][ T9703] syzkaller0: entered promiscuous mode [ 439.377554][ T9703] syzkaller0: entered allmulticast mode [ 439.395233][ T28] audit: type=1326 audit(1770989935.803:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 439.451700][ T28] audit: type=1326 audit(1770989935.833:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 439.456139][ T5853] usbhid 3-1:0.0: can't add hid device: -71 [ 439.480517][ T5853] usbhid: probe of 3-1:0.0 failed with error -71 [ 439.491346][ T5853] usb 3-1: USB disconnect, device number 4 [ 439.503418][ T28] audit: type=1326 audit(1770989935.833:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 440.353455][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.368286][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.468865][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 150 seconds [ 440.900282][ T9720] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[9720] [ 443.440058][ T9726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.251251][ T9749] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[9749] [ 445.261780][ T28] audit: type=1326 audit(1770989944.963:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 445.348109][ T28] audit: type=1326 audit(1770989944.963:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 445.371073][ T28] audit: type=1326 audit(1770989944.963:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 445.394061][ T28] audit: type=1326 audit(1770989944.963:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 445.417320][ T28] audit: type=1326 audit(1770989944.963:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 445.442057][ T28] audit: type=1326 audit(1770989944.963:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 445.478718][ T28] audit: type=1326 audit(1770989944.963:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 445.507184][ T28] audit: type=1326 audit(1770989944.983:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 445.556434][ T28] audit: type=1326 audit(1770989944.983:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 445.614119][ T28] audit: type=1326 audit(1770989944.983:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9745 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 446.774606][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 150 seconds [ 448.639849][ T9780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.246514][ T9810] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[9810] [ 451.164353][ T28] kauditd_printk_skb: 252 callbacks suppressed [ 451.164367][ T28] audit: type=1326 audit(1770989949.133:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.259940][ T28] audit: type=1326 audit(1770989949.133:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.285063][ T28] audit: type=1326 audit(1770989949.133:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.309349][ T28] audit: type=1326 audit(1770989949.133:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.339501][ T28] audit: type=1326 audit(1770989949.133:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.371148][ T28] audit: type=1326 audit(1770989949.133:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.415916][ T28] audit: type=1326 audit(1770989949.143:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.440684][ T28] audit: type=1326 audit(1770989949.143:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.470645][ T28] audit: type=1326 audit(1770989949.143:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.502686][ T28] audit: type=1326 audit(1770989949.143:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 451.727500][ T9824] syzkaller0: entered promiscuous mode [ 451.733068][ T9824] syzkaller0: entered allmulticast mode [ 456.068306][ T9879] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[9879] [ 456.173720][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 456.173735][ T28] audit: type=1326 audit(1770989955.863:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 456.217674][ T9881] fuse: Bad value for 'fd' [ 456.241169][ T28] audit: type=1326 audit(1770989955.903:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 456.293711][ T28] audit: type=1326 audit(1770989955.903:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 456.332889][ T28] audit: type=1326 audit(1770989955.903:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 456.377147][ T28] audit: type=1326 audit(1770989955.903:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 456.463747][ T28] audit: type=1326 audit(1770989955.903:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 456.515326][ T28] audit: type=1326 audit(1770989955.903:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 456.553078][ T9869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.563085][ T28] audit: type=1326 audit(1770989955.903:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 456.623786][ T28] audit: type=1326 audit(1770989955.903:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 456.683892][ T28] audit: type=1326 audit(1770989955.913:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6e95c84e code=0x7ffc0000 [ 460.803329][ T9918] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[9918] [ 461.185859][ T28] kauditd_printk_skb: 351 callbacks suppressed [ 461.185874][ T28] audit: type=1326 audit(1770989960.883:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.269138][ T28] audit: type=1326 audit(1770989960.883:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.353123][ T28] audit: type=1326 audit(1770989960.913:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.415298][ T28] audit: type=1326 audit(1770989960.913:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.478362][ T28] audit: type=1326 audit(1770989960.913:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.544664][ T28] audit: type=1326 audit(1770989960.913:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.575358][ T28] audit: type=1326 audit(1770989960.913:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.616116][ T28] audit: type=1326 audit(1770989960.913:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.661407][ T28] audit: type=1326 audit(1770989960.913:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.703222][ T28] audit: type=1326 audit(1770989960.923:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 461.872203][ T9926] fuse: Bad value for 'fd' [ 462.769600][ T9927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.057970][ T9963] fuse: Bad value for 'fd' [ 466.477302][ T9968] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[9968] [ 466.487883][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 466.487897][ T28] audit: type=1326 audit(1770989966.183:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 466.653828][ T28] audit: type=1326 audit(1770989966.183:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 466.753755][ T28] audit: type=1326 audit(1770989966.183:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 468.393734][ T28] audit: type=1326 audit(1770989966.183:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 468.543820][ T28] audit: type=1326 audit(1770989966.183:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 468.614466][ T28] audit: type=1326 audit(1770989966.183:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 468.693897][ T28] audit: type=1326 audit(1770989966.183:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 468.813377][ T28] audit: type=1326 audit(1770989966.223:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 468.933899][ T28] audit: type=1326 audit(1770989966.223:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 469.018599][ T28] audit: type=1326 audit(1770989966.223:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 469.524543][ T9973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.047966][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 180 seconds [ 473.358312][ T5137] udevd[5137]: worker [8081] /devices/virtual/block/nbd1 timeout; kill it [ 473.388702][ T5137] udevd[5137]: seq 11965 '/devices/virtual/block/nbd1' killed [ 474.808351][T10004] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[10004] [ 474.818407][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 474.818422][ T28] audit: type=1326 audit(1770989974.523:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 474.933181][ T28] audit: type=1326 audit(1770989974.523:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 475.024621][ T28] audit: type=1326 audit(1770989974.523:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 475.103728][ T28] audit: type=1326 audit(1770989974.523:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 475.179332][ T28] audit: type=1326 audit(1770989974.553:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 475.252913][ T28] audit: type=1326 audit(1770989974.553:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 475.324115][ T28] audit: type=1326 audit(1770989974.553:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 475.393864][ T28] audit: type=1326 audit(1770989974.553:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 475.463789][ T28] audit: type=1326 audit(1770989974.553:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 475.563692][ T28] audit: type=1326 audit(1770989974.553:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0259bf79 code=0x7ffc0000 [ 475.875231][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 475.886470][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 475.894781][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 475.903523][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 475.921907][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 475.929505][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 476.563302][T10009] chnl_net:caif_netlink_parms(): no params data found [ 476.768703][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.795657][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.815913][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 180 seconds [ 476.832219][T10009] bridge_slave_0: entered allmulticast mode [ 476.852963][T10009] bridge_slave_0: entered promiscuous mode [ 476.870294][T10009] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.903174][T10009] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.926413][T10009] bridge_slave_1: entered allmulticast mode [ 476.951828][T10009] bridge_slave_1: entered promiscuous mode [ 477.141009][T10015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.221960][T10009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.234619][T10009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.303170][T10009] team0: Port device team_slave_0 added [ 478.012236][T10009] team0: Port device team_slave_1 added [ 478.031673][ T5774] Bluetooth: hci4: command tx timeout [ 478.054674][T10009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.061705][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.088566][T10009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.125463][T10009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.132492][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.228847][T10009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.377040][T10009] hsr_slave_0: entered promiscuous mode [ 478.393102][T10009] hsr_slave_1: entered promiscuous mode [ 478.426665][T10009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.434447][T10009] Cannot create hsr debugfs directory [ 478.802978][T10037] syzkaller0: entered promiscuous mode [ 478.826204][T10037] syzkaller0: entered allmulticast mode [ 479.110886][T10009] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 479.254939][T10009] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 479.287559][T10009] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.357501][T10009] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 481.011001][ T5774] Bluetooth: hci4: command tx timeout [ 481.265338][T10061] x_tables: duplicate entry at hook 3 [ 481.410973][T10061] netlink: 'syz.2.1188': attribute type 16 has an invalid length. [ 481.467019][T10061] netlink: 'syz.2.1188': attribute type 17 has an invalid length. [ 481.562712][T10061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.668504][T10009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.736395][T10009] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.794903][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.802130][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.899243][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.906563][ T6215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.057838][ T5137] udevd[5137]: worker [8150] /devices/virtual/block/nbd2 timeout; kill it [ 482.077285][ T5137] udevd[5137]: seq 11984 '/devices/virtual/block/nbd2' killed [ 482.234717][T10062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.812779][T10009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.044185][ T5774] Bluetooth: hci4: command tx timeout [ 483.701582][T10009] veth0_vlan: entered promiscuous mode [ 483.751477][T10009] veth1_vlan: entered promiscuous mode [ 483.925687][T10009] veth0_macvtap: entered promiscuous mode [ 484.057053][T10009] veth1_macvtap: entered promiscuous mode [ 484.115110][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.144646][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.167711][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.198517][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.229750][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.267245][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.301356][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.364504][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.443742][ T5774] Bluetooth: hci4: command tx timeout [ 485.450257][T10009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.548456][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.585405][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.623793][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.673889][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.723840][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.777927][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.803687][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.843819][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.895625][T10009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.094112][T10090] syzkaller0: entered promiscuous mode [ 486.112139][T10090] syzkaller0: entered allmulticast mode [ 486.178196][T10009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.243831][T10009] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.311414][T10009] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.354090][T10009] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.108541][ T9382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.134005][ T9382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.268625][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.290244][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.610130][T10103] syzkaller0: entered promiscuous mode [ 487.634345][T10103] syzkaller0: entered allmulticast mode [ 488.425351][T10105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.650841][T10173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.145921][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 210 seconds [ 501.666151][T10223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.767568][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.794855][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.209583][T10233] syzkaller0: entered promiscuous mode [ 502.240833][T10233] syzkaller0: entered allmulticast mode [ 505.978155][T10249] kvm: kvm [10245]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8166 [ 506.894642][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 210 seconds [ 507.025920][T10263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.824141][T10299] x_tables: duplicate entry at hook 3 [ 509.837325][T10299] netlink: 'syz.4.1235': attribute type 16 has an invalid length. [ 509.859293][T10299] netlink: 'syz.4.1235': attribute type 17 has an invalid length. [ 509.944983][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 509.945000][ T28] audit: type=1326 audit(1770990009.643:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 510.021331][ T28] audit: type=1326 audit(1770990009.643:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 510.064744][ T28] audit: type=1326 audit(1770990009.643:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 510.123251][ T28] audit: type=1326 audit(1770990009.673:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 510.180223][ T28] audit: type=1326 audit(1770990009.673:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 510.204518][T10299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.229115][ T28] audit: type=1326 audit(1770990009.673:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 511.463720][ T28] audit: type=1326 audit(1770990009.673:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 511.574452][ T28] audit: type=1326 audit(1770990009.673:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 511.643877][ T28] audit: type=1326 audit(1770990009.673:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 511.713926][ T28] audit: type=1326 audit(1770990009.673:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 518.224226][T10347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.359374][ T5774] Bluetooth: hci3: unexpected event for opcode 0x201c [ 519.395269][T10364] syzkaller0: entered promiscuous mode [ 519.400829][T10364] syzkaller0: entered allmulticast mode [ 526.265092][T10403] syzkaller0: entered promiscuous mode [ 526.270653][T10403] syzkaller0: entered allmulticast mode [ 527.471042][T10409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.798309][T10432] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 530.829655][T10432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.970670][T10432] bond4: (slave geneve3): making interface the new active one [ 531.016946][T10432] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 531.244729][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 240 seconds [ 531.350312][T10432] syz.2.1279 (10432) used greatest stack depth: 19920 bytes left [ 534.139039][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1286'. [ 535.884292][T10460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.073901][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 240 seconds [ 538.298617][T10481] syzkaller0: entered promiscuous mode [ 538.343231][T10481] syzkaller0: entered allmulticast mode [ 539.944505][T10512] raw_sendmsg: syz.0.1299 forgot to set AF_INET. Fix it! [ 540.719696][T10510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.271346][T10532] syzkaller0: entered promiscuous mode [ 541.285202][T10532] syzkaller0: entered allmulticast mode [ 546.295678][T10563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.561257][T10624] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 555.787108][T10624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 558.449655][T10648] syzkaller0: entered promiscuous mode [ 558.463806][T10648] syzkaller0: entered allmulticast mode [ 559.423524][T10664] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 561.123143][T10664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.165644][T10671] bond2: (slave geneve2): making interface the new active one [ 561.256636][T10671] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 561.293825][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 270 seconds [ 563.208129][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.214762][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.465073][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 567.700851][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 270 seconds [ 567.829224][T10734] syzkaller0: entered promiscuous mode [ 567.878084][T10734] syzkaller0: entered allmulticast mode [ 568.339216][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 571.068251][T10761] ptrace attach of "./syz-executor exec"[10009] was attempted by ""[10761] [ 571.102438][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 571.102455][ T28] audit: type=1326 audit(1770990070.773:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 571.736646][ T28] audit: type=1326 audit(1770990070.773:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 571.805898][ T28] audit: type=1326 audit(1770990070.773:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 571.869352][ T28] audit: type=1326 audit(1770990070.773:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 571.943992][ T28] audit: type=1326 audit(1770990070.773:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 572.004503][ T28] audit: type=1326 audit(1770990070.773:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 572.054099][ T28] audit: type=1326 audit(1770990070.773:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 572.118893][ T28] audit: type=1326 audit(1770990070.773:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 572.198471][ T28] audit: type=1326 audit(1770990070.773:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 572.264597][ T28] audit: type=1326 audit(1770990070.773:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa20d9bf79 code=0x7ffc0000 [ 573.867897][T10788] syzkaller0: entered promiscuous mode [ 573.873453][T10788] syzkaller0: entered allmulticast mode [ 575.947413][T10815] ptrace attach of "./syz-executor exec"[5767] was attempted by ""[10815] [ 576.106124][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 576.106141][ T28] audit: type=1326 audit(1770990075.763:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 576.221115][ T28] audit: type=1326 audit(1770990075.763:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 576.387248][ T28] audit: type=1326 audit(1770990075.763:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 576.495484][ T28] audit: type=1326 audit(1770990075.763:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 576.724540][ T28] audit: type=1326 audit(1770990075.763:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 576.747803][ T28] audit: type=1326 audit(1770990075.763:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 576.782360][ T28] audit: type=1326 audit(1770990075.763:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 576.854127][ T28] audit: type=1326 audit(1770990075.763:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 576.923975][ T28] audit: type=1326 audit(1770990075.773:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 576.974968][ T28] audit: type=1326 audit(1770990075.773:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c875c84e code=0x7ffc0000 [ 578.441135][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 580.458116][T10833] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1382'. [ 581.025980][T10867] ptrace attach of "./syz-executor exec"[5767] was attempted by "./syz-executor exec"[10867] [ 582.565785][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 582.565806][ T28] audit: type=1326 audit(1770990080.733:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 582.603720][ T28] audit: type=1326 audit(1770990080.733:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 582.664058][ T28] audit: type=1326 audit(1770990080.733:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 582.820832][ T28] audit: type=1326 audit(1770990080.733:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 582.885122][ T28] audit: type=1326 audit(1770990080.733:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 582.959968][ T28] audit: type=1326 audit(1770990080.733:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 582.983674][ T28] audit: type=1326 audit(1770990080.733:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 583.006667][ T28] audit: type=1326 audit(1770990080.733:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 583.123837][ T28] audit: type=1326 audit(1770990080.733:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 583.213907][ T28] audit: type=1326 audit(1770990080.733:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c879bf79 code=0x7ffc0000 [ 584.587024][T10892] tipc: Started in network mode [ 584.592818][T10892] tipc: Node identity 621b1b2b44a7, cluster identity 4711 [ 584.624246][T10892] tipc: Enabled bearer , priority 0 [ 584.802526][T10898] syzkaller0: entered promiscuous mode [ 584.811528][T10898] syzkaller0: entered allmulticast mode [ 584.821679][T10898] tipc: Resetting bearer [ 584.840437][T10890] tipc: Resetting bearer [ 586.174319][T10919] ptrace attach of "./syz-executor exec"[10009] was attempted by ""[10919] [ 589.509853][T10890] tipc: Disabling bearer [ 589.519477][ T5853] tipc: Node number set to 649861931 [ 589.527703][T10921] netlink: 'syz.2.1404': attribute type 1 has an invalid length. [ 589.536347][T10921] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 591.365979][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 300 seconds [ 591.745955][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 591.975654][T10983] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 592.080475][T10983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 592.162503][T10985] bond3: (slave geneve3): making interface the new active one [ 592.332991][T10985] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 592.904803][T10990] tipc: Started in network mode [ 592.909854][T10990] tipc: Node identity 425152b716e8, cluster identity 4711 [ 592.944064][T10990] tipc: Enabled bearer , priority 0 [ 594.301795][T10991] syzkaller0: entered promiscuous mode [ 594.322218][T10991] syzkaller0: entered allmulticast mode [ 594.362515][T10991] tipc: Resetting bearer [ 594.407740][T10988] tipc: Resetting bearer [ 595.127114][T11014] Bluetooth: MGMT ver 1.22 [ 597.773886][ T8142] block nbd2: Possible stuck request ffff888022280000: control (read@0,4096B). Runtime 300 seconds [ 601.126577][T11024] Bluetooth: hci4: command 0x0406 tx timeout [ 601.345316][T11032] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[11032] [ 601.355415][ T28] kauditd_printk_skb: 312 callbacks suppressed [ 601.355429][ T28] audit: type=1326 audit(1770990101.053:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 601.476551][ T28] audit: type=1326 audit(1770990101.053:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 601.513899][ T28] audit: type=1326 audit(1770990101.053:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 601.561193][ T28] audit: type=1326 audit(1770990101.053:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 601.613820][ T28] audit: type=1326 audit(1770990101.083:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 601.723750][ T28] audit: type=1326 audit(1770990101.083:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 601.790530][ T28] audit: type=1326 audit(1770990101.083:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 601.858518][ T28] audit: type=1326 audit(1770990101.083:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 601.939632][ T28] audit: type=1326 audit(1770990101.083:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 602.013809][ T28] audit: type=1326 audit(1770990101.083:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6e99bf79 code=0x7ffc0000 [ 606.640342][T10988] tipc: Disabling bearer [ 606.658787][ T23] tipc: Node number set to 1421431479 [ 610.156033][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 611.462605][T11080] tipc: Enabled bearer , priority 0 [ 611.595825][T11080] syzkaller0: entered promiscuous mode [ 611.617390][T11080] syzkaller0: entered allmulticast mode [ 611.636113][T11080] tipc: Resetting bearer [ 611.683405][T11078] tipc: Resetting bearer [ 616.747418][T11078] tipc: Disabling bearer [ 617.021375][T11128] syzkaller0: entered promiscuous mode [ 617.040672][T11128] syzkaller0: entered allmulticast mode [ 618.568070][T11143] team0: No ports can be present during mode change [ 618.603739][ T29] INFO: task udevd:8081 blocked for more than 145 seconds. [ 618.613597][ T29] Not tainted syzkaller #0 [ 618.618593][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.673772][ T29] task:udevd state:D stack:24200 pid:8081 ppid:5137 flags:0x00004006 [ 618.703925][ T29] Call Trace: [ 618.711889][ T29] [ 618.723009][ T29] __schedule+0x1553/0x45a0 [ 618.738377][ T29] ? asan.module_dtor+0x20/0x20 [ 618.760265][ T29] ? mark_lock+0x94/0x320 [ 618.772815][ T29] ? lock_chain_count+0x20/0x20 [ 618.786922][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 618.804872][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 618.820697][ T29] schedule+0xbd/0x170 [ 619.836043][ T29] io_schedule+0x80/0xd0 [ 619.840455][ T29] folio_wait_bit_common+0x714/0xfa0 [ 619.873664][ T29] ? folio_wait_bit+0x30/0x30 [ 619.878691][ T29] ? _compound_head+0x120/0x120 [ 619.884468][ T29] ? filemap_add_folio+0x192/0x3c0 [ 619.893101][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 619.901533][ T29] ? blkdev_writepage+0x30/0x30 [ 619.926104][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 619.938125][ T29] ? blkdev_writepage+0x30/0x30 [ 619.948915][ T29] read_part_sector+0xd2/0x340 [ 619.966004][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 619.979030][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 619.999518][ T29] ? put_partition+0x370/0x370 [ 620.007100][ T29] ? alloc_pages+0x4dc/0x740 [ 620.017653][ T29] bdev_disk_changed+0x740/0x1420 [ 620.033747][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 620.039151][ T29] ? iput+0x343/0x920 [ 620.043225][ T29] blkdev_get_whole+0x30d/0x390 [ 620.063656][ T29] blkdev_get_by_dev+0x279/0x600 [ 620.068707][ T29] blkdev_open+0x152/0x360 [ 620.073194][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 620.093718][ T29] do_dentry_open+0x8c6/0x1500 [ 620.098609][ T29] path_openat+0x27f1/0x3230 [ 620.103277][ T29] ? do_sys_openat2+0xda/0x1d0 [ 621.298067][ T29] ? verify_lock_unused+0x140/0x140 [ 621.303390][ T29] ? do_filp_open+0x430/0x430 [ 621.333671][ T29] ? __virt_addr_valid+0x18c/0x540 [ 621.338925][ T29] do_filp_open+0x1f5/0x430 [ 621.343477][ T29] ? vfs_tmpfile+0x490/0x490 [ 621.363719][ T29] ? _raw_spin_unlock+0x28/0x40 [ 621.368676][ T29] ? alloc_fd+0x58f/0x630 [ 621.373081][ T29] do_sys_openat2+0x134/0x1d0 [ 621.393608][ T29] ? do_sys_open+0xe0/0xe0 [ 621.398134][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 621.413636][ T29] ? lock_chain_count+0x20/0x20 [ 621.418597][ T29] __x64_sys_openat+0x139/0x160 [ 621.423516][ T29] do_syscall_64+0x55/0xa0 [ 621.442504][ T29] ? clear_bhb_loop+0x40/0x90 [ 621.448084][ T8142] block nbd1: Possible stuck request ffff888022228000: control (read@0,4096B). Runtime 330 seconds [ 621.474014][ T29] ? clear_bhb_loop+0x40/0x90 [ 621.478795][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.503775][ T29] RIP: 0033:0x7f5c7daa7407 [ 621.508313][ T29] RSP: 002b:00007fffbef54ea0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 621.534753][ T29] RAX: ffffffffffffffda RBX: 00007f5c7e298880 RCX: 00007f5c7daa7407 [ 621.542826][ T29] RDX: 00000000000a0800 RSI: 000055bc63de5ba0 RDI: ffffffffffffff9c [ 621.589254][ T29] RBP: 000055bc63dc1910 R08: 0000000000000000 R09: 0000000000000000 [ 621.597487][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055bc63ddb320 [ 621.624051][ T29] R13: 000055bc63dd9410 R14: 0000000000000000 R15: 000055bc63ddb320 [ 621.632135][ T29] [ 621.653720][ T29] [ 621.653720][ T29] Showing all locks held in the system: [ 621.662230][ T29] 1 lock held by khungtaskd/29: [ 621.683642][ T29] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 621.703777][ T29] 2 locks held by kworker/u4:8/3504: [ 621.709167][ T29] 2 locks held by getty/5529: [ 621.723675][ T29] #0: ffff888031dea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 621.748537][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 621.773511][ T29] 2 locks held by syz-executor/5767: [ 621.779181][ T29] 2 locks held by syz-executor/5776: [ 621.803720][ T29] 1 lock held by udevd/8081: [ 621.808411][ T29] #0: ffff888141b564c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 621.849087][ T29] 1 lock held by udevd/8150: [ 621.861307][ T29] #0: ffff8880221734c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 621.884085][ T29] [ 621.886484][ T29] ============================================= [ 621.886484][ T29] [ 621.933658][ T29] NMI backtrace for cpu 0 [ 621.938097][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 621.945340][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 621.955440][ T29] Call Trace: [ 621.958765][ T29] [ 621.961746][ T29] dump_stack_lvl+0x18c/0x250 [ 621.966491][ T29] ? show_regs_print_info+0x20/0x20 [ 621.971799][ T29] ? load_image+0x400/0x400 [ 621.976374][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 621.981468][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 621.987691][ T29] ? _printk+0xde/0x130 [ 621.991897][ T29] ? load_image+0x400/0x400 [ 621.996450][ T29] ? load_image+0x400/0x400 [ 622.000993][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 622.007096][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 622.013115][ T29] watchdog+0xf3d/0xf80 [ 622.017334][ T29] ? watchdog+0x1e1/0xf80 [ 622.021736][ T29] kthread+0x2fa/0x390 [ 622.025874][ T29] ? hungtask_pm_notify+0x90/0x90 [ 622.030956][ T29] ? kthread_blkcg+0xd0/0xd0 [ 622.035575][ T29] ret_from_fork+0x48/0x80 [ 622.040022][ T29] ? kthread_blkcg+0xd0/0xd0 [ 622.044658][ T29] ret_from_fork_asm+0x11/0x20 [ 622.049518][ T29] [ 622.053428][ T29] Sending NMI from CPU 0 to CPUs 1: [ 622.059162][ C1] NMI backtrace for cpu 1 [ 622.059174][ C1] CPU: 1 PID: 60 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 622.059191][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 622.059202][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 622.059273][ C1] RIP: 0010:unwind_next_frame+0x751/0x2970 [ 622.059293][ C1] Code: 24 08 88 18 45 0f b7 37 41 83 e6 0f 4c 89 f7 48 c7 c6 60 07 fa 8c e8 fe da 4b 00 41 83 fe 05 7f 7b 41 83 fe 03 48 8b 5c 24 30 <0f> 8f e3 00 00 00 41 83 fe 02 0f 84 a3 01 00 00 41 83 fe 03 0f 85 [ 622.059307][ C1] RSP: 0018:ffffc900015b7598 EFLAGS: 00000202 [ 622.059321][ C1] RAX: 0000000000000008 RBX: ffffffff8f0efb72 RCX: 0000000000000003 [ 622.059332][ C1] RDX: ffffffff813b3d62 RSI: ffffffff8cfa0760 RDI: 0000000000000005 [ 622.059344][ C1] RBP: ffffc900015b76b8 R08: ffff88801cec1e00 R09: 0000000000000008 [ 622.059355][ C1] R10: 0000000000000009 R11: 0000000000000000 R12: ffffc900015b7668 [ 622.059366][ C1] R13: dffffc0000000000 R14: 0000000000000005 R15: ffffffff8f0efb76 [ 622.059378][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 622.059392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.059404][ C1] CR2: 000055557d928a28 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 622.059419][ C1] Call Trace: [ 622.059425][ C1] [ 622.059437][ C1] ? kthread+0x2fa/0x390 [ 622.059455][ C1] ? kthread+0x2fa/0x390 [ 622.059470][ C1] ? stack_trace_save+0x100/0x100 [ 622.059490][ C1] arch_stack_walk+0x144/0x190 [ 622.059512][ C1] ? kthread+0x2fa/0x390 [ 622.059529][ C1] stack_trace_save+0xaa/0x100 [ 622.059550][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 622.059569][ C1] ? skb_release_data+0x634/0x800 [ 622.059613][ C1] ? worker_thread+0xa55/0xfc0 [ 622.059632][ C1] ? kthread+0x2fa/0x390 [ 622.059647][ C1] ? ret_from_fork+0x48/0x80 [ 622.059667][ C1] ? ret_from_fork_asm+0x11/0x20 [ 622.059693][ C1] kasan_set_track+0x4e/0x70 [ 622.059711][ C1] ? kasan_set_track+0x4e/0x70 [ 622.059728][ C1] ? kasan_save_free_info+0x2e/0x50 [ 622.059756][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 622.059773][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 622.059789][ C1] ? kmem_cache_free+0xf8/0x270 [ 622.059812][ C1] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 622.059827][ C1] ? process_scheduled_works+0xa5d/0x15d0 [ 622.059848][ C1] ? worker_thread+0xa55/0xfc0 [ 622.059866][ C1] ? kthread+0x2fa/0x390 [ 622.059905][ C1] ? kmem_cache_free+0xf8/0x270 [ 622.059928][ C1] kasan_save_free_info+0x2e/0x50 [ 622.059950][ C1] ____kasan_slab_free+0x126/0x1e0 [ 622.059970][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 622.059989][ C1] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 622.060005][ C1] kmem_cache_free+0xf8/0x270 [ 622.060031][ C1] nsim_dev_trap_report_work+0x76f/0xb00 [ 622.060057][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 622.060078][ C1] process_scheduled_works+0xa5d/0x15d0 [ 622.060114][ C1] ? assign_work+0x430/0x430 [ 622.060137][ C1] ? assign_work+0x3d0/0x430 [ 622.060160][ C1] worker_thread+0xa55/0xfc0 [ 622.060194][ C1] kthread+0x2fa/0x390 [ 622.060209][ C1] ? pr_cont_work+0x560/0x560 [ 622.060229][ C1] ? kthread_blkcg+0xd0/0xd0 [ 622.060245][ C1] ret_from_fork+0x48/0x80 [ 622.060264][ C1] ? kthread_blkcg+0xd0/0xd0 [ 622.060293][ C1] ret_from_fork_asm+0x11/0x20 [ 622.060323][ C1] [ 622.239112][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 622.239178][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 622.239256][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 622.239289][ T29] Call Trace: [ 622.239311][ T29] [ 622.239332][ T29] dump_stack_lvl+0x18c/0x250 [ 622.239431][ T29] ? show_regs_print_info+0x20/0x20 [ 622.239521][ T29] ? load_image+0x400/0x400 [ 622.239616][ T29] panic+0x2dc/0x730 [ 622.239672][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 622.239763][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 622.239817][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 622.239915][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 622.240013][ T29] watchdog+0xf7c/0xf80 [ 622.240089][ T29] ? watchdog+0x1e1/0xf80 [ 622.240183][ T29] kthread+0x2fa/0x390 [ 622.240236][ T29] ? hungtask_pm_notify+0x90/0x90 [ 622.240306][ T29] ? kthread_blkcg+0xd0/0xd0 [ 622.240361][ T29] ret_from_fork+0x48/0x80 [ 622.240424][ T29] ? kthread_blkcg+0xd0/0xd0 [ 622.240472][ T29] ret_from_fork_asm+0x11/0x20 [ 622.499685][ T29] [ 622.503424][ T29] Kernel Offset: disabled [ 622.507775][ T29] Rebooting in 86400 seconds..