last executing test programs: 35m6.342662195s ago: executing program 2 (id=68): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 35m5.372336721s ago: executing program 2 (id=71): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) 35m5.285622879s ago: executing program 2 (id=72): socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x200008c0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) socket$nl_route(0x10, 0x3, 0x0) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000980)=""/4096, 0x1000) syz_open_dev$dri(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0x8000, 0x1000, 0x4, 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @sdr={0x3132564e, 0x4}}) move_mount(0xffffffffffffffff, 0x0, r0, 0x0, 0x46) 35m5.119080565s ago: executing program 2 (id=73): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) read$FUSE(r1, &(0x7f0000002800)={0x2020}, 0x2020) 35m4.720574555s ago: executing program 2 (id=76): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x2be, &(0x7f0000000140)={0x0, 0x978, 0x80, 0x2, 0x1000111}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = io_uring_setup(0x549d, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac14"], 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r4}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x41, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000700)=""/32, &(0x7f0000000680)=0x20) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) 35m4.35910183s ago: executing program 2 (id=78): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x200003e1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x1ff}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x100}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x47b2}, @TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r6 = socket$alg(0x26, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xb, 0x4}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xffff, 0x0, 0x4) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r10 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r10, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r10, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000100ac1414bb0800090092ffffff080008000203000008000a0004000000", @ANYRESHEX=r2, @ANYRES8=r7, @ANYRESOCT=r8], 0x38}}, 0x0) 34m47.657707504s ago: executing program 32 (id=78): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x200003e1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x1ff}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x100}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x47b2}, @TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r6 = socket$alg(0x26, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xb, 0x4}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xffff, 0x0, 0x4) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r10 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r10, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r10, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000100ac1414bb0800090092ffffff080008000203000008000a0004000000", @ANYRESHEX=r2, @ANYRES8=r7, @ANYRESOCT=r8], 0x38}}, 0x0) 34m7.47359497s ago: executing program 1 (id=193): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="e11bdec5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)="4ee1b0558ba15e93be732a61f60a67a443e5968e4cef8fe3dbd4b49d1da0daa0994f63059ab72f78ecc5ddf1cee166719bf4c510d995c0bf16c93c0a792e9ead238433cb7a3e70395bcb04d72674efef", 0x50}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0x4850) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000005c0)=""/113, 0x71}], 0x2}, 0x40000000) 34m7.37298557s ago: executing program 1 (id=194): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000080)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 34m6.427021823s ago: executing program 1 (id=200): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x8800) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x200000}}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000400100000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100020000000000000000000000004000"], 0xb8}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1980, 0x0) close(r4) 34m4.311967131s ago: executing program 1 (id=206): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000479000/0x1000)=nil, 0x9000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') r4 = inotify_init1(0x800) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000001c0)=""/169) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x7a0}, 0x1, 0x0, 0x0, 0x40040}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 34m3.243094887s ago: executing program 1 (id=210): write(0xffffffffffffffff, &(0x7f0000000200)="eac0649edf4bc2cf1e57e8f2f69be0342ba8bacec32584be00e075534165b94394e73609", 0x24) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000080)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000001300)={{0x3, 0x0, 0x1, 0x0, 0x1000000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1be14000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(r3, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000d00)={{0x1, 0x0, 0x0, 0x0, '\x00', 0xb6380000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0xff2e) 34m1.346254214s ago: executing program 1 (id=212): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x8000, 0x7ff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x2, 0x0, 0x1000010, 0x1000000}}) 33m45.445066129s ago: executing program 33 (id=212): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x8000, 0x7ff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x2, 0x0, 0x1000010, 0x1000000}}) 11m3.470540816s ago: executing program 4 (id=3576): getpid() syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000000)=0x40000006, 0x4) socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10m56.299303911s ago: executing program 4 (id=3586): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d3000000000000014000100"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) read$hidraw(0xffffffffffffffff, &(0x7f0000002340)=""/147, 0x93) 10m54.959096953s ago: executing program 4 (id=3587): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x8000000, r1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="1957000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000980), 0xe) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 10m53.813040676s ago: executing program 4 (id=3592): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) 10m52.167437487s ago: executing program 4 (id=3595): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a30000000"], 0xbc}}, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socket$rds(0x15, 0x5, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000002340)=""/147, 0x93) 10m51.704896983s ago: executing program 4 (id=3597): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) read$hidraw(0xffffffffffffffff, &(0x7f0000002340)=""/147, 0x93) 10m50.943816747s ago: executing program 34 (id=3597): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) read$hidraw(0xffffffffffffffff, &(0x7f0000002340)=""/147, 0x93) 7m13.592473955s ago: executing program 3 (id=4006): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/155, 0x9b}, {0x0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3) 7m12.139594828s ago: executing program 3 (id=4007): socket$inet6(0xa, 0x80002, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e489bcdd", 0x4}], 0x1, 0xfffffffc, 0xb, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 7m11.842950997s ago: executing program 3 (id=4011): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r0, 0x47080000) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m7.714089213s ago: executing program 3 (id=4020): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 7m5.678808213s ago: executing program 3 (id=4027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r2, 0x1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @broadcast}}) creat(&(0x7f0000000580)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 7m4.822890057s ago: executing program 3 (id=4030): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000340), 0x8) shutdown(r0, 0x0) 7m4.492301409s ago: executing program 35 (id=4030): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000340), 0x8) shutdown(r0, 0x0) 12.283131733s ago: executing program 0 (id=5026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) wait4(r1, &(0x7f0000000100), 0x8, 0x0) 12.282708113s ago: executing program 5 (id=5027): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000880)={0x1}) 12.054847125s ago: executing program 5 (id=5032): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0xb125, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x4, 0x8, &(0x7f00000002c0)="0000ffff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000001340)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000002c0)=[{0x0}], 0x1, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000440)={0x0}) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 10.463689092s ago: executing program 5 (id=5035): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r0, 0x2f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10.235054844s ago: executing program 5 (id=5037): ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000380)={0x81, 0x3}) unshare(0x68040200) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x61c28}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x7fffffff, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x2070}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x1}, {0x10041, 0x8}], 0x14, 0x8, 0x2, 0x2, 0x5}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) 10.234634954s ago: executing program 0 (id=5038): r0 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000b0000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6d) 10.077933729s ago: executing program 0 (id=5039): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x3}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 9.398218856s ago: executing program 0 (id=5042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x0, &(0x7f0000001d00)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000f012b0efe42ae44348ac79da1a66f1c3000000b702000000000000850000008600000094fffffff3000000"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x40, &(0x7f0000000400)=""/64, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=[{0x1, 0x5, 0xb, 0x5}, {0x3, 0x3, 0x2b, 0x1}, {0x2, 0x1, 0x9, 0xa}], 0x10, 0xffffffff}, 0x94) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x3f0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3a4, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x328, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x10}, @WGPEER_A_ALLOWEDIPS={0x2f8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 8.371705837s ago: executing program 7 (id=5044): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0xb125, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x4, 0x8, &(0x7f00000002c0)="0000ffff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000001340)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000002c0)=[{0x0}], 0x1, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000440)={0x0}) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 8.056783028s ago: executing program 5 (id=5045): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) r1 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xc674}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x1, 0xd, 0x7, 0x9, 0x2, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0x2) getrlimit(0xc, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) getrandom(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) 5.59892403s ago: executing program 6 (id=5046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x6, 0x7ffc0001}]}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}]}, 0x40}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x11) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 4.730258675s ago: executing program 5 (id=5047): bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x8000000, r1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="1957000000000000140012800b0001006d61637365630000", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000980), 0xe) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 4.728914985s ago: executing program 6 (id=5048): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7ffff006) 4.728245045s ago: executing program 7 (id=5049): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000e00)={0x0, 0x0, 0x80000001, 0xfffffffffffffffe}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0) 3.452405411s ago: executing program 0 (id=5051): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 2.762417539s ago: executing program 7 (id=5052): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) 2.478198037s ago: executing program 6 (id=5053): ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000380)={0x81, 0x3}) unshare(0x68040200) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x61c28}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x7fffffff, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x2070}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x1}, {0x10041, 0x8}], 0x14, 0x8, 0x2, 0x2, 0x5}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) 1.955025638s ago: executing program 0 (id=5054): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r0, &(0x7f0000000100)=0xfffffff8, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000d, 0x80013, r0, 0xffffe000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b1a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.674582906s ago: executing program 7 (id=5055): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) waitid(0x2, r0, 0x0, 0x4, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 1.500846173s ago: executing program 6 (id=5056): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = add_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r1, 0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0xb}, {0xfff2}, {0xffff, 0xa}}, ["", "", ""]}, 0x24}}, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @broadcast}}) r7 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r7, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100001b, 0x12, r5, 0x100000000) 512.29806ms ago: executing program 6 (id=5057): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x700, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) read$FUSE(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 456.091996ms ago: executing program 7 (id=5058): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) 34.764697ms ago: executing program 6 (id=5059): bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x8000000, r1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="1957000000000000140012800b0001006d6163736563000004000280", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000980), 0xe) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 0s ago: executing program 7 (id=5060): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd2c, 0x0, {0x45}}, 0x14}, 0x1, 0x0, 0x0, 0x4061}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) unshare(0x4000600) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x2b0, 0x9403, 0x0, 0x0, 0x2c0, 0x39c, 0x3d8, 0x3d8, 0x39c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x2, 0x0, 0x0, @str='\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) recvmmsg(r7, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): ="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 1917.358321][ T27] audit: type=1326 audit(2000000022.200:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24111 comm="syz.7.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87a658d810 code=0x7ffc0000 [ 1917.382418][ T27] audit: type=1326 audit(2000000022.200:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24111 comm="syz.7.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 1917.408966][ T27] audit: type=1326 audit(2000000022.210:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24111 comm="syz.7.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 1917.534337][ T27] audit: type=1326 audit(2000000022.290:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24111 comm="syz.7.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87a658d810 code=0x7ffc0000 [ 1917.556779][ C1] vkms_vblank_simulate: vblank timer overrun [ 1917.656240][ T27] audit: type=1326 audit(2000000022.290:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24111 comm="syz.7.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f87a65907f7 code=0x7ffc0000 [ 1918.966474][T24137] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4373'. [ 1919.624849][T24145] atomic_op ffff88807a737998 conn xmit_atomic 0000000000000000 [ 1920.917438][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1920.917449][ T27] audit: type=1326 audit(2000000026.070:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1920.975212][ T5822] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1921.025180][ T27] audit: type=1326 audit(2000000026.100:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1921.055843][T24151] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4377'. [ 1921.146497][ T27] audit: type=1326 audit(2000000026.300:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1921.168918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.175560][ T5822] usb 8-1: Using ep0 maxpacket: 16 [ 1921.192524][T24155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4378'. [ 1921.255918][ T27] audit: type=1326 audit(2000000026.300:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1921.278828][ T27] audit: type=1326 audit(2000000026.300:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1921.301792][ T27] audit: type=1326 audit(2000000026.310:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1921.325343][ T27] audit: type=1326 audit(2000000026.330:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1921.370590][ T5822] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1921.395213][ T27] audit: type=1326 audit(2000000026.330:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1921.445123][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.453592][ T5822] usb 8-1: Product: syz [ 1921.551282][ T27] audit: type=1326 audit(2000000026.390:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83b778d810 code=0x7ffc0000 [ 1921.568361][ T5822] usb 8-1: Manufacturer: syz [ 1921.573903][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.585402][ T5822] usb 8-1: SerialNumber: syz [ 1921.596095][ T5822] r8152-cfgselector 8-1: config 0 descriptor?? [ 1921.790060][ T27] audit: type=1326 audit(2000000026.390:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.5.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f83b77907f7 code=0x7ffc0000 [ 1921.967772][ T5822] r8152-cfgselector 8-1: Needed 1 retries to read version [ 1921.974993][ T5822] r8152-cfgselector 8-1: Unknown version 0x0030 [ 1922.013788][ T5822] r8152-cfgselector 8-1: bad CDC descriptors [ 1922.286682][ T5822] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1922.303278][ T5822] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 1922.363902][T24165] kAFS: No cell specified [ 1928.374864][T24197] atomic_op ffff88805ecaa198 conn xmit_atomic 0000000000000000 [ 1929.510791][T24204] loop7: detected capacity change from 0 to 1024 [ 1929.558875][T24204] EXT4-fs: Ignoring removed orlov option [ 1929.643888][T24204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1930.490479][T24221] team_slave_0: entered promiscuous mode [ 1930.496271][T24221] team_slave_1: entered promiscuous mode [ 1930.502291][T24221] macsec1: entered promiscuous mode [ 1930.507652][T24221] team0: entered promiscuous mode [ 1930.514267][T24221] macsec1: entered allmulticast mode [ 1930.519689][T24221] team0: entered allmulticast mode [ 1930.524869][T24221] team_slave_0: entered allmulticast mode [ 1930.539817][T24221] team_slave_1: entered allmulticast mode [ 1930.615156][T24221] team0: Device macsec1 is already an upper device of the team interface [ 1931.288101][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1931.288115][ T27] audit: type=1326 audit(2000000036.440:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1931.337960][ T27] audit: type=1326 audit(2000000036.440:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1931.364851][T24221] team0: left allmulticast mode [ 1931.370027][ T27] audit: type=1326 audit(2000000036.470:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1931.376414][T24221] team_slave_0: left allmulticast mode [ 1931.434536][ T27] audit: type=1326 audit(2000000036.470:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1931.457400][T24221] team_slave_1: left allmulticast mode [ 1931.464891][T24221] team0: left promiscuous mode [ 1931.486870][ T27] audit: type=1326 audit(2000000036.480:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1931.496234][T24221] team_slave_0: left promiscuous mode [ 1931.514947][T24221] team_slave_1: left promiscuous mode [ 1931.531461][T22592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1931.635284][ T27] audit: type=1326 audit(2000000036.480:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1931.897403][ T27] audit: type=1326 audit(2000000036.480:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1931.956754][T24214] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4389'. [ 1932.013212][ T27] audit: type=1326 audit(2000000036.480:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1932.035856][ T27] audit: type=1326 audit(2000000036.480:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1932.055136][T24227] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4392'. [ 1932.064873][ T27] audit: type=1326 audit(2000000036.480:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 1934.174372][T24257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4398'. [ 1934.209966][T24257] binder_alloc: 24256: binder_alloc_buf size 65520 failed, no address space [ 1934.230185][T24257] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1935.561334][T24263] xt_CT: No such helper "pptp" [ 1936.004732][T24273] fuse: Unknown parameter 'group_id00000000000000000000' [ 1936.028073][T24268] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1936.333406][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 1936.333421][ T27] audit: type=1326 audit(2000000041.480:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24267 comm="syz.0.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fab8efc9 code=0x7ffc0000 [ 1936.394507][ T27] audit: type=1326 audit(2000000041.530:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24267 comm="syz.0.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67fab8efc9 code=0x7ffc0000 [ 1936.422932][ T27] audit: type=1326 audit(2000000041.530:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24267 comm="syz.0.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fab8efc9 code=0x7ffc0000 [ 1936.446275][ T27] audit: type=1326 audit(2000000041.540:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24267 comm="syz.0.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fab8efc9 code=0x7ffc0000 [ 1936.707690][T24285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4407'. [ 1936.747682][T24285] binder_alloc: 24284: binder_alloc_buf size 65520 failed, no address space [ 1936.769206][T24285] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1938.523840][T24307] loop6: detected capacity change from 0 to 1024 [ 1938.541142][T24308] fuse: Unknown parameter 'group_id00000000000000000000' [ 1938.604863][T24307] EXT4-fs: Ignoring removed orlov option [ 1938.699520][T24307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1938.758828][T24316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4416'. [ 1939.623498][T24316] binder_alloc: 24311: binder_alloc_buf size 65520 failed, no address space [ 1939.644426][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1939.685426][T24316] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1940.317757][T24333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4419'. [ 1941.134585][T24354] loop6: detected capacity change from 0 to 1024 [ 1941.143308][T24354] EXT4-fs: Ignoring removed orlov option [ 1941.203582][T24354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1941.399362][T24363] loop5: detected capacity change from 0 to 1024 [ 1941.420130][T24363] EXT4-fs: Ignoring removed orlov option [ 1941.504788][T24363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1941.768642][T16756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1942.085343][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1942.835442][T21506] Bluetooth: hci3: command 0x0406 tx timeout [ 1944.173821][T24395] atomic_op ffff888066787998 conn xmit_atomic 0000000000000000 [ 1944.687388][ T27] audit: type=1326 audit(2000000049.690:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1944.902555][ T27] audit: type=1326 audit(2000000049.700:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1944.952104][T24402] loop7: detected capacity change from 0 to 1024 [ 1944.953816][ T27] audit: type=1326 audit(2000000049.980:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1944.959757][T24399] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1944.996847][T24402] EXT4-fs: Ignoring removed orlov option [ 1945.008565][ T27] audit: type=1326 audit(2000000049.990:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1945.031878][ T27] audit: type=1326 audit(2000000050.000:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1945.054455][ T27] audit: type=1326 audit(2000000050.000:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1945.076972][ T27] audit: type=1326 audit(2000000050.010:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1945.099693][ T27] audit: type=1326 audit(2000000050.020:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1945.125145][ T27] audit: type=1326 audit(2000000050.030:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1945.147760][ T27] audit: type=1326 audit(2000000050.030:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24391 comm="syz.6.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 1945.189873][T24402] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1945.276620][T24407] loop5: detected capacity change from 0 to 1024 [ 1945.284065][T24407] EXT4-fs: Ignoring removed orlov option [ 1945.338388][T24407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1946.604166][T22592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1946.732947][T16756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1947.405551][T14767] Bluetooth: hci3: command 0x0406 tx timeout [ 1947.441514][T24422] xt_CT: No such helper "pptp" [ 1948.966818][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4445'. [ 1949.125711][T24441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1949.554882][T24447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4448'. [ 1949.616849][T24447] binder_alloc: 24446: binder_alloc_buf size 65520 failed, no address space [ 1949.645084][T24447] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1950.138520][T24457] fuse: Bad value for 'user_id' [ 1950.445375][T14767] Bluetooth: hci2: command 0x0406 tx timeout [ 1950.594487][T24465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1952.467949][T24471] team_slave_0: entered promiscuous mode [ 1952.473670][T24471] team_slave_1: entered promiscuous mode [ 1952.480602][T24471] macsec1: entered promiscuous mode [ 1952.485937][T24471] team0: entered promiscuous mode [ 1952.492803][T24471] macsec1: entered allmulticast mode [ 1952.509508][T24471] team0: entered allmulticast mode [ 1952.519498][T24471] team_slave_0: entered allmulticast mode [ 1952.527514][T24471] team_slave_1: entered allmulticast mode [ 1952.604513][T24471] team0: Device macsec1 is already an upper device of the team interface [ 1953.396785][T24471] team0: left allmulticast mode [ 1953.412625][T24471] team_slave_0: left allmulticast mode [ 1953.484931][T24476] loop6: detected capacity change from 0 to 256 [ 1953.624561][T24471] team_slave_1: left allmulticast mode [ 1953.640935][T24471] team0: left promiscuous mode [ 1953.671034][T24471] team_slave_0: left promiscuous mode [ 1953.676594][T24471] team_slave_1: left promiscuous mode [ 1953.727263][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4457'. [ 1953.744554][T24481] binder_alloc: 24477: binder_alloc_buf size 65520 failed, no address space [ 1953.782151][T24481] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1954.055516][T24490] fuse: Bad value for 'user_id' [ 1954.201681][T24497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4462'. [ 1955.892509][T24501] loop5: detected capacity change from 0 to 128 [ 1955.953741][T24501] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1956.035142][T24501] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1957.675286][T24524] loop7: detected capacity change from 0 to 256 [ 1957.813316][T24523] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.959783][T24523] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.193375][T24523] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.741371][T24523] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.033915][T24533] team_slave_0: entered promiscuous mode [ 1959.039715][T24533] team_slave_1: entered promiscuous mode [ 1959.045863][T24533] macsec1: entered promiscuous mode [ 1959.051203][T24533] team0: entered promiscuous mode [ 1959.059402][T24533] macsec1: entered allmulticast mode [ 1959.065186][T24533] team0: entered allmulticast mode [ 1959.075250][T24533] team_slave_0: entered allmulticast mode [ 1959.081268][T24533] team_slave_1: entered allmulticast mode [ 1959.091529][T24533] team0: Device macsec1 is already an upper device of the team interface [ 1959.152856][T24533] team0: left allmulticast mode [ 1959.160685][T24533] team_slave_0: left allmulticast mode [ 1959.170686][T24533] team_slave_1: left allmulticast mode [ 1959.180416][T24533] team0: left promiscuous mode [ 1959.229714][T24533] team_slave_0: left promiscuous mode [ 1959.235201][T24533] team_slave_1: left promiscuous mode [ 1959.450213][T24523] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.474506][T24523] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.509919][T24523] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.572353][T24523] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.653711][T24537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4470'. [ 1959.913297][T24540] atomic_op ffff888027d37198 conn xmit_atomic 0000000000000000 [ 1960.357652][T24542] loop0: detected capacity change from 0 to 128 [ 1960.529966][T24542] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1960.634715][T24542] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1960.656605][T16756] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1963.255894][T24573] team_slave_0: entered promiscuous mode [ 1963.261653][T24573] team_slave_1: entered promiscuous mode [ 1963.268879][T24573] macsec1: entered promiscuous mode [ 1963.274165][T24573] team0: entered promiscuous mode [ 1963.280687][T24573] macsec1: entered allmulticast mode [ 1963.294420][T24573] team0: entered allmulticast mode [ 1963.300109][T24573] team_slave_0: entered allmulticast mode [ 1963.314383][T24573] team_slave_1: entered allmulticast mode [ 1963.384369][T24573] team0: Device macsec1 is already an upper device of the team interface [ 1963.650423][T24573] team0: left allmulticast mode [ 1963.657088][T15287] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1963.737253][T24573] team_slave_0: left allmulticast mode [ 1963.752270][T24573] team_slave_1: left allmulticast mode [ 1963.759898][T24573] team0: left promiscuous mode [ 1963.768855][T24573] team_slave_0: left promiscuous mode [ 1963.774314][T24573] team_slave_1: left promiscuous mode [ 1963.874765][T24579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1964.114254][T24585] atomic_op ffff88806cf87998 conn xmit_atomic 0000000000000000 [ 1964.992011][T24588] loop0: detected capacity change from 0 to 1024 [ 1965.008007][T24588] EXT4-fs: Ignoring removed orlov option [ 1965.046328][T24588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1965.782503][T24601] loop6: detected capacity change from 0 to 256 [ 1966.012332][T15287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1966.100708][T24605] kAFS: No cell specified [ 1967.390991][T24622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4492'. [ 1967.393654][T24626] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.4493'. [ 1967.437514][T24622] binder_alloc: 24620: binder_alloc_buf size 65520 failed, no address space [ 1967.456926][T24624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4491'. [ 1967.476330][T24622] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1969.900644][T24655] ubi: mtd0 is already attached to ubi31 [ 1970.021357][T24661] kAFS: No cell specified [ 1970.828543][T24666] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.4502'. [ 1971.066832][T24672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4504'. [ 1973.890936][T24675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4505'. [ 1973.919171][T24675] binder_alloc: 24674: binder_alloc_buf size 65520 failed, no address space [ 1973.992013][T24675] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1975.214802][T24692] netlink: 'syz.7.4511': attribute type 72 has an invalid length. [ 1975.324920][T24694] loop6: detected capacity change from 0 to 256 [ 1975.402346][T24700] kAFS: No cell specified [ 1976.364949][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.003336][T24729] ubi: mtd0 is already attached to ubi31 [ 1981.377300][T24750] team_slave_0: entered promiscuous mode [ 1981.383030][T24750] team_slave_1: entered promiscuous mode [ 1981.389077][T24750] macsec1: entered promiscuous mode [ 1981.394361][T24750] team0: entered promiscuous mode [ 1981.402665][T24750] macsec1: entered allmulticast mode [ 1981.408056][T24750] team0: entered allmulticast mode [ 1981.413231][T24750] team_slave_0: entered allmulticast mode [ 1981.419123][T24750] team_slave_1: entered allmulticast mode [ 1981.428153][T24750] team0: Device macsec1 is already an upper device of the team interface [ 1982.231989][T24750] team0: left allmulticast mode [ 1982.246323][T24750] team_slave_0: left allmulticast mode [ 1982.289009][T24750] team_slave_1: left allmulticast mode [ 1982.325238][T24750] team0: left promiscuous mode [ 1982.347923][T24750] team_slave_0: left promiscuous mode [ 1982.353443][T24750] team_slave_1: left promiscuous mode [ 1983.369274][T24764] 9pnet_fd: Insufficient options for proto=fd [ 1983.471379][T24767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4529'. [ 1983.510602][T24767] binder_alloc: 24766: binder_alloc_buf size 65520 failed, no address space [ 1983.629778][T24767] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1983.700057][T24772] loop5: detected capacity change from 0 to 256 [ 1985.088043][T24790] team_slave_0: entered promiscuous mode [ 1985.093764][T24790] team_slave_1: entered promiscuous mode [ 1985.099859][T24790] macsec1: entered promiscuous mode [ 1985.105257][T24790] team0: entered promiscuous mode [ 1985.112396][T24790] macsec1: entered allmulticast mode [ 1985.129485][T24790] team0: entered allmulticast mode [ 1985.134839][T24790] team_slave_0: entered allmulticast mode [ 1985.144483][T24790] team_slave_1: entered allmulticast mode [ 1985.213459][T24790] team0: Device macsec1 is already an upper device of the team interface [ 1986.070820][T24790] team0: left allmulticast mode [ 1987.018541][T24790] team_slave_0: left allmulticast mode [ 1987.034263][T24790] team_slave_1: left allmulticast mode [ 1987.045153][T24790] team0: left promiscuous mode [ 1987.052640][T24790] team_slave_0: left promiscuous mode [ 1987.059511][T24790] team_slave_1: left promiscuous mode [ 1988.827555][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4541'. [ 1988.874899][T24808] binder_alloc: 24807: binder_alloc_buf size 65520 failed, no address space [ 1988.899866][T24808] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1989.262047][T24813] loop0: detected capacity change from 0 to 1024 [ 1989.309820][T24813] EXT4-fs: Ignoring removed orlov option [ 1989.351066][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4544'. [ 1989.456399][T24813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1989.712054][T24822] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4545'. [ 1990.093627][T24835] team_slave_0: entered promiscuous mode [ 1990.099427][T24835] team_slave_1: entered promiscuous mode [ 1990.105710][T24835] macsec1: entered promiscuous mode [ 1990.110995][T24835] team0: entered promiscuous mode [ 1990.117793][T24835] macsec1: entered allmulticast mode [ 1990.123133][T24835] team0: entered allmulticast mode [ 1990.132178][T24835] team_slave_0: entered allmulticast mode [ 1990.138318][T24835] team_slave_1: entered allmulticast mode [ 1990.147712][T24835] team0: Device macsec1 is already an upper device of the team interface [ 1990.942368][T24834] binder: BINDER_SET_CONTEXT_MGR already set [ 1990.962404][T24834] binder: 24833:24834 ioctl 4018620d 200000004a80 returned -16 [ 1990.980232][T15287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1991.054522][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4550'. [ 1991.059329][T24835] team0: left allmulticast mode [ 1991.068680][T24835] team_slave_0: left allmulticast mode [ 1991.074351][T24835] team_slave_1: left allmulticast mode [ 1991.080535][T24835] team0: left promiscuous mode [ 1991.087447][T24835] team_slave_0: left promiscuous mode [ 1991.092904][T24835] team_slave_1: left promiscuous mode [ 1994.594913][T24875] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4558'. [ 1995.375843][T24883] team_slave_0: entered promiscuous mode [ 1995.381578][T24883] team_slave_1: entered promiscuous mode [ 1995.387923][T24883] macsec1: entered promiscuous mode [ 1995.393227][T24883] team0: entered promiscuous mode [ 1995.400066][T24883] macsec1: entered allmulticast mode [ 1995.405699][T24883] team0: entered allmulticast mode [ 1995.419032][T24883] team_slave_0: entered allmulticast mode [ 1995.424877][T24883] team_slave_1: entered allmulticast mode [ 1995.434106][T24883] team0: Device macsec1 is already an upper device of the team interface [ 1996.209109][T24883] team0: left allmulticast mode [ 1996.213984][T24883] team_slave_0: left allmulticast mode [ 1996.220943][T24883] team_slave_1: left allmulticast mode [ 1996.226690][T24883] team0: left promiscuous mode [ 1996.231882][T24883] team_slave_0: left promiscuous mode [ 1996.237397][T24883] team_slave_1: left promiscuous mode [ 1997.417781][T24889] fuse: Invalid rootmode [ 1997.873368][T24901] loop5: detected capacity change from 0 to 256 [ 1999.094260][T24909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4567'. [ 2002.675155][T14767] Bluetooth: hci2: command 0x0406 tx timeout [ 2003.368404][T24938] fuse: Bad value for 'rootmode' [ 2004.674549][T24946] loop7: detected capacity change from 0 to 128 [ 2004.706913][T24946] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2004.790659][T24946] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2005.146511][T22592] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2005.328989][T24957] xt_CT: No such helper "pptp" [ 2006.039417][T24969] fuse: Bad value for 'rootmode' [ 2007.384965][T24985] team_slave_0: entered promiscuous mode [ 2007.390776][T24985] team_slave_1: entered promiscuous mode [ 2007.396904][T24985] macsec1: entered promiscuous mode [ 2007.402143][T24985] team0: entered promiscuous mode [ 2007.409043][T24985] macsec1: entered allmulticast mode [ 2007.414410][T24985] team0: entered allmulticast mode [ 2007.419626][T24985] team_slave_0: entered allmulticast mode [ 2007.425518][T24985] team_slave_1: entered allmulticast mode [ 2007.439360][T24985] team0: Device macsec1 is already an upper device of the team interface [ 2007.477713][T24985] team0: left allmulticast mode [ 2007.482672][T24985] team_slave_0: left allmulticast mode [ 2007.488297][T24985] team_slave_1: left allmulticast mode [ 2007.493871][T24985] team0: left promiscuous mode [ 2007.500865][T24985] team_slave_0: left promiscuous mode [ 2007.506358][T24985] team_slave_1: left promiscuous mode [ 2008.765271][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 2008.765308][ T27] audit: type=1326 audit(2000000113.780:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.7.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2009.375145][ T27] audit: type=1326 audit(2000000113.780:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.7.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2009.451980][ T27] audit: type=1326 audit(2000000113.780:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.7.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2009.452188][ T27] audit: type=1326 audit(2000000113.780:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.7.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2009.452360][ T27] audit: type=1326 audit(2000000113.780:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.7.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2011.795246][T21506] Bluetooth: hci3: command 0x0406 tx timeout [ 2011.881622][T25015] fuse: Bad value for 'rootmode' [ 2012.803514][T25021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4597'. [ 2013.966927][T25020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4598'. [ 2014.735067][T25026] team_slave_0: entered promiscuous mode [ 2014.740802][T25026] team_slave_1: entered promiscuous mode [ 2014.747073][T25026] macsec1: entered promiscuous mode [ 2014.752329][T25026] team0: entered promiscuous mode [ 2014.762473][T25026] macsec1: entered allmulticast mode [ 2014.777829][T25026] team0: entered allmulticast mode [ 2014.783850][T25026] team_slave_0: entered allmulticast mode [ 2014.789870][T25026] team_slave_1: entered allmulticast mode [ 2014.840860][T25026] team0: Device macsec1 is already an upper device of the team interface [ 2015.602082][T25026] team0: left allmulticast mode [ 2015.625548][T25026] team_slave_0: left allmulticast mode [ 2015.658183][T25026] team_slave_1: left allmulticast mode [ 2015.689322][T25026] team0: left promiscuous mode [ 2015.700230][T25026] team_slave_0: left promiscuous mode [ 2015.705764][T25026] team_slave_1: left promiscuous mode [ 2017.764197][T25049] fuse: Unknown parameter 'use00000000000000000000' [ 2019.227569][T14767] Bluetooth: hci3: command 0x0406 tx timeout [ 2019.615949][T25067] loop6: detected capacity change from 0 to 1024 [ 2019.623523][T25067] EXT4-fs: Ignoring removed orlov option [ 2019.720021][T25072] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4611'. [ 2019.928679][T25067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2021.928299][T25079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4613'. [ 2022.011461][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2022.745669][T25086] fuse: Unknown parameter 'use00000000000000000000' [ 2025.181527][T25103] loop6: detected capacity change from 0 to 1024 [ 2025.197689][T25103] EXT4-fs: Ignoring removed orlov option [ 2025.385263][T21506] Bluetooth: hci3: command 0x0406 tx timeout [ 2026.001570][T25103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2026.204264][T25114] loop5: detected capacity change from 0 to 1024 [ 2026.257771][T25114] EXT4-fs: Ignoring removed orlov option [ 2026.403136][T25114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2026.471886][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2026.482848][T25121] fuse: Unknown parameter 'use00000000000000000000' [ 2027.489103][T16756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2031.240146][T25165] fuse: Unknown parameter 'user_i00000000000000000000' [ 2031.812252][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2031.927458][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2032.144730][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2032.162576][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2032.210708][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2032.658924][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2032.698949][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.592743][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.603209][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.611657][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.620589][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.629464][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.665103][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.700929][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.750578][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.773625][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.829680][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.915695][ T6454] hid-generic 0003:0003:0000.0047: unknown main item tag 0x0 [ 2033.951959][T25183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'. [ 2034.034231][ T6454] hid-generic 0003:0003:0000.0047: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 2034.261687][T25185] fido_id[25185]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2034.724232][T25202] fuse: Unknown parameter 'user_i00000000000000000000' [ 2035.020513][T25208] loop7: detected capacity change from 0 to 1024 [ 2035.033520][T25208] EXT4-fs: Ignoring removed orlov option [ 2035.300227][T25208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2036.717002][T22592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2036.900489][T25219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4650'. [ 2038.554542][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.422196][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.436953][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.474874][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.503739][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.578173][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.600829][T25231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4653'. [ 2039.609710][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.619658][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.660891][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.724422][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.743893][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.757962][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.768973][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.802229][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.816727][T25237] fuse: Unknown parameter 'user_i00000000000000000000' [ 2039.817393][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.860535][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.913347][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.929576][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.944428][T12530] hid-generic 0003:0003:0000.0048: unknown main item tag 0x0 [ 2039.970921][T12530] hid-generic 0003:0003:0000.0048: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 2040.960332][T25242] fido_id[25242]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2042.059759][T25255] 9pnet_fd: Insufficient options for proto=fd [ 2042.602050][T25258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4662'. [ 2042.787077][T25260] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4663'. [ 2043.109594][T25266] fuse: Unknown parameter 'user_id00000000000000000000' [ 2043.161723][T25262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2047.204783][T25297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4674'. [ 2047.480578][T25299] binder: 25298:25299 ioctl 4018620d 0 returned -22 [ 2047.497079][T25299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4675'. [ 2047.727009][T25301] fuse: Unknown parameter 'user_id00000000000000000000' [ 2047.956533][T21506] Bluetooth: hci2: command 0x0406 tx timeout [ 2048.516477][T25310] loop7: detected capacity change from 0 to 128 [ 2048.682783][T25310] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2048.705121][T25310] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2049.399371][T22592] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2049.458402][T25322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4684'. [ 2049.836220][T25330] binder: 25328:25330 ioctl 4018620d 0 returned -22 [ 2049.879797][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4685'. [ 2051.009715][T25341] loop6: detected capacity change from 0 to 1024 [ 2051.024075][T25341] EXT4-fs: Ignoring removed orlov option [ 2051.099906][T25341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2052.387448][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2052.661680][T25354] loop6: detected capacity change from 0 to 128 [ 2052.720238][T25354] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2052.763827][T25354] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2053.597532][T20593] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2053.989956][T25365] loop6: detected capacity change from 0 to 128 [ 2054.043403][T25365] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2054.066036][T25365] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2054.836940][T20593] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2055.150280][T25376] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4694'. [ 2056.647136][T25388] binder: 25386:25388 ioctl 4018620d 0 returned -22 [ 2056.680450][T25388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4697'. [ 2058.482915][T25407] loop5: detected capacity change from 0 to 128 [ 2058.589447][T25407] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2058.664207][T25407] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2059.825784][T16756] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2061.501521][T25430] binder_alloc: 25429: binder_alloc_buf size 65520 failed, no address space [ 2061.515260][T25430] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2061.613043][ T27] audit: type=1326 audit(2000000166.750:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2061.650260][T25432] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4710'. [ 2061.676555][T14767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2061.685904][ T27] audit: type=1326 audit(2000000166.760:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2061.693081][T14767] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2061.724593][T14767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2061.732683][ T27] audit: type=1326 audit(2000000166.760:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2061.734088][T14767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2061.785623][T14767] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2061.793490][T14767] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2062.875315][ T27] audit: type=1326 audit(2000000166.760:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2063.045544][T18297] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2063.356948][ T27] audit: type=1326 audit(2000000166.970:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83b778d810 code=0x7ffc0000 [ 2063.451927][ T27] audit: type=1326 audit(2000000167.100:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f83b77907f7 code=0x7ffc0000 [ 2063.481248][ T27] audit: type=1326 audit(2000000167.100:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2063.542112][T18297] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2063.552307][ T27] audit: type=1326 audit(2000000167.100:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f83b77907f7 code=0x7ffc0000 [ 2063.641116][ T27] audit: type=1326 audit(2000000167.100:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f83b778dc2a code=0x7ffc0000 [ 2063.675768][ T27] audit: type=1326 audit(2000000167.100:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25431 comm="syz.5.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2063.709947][T18297] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2063.828854][T18297] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.520392][T25466] binder_alloc: 25465: binder_alloc_buf size 65520 failed, no address space [ 2064.555448][T25466] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2064.759277][T21506] Bluetooth: hci1: command tx timeout [ 2065.928217][T25471] xt_CT: No such helper "pptp" [ 2066.835524][T21506] Bluetooth: hci1: command tx timeout [ 2066.894810][T25482] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4721'. [ 2067.524444][T25434] chnl_net:caif_netlink_parms(): no params data found [ 2067.684350][T25512] fuse: Unknown parameter '0x0000000000000003' [ 2067.842495][T21506] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2068.351558][T25434] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.361664][T25434] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.372520][T25434] bridge_slave_0: entered allmulticast mode [ 2068.382757][T25434] bridge_slave_0: entered promiscuous mode [ 2068.413400][T25434] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.478762][T25531] ubi: mtd0 is already attached to ubi31 [ 2068.491084][T25434] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.501191][T25434] bridge_slave_1: entered allmulticast mode [ 2068.524536][T25434] bridge_slave_1: entered promiscuous mode [ 2068.775235][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 2068.775251][ T27] audit: type=1326 audit(2000000173.870:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2068.862293][ T27] audit: type=1326 audit(2000000173.870:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2068.945514][T25438] Bluetooth: hci1: command tx timeout [ 2069.388305][ T27] audit: type=1326 audit(2000000173.870:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2069.410738][ C1] vkms_vblank_simulate: vblank timer overrun [ 2069.433778][ T27] audit: type=1326 audit(2000000173.870:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2069.465230][ T27] audit: type=1326 audit(2000000173.930:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2069.497554][ T27] audit: type=1326 audit(2000000173.930:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2069.958552][ T27] audit: type=1326 audit(2000000173.940:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2070.001757][ T27] audit: type=1326 audit(2000000173.940:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2070.024155][ C1] vkms_vblank_simulate: vblank timer overrun [ 2070.030795][T25533] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4733'. [ 2070.063881][T25434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2070.165096][ T27] audit: type=1326 audit(2000000173.940:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2070.209928][T25434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2070.288673][ T27] audit: type=1326 audit(2000000173.940:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25532 comm="syz.6.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2070.311019][ C1] vkms_vblank_simulate: vblank timer overrun [ 2070.354501][T25434] team0: Port device team_slave_0 added [ 2070.358830][T25546] fuse: Unknown parameter '0x0000000000000003' [ 2070.516960][T25438] Bluetooth: hci3: command 0x0406 tx timeout [ 2070.995301][T25438] Bluetooth: hci1: command tx timeout [ 2071.029168][T25434] team0: Port device team_slave_1 added [ 2071.167644][T25434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2071.201541][T25434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2071.227503][ C1] vkms_vblank_simulate: vblank timer overrun [ 2071.298089][T25434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2074.209484][T25434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2074.226439][T25434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2074.252351][ C0] vkms_vblank_simulate: vblank timer overrun [ 2074.438522][T25434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2074.720628][T25572] xt_CT: No such helper "pptp" [ 2074.763691][T25579] 9pnet_fd: Insufficient options for proto=fd [ 2074.867606][T25434] hsr_slave_0: entered promiscuous mode [ 2074.882850][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 2074.882865][ T27] audit: type=1326 audit(2000000180.030:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2074.920159][T25434] hsr_slave_1: entered promiscuous mode [ 2074.942736][T25586] fuse: Unknown parameter '0x0000000000000003' [ 2074.951455][T25434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2074.964330][ T27] audit: type=1326 audit(2000000180.030:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2074.975088][T25434] Cannot create hsr debugfs directory [ 2075.037036][ T27] audit: type=1326 audit(2000000180.160:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2075.646671][ T27] audit: type=1326 audit(2000000180.160:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2075.710116][ T27] audit: type=1326 audit(2000000180.160:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2075.750397][ T27] audit: type=1326 audit(2000000180.160:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2075.774544][T18297] hsr_slave_0: left promiscuous mode [ 2075.782205][T18297] hsr_slave_1: left promiscuous mode [ 2075.786409][ T27] audit: type=1326 audit(2000000180.160:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2075.811067][ T27] audit: type=1326 audit(2000000180.160:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2075.813081][T18297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2075.833519][ C0] vkms_vblank_simulate: vblank timer overrun [ 2075.834081][ T27] audit: type=1326 audit(2000000180.160:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2075.869923][ C0] vkms_vblank_simulate: vblank timer overrun [ 2075.885268][T18297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2075.893702][T18297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2075.902417][ T27] audit: type=1326 audit(2000000180.160:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2075.925429][T18297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2075.933509][T18297] bridge_slave_1: left allmulticast mode [ 2075.940041][T18297] bridge_slave_1: left promiscuous mode [ 2075.946393][T18297] bridge0: port 2(bridge_slave_1) entered disabled state [ 2076.056794][T18297] bridge_slave_0: left allmulticast mode [ 2076.068342][T18297] bridge_slave_0: left promiscuous mode [ 2076.074485][T18297] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.110106][T18297] veth1_macvtap: left promiscuous mode [ 2076.115884][T18297] veth0_macvtap: left promiscuous mode [ 2076.122913][T18297] veth1_vlan: left promiscuous mode [ 2076.128529][T18297] veth0_vlan: left promiscuous mode [ 2076.205146][T25598] ubi: mtd0 is already attached to ubi31 [ 2077.067131][T25601] loop6: detected capacity change from 0 to 1024 [ 2077.074420][T25601] EXT4-fs: Ignoring removed orlov option [ 2077.124908][T25601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2077.931492][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2078.267368][T18297] team0 (unregistering): Port device team_slave_1 removed [ 2078.771610][T18297] team0 (unregistering): Port device team_slave_0 removed [ 2078.939154][T18297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2079.053683][T18297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2079.463052][T18297] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2079.883537][T18297] bond0 (unregistering): Released all slaves [ 2079.995452][T25582] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4742'. [ 2080.734637][T18297] IPVS: stop unused estimator thread 0... [ 2082.010180][T25634] xt_CT: No such helper "pptp" [ 2082.227044][T25638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4755'. [ 2082.262933][T25640] loop6: detected capacity change from 0 to 1024 [ 2082.275838][T25640] EXT4-fs: Ignoring removed orlov option [ 2082.366411][T25640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2082.670071][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2082.687909][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 2082.687923][ T27] audit: type=1326 audit(2000000187.840:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2082.732752][T25434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2082.778998][ T27] audit: type=1326 audit(2000000187.870:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2082.804687][T25653] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4758'. [ 2082.812276][ T27] audit: type=1326 audit(2000000187.880:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2083.874777][ T27] audit: type=1326 audit(2000000187.880:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2083.897658][T25434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2083.916294][T25434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2083.929920][T25434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2083.947328][ T27] audit: type=1326 audit(2000000187.880:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2083.970837][ T27] audit: type=1326 audit(2000000189.060:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2084.007277][ T27] audit: type=1326 audit(2000000189.060:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2084.135429][T23228] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2084.214791][ T27] audit: type=1326 audit(2000000189.150:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87a658d810 code=0x7ffc0000 [ 2084.284338][ T27] audit: type=1326 audit(2000000189.150:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f87a65907f7 code=0x7ffc0000 [ 2084.307671][ T27] audit: type=1326 audit(2000000189.150:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.7.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2084.377795][T23228] usb 6-1: Using ep0 maxpacket: 32 [ 2084.407195][T23228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2084.435186][T23228] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 2084.493861][T23228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.554131][T23228] usb 6-1: config 0 descriptor?? [ 2084.569254][T25434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2084.621068][T25434] 8021q: adding VLAN 0 to HW filter on device team0 [ 2084.678946][T18306] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.686209][T18306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.716936][T18306] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.724147][T18306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.793668][T25682] loop6: detected capacity change from 0 to 1024 [ 2084.807157][T25682] EXT4-fs: Ignoring removed orlov option [ 2084.844914][T25434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2085.118024][T23228] kye 0003:0458:5015.0049: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2085.234362][T25434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2085.433887][T25684] xt_CT: No such helper "pptp" [ 2085.460223][T25682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2085.474735][T23228] kye 0003:0458:5015.0049: hidraw0: USB HID v10.00 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0 [ 2085.579862][T23228] kye 0003:0458:5015.0049: tablet-enabling feature report not found [ 2085.618399][T23228] kye 0003:0458:5015.0049: tablet enabling failed [ 2085.661385][T23228] usb 6-1: USB disconnect, device number 74 [ 2085.721261][T25690] fido_id[25690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 2086.410040][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2086.568280][T25434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2086.648485][T25709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4766'. [ 2086.738717][T25713] loop7: detected capacity change from 0 to 1024 [ 2086.750999][T25713] EXT4-fs: Ignoring removed orlov option [ 2086.764148][T25434] veth0_vlan: entered promiscuous mode [ 2086.801054][T25713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2086.831962][T25434] veth1_vlan: entered promiscuous mode [ 2086.947015][T25434] veth0_macvtap: entered promiscuous mode [ 2086.992118][T25434] veth1_macvtap: entered promiscuous mode [ 2087.510497][T25434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2087.584851][T25434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.622567][T25434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2087.633603][T25434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.644613][T25434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2087.660825][T25434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.681049][T25434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2087.730523][T22592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2087.744003][T25434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2087.764625][T25434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.797002][T25434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2087.810295][T25434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.852488][T25434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2087.884170][T25434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.928097][T25434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2087.968787][T25434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2087.989737][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 2087.989753][ T27] audit: type=1326 audit(2000000193.130:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2088.027444][T25434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.045042][T25434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.063996][T25434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.073045][ T27] audit: type=1326 audit(2000000193.170:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2088.941517][ T27] audit: type=1326 audit(2000000193.170:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2088.964467][ T27] audit: type=1326 audit(2000000193.170:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2088.987308][ T27] audit: type=1326 audit(2000000193.250:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2089.009978][ T27] audit: type=1326 audit(2000000193.250:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2089.086143][ T27] audit: type=1326 audit(2000000193.250:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2089.698475][ T27] audit: type=1326 audit(2000000193.250:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2089.725447][ T27] audit: type=1326 audit(2000000193.250:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2089.755050][ T27] audit: type=1326 audit(2000000193.250:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.7.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2089.855246][T25729] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4770'. [ 2090.154043][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2090.192472][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2090.282142][ T8540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2090.294662][ T8540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2091.585374][T25769] 9pnet_fd: Insufficient options for proto=fd [ 2092.868394][T25780] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4781'. [ 2094.200892][T25800] ubi: mtd0 is already attached to ubi31 [ 2098.607527][T25838] atomic_op ffff888066270998 conn xmit_atomic 0000000000000000 [ 2099.076478][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 2099.076493][ T27] audit: type=1326 audit(2000000204.230:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2099.255819][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.293721][T25845] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4793'. [ 2100.040683][ T27] audit: type=1326 audit(2000000204.270:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2100.215920][ T27] audit: type=1326 audit(2000000205.150:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2100.409535][ T27] audit: type=1326 audit(2000000205.160:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2100.575130][ T27] audit: type=1326 audit(2000000205.240:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87a658d810 code=0x7ffc0000 [ 2100.698239][ T27] audit: type=1326 audit(2000000205.240:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f87a65907f7 code=0x7ffc0000 [ 2100.742706][T25874] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4800'. [ 2100.848184][ T27] audit: type=1326 audit(2000000205.240:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2100.975208][ T27] audit: type=1326 audit(2000000205.250:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f87a65907f7 code=0x7ffc0000 [ 2101.032282][ T27] audit: type=1326 audit(2000000205.250:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87a658dc2a code=0x7ffc0000 [ 2101.110463][ T27] audit: type=1326 audit(2000000205.250:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.7.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2103.510552][T25894] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4803'. [ 2103.716304][T25897] tmpfs: Bad value for 'mpol' [ 2104.130544][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 2104.130560][ T27] audit: type=1326 audit(2000000209.270:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2104.196867][T25915] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4808'. [ 2104.208112][ T27] audit: type=1326 audit(2000000209.270:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2104.266081][ T27] audit: type=1326 audit(2000000209.270:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2104.911020][ T27] audit: type=1326 audit(2000000209.270:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2104.935429][ T27] audit: type=1326 audit(2000000209.280:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2104.975195][ T27] audit: type=1326 audit(2000000209.280:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2105.095150][ T27] audit: type=1326 audit(2000000209.280:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2105.165019][ T27] audit: type=1326 audit(2000000209.280:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2105.200981][T25921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4810'. [ 2105.420997][ T27] audit: type=1326 audit(2000000209.280:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2105.849717][ T27] audit: type=1326 audit(2000000209.280:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25911 comm="syz.6.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2105.885148][T21133] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 2106.115227][T21133] usb 8-1: Using ep0 maxpacket: 8 [ 2106.121709][T21133] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2106.184769][T21133] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2106.856803][T21133] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2106.876321][T25923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4809'. [ 2106.895066][T21133] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2106.915096][T21133] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2106.957004][T21133] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2107.014236][T21133] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.335152][T21133] usb 8-1: GET_CAPABILITIES returned 0 [ 2107.345105][T21133] usbtmc 8-1:16.0: can't read capabilities [ 2107.661485][ T9] usb 8-1: USB disconnect, device number 3 [ 2107.759155][T25953] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4818'. [ 2107.884783][T21506] Bluetooth: hci1: link tx timeout [ 2107.896142][T21506] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 2107.910580][T21506] Bluetooth: hci1: link tx timeout [ 2107.915975][T21506] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 2107.924337][T21506] Bluetooth: hci1: link tx timeout [ 2107.937783][T21506] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 2107.949078][T21506] Bluetooth: hci1: link tx timeout [ 2107.954412][T21506] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 2108.990014][T25971] loop0: detected capacity change from 0 to 128 [ 2109.055037][T25971] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2109.093120][T25971] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2109.959565][T21506] Bluetooth: hci1: command 0x0406 tx timeout [ 2110.297788][T25434] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2111.620944][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 2111.624220][ T27] audit: type=1326 audit(2000000216.770:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2111.664404][T25996] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4828'. [ 2111.759862][ T27] audit: type=1326 audit(2000000216.810:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2111.923213][ T27] audit: type=1326 audit(2000000216.810:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2112.355156][T25438] Bluetooth: hci2: command 0x0406 tx timeout [ 2112.455866][ T27] audit: type=1326 audit(2000000216.810:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2112.478609][ T27] audit: type=1326 audit(2000000216.810:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2112.501260][ T27] audit: type=1326 audit(2000000216.810:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2112.525149][ T27] audit: type=1326 audit(2000000216.810:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2112.547949][ T27] audit: type=1326 audit(2000000216.810:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2112.571015][ T27] audit: type=1326 audit(2000000216.810:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2112.599003][ T27] audit: type=1326 audit(2000000216.810:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25995 comm="syz.6.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2116.197888][T26047] loop5: detected capacity change from 0 to 1024 [ 2116.205935][T26047] EXT4-fs: Ignoring removed orlov option [ 2116.792463][T26047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2116.879921][T26043] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4839'. [ 2116.960356][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 2116.960371][ T27] audit: type=1326 audit(2000000222.110:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2117.234267][ T27] audit: type=1326 audit(2000000222.110:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2117.258437][ T27] audit: type=1326 audit(2000000222.200:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53e1b8d810 code=0x7ffc0000 [ 2117.284823][ T27] audit: type=1326 audit(2000000222.200:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f53e1b907f7 code=0x7ffc0000 [ 2117.308499][ T27] audit: type=1326 audit(2000000222.200:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2117.332299][ T27] audit: type=1326 audit(2000000222.200:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f53e1b907f7 code=0x7ffc0000 [ 2117.357917][ T27] audit: type=1326 audit(2000000222.200:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f53e1b8dc2a code=0x7ffc0000 [ 2117.443474][ T27] audit: type=1326 audit(2000000222.200:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2117.529607][ T27] audit: type=1326 audit(2000000222.200:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2117.615219][ T27] audit: type=1326 audit(2000000222.200:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26042 comm="syz.6.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2117.661283][T16756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2117.868275][T23228] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2118.257540][T23228] usb 7-1: Using ep0 maxpacket: 32 [ 2118.332594][T23228] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2118.398600][T23228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.423227][T23228] usb 7-1: config 0 descriptor?? [ 2118.431113][T23228] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2118.733581][T26076] kAFS: No cell specified [ 2119.685975][T23228] gspca_vc032x: reg_w err -71 [ 2119.691345][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.700552][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.709453][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.714853][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.724973][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.730300][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.735639][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.740941][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.760006][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.765716][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.771868][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.793552][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.813697][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.847515][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.859216][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.864558][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.889323][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.895501][T23228] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.901104][T23228] gspca_vc032x: Unknown sensor... [ 2119.906873][T23228] vc032x: probe of 7-1:0.0 failed with error -22 [ 2119.917824][T23228] usb 7-1: USB disconnect, device number 5 [ 2120.845088][T26102] loop5: detected capacity change from 0 to 1024 [ 2120.852600][T26102] EXT4-fs: Ignoring removed orlov option [ 2120.915663][T21506] Bluetooth: hci2: command tx timeout [ 2120.932828][T26102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2120.944427][T26109] loop7: detected capacity change from 0 to 128 [ 2121.010539][T26109] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2121.550434][T26109] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2121.622912][T26114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4853'. [ 2122.163793][T22592] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2122.870747][T26126] kAFS: No cell specified [ 2123.032251][T16756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2123.579395][T26136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4858'. [ 2123.608199][T26136] team_slave_0: entered promiscuous mode [ 2123.614005][T26136] team_slave_1: entered promiscuous mode [ 2123.620215][T26136] macsec1: entered promiscuous mode [ 2123.625656][T26136] team0: entered promiscuous mode [ 2123.632316][T26136] macsec1: entered allmulticast mode [ 2123.637758][T26136] team0: entered allmulticast mode [ 2123.642965][T26136] team_slave_0: entered allmulticast mode [ 2123.648846][T26136] team_slave_1: entered allmulticast mode [ 2125.475098][T21506] Bluetooth: hci2: command tx timeout [ 2125.917502][T26149] loop5: detected capacity change from 0 to 128 [ 2125.977106][T26149] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2126.573815][T26149] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2126.873396][T26161] loop6: detected capacity change from 0 to 1024 [ 2126.880988][T26161] EXT4-fs: Ignoring removed orlov option [ 2127.660868][T26161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2128.029447][T26171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4867'. [ 2129.134552][T16756] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2129.158424][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2129.735195][T23228] IPVS: starting estimator thread 0... [ 2129.835353][T26179] IPVS: using max 18 ests per chain, 43200 per kthread [ 2131.300295][T26200] kAFS: No cell specified [ 2132.915195][T21506] Bluetooth: hci2: command tx timeout [ 2134.790464][T26215] loop7: detected capacity change from 0 to 1024 [ 2134.881880][T26215] EXT4-fs: Ignoring removed orlov option [ 2135.030124][T26215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2136.251994][T22592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2136.451941][T26225] loop0: detected capacity change from 0 to 128 [ 2136.523677][T26225] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2136.599291][T26225] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2137.868369][T25434] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2138.895223][ T5829] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2139.805875][ T5829] usb 6-1: Using ep0 maxpacket: 16 [ 2139.815441][ T5829] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2139.825547][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.833588][ T5829] usb 6-1: Product: syz [ 2139.838077][ T5829] usb 6-1: Manufacturer: syz [ 2139.842699][ T5829] usb 6-1: SerialNumber: syz [ 2139.853058][ T5829] usb 6-1: config 0 descriptor?? [ 2139.861357][ T5829] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2140.759142][T26262] kAFS: No cell specified [ 2141.207282][ T5829] ssu100: probe of 6-1:0.0 failed with error -110 [ 2141.526480][ T5829] usb 6-1: USB disconnect, device number 75 [ 2141.694386][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 2141.694401][ T27] audit: type=1326 audit(2000000246.840:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2141.726200][T21506] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 2141.750440][ T27] audit: type=1326 audit(2000000246.840:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2141.773579][ T27] audit: type=1326 audit(2000000246.850:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2141.797098][ T27] audit: type=1326 audit(2000000246.850:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2141.819997][ T27] audit: type=1326 audit(2000000246.850:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2141.842683][ T27] audit: type=1326 audit(2000000246.850:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2141.867860][ T27] audit: type=1326 audit(2000000246.850:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2141.897206][ T27] audit: type=1326 audit(2000000246.850:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2141.942408][ T27] audit: type=1326 audit(2000000246.850:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2141.993681][T26270] loop0: detected capacity change from 0 to 128 [ 2141.999022][ T27] audit: type=1326 audit(2000000246.850:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26266 comm="syz.0.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2142.039980][T26271] binder_alloc: 26269: binder_alloc_buf size 65520 failed, no address space [ 2142.053225][T26271] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2142.088743][T26270] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2142.143775][T26270] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2142.922650][T25434] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2143.254428][T26289] atomic_op ffff88801c77b198 conn xmit_atomic 0000000000000000 [ 2144.042230][T26298] kAFS: No cell specified [ 2145.620153][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2145.703801][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2145.797496][T21506] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2145.807914][T21506] Bluetooth: hci1: Injecting HCI hardware error event [ 2145.824161][T25438] Bluetooth: hci1: hardware error 0x00 [ 2145.869291][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2145.958708][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2145.993743][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.054564][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.075101][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.088661][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.118021][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.127172][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.138916][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.146774][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.154869][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.168935][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.275860][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.289879][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.298237][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.307151][ T6454] hid-generic 0003:0003:0000.004A: unknown main item tag 0x0 [ 2146.328701][ T6454] hid-generic 0003:0003:0000.004A: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 2146.882754][T26322] fido_id[26322]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2147.297298][T26333] kAFS: No cell specified [ 2148.038333][T25438] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2149.715360][T25438] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 2149.785118][ T9] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2149.975535][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2149.982751][ T9] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2150.003804][ T9] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 2150.020033][ T9] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2150.048695][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2150.058275][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.078539][ T9] usb 6-1: Product: syz [ 2150.088373][ T9] usb 6-1: Manufacturer: syz [ 2150.103395][ T9] usb 6-1: SerialNumber: syz [ 2150.180063][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2150.189045][T26364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4918'. [ 2150.298497][ T9] imon 6-1:155.0: unable to initialize intf0, err -19 [ 2150.376342][ T9] imon:imon_probe: failed to initialize context! [ 2150.586644][ T9] imon 6-1:155.0: unable to register, err -19 [ 2152.079500][T26376] kAFS: No cell specified [ 2152.669237][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 2152.669253][ T27] audit: type=1326 audit(2000000257.810:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2152.717540][T26387] netlink: 1004 bytes leftover after parsing attributes in process `syz.7.4925'. [ 2152.741423][T26383] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4924'. [ 2152.750658][ T27] audit: type=1326 audit(2000000257.810:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2152.824001][ T27] audit: type=1326 audit(2000000257.970:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2152.918411][T26385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4924'. [ 2153.058517][ T27] audit: type=1326 audit(2000000257.970:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2153.444249][ T27] audit: type=1326 audit(2000000258.070:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c57f8d810 code=0x7ffc0000 [ 2153.484789][ T27] audit: type=1326 audit(2000000258.070:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3c57f907f7 code=0x7ffc0000 [ 2153.507717][ T27] audit: type=1326 audit(2000000258.070:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2153.530277][ T27] audit: type=1326 audit(2000000258.070:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3c57f907f7 code=0x7ffc0000 [ 2153.539974][ T9] usb 6-1: USB disconnect, device number 76 [ 2153.552687][ C1] vkms_vblank_simulate: vblank timer overrun [ 2153.552929][ T27] audit: type=1326 audit(2000000258.070:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c57f8dc2a code=0x7ffc0000 [ 2153.586988][ C1] vkms_vblank_simulate: vblank timer overrun [ 2153.608907][ T27] audit: type=1326 audit(2000000258.070:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26382 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2154.213011][T26396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2154.928072][T26407] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4931'. [ 2155.703936][T21506] Bluetooth: hci3: command 0x0406 tx timeout [ 2156.355462][T26414] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4932'. [ 2157.221886][T26424] virtio-fs: tag not found [ 2157.283583][T26424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4935'. [ 2157.723135][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 2157.723145][ T27] audit: type=1326 audit(2000000262.870:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2158.303277][ T27] audit: type=1326 audit(2000000262.870:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2158.778012][ T27] audit: type=1326 audit(2000000263.170:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2158.800970][ T27] audit: type=1326 audit(2000000263.200:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2158.856532][T26428] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4937'. [ 2158.870327][ T27] audit: type=1326 audit(2000000263.220:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2158.892683][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.014462][ T27] audit: type=1326 audit(2000000263.490:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2159.045474][T21506] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 2159.125941][T26431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4937'. [ 2159.212184][ T27] audit: type=1326 audit(2000000263.700:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2159.400588][T26441] loop7: detected capacity change from 0 to 1024 [ 2159.415315][ T27] audit: type=1326 audit(2000000264.160:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2159.441632][T26441] EXT4-fs: Ignoring removed orlov option [ 2159.513234][T26441] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2159.530491][T26446] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2159.541003][ T27] audit: type=1326 audit(2000000264.160:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2159.563440][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.627747][ T27] audit: type=1326 audit(2000000264.270:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c57f8d810 code=0x7ffc0000 [ 2159.879520][T26452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4942'. [ 2160.919215][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.956396][T26452] binder_alloc: 26449: binder_alloc_buf size 65520 failed, no address space [ 2161.000129][T26452] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2161.011201][T22592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2161.246299][T25438] Bluetooth: hci3: command 0x0406 tx timeout [ 2161.255384][ T6454] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2163.534666][ T6454] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.545178][ T6454] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2163.556761][ T6454] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2163.572346][ T6454] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2163.599217][ T6454] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2163.611920][ T6454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2163.625125][ T6454] usb 7-1: SerialNumber: syz [ 2163.756274][T26466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4947'. [ 2164.252326][ T6454] usb 7-1: 0:2 : does not exist [ 2164.269447][ T6454] usb 7-1: unit 5 not found! [ 2164.346806][ T6454] usb 7-1: USB disconnect, device number 6 [ 2164.500772][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 2164.500792][ T27] audit: type=1326 audit(2000000269.640:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2164.561643][T24195] udevd[24195]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2164.581488][T26475] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4951'. [ 2164.705217][ T27] audit: type=1326 audit(2000000269.640:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2164.735030][ T27] audit: type=1326 audit(2000000269.640:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2164.767354][T25438] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 2165.331562][ T27] audit: type=1326 audit(2000000269.640:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2165.358434][ T27] audit: type=1326 audit(2000000269.640:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2165.449562][T26484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4951'. [ 2167.049840][ T27] audit: type=1326 audit(2000000269.650:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2167.131362][ T27] audit: type=1326 audit(2000000269.650:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2167.144628][T26489] loop0: detected capacity change from 0 to 1024 [ 2167.166344][T26489] EXT4-fs: Ignoring removed orlov option [ 2167.236427][T26489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2167.263645][ T27] audit: type=1326 audit(2000000269.650:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2167.366336][ T27] audit: type=1326 audit(2000000269.650:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2167.418125][T26496] loop5: detected capacity change from 0 to 1024 [ 2167.450866][T26495] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4954'. [ 2167.464178][T26496] EXT4-fs: Ignoring removed orlov option [ 2167.465148][ T27] audit: type=1326 audit(2000000269.650:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.5.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b778efc9 code=0x7ffc0000 [ 2167.543942][T26496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2168.028622][T26495] binder_alloc: 26493: binder_alloc_buf size 65520 failed, no address space [ 2168.055071][T26495] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2168.685949][T25434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2169.315464][T21506] Bluetooth: hci3: command 0x0406 tx timeout [ 2169.565548][T26504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2169.647904][T16756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2171.585463][T26523] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4960'. [ 2172.191855][T21506] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 2172.492055][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 2172.492070][ T27] audit: type=1326 audit(2000000277.640:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2172.582045][ T27] audit: type=1326 audit(2000000277.640:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2172.628000][ T27] audit: type=1326 audit(2000000277.680:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2172.634014][T26530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4963'. [ 2172.657624][ T27] audit: type=1326 audit(2000000277.680:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2172.691038][ T27] audit: type=1326 audit(2000000277.680:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2172.717044][ T27] audit: type=1326 audit(2000000277.680:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2172.752924][ T27] audit: type=1326 audit(2000000277.680:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2172.869218][ T27] audit: type=1326 audit(2000000277.680:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2173.062747][ T27] audit: type=1326 audit(2000000277.700:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2174.748626][ T27] audit: type=1326 audit(2000000277.700:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.0.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c57f8efc9 code=0x7ffc0000 [ 2175.394537][T26539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4965'. [ 2175.439972][T26539] binder_alloc: 26538: binder_alloc_buf size 65520 failed, no address space [ 2175.453617][T26539] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2175.529662][T26546] netlink: 1004 bytes leftover after parsing attributes in process `syz.7.4968'. [ 2175.884117][T26554] 9pnet_fd: Insufficient options for proto=fd [ 2176.253334][T26558] ubi: mtd0 is already attached to ubi31 [ 2176.513979][T26562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4975'. [ 2178.967409][T26575] binder_alloc: 26573: binder_alloc_buf size 65520 failed, no address space [ 2178.988886][T26575] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2179.792527][T26587] netlink: 1004 bytes leftover after parsing attributes in process `syz.7.4980'. [ 2180.967195][ T27] kauditd_printk_skb: 105 callbacks suppressed [ 2180.967208][ T27] audit: type=1326 audit(2000000286.120:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2181.033970][ T27] audit: type=1326 audit(2000000286.150:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2181.436264][ T27] audit: type=1326 audit(2000000286.590:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2181.547754][T26598] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4984'. [ 2181.599732][ T27] audit: type=1326 audit(2000000286.700:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2181.623679][ T27] audit: type=1326 audit(2000000286.700:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2181.870719][ T27] audit: type=1326 audit(2000000286.700:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2181.922606][ T27] audit: type=1326 audit(2000000286.700:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2182.081546][ T27] audit: type=1326 audit(2000000286.700:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2182.199046][ T27] audit: type=1326 audit(2000000287.070:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2182.222193][ T27] audit: type=1326 audit(2000000287.070:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.6.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2182.671180][T26625] loop5: detected capacity change from 0 to 128 [ 2182.701767][T26625] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2182.828816][T26625] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2183.110637][T26620] binder_alloc: 26616: binder_alloc_buf size 65520 failed, no address space [ 2183.111789][T26620] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2183.940400][T16756] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2185.500215][T26655] random: crng reseeded on system resumption [ 2186.776055][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 2186.776066][ T27] audit: type=1326 audit(2000000291.930:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2186.875263][ T27] audit: type=1326 audit(2000000291.960:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2187.485871][T26660] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5000'. [ 2187.664521][ T27] audit: type=1326 audit(2000000292.200:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2188.447482][ T27] audit: type=1326 audit(2000000292.200:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2188.642858][ T27] audit: type=1326 audit(2000000292.420:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2188.667782][ T27] audit: type=1326 audit(2000000292.590:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2188.691723][ T27] audit: type=1326 audit(2000000292.590:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2188.714689][ T27] audit: type=1326 audit(2000000293.310:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87a658d810 code=0x7ffc0000 [ 2188.745346][ T27] audit: type=1326 audit(2000000293.310:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f87a65907f7 code=0x7ffc0000 [ 2188.804662][ T27] audit: type=1326 audit(2000000293.310:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26657 comm="syz.7.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87a658efc9 code=0x7ffc0000 [ 2188.936368][T26680] binder_alloc: 26679: binder_alloc_buf size 65520 failed, no address space [ 2188.965173][T26680] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2189.210251][T26688] kAFS: No cell specified [ 2191.674363][T26713] loop5: detected capacity change from 0 to 128 [ 2191.700316][T26716] loop6: detected capacity change from 0 to 1024 [ 2191.710036][T26716] EXT4-fs: Ignoring removed orlov option [ 2191.741039][T26713] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2191.782213][T26716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2191.815652][T26713] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2192.671376][T16756] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2193.699876][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2193.768389][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2193.804802][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2193.852399][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2193.890212][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2193.928938][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2193.949240][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2193.964662][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2193.985609][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2193.993778][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.002514][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.453444][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.485410][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.492854][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.540630][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.562095][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.619328][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.659653][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.807716][ T9] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 2194.854701][ T9] hid-generic 0003:0003:0000.004B: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 2195.105129][ T5829] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2195.274038][T26746] fido_id[26746]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2195.301084][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 2195.313895][ T5829] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 9688, setting to 1024 [ 2195.336889][ T5829] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2195.393999][ T5829] usb 7-1: New USB device found, idVendor=045e, idProduct=003b, bcdDevice= 0.40 [ 2195.403326][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.411433][ T5829] usb 7-1: Product: syz [ 2195.415721][ T5829] usb 7-1: Manufacturer: syz [ 2195.420410][ T5829] usb 7-1: SerialNumber: syz [ 2195.431968][T26745] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2195.739961][ T5829] usbhid 7-1:1.0: can't add hid device: -71 [ 2195.768180][ T5829] usbhid: probe of 7-1:1.0 failed with error -71 [ 2195.800201][ T5829] usb 7-1: USB disconnect, device number 7 [ 2198.779665][T26788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5034'. [ 2201.397000][T26821] kAFS: No cell specified [ 2203.991538][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 2203.991553][ T27] audit: type=1326 audit(2000000309.140:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2204.020172][ C0] vkms_vblank_simulate: vblank timer overrun [ 2204.100363][ T27] audit: type=1326 audit(2000000309.140:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2204.215607][ T27] audit: type=1326 audit(2000000309.200:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2204.216435][T26831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5045'. [ 2204.238081][ C0] vkms_vblank_simulate: vblank timer overrun [ 2204.238351][ T27] audit: type=1326 audit(2000000309.200:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2204.238393][ T27] audit: type=1326 audit(2000000309.200:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2204.238426][ T27] audit: type=1326 audit(2000000309.200:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2204.238616][ T27] audit: type=1326 audit(2000000309.200:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2204.705045][ T27] audit: type=1326 audit(2000000309.200:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2204.803802][ T27] audit: type=1326 audit(2000000309.230:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2204.875148][ T27] audit: type=1326 audit(2000000309.230:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26826 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e1b8efc9 code=0x7ffc0000 [ 2205.149520][T26841] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5047'. [ 2205.159142][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5047'. [ 2205.189264][T26837] loop7: detected capacity change from 0 to 128 [ 2205.956646][T26837] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2206.016186][T26837] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2206.766419][T22592] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2207.076245][T16756] infiniband syz1: set down [ 2207.117342][ T5822] infiniband syz1: ib_query_port failed (-19) [ 2207.150188][T25438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2207.165346][T25438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2207.179039][ T12] smc: removing ib device syz1 [ 2207.188529][T25438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2207.197741][T25438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2207.205764][T25438] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2207.213326][T25438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2207.865084][ T5822] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2208.086762][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 2208.098375][ T5822] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2208.120128][ T5822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2208.145095][T26858] chnl_net:caif_netlink_parms(): no params data found [ 2208.195143][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2208.298980][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2208.427124][ T5822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2208.604791][ T5822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2208.726969][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.135664][T26877] loop6: detected capacity change from 0 to 1024 [ 2209.146864][T26877] EXT4-fs: Ignoring removed orlov option [ 2209.181471][ T5822] usb 1-1: usb_control_msg returned -32 [ 2209.206028][ T5822] usbtmc 1-1:16.0: can't read capabilities [ 2209.256467][T26877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2209.297413][ T5158] udevd[5158]: worker [24195] terminated by signal 33 (Unknown signal 33) [ 2209.316077][T21506] Bluetooth: hci0: command tx timeout [ 2209.340743][ T5158] udevd[5158]: worker [24195] failed while handling '/devices/virtual/block/loop6' [ 2209.490367][T20593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2209.528800][T26858] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.550644][T26858] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.587820][T26858] bridge_slave_0: entered allmulticast mode [ 2209.622683][T26858] bridge_slave_0: entered promiscuous mode [ 2209.641211][ T12] ------------[ cut here ]------------ [ 2209.647796][ T12] GID entry ref leak for dev syz1 index 2 ref=1 [ 2209.656454][T26887] usbtmc 1-1:16.0: control status returned 0 [ 2210.481232][ T5829] usb 1-1: USB disconnect, device number 73 [ 2210.495768][ T12] WARNING: CPU: 1 PID: 12 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x30f/0x490 [ 2210.507040][ T12] Modules linked in: [ 2210.510971][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 2210.518541][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2210.528778][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 2210.534839][ T12] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 2210.540980][ T12] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 a0 fa 85 8b 48 8b 74 24 20 44 89 fa e8 51 06 b0 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 2210.560678][ T12] RSP: 0000:ffffc90000117a68 EFLAGS: 00010246 [ 2210.566779][ T12] RAX: 2c3703e27856aa00 RBX: ffff888067bf60d8 RCX: ffff88801ba7da00 [ 2210.574756][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2210.583196][ T12] RBP: 1ffff1100cf7ec00 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 2210.591235][ T12] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 1ffff1100cf7ec1b [ 2210.599273][ T12] R13: ffff888067bf6000 R14: ffff88802ecb2300 R15: 0000000000000002 [ 2210.607512][ T12] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2210.616656][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2210.623263][ T12] CR2: 000000110c430135 CR3: 0000000066efb000 CR4: 00000000003506e0 [ 2210.631559][ T12] Call Trace: [ 2210.634865][ T12] [ 2210.637995][ T12] ib_device_release+0xd2/0x1b0 [ 2210.642894][ T12] ? ib_device_uevent+0xa0/0xa0 [ 2210.647866][ T12] device_release+0x96/0x1c0 [ 2210.652586][ T12] kobject_put+0x221/0x470 [ 2210.657141][ T12] ? process_scheduled_works+0x957/0x15b0 [ 2210.662923][ T12] process_scheduled_works+0xa45/0x15b0 [ 2210.668566][ T12] ? assign_work+0x400/0x400 [ 2210.673180][ T12] ? assign_work+0x39e/0x400 [ 2210.677886][ T12] worker_thread+0xa55/0xfc0 [ 2210.682520][ T12] kthread+0x2fa/0x390 [ 2210.686660][ T12] ? pr_cont_work+0x560/0x560 [ 2210.691357][ T12] ? kthread_blkcg+0xd0/0xd0 [ 2210.696026][ T12] ret_from_fork+0x48/0x80 [ 2210.700508][ T12] ? kthread_blkcg+0xd0/0xd0 [ 2210.705165][ T12] ret_from_fork_asm+0x11/0x20 [ 2210.710213][ T12] [ 2210.713245][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2210.720529][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 2210.727909][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2210.737985][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 2210.743904][ T12] Call Trace: [ 2210.747195][ T12] [ 2210.750131][ T12] dump_stack_lvl+0x16c/0x230 [ 2210.754876][ T12] ? show_regs_print_info+0x20/0x20 [ 2210.760087][ T12] ? load_image+0x3b0/0x3b0 [ 2210.764634][ T12] panic+0x2c0/0x710 [ 2210.768545][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 2210.773067][ T12] ? ret_from_fork_asm+0x11/0x20 [ 2210.778023][ T12] __warn+0x2e0/0x470 [ 2210.782010][ T12] ? gid_table_release_one+0x30f/0x490 [ 2210.787481][ T12] ? gid_table_release_one+0x30f/0x490 [ 2210.792961][ T12] report_bug+0x2be/0x4f0 [ 2210.797380][ T12] ? gid_table_release_one+0x30f/0x490 [ 2210.802853][ T12] ? gid_table_release_one+0x30f/0x490 [ 2210.808336][ T12] ? gid_table_release_one+0x311/0x490 [ 2210.813824][ T12] handle_bug+0xcf/0x120 [ 2210.818093][ T12] exc_invalid_op+0x1a/0x50 [ 2210.822628][ T12] asm_exc_invalid_op+0x1a/0x20 [ 2210.827617][ T12] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 2210.833696][ T12] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 a0 fa 85 8b 48 8b 74 24 20 44 89 fa e8 51 06 b0 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 2210.853321][ T12] RSP: 0000:ffffc90000117a68 EFLAGS: 00010246 [ 2210.859398][ T12] RAX: 2c3703e27856aa00 RBX: ffff888067bf60d8 RCX: ffff88801ba7da00 [ 2210.867377][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2210.875367][ T12] RBP: 1ffff1100cf7ec00 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 2210.883354][ T12] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 1ffff1100cf7ec1b [ 2210.891331][ T12] R13: ffff888067bf6000 R14: ffff88802ecb2300 R15: 0000000000000002 [ 2210.899330][ T12] ? gid_table_release_one+0x30f/0x490 [ 2210.904814][ T12] ib_device_release+0xd2/0x1b0 [ 2210.909678][ T12] ? ib_device_uevent+0xa0/0xa0 [ 2210.914541][ T12] device_release+0x96/0x1c0 [ 2210.919151][ T12] kobject_put+0x221/0x470 [ 2210.923580][ T12] ? process_scheduled_works+0x957/0x15b0 [ 2210.929309][ T12] process_scheduled_works+0xa45/0x15b0 [ 2210.934899][ T12] ? assign_work+0x400/0x400 [ 2210.939504][ T12] ? assign_work+0x39e/0x400 [ 2210.944107][ T12] worker_thread+0xa55/0xfc0 [ 2210.948732][ T12] kthread+0x2fa/0x390 [ 2210.952806][ T12] ? pr_cont_work+0x560/0x560 [ 2210.957488][ T12] ? kthread_blkcg+0xd0/0xd0 [ 2210.962081][ T12] ret_from_fork+0x48/0x80 [ 2210.966507][ T12] ? kthread_blkcg+0xd0/0xd0 [ 2210.971107][ T12] ret_from_fork_asm+0x11/0x20 [ 2210.975904][ T12] [ 2210.979176][ T12] Kernel Offset: disabled [ 2210.983574][ T12] Rebooting in 86400 seconds..