last executing test programs: 7.891311635s ago: executing program 3 (id=409): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x6, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {0x0}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 7.726224161s ago: executing program 2 (id=411): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r2 = fcntl$dupfd(r1, 0x406, r1) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000140)=""/212) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wg1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x5}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x1e354b2fcdc2bf6c}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x8000001, 0x2}) 6.984564382s ago: executing program 3 (id=413): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmmsg$sock(r5, 0x0, 0x0, 0x8040) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x6081) socket(0x11, 0x3, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.93924997s ago: executing program 2 (id=421): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000002c0)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) close(0x3) close(0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="58120000c58828197653e69bcce62d1dcb1e73672fd14eeda99350a1d45d8c20d0e20745f2d4be045b11662a5e2d6ff24be9a4f3df2db10a850c3feec19ee9e973b79a06a973768e40610010bd064a722d8308fc5abacbf729ffe4bd938c337cbca57ed17ac9838cb3b15a7aed7c4a7fead4902d7d2c5cc1c394f361b4d42223a73d78c634", @ANYRES16=r5, @ANYBLOB="100026bd7000fcdbdf252d00000008000300", @ANYRES32=r6, @ANYBLOB="7500450098b465f792420801e1e4ecfdeb622c59cd2e1fc2caff8c1a16768b0ec86ca6b1913b2691c7c74c1f55dbbfb3e5865ee54408afc07a099ff8fe88f604b7e37a935a1baf3909aa6f282fe83be73d48f3daf220f79cfb5cca8a0f85e1166086971d23fb8e00337b1c2f77c935caf8ff25489f00000099004500a6c7eb84da436f20c8b4a91b2cee40829594392c87fedc1cf00c9cee707afa2f0a4514f73aa47ff894723cc0fc4af7df76e06473a4073295e98e65ae93af9f5d016d442d95b368c88067b4d6fa00b5505c005fd64fe861c1e8aaa909b31994da94f221bbbafc691afc0b7a5414d54e5c089b36a96c6884286ad356f5604a6ef0b4989e414720bf20ac0e13821d3914bd124d7f88e90000002e004500620943e9f9f2476f89be52aa91d0908c656570f24abefce4a6dd7fc5ec53f40f254204d683ae092d336f000004104500f9a7082bd9cfc64a1d011f3d2d11e65a7eff5f4d7e72be6727e4e15f51f54639d3f2866e84bcca50848ca7bc2fdb9d141c09ded346e1712b088fc0fe124a12e0ab6a7052136603ef31546fe14df6497131f05380c3533b621aadafe30828beddde6d903aebd1edd60f36b6be3478fa872e448bc84e7b305ee0cfbef5ca9236d046acf9c8e83f6ff57a64ccd241d186a4290a10591983697c1de34055f7f5e11cb082da246bbfc6c0b18e83c54c9779ed895eb9f5d21369c833daef8673c85611ee8b15c210923a38621419a7062201091595d116d9423c40ad94d09246d5e3a9fab098f5955dbf2718aac72b10c30252f4a5ed1620e75b411f5a0112b20c2aa922994622e6a8aca1b6f09fab5426208d1d7f454130d0adda38cf1820aec6c64c521041674f5f57ab6512470db91f2465fb9ef213899a33565e4df84e6ec017c4a5e4d02bf29bbd31dfed161ee35753c2a02573104b11eefaf4e837ea75a811f8ab3b9bc3a8f23c764a58f5a2befb49b679daca5bc5fa57cfec70bc4ddb5773888762bfa7f7c5456628d9cee33d6af4423ce8328e6fb02af4cfbdd3ec9bf67aa1d1174b92efaebd95041cc05d450491d08d2b7d092eb0d3befa550d7c5abed33aead456986cb277dd6c3a0d846f022e04a49d2a73c47ed767ce167de1276dd6d804164a2172daa1128f96f6917bf17fec5c14457289877f7ae21513e1271c3e5666c9f3491ebb1e05ae88df2a7c866320096d0737d77f46eee9d7b0c057633aa3aa569303547e5035c3e30addbad9f0285595f93b5a96cee169b7bdd8de49ab89cb6c913dd1857ed934de13e5a163d03c06aabb53d9fbc9f1a02bd98573feee4d69a9514cdf125b0bfc142664fc5b0290f70b8819366759635a2cb8479804341da900484e188f4adb5b932ceb29796b90916635058969f14df5e8d7e12d504a9facad3b46f472a05c483f9f21e2e467ac9225980ee62b10d743b4ffc88603e1703e1d6569db1c86e3f4b01441f45445027e759da4149c1057ac2a2fd817a5d275b19d6613b2337451cc9ae8beb2ae1100e2147064a5dc57bff5d0ebed865d0d2f6e3738b0325047300865da5f79a10ac8b51fbfc55d888352df9d0e52f2d29751ac1f2f18c912b7a902027eb6e2596d50387c6d6d4590befdca937650b29d82ead9ed8b8e9819bee78b31e2cd9ce09b9f2eb882b1252cc79e3435f0c5f1cc0cf2d64dcda2fc859d80e140d62eac938c0bccafeb811d8dec93da1434d42ac2a855a03972d8798d12bf76a23a7166bc6a30bb9b13d2e84be6a92954e29bab403d1175629127a1479ad03b0c07ba388012eac520bd8757e26c9445802915c9f4dd13e72de8410022a15b2f3857bdc3cfba5b4a08792a6332eb7253b0fef09868ddcd643d1d956a590338307a0e6d420be80f5de32cd5c4dc27440ea08784b42d50e3172da6601262715bdbb62d31f1182d9a5bec416760060e418616e2341d4ddcf49c0cb82b77d465f08dec227e5521d73cefd792f397a17a85bf80e4a623b9317166839edf47e7a34e94c124f141328adfff1e6015161794a0fc9e130ae9da3701692202a16c44317527135f6d4c54ed1660dd84a4214374875792002e91e636376260b23f006dc2af77e5f1efad1bebfdea9a74cd6e486e7c76337b18ba1246359c4cd9e55767251a873c3984fe7b7d44bc30b66b236a383afb15917ab927cd7b93166d9d99b2ee68a96be42571cc85d51e70471fa85a85fc87e780efc1f8ec635c935791baae0e4706809c276903f96f349a43a6fe5ca7f921085b3bbd8cab95bc9929204864397083aec16a681cdae208b03c8d8b2339b40fda7eb434d3896bb8c0551d84e7e903f29a57d78963505a6939b1cdc8882c111bbdc43a24279688d955ea44270cf24620a83e975435b91486d6e743bc9ea6991e80aeab4e4f62f91638ce92655d489c05d7fe8dacf4a2ed2128e75f29f09611133566523fe3a6993690f64eb7d8ec778ad648e287ff366fb3cfcdf8d0be6b8d42ee35a48d3006c4eb76290ce62c30f9ad590117f956b274ee1ffefe111e06595078022b510b6e539189d2b2f1c1ea1a7bd2433d0e46339a2a7f988a2a8646c97dde400fe81921260e9148c1adbb19fc9ec258e7ac2b28a7ff6f653fdda058379ce91b4768a7156ed1c6c2e5ee992ce20528c294bcd07771b67a218103b5f97ef0adc38b5f4530c110f1f13caf2c7e69ed66984283ee2fd37431ebb94f705a3db4f08aef3f6730b59887ce1b26cbc15d8c292a06460d36f46b062bae214f5001e6a82cf3c4a518d1422c36faa52df9824f4cb1a0c47ceabde5589f2f99749eceb2e70c1bdb88e83ff9da535f348fe123fd36b4bb7317209571c8848eef315eacf76e7d6b9bb9709df252af15e0730dff4e67e077d7170f05e24c8b3f247acc2d98c164ebf130581b97f0c06a4343942d6cafe54e7f3e22cf31162ef4f6654942ac7b01d524457d95fbddbe98f8ed35bdae6ecded2bd3160cc0825eb70a1b37903019da13faf261c5f4d854bda702bbe074d66d19c3e5ebd19f8731e65026d328f796a37cbb8a4b0b872317bb33f21ea2ead5d23457e41b4e3258109997352906516e565a3a6f528b67cbc3a5685db760bd5018f4f339d6644fdc2dcd77cec5e265e865e893f2a2f38e952774135abfd3afa81295109f8721817ebac11ddfe2095cce00e5744de7a27e3b752316827791690abe967f2be25278aaa71be860a1fde1c270d9e2099ff9eb5b0dab9ae2777f543605d2a155cef673da956bb4870c2c7ffd132ec63910263db1dff09d6c17d205964e10df941d79437f50ea5bd954a863d202253226d8585f2865e5cde2dcd319f45e89d55bb43165c9d68f57637a78ace4135b1e31980282ea8f45e43a15e5ea3131d369ac674fe4f2d766dbad5b0b587601be2431387d5a723a22a73b404ffb3bd4b1c3ee25768a1fae42417abb9b802ae5bb4d790a29e07a19be55b131c8c8aa560286631751facc0ba046c1955449d897809b09a8a72a11c11c66a4b0ca0b287d22b80a63586eaf172a290cd9af81733372da4060971272bb69ee9c49d06ff51084d4a3215cd469f5c59370bf2c81f4fafefdafe17ad947c6cee7a9bd2d270bc9b7e619fe0b00160a2ffbeae35e278029ca77b9261123aad43b99ad095b78309ed7abb0f7f67edde078653c3bcaba12b22998c7d3175497de847a3dfd51de188d753c52bb4921e4b655162c8ed3419660fa4245f8a78415deb6026463c9e08c5bea722d377b4e0d2ab3bfb168aea74e1c2304c1c7fe40a55d1aa970dac8bb3ec581fd47006a9488663088f07dedcafc11f8f64084205449b8a62f77376a0a4e18108f6485cbac3e3223da8d4161e2a3bd50f5e7280c294f89b2a202a10a2ab7f25b6587da472f5cf711423acda861aea539ac0415ea7c866b4a1d48aec38454a78b56f58e93ef230c529e18a29a3ec64f4bf4272e8827970f5d234bd17d7c99e9ed38d314305607143e9cad8b22168cf45ca9890d8ca1278b1d8ababe93063a153969ffdaa78fdd6cf11b7cb765297916122593537631f400f7faddcda4d479a831557b194cc1fcb3c7e41b3ade134ff1707fdb4ca6a52f9050378eabe3094668014f113c6c811980923d0f90e3c6f3bb22248353752c2dfec720d7836d44f55efbb7223b0b7d908fb9f4fd183e9bbd63f8a7d69f6092f96e331364c496e22985e654ab72eae92ad8100aaaf0e44e1da93642276708b53b83165eef732b93137727fc5d370dfe01b56560fe0dfa812c75178c9e0435b9697f9f4c8389c8e4365f6828d17b9f0a2ac8adc4d9e32fed6a0ff504611f6f0e09e16103d0e06b4494c8d5af0b7829553237561fb89f1b56141984f6e07b3f4218237ae34d77964b93aead660ce27b3cb852b42963693f063aacf079ca96ed194b475a8d644c275b3afdebb546ef27e026b99468ba094e99ce78a6e136f6f29388ca9b70a14961eadd06d88a7ee64cbdb05e8b3b1becd3633311e0bb7522601655551a40466a091465cb66d21c79d2520da563045ba13e7ff71ff7c28b3990a35c140af6f24ff65629339f4a6320c044484f845fa238052d4223c82c4c52f6ffc7e0da746e73d070aa081c6379a3b516e0ef43c7c69e1a7aaf367be9c45c77b25c1b5fd63bc6c93846ad735e8d0899be1f9a0790ca7054c5f62e56a9acf2d0e8c3d1f724fc44ed7d057a9e5a8a2ccbad402dbbef4532c20f02e5bebdd818a278dfe5da58c0c3cad2486f7f0cd127ab9b3a2a65b4b0f6d945f0cc5bb27bf75e01a7026ffcd827ee93aec503e6085d8610269de67230ff8bedaa86f112e4cf16beef84dce0393786e882bcb07af5674df9a8c76748fcc45feede39af61970a877448cde845faaff20e796d7adf961cb13e82477096f7ac94832a77f0f92592aac75305a041d10075b828287473dcd7fb8c5623f82531d063454799b37b9709c5efd59987130b85424c964472d969b8d310805a1eea05513ac42bcc2d9fb7efd0e315a70f1a4b33e310d8abee9d25d0da0742150f5cee7962869c3f5549fdee9a932c53ad6c5460537d4adc83011b97dbfac0d3dca215e0920b273cbcc5c193e20731568bab6271c5d5862ae11bf4e517a32e4546d866bb44f64760fc1d1106e1141bda76e93e78db0fa458f42d2d1b0189ca54c749e0071558a3a4c96405776b90f287a1b7539c4420b68035fd8a0d2549f645a39580548d9a0207b290f535aa651c22aab5c0920ff29c8b9fbb4313463fc6fdf74caf3ab62cba69e744768336fd85ddd4d5e31f08cf80162d37e84d72d181e86d5a4a20994430ce09ab69ce6b8356f2949a6e92bb404c1f243161e4c7754e60d4a2ffdfe9765d76ffe8fbc9cf29669a9a65540f659f8f919f49188a41dd8879ab6bbc8ab3da2fd06d79d7b573361b4c0c01ace5cf8bba3b8ab869be33e2e2b1b350a55a8d96a11308cf531296a3db9b484a15e6513d14439f366977a9c2f6751e51497ceb750c0213a6786b9873bf8e1b819f2ff48ba4babe8a25aac401ae226a405a923dd13efa01a11ffd04c45ac279c38dce851bd341ff5491d125acbdad76e7e915ab4705753e0d162d86042fd09e64584a26d60a811383b8a0d1e49082d75aac99d8ffbff83d1bb2a215ed4236facf749ece65f2be50efa2fd935c9b6c5005d46e0cb25572281207ff0b61565ec8a692d0091c00e148ff13b7c8134abe3a905fcd809a79fb81bc3be9580f4336a6ce51f2ed62e3d7569505ad085270d6319211e9929017808bc4dbc35195e228ba7d6b3242db02a4444a51d241ca5a14723dd20f2b17256db721c22eae087b69c4bed5e7a623da14ec7288272316fdf9854d9b50aa7d0941e25725395abf6a05906a852d8cc320faa039765273da89ceea0afb02b690caf903bc78c03df0545c8ebfa1ad0f88adc1fb1d38fbf8c49736648ea420daac579007c1e774d857034859d858afeb3171e69032f32dd0b44975a904209d416e36079f248a99b5ecbf066c15d387a97c57b4256b37b42bdf42097fdad789f77109bb2355670e8d86e43c23a3a1198ec3338b70b31f2c4802a7faf348fb206b0b24b3713d35bd1de536f573fa236ec01d2619b7c5cf82291e0d3b835508081fa8ccca1ccc193cab8d2f45ac14b119b913a645b873114d95d27d5083049d057673a90c50ad18bc5597bceeafe0d08e4f7737499e190589a4fd68500bc49dbe5d039adafce83b575089b1985eda5d01f0390ea88afae16717e33816704cf43807bc948e7377eeea89f3004500cb8d70cc54b26d7baba21fa207ac34192f43b19bb6914f2fcf9ed360df817a74f65deeeff7c770399137cecc219aa2554325f834858d099e8ba08f4265f749331428e529f591c5cf4e9a640f2a47c6a71158e777595545693b7886a1bbcd0ca95ca4cab20910b4278dba4b335b230cb94c609438719986e0a53178d3465f4c9322f7768d373729de06a2ad680d502094fb6e801564356967e5706b55070bf7f4d76d11661cbabfc9ad9846f9804a8183becc0f85cf57bf731dafeb3046f715d5a6217754f10c6365e1cfa056f77e0eae5028c973b805da025e99e8330f1f5db68b2141dbf070029643aac060e22a7000"], 0x1258}, 0x1, 0x0, 0x0, 0x4042014}, 0x20040040) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4024587b, &(0x7f0000003ec0)={{r7, &(0x7f0000000100)='/dev/video#\x00', 0x2200, &(0x7f0000000200)={@align=0x800, {0x6, 0x3, 0x5, 0x8}}, 0x10001, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x4}, 0x7, &(0x7f0000003e00)=[{0x2, 0x7f, &(0x7f0000000400)='^(+\x00', &(0x7f0000000440)="a431f59319fc7b9c7bfe40271d6f942a644179c3edf8c1716471c6dc97342bc18b1ebb588210b9cc2f54c17788b845a98159d79f9bd4664caceee4a08dc02fc45fbdd9597047919a2cb6282ce1f66dd20219b76836bd3ac3a65edf3461f03e80be688a71f8f3222a048960ceb1df2e2f89bfe19eb25608d24117", 0x7a, 0x2}, {0x2, 0xfffffffc, &(0x7f00000004c0)='\x8b\'-\x00', &(0x7f0000000500)="a7961a666e42e18b3f25b6fb80dd3e99af88a266d8a729dd39faa5ba71337c641c1d34f29d457121152db73f7e62f00e47c3302f13e5ea869d", 0x39, 0x10}, {0x2, 0xa, &(0x7f0000000540)='$\x00', &(0x7f0000000580)="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", 0x1000, 0x28}, {0x3, 0x4, &(0x7f0000001580)='syzkaller0\x00', &(0x7f0000002940)="b5abc4", 0x3, 0x28}, {0x1, 0x9, &(0x7f0000002980)='nl80211\x00', &(0x7f00000029c0)="179aa5420a8f7ef63ccd346dfa2c625379f8578d358da607d62d0f0fd811ef59e9c15819510b419bd85f8747e2845d230dfc2f6c7d07f04decef0a8c899cdb13b52983a0ba7996e81ffce938eb83a9fd9f8b799b3cdef5", 0x57, 0x30}, {0x1, 0x8, &(0x7f0000002a40)='/dev/net/tun\x00', &(0x7f0000002a80)="1313458795fbb2afce7b439b0e76179f0f828e17e04f4b80b930b109b548098e7e5bf1e698e869a82bb7a8c6119908daaa2c15ec4b90cf2cdaa0f6449d825406395e48d3698a2eb791c9dc7b9d1a4e814a395a8160e339a81219a922fb767d59bc184dc0f173bb148a4ee88bb2d344ad0b8509caa2263837e2d86f3444bf780623bbda7175e186e5814759d605f8cdf9cb342d0f82a98f4ce7e6dd1281b125f54d5c083b29ae3c4698e465afd4fb61e7a433839f3bf8648f0b8f2dce80", 0xbd}, {0x3, 0x0, &(0x7f0000002b40)='!\x00', &(0x7f0000002e00)="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", 0x1000}]}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r8, 0x0) listen(r8, 0x9ce2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="0a00274f7b1c0303030300004400238006001b00000000000500060002000000080017000000000005000f00ef00000006001900010000000500110001000000080009"], 0x6c}}, 0x0) 6.880479658s ago: executing program 1 (id=414): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000000203010a000000000000000002000000090002000000024870"], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x40000c0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 5.112488958s ago: executing program 2 (id=415): openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8910, &(0x7f0000000580)={'bond0\x00', 0x10001}) 5.096338844s ago: executing program 3 (id=416): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x6, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {0x0}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 5.096018905s ago: executing program 1 (id=424): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_socket_connect_nvme_tcp() sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000000206050000000000000000030000fffd0e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000640000000020500050002000000050001000600"], 0x68}}, 0x48094) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) 4.876207002s ago: executing program 3 (id=417): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000001c0)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="010002000020ffdbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a00007000000ebff22012000000008009f000600000008009f002acc2a21080035000000000004000a0028006e800400020004000100040001"], 0x78}, 0x1, 0x0, 0x0, 0x24040850}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0x7) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x80) getdents64(r3, &(0x7f0000000080)=""/82, 0x52) r4 = io_uring_setup(0x3185, &(0x7f0000001500)={0x0, 0xd3d0, 0x1000, 0xfffffffe, 0x345}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"d55b00f4749074bb00008000", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) r10 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r10, &(0x7f00000001c0)={0x2a, 0x1, 0x4000}, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_dev$usbfs(0x0, 0x77, 0x101301) 4.159517106s ago: executing program 1 (id=420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_emit_ethernet(0x3b6, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) 4.074049076s ago: executing program 0 (id=422): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x6, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {0x0}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 3.971412488s ago: executing program 2 (id=423): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0xec, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x12, [0xa, 0x2, 0x5, 0x1, 0x5, 0x4, 0x4, 0x8, 0xc, 0xd, 0x9, 0x0, 0xb, 0x4, 0xc, 0xc], 0x1, [0x8, 0x87, 0x0, 0xfff, 0x3, 0x7, 0x1, 0x5, 0x4, 0x7, 0x3, 0xf, 0x2, 0x6, 0x79, 0xa], [0x81, 0x5, 0x4, 0x8, 0x3, 0x4, 0x2, 0xfff, 0x8df, 0x0, 0xfffc, 0x60, 0x7, 0xdc, 0xd, 0x200]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_usbip_server_init(0x6) socket$key(0xf, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.018517298s ago: executing program 1 (id=425): r0 = userfaultfd(0x801) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) fanotify_mark(0xffffffffffffffff, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') socket$tipc(0x1e, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000400)='GPL\x00', 0x93, 0x7a, &(0x7f0000000440)=""/122, 0x41000, 0x40, '\x00', 0x0, @fallback=0xba6d53c53c43fb80, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x7, 0x8c58, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0x10, 0x1}, {0x1, 0xe779907b, 0x7, 0x2}], 0x10, 0xffff5d9d}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000640)=r7, 0x4) 3.009815979s ago: executing program 0 (id=433): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x6, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {0x0}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 3.002821998s ago: executing program 3 (id=434): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x50000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x840) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) 2.181296793s ago: executing program 0 (id=426): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000000203010a000000000000000002000000090002000000024870"], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x40000c0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 2.181034946s ago: executing program 2 (id=427): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x6, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {0x0}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 1.925848562s ago: executing program 2 (id=428): r0 = socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x6}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000100)={0x0, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x6, '\x00', @value64=0x4ad}}) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r6 = memfd_secret(0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r6, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000140)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x41}], 0x2) r8 = gettid() r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2400000020000103000000000000ed00020000040000000012000000081238f92f74a0230fb9db2509a2a324ffb77f6b588989b40727c1e848795a3590be7ed19aae5a3d8fc073e962264b352dfa9a56e12b2a09edbffdd7cffd43e4a3c41d210436b431a4995ecd379e44013d14b472"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r10, 0x80885659, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x80800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.602581819s ago: executing program 1 (id=429): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x6, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {0x0}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 1.074389086s ago: executing program 3 (id=430): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0x2, 0xfa11, 0x65aa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000007ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4100002000800a6d0bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000380)={0x5, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, r7, 0x1, 0x0, 0x1000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r2, 0x0, 0x44080) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) 1.070166449s ago: executing program 0 (id=440): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x6, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {0x0}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 1.065361503s ago: executing program 1 (id=431): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f00000005c0)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x28, 0x9, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r2, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3, 0xfd}, {0xa}, @raw32={[0x5, 0x5, 0x9]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {0x5}, @quote={{0x6, 0x73}, 0x401}}, {0x4, 0x0, 0xfe, 0x0, @tick=0x100, {}, {}, @connect={{0x5, 0x5f}, {0x2, 0xf}}}, {0x1, 0x0, 0x1, 0x0, @time={0x6, 0x5}, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) ioctl$I2C_RDWR(r1, 0x707, 0x0) fsync(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @link_local}}]}]}]}, 0x64}}, 0x20008044) 885.964398ms ago: executing program 0 (id=432): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x0, 0x0) bind$xdp(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x25, 0x2, 0x6) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4621, 0x3, 'wrr\x00', 0x0, 0x81, 0x73}, {@private=0xa010102, 0x4e23, 0x3, 0x1cb, 0x12d61, 0x12d5c}}, 0x44) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x200080c4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=435): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000001c0)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="010002000020ffdbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a00007000000ebff22012000000008009f000600000008009f002acc2a21080035000000000004000a0028006e800400020004000100040001"], 0x78}, 0x1, 0x0, 0x0, 0x24040850}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0x7) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x80) getdents64(r3, &(0x7f0000000080)=""/82, 0x52) r4 = io_uring_setup(0x3185, &(0x7f0000001500)={0x0, 0xd3d0, 0x1000, 0xfffffffe, 0x345}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"d55b00f4749074bb00008000", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) r10 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r10, &(0x7f00000001c0)={0x2a, 0x1, 0x4000}, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_dev$usbfs(0x0, 0x77, 0x101301) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:52332' (ED25519) to the list of known hosts. [ 48.598173][ T5653] cgroup: Unknown subsys name 'net' [ 48.784770][ T5653] cgroup: Unknown subsys name 'cpuset' [ 48.791095][ T5653] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.819241][ T5653] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.255873][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.258794][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.263156][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.263663][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.267210][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.270415][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.276227][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.276722][ T5758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.276816][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.278041][ T5754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.278259][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.278977][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.279122][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.280953][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.282908][ T5758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.283441][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.283766][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.287741][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.289082][ T5758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.293857][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.877686][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.880864][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.884088][ T5753] bridge_slave_0: entered allmulticast mode [ 54.887730][ T5753] bridge_slave_0: entered promiscuous mode [ 54.893200][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.896154][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.898980][ T5753] bridge_slave_1: entered allmulticast mode [ 54.902253][ T5753] bridge_slave_1: entered promiscuous mode [ 55.003959][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.006888][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.009595][ T5741] bridge_slave_0: entered allmulticast mode [ 55.013478][ T5741] bridge_slave_0: entered promiscuous mode [ 55.027337][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.030237][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.032702][ T5741] bridge_slave_1: entered allmulticast mode [ 55.036331][ T5741] bridge_slave_1: entered promiscuous mode [ 55.042717][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.055594][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.058388][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.062582][ T5742] bridge_slave_0: entered allmulticast mode [ 55.066233][ T5742] bridge_slave_0: entered promiscuous mode [ 55.070828][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.073455][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.076332][ T5742] bridge_slave_1: entered allmulticast mode [ 55.080337][ T5742] bridge_slave_1: entered promiscuous mode [ 55.097926][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.122700][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.145775][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.152015][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.171440][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.175009][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.177334][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.179585][ T5748] bridge_slave_0: entered allmulticast mode [ 55.182809][ T5748] bridge_slave_0: entered promiscuous mode [ 55.186248][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.188507][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.191486][ T5748] bridge_slave_1: entered allmulticast mode [ 55.194278][ T5748] bridge_slave_1: entered promiscuous mode [ 55.198198][ T5753] team0: Port device team_slave_0 added [ 55.230919][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.235568][ T5753] team0: Port device team_slave_1 added [ 55.238786][ T5742] team0: Port device team_slave_0 added [ 55.251143][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.271045][ T5742] team0: Port device team_slave_1 added [ 55.274285][ T5741] team0: Port device team_slave_0 added [ 55.289319][ T5748] team0: Port device team_slave_0 added [ 55.311880][ T5741] team0: Port device team_slave_1 added [ 55.314941][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.317838][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.328322][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.335515][ T5748] team0: Port device team_slave_1 added [ 55.347909][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.350071][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.357730][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.373400][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.376243][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.386697][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.401537][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.404445][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.413531][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.434425][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.437374][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.447820][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.453164][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.456007][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.466499][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.479102][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.482099][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.491139][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.504404][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.506614][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.514483][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.587748][ T5753] hsr_slave_0: entered promiscuous mode [ 55.591738][ T5753] hsr_slave_1: entered promiscuous mode [ 55.599131][ T5742] hsr_slave_0: entered promiscuous mode [ 55.602047][ T5742] hsr_slave_1: entered promiscuous mode [ 55.604271][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 55.606116][ T5742] Cannot create hsr debugfs directory [ 55.618623][ T5741] hsr_slave_0: entered promiscuous mode [ 55.621793][ T5741] hsr_slave_1: entered promiscuous mode [ 55.624271][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 55.626501][ T5741] Cannot create hsr debugfs directory [ 55.639549][ T5748] hsr_slave_0: entered promiscuous mode [ 55.641883][ T5748] hsr_slave_1: entered promiscuous mode [ 55.643990][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 55.645763][ T5748] Cannot create hsr debugfs directory [ 56.004446][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.015213][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.018439][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.024091][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.027581][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.034362][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.037932][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.044126][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.097129][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.104541][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.108242][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.115886][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.119531][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.127712][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.137046][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.147157][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.220476][ T5753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.225278][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.228604][ T5753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.234267][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.238940][ T5753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.244642][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.247765][ T5753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.252579][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.321653][ T5745] Bluetooth: hci1: command tx timeout [ 56.322134][ T5749] Bluetooth: hci3: command tx timeout [ 56.323473][ T5758] Bluetooth: hci0: command tx timeout [ 56.325151][ T5751] Bluetooth: hci2: command tx timeout [ 56.352702][ T5748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.359668][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.366469][ T5748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.373239][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.377057][ T5748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.384292][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.388076][ T5748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.396446][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.419218][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.468676][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.489569][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.492769][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.515528][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.523071][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.526234][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.567363][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.595336][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.598438][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.617593][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.623200][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.626259][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.664588][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.674665][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.693597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.696641][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.713356][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.716426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.726791][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.743570][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.745835][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.757360][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.760372][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.917660][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.944145][ T5741] veth0_vlan: entered promiscuous mode [ 56.951772][ T5741] veth1_vlan: entered promiscuous mode [ 56.986481][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.992306][ T5741] veth0_macvtap: entered promiscuous mode [ 57.003108][ T5741] veth1_macvtap: entered promiscuous mode [ 57.029649][ T5742] veth0_vlan: entered promiscuous mode [ 57.035705][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.042794][ T5742] veth1_vlan: entered promiscuous mode [ 57.050960][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.063151][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.067191][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.071974][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.075547][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.116941][ T5742] veth0_macvtap: entered promiscuous mode [ 57.136935][ T5742] veth1_macvtap: entered promiscuous mode [ 57.141743][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.147205][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.156935][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.162359][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.177742][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.189336][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.193789][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.196524][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.205338][ T117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.206290][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.208865][ T117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.212576][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267058][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.272439][ T5753] veth0_vlan: entered promiscuous mode [ 57.279482][ T5748] veth0_vlan: entered promiscuous mode [ 57.283404][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.285407][ T5753] veth1_vlan: entered promiscuous mode [ 57.288941][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.320506][ T5748] veth1_vlan: entered promiscuous mode [ 57.331811][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.335899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.349453][ T5753] veth0_macvtap: entered promiscuous mode [ 57.360282][ T5753] veth1_macvtap: entered promiscuous mode [ 57.375885][ T5748] veth0_macvtap: entered promiscuous mode [ 57.381748][ T5748] veth1_macvtap: entered promiscuous mode [ 57.393982][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.412898][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.424664][ T226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.428699][ T226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.432286][ T226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.438959][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.448545][ T226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.456055][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.635400][ T40] audit: type=1804 audit(1780858201.722:2): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2" name="bus" dev="ramfs" ino=7975 res=1 errno=0 [ 57.661623][ T40] audit: type=1804 audit(1780858201.732:3): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2" name="bus" dev="ramfs" ino=7975 res=1 errno=0 [ 57.680918][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.687056][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.722544][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.835946][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.064959][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.072430][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.309632][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.312761][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.464037][ T5751] Bluetooth: hci0: command tx timeout [ 58.467039][ T5751] Bluetooth: hci2: command tx timeout [ 58.468962][ T5751] Bluetooth: hci1: command tx timeout [ 58.472611][ T5751] Bluetooth: hci3: command tx timeout [ 58.597588][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.619987][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.774288][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.777593][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa3000) [ 59.221870][ T1130] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 59.224377][ T1130] ata1: failed to read log page 10h (errno=-5) [ 59.226672][ T1130] ata1.00: exception Emask 0x1 SAct 0x604000 SErr 0x0 action 0x0 [ 59.229234][ T1130] ata1.00: irq_stat 0x41000000 [ 59.230853][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 59.233169][ T1130] ata1.00: cmd 60/18:70:56:55:04/05:00:00:00:00/40 tag 14 ncq dma 667648 in [ 59.233169][ T1130] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 59.242759][ T1130] ata1.00: status: { DRDY } [ 59.246782][ T1130] ata1.00: error: { ABRT } [ 59.248322][ T1130] ata1.00: failed command: WRITE FPDMA QUEUED [ 59.253483][ T1130] ata1.00: cmd 61/10:a8:36:71:04/00:00:00:00:00/40 tag 21 ncq dma 8192 out [ 59.253483][ T1130] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 59.269814][ T1130] ata1.00: status: { DRDY } [ 59.271316][ T1130] ata1.00: error: { ABRT } [ 59.272838][ T1130] ata1.00: failed command: WRITE FPDMA QUEUED [ 59.274848][ T1130] ata1.00: cmd 61/18:b0:36:81:04/00:00:00:00:00/40 tag 22 ncq dma 12288 out [ 59.274848][ T1130] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 59.289825][ T1130] ata1.00: status: { DRDY } [ 59.291520][ T1130] ata1.00: error: { ABRT } [ 59.294573][ T1130] ata1.00: configured for UDMA/100 [ 59.298807][ T1130] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 59.306266][ T1130] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 59.310135][ T1130] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 59.316110][ T1130] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 04 55 56 00 05 18 00 [ 59.320982][ T1130] I/O error, dev sda, sector 283990 op 0x0:(READ) flags 0x80700 phys_seg 70 prio class 2 [ 59.329514][ T1130] ata1: EH complete [ 60.212372][ T5923] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 60.435079][ T5918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 60.437837][ T5918] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 60.453343][ T5918] vhci_hcd vhci_hcd.0: Device attached [ 60.511731][ T5751] Bluetooth: hci1: command tx timeout [ 60.511741][ T5749] Bluetooth: hci3: command tx timeout [ 60.513941][ T5751] Bluetooth: hci2: command tx timeout [ 60.520051][ T5751] Bluetooth: hci0: command tx timeout [ 60.645210][ T5929] bridge_slave_0: left allmulticast mode [ 60.647215][ T5929] bridge_slave_0: left promiscuous mode [ 60.652386][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.815545][ T5929] bridge_slave_1: left allmulticast mode [ 60.817531][ T5929] bridge_slave_1: left promiscuous mode [ 60.820628][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.902416][ T5922] vhci_hcd: connection closed [ 60.945450][ T65] vhci_hcd vhci_hcd.0: stop threads [ 60.963598][ T5929] bond0: (slave bond_slave_0): Releasing backup interface [ 61.004626][ T5929] bond0: (slave bond_slave_1): Releasing backup interface [ 61.166762][ T65] vhci_hcd vhci_hcd.0: release socket [ 61.459890][ T39] usb 38-1: SetAddress Request (2) to port 0 [ 61.461861][ T39] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 61.491348][ T65] vhci_hcd vhci_hcd.0: disconnect device [ 61.541824][ T5929] team0: Port device team_slave_0 removed [ 61.559870][ T5929] team0: Port device team_slave_1 removed [ 61.563365][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 61.564615][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.568327][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.585189][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.591818][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.610456][ T5929] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.617502][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 61.867950][ T5940] tipc: Enabling not permitted [ 61.870331][ T5940] tipc: Enabling of bearer rejected, failed to enable media [ 62.521551][ T5933] Process accounting resumed [ 62.560337][ T5745] Bluetooth: hci0: command tx timeout [ 62.562136][ T5751] Bluetooth: hci2: command tx timeout [ 62.563905][ T5751] Bluetooth: hci1: command tx timeout [ 62.566947][ T5749] Bluetooth: hci3: command tx timeout [ 62.665151][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13'. [ 62.767260][ T5953] comedi comedi3: pcl818: I/O base address or length out of range [ 63.172360][ T5959] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 63.197503][ T5958] IPVS: stopping master sync thread 5959 ... [ 63.409908][ T857] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.579182][ T5965] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 63.582601][ T857] usb 7-1: Using ep0 maxpacket: 8 [ 63.585252][ T5965] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 63.588221][ T5965] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 63.590369][ T857] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 63.595791][ T5965] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 63.598858][ T857] usb 7-1: config 179 has no interface number 0 [ 63.601795][ T5965] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 63.605088][ T857] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 63.609443][ T5965] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 63.612699][ T5965] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 63.615697][ T857] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 63.619084][ T5965] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 63.621446][ T857] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 63.625090][ T857] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 63.628538][ T5965] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 63.630876][ T857] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 63.635933][ T857] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 63.638804][ T857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.644893][ T5961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.704894][ T5965] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.17'. [ 64.080167][ T5961] syzkaller1: entered promiscuous mode [ 64.086620][ T5961] syzkaller1: entered allmulticast mode [ 64.195618][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18'. [ 64.201934][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 64.234820][ T5975] process 'syz.3.18' launched './file0' with NULL argv: empty string added [ 64.572421][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 64.575000][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 64.577703][ T857] usb 7-1: USB disconnect, device number 2 [ 64.723071][ T5984] bridge1: entered promiscuous mode [ 64.726100][ T5984] bridge1: entered allmulticast mode [ 65.196034][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 65.199925][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 65.520224][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.681417][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 65.686879][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 65.691578][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 65.696847][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 65.703347][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 65.708624][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.711447][ T9] usb 7-1: Product: syz [ 65.712793][ T9] usb 7-1: Manufacturer: syz [ 65.714241][ T9] usb 7-1: SerialNumber: syz [ 65.721542][ T9] usb 7-1: config 0 descriptor?? [ 65.957225][ T5992] ======================================================= [ 65.957225][ T5992] WARNING: The mand mount option has been deprecated and [ 65.957225][ T5992] and is ignored by this kernel. Remove the mand [ 65.957225][ T5992] option from the mount to silence this warning. [ 65.957225][ T5992] ======================================================= [ 66.035061][ T9] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 66.230324][ T6007] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 66.232844][ T6007] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.236581][ T6007] vhci_hcd vhci_hcd.0: Device attached [ 66.260473][ T5839] usb 7-1: USB disconnect, device number 3 [ 66.352613][ T6011] Trying to write to read-only block-device nullb0 [ 66.378263][ T6011] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 66.420009][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 66.479885][ T9] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 66.559898][ T39] usb 38-1: device descriptor read/8, error -110 [ 66.964293][ T39] usb usb38-port1: attempt power cycle [ 67.064686][ T6009] vhci_hcd: connection reset by peer [ 67.067084][ T12] vhci_hcd vhci_hcd.3: stop threads [ 67.068760][ T12] vhci_hcd vhci_hcd.3: release socket [ 67.070765][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 67.169902][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.432513][ T6025] 9pnet_virtio: no channels available for device syz [ 68.252902][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 68.256466][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.259667][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 68.262478][ T24] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 68.265756][ T24] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 68.278065][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 68.281745][ T24] usb 5-1: config 1 interface 1 has no altsetting 0 [ 68.286312][ T24] usb 5-1: string descriptor 0 read error: -22 [ 68.288313][ T24] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 68.291274][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.379112][ T6033] NILFS (loop2): device size too small [ 68.452862][ T39] usb usb38-port1: unable to enumerate USB device [ 68.810604][ T24] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 68.819894][ T6036] SET target dimension over the limit! [ 68.959813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 69.564447][ T24] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 70.120059][ T6054] bridge1: entered promiscuous mode [ 70.129049][ T6054] bridge1: entered allmulticast mode [ 70.356551][ T24] usb 5-1: USB disconnect, device number 2 [ 70.690274][ T6059] netlink: 44 bytes leftover after parsing attributes in process `syz.1.37'. [ 70.693124][ T6059] netlink: 21 bytes leftover after parsing attributes in process `syz.1.37'. [ 70.978405][ T6068] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 71.599947][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 72.205946][ T6085] overlayfs: missing 'lowerdir' [ 72.239867][ T843] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.390382][ T843] usb 6-1: Using ep0 maxpacket: 16 [ 72.396289][ T843] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 72.400029][ T843] usb 6-1: config 127 has no interface number 0 [ 72.403026][ T843] usb 6-1: config 127 interface 124 has no altsetting 0 [ 72.408446][ T843] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 72.417163][ T843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.425186][ T843] usb 6-1: Product: syz [ 72.425375][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 72.426929][ T843] usb 6-1: Manufacturer: syz [ 72.426944][ T843] usb 6-1: SerialNumber: syz [ 72.433789][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.481851][ T6096] lo speed is unknown, defaulting to 1000 [ 72.484471][ T6096] lo speed is unknown, defaulting to 1000 [ 72.490627][ T6096] lo speed is unknown, defaulting to 1000 [ 72.494878][ T6096] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 72.502258][ T6096] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 72.509644][ T6096] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 72.520564][ T6096] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.539624][ T6096] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 72.582703][ T6096] lo speed is unknown, defaulting to 1000 [ 72.588233][ T6096] lo speed is unknown, defaulting to 1000 [ 72.593283][ T6096] lo speed is unknown, defaulting to 1000 [ 72.597976][ T6096] lo speed is unknown, defaulting to 1000 [ 72.621063][ T34] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.625292][ T34] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.628490][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.631587][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 72.635859][ T6098] smbdirect: ib_dev[syz2] removed [ 72.636102][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 72.650200][ T34] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.653155][ T34] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.657189][ T34] usb 7-1: Product: syz [ 72.659346][ T34] usb 7-1: Manufacturer: syz [ 72.672599][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.677421][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 72.682459][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 72.689614][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.694278][ T34] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 72.696228][ T34] cdc_wdm 7-1:1.0: Unknown control protocol [ 73.182260][ T6108] /dev/sr0: Can't open blockdev [ 73.373145][ T6116] validate_nla: 45 callbacks suppressed [ 73.373259][ T6116] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 73.377536][ T6116] netlink: 224 bytes leftover after parsing attributes in process `syz.3.50'. [ 73.484747][ T6119] xfrm1: entered allmulticast mode [ 73.628945][ T6112] mmap: syz.2.45 (6112) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.678579][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.690135][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.794307][ T843] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 74.382402][ T843] usb 6-1: unable to get BOS descriptor or descriptor too short [ 74.385722][ T843] usb 6-1: device firmware changed [ 74.394614][ T843] usb 6-1: USB disconnect, device number 2 [ 75.148152][ T40] audit: type=1326 audit(1780858219.242:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.159110][ T40] audit: type=1326 audit(1780858219.252:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.186680][ T40] audit: type=1326 audit(1780858219.252:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.203452][ T9] usb 7-1: USB disconnect, device number 4 [ 75.211406][ T40] audit: type=1326 audit(1780858219.272:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.226413][ T40] audit: type=1326 audit(1780858219.272:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.238254][ T40] audit: type=1326 audit(1780858219.282:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.249461][ T40] audit: type=1326 audit(1780858219.282:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.259876][ T40] audit: type=1326 audit(1780858219.282:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.285836][ T40] audit: type=1326 audit(1780858219.382:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.319903][ T40] audit: type=1326 audit(1780858219.392:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.53" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 75.474420][ T6141] lo speed is unknown, defaulting to 1000 [ 75.499075][ T6141] lo speed is unknown, defaulting to 1000 [ 75.517023][ T6141] lo speed is unknown, defaulting to 1000 [ 75.528604][ T6141] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 75.535983][ T6141] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 75.550476][ T6141] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 75.613904][ T6141] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.711904][ T6141] lo speed is unknown, defaulting to 1000 [ 75.779600][ T6141] lo speed is unknown, defaulting to 1000 [ 75.802055][ T6141] lo speed is unknown, defaulting to 1000 [ 75.804621][ T6141] lo speed is unknown, defaulting to 1000 [ 76.149898][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.163352][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.166092][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.252114][ T6154] /dev/sr0: Can't open blockdev [ 76.302733][ T54] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.307124][ T54] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 76.311592][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.315271][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 76.319638][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 76.334190][ T54] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.338920][ T54] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.342325][ T54] usb 5-1: Product: syz [ 76.344066][ T54] usb 5-1: Manufacturer: syz [ 76.360416][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 76.362646][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 76.512627][ T54] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 76.516624][ T54] cdc_wdm 5-1:1.0: Unknown control protocol [ 77.129859][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 77.290095][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 77.293460][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 77.299060][ T24] usb 7-1: config 0 has no interface number 0 [ 77.303498][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.311861][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 77.316505][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.322856][ T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.330018][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 77.333341][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.340602][ T24] usb 7-1: config 0 descriptor?? [ 77.350734][ T24] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 78.085035][ T24] usb 7-1: USB disconnect, device number 5 [ 78.114383][ T24] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 78.810145][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 78.814716][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 78.897568][ T6198] syz.2.68 uses obsolete (PF_INET,SOCK_PACKET) [ 78.939397][ T24] usb 5-1: USB disconnect, device number 3 [ 79.125837][ T6203] bridge0: port 1(erspan0) entered blocking state [ 79.133171][ T6203] bridge0: port 1(erspan0) entered disabled state [ 79.140568][ T6203] erspan0: entered allmulticast mode [ 79.150509][ T6203] erspan0: entered promiscuous mode [ 79.160139][ T6203] bridge0: port 1(erspan0) entered blocking state [ 79.162885][ T6203] bridge0: port 1(erspan0) entered forwarding state [ 79.228323][ T6200] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 79.246396][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 79.250557][ T6200] Bluetooth: MGMT ver 1.23 [ 79.601194][ T6206] /dev/sr0: Can't open blockdev [ 79.635714][ T6210] macvlan2: entered promiscuous mode [ 79.637359][ T6210] macvlan2: entered allmulticast mode [ 79.959990][ T54] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 80.140625][ T6221] siw: device registration error -23 [ 80.171668][ T5749] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 80.269413][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 80.326767][ T5749] Bluetooth: hci1: Malformed LE Event: 0x0d [ 80.647510][ T6232] netlink: 64 bytes leftover after parsing attributes in process `syz.3.72'. [ 82.004948][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 82.141095][ T5890] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 82.432921][ T5890] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.435916][ T5890] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 82.439856][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.443237][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 82.447035][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 82.456502][ T5890] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.460396][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.463825][ T5890] usb 6-1: Product: syz [ 82.465823][ T5890] usb 6-1: Manufacturer: syz [ 82.511186][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 82.513534][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 82.524676][ T5890] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 82.527281][ T5890] cdc_wdm 6-1:1.0: Unknown control protocol [ 82.711059][ T54] usb 8-1: unable to get BOS descriptor or descriptor too short [ 82.726979][ T54] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 82.737921][ T54] usb 8-1: can't read configurations, error -71 [ 83.898954][ T6264] siw: device registration error -23 [ 84.128741][ T6270] kAFS: No cell specified [ 84.202935][ T39] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 84.364067][ T39] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 84.375482][ T39] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 84.379668][ T39] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.385211][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.443137][ T6275] siw: device registration error -23 [ 84.568586][ T6281] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 84.570615][ T6281] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 84.580115][ T6281] vhci_hcd vhci_hcd.0: Device attached [ 84.641857][ T6281] ./bus: Can't lookup blockdev [ 84.759935][ T39] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.841933][ T6268] netlink: 76 bytes leftover after parsing attributes in process `syz.3.87'. [ 84.849954][ T54] usb 38-1: SetAddress Request (6) to port 0 [ 84.852177][ T54] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 84.909822][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 84.913478][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 84.917080][ T39] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.925533][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.930145][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.936989][ T39] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 84.940830][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.944076][ T39] usb 7-1: Product: syz [ 84.945767][ T39] usb 7-1: Manufacturer: syz [ 84.947690][ T39] usb 7-1: SerialNumber: syz [ 84.954324][ T39] usb 7-1: config 0 descriptor?? [ 84.957138][ T6280] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 85.087585][ T6282] vhci_hcd: connection reset by peer [ 85.090121][ T97] vhci_hcd vhci_hcd.0: stop threads [ 85.091801][ T97] vhci_hcd vhci_hcd.0: release socket [ 85.094653][ T97] vhci_hcd vhci_hcd.0: disconnect device [ 85.165861][ T39] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 85.171247][ T39] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5 [ 85.391855][ C2] powermate: config urb returned -71 [ 85.392362][ T5890] usb 7-1: USB disconnect, device number 6 [ 85.393534][ C2] powermate: usb_submit_urb(config) failed [ 85.393563][ C2] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 85.902572][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.904764][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.906814][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.908810][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.910889][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.912909][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.914971][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.916987][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.919021][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.921057][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.923158][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.925200][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.929889][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.932095][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.938050][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.940076][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.944738][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.946753][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.948892][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.950978][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.955779][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 85.960064][ T1473] usb 6-1: USB disconnect, device number 3 [ 86.320899][ T5758] Bluetooth: hci3: command 0x0406 tx timeout [ 86.658597][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 86.658642][ T40] audit: type=1326 audit(1780858230.752:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.94" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x0 [ 86.688267][ T10] cfg80211: failed to load regulatory.db [ 86.960713][ T10] usb 8-1: USB disconnect, device number 4 [ 87.217261][ T6303] netlink: 'syz.3.96': attribute type 11 has an invalid length. [ 87.364485][ T6303] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 87.371866][ T6303] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 87.756191][ T6313] siw: device registration error -23 [ 87.828171][ T29] IPVS: starting estimator thread 0... [ 87.870539][ T6319] warning: `syz.3.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.949876][ T6317] IPVS: using max 44 ests per chain, 105600 per kthread [ 88.066855][ T6321] lo speed is unknown, defaulting to 1000 [ 88.069934][ T6321] lo speed is unknown, defaulting to 1000 [ 88.081882][ T6321] lo speed is unknown, defaulting to 1000 [ 88.087284][ T6321] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 88.096948][ T6321] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 88.107130][ T6321] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 88.129233][ T6321] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 88.166067][ T6321] lo speed is unknown, defaulting to 1000 [ 88.171875][ T6321] lo speed is unknown, defaulting to 1000 [ 88.175168][ T6321] lo speed is unknown, defaulting to 1000 [ 88.180942][ T6321] lo speed is unknown, defaulting to 1000 [ 88.879828][ T1473] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 89.058577][ T1473] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.064755][ T1473] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.075384][ T1473] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.082596][ T1473] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 89.088144][ T1473] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 89.100666][ T1473] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.104542][ T1473] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.107883][ T1473] usb 8-1: Product: syz [ 89.109174][ T1473] usb 8-1: Manufacturer: syz [ 89.120144][ T1473] cdc_wdm 8-1:1.0: skipping garbage [ 89.124763][ T1473] cdc_wdm 8-1:1.0: skipping garbage [ 89.145328][ T1473] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 89.147221][ T1473] cdc_wdm 8-1:1.0: Unknown control protocol [ 89.879866][ T2316] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.920317][ T54] usb 38-1: device descriptor read/8, error -110 [ 90.045481][ T2316] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.049671][ T2316] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 90.058439][ T2316] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.063633][ T2316] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 90.069817][ T2316] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 90.077571][ T2316] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.092006][ T2316] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.098567][ T2316] usb 5-1: Product: syz [ 90.108745][ T2316] usb 5-1: Manufacturer: syz [ 90.125975][ T2316] cdc_wdm 5-1:1.0: skipping garbage [ 90.143725][ T2316] cdc_wdm 5-1:1.0: skipping garbage [ 90.165692][ T2316] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 90.174649][ T2316] cdc_wdm 5-1:1.0: Unknown control protocol [ 90.352646][ T54] usb usb38-port1: attempt power cycle [ 90.733005][ T29] usb 5-1: USB disconnect, device number 4 [ 90.990488][ T54] usb usb38-port1: unable to enumerate USB device [ 91.888736][ C1] wdm_int_callback: 6 callbacks suppressed [ 91.888751][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 91.889952][ T10] usb 8-1: USB disconnect, device number 5 [ 91.890901][ C1] wdm_int_callback: 6 callbacks suppressed [ 91.890914][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 91.890937][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 92.257506][ T6397] siw: device registration error -23 [ 92.610258][ T40] audit: type=1804 audit(1780858236.702:22): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.114" name="/newroot/30/bus/bus" dev="overlay" ino=195 res=1 errno=0 [ 92.617697][ T40] audit: type=1804 audit(1780858236.712:23): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.114" name="/newroot/30/bus/bus" dev="overlay" ino=195 res=1 errno=0 [ 93.425991][ T6418] bridge0: port 1(erspan0) entered disabled state [ 93.451538][ T6421] netlink: 'syz.2.116': attribute type 13 has an invalid length. [ 93.454109][ T6421] netlink: 'syz.2.116': attribute type 17 has an invalid length. [ 93.568913][ T40] audit: type=1326 audit(1780858237.662:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.0.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 93.590553][ T40] audit: type=1326 audit(1780858237.662:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.0.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 93.607824][ T40] audit: type=1326 audit(1780858237.682:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.0.117" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 93.614947][ T40] audit: type=1326 audit(1780858237.682:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.0.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 93.624581][ T40] audit: type=1326 audit(1780858237.682:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.0.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 93.635860][ T40] audit: type=1326 audit(1780858237.682:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.0.117" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 93.642803][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 93.662907][ T40] audit: type=1326 audit(1780858237.692:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.0.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 93.703775][ T40] audit: type=1326 audit(1780858237.692:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.0.117" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 93.777888][ T2316] lo speed is unknown, defaulting to 1000 [ 94.536709][ T6421] bridge0: port 1(erspan0) entered blocking state [ 94.539416][ T6421] bridge0: port 1(erspan0) entered forwarding state [ 94.545122][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.574779][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.580700][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.627785][ T6421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.631101][ T6421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.731721][ T6421] veth1_vlan: left promiscuous mode [ 94.734206][ T6421] veth0_vlan: left promiscuous mode [ 94.736268][ T6421] veth0_vlan: entered promiscuous mode [ 94.740891][ T6421] veth1_vlan: entered promiscuous mode [ 94.746517][ T6421] veth1_macvtap: left promiscuous mode [ 94.749250][ T6421] veth0_macvtap: left promiscuous mode [ 94.751792][ T6421] veth0_macvtap: entered promiscuous mode [ 94.785351][ T6421] veth1_macvtap: entered promiscuous mode [ 94.797979][ T6421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.047763][ T6421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.063471][ T6421] netdevsim netdevsim2 netdevsim1: refused to change device tx_queue_len [ 95.089890][ T6421] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 95.097654][ T6427] netlink: 'syz.3.118': attribute type 12 has an invalid length. [ 95.140946][ T6421] syz.2.116 (6421) used greatest stack depth: 18808 bytes left [ 95.313291][ T2316] lo speed is unknown, defaulting to 1000 [ 95.400433][ T6439] pim6reg: entered allmulticast mode [ 95.406037][ T6435] team0: entered allmulticast mode [ 95.408217][ T6435] team_slave_0: entered allmulticast mode [ 95.411885][ T6435] team_slave_1: entered allmulticast mode [ 95.414457][ T6436] team0: left allmulticast mode [ 95.416058][ T6436] team_slave_0: left allmulticast mode [ 95.417927][ T6436] team_slave_1: left allmulticast mode [ 95.421417][ T6436] pim6reg: left allmulticast mode [ 95.469691][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'. [ 97.079932][ T6472] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 97.082487][ T6472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 97.099918][ T6472] vhci_hcd vhci_hcd.0: Device attached [ 97.359913][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 97.362174][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 97.413757][ T6483] Zero length message leads to an empty skb [ 97.424569][ T6483] Bluetooth: MGMT ver 1.23 [ 97.501706][ T6485] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 98.460141][ T6495] siw: device registration error -23 [ 98.466782][ T6472] /dev/sr0: Can't open blockdev [ 98.763331][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 98.796171][ T6473] vhci_hcd: connection reset by peer [ 98.799081][ T97] vhci_hcd vhci_hcd.1: stop threads [ 98.809271][ T97] vhci_hcd vhci_hcd.1: release socket [ 98.816312][ T97] vhci_hcd vhci_hcd.1: disconnect device [ 98.872971][ T6506] netlink: 'syz.3.133': attribute type 10 has an invalid length. [ 98.879382][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.133'. [ 98.902924][ T97] Bluetooth: hci4: Frame reassembly failed (-84) [ 98.905768][ T6506] dummy0: entered promiscuous mode [ 99.051494][ T6506] bridge0: port 3(dummy0) entered blocking state [ 99.060089][ T6506] bridge0: port 3(dummy0) entered disabled state [ 99.067382][ T6506] dummy0: entered allmulticast mode [ 99.101970][ T6506] bridge0: port 3(dummy0) entered blocking state [ 99.104737][ T6506] bridge0: port 3(dummy0) entered forwarding state [ 99.948056][ T6524] netlink: 120 bytes leftover after parsing attributes in process `syz.1.138'. [ 99.950848][ T6524] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 99.954485][ T6524] netlink: 64 bytes leftover after parsing attributes in process `syz.1.138'. [ 100.117841][ T5758] Bluetooth: hci1: hcon ffff888026488000 sent 1 < count 10 [ 100.120420][ T5758] Bluetooth: hci1: hcon ffff88802910c000 sent 1 < count 16 [ 100.123319][ T5758] Bluetooth: hci1: hcon ffff88802910c000 sent 0 < count 5 [ 100.127859][ T5758] Bluetooth: hci1: hcon ffff88802910c000 sent 0 < count 23552 [ 100.908198][ T6530] capability: warning: `syz.1.140' uses deprecated v2 capabilities in a way that may be insecure [ 100.971720][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 101.299860][ T843] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 102.031859][ T843] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.163475][ T843] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 102.180673][ T843] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.184399][ T843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 102.188803][ T843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 102.195431][ T843] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.199247][ T843] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.202885][ T843] usb 6-1: Product: syz [ 102.204618][ T843] usb 6-1: Manufacturer: syz [ 102.332402][ T843] cdc_wdm 6-1:1.0: skipping garbage [ 102.335624][ T843] cdc_wdm 6-1:1.0: skipping garbage [ 102.363794][ T843] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 102.366161][ T843] cdc_wdm 6-1:1.0: Unknown control protocol [ 102.409842][ T29] usb 40-1: device descriptor read/8, error -110 [ 102.559372][ T6535] bridge_slave_0: left allmulticast mode [ 102.561821][ T6535] bridge_slave_0: left promiscuous mode [ 102.564383][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.810721][ T29] usb usb40-port1: attempt power cycle [ 102.930319][ T6535] bridge_slave_1: left allmulticast mode [ 102.981893][ T6535] bridge_slave_1: left promiscuous mode [ 102.989566][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.996204][ T6555] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 103.012679][ T6555] netlink: 'syz.0.147': attribute type 2 has an invalid length. [ 103.055969][ T6535] bond0: (slave bond_slave_0): Releasing backup interface [ 103.083126][ T6535] bond0: (slave bond_slave_1): Releasing backup interface [ 103.094183][ T6535] team0: Port device team_slave_0 removed [ 103.098994][ T6535] team0: Port device team_slave_1 removed [ 103.099387][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.099403][ T6535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.108177][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.108190][ T6535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.112641][ T6535] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.211036][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 103.213799][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 103.216575][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 103.219295][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 103.222071][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 103.222403][ T34] usb 6-1: USB disconnect, device number 4 [ 103.224797][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 103.224814][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 103.402808][ T6555] /dev/sr0: Can't open blockdev [ 103.405731][ T29] usb usb40-port1: unable to enumerate USB device [ 105.097606][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.152'. [ 105.139888][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 105.290406][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 105.301375][ T39] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.304823][ T39] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.308276][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 105.315663][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.329867][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.367023][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 105.370296][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 105.373050][ T6577] netlink: 'syz.2.153': attribute type 18 has an invalid length. [ 105.791637][ T6581] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 105.794408][ T6581] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.799628][ T6581] vhci_hcd vhci_hcd.0: Device attached [ 106.110080][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 106.113191][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 106.284217][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.297907][ T39] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.304641][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.308117][ T6582] vhci_hcd: connection reset by peer [ 106.310837][ T39] usb 6-1: config 0 descriptor?? [ 106.311655][ T97] vhci_hcd vhci_hcd.2: stop threads [ 106.315257][ T97] vhci_hcd vhci_hcd.2: release socket [ 106.317694][ T97] vhci_hcd vhci_hcd.2: disconnect device [ 106.692073][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 106.695005][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 106.697802][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 106.745780][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 107.359895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 107.451605][ T39] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.867958][ T843] usb 6-1: USB disconnect, device number 5 [ 107.880034][ T843] usblp0: removed [ 109.063239][ T6620] siw: device registration error -23 [ 109.269381][ T6622] bridge1: entered promiscuous mode [ 109.271768][ T6622] bridge1: entered allmulticast mode [ 109.356628][ T6625] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 109.359091][ T6625] netlink: 280 bytes leftover after parsing attributes in process `syz.0.164'. [ 109.466041][ T6628] syz.0.164 (6628): /proc/6624/oom_adj is deprecated, please use /proc/6624/oom_score_adj instead. [ 109.662242][ T6631] fuse: Bad value for 'fd' [ 109.671254][ T6631] netlink: 'syz.3.166': attribute type 11 has an invalid length. [ 110.430076][ T5749] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 110.436383][ T5749] Bluetooth: hci2: Injecting HCI hardware error event [ 110.445883][ T5758] Bluetooth: hci2: hardware error 0x00 [ 111.212015][ T29] usb 42-1: device descriptor read/8, error -110 [ 111.354527][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 111.354538][ T40] audit: type=1326 audit(1780858255.452:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.374376][ T40] audit: type=1326 audit(1780858255.472:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.385898][ T40] audit: type=1326 audit(1780858255.472:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.402494][ T40] audit: type=1326 audit(1780858255.472:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.416133][ T40] audit: type=1326 audit(1780858255.472:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.432610][ T40] audit: type=1326 audit(1780858255.472:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.452822][ T40] audit: type=1326 audit(1780858255.482:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.477215][ T40] audit: type=1326 audit(1780858255.482:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.517747][ T40] audit: type=1326 audit(1780858255.502:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.517791][ T40] audit: type=1326 audit(1780858255.502:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 111.559258][ T6658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.659369][ T29] usb usb42-port1: attempt power cycle [ 112.285962][ T29] usb usb42-port1: unable to enumerate USB device [ 112.482120][ T5758] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 112.548420][ T6668] siw: device registration error -23 [ 112.700624][ T6669] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 112.702622][ T6669] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 112.705215][ T6669] vhci_hcd vhci_hcd.0: Device attached [ 112.893204][ T6670] /dev/sr0: Can't open blockdev [ 113.090932][ T29] usb 38-1: SetAddress Request (10) to port 0 [ 113.099428][ T29] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 113.254566][ T6671] vhci_hcd: connection reset by peer [ 113.259405][ T117] vhci_hcd vhci_hcd.0: stop threads [ 113.261863][ T117] vhci_hcd vhci_hcd.0: release socket [ 113.264791][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 114.201270][ T6689] siw: device registration error -23 [ 114.243537][ T6692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.585817][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 114.674977][ T6699] siw: device registration error -23 [ 115.397409][ T6704] siw: device registration error -23 [ 115.563549][ T6714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.188'. [ 115.796586][ T6719] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 115.796653][ T6719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 115.796735][ T6719] vhci_hcd vhci_hcd.0: Device attached [ 115.882700][ T6719] geneve2: entered allmulticast mode [ 116.052358][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.190'. [ 116.057564][ T6728] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.061298][ T6728] IPv6: Can't replace route, no match found [ 116.209967][ T5890] usb 42-1: SetAddress Request (6) to port 0 [ 116.250127][ T5890] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 116.342114][ T6722] vhci_hcd: connection reset by peer [ 116.345499][ T12] vhci_hcd vhci_hcd.2: stop threads [ 116.349215][ T12] vhci_hcd vhci_hcd.2: release socket [ 116.355780][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 116.401744][ T6730] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.407282][ T6730] overlayfs: failed to set xattr on upper [ 116.412068][ T6730] overlayfs: ...falling back to redirect_dir=nofollow. [ 116.415100][ T6730] overlayfs: ...falling back to index=off. [ 116.424627][ T6730] overlayfs: ...falling back to uuid=null. [ 116.433915][ T6731] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 116.452257][ T6730] overlayfs: conflicting lowerdir path [ 116.533239][ T6732] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 116.536184][ T6732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 116.550459][ T6732] vhci_hcd vhci_hcd.0: Device attached [ 116.739164][ T6733] vhci_hcd: connection closed [ 116.739610][ T13] vhci_hcd vhci_hcd.0: stop threads [ 116.746831][ T13] vhci_hcd vhci_hcd.0: release socket [ 116.750303][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 117.043880][ T6738] netlink: 120 bytes leftover after parsing attributes in process `syz.1.191'. [ 117.047800][ T6738] netlink: 'syz.1.191': attribute type 1 has an invalid length. [ 117.056912][ T6738] netlink: 64 bytes leftover after parsing attributes in process `syz.1.191'. [ 117.111483][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 117.111498][ T40] audit: type=1326 audit(1780858261.212:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.1.191" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef7c code=0x0 [ 117.648065][ T40] audit: type=1800 audit(1780858261.742:126): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.194" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 117.659565][ T6759] input: syz0 as /devices/virtual/input/input6 [ 117.754154][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.198'. [ 118.124697][ T6768] Invalid ELF header type: 3 != 1 [ 118.361026][ T29] usb 38-1: device descriptor read/8, error -110 [ 118.792683][ T29] usb usb38-port1: attempt power cycle [ 119.089788][ T6773] overlayfs: failed to resolve './bus': -2 [ 119.421993][ T29] usb usb38-port1: unable to enumerate USB device [ 121.359930][ T5890] usb 42-1: device descriptor read/8, error -110 [ 121.471402][ T6790] lo speed is unknown, defaulting to 1000 [ 121.478608][ T6790] lo speed is unknown, defaulting to 1000 [ 122.349337][ T6788] siw: device registration error -23 [ 122.513503][ T5890] usb usb42-port1: attempt power cycle [ 122.665232][ T6798] siw: device registration error -23 [ 122.924149][ T6796] siw: device registration error -23 [ 122.998518][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 123.105554][ T6806] siw: device registration error -23 [ 123.129710][ T5890] usb usb42-port1: unable to enumerate USB device [ 124.708591][ T6826] lo speed is unknown, defaulting to 1000 [ 124.847366][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 124.853206][ T6826] lo speed is unknown, defaulting to 1000 [ 125.293780][ T6845] lo speed is unknown, defaulting to 1000 [ 125.296454][ T6845] lo speed is unknown, defaulting to 1000 [ 125.607532][ T6853] siw: device registration error -23 [ 128.545410][ T6897] input: syz1 as /devices/virtual/input/input7 [ 129.061453][ T6907] openvswitch: netlink: VLAN attribute unexpected. [ 129.196766][ T6912] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 129.212892][ T1244] Bluetooth: hci4: Frame reassembly failed (-84) [ 129.734912][ T6925] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 129.737499][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.741944][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 129.844194][ T6929] overlayfs: conflicting lowerdir path [ 129.882495][ T6930] rdma_rxe: rxe_newlink: failed to add wg2 [ 130.010481][ T29] usb 38-1: SetAddress Request (14) to port 0 [ 130.010544][ T29] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 130.010892][ T6933] dlm: Unknown command passed to DLM device : 3 [ 130.010892][ T6933] [ 130.109327][ T6936] random: crng reseeded on system resumption [ 130.307239][ T6940] batman_adv: batadv0: Adding interface: macsec1 [ 130.309382][ T6940] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 130.315295][ T6940] batman_adv: batadv0: Interface activated: macsec1 [ 130.373946][ T6926] vhci_hcd: connection reset by peer [ 130.377351][ T117] vhci_hcd vhci_hcd.0: stop threads [ 130.378683][ T6936] bridge0: port 3(dummy0) entered disabled state [ 130.379608][ T117] vhci_hcd vhci_hcd.0: release socket [ 130.381616][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.383483][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 130.385891][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.391343][ T6936] bridge0: entered promiscuous mode [ 131.082789][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 131.085862][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'. [ 131.088752][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'. [ 131.097677][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.233'. [ 131.207130][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 131.271098][ T6937] pim6reg: entered allmulticast mode [ 131.322762][ T6939] team0: entered allmulticast mode [ 131.347122][ T6944] team0: left allmulticast mode [ 131.390079][ T6944] pim6reg: left allmulticast mode [ 131.531125][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 131.553446][ T6952] siw: device registration error -23 [ 131.727597][ T6955] siw: device registration error -23 [ 132.035582][ T6964] 9pnet_virtio: no channels available for device 127.0.0.1 [ 132.053109][ T6963] tipc: Started in network mode [ 132.055041][ T6963] tipc: Node identity 4, cluster identity 4711 [ 132.090000][ T6963] tipc: Node number set to 4 [ 132.169105][ T6970] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 132.172026][ T6970] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 132.293040][ T843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 132.461749][ T843] usb 6-1: too many configurations: 36, using maximum allowed: 8 [ 132.466049][ T843] usb 6-1: config index 0 descriptor too short (expected 65158, got 72) [ 132.473266][ T843] usb 6-1: config index 1 descriptor too short (expected 65158, got 72) [ 132.477943][ T843] usb 6-1: config index 2 descriptor too short (expected 65158, got 72) [ 132.484211][ T843] usb 6-1: config index 3 descriptor too short (expected 65158, got 72) [ 132.491248][ T843] usb 6-1: config index 4 descriptor too short (expected 65158, got 72) [ 132.496164][ T843] usb 6-1: config index 5 descriptor too short (expected 65158, got 72) [ 132.504339][ T843] usb 6-1: config index 6 descriptor too short (expected 65158, got 72) [ 132.508882][ T843] usb 6-1: config index 7 descriptor too short (expected 65158, got 72) [ 132.515943][ T843] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 132.519889][ T843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.523193][ T843] usb 6-1: Product: syz [ 132.525347][ T843] usb 6-1: Manufacturer: syz [ 132.527405][ T40] audit: type=1804 audit(1780858276.622:127): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.241" name="/newroot/60/bus/bus" dev="overlay" ino=359 res=1 errno=0 [ 132.527978][ T843] usb 6-1: SerialNumber: syz [ 132.541385][ T843] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.580518][ T39] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.611417][ T40] audit: type=1804 audit(1780858276.702:128): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.241" name="/newroot/60/bus/bus" dev="overlay" ino=359 res=1 errno=0 [ 132.650794][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 132.799633][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.811438][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.821700][ T6966] random: crng reseeded on system resumption [ 132.956711][ T843] usb 6-1: USB disconnect, device number 6 [ 133.043525][ T6987] lo speed is unknown, defaulting to 1000 [ 133.052185][ T6987] lo speed is unknown, defaulting to 1000 [ 133.601007][ T39] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 133.624249][ T39] ath9k_htc: Failed to initialize the device [ 133.646638][ T843] usb 6-1: ath9k_htc: USB layer deinitialized [ 133.949859][ T843] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 134.099902][ T843] usb 6-1: Using ep0 maxpacket: 32 [ 134.104663][ T843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.111799][ T843] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.119200][ T843] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 134.127446][ T843] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 134.131298][ T843] usb 6-1: Product: syz [ 134.133061][ T843] usb 6-1: Manufacturer: syz [ 134.136378][ T843] usb 6-1: SerialNumber: syz [ 134.163080][ T843] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input8 [ 134.415020][ T6998] block nbd0: Unsupported socket: should be TCP or UNIX. [ 134.517861][ T9] usb 6-1: USB disconnect, device number 7 [ 134.602084][ T9] appletouch 6-1:1.0: input: appletouch disconnected [ 135.039961][ T29] usb 38-1: device descriptor read/8, error -110 [ 135.255579][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.249'. [ 135.472445][ T29] usb usb38-port1: attempt power cycle [ 135.672687][ T7056] fuse: Unknown parameter 'user_i00000000000000000000' [ 137.600779][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.603060][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.719927][ T7064] comedi comedi0: reset error (fatal) [ 138.424945][ T7053] lo speed is unknown, defaulting to 1000 [ 138.429359][ T7053] lo speed is unknown, defaulting to 1000 [ 138.686910][ T7070] lo speed is unknown, defaulting to 1000 [ 138.722606][ T7070] lo speed is unknown, defaulting to 1000 [ 138.842249][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 138.897798][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 139.114313][ T29] usb usb38-port1: unable to enumerate USB device [ 139.119502][ T7074] bond1: entered promiscuous mode [ 139.120865][ T50] Process accounting resumed [ 139.122112][ T7074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.322030][ T7078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.324769][ T7078] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 140.328526][ T7078] bond1: (slave sit1): Error -95 calling set_mac_address [ 140.618035][ T7085] Process accounting resumed [ 140.887151][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 140.887165][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 141.116382][ T7094] bridge1: left promiscuous mode [ 141.118143][ T7094] bridge1: left allmulticast mode [ 141.236798][ T6370] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.247485][ T6370] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.260635][ T6370] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.269847][ T6370] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.844525][ T7108] 9p: Bad value for 'rfdno' [ 141.974591][ T7112] input: syz1 as /devices/virtual/input/input9 [ 142.494190][ T7114] siw: device registration error -23 [ 142.693754][ T7121] netlink: 'syz.1.267': attribute type 12 has an invalid length. [ 142.866860][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 143.100241][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 143.104092][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 143.169319][ T7135] virtio-fs: tag not found [ 143.223269][ T7136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.310188][ T7143] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 144.315766][ T7143] netlink: 'syz.3.280': attribute type 2 has an invalid length. [ 144.519855][ T7146] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 144.519855][ T7146] Ue[%#s' [ 145.582004][ T5758] Bluetooth: hci0: hcon ffff888029e9c000 sent 1 < count 10 [ 145.585757][ T5758] Bluetooth: hci0: hcon ffff88802648c000 sent 1 < count 16 [ 145.588069][ T5758] Bluetooth: hci0: hcon ffff88802648c000 sent 0 < count 5 [ 145.595443][ T5758] Bluetooth: hci0: hcon ffff88802648c000 sent 0 < count 23552 [ 145.599981][ T7145] /dev/sr0: Can't open blockdev [ 147.755885][ T7169] pim6reg: entered allmulticast mode [ 147.846939][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 148.062126][ T7183] siw: device registration error -23 [ 148.172221][ T7187] siw: device registration error -23 [ 148.360317][ T5846] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 148.532819][ T7190] netlink: 'syz.0.283': attribute type 12 has an invalid length. [ 148.908436][ T5846] usb 7-1: Using ep0 maxpacket: 32 [ 149.453836][ T5846] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 149.476637][ T5846] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 149.481184][ T5846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 149.485299][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.489285][ T5846] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.493205][ T5846] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.498360][ T5846] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 149.502057][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.547356][ T5846] usb 7-1: config 0 descriptor?? [ 152.136282][ T5846] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.152203][ T5846] usb 7-1: USB disconnect, device number 7 [ 152.213708][ T5846] usblp0: removed [ 152.427314][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 152.627579][ T5758] Bluetooth: hci3: hcon ffff888028ce0000 sent 1 < count 10 [ 152.968537][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 153.104874][ T7242] bond2: Unable to set down delay as MII monitoring is disabled [ 153.165134][ T7242] bond2 (unregistering): Released all slaves [ 153.334616][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 153.414342][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.437111][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.446357][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 153.456193][ T6297] lo speed is unknown, defaulting to 1000 [ 153.952831][ T7260] siw: device registration error -23 [ 154.003843][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 154.061399][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 154.072266][ T7265] bond2: entered promiscuous mode [ 154.082544][ T7265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.151877][ T34] IPVS: starting estimator thread 0... [ 154.179836][ T5846] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 154.239915][ T7275] IPVS: using max 44 ests per chain, 105600 per kthread [ 154.301357][ T7276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.304006][ T7276] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 154.307880][ T7276] bond2: (slave sit1): Error -95 calling set_mac_address [ 154.329903][ T5846] usb 8-1: Using ep0 maxpacket: 32 [ 154.334170][ T5846] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.337714][ T5846] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.342628][ T5846] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.346289][ T5846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.350597][ T5846] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.355235][ T5846] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.362809][ T5846] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.366685][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.379344][ T5846] usb 8-1: config 0 descriptor?? [ 154.959864][ T40] audit: type=1326 audit(1780858299.022:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.0.298" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x0 [ 155.651891][ T5846] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 155.667107][ T5846] usb 8-1: USB disconnect, device number 7 [ 155.682775][ T5846] usblp0: removed [ 155.888063][ T7270] Process accounting resumed [ 157.039415][ T7305] siw: device registration error -23 [ 157.051468][ T7302] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 157.065040][ T7307] fuse: Unknown parameter '0x0000000000000009' [ 157.093490][ T7309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.096406][ T7301] lo speed is unknown, defaulting to 1000 [ 157.623510][ T7301] lo speed is unknown, defaulting to 1000 [ 157.779981][ T7320] netlink: 'syz.1.307': attribute type 2 has an invalid length. [ 157.782773][ T7320] netlink: 224 bytes leftover after parsing attributes in process `syz.1.307'. [ 158.442625][ T7309] macvlan2: entered promiscuous mode [ 158.445282][ T7309] macvlan2: entered allmulticast mode [ 158.447935][ T7309] bond1: entered allmulticast mode [ 158.450718][ T7309] bond1: entered promiscuous mode [ 158.453489][ T7309] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.459911][ T7309] team0: Port device macvlan2 added [ 158.473375][ T7311] ip6gretap1: entered promiscuous mode [ 158.477865][ T7311] ip6gretap1: entered allmulticast mode [ 158.483023][ T7311] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 158.854125][ T7332] geneve2: entered promiscuous mode [ 158.855934][ T7332] geneve2: entered allmulticast mode [ 158.894744][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.954096][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.964776][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.968730][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 159.142839][ T7335] siw: device registration error -23 [ 160.577499][ T7351] NILFS (loop3): device size too small [ 160.679179][ T40] audit: type=1326 audit(1780858304.772:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 160.704403][ T40] audit: type=1326 audit(1780858304.772:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 160.726619][ T40] audit: type=1326 audit(1780858304.782:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 160.754393][ T40] audit: type=1326 audit(1780858304.782:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 160.780936][ T40] audit: type=1326 audit(1780858304.782:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 160.803651][ T40] audit: type=1326 audit(1780858304.782:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 160.816634][ T40] audit: type=1326 audit(1780858304.782:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 160.824135][ T40] audit: type=1326 audit(1780858304.792:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 160.831766][ T40] audit: type=1326 audit(1780858304.822:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 160.839189][ T40] audit: type=1326 audit(1780858304.842:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.2.316" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f93f7c code=0x7ffc0000 [ 161.911424][ T7365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.925016][ T7365] macvlan2: entered promiscuous mode [ 161.927514][ T7365] macvlan2: entered allmulticast mode [ 161.930238][ T7365] bond3: entered allmulticast mode [ 161.932410][ T7365] bond3: entered promiscuous mode [ 161.935108][ T7365] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.939665][ T7365] team0: Port device macvlan2 added [ 161.953100][ T7365] ip6gretap1: entered promiscuous mode [ 161.955328][ T7365] ip6gretap1: entered allmulticast mode [ 161.958534][ T7365] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 164.308752][ T7376] siw: device registration error -23 [ 164.395909][ T7378] siw: device registration error -23 [ 164.738458][ T7393] pim6reg: entered allmulticast mode [ 164.856919][ T7393] team0: entered allmulticast mode [ 164.858715][ T7393] team_slave_0: entered allmulticast mode [ 164.860548][ T7393] team_slave_1: entered allmulticast mode [ 164.869581][ T7393] team0: left allmulticast mode [ 164.871272][ T7393] team_slave_0: left allmulticast mode [ 164.873088][ T7393] team_slave_1: left allmulticast mode [ 164.875135][ T7393] pim6reg: left allmulticast mode [ 165.705152][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 165.705170][ T40] audit: type=1326 audit(1780858309.802:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 165.716323][ T40] audit: type=1326 audit(1780858309.802:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 165.724880][ T40] audit: type=1326 audit(1780858309.802:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 165.734112][ T40] audit: type=1326 audit(1780858309.802:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 165.742703][ T40] audit: type=1326 audit(1780858309.812:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 165.751203][ T40] audit: type=1326 audit(1780858309.812:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 165.759009][ T7399] input: syz1 as /devices/virtual/input/input10 [ 165.759656][ T40] audit: type=1326 audit(1780858309.812:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 165.770358][ T40] audit: type=1326 audit(1780858309.812:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 165.778982][ T40] audit: type=1326 audit(1780858309.812:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 165.787703][ T40] audit: type=1326 audit(1780858309.812:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.324" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 166.020213][ T7403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.037147][ T7403] macvlan3: entered promiscuous mode [ 166.038909][ T7403] macvlan3: entered allmulticast mode [ 166.041904][ T7403] bond4: entered allmulticast mode [ 166.043598][ T7403] bond4: entered promiscuous mode [ 166.045668][ T7403] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 166.048687][ T7403] team0: Port device macvlan3 added [ 166.346135][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 166.353726][ T7417] fuse: fd is not a fuse device [ 166.572078][ T7417] netlink: 'syz.0.329': attribute type 11 has an invalid length. [ 168.498559][ T7433] siw: device registration error -23 [ 169.276724][ T7437] bridge1: entered promiscuous mode [ 169.278524][ T7437] bridge1: entered allmulticast mode [ 169.501023][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [ 169.509965][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 171.093464][ T7456] netlink: 'syz.2.339': attribute type 12 has an invalid length. [ 171.115694][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 171.118735][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 171.121909][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 171.175701][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 172.411967][ T7457] lo speed is unknown, defaulting to 1000 [ 172.422455][ T7457] lo speed is unknown, defaulting to 1000 [ 172.577811][ T7473] tipc: Enabling not permitted [ 172.581733][ T7473] tipc: Enabling of bearer rejected, failed to enable media [ 172.633967][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 172.633983][ T40] audit: type=1800 audit(1780858316.732:279): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.343" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 172.799938][ T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 172.959837][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 172.967309][ T50] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 172.974245][ T50] usb 7-1: config 127 has no interface number 0 [ 172.982423][ T50] usb 7-1: config 127 interface 124 has no altsetting 0 [ 172.994389][ T50] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 173.005261][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.013560][ T50] usb 7-1: Product: syz [ 173.021343][ T50] usb 7-1: Manufacturer: syz [ 173.023711][ T50] usb 7-1: SerialNumber: syz [ 173.255381][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.261929][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.817116][ T7481] siw: device registration error -23 [ 173.960914][ T50] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 174.008634][ T7485] siw: device registration error -23 [ 174.013958][ T7487] pim6reg: entered allmulticast mode [ 174.023626][ T7487] team0: entered allmulticast mode [ 174.025236][ T7487] team_slave_0: entered allmulticast mode [ 174.028120][ T7487] team_slave_1: entered allmulticast mode [ 174.030981][ T7487] team0: left allmulticast mode [ 174.032930][ T7487] team_slave_0: left allmulticast mode [ 174.034624][ T7487] team_slave_1: left allmulticast mode [ 174.036734][ T7487] pim6reg: left allmulticast mode [ 174.148069][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 174.152379][ T50] usb 7-1: device firmware changed [ 174.173585][ T50] usb 7-1: USB disconnect, device number 8 [ 174.273533][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 174.764382][ T7503] bridge2: entered promiscuous mode [ 174.778450][ T7503] bridge2: entered allmulticast mode [ 174.822693][ T7507] netlink: 'syz.2.352': attribute type 12 has an invalid length. [ 175.781700][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 175.785872][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.353'. [ 175.789600][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.353'. [ 175.815308][ T7513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 177.192157][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 178.120145][ T50] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 178.161021][ T7547] xt_hashlimit: invalid rate [ 178.271299][ T50] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 178.273924][ T50] usb 6-1: config 0 has no interface number 0 [ 178.275792][ T50] usb 6-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.279686][ T50] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 178.282569][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.289106][ T50] usb 6-1: config 0 descriptor?? [ 178.319556][ T7543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.364'. [ 178.323207][ T7543] netlink: 21 bytes leftover after parsing attributes in process `syz.3.364'. [ 178.463364][ T7549] bridge2: entered promiscuous mode [ 178.477804][ T7549] bridge2: entered allmulticast mode [ 178.810481][ T40] audit: type=1804 audit(1780858322.912:280): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.365" name="/newroot/98/bus/bus" dev="overlay" ino=570 res=1 errno=0 [ 178.879064][ T7563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.374'. [ 180.325516][ T40] audit: type=1804 audit(1780858324.422:281): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.365" name="/newroot/98/bus/bus" dev="overlay" ino=570 res=1 errno=0 [ 180.624687][ T34] usb 6-1: USB disconnect, device number 8 [ 180.639891][ T5758] Bluetooth: hci1: command 0x0406 tx timeout [ 180.639908][ T5745] Bluetooth: hci0: command 0x0406 tx timeout [ 181.178434][ T7569] IPVS: stopping master sync thread 6068 ... [ 181.711907][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 181.715604][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'. [ 181.719227][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'. [ 181.742463][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'. [ 183.286821][ T7600] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.375'. [ 183.324782][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 185.069057][ T7604] netlink: 'syz.1.376': attribute type 12 has an invalid length. [ 186.098994][ T40] audit: type=1804 audit(1780858330.192:282): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.379" name="/newroot/89/bus/bus" dev="overlay" ino=535 res=1 errno=0 [ 186.188575][ T40] audit: type=1804 audit(1780858330.282:283): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.379" name="/newroot/89/bus/bus" dev="overlay" ino=535 res=1 errno=0 [ 186.557739][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.381'. [ 186.846812][ T7625] binder: 7621:7625 ioctl 40285881 0 returned -22 [ 188.468190][ T7635] siw: device registration error -23 [ 188.692901][ T7639] siw: device registration error -23 [ 188.879154][ T7644] siw: device registration error -23 [ 188.940741][ T7646] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 189.036398][ T7648] bridge0: port 3(erspan0) entered blocking state [ 189.041682][ T7648] bridge0: port 3(erspan0) entered disabled state [ 189.103201][ T7648] erspan0: entered allmulticast mode [ 189.115481][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.398'. [ 189.122496][ T7648] erspan0: entered promiscuous mode [ 189.175144][ T7652] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 189.177864][ T7652] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 189.189300][ T7652] vhci_hcd vhci_hcd.0: Device attached [ 189.200028][ T7652] netlink: 'syz.1.390': attribute type 12 has an invalid length. [ 189.752234][ T6297] usb 40-1: SetAddress Request (6) to port 0 [ 189.755621][ T6297] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 190.055474][ T7653] vhci_hcd: connection reset by peer [ 190.060424][ T194] vhci_hcd vhci_hcd.1: stop threads [ 190.062038][ T194] vhci_hcd vhci_hcd.1: release socket [ 190.066777][ T194] vhci_hcd vhci_hcd.1: disconnect device [ 190.085544][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 190.089162][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.394'. [ 190.094100][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.394'. [ 190.105089][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.394'. [ 191.078243][ T7681] netlink: 'syz.3.397': attribute type 13 has an invalid length. [ 191.081350][ T7681] netlink: 'syz.3.397': attribute type 17 has an invalid length. [ 191.168220][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.176629][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.267263][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'. [ 191.290449][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 191.388057][ T7678] batman_adv: batadv0: Interface deactivated: macsec1 [ 191.402559][ T7678] bond1: left allmulticast mode [ 191.406943][ T7678] ip6gretap1: left allmulticast mode [ 191.410511][ T7678] bond1: left promiscuous mode [ 191.413314][ T7678] ip6gretap1: left promiscuous mode [ 191.708602][ T7681] bridge0: left promiscuous mode [ 191.714635][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.719702][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.730391][ T7681] bridge0: port 3(dummy0) entered blocking state [ 191.733146][ T7681] bridge0: port 3(dummy0) entered forwarding state [ 191.741873][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.771209][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.773454][ T7681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.777748][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.779986][ T7681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.790086][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.793859][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.010180][ T7681] veth1_vlan: left promiscuous mode [ 192.034695][ T7681] veth0_vlan: left promiscuous mode [ 192.046964][ T7681] veth0_vlan: entered promiscuous mode [ 192.077085][ T7681] veth1_vlan: entered promiscuous mode [ 192.103400][ T7681] veth1_macvtap: left promiscuous mode [ 192.114667][ T7681] veth0_macvtap: left promiscuous mode [ 192.126486][ T7681] veth0_macvtap: entered promiscuous mode [ 192.216913][ T7681] veth1_macvtap: entered promiscuous mode [ 192.244565][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.316293][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.382042][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.465090][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.528711][ T7681] netdevsim netdevsim3 netdevsim3: refused to change device tx_queue_len [ 192.534576][ T7681] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 192.651226][ T7036] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.655391][ T7036] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.666065][ T7036] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.673010][ T7036] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 193.041126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 193.162573][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 193.167861][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 193.174098][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 193.199862][ T40] audit: type=1804 audit(1780858337.292:284): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.404" name="/newroot/95/bus/bus" dev="overlay" ino=552 res=1 errno=0 [ 194.202150][ T40] audit: type=1804 audit(1780858338.302:285): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.404" name="/newroot/95/bus/bus" dev="overlay" ino=552 res=1 errno=0 [ 194.530109][ T7724] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 194.564692][ T7724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.577465][ T7724] macvlan4: entered promiscuous mode [ 194.579389][ T7724] macvlan4: entered allmulticast mode [ 194.581398][ T7724] bond5: entered allmulticast mode [ 194.583153][ T7724] bond5: entered promiscuous mode [ 194.586341][ T7724] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 194.589889][ T7724] team0: Port device macvlan4 added [ 194.702235][ T7728] siw: device registration error -23 [ 194.799939][ T6297] usb 40-1: device descriptor read/8, error -110 [ 195.320667][ T6297] usb usb40-port1: attempt power cycle [ 195.599525][ T7742] netlink: 'syz.1.414': attribute type 13 has an invalid length. [ 195.602864][ T7742] netlink: 'syz.1.414': attribute type 17 has an invalid length. [ 195.900729][ T6297] usb usb40-port1: unable to enumerate USB device [ 195.904218][ T40] audit: type=1326 audit(1780858340.002:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 195.917387][ T40] audit: type=1326 audit(1780858340.002:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 195.973895][ T40] audit: type=1326 audit(1780858340.072:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 195.986981][ T40] audit: type=1326 audit(1780858340.072:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 196.003832][ T40] audit: type=1326 audit(1780858340.072:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 196.018462][ T40] audit: type=1326 audit(1780858340.082:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 196.037313][ T40] audit: type=1326 audit(1780858340.082:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 196.052953][ T40] audit: type=1326 audit(1780858340.082:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 196.714040][ T7742] syz_tun: refused to change device tx_queue_len [ 196.720059][ T7742] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 196.774323][ T7742] syz.1.414 (7742) used greatest stack depth: 18336 bytes left [ 197.469233][ T7797] siw: device registration error -23 [ 197.799892][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 197.949852][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 197.953077][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 197.958808][ T34] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.962949][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.969188][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.978613][ T34] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 197.982357][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.988662][ T34] usb 8-1: Product: syz [ 197.990462][ T34] usb 8-1: Manufacturer: syz [ 197.992146][ T34] usb 8-1: SerialNumber: syz [ 197.995544][ T34] usb 8-1: config 0 descriptor?? [ 197.999137][ T7803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 198.122352][ T7809] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 198.144574][ T7809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.161925][ T7809] macvlan2: entered promiscuous mode [ 198.164216][ T7809] macvlan2: entered allmulticast mode [ 198.166379][ T7809] bond1: entered allmulticast mode [ 198.168738][ T7809] bond1: entered promiscuous mode [ 198.174513][ T7809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.180280][ T7809] team0: Port device macvlan2 added [ 198.230264][ T7809] ip6gretap1: entered promiscuous mode [ 198.240061][ T7809] ip6gretap1: entered allmulticast mode [ 198.248221][ T34] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 198.252918][ T7809] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 198.258129][ T34] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 198.361258][ T7813] netlink: 'syz.1.420': attribute type 12 has an invalid length. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x27a000) [ 198.559828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 198.598849][ C3] powermate: config urb returned -71 [ 198.599973][ T5890] usb 8-1: USB disconnect, device number 8 [ 198.600847][ C3] powermate: usb_submit_urb(config) failed [ 198.601053][ C3] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 198.780861][ T7821] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 198.784057][ T7821] overlayfs: failed to set xattr on upper [ 198.786605][ T7821] overlayfs: ...falling back to redirect_dir=nofollow. [ 198.789539][ T7821] overlayfs: ...falling back to index=off. [ 198.793847][ T7821] overlayfs: ...falling back to uuid=null. [ 198.796673][ T7821] overlayfs: conflicting lowerdir path [ 198.818897][ T7821] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 198.835314][ T7821] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 198.838186][ T7821] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.844380][ T7821] vhci_hcd vhci_hcd.0: Device attached [ 199.043197][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.046055][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.120001][ T39] usb 42-1: SetAddress Request (10) to port 0 [ 199.122807][ T39] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 199.262742][ T1130] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 199.266440][ T1130] ata1: failed to read log page 10h (errno=-5) [ 199.269668][ T1130] ata1.00: exception Emask 0x1 SAct 0x20800 SErr 0x0 action 0x0 [ 199.274789][ T1130] ata1.00: irq_stat 0x41000000 [ 199.279701][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 199.285182][ T1130] ata1.00: cmd 60/d0:58:e6:51:01/13:00:00:00:00/40 tag 11 ncq dma 2596864 in [ 199.285182][ T1130] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 199.292881][ T1130] ata1.00: status: { DRDY } [ 199.299931][ T1130] ata1.00: failed command: WRITE FPDMA QUEUED [ 199.304645][ T1130] ata1.00: cmd 61/18:88:7e:09:10/00:00:00:00:00/40 tag 17 ncq dma 12288 out [ 199.304645][ T1130] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 199.312330][ T1130] ata1.00: status: { DRDY } [ 199.315131][ T1130] ata1.00: error: { ABRT } [ 199.319161][ T1130] ata1.00: configured for UDMA/100 [ 199.325369][ T1130] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 199.330937][ T1130] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 199.335090][ T1130] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 199.338114][ T1130] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 51 e6 00 13 d0 00 [ 199.345277][ T1130] I/O error, dev sda, sector 86502 op 0x0:(READ) flags 0x80700 phys_seg 138 prio class 2 [ 199.356035][ T1130] ata1: EH complete [ 199.414294][ T7822] vhci_hcd: connection reset by peer [ 199.417141][ T7035] vhci_hcd vhci_hcd.2: stop threads [ 199.418935][ T7035] vhci_hcd vhci_hcd.2: release socket [ 199.426057][ T7035] vhci_hcd vhci_hcd.2: disconnect device qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x244000) [ 199.940576][ T1130] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 199.948052][ T1130] ata1: failed to read log page 10h (errno=-5) [ 199.952525][ T1130] ata1.00: NCQ disabled due to excessive errors [ 199.959996][ T1130] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 199.968417][ T1130] ata1.00: irq_stat 0x41000000 [ 199.971833][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 199.977212][ T1130] ata1.00: cmd 60/20:58:76:1b:01/12:00:00:00:00/40 tag 11 ncq dma 2375680 in [ 199.977212][ T1130] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 199.994054][ T1130] ata1.00: status: { DRDY } [ 199.999508][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 200.006554][ T1130] ata1.00: cmd 60/98:60:96:2d:01/05:00:00:00:00/40 tag 12 ncq dma 733184 in [ 200.006554][ T1130] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 200.021062][ T1130] ata1.00: status: { DRDY } [ 200.029350][ T1130] ata1.00: configured for UDMA/100 [ 200.034403][ T1130] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 200.038685][ T1130] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 200.044068][ T1130] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 200.048920][ T1130] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 1b 76 00 12 20 00 [ 200.052826][ T1130] I/O error, dev sda, sector 72566 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 200.066324][ T1130] sd 0:0:0:0: [sda] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 200.073261][ T1130] sd 0:0:0:0: [sda] tag#12 Sense Key : Aborted Command [current] [ 200.078839][ T1130] sd 0:0:0:0: [sda] tag#12 Add. Sense: No additional sense information [ 200.083860][ T1130] sd 0:0:0:0: [sda] tag#12 CDB: Read(10) 28 00 00 01 2d 96 00 05 98 00 [ 200.088654][ T1130] I/O error, dev sda, sector 77206 op 0x0:(READ) flags 0x80700 phys_seg 111 prio class 2 [ 200.096574][ T1130] ata1: EH complete [ 200.305427][ T7843] bridge0: port 3(erspan0) entered disabled state [ 200.315856][ T7845] netlink: 'syz.0.426': attribute type 13 has an invalid length. [ 200.323420][ T7845] netlink: 'syz.0.426': attribute type 17 has an invalid length. [ 200.504960][ T7843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.512618][ T7843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.708091][ T7843] bond1: left allmulticast mode [ 200.709713][ T7843] ip6gretap1: left allmulticast mode [ 200.711898][ T7843] bond1: left promiscuous mode [ 200.713638][ T7843] ip6gretap1: left promiscuous mode [ 200.718512][ T843] lo speed is unknown, defaulting to 1000 [ 200.818314][ T7852] __nla_validate_parse: 1 callbacks suppressed [ 200.818327][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 200.891198][ T7857] siw: device registration error -23 [ 200.931609][ T7858] netlink: 'syz.2.428': attribute type 10 has an invalid length. [ 200.937954][ T7858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.428'. [ 201.138370][ T7845] ip6gretap0: refused to change device tx_queue_len [ 201.141615][ T7845] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 201.156799][ T7035] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.161945][ T34] lo speed is unknown, defaulting to 1000 [ 201.189879][ T7858] dummy0: entered promiscuous mode [ 201.205940][ T7858] bridge0: port 2(dummy0) entered blocking state [ 201.208231][ T7858] bridge0: port 2(dummy0) entered disabled state [ 201.220662][ T7858] dummy0: entered allmulticast mode [ 201.231407][ T7858] bridge0: port 2(dummy0) entered blocking state [ 201.233427][ T7858] bridge0: port 2(dummy0) entered forwarding state [ 201.256887][ T7035] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.264287][ T7035] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.274434][ T7035] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.465993][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 201.466037][ T40] audit: type=1326 audit(1780858345.562:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.481063][ T7868] dlm: Unknown command passed to DLM device : 3 [ 201.481063][ T7868] [ 201.482944][ T40] audit: type=1326 audit(1780858345.572:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.495494][ T40] audit: type=1326 audit(1780858345.572:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.504989][ T40] audit: type=1326 audit(1780858345.572:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.540747][ T40] audit: type=1326 audit(1780858345.572:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.566772][ T40] audit: type=1326 audit(1780858345.582:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.587677][ T40] audit: type=1326 audit(1780858345.592:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.612500][ T40] audit: type=1326 audit(1780858345.592:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.633789][ T40] audit: type=1326 audit(1780858345.652:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.661939][ T40] audit: type=1326 audit(1780858345.652:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 201.778442][ T7873] random: crng reseeded on system resumption [ 202.144118][ T7873] batman_adv: batadv0: Adding interface: macsec1 [ 202.146604][ T7873] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.157896][ T7873] batman_adv: batadv0: Interface activated: macsec1 [ 202.376207][ T7873] bridge0: entered promiscuous mode qemu-system-x86_64: hw/ide/core.c:934: ide_dma_cb: Assertion `prep_size >= 0 && prep_size <= n * 512' failed. Read from remote host localhost: Connection reset by peer client_loop: send disconnect: Broken pipe