last executing test programs: 11.38229215s ago: executing program 1 (id=1775): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x12, 0xa01, 0x70bd27, 0xfffffffd, {0x1e}, [@typed={0xfffffecd, 0xa8}]}, 0x28}, 0x1, 0x0, 0x0, 0x409c}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1a18, 0x3, 0x2}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r4 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f0000001880), 0x0, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000001e7e130000008d87ac17072a99610020b965e5975f8214ab", @ANYRES32, @ANYBLOB="6ce0fbdebd2f940f17123b00ba30d64eb5592d4bbbce45e069a8b6bb3067b0b6a67b9d8e0d926685c051750d967d3b73d37e7c962f07b8224ef2c2cfe995463598577d6465923b7b06fe9b4b4da4f5e363d404b8a77dea5d87a63f691ee9c97e3111aa00", @ANYRESHEX=0x0, @ANYRES8=r5, @ANYBLOB="a6fcf00eeeec5c87893980712698f7eead4f", @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8044) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) landlock_restrict_self(r1, 0x0) 10.373406563s ago: executing program 1 (id=1777): bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) socket(0x2, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) tkill(r3, 0x12) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000280)=@attr_pmu_init) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000e6ffffffffff0f0000"], 0x0) read$FUSE(r4, &(0x7f0000006500)={0x2020}, 0x2020) 9.39338016s ago: executing program 1 (id=1781): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa2c806554a5bb67b, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000002340)={0x0, 0x7a8e, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9.054785205s ago: executing program 1 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.current\x00', 0x275a, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x2040, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) write(r0, &(0x7f00000002c0)="ff62eacd253661dbb5c08b635c615d635f05c2efe0ca959ddcbea3ac1c5e1435a8d2e7de5e27a1d9b1445dc036603874da52741421b0bf69f293aa364dc7d3900ed0bb0b4889749d2ceef2f8e43d54c3e273edc14c473e17bc23a8212c1f5beaac3fde2fff01c0346f4d4fbe1478b9a3eaf161c4526255ef530f2dcda24e0509d6ff87b7d85988eaee9c792573f0cf0f7bbae9b54247586d273a9657350b6b6fb44cbbe64fcdd507b7bc9d11a53705668a7303d160f55877c60fa0420c7c55f4", 0xc0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000004) mount$afs(&(0x7f0000000200), &(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), 0x1004000, &(0x7f00000005c0)={[{@dyn}, {@flock_strict}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_user}, {@smackfshat={'smackfshat', 0x3d, 'pids.current\x00'}}, {@uid_eq}, {@hash}, {@uid_eq}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) ftruncate(r0, 0x5) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x7}) epoll_create1(0x0) 8.124818071s ago: executing program 1 (id=1790): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.346829885s ago: executing program 1 (id=1797): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x78, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r3, 0x3, 0x0) eventfd2(0x1, 0x80001) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000051}, 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f00000001c0)="aca050badbcd404eb36eb056ac0e2805fd5128f942b4eb5b0b5701be1aa66424b079281b650d3a4206bd07d34d0c9df58514790f134769b3553d709c5e0d4c15d7870fa1c4359d6f4bef638597ede39c7a112513f3fa6a21c8a61a193f7a80fa246cf1fc7d5f416038146f4b06f40e14ecf4dc7fc32a450db248f25bceb45b15d6", 0x81, 0x14a6, 0x0, 0x1}]) (async) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f00000001c0)="aca050badbcd404eb36eb056ac0e2805fd5128f942b4eb5b0b5701be1aa66424b079281b650d3a4206bd07d34d0c9df58514790f134769b3553d709c5e0d4c15d7870fa1c4359d6f4bef638597ede39c7a112513f3fa6a21c8a61a193f7a80fa246cf1fc7d5f416038146f4b06f40e14ecf4dc7fc32a450db248f25bceb45b15d6", 0x81, 0x14a6, 0x0, 0x1}]) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 7.296220845s ago: executing program 32 (id=1797): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x78, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r3, 0x3, 0x0) eventfd2(0x1, 0x80001) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000051}, 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f00000001c0)="aca050badbcd404eb36eb056ac0e2805fd5128f942b4eb5b0b5701be1aa66424b079281b650d3a4206bd07d34d0c9df58514790f134769b3553d709c5e0d4c15d7870fa1c4359d6f4bef638597ede39c7a112513f3fa6a21c8a61a193f7a80fa246cf1fc7d5f416038146f4b06f40e14ecf4dc7fc32a450db248f25bceb45b15d6", 0x81, 0x14a6, 0x0, 0x1}]) (async) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f00000001c0)="aca050badbcd404eb36eb056ac0e2805fd5128f942b4eb5b0b5701be1aa66424b079281b650d3a4206bd07d34d0c9df58514790f134769b3553d709c5e0d4c15d7870fa1c4359d6f4bef638597ede39c7a112513f3fa6a21c8a61a193f7a80fa246cf1fc7d5f416038146f4b06f40e14ecf4dc7fc32a450db248f25bceb45b15d6", 0x81, 0x14a6, 0x0, 0x1}]) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 4.654103352s ago: executing program 3 (id=1809): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000140)=0x2, 0x4) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r6 = socket(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000b, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r4], 0x0) lseek(r0, 0x2000, 0x0) 4.419023037s ago: executing program 3 (id=1810): syz_emit_ethernet(0x11e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xe8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @remote, [{0x4, 0x18, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c"}]}}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 4.266111015s ago: executing program 3 (id=1813): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfc}, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) ppoll(&(0x7f0000002540)=[{r2, 0x1582}], 0x1, &(0x7f00000025c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x8, 0x8, 0x4, 0xff, 0xf}, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x9000000) 3.422662286s ago: executing program 2 (id=1814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f00000004c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @multicast}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000004140)=[{0x0}], 0x1, 0x33, 0x4, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x1) r4 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x4885, 0x10, 0x4, 0xa8}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) 2.879127717s ago: executing program 0 (id=1816): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x12, 0xa01, 0x70bd27, 0xfffffffd, {0x1e}, [@typed={0xfffffecd, 0xa8}]}, 0x28}, 0x1, 0x0, 0x0, 0x409c}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1a18, 0x3, 0x2}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r5 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) keyctl$instantiate_iov(0x14, r4, &(0x7f0000001880), 0x0, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r7, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000001e7e130000008d87ac17072a99610020b965e5975f8214ab", @ANYRES32, @ANYBLOB="6ce0fbdebd2f940f17123b00ba30d64eb5592d4bbbce45e069a8b6bb3067b0b6a67b9d8e0d926685c051750d967d3b73d37e7c962f07b8224ef2c2cfe995463598577d6465923b7b06fe9b4b4da4f5e363d404b8a77dea5d87a63f691ee9c97e3111aa00", @ANYRESHEX=0x0, @ANYRES8=r6, @ANYBLOB="a6fcf00eeeec5c87893980712698f7eead4f", @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8044) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) landlock_restrict_self(r1, 0x0) 2.415806237s ago: executing program 0 (id=1817): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x7, 0x0, &(0x7f00000000c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe80, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x41, 0x0, 0x0, 0xad, 0x0, &(0x7f0000000540)="6237ea76a99f1cb66ebd252b7b95139a94ebaf9c9d887302c9056f019edc758989770610205b52a3ecf567d8950f2f726f2e02720c214208051ceefb1c5b94a0570e433db8eb9e59a3fdfdda5e611e51941acde5c4c42d413e0610052faf0badb97669a60e8b9d47c6051c8b30208e6c28e5547e08049b499378594ce8b56e3c8286b5482947abd880cbe18fef47a013da68534cb2286a768c3e88f13fc7c72cc947a465f21c84a807aab2f497", 0x0, 0x0, 0x10}, 0x3a) 2.378249327s ago: executing program 0 (id=1818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x11}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000002540)={0x2a, 0x1, 0x3fff}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.052548253s ago: executing program 2 (id=1819): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000140)=0x2, 0x4) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r6 = socket(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000b, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r4], 0x0) lseek(r0, 0x2000, 0x0) 1.864832585s ago: executing program 4 (id=1798): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f000000ae00)=0x3, 0x4) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000040)=0x7fff, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000000)=0x1000000010) r4 = fsopen(&(0x7f0000000080)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x3, &(0x7f00000000c0)='source', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000240)="ad000000000037eb00800000f1cfb65c", 0x10) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x8800) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r7 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee2, 0x4000, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}) io_uring_enter(r7, 0x47f4, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BLKRRPART(r3, 0x125f, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='sys_exit\x00', r10, 0x0, 0x5}, 0x18) uname(&(0x7f0000000000)=""/225) 1.790160275s ago: executing program 4 (id=1820): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000800) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0xff000000}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1.734420809s ago: executing program 4 (id=1821): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.714094222s ago: executing program 2 (id=1822): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10}}, './file0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080002400000040008000140000000000900010073797a3000000000140000001100010000000000000000000700000a7211afb26115adc6cac940578628329299efc419547fd1eaf9e82aefecec276dd5fb5c"], 0xc4}}, 0x0) syz_pidfd_open(r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40202, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0xaaa, @local, 0xff, 0x1}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe53) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x1f, 0xfffffffb, 0x34014c40, 0x0, 0x0, 0x5b0, 0x0, 0x0, 0x0, 0x10, 0xb}}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008340)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8000, 0xfffffffc, r7, r8, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r9, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r9, r5) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.606578026s ago: executing program 3 (id=1823): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x2, {0x0, 0x0, 0x0, 0x2}, 0x1}) 1.525199422s ago: executing program 3 (id=1824): sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1e18240}, 0xc, &(0x7f0000000300)={&(0x7f0000001840)={0x254, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x76, 0x45, "8422873ec1e90fa7c38bf2f6d312e8161cf71973bae0ddf8820a6de9cdb977f2b1e91a8fb1ad3c42a272f1f2e0f7973454578e253d05d7b794c3df91e1d6f449880cc1b6ead33a8f63258afe686f02f8896313808fb857956e8079d9356f3929056cd75fc56f4f0330dc681c47e59acf71d9"}, @NL80211_ATTR_TESTDATA={0x6e, 0x45, "5ffa462cfec3b9fe904b2a265493b7e9514fabd0596f9db364cc306144871e1e438804ed234a3462277b0c7bf05e344a1e5b1f21cf34bb80872e6fa937293ebad20831d8dfdfdeec6e0e8107d7cd36db16eb54f6efd3eead74ad2f59f5f0fb79c20554c53a511a206e97"}, @NL80211_ATTR_TESTDATA={0x68, 0x45, "f5ea779feca7274438d49207fd3615469170df6388525544fad77f7d1bacbf322b59475fed6cce6e33a17cefeb90cffc94108b4e179cd1fc212dd7ceacb5077c14ac90fa321d6b5bb46fad4e900115ba60459277cb347c6e1f3b18321b3c31a0e6ac2053"}, @NL80211_ATTR_TESTDATA={0xed, 0x45, "ae650b1cd48446da3da4b79b81f8c9a89385b59e81e3977d0643984c775718bb1bafe673243a84468b0e100aed91d0d44bc00a8251243a4ef94f91814671a02835191fe40e812177700c36128ae65de17a1a8e25abe1c20fe52e1afc1252e36c45312279fe628eaebcab94c03254998b539c9681f0a27b9f74f5c44e1c512551236f637e9723c0e37491322c5e42857f74c7deea172ebdae76d22638fa0f71add62738d20e2714f5ecad87bdeb62018400a639500da2933c5640596e398435d7d4bda137ee4c62fbb9bb87ce66a0a52218dfb092f751a00260f1362d485dd7c397ced2526c652d0f5f"}]}, 0x254}, 0x1, 0x0, 0x0, 0x10}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket(0x2a, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000500)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000014) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) readv(r5, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f0000000600)=""/139, 0x8b}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x2, 0x0, 0x0, 0x0, 0x0, 0x1e9]}}, 0x5c) 1.295376655s ago: executing program 0 (id=1825): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x12, 0xa01, 0x70bd27, 0xfffffffd, {0x1e}, [@typed={0xfffffecd, 0xa8}]}, 0x28}, 0x1, 0x0, 0x0, 0x409c}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1a18, 0x3, 0x2}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r5 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) keyctl$instantiate_iov(0x14, r4, &(0x7f0000001880), 0x0, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r7, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000001e7e130000008d87ac17072a99610020b965e5975f8214ab", @ANYRES32, @ANYBLOB="6ce0fbdebd2f940f17123b00ba30d64eb5592d4bbbce45e069a8b6bb3067b0b6a67b9d8e0d926685c051750d967d3b73d37e7c962f07b8224ef2c2cfe995463598577d6465923b7b06fe9b4b4da4f5e363d404b8a77dea5d87a63f691ee9c97e3111aa00", @ANYRESHEX=0x0, @ANYRES8=r6, @ANYBLOB="a6fcf00eeeec5c87893980712698f7eead4f", @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8044) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) landlock_restrict_self(r1, 0x0) 586.655628ms ago: executing program 0 (id=1826): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 506.499294ms ago: executing program 0 (id=1827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f00000004c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @multicast}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000004140)=[{0x0}], 0x1, 0x33, 0x4, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x1) r4 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x4885, 0x10, 0x4, 0xa8}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) 435.271416ms ago: executing program 3 (id=1828): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x340, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_PROBE_RESP={0x61, 0x91, "26b01d637ae46225942719e6aa92f7b0ffd6cc3dff4b306ced3f0b03726b4bc95b31fc578ab72d474d753a11495f3fc3b5ce501fa1bf04f8b492750be7e5acf055ed55bc05d846b607f064ac5def226aa50bbe49ce50459f2fdced54b2"}, @NL80211_ATTR_IE={0xfe, 0x2a, [@random_vendor={0xdd, 0xf5, "50e613c45ee51a52f660a69b9dcaa6062eb672e5cfe84f28b3842e7ad9f0eb1fcce1506e816fb085a424cdf368cae06498f94deb4717dd79cf99beead20dcbc029839b364b95b2438828b7331d03371a34b0ef2248b6c129f22ea84b0261497d6fc93807b3f3fa98c8df09e805f9910c4333509cf280632cb27e4329de5c19bc2f24ff216cb3b959bb997e6c01271b26d140745ed2ac8e4e9201f7d33176bb57c6c5adc9b9fca31cac38241fa70b04a7595a590a72481e97117fb5685bc75c30c115ad780d4911ec522d63fc06db7718ffe92d13210edd2b64688a383ee027f9c7de7b881e731f505de99b0b49f3bad0e056625777"}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_BEACON_HEAD={0x78, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0x2, 0x3}, @value=@ver_80211n={0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x100000001, @random=0x7f, 0xa0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x40}, @void, @val={0x6, 0x2, 0x6}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x99, 0xfe}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x6, 0x0, {0x2, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x9, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0xa, 0x9}}, @val={0x76, 0x6, {0x9, 0x6, 0x1d, 0x7}}}}, @NL80211_ATTR_BEACON_TAIL={0x104, 0xf, [@tim={0x5, 0xfe, {0x0, 0x5f, 0x80, "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"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x37, 0x80, [@link_id={0x65, 0x12, {@random="73c0979d4795", @device_b, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x69}, 0x7, 0x3, @device_b, 0x10000, 0x4, 0x4}}, @cf={0x4, 0x6, {0x8, 0x9, 0x0, 0xc00}}]}]}, 0x340}}, 0x40040) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x41, 0x4, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) close(r4) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) 407.115156ms ago: executing program 2 (id=1829): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x805, 0x4) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0xb, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000380)={0x0, 0x83, 0xa5}) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 135.664752ms ago: executing program 2 (id=1830): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)="a5", 0x1) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x1fff, 0x6) r3 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r3) 0s ago: executing program 2 (id=1831): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2000005, 0x339a40) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x2040040) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x9, {0x22, 0xff, 0x4, 0x7, 0x800}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45", 0x90, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xffffa811}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x52, 0x0, 0x0) kernel console output (not intermixed with test programs): on [ 390.383008][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.677035][T11829] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 390.680669][T11829] netem: change failed [ 390.697917][T11830] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 390.700124][T11830] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 390.703037][T11830] vhci_hcd vhci_hcd.0: Device attached [ 390.713422][T11830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.830637][T11829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 390.978637][ T24] usb 44-1: SetAddress Request (106) to port 0 [ 390.981299][ T24] usb 44-1: new SuperSpeed USB device number 106 using vhci_hcd [ 391.038520][ T60] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 391.188522][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 391.192323][ T60] usb 7-1: config 0 has an invalid interface number: 32 but max is 3 [ 391.195140][ T60] usb 7-1: config 0 has an invalid interface number: 210 but max is 3 [ 391.197918][ T60] usb 7-1: config 0 has an invalid interface number: 128 but max is 3 [ 391.200874][ T60] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 391.203737][ T60] usb 7-1: config 0 has an invalid interface number: 172 but max is 3 [ 391.206521][ T60] usb 7-1: config 0 has no interface number 0 [ 391.208744][ T60] usb 7-1: config 0 has no interface number 1 [ 391.210822][ T60] usb 7-1: config 0 has no interface number 2 [ 391.212842][ T60] usb 7-1: config 0 has no interface number 3 [ 391.214907][ T60] usb 7-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 391.218226][ T60] usb 7-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 391.221950][ T60] usb 7-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 391.225660][ T60] usb 7-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 391.229413][ T60] usb 7-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 391.233072][ T60] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 391.236675][ T60] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 391.240383][ T60] usb 7-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 391.243874][ T60] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 391.247428][ T60] usb 7-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 391.251063][ T60] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 391.255375][ T60] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 391.260264][ T60] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 391.265002][ T60] usb 7-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 391.270028][ T60] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 391.274636][ T60] usb 7-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 391.279383][ T60] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 391.283918][ T60] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 391.289439][ T60] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 391.293860][ T60] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 391.298171][ T60] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 391.302682][ T60] usb 7-1: config 0 interface 210 has no altsetting 0 [ 391.305624][ T60] usb 7-1: config 0 interface 172 has no altsetting 0 [ 391.311037][ T60] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 391.314744][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.318144][ T60] usb 7-1: Product: ᐌ [ 391.320103][ T60] usb 7-1: Manufacturer: ᠁ [ 391.322168][ T60] usb 7-1: SerialNumber: ц [ 391.326841][ T60] usb 7-1: config 0 descriptor?? [ 391.329690][T11835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.330419][T11831] vhci_hcd: connection reset by peer [ 391.334624][ T6353] vhci_hcd vhci_hcd.3: stop threads [ 391.336644][ T6353] vhci_hcd vhci_hcd.3: release socket [ 391.339200][ T6353] vhci_hcd vhci_hcd.3: disconnect device [ 391.519725][T11823] vhci_hcd: connection closed [ 391.556052][ T6118] vhci_hcd vhci_hcd.0: stop threads [ 391.560863][ T6118] vhci_hcd vhci_hcd.0: release socket [ 391.563329][ T6118] vhci_hcd vhci_hcd.0: disconnect device [ 391.806819][ T60] powermate 7-1:0.32: probe with driver powermate failed with error -5 [ 391.814630][ T60] powermate 7-1:0.210: probe with driver powermate failed with error -5 [ 391.820072][ T60] powermate 7-1:0.128: probe with driver powermate failed with error -5 [ 391.832016][ T60] powermate 7-1:0.172: probe with driver powermate failed with error -5 [ 391.838258][ T60] usb 7-1: USB disconnect, device number 16 [ 392.198606][ T54] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 392.378474][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 392.382306][ T54] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 392.385832][ T54] usb 5-1: config 0 has no interface number 0 [ 392.389671][ T54] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.394277][ T54] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 392.399577][ T54] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 392.404311][ T54] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 392.411824][ T54] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 392.415752][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.422018][ T54] usb 5-1: config 0 descriptor?? [ 392.432759][ T54] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 392.478551][ T6183] usb 40-1: device descriptor read/8, error -110 [ 392.588889][ T6183] usb usb40-port1: unable to enumerate USB device [ 393.108623][ T141] usb 38-1: device descriptor read/8, error -110 [ 393.245868][T11868] overlayfs: failed to resolve './file0': -2 [ 393.509082][ T141] usb usb38-port1: unable to enumerate USB device [ 393.656026][T11874] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 393.658228][T11874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 393.668014][T11874] vhci_hcd vhci_hcd.0: Device attached [ 393.707307][T11874] random: crng reseeded on system resumption [ 393.938575][ T141] usb 42-1: SetAddress Request (106) to port 0 [ 393.941215][ T141] usb 42-1: new SuperSpeed USB device number 106 using vhci_hcd [ 394.164464][T11878] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 394.166679][T11878] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 394.170124][T11878] vhci_hcd vhci_hcd.0: Device attached [ 394.208577][T11878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.215427][T11874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.757078][ T1161] usb 5-1: USB disconnect, device number 24 [ 394.774717][ T1161] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 395.060914][T11883] vhci_hcd: connection closed [ 395.061182][ T6118] vhci_hcd vhci_hcd.3: stop threads [ 395.064614][ T6118] vhci_hcd vhci_hcd.3: release socket [ 395.066632][ T6118] vhci_hcd vhci_hcd.3: disconnect device [ 395.070780][T11875] vhci_hcd: connection reset by peer [ 395.073156][ T6118] vhci_hcd vhci_hcd.2: stop threads [ 395.075397][ T6118] vhci_hcd vhci_hcd.2: release socket [ 395.077363][ T6118] vhci_hcd vhci_hcd.2: disconnect device [ 395.085246][ T1161] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 395.258622][ T1161] usb 5-1: Using ep0 maxpacket: 8 [ 395.271072][ T1161] usb 5-1: config 0 has an invalid interface number: 32 but max is 3 [ 395.274093][ T1161] usb 5-1: config 0 has an invalid interface number: 210 but max is 3 [ 395.277483][ T1161] usb 5-1: config 0 has an invalid interface number: 128 but max is 3 [ 395.288700][ T1161] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 395.292584][ T1161] usb 5-1: config 0 has an invalid interface number: 172 but max is 3 [ 395.296101][ T1161] usb 5-1: config 0 has no interface number 0 [ 395.298872][ T1161] usb 5-1: config 0 has no interface number 1 [ 395.301063][ T1161] usb 5-1: config 0 has no interface number 2 [ 395.303639][ T1161] usb 5-1: config 0 has no interface number 3 [ 395.304013][T11891] wg1 speed is unknown, defaulting to 1000 [ 395.306229][ T1161] usb 5-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 395.328405][ T1161] usb 5-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.332317][ T1161] usb 5-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 395.336477][ T1161] usb 5-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 395.358419][ T1161] usb 5-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 395.362864][ T1161] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 395.366993][ T1161] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 395.378397][ T1161] usb 5-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 395.383171][ T1161] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 395.387717][ T1161] usb 5-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 395.398434][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 395.402316][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 395.406605][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 395.428568][ T1161] usb 5-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 395.432616][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 395.437083][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 395.448446][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 395.452896][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 395.456691][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 395.478199][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 395.482244][ T1161] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 395.487268][ T1161] usb 5-1: config 0 interface 210 has no altsetting 0 [ 395.489717][ T1161] usb 5-1: config 0 interface 172 has no altsetting 0 [ 395.499440][ T1161] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 395.502866][ T1161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.505953][ T1161] usb 5-1: Product: ᐌ [ 395.507731][ T1161] usb 5-1: Manufacturer: ᠁ [ 395.512582][ T1161] usb 5-1: SerialNumber: ц [ 395.522894][ T1161] usb 5-1: config 0 descriptor?? [ 395.525880][T11888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 396.068654][ T24] usb 44-1: device descriptor read/8, error -110 [ 396.469241][ T24] usb usb44-port1: attempt power cycle [ 396.514127][T11917] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 396.517029][T11917] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 396.521865][T11917] vhci_hcd vhci_hcd.0: Device attached [ 396.554003][T11917] random: crng reseeded on system resumption [ 396.956353][T11921] bridge8: entered allmulticast mode [ 397.101776][T11917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.281160][ T24] usb usb44-port1: unable to enumerate USB device [ 397.588489][ T6183] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 397.957328][ T6183] usb 8-1: Using ep0 maxpacket: 8 [ 397.962221][ T1161] powermate 5-1:0.32: probe with driver powermate failed with error -5 [ 397.968486][ T6183] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 397.971920][ T6183] usb 8-1: config 0 has no interface number 0 [ 397.974589][ T6183] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.982028][ T6183] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 397.982744][ T1161] powermate 5-1:0.210: probe with driver powermate failed with error -5 [ 397.986712][ T6183] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.994606][ T6183] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.997298][ T1161] powermate 5-1:0.128: probe with driver powermate failed with error -5 [ 398.004032][T11930] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 398.006470][T11930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 398.009932][T11930] vhci_hcd vhci_hcd.0: Device attached [ 398.017478][T11930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.022764][ T6183] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 398.026979][ T6183] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.029757][ T1161] powermate 5-1:0.172: probe with driver powermate failed with error -5 [ 398.033503][ T6183] usb 8-1: config 0 descriptor?? [ 398.039819][ T1161] usb 5-1: USB disconnect, device number 25 [ 398.058246][ T6183] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 398.061893][T11919] vhci_hcd: connection closed [ 398.100144][ T13] vhci_hcd vhci_hcd.2: stop threads [ 398.102212][ T13] vhci_hcd vhci_hcd.2: release socket [ 398.104271][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 398.309260][ T24] usb 40-1: SetAddress Request (102) to port 0 [ 398.309333][ T24] usb 40-1: new SuperSpeed USB device number 102 using vhci_hcd [ 399.029680][ T141] usb 42-1: device descriptor read/8, error -110 [ 399.062212][T11935] vhci_hcd: connection reset by peer [ 399.078958][ T46] vhci_hcd vhci_hcd.1: stop threads [ 399.081249][ T46] vhci_hcd vhci_hcd.1: release socket [ 399.088568][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 399.276514][T11952] Bluetooth: hci4: Frame reassembly failed (-90) [ 399.279471][ T161] Bluetooth: hci4: Frame reassembly failed (-84) [ 399.429099][ T141] usb usb42-port1: attempt power cycle [ 400.001189][ T141] usb usb42-port1: unable to enumerate USB device [ 400.012351][ T6183] usb 8-1: USB disconnect, device number 14 [ 400.020464][ T6183] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 400.085861][T11985] bridge11: entered allmulticast mode [ 401.014965][ T5947] Bluetooth: hci1: unexpected event for opcode 0x080c [ 401.358536][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 401.358695][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 401.692884][T12003] overlayfs: failed to resolve './file0': -2 [ 402.061572][T12007] overlayfs: failed to resolve './file0': -2 [ 403.213508][T12026] bridge9: entered allmulticast mode [ 403.391382][ T24] usb 40-1: device descriptor read/8, error -110 [ 403.812776][ T24] usb usb40-port1: attempt power cycle [ 404.299109][T12035] overlayfs: failed to resolve './file0': -2 [ 404.463205][T12042] bond0: (slave dummy0): Releasing backup interface [ 404.523114][T12043] netlink: 'syz.1.1427': attribute type 10 has an invalid length. [ 404.527520][T12042] bridge_slave_0: left allmulticast mode [ 404.527595][T12042] bridge_slave_0: left promiscuous mode [ 404.528885][T12042] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.550386][T12044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 404.550404][T12044] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 404.559562][T12044] vhci_hcd vhci_hcd.0: Device attached [ 404.563027][T12042] bridge_slave_1: left allmulticast mode [ 404.563046][T12042] bridge_slave_1: left promiscuous mode [ 404.563590][T12042] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.589692][T12047] netlink: 6612 bytes leftover after parsing attributes in process `syz.1.1427'. [ 404.595534][T12042] bond0: (slave bond_slave_0): Releasing backup interface [ 404.667820][T12042] team0: Port device team_slave_0 removed [ 404.750409][T12042] team0: Port device team_slave_1 removed [ 404.753318][T12042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.754018][T12044] random: crng reseeded on system resumption [ 404.756247][T12042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.761702][ T24] usb usb40-port1: unable to enumerate USB device [ 404.766844][T12042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.766857][T12042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.775622][T12042] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.795881][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.801604][T12043] team0: Port device bond0 added [ 404.838745][T12049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.024524][ T6028] wg1 speed is unknown, defaulting to 1000 [ 405.088515][ T1161] usb 42-1: SetAddress Request (110) to port 0 [ 405.088551][ T1161] usb 42-1: new SuperSpeed USB device number 110 using vhci_hcd [ 405.426624][T12053] overlay: Unknown parameter 'defcontext' [ 405.928459][T12045] vhci_hcd: connection reset by peer [ 405.969887][ T46] vhci_hcd vhci_hcd.2: stop threads [ 405.972146][ T46] vhci_hcd vhci_hcd.2: release socket [ 405.973973][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 406.111159][T12059] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 406.113746][T12059] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 406.133948][T12059] vhci_hcd vhci_hcd.0: Device attached [ 406.154329][T12059] random: crng reseeded on system resumption [ 406.183422][T12059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.220566][ T24] IPVS: starting estimator thread 0... [ 406.328495][T12066] IPVS: using max 45 ests per chain, 108000 per kthread [ 406.408541][ T6183] usb 38-1: SetAddress Request (90) to port 0 [ 406.410859][ T6183] usb 38-1: new SuperSpeed USB device number 90 using vhci_hcd [ 407.156339][T12061] vhci_hcd: connection reset by peer [ 407.162129][ T9593] vhci_hcd vhci_hcd.0: stop threads [ 407.164493][ T9593] vhci_hcd vhci_hcd.0: release socket [ 407.166965][ T9593] vhci_hcd vhci_hcd.0: disconnect device [ 407.615408][T12088] overlayfs: failed to resolve './file0': -2 [ 407.842212][ T94] Bluetooth: hci4: Frame reassembly failed (-84) [ 407.849467][T12092] Bluetooth: hci4: Frame reassembly failed (-90) [ 408.128085][ T5947] Bluetooth: hci0: unexpected event for opcode 0x080c [ 408.361558][T12103] Bluetooth: MGMT ver 1.23 [ 408.372269][T12103] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 408.540250][T12105] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 408.542446][T12105] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 408.545479][T12105] vhci_hcd vhci_hcd.0: Device attached [ 408.558435][T12105] random: crng reseeded on system resumption [ 408.611205][T12105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.911306][T12110] bridge_slave_0: left allmulticast mode [ 408.913634][T12110] bridge_slave_0: left promiscuous mode [ 408.918059][T12110] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.972677][T12110] bridge_slave_1: left allmulticast mode [ 408.977021][T12110] bridge_slave_1: left promiscuous mode [ 408.982102][T12111] netlink: 'syz.3.1441': attribute type 10 has an invalid length. [ 408.982224][T12110] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.000584][T12110] bond0: (slave bond_slave_0): Releasing backup interface [ 409.017426][T12110] bond0: (slave bond_slave_1): Releasing backup interface [ 409.043541][T12110] team0: Port device team_slave_0 removed [ 409.044416][T12112] netlink: 6612 bytes leftover after parsing attributes in process `syz.3.1441'. [ 409.074461][T12110] team0: Port device team_slave_1 removed [ 409.081687][T12110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.084433][T12110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.090772][T12110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.093321][T12110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.115866][T12110] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.489693][T12111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.493719][T12111] team0: Port device bond0 added [ 409.841253][T12117] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1442'. [ 409.908493][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 410.079666][T12106] vhci_hcd: connection closed [ 410.080552][ T94] vhci_hcd vhci_hcd.0: stop threads [ 410.084021][ T94] vhci_hcd vhci_hcd.0: release socket [ 410.085953][ T94] vhci_hcd vhci_hcd.0: disconnect device [ 410.158569][ T1161] usb 42-1: device descriptor read/8, error -110 [ 411.189053][ T1161] usb usb42-port1: attempt power cycle [ 411.518710][ T6183] usb 38-1: device descriptor read/8, error -110 [ 411.776383][ T1161] usb usb42-port1: unable to enumerate USB device [ 411.796615][T12131] bridge6: entered allmulticast mode [ 412.022608][ T6183] usb usb38-port1: attempt power cycle [ 412.087169][T12143] overlayfs: failed to resolve './file0': -2 [ 412.306683][ T78] Bluetooth: hci4: Frame reassembly failed (-90) [ 412.310188][T12148] Bluetooth: hci4: Frame reassembly failed (-84) [ 412.313845][T12148] Bluetooth: hci4: Frame reassembly failed (-84) [ 412.490863][T12150] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1449'. [ 412.579107][ T6183] usb usb38-port1: unable to enumerate USB device [ 412.602551][T12156] batadv_slave_1: entered promiscuous mode [ 412.679519][T12155] batadv_slave_1: left promiscuous mode [ 413.268620][T12161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 413.270858][T12161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 413.273628][T12161] vhci_hcd vhci_hcd.0: Device attached [ 413.276947][T12161] random: crng reseeded on system resumption [ 413.284425][T12161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.477811][T12168] bridge7: entered allmulticast mode [ 413.556093][ T24] usb 42-1: SetAddress Request (114) to port 0 [ 413.574202][ T24] usb 42-1: new SuperSpeed USB device number 114 using vhci_hcd [ 413.914871][T12173] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 413.917097][T12173] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 413.920514][T12173] vhci_hcd vhci_hcd.0: Device attached [ 413.928161][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 414.142568][T12166] vhci_hcd: connection reset by peer [ 414.147131][ T94] vhci_hcd vhci_hcd.2: stop threads [ 414.149133][ T94] vhci_hcd vhci_hcd.2: release socket [ 414.151461][ T94] vhci_hcd vhci_hcd.2: disconnect device [ 414.203185][ T141] usb 40-1: SetAddress Request (106) to port 0 [ 414.210471][ T141] usb 40-1: new SuperSpeed USB device number 106 using vhci_hcd [ 414.308488][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 414.313468][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 414.629317][T12184] Bluetooth: hci4: Frame reassembly failed (-90) [ 414.636474][T12185] bridge11: entered allmulticast mode [ 415.083451][T12174] vhci_hcd: connection reset by peer [ 415.086924][ T94] vhci_hcd vhci_hcd.1: stop threads [ 415.088815][ T94] vhci_hcd vhci_hcd.1: release socket [ 415.090740][ T94] vhci_hcd vhci_hcd.1: disconnect device [ 415.201185][T12198] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1470'. [ 416.076090][T12211] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 416.078240][T12211] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 416.159432][T12211] vhci_hcd vhci_hcd.0: Device attached [ 416.179626][T12211] random: crng reseeded on system resumption [ 416.208693][T12211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.237060][T12219] Bluetooth: hci5: Frame reassembly failed (-90) [ 416.239827][ T161] Bluetooth: hci5: Frame reassembly failed (-84) [ 416.242465][ T94] Bluetooth: hci5: Frame reassembly failed (-84) [ 416.628541][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 416.628713][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 416.980663][T12230] bridge12: entered allmulticast mode [ 417.768275][T12212] vhci_hcd: connection closed [ 417.768920][ T9593] vhci_hcd vhci_hcd.1: stop threads [ 417.773294][ T9593] vhci_hcd vhci_hcd.1: release socket [ 417.775730][ T9593] vhci_hcd vhci_hcd.1: disconnect device [ 418.308615][ T5947] Bluetooth: hci5: command 0x1003 tx timeout [ 418.312651][ T5298] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 418.628657][ T24] usb 42-1: device descriptor read/8, error -110 [ 418.737187][T12263] pim6reg: entered allmulticast mode [ 419.019509][ T24] usb usb42-port1: attempt power cycle [ 419.268528][ T141] usb 40-1: device descriptor read/8, error -110 [ 419.341041][T12273] can0: slcan on ttyS3. [ 419.430551][T12261] pim6reg: left allmulticast mode [ 419.434197][T12273] can0 (unregistered): slcan off ttyS3. [ 419.588249][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 419.591655][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 419.600149][ T24] usb usb42-port1: unable to enumerate USB device [ 419.828491][ T6183] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 419.830058][ T141] usb usb40-port1: attempt power cycle [ 419.888692][ T1161] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 419.903522][T12294] bridge12: entered allmulticast mode [ 420.048507][ T1161] usb 6-1: Using ep0 maxpacket: 8 [ 420.074789][ T1161] usb 6-1: config 0 has an invalid interface number: 32 but max is 3 [ 420.092234][ T1161] usb 6-1: config 0 has an invalid interface number: 210 but max is 3 [ 420.103981][ T1161] usb 6-1: config 0 has an invalid interface number: 128 but max is 3 [ 420.114273][ T1161] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 420.126300][ T1161] usb 6-1: config 0 has an invalid interface number: 172 but max is 3 [ 420.137946][ T1161] usb 6-1: config 0 has no interface number 0 [ 420.149193][ T1161] usb 6-1: config 0 has no interface number 1 [ 420.165801][ T1161] usb 6-1: config 0 has no interface number 2 [ 420.179273][ T1161] usb 6-1: config 0 has no interface number 3 [ 420.189518][ T1161] usb 6-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 420.213269][ T1161] usb 6-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 420.236445][ T1161] usb 6-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 420.253282][T12305] bridge8: entered allmulticast mode [ 420.257129][ T1161] usb 6-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 420.276313][ T1161] usb 6-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 420.290502][ T1161] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 420.307464][ T1161] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 420.320814][ T1161] usb 6-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 420.337435][ T1161] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 420.352385][ T1161] usb 6-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 420.364747][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 420.373228][ T6183] usb 7-1: Using ep0 maxpacket: 8 [ 420.375719][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 420.392796][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 420.405386][ T1161] usb 6-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 420.420345][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 420.432096][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 420.445320][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 420.456764][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 420.465882][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 420.478280][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 420.490743][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 420.502728][ T1161] usb 6-1: config 0 interface 210 has no altsetting 0 [ 420.509615][ T1161] usb 6-1: config 0 interface 172 has no altsetting 0 [ 420.532890][ T1161] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 420.539415][ T1161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.551110][ T1161] usb 6-1: Product: ᐌ [ 420.552639][ T1161] usb 6-1: Manufacturer: ᠁ [ 420.557398][ T1161] usb 6-1: SerialNumber: ц [ 420.597301][ T1161] usb 6-1: config 0 descriptor?? [ 420.616010][T12293] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 420.651972][ T6183] usb 7-1: config 0 has an invalid interface number: 32 but max is 3 [ 420.654662][ T6183] usb 7-1: config 0 has an invalid interface number: 210 but max is 3 [ 420.893598][ T6183] usb 7-1: config 0 has an invalid interface number: 128 but max is 3 [ 420.896280][ T6183] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 420.899473][ T6183] usb 7-1: config 0 has an invalid interface number: 172 but max is 3 [ 420.902473][ T6183] usb 7-1: config 0 has no interface number 0 [ 420.904628][ T6183] usb 7-1: config 0 has no interface number 1 [ 420.906650][ T6183] usb 7-1: config 0 has no interface number 2 [ 420.909197][ T6183] usb 7-1: config 0 has no interface number 3 [ 420.911395][ T6183] usb 7-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 420.914502][ T6183] usb 7-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 420.917861][ T6183] usb 7-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 420.921533][ T6183] usb 7-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 420.924950][ T6183] usb 7-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 420.928324][ T6183] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 420.931978][ T6183] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 420.935591][ T6183] usb 7-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 420.939260][ T6183] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 420.942949][ T6183] usb 7-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 420.946422][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 420.950033][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 420.953647][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 420.956921][ T6183] usb 7-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 420.960794][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 420.964217][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 420.967556][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 420.971198][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 420.977984][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 420.982215][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 420.988135][ T6183] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 420.991845][ T6183] usb 7-1: config 0 interface 210 has no altsetting 0 [ 420.994094][ T6183] usb 7-1: config 0 interface 172 has no altsetting 0 [ 420.997842][ T6183] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 421.001078][ T6183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.003606][ T6183] usb 7-1: Product: ᐌ [ 421.004999][ T6183] usb 7-1: Manufacturer: ᠁ [ 421.006510][ T6183] usb 7-1: SerialNumber: ц [ 421.015864][ T6183] usb 7-1: config 0 descriptor?? [ 421.018610][T12286] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.030802][ T141] usb usb40-port1: unable to enumerate USB device [ 421.566336][ T6183] powermate 7-1:0.32: probe with driver powermate failed with error -5 [ 421.571584][ T6183] powermate 7-1:0.210: probe with driver powermate failed with error -5 [ 421.576269][ T6183] powermate 7-1:0.128: probe with driver powermate failed with error -5 [ 421.583724][ T6183] powermate 7-1:0.172: probe with driver powermate failed with error -5 [ 421.588566][ T6183] usb 7-1: USB disconnect, device number 17 [ 421.980143][T12331] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 421.982651][T12331] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 421.985885][T12331] vhci_hcd vhci_hcd.0: Device attached [ 421.999214][T12331] random: crng reseeded on system resumption [ 422.171152][T12341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.265604][T12340] wg1 speed is unknown, defaulting to 1000 [ 422.268538][ T141] usb 38-1: SetAddress Request (94) to port 0 [ 422.271546][ T141] usb 38-1: new SuperSpeed USB device number 94 using vhci_hcd [ 422.878556][T12355] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 422.881368][T12355] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 422.897799][T12355] vhci_hcd vhci_hcd.0: Device attached [ 422.927382][T12355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.158735][ T60] usb 42-1: SetAddress Request (118) to port 0 [ 423.161445][ T60] usb 42-1: new SuperSpeed USB device number 118 using vhci_hcd [ 423.209423][T12332] vhci_hcd: connection reset by peer [ 423.212417][ T9593] vhci_hcd vhci_hcd.0: stop threads [ 423.214393][ T9593] vhci_hcd vhci_hcd.0: release socket [ 423.216825][ T9593] vhci_hcd vhci_hcd.0: disconnect device [ 423.247057][T12363] bridge9: entered allmulticast mode [ 423.315784][ T1161] powermate 6-1:0.32: probe with driver powermate failed with error -5 [ 423.323213][ T1161] powermate 6-1:0.210: probe with driver powermate failed with error -5 [ 423.327976][ T1161] powermate 6-1:0.128: probe with driver powermate failed with error -5 [ 423.337830][ T1161] powermate 6-1:0.172: probe with driver powermate failed with error -5 [ 423.352901][ T1161] usb 6-1: USB disconnect, device number 11 [ 423.789360][T12373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1498'. [ 423.888822][ T1161] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 424.035537][T12356] vhci_hcd: connection reset by peer [ 424.038923][ T94] vhci_hcd vhci_hcd.2: stop threads [ 424.041145][ T94] vhci_hcd vhci_hcd.2: release socket [ 424.043291][ T94] vhci_hcd vhci_hcd.2: disconnect device [ 424.048911][ T1161] usb 6-1: Using ep0 maxpacket: 8 [ 424.058887][ T1161] usb 6-1: config 0 has an invalid interface number: 32 but max is 3 [ 424.066037][ T1161] usb 6-1: config 0 has an invalid interface number: 210 but max is 3 [ 424.076044][ T1161] usb 6-1: config 0 has an invalid interface number: 128 but max is 3 [ 424.081871][ T1161] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 424.085551][ T1161] usb 6-1: config 0 has an invalid interface number: 172 but max is 3 [ 424.096946][ T1161] usb 6-1: config 0 has no interface number 0 [ 424.106417][ T1161] usb 6-1: config 0 has no interface number 1 [ 424.115525][ T1161] usb 6-1: config 0 has no interface number 2 [ 424.126881][ T1161] usb 6-1: config 0 has no interface number 3 [ 424.131600][ T1161] usb 6-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 424.144958][ T1161] usb 6-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 424.160484][ T1161] usb 6-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 424.164129][ T1161] usb 6-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 424.167753][ T1161] usb 6-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 424.252889][ T1161] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 424.256461][ T1161] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 424.260690][ T1161] usb 6-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 424.264198][ T1161] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 424.267840][ T1161] usb 6-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 424.271731][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 424.275203][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 424.278785][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 424.282396][ T1161] usb 6-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 424.286121][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 424.289697][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 424.293389][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 424.296994][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 424.300713][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 424.304367][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 424.308026][ T1161] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 424.313237][ T1161] usb 6-1: config 0 interface 210 has no altsetting 0 [ 424.315650][ T1161] usb 6-1: config 0 interface 172 has no altsetting 0 [ 424.345609][ T1161] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 424.606943][ T1161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.632006][ T1161] usb 6-1: Product: ᐌ [ 424.646505][ T1161] usb 6-1: Manufacturer: ᠁ [ 424.663692][ T1161] usb 6-1: SerialNumber: ц [ 424.682159][ T1161] usb 6-1: config 0 descriptor?? [ 424.691258][T12366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 424.775337][T12380] ipvlan2: entered allmulticast mode [ 424.777218][T12380] dummy0: entered allmulticast mode [ 425.407173][T12396] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 425.409355][T12396] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 425.412773][T12396] vhci_hcd vhci_hcd.0: Device attached [ 425.442689][T12396] random: crng reseeded on system resumption [ 425.566887][T12399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.876217][T12407] bridge13: entered allmulticast mode [ 426.265780][T12411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 426.267967][T12411] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 426.272509][T12411] vhci_hcd vhci_hcd.0: Device attached [ 426.291824][T12415] loop2: detected capacity change from 0 to 7 [ 426.295317][T12415] Dev loop2: unable to read RDB block 7 [ 426.297289][T12415] loop2: AHDI p1 p2 p3 [ 426.298797][T12415] loop2: partition table partially beyond EOD, truncated [ 426.301382][T12415] loop2: p1 start 1601398130 is beyond EOD, truncated [ 426.303652][T12415] loop2: p2 start 1702059890 is beyond EOD, truncated [ 426.313220][T12411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.470132][T12397] vhci_hcd: connection closed [ 426.471505][ T1242] vhci_hcd vhci_hcd.2: stop threads [ 426.477069][ T1242] vhci_hcd vhci_hcd.2: release socket [ 426.479783][ T1242] vhci_hcd vhci_hcd.2: disconnect device [ 426.588637][ T24] usb 44-1: SetAddress Request (110) to port 0 [ 426.591092][ T24] usb 44-1: new SuperSpeed USB device number 110 using vhci_hcd [ 426.986284][ T1161] powermate 6-1:0.32: probe with driver powermate failed with error -5 [ 427.000721][ T1161] powermate 6-1:0.210: probe with driver powermate failed with error -5 [ 427.005443][ T1161] powermate 6-1:0.128: probe with driver powermate failed with error -5 [ 427.012996][ T1161] powermate 6-1:0.172: probe with driver powermate failed with error -5 [ 427.029049][ T1161] usb 6-1: USB disconnect, device number 12 [ 427.160898][ T5347] Dev loop2: unable to read RDB block 7 [ 427.162812][ T5347] loop2: AHDI p1 p2 p3 [ 427.164701][ T5347] loop2: partition table partially beyond EOD, truncated [ 427.167243][ T5347] loop2: p1 start 1601398130 is beyond EOD, truncated [ 427.169954][ T5347] loop2: p2 start 1702059890 is beyond EOD, truncated [ 427.348529][ T141] usb 38-1: device descriptor read/8, error -110 [ 427.758047][T12412] vhci_hcd: connection reset by peer [ 427.809228][ T94] vhci_hcd vhci_hcd.3: stop threads [ 427.811143][ T94] vhci_hcd vhci_hcd.3: release socket [ 427.813038][ T94] vhci_hcd vhci_hcd.3: disconnect device [ 427.898961][ T141] usb usb38-port1: attempt power cycle [ 428.240145][ T60] usb 42-1: device descriptor read/8, error -110 [ 428.459023][ T141] usb usb38-port1: unable to enumerate USB device [ 428.629518][ T60] usb usb42-port1: attempt power cycle [ 428.631034][T12449] bridge10: entered allmulticast mode [ 429.189804][ T60] usb usb42-port1: unable to enumerate USB device [ 429.638501][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 429.736320][T12463] overlayfs: failed to resolve './file0': -2 [ 429.788472][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 429.793066][ T9] usb 6-1: config 0 has an invalid interface number: 32 but max is 3 [ 429.796547][ T9] usb 6-1: config 0 has an invalid interface number: 210 but max is 3 [ 429.800357][ T9] usb 6-1: config 0 has an invalid interface number: 128 but max is 3 [ 429.803682][ T9] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 429.807321][ T9] usb 6-1: config 0 has an invalid interface number: 172 but max is 3 [ 429.811116][ T9] usb 6-1: config 0 has no interface number 0 [ 429.813656][ T9] usb 6-1: config 0 has no interface number 1 [ 429.816155][ T9] usb 6-1: config 0 has no interface number 2 [ 429.819130][ T9] usb 6-1: config 0 has no interface number 3 [ 429.821690][ T9] usb 6-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 429.825860][ T9] usb 6-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 429.830675][ T9] usb 6-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 429.834937][ T9] usb 6-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 429.839903][ T9] usb 6-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 429.844553][ T9] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 429.849100][ T9] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 429.853482][ T9] usb 6-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 429.857873][ T9] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 429.862533][ T9] usb 6-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 429.866936][ T9] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 429.871652][ T9] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 429.876089][ T9] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 429.880671][ T9] usb 6-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 429.885317][ T9] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 429.890132][ T9] usb 6-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 429.894426][ T9] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 429.898747][ T9] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 429.903312][ T9] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 429.907745][ T9] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 429.912350][ T9] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 429.916815][ T9] usb 6-1: config 0 interface 210 has no altsetting 0 [ 429.919586][ T9] usb 6-1: config 0 interface 172 has no altsetting 0 [ 429.924205][ T9] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 429.927962][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.931415][ T9] usb 6-1: Product: ᐌ [ 429.933173][ T9] usb 6-1: Manufacturer: ᠁ [ 429.935093][ T9] usb 6-1: SerialNumber: ц [ 429.944731][ T9] usb 6-1: config 0 descriptor?? [ 429.947418][T12451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 430.369581][T12468] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 430.592890][T12479] FAULT_INJECTION: forcing a failure. [ 430.592890][T12479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.597287][T12479] CPU: 3 UID: 0 PID: 12479 Comm: syz.3.1525 Not tainted syzkaller #0 PREEMPT(full) [ 430.597303][T12479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 430.597311][T12479] Call Trace: [ 430.597315][T12479] [ 430.597320][T12479] dump_stack_lvl+0x16c/0x1f0 [ 430.597359][T12479] should_fail_ex+0x512/0x640 [ 430.597378][T12479] _copy_from_iter+0x2a4/0x16c0 [ 430.597393][T12479] ? __alloc_skb+0x220/0x410 [ 430.597405][T12479] ? __alloc_skb+0x35d/0x410 [ 430.597417][T12479] ? __pfx__copy_from_iter+0x10/0x10 [ 430.597429][T12479] ? netlink_autobind.isra.0+0x158/0x370 [ 430.597451][T12479] netlink_sendmsg+0x820/0xdd0 [ 430.597469][T12479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.597487][T12479] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 430.597508][T12479] ____sys_sendmsg+0xa5d/0xc30 [ 430.597527][T12479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.597543][T12479] ? get_compat_msghdr+0x11a/0x170 [ 430.597563][T12479] ___sys_sendmsg+0x134/0x1d0 [ 430.597579][T12479] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.597599][T12479] ? find_held_lock+0x2b/0x80 [ 430.597623][T12479] __sys_sendmsg+0x16d/0x220 [ 430.597637][T12479] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.597657][T12479] ? do_user_addr_fault+0x843/0x1370 [ 430.597674][T12479] __do_fast_syscall_32+0xe8/0x680 [ 430.597700][T12479] do_fast_syscall_32+0x32/0x80 [ 430.597727][T12479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.597746][T12479] RIP: 0023:0xf7f12579 [ 430.597763][T12479] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 430.597779][T12479] RSP: 002b:00000000f540655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 430.597798][T12479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 430.597808][T12479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.597815][T12479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.597821][T12479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 430.597828][T12479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.597842][T12479] [ 430.853931][T12485] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 430.856103][T12485] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 430.858866][T12485] vhci_hcd vhci_hcd.0: Device attached [ 430.876856][T12485] random: crng reseeded on system resumption [ 431.125139][T12490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.149084][ T54] usb 38-1: SetAddress Request (98) to port 0 [ 431.151794][ T54] usb 38-1: new SuperSpeed USB device number 98 using vhci_hcd [ 431.584202][T12497] bridge13: entered allmulticast mode [ 431.672824][ T24] usb 44-1: device descriptor read/8, error -110 [ 431.826801][T12486] vhci_hcd: connection reset by peer [ 431.833110][ T6118] vhci_hcd vhci_hcd.0: stop threads [ 431.835330][ T6118] vhci_hcd vhci_hcd.0: release socket [ 431.861599][ T6118] vhci_hcd vhci_hcd.0: disconnect device [ 432.068878][ T24] usb usb44-port1: attempt power cycle [ 432.225895][ T9] powermate 6-1:0.32: probe with driver powermate failed with error -5 [ 432.234022][ T9] powermate 6-1:0.210: probe with driver powermate failed with error -5 [ 432.242204][ T9] powermate 6-1:0.128: probe with driver powermate failed with error -5 [ 432.250429][ T9] powermate 6-1:0.172: probe with driver powermate failed with error -5 [ 432.258569][ T9] usb 6-1: USB disconnect, device number 13 [ 432.343328][T12507] bond0: entered promiscuous mode [ 432.345092][T12507] bond_slave_0: entered promiscuous mode [ 432.347513][T12507] bond_slave_1: entered promiscuous mode [ 432.349718][T12507] bond0: entered allmulticast mode [ 432.351456][T12507] bond_slave_0: entered allmulticast mode [ 432.353519][T12507] bond_slave_1: entered allmulticast mode [ 432.441567][T12515] FAULT_INJECTION: forcing a failure. [ 432.441567][T12515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.445905][T12515] CPU: 2 UID: 0 PID: 12515 Comm: syz.0.1535 Not tainted syzkaller #0 PREEMPT(full) [ 432.445933][T12515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 432.445940][T12515] Call Trace: [ 432.445945][T12515] [ 432.445949][T12515] dump_stack_lvl+0x16c/0x1f0 [ 432.445969][T12515] should_fail_ex+0x512/0x640 [ 432.445984][T12515] _copy_from_iter+0x2a4/0x16c0 [ 432.446001][T12515] ? __pfx__copy_from_iter+0x10/0x10 [ 432.446013][T12515] ? __pfx___might_resched+0x10/0x10 [ 432.446029][T12515] ? find_held_lock+0x2b/0x80 [ 432.446046][T12515] ? aa_sk_perm+0x2f2/0xae0 [ 432.446061][T12515] hci_sock_sendmsg+0x46d/0x26b0 [ 432.446080][T12515] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 432.446096][T12515] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 432.446118][T12515] sock_write_iter+0x566/0x610 [ 432.446137][T12515] ? __pfx_sock_write_iter+0x10/0x10 [ 432.446159][T12515] ? bpf_lsm_file_permission+0x9/0x10 [ 432.446173][T12515] ? security_file_permission+0x71/0x210 [ 432.446188][T12515] ? rw_verify_area+0xcf/0x6c0 [ 432.446204][T12515] vfs_write+0x7d3/0x11d0 [ 432.446220][T12515] ? __pfx_sock_write_iter+0x10/0x10 [ 432.446238][T12515] ? __pfx_vfs_write+0x10/0x10 [ 432.446253][T12515] ? find_held_lock+0x2b/0x80 [ 432.446274][T12515] ksys_write+0x1f8/0x250 [ 432.446290][T12515] ? __pfx_ksys_write+0x10/0x10 [ 432.446306][T12515] ? do_user_addr_fault+0x843/0x1370 [ 432.446322][T12515] __do_fast_syscall_32+0xe8/0x680 [ 432.446345][T12515] do_fast_syscall_32+0x32/0x80 [ 432.446363][T12515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.446377][T12515] RIP: 0023:0xf70dd579 [ 432.446387][T12515] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 432.446398][T12515] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 432.446409][T12515] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 432.446416][T12515] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.446423][T12515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.446429][T12515] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 432.446435][T12515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.446449][T12515] [ 432.629118][ T24] usb usb44-port1: unable to enumerate USB device [ 432.712498][ T6004] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 432.864624][T12527] bridge10: entered allmulticast mode [ 432.898433][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 432.908002][ T6004] usb 7-1: config 0 has an invalid interface number: 32 but max is 3 [ 432.911824][ T6004] usb 7-1: config 0 has an invalid interface number: 210 but max is 3 [ 432.914671][ T6004] usb 7-1: config 0 has an invalid interface number: 128 but max is 3 [ 432.917672][ T6004] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 432.922028][ T6004] usb 7-1: config 0 has an invalid interface number: 172 but max is 3 [ 432.924795][ T6004] usb 7-1: config 0 has no interface number 0 [ 432.926878][ T6004] usb 7-1: config 0 has no interface number 1 [ 432.930603][ T6004] usb 7-1: config 0 has no interface number 2 [ 432.932920][ T6004] usb 7-1: config 0 has no interface number 3 [ 432.935658][ T6004] usb 7-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 432.940457][ T6004] usb 7-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.944796][ T6004] usb 7-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 432.950577][ T6004] usb 7-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 432.954536][ T6004] usb 7-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 432.958094][ T6004] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 433.058321][ T6004] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 433.062416][ T6004] usb 7-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 433.070004][ T6004] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 433.073565][ T6004] usb 7-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 433.077233][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 433.082261][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 433.085960][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 433.089680][ T6004] usb 7-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 433.093402][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 433.096939][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 433.101064][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 433.104694][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 433.108132][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 433.112182][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 433.116789][ T6004] usb 7-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 433.129002][ T6004] usb 7-1: config 0 interface 210 has no altsetting 0 [ 433.131340][ T6004] usb 7-1: config 0 interface 172 has no altsetting 0 [ 433.148640][ T6004] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 433.151846][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.154523][ T6004] usb 7-1: Product: ᐌ [ 433.155936][ T6004] usb 7-1: Manufacturer: ᠁ [ 433.157770][ T6004] usb 7-1: SerialNumber: ц [ 433.167318][ T6004] usb 7-1: config 0 descriptor?? [ 433.223599][T12505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 433.679620][ T6004] powermate 7-1:0.32: probe with driver powermate failed with error -5 [ 433.689213][ T6004] powermate 7-1:0.210: probe with driver powermate failed with error -5 [ 433.700241][ T6004] powermate 7-1:0.128: probe with driver powermate failed with error -5 [ 433.712273][ T6004] powermate 7-1:0.172: probe with driver powermate failed with error -5 [ 433.728703][ T6004] usb 7-1: USB disconnect, device number 18 [ 433.731978][T12540] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 433.734395][T12540] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 433.748021][T12540] vhci_hcd vhci_hcd.0: Device attached [ 433.751914][T12540] random: crng reseeded on system resumption [ 433.768276][T12540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.008477][ T24] usb 40-1: SetAddress Request (110) to port 0 [ 434.010689][ T24] usb 40-1: new SuperSpeed USB device number 110 using vhci_hcd [ 434.058565][ T60] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 434.068714][ T6004] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 434.208463][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 434.211391][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.214965][ T60] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 434.218027][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.222078][ T60] usb 5-1: config 0 descriptor?? [ 434.230235][ T6004] usb 8-1: Using ep0 maxpacket: 8 [ 434.235897][ T6004] usb 8-1: config 0 has an invalid interface number: 32 but max is 3 [ 434.248604][ T6004] usb 8-1: config 0 has an invalid interface number: 210 but max is 3 [ 434.252190][ T6004] usb 8-1: config 0 has an invalid interface number: 128 but max is 3 [ 434.255570][ T6004] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 434.259169][ T6004] usb 8-1: config 0 has an invalid interface number: 172 but max is 3 [ 434.262593][ T6004] usb 8-1: config 0 has no interface number 0 [ 434.264957][ T6004] usb 8-1: config 0 has no interface number 1 [ 434.267658][ T6004] usb 8-1: config 0 has no interface number 2 [ 434.270330][ T6004] usb 8-1: config 0 has no interface number 3 [ 434.273875][ T6004] usb 8-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 434.280046][ T6004] usb 8-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 434.286643][ T6004] usb 8-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 434.294506][ T6004] usb 8-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 434.300978][ T6004] usb 8-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 434.307336][ T6004] usb 8-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 434.315456][ T6004] usb 8-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 434.321945][ T6004] usb 8-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 434.328656][ T6004] usb 8-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 434.335332][ T6004] usb 8-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 434.344241][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 434.358488][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 434.362756][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 434.366938][ T6004] usb 8-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 434.378442][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 434.382481][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 434.387345][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 434.398426][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 434.403020][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 434.407467][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 434.428408][ T6004] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 434.429802][ T60] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 434.432793][ T6004] usb 8-1: config 0 interface 210 has no altsetting 0 [ 434.432820][ T6004] usb 8-1: config 0 interface 172 has no altsetting 0 [ 434.450488][ T6004] usb 8-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 434.453945][ T6004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.457454][ T6004] usb 8-1: Product: ᐌ [ 434.468781][ T6004] usb 8-1: Manufacturer: ᠁ [ 434.470782][ T6004] usb 8-1: SerialNumber: ц [ 434.479159][ T6004] usb 8-1: config 0 descriptor?? [ 434.482114][T12552] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 434.714385][T12561] netlink: 'syz.0.1543': attribute type 3 has an invalid length. [ 434.799254][ T141] usb 5-1: USB disconnect, device number 26 [ 434.839546][ T6004] powermate 8-1:0.32: probe with driver powermate failed with error -5 [ 434.847251][ T6004] powermate 8-1:0.210: probe with driver powermate failed with error -5 [ 434.853607][ T6004] powermate 8-1:0.128: probe with driver powermate failed with error -5 [ 434.862564][ T6004] powermate 8-1:0.172: probe with driver powermate failed with error -5 [ 434.865195][T12541] vhci_hcd: connection reset by peer [ 434.869156][ T46] vhci_hcd vhci_hcd.1: stop threads [ 434.869172][ T46] vhci_hcd vhci_hcd.1: release socket [ 434.869225][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 434.878779][ T6004] usb 8-1: USB disconnect, device number 15 [ 435.570491][T12582] bridge11: entered allmulticast mode [ 435.677902][T12581] netlink: zone id is out of range [ 435.679738][T12581] netlink: zone id is out of range [ 435.681395][T12581] netlink: del zone limit has 4 unknown bytes [ 436.331686][ T54] usb 38-1: device descriptor read/8, error -110 [ 436.719409][ T54] usb usb38-port1: attempt power cycle [ 436.732855][T12602] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 436.735673][T12602] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 436.748822][T12602] vhci_hcd vhci_hcd.0: Device attached [ 436.764623][T12602] random: crng reseeded on system resumption [ 436.780276][T12602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.818520][ T141] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 436.848485][ T54] usb 38-1: SetAddress Request (100) to port 0 [ 436.850590][ T54] usb 38-1: new SuperSpeed USB device number 100 using vhci_hcd [ 436.978501][ T141] usb 7-1: Using ep0 maxpacket: 8 [ 436.982180][ T141] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 436.985421][ T141] usb 7-1: config 0 has no interface number 0 [ 436.988196][ T141] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 436.994446][ T141] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 436.999488][ T141] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.004012][ T141] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 437.009788][ T141] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 437.013501][ T141] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.019557][ T141] usb 7-1: config 0 descriptor?? [ 437.031375][ T141] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 438.121313][T12603] vhci_hcd: connection reset by peer [ 438.127426][ T161] vhci_hcd vhci_hcd.0: stop threads [ 438.129361][ T161] vhci_hcd vhci_hcd.0: release socket [ 438.131118][ T161] vhci_hcd vhci_hcd.0: disconnect device [ 438.891624][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1562'. [ 439.118520][ T24] usb 40-1: device descriptor read/8, error -110 [ 439.236435][T12633] bridge12: entered allmulticast mode [ 439.260286][ T6031] usb 7-1: USB disconnect, device number 19 [ 439.397217][ T6031] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 439.509208][ T24] usb usb40-port1: attempt power cycle [ 439.760666][ T5298] Bluetooth: hci1: unexpected event for opcode 0x040d [ 439.786332][ T40] audit: type=1326 audit(2000000074.649:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 439.801102][ T40] audit: type=1326 audit(2000000074.669:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 439.815201][ T40] audit: type=1326 audit(2000000074.669:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 439.824583][ T40] audit: type=1326 audit(2000000074.669:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 439.833843][ T40] audit: type=1326 audit(2000000074.669:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 439.845344][ T40] audit: type=1326 audit(2000000074.669:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 439.855177][ T40] audit: type=1326 audit(2000000074.669:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 439.864387][ T40] audit: type=1326 audit(2000000074.669:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 439.878416][ T40] audit: type=1326 audit(2000000074.669:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 439.890796][ T40] audit: type=1326 audit(2000000074.669:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x50000 [ 440.079644][ T24] usb usb40-port1: unable to enumerate USB device [ 440.376078][T12659] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 440.378927][T12659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 440.384197][T12659] vhci_hcd vhci_hcd.0: Device attached [ 440.390246][T12659] random: crng reseeded on system resumption [ 440.412646][T12659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.208446][ T7084] libceph: connect (1)[c::]:6789 error -101 [ 441.210829][ T7084] libceph: mon0 (1)[c::]:6789 connect error [ 441.258735][T12672] ceph: No mds server is up or the cluster is laggy [ 441.355660][T12672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.996929][T12663] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 442.001042][ T78] vhci_hcd vhci_hcd.0: stop threads [ 442.003483][ T78] vhci_hcd vhci_hcd.0: release socket [ 442.005873][ T54] usb 38-1: device descriptor read/8, error -110 [ 442.058620][ T78] vhci_hcd vhci_hcd.0: disconnect device [ 442.248451][ T7084] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 442.276305][T12696] bridge13: entered allmulticast mode [ 442.309919][T12699] random: crng reseeded on system resumption [ 442.322078][T12699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.413926][ T54] usb usb38-port1: unable to enumerate USB device [ 442.423722][T12697] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 442.425660][T12697] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 442.432659][T12697] vhci_hcd vhci_hcd.0: Device attached [ 442.698556][ T9] usb 42-1: SetAddress Request (122) to port 0 [ 442.701298][ T9] usb 42-1: new SuperSpeed USB device number 122 using vhci_hcd [ 442.741020][ T7084] usb 8-1: Using ep0 maxpacket: 8 [ 442.849825][ T7084] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 442.852420][ T7084] usb 8-1: config 0 has no interface number 0 [ 442.854423][ T7084] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 442.857854][ T7084] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 442.874987][ T7084] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.879202][ T7084] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 442.883458][ T7084] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 442.886646][ T7084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.890921][ T7084] usb 8-1: config 0 descriptor?? [ 442.902538][ T7084] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 443.194498][T12709] bridge14: entered allmulticast mode [ 443.373289][T12700] vhci_hcd: connection reset by peer [ 443.379345][ T1242] vhci_hcd vhci_hcd.2: stop threads [ 443.381655][ T1242] vhci_hcd vhci_hcd.2: release socket [ 443.386952][ T1242] vhci_hcd vhci_hcd.2: disconnect device [ 444.353323][T12723] overlayfs: failed to resolve './file0': -2 [ 444.641115][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.643388][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.713542][ T6031] usb 8-1: USB disconnect, device number 16 [ 444.720750][ T6031] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 444.838719][T12739] random: crng reseeded on system resumption [ 445.127871][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1589'. [ 445.257702][T12752] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 445.259810][T12752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 445.262839][T12752] vhci_hcd vhci_hcd.0: Device attached [ 445.276831][T12752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.528473][ T7084] usb 44-1: SetAddress Request (114) to port 0 [ 445.533121][ T7084] usb 44-1: new SuperSpeed USB device number 114 using vhci_hcd [ 445.806463][T12740] wg1 speed is unknown, defaulting to 1000 [ 445.927003][ T5298] Bluetooth: hci3: Unable to find connection for big 0x00 [ 446.026722][T12761] bridge14: entered allmulticast mode [ 446.050400][T12743] wg1 speed is unknown, defaulting to 1000 [ 446.278909][T12753] vhci_hcd: connection reset by peer [ 446.286440][ T1242] vhci_hcd vhci_hcd.3: stop threads [ 446.288952][ T1242] vhci_hcd vhci_hcd.3: release socket [ 446.291419][ T1242] vhci_hcd vhci_hcd.3: disconnect device [ 446.538571][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 446.610771][T12778] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 446.612957][T12778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 446.740282][T12778] vhci_hcd vhci_hcd.0: Device attached [ 446.850100][T12785] overlayfs: missing 'lowerdir' [ 447.098466][ T54] usb 40-1: SetAddress Request (114) to port 0 [ 447.101091][ T54] usb 40-1: new SuperSpeed USB device number 114 using vhci_hcd [ 447.137987][T12786] usb usb1: check_ctrlrecip: process 12786 (syz.3.1596) requesting ep 01 but needs 81 [ 447.156269][T12786] usb usb1: usbfs: process 12786 (syz.3.1596) did not claim interface 0 before use [ 447.758520][ T9] usb 42-1: device descriptor read/8, error -110 [ 448.169991][ T9] usb usb42-port1: attempt power cycle [ 448.227282][T12793] vlan2: entered promiscuous mode [ 448.232941][T12793] vlan2: entered allmulticast mode [ 448.235368][T12793] hsr_slave_1: entered allmulticast mode [ 448.246817][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 448.681202][T12801] bridge15: entered allmulticast mode [ 448.744147][ T9] usb usb42-port1: unable to enumerate USB device [ 448.872836][T12806] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 448.875159][T12806] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 448.878043][T12806] vhci_hcd vhci_hcd.0: Device attached [ 448.884345][T12806] random: crng reseeded on system resumption [ 448.911931][T12806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.960761][T12779] vhci_hcd: connection reset by peer [ 448.965410][ T6173] vhci_hcd vhci_hcd.1: stop threads [ 448.973954][ T6173] vhci_hcd vhci_hcd.1: release socket [ 448.978675][ T6173] vhci_hcd vhci_hcd.1: disconnect device [ 449.143032][T12802] bridge15: entered allmulticast mode [ 449.472526][T12814] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 449.605374][T12818] bridge14: entered allmulticast mode [ 449.830405][T12822] overlayfs: missing 'lowerdir' [ 450.035427][T12807] vhci_hcd: connection closed [ 450.035689][T11447] vhci_hcd vhci_hcd.3: stop threads [ 450.040217][T11447] vhci_hcd vhci_hcd.3: release socket [ 450.042701][T11447] vhci_hcd vhci_hcd.3: disconnect device [ 450.276255][T12824] tipc: Started in network mode [ 450.278016][T12824] tipc: Node identity a6145d85da79, cluster identity 4711 [ 450.281340][T12824] tipc: Enabled bearer , priority 0 [ 450.284391][T12824] syzkaller0: entered promiscuous mode [ 450.329666][T12827] Bluetooth: MGMT ver 1.23 [ 450.428582][T12824] syzkaller0: entered allmulticast mode [ 450.465337][T12824] tipc: Resetting bearer [ 450.593497][T12838] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 450.596490][T12838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 450.607510][T12838] vhci_hcd vhci_hcd.0: Device attached [ 450.614172][T12838] random: crng reseeded on system resumption [ 450.630647][T12838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.635120][T12841] bridge16: entered allmulticast mode [ 450.638220][ T7084] usb 44-1: device descriptor read/8, error -110 [ 450.700789][T12842] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 450.703627][T12842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 450.706999][T12842] vhci_hcd vhci_hcd.0: Device attached [ 450.879979][ T7084] usb 44-1: SetAddress Request (115) to port 0 [ 450.883766][ T7084] usb 44-1: new SuperSpeed USB device number 115 using vhci_hcd [ 451.105255][T12843] vhci_hcd: connection reset by peer [ 451.119938][ T6173] vhci_hcd vhci_hcd.3: stop threads [ 451.128697][T12823] tipc: Resetting bearer [ 451.131426][ T6173] vhci_hcd vhci_hcd.3: release socket [ 451.133531][ T6173] vhci_hcd vhci_hcd.3: disconnect device [ 451.143128][T12823] tipc: Disabling bearer [ 451.597991][T12854] bridge17: entered allmulticast mode [ 451.686232][T12858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 451.688533][T12858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 451.691675][T12858] vhci_hcd vhci_hcd.0: Device attached [ 451.710599][T12858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.018847][ T141] usb 42-1: SetAddress Request (126) to port 0 [ 452.024092][ T141] usb 42-1: new SuperSpeed USB device number 126 using vhci_hcd [ 452.069309][T12839] vhci_hcd: connection closed [ 452.088909][ T1242] vhci_hcd vhci_hcd.1: stop threads [ 452.092376][ T1242] vhci_hcd vhci_hcd.1: release socket [ 452.113656][ T1242] vhci_hcd vhci_hcd.1: disconnect device [ 452.149289][ T54] usb 40-1: device descriptor read/8, error -110 [ 452.448922][T12871] Bluetooth: hci4: Frame reassembly failed (-90) [ 452.452482][ T6327] Bluetooth: hci4: Frame reassembly failed (-84) [ 452.455311][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 452.550482][ T54] usb usb40-port1: attempt power cycle [ 452.628995][T12859] vhci_hcd: connection reset by peer [ 452.631422][ T1145] vhci_hcd vhci_hcd.2: stop threads [ 452.633337][ T1145] vhci_hcd vhci_hcd.2: release socket [ 452.635275][ T1145] vhci_hcd vhci_hcd.2: disconnect device [ 452.674646][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 452.758571][ T6011] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 452.874625][T12881] bridge16: entered allmulticast mode [ 452.938445][ T6011] usb 6-1: Using ep0 maxpacket: 8 [ 452.941891][ T6011] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 452.944713][ T6011] usb 6-1: config 0 has no interface number 0 [ 452.960596][ T6011] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 452.964155][ T6011] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 452.979574][ T6011] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 452.985479][ T6011] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.993928][ T6011] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 452.999716][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.007301][ T6011] usb 6-1: config 0 descriptor?? [ 453.043552][ T6011] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 453.111861][ T54] usb usb40-port1: unable to enumerate USB device [ 453.508776][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 453.523740][T12887] ceph: No mds server is up or the cluster is laggy [ 453.537817][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 453.720030][T12890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.468594][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 454.468679][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 454.556718][T12903] bridge17: entered allmulticast mode [ 455.405274][ T6031] usb 6-1: USB disconnect, device number 14 [ 455.418852][ T6031] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 455.758184][T12925] Bluetooth: hci4: Frame reassembly failed (-90) [ 455.762934][T12927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 455.765051][ T1164] Bluetooth: hci4: Frame reassembly failed (-84) [ 455.765731][T12927] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 455.772540][T12927] vhci_hcd vhci_hcd.0: Device attached [ 455.785708][T12927] random: crng reseeded on system resumption [ 455.999351][T12927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.129561][ T1161] libceph: connect (1)[c::]:6789 error -101 [ 456.133175][ T1161] libceph: mon0 (1)[c::]:6789 connect error [ 456.165007][T12935] ceph: No mds server is up or the cluster is laggy [ 456.246805][T12938] gretap0: left promiscuous mode [ 456.274118][T12938] bond0: left promiscuous mode [ 456.276378][T12938] bond_slave_0: left promiscuous mode [ 456.279704][T12938] bond_slave_1: left promiscuous mode [ 456.282971][T12938] bond0: left allmulticast mode [ 456.285262][T12938] bond_slave_0: left allmulticast mode [ 456.287768][T12938] bond_slave_1: left allmulticast mode [ 456.337451][T12938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.108556][ T141] usb 42-1: device descriptor read/8, error -110 [ 457.490016][T12928] vhci_hcd: connection reset by peer [ 457.501600][ T141] usb usb42-port1: attempt power cycle [ 457.501648][T11447] vhci_hcd vhci_hcd.3: stop threads [ 457.542975][T11447] vhci_hcd vhci_hcd.3: release socket [ 457.545498][ T7084] usb 44-1: device descriptor read/8, error -110 [ 457.551220][T11447] vhci_hcd vhci_hcd.3: disconnect device [ 457.662069][ T7084] usb usb44-port1: attempt power cycle [ 457.828598][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 457.828647][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 458.090246][ T141] usb usb42-port1: unable to enumerate USB device [ 458.101398][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1639'. [ 458.239394][ T7084] usb usb44-port1: unable to enumerate USB device [ 458.293450][ T6183] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 458.448475][ T6183] usb 5-1: Using ep0 maxpacket: 8 [ 458.451769][ T6183] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 458.454523][ T6183] usb 5-1: config 0 has no interface number 0 [ 458.456971][ T6183] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 458.467173][ T6183] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 458.474270][ T6183] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.481737][ T6183] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 458.492124][ T6183] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 458.498455][ T6183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.510717][ T6183] usb 5-1: config 0 descriptor?? [ 458.516700][ T6183] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 459.844926][T12977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 459.847881][T12977] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 459.852163][T12977] vhci_hcd vhci_hcd.0: Device attached [ 459.861705][T12977] random: crng reseeded on system resumption [ 459.880458][T12977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.939083][ T5298] block nbd2: Receive control failed (result -32) [ 459.948157][T12973] block nbd2: shutting down sockets [ 460.128871][ T7084] usb 44-1: SetAddress Request (118) to port 0 [ 460.131036][ T7084] usb 44-1: new SuperSpeed USB device number 118 using vhci_hcd [ 460.152640][T12982] tipc: Started in network mode [ 460.155711][T12982] tipc: Node identity aaaaaaaaaa1c, cluster identity 4711 [ 460.159395][T12982] tipc: Enabled bearer , priority 10 [ 460.354504][ T6173] Bluetooth: hci4: Frame reassembly failed (-90) [ 460.357375][T12986] Bluetooth: hci4: Frame reassembly failed (-84) [ 460.360707][T12986] Bluetooth: hci4: Frame reassembly failed (-84) [ 460.929844][T12978] vhci_hcd: connection reset by peer [ 460.934578][ T78] vhci_hcd vhci_hcd.3: stop threads [ 460.936917][ T78] vhci_hcd vhci_hcd.3: release socket [ 460.937435][ T6031] usb 5-1: USB disconnect, device number 27 [ 460.939636][ T78] vhci_hcd vhci_hcd.3: disconnect device [ 460.952936][ T6031] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 460.956047][T12988] FAULT_INJECTION: forcing a failure. [ 460.956047][T12988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.960570][T12988] CPU: 3 UID: 0 PID: 12988 Comm: syz.0.1652 Not tainted syzkaller #0 PREEMPT(full) [ 460.960595][T12988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 460.960605][T12988] Call Trace: [ 460.960610][T12988] [ 460.960615][T12988] dump_stack_lvl+0x16c/0x1f0 [ 460.960642][T12988] should_fail_ex+0x512/0x640 [ 460.960663][T12988] _copy_from_user+0x2e/0xd0 [ 460.960679][T12988] ? __pfx_binder_ioctl+0x10/0x10 [ 460.960701][T12988] binder_ioctl+0x1b99/0x7360 [ 460.960725][T12988] ? find_held_lock+0x2b/0x80 [ 460.960745][T12988] ? tomoyo_path_number_perm+0x295/0x580 [ 460.960765][T12988] ? tomoyo_path_number_perm+0x18d/0x580 [ 460.960783][T12988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 460.960800][T12988] ? __pfx_binder_ioctl+0x10/0x10 [ 460.960825][T12988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 460.960849][T12988] ? do_vfs_ioctl+0x128/0x14f0 [ 460.960867][T12988] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 460.960889][T12988] ? find_held_lock+0x2b/0x80 [ 460.960907][T12988] ? hook_file_ioctl_common+0x144/0x410 [ 460.960928][T12988] ? __fget_files+0x20e/0x3c0 [ 460.960947][T12988] ? fput+0x70/0xf0 [ 460.960963][T12988] ? __pfx_binder_ioctl+0x10/0x10 [ 460.960984][T12988] compat_ptr_ioctl+0x6e/0xa0 [ 460.960999][T12988] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 460.961016][T12988] __ia32_compat_sys_ioctl+0x242/0x370 [ 460.961036][T12988] __do_fast_syscall_32+0xe8/0x680 [ 460.961061][T12988] do_fast_syscall_32+0x32/0x80 [ 460.961083][T12988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 460.961102][T12988] RIP: 0023:0xf70dd579 [ 460.961114][T12988] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 460.961128][T12988] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 460.961143][T12988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c018620c [ 460.961152][T12988] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.961161][T12988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.961169][T12988] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 460.961177][T12988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.961196][T12988] [ 460.961202][T12988] binder: 12987:12988 ioctl c018620c 80000280 returned -14 [ 461.059047][ T40] kauditd_printk_skb: 813 callbacks suppressed [ 461.059056][ T40] audit: type=1326 audit(2000000095.929:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.3.1653" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 461.085998][T12995] binder: 12993:12995 ioctl c018620c 80000280 returned -1 [ 461.230207][ T40] audit: type=1326 audit(2000000096.099:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.3.1653" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 461.290615][ T6031] tipc: Node number set to 11971242 [ 461.979720][T13002] FAULT_INJECTION: forcing a failure. [ 461.979720][T13002] name failslab, interval 1, probability 0, space 0, times 0 [ 461.983981][T13002] CPU: 1 UID: 0 PID: 13002 Comm: syz.1.1657 Not tainted syzkaller #0 PREEMPT(full) [ 461.983997][T13002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.984004][T13002] Call Trace: [ 461.984008][T13002] [ 461.984013][T13002] dump_stack_lvl+0x16c/0x1f0 [ 461.984035][T13002] should_fail_ex+0x512/0x640 [ 461.984048][T13002] ? fs_reclaim_acquire+0xae/0x150 [ 461.984066][T13002] should_failslab+0xc2/0x120 [ 461.984084][T13002] __kmalloc_noprof+0xeb/0x910 [ 461.984097][T13002] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 461.984117][T13002] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 461.984132][T13002] tomoyo_realpath_from_path+0xc2/0x6e0 [ 461.984148][T13002] ? tomoyo_profile+0x47/0x60 [ 461.984166][T13002] tomoyo_path_number_perm+0x245/0x580 [ 461.984178][T13002] ? tomoyo_path_number_perm+0x237/0x580 [ 461.984192][T13002] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 461.984218][T13002] ? find_held_lock+0x2b/0x80 [ 461.984233][T13002] ? hook_file_ioctl_common+0x144/0x410 [ 461.984249][T13002] ? __fget_files+0x20e/0x3c0 [ 461.984264][T13002] ? fput+0x70/0xf0 [ 461.984277][T13002] security_file_ioctl_compat+0x9b/0x240 [ 461.984292][T13002] __ia32_compat_sys_ioctl+0xc3/0x370 [ 461.984308][T13002] __do_fast_syscall_32+0xe8/0x680 [ 461.984327][T13002] do_fast_syscall_32+0x32/0x80 [ 461.984345][T13002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 461.984359][T13002] RIP: 0023:0xf7f33579 [ 461.984368][T13002] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 461.984379][T13002] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 461.984390][T13002] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040187542 [ 461.984398][T13002] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 461.984404][T13002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.984411][T13002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 461.984417][T13002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.984431][T13002] [ 461.984435][T13002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 462.325047][T13004] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 462.398603][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 462.398758][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 463.038548][ T60] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 463.198547][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 463.208737][ T60] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 463.213183][ T60] usb 6-1: config 0 has no interface number 0 [ 463.219208][ T60] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 463.223733][ T60] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 463.228698][ T60] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 463.233329][ T60] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.241142][ T60] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 463.244597][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.255570][ T60] usb 6-1: config 0 descriptor?? [ 463.264389][ T60] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 465.015193][ T1164] Bluetooth: hci4: Frame reassembly failed (-90) [ 465.017516][ T6327] Bluetooth: hci4: Frame reassembly failed (-84) [ 465.188635][ T7084] usb 44-1: device descriptor read/8, error -110 [ 465.570673][ T60] usb 6-1: USB disconnect, device number 15 [ 465.594629][ T60] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 465.609142][ T7084] usb usb44-port1: attempt power cycle [ 466.018464][ T60] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 466.168983][ T7084] usb usb44-port1: unable to enumerate USB device [ 466.349089][ T60] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 466.351921][ T60] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 466.355639][ T60] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 466.358694][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 466.362232][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 466.379641][ T60] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 466.382651][ T60] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 466.385257][ T60] usb 6-1: Product: syz [ 466.386633][ T60] usb 6-1: Manufacturer: syz [ 466.402100][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 466.404325][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 466.445733][ T60] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 466.452607][ T60] cdc_wdm 6-1:1.0: Unknown control protocol [ 466.682758][T13053] comedi comedi2: board detection failed [ 466.709424][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 466.711817][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 466.715982][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 466.718310][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 466.720537][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 466.722714][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 466.724901][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 466.727086][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 466.729334][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 466.731643][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 466.733769][ T60] usb 6-1: USB disconnect, device number 16 [ 466.735760][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 466.735772][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 466.735780][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 467.028600][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 467.031513][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 467.559590][ T141] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 467.718520][ T141] usb 8-1: Using ep0 maxpacket: 8 [ 467.722319][ T141] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 467.725058][ T141] usb 8-1: config 0 has no interface number 0 [ 467.727409][ T141] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 467.732212][ T141] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 467.736412][ T141] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.740430][ T141] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 467.745739][ T141] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 467.750136][ T141] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.829089][ T141] usb 8-1: config 0 descriptor?? [ 467.833833][ T141] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 468.207042][T13083] 9p: Bad value for 'rfdno' [ 468.566798][ T5298] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 468.683467][ T1242] Bluetooth: hci4: Frame reassembly failed (-84) [ 468.685819][ T1242] Bluetooth: hci4: Frame reassembly failed (-84) [ 468.692367][T13096] Bluetooth: hci4: Frame reassembly failed (-90) [ 469.053055][T13100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 469.055724][T13100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 469.058169][T13100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 469.060371][T13100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 469.396686][T13109] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 469.399178][T13109] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 469.402977][T13109] vhci_hcd vhci_hcd.0: Device attached [ 469.407412][T13109] random: crng reseeded on system resumption [ 469.426026][T13109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.683614][ T141] usb 42-1: SetAddress Request (4) to port 0 [ 469.686908][ T141] usb 42-1: new SuperSpeed USB device number 4 using vhci_hcd [ 469.749017][T13116] overlayfs: missing 'lowerdir' [ 470.134354][ T6031] usb 8-1: USB disconnect, device number 17 [ 470.137785][ T6031] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 470.168606][T13118] 9p: Bad value for 'rfdno' [ 470.518221][T13110] vhci_hcd: connection reset by peer [ 470.521929][ T78] vhci_hcd vhci_hcd.2: stop threads [ 470.524256][ T78] vhci_hcd vhci_hcd.2: release socket [ 470.527271][ T78] vhci_hcd vhci_hcd.2: disconnect device [ 470.608936][ T6183] IPVS: starting estimator thread 0... [ 470.622876][T13130] program syz.0.1696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.708584][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 470.713187][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 470.713221][T13131] IPVS: using max 25 ests per chain, 60000 per kthread [ 470.992637][T13144] program syz.2.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.028461][ T5298] Bluetooth: hci1: command 0x0406 tx timeout [ 471.108498][ T5298] Bluetooth: hci2: command 0x0406 tx timeout [ 471.108764][ T5947] Bluetooth: hci3: command 0x0406 tx timeout [ 471.211239][T13151] syz.2.1702 (13151) used obsolete PPPIOCDETACH ioctl [ 471.588620][ T6183] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 471.659098][T13158] overlayfs: missing 'lowerdir' [ 471.750365][ T6183] usb 7-1: config 0 has no interfaces? [ 471.753712][ T6183] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 471.757657][ T6183] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 471.761641][ T6183] usb 7-1: Manufacturer: syz [ 471.765898][ T6183] usb 7-1: config 0 descriptor?? [ 472.047592][ T54] usb 7-1: USB disconnect, device number 20 [ 472.562016][T13166] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 472.564219][T13166] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 472.567343][T13166] vhci_hcd vhci_hcd.0: Device attached [ 472.573378][T13166] random: crng reseeded on system resumption [ 472.592982][T13166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.722812][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 472.725989][T13171] netlink: 'syz.2.1707': attribute type 30 has an invalid length. [ 472.744007][ T1242] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.748008][ T1242] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.752077][ T1242] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.755897][ T1242] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.839406][ T6183] usb 38-1: SetAddress Request (102) to port 0 [ 472.842494][ T6183] usb 38-1: new SuperSpeed USB device number 102 using vhci_hcd [ 473.984325][T13167] vhci_hcd: connection reset by peer [ 473.986488][ T1164] vhci_hcd vhci_hcd.0: stop threads [ 473.988276][ T1164] vhci_hcd vhci_hcd.0: release socket [ 473.990610][ T1164] vhci_hcd vhci_hcd.0: disconnect device [ 474.051961][T13189] comedi comedi1: dt2801: a I/O base address must be specified [ 474.097954][T13190] overlayfs: failed to resolve './file0': -2 [ 474.108829][T13191] netlink: 'syz.0.1714': attribute type 1 has an invalid length. [ 474.454916][T13203] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1718'. [ 474.577122][T11447] Bluetooth: hci4: Frame reassembly failed (-84) [ 474.581940][T11447] Bluetooth: hci4: Frame reassembly failed (-84) [ 474.585287][T13211] Bluetooth: hci4: Frame reassembly failed (-90) [ 474.802867][T13214] 9p: Bad value for 'rfdno' [ 474.935354][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1721'. [ 475.028726][ T141] usb 42-1: device descriptor read/8, error -110 [ 475.100204][ T40] audit: type=1326 audit(2000000109.969:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.108774][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'. [ 475.114290][ T40] audit: type=1326 audit(2000000109.979:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.140730][ T40] audit: type=1326 audit(2000000109.979:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.148886][ T40] audit: type=1326 audit(2000000109.979:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.156591][ T40] audit: type=1326 audit(2000000109.979:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.163806][ T40] audit: type=1326 audit(2000000109.979:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.171052][ T40] audit: type=1326 audit(2000000109.989:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.178168][ T40] audit: type=1326 audit(2000000109.989:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.185188][ T40] audit: type=1326 audit(2000000109.989:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.192284][ T40] audit: type=1326 audit(2000000109.989:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 475.429347][ T141] usb usb42-port1: attempt power cycle [ 475.717622][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'. [ 475.750005][T13233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1729'. [ 475.999192][ T141] usb usb42-port1: unable to enumerate USB device [ 476.104444][T13252] 9p: Bad value for 'rfdno' [ 476.335427][T13258] bridge16: entered allmulticast mode [ 476.628677][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 476.630937][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 476.653048][T13245] overlayfs: failed to resolve './file0': -2 [ 477.118554][ T60] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 477.184503][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 477.189935][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 477.243884][T13272] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 477.245570][T13274] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 477.272055][T13274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.278425][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 477.281641][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 477.284128][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 477.287777][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.292053][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.295683][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.301774][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 477.304281][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 477.307906][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.313726][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.317401][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.323258][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 477.325750][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 477.329773][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.333569][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.337150][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.343685][ T60] usb 8-1: string descriptor 0 read error: -22 [ 477.345940][ T60] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 477.349471][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.351452][T13274] bond1: (slave veth3): Enslaving as an active interface with a down link [ 477.362159][ T60] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 477.364090][T13280] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 477.381279][T13274] vlan2: entered allmulticast mode [ 477.383519][T13274] veth0_to_bond: entered allmulticast mode [ 477.386141][T13274] veth0_to_bond: entered promiscuous mode [ 477.389947][T13274] veth0_to_bond: left promiscuous mode [ 477.392628][T13274] veth0_to_bond: entered promiscuous mode [ 477.394884][T13274] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 477.411156][T13274] veth0_to_bond: left promiscuous mode [ 477.443671][T13282] program syz.2.1743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.908671][ T6183] usb 38-1: device descriptor read/8, error -110 [ 478.818040][ T6183] usb usb38-port1: attempt power cycle [ 479.460498][ T6183] usb usb38-port1: unable to enumerate USB device [ 479.835162][T13316] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 479.837484][T13316] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 479.852251][T13316] vhci_hcd vhci_hcd.0: Device attached [ 479.927294][T13316] random: crng reseeded on system resumption [ 480.057006][T13316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.162564][T13322] bridge19: entered allmulticast mode [ 480.178839][ T141] usb 40-1: SetAddress Request (118) to port 0 [ 480.185855][ T141] usb 40-1: new SuperSpeed USB device number 118 using vhci_hcd [ 481.147600][T13317] vhci_hcd: connection reset by peer [ 481.151946][ T1145] vhci_hcd vhci_hcd.1: stop threads [ 481.160578][ T1145] vhci_hcd vhci_hcd.1: release socket [ 481.168117][ T1145] vhci_hcd vhci_hcd.1: disconnect device [ 481.684020][T13342] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 481.957957][T13348] Bluetooth: hci4: Frame reassembly failed (-90) [ 481.960829][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 482.425410][T13353] overlayfs: failed to resolve './file0': -2 [ 483.108536][ T1161] usb 8-1: USB disconnect, device number 18 [ 483.286290][T13369] bridge13: entered allmulticast mode [ 483.640912][T13376] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 483.643852][T13376] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 483.648924][T13376] vhci_hcd vhci_hcd.0: Device attached [ 483.670394][T13376] random: crng reseeded on system resumption [ 483.720829][T13376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.999283][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 484.629667][T13392] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 484.632093][T13392] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 484.634842][T13392] vhci_hcd vhci_hcd.0: Device attached [ 484.928612][ T54] usb 44-1: SetAddress Request (122) to port 0 [ 484.931143][ T54] usb 44-1: new SuperSpeed USB device number 122 using vhci_hcd [ 485.052232][T13405] overlayfs: failed to resolve './file0': -2 [ 485.191590][T13389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.693969][T13377] vhci_hcd: connection reset by peer [ 485.696624][ T46] vhci_hcd vhci_hcd.1: stop threads [ 485.699435][ T46] vhci_hcd vhci_hcd.1: release socket [ 485.701813][ T141] usb 40-1: device descriptor read/8, error -110 [ 485.704662][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 486.109735][ T141] usb usb40-port1: attempt power cycle [ 486.170188][T13414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1772'. [ 486.250549][T13396] vhci_hcd: connection reset by peer [ 486.253452][T11447] vhci_hcd vhci_hcd.3: stop threads [ 486.256000][T11447] vhci_hcd vhci_hcd.3: release socket [ 486.260374][T11447] vhci_hcd vhci_hcd.3: disconnect device [ 486.669328][ T141] usb usb40-port1: unable to enumerate USB device [ 487.074541][ T1164] Bluetooth: hci4: Frame reassembly failed (-84) [ 487.078575][ T1164] Bluetooth: hci4: Frame reassembly failed (-84) [ 487.082112][T13418] Bluetooth: hci4: Frame reassembly failed (-90) [ 487.487994][T13425] bridge17: entered allmulticast mode [ 488.108047][T13428] vcan0: tx address claim with dlc 0 [ 488.115182][T13428] futex_wake_op: syz.2.1776 tries to shift op by -1; fix this program [ 488.287232][T13430] netlink: 'syz.3.1778': attribute type 10 has an invalid length. [ 488.297913][T13430] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 488.307007][T13438] Trying to write to read-only block-device nullb0 [ 488.934020][T13444] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 488.936999][T13444] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 488.942864][T13444] vhci_hcd vhci_hcd.0: Device attached [ 488.971230][T13444] random: crng reseeded on system resumption [ 489.108784][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 489.109225][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 489.211709][T13452] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1783'. [ 489.266791][T13444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.363765][T13458] dlm: no locking on control device [ 489.705193][T13470] bridge20: entered allmulticast mode [ 489.705461][T13466] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1784'. [ 489.759266][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.761959][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.880487][T13468] afs: Unknown parameter 'context' [ 490.013534][T13475] comedi comedi2: board detection failed [ 490.214500][T13445] vhci_hcd: connection reset by peer [ 490.218701][ T1242] vhci_hcd vhci_hcd.3: stop threads [ 490.220907][ T1242] vhci_hcd vhci_hcd.3: release socket [ 490.222976][ T54] usb 44-1: device descriptor read/8, error -110 [ 490.228523][ T1242] vhci_hcd vhci_hcd.3: disconnect device [ 490.405061][T13477] wg1 speed is unknown, defaulting to 1000 [ 490.422345][T13482] binder: 13479:13482 ioctl 40182103 0 returned -22 [ 490.590036][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'. [ 490.595648][T13491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1793'. [ 490.628865][ T54] usb usb44-port1: attempt power cycle [ 490.747809][T11447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.789706][ T141] wg1 speed is unknown, defaulting to 1000 [ 490.791998][ T141] syz0: Port: 1 Link DOWN [ 490.813886][T11447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.940946][T11447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.068099][T11447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.218974][ T54] usb usb44-port1: unable to enumerate USB device [ 491.299112][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 491.304729][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 491.308053][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 491.314216][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 491.318134][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 491.576506][T13522] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 491.578724][T13522] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 491.583668][T13522] vhci_hcd vhci_hcd.0: Device attached [ 491.593746][T13522] random: crng reseeded on system resumption [ 491.696731][T13525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.858496][ T7084] usb 44-1: SetAddress Request (126) to port 0 [ 491.860562][ T7084] usb 44-1: new SuperSpeed USB device number 126 using vhci_hcd [ 492.645235][T11447] team0: Port device bond0 removed [ 492.649132][T11447] bond0 (unregistering): Released all slaves [ 492.662253][T13523] vhci_hcd: connection reset by peer [ 492.662481][ T161] vhci_hcd vhci_hcd.3: stop threads [ 492.666592][ T161] vhci_hcd vhci_hcd.3: release socket [ 492.666648][ T161] vhci_hcd vhci_hcd.3: disconnect device [ 492.727666][T11447] bond1 (unregistering): (slave veth3): Releasing active interface [ 492.732890][T11447] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 492.736741][T11447] bond1 (unregistering): Released all slaves [ 492.747609][T13511] netlink: 'syz.0.1799': attribute type 11 has an invalid length. [ 492.841512][T13535] netlink: 'syz.2.1803': attribute type 84 has an invalid length. [ 492.847979][T13534] netlink: 'syz.0.1804': attribute type 1 has an invalid length. [ 492.921437][ T6173] Bluetooth: hci4: Frame reassembly failed (-90) [ 492.939834][T13540] Bluetooth: hci4: Frame reassembly failed (-84) [ 492.942088][ T6173] Bluetooth: hci4: Frame reassembly failed (-84) [ 492.944853][T11447] IPVS: stopping backup sync thread 10060 ... [ 492.953537][T13534] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 492.957612][ T6173] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.960483][T13540] Bluetooth: hci4: Frame reassembly failed (-84) [ 492.962312][ T6173] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.968825][ T6173] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.972936][ T6173] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 493.046971][T13506] wg1 speed is unknown, defaulting to 1000 [ 493.301892][T13506] chnl_net:caif_netlink_parms(): no params data found [ 493.392879][T11447] hsr_slave_0: left promiscuous mode [ 493.398013][T11447] hsr_slave_1: left promiscuous mode [ 493.426490][T11447] veth1_vlan: left promiscuous mode [ 493.428536][ T5298] Bluetooth: hci3: command tx timeout [ 493.432577][T11447] veth0_vlan: left promiscuous mode [ 494.308148][T13506] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.324314][T13506] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.326752][T13506] bridge_slave_0: entered allmulticast mode [ 494.337793][T13506] bridge_slave_0: entered promiscuous mode [ 494.351497][T13506] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.353926][T13506] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.356350][T13506] bridge_slave_1: entered allmulticast mode [ 494.386415][T13506] bridge_slave_1: entered promiscuous mode [ 494.576991][T13506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.592581][T13506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.622479][T13506] team0: Port device team_slave_0 added [ 494.627471][T13506] team0: Port device team_slave_1 added [ 494.644883][T13506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.647190][T13506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.675335][T13506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.683572][T13506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.685940][T13506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.707005][T13506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.757675][T13506] hsr_slave_0: entered promiscuous mode [ 494.760989][T13506] hsr_slave_1: entered promiscuous mode [ 494.763739][T13506] debugfs: 'hsr0' already exists in 'hsr' [ 494.765758][T13506] Cannot create hsr debugfs directory [ 494.952096][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 494.954111][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 495.047209][T11447] IPVS: stop unused estimator thread 0... [ 495.072127][T13506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 495.128748][T13506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 495.162755][T13506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 495.175267][T13506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 495.222874][T13506] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.226070][T13506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.229574][T13506] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.232754][T13506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.362989][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.367734][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.390951][T13506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.412416][T13506] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.423446][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.425956][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.448209][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.451281][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.508537][ T5947] Bluetooth: hci3: command tx timeout [ 495.912283][T13506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.955099][T13646] bridge21: entered allmulticast mode [ 496.372505][T13506] veth0_vlan: entered promiscuous mode [ 496.380308][T13506] veth1_vlan: entered promiscuous mode [ 496.410672][T13506] veth0_macvtap: entered promiscuous mode [ 496.421039][T13506] veth1_macvtap: entered promiscuous mode [ 496.431201][T13506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.466149][T13506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.475776][ T1242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.481529][ T1242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.489804][ T1242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.498871][ T1242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.544673][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.550160][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.573056][ T9593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.577352][ T9593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.781412][T13669] Bluetooth: hci4: Frame reassembly failed (-90) [ 496.791692][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 496.949485][ T7084] usb 44-1: device descriptor read/8, error -110 [ 497.151874][T13682] pim6reg: entered allmulticast mode [ 497.164541][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 497.164558][ T40] audit: type=1326 audit(2000000131.979:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.182289][ T40] audit: type=1326 audit(2000000131.979:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.192292][ T40] audit: type=1326 audit(2000000131.989:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.201921][ T40] audit: type=1326 audit(2000000131.989:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.211709][ T40] audit: type=1326 audit(2000000131.989:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.221594][ T40] audit: type=1326 audit(2000000131.989:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.263128][ T40] audit: type=1326 audit(2000000131.989:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.300386][ T40] audit: type=1326 audit(2000000131.989:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.412448][ T40] audit: type=1326 audit(2000000131.989:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.424721][ T40] audit: type=1326 audit(2000000131.989:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.3.1824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 497.459721][ T7084] usb usb44-port1: attempt power cycle [ 497.588656][ T5298] Bluetooth: hci3: command tx timeout [ 497.620677][T13687] bridge22: entered allmulticast mode [ 497.892375][T13676] pim6reg: left allmulticast mode [ 498.019042][ T7084] usb usb44-port1: unable to enumerate USB device [ 498.149500][T13697] program syz.2.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.218123][T13694] syz1: rxe_newlink: already configured on syz_tun [ 498.290664][T13698] smc: removing ib device syz1 [ 498.742573][T13698] ------------[ cut here ]------------ [ 498.744451][T13698] GID entry ref leak for dev syz1 index 2 ref=4 [ 498.746947][T13698] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#0: syz.3.1828/13698 [ 498.751129][T13698] Modules linked in: [ 498.752654][T13698] CPU: 0 UID: 0 PID: 13698 Comm: syz.3.1828 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.756194][T13698] Tainted: [L]=SOFTLOCKUP [ 498.757617][T13698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 498.761622][T13698] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 498.763688][T13698] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 2a 69 4f f9 48 8d 3d d3 89 26 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 10 69 4f f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 498.770261][T13698] RSP: 0018:ffffc90007acf148 EFLAGS: 00010246 [ 498.772618][T13698] RAX: 0000000000080000 RBX: ffff888023c9a800 RCX: 0000000000000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 498.775218][T13698] RDX: 0000000000000002 RSI: ffff8880687b5ba0 RDI: ffffffff90958ba0 [ 498.778025][T13698] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffed100ce11fe0 [ 498.780902][T13698] R10: ffff88806708ff03 R11: ffff88802296aff0 R12: ffffed100479351b [ 498.783594][T13698] R13: ffff8880524d4000 R14: 0000000000000002 R15: dffffc0000000000 [ 498.786369][T13698] FS: 0000000000000000(0000) GS:ffff8880976fc000(0063) knlGS:00000000f53e5b40 [ 498.789904][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 498.792857][T13698] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 498.795372][T13698] CR2: 00000000ffdd9f80 CR3: 0000000073486000 CR4: 0000000000352ef0 [ 498.797955][T13698] DR0: 0000000000000003 DR1: 00000000000001f8 DR2: 000000000000008e [ 498.801070][T13698] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 498.803732][T13698] Call Trace: [ 498.805241][T13698] [ 498.806250][T13698] ib_device_release+0xef/0x1e0 [ 498.807868][T13698] ? __pfx_ib_device_release+0x10/0x10 [ 498.810553][T13698] device_release+0xa4/0x240 [ 498.812146][T13698] kobject_put+0x1ef/0x6f0 [ 498.813677][T13698] put_device+0x1f/0x30 [ 498.815074][T13698] nldev_dellink+0x21f/0x320 [ 498.816636][T13698] ? __pfx_nldev_dellink+0x10/0x10 [ 498.818790][T13698] ? apparmor_capable+0x1d7/0x4e0 [ 498.820471][T13698] ? bpf_lsm_capable+0x9/0x10 [ 498.822188][T13698] ? security_capable+0x7e/0x260 [ 498.823850][T13698] ? ns_capable+0xd7/0x110 [ 498.825691][T13698] ? __pfx_nldev_dellink+0x10/0x10 [ 498.827409][T13698] rdma_nl_rcv_msg+0x38a/0x6e0 [ 498.829377][T13698] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 498.831126][T13698] ? __lock_acquire+0x436/0x2890 [ 498.832807][T13698] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 498.834877][T13698] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 498.837193][T13698] ? netlink_deliver_tap+0x1ae/0xd30 [ 498.839331][T13698] netlink_unicast+0x5aa/0x870 [ 498.840952][T13698] ? __pfx_netlink_unicast+0x10/0x10 [ 498.842706][T13698] netlink_sendmsg+0x8c8/0xdd0 [ 498.844282][T13698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.846041][T13698] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 498.848140][T13698] ____sys_sendmsg+0xa5d/0xc30 [ 498.850193][T13698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.852287][T13698] ? get_compat_msghdr+0x11a/0x170 [ 498.854001][T13698] ? try_to_wake_up+0xa67/0x1860 [ 498.855671][T13698] ___sys_sendmsg+0x134/0x1d0 [ 498.857257][T13698] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.859433][T13698] ? futex_private_hash_put+0x160/0x1b0 [ 498.861312][T13698] ? find_held_lock+0x2b/0x80 [ 498.862916][T13698] __sys_sendmsg+0x16d/0x220 [ 498.864472][T13698] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.866168][T13698] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 498.868099][T13698] __do_fast_syscall_32+0xe8/0x680 [ 498.870229][T13698] do_fast_syscall_32+0x32/0x80 [ 498.871865][T13698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.873964][T13698] RIP: 0023:0xf7f12579 [ 498.875329][T13698] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 498.882372][T13698] RSP: 002b:00000000f53e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 498.885109][T13698] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0 [ 498.887812][T13698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.890874][T13698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.893953][T13698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.897123][T13698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.900068][T13698] [ 498.901417][T13698] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 498.903817][T13698] CPU: 0 UID: 0 PID: 13698 Comm: syz.3.1828 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.907401][T13698] Tainted: [L]=SOFTLOCKUP [ 498.908878][T13698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 498.912240][T13698] Call Trace: [ 498.913372][T13698] [ 498.914368][T13698] dump_stack_lvl+0x3d/0x1f0 [ 498.915923][T13698] vpanic+0x640/0x6f0 [ 498.917288][T13698] ? gid_table_release_one+0x1ad/0x450 [ 498.919138][T13698] panic+0xca/0xd0 [ 498.920423][T13698] ? __pfx_panic+0x10/0x10 [ 498.921940][T13698] check_panic_on_warn+0xab/0xb0 [ 498.923609][T13698] __warn+0x108/0x3c0 [ 498.924962][T13698] __report_bug+0x2a0/0x520 [ 498.926490][T13698] ? gid_table_release_one+0x1ad/0x450 [ 498.928327][T13698] ? __pfx___report_bug+0x10/0x10 [ 498.930049][T13698] report_bug_entry+0xe1/0x290 [ 498.931655][T13698] ? gid_table_release_one+0x1b6/0x450 [ 498.933471][T13698] handle_bug+0x18a/0x260 [ 498.934919][T13698] exc_invalid_op+0x17/0x50 [ 498.936445][T13698] asm_exc_invalid_op+0x1a/0x20 [ 498.938053][T13698] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 498.940064][T13698] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 2a 69 4f f9 48 8d 3d d3 89 26 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 10 69 4f f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 498.946382][T13698] RSP: 0018:ffffc90007acf148 EFLAGS: 00010246 [ 498.948437][T13698] RAX: 0000000000080000 RBX: ffff888023c9a800 RCX: 0000000000000004 [ 498.951083][T13698] RDX: 0000000000000002 RSI: ffff8880687b5ba0 RDI: ffffffff90958ba0 [ 498.953688][T13698] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffed100ce11fe0 [ 498.956244][T13698] R10: ffff88806708ff03 R11: ffff88802296aff0 R12: ffffed100479351b [ 498.958902][T13698] R13: ffff8880524d4000 R14: 0000000000000002 R15: dffffc0000000000 [ 498.962013][T13698] ? gid_table_release_one+0x1a6/0x450 [ 498.963813][T13698] ib_device_release+0xef/0x1e0 [ 498.965436][T13698] ? __pfx_ib_device_release+0x10/0x10 [ 498.967242][T13698] device_release+0xa4/0x240 [ 498.968826][T13698] kobject_put+0x1ef/0x6f0 [ 498.970330][T13698] put_device+0x1f/0x30 [ 498.971726][T13698] nldev_dellink+0x21f/0x320 [ 498.973281][T13698] ? __pfx_nldev_dellink+0x10/0x10 [ 498.975030][T13698] ? apparmor_capable+0x1d7/0x4e0 [ 498.976909][T13698] ? bpf_lsm_capable+0x9/0x10 [ 498.978578][T13698] ? security_capable+0x7e/0x260 [ 498.980272][T13698] ? ns_capable+0xd7/0x110 [ 498.981779][T13698] ? __pfx_nldev_dellink+0x10/0x10 [ 498.983472][T13698] rdma_nl_rcv_msg+0x38a/0x6e0 [ 498.985088][T13698] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 498.986845][T13698] ? __lock_acquire+0x436/0x2890 [ 498.988508][T13698] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 498.990581][T13698] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 498.992801][T13698] ? netlink_deliver_tap+0x1ae/0xd30 [ 498.994541][T13698] netlink_unicast+0x5aa/0x870 [ 498.996075][T13698] ? __pfx_netlink_unicast+0x10/0x10 [ 498.997792][T13698] netlink_sendmsg+0x8c8/0xdd0 [ 498.999394][T13698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.001114][T13698] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 499.003122][T13698] ____sys_sendmsg+0xa5d/0xc30 [ 499.004684][T13698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.006382][T13698] ? get_compat_msghdr+0x11a/0x170 [ 499.008033][T13698] ? try_to_wake_up+0xa67/0x1860 [ 499.009670][T13698] ___sys_sendmsg+0x134/0x1d0 [ 499.011184][T13698] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.012856][T13698] ? futex_private_hash_put+0x160/0x1b0 [ 499.014637][T13698] ? find_held_lock+0x2b/0x80 [ 499.016165][T13698] __sys_sendmsg+0x16d/0x220 [ 499.017653][T13698] ? __pfx___sys_sendmsg+0x10/0x10 [ 499.019332][T13698] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 499.021226][T13698] __do_fast_syscall_32+0xe8/0x680 [ 499.022943][T13698] do_fast_syscall_32+0x32/0x80 [ 499.024579][T13698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 499.026677][T13698] RIP: 0023:0xf7f12579 [ 499.028040][T13698] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 499.034370][T13698] RSP: 002b:00000000f53e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 499.037065][T13698] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0 [ 499.039540][T13698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.042142][T13698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.044759][T13698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.047310][T13698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.049918][T13698] [ 499.051655][T13698] Kernel Offset: disabled [ 499.053181][T13698] Rebooting in 86400 seconds..