last executing test programs: 6m51.138908065s ago: executing program 0 (id=250): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000008c0)={0xb, @pix_mp={0x0, 0x38305543}}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x100) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) listen(r3, 0x9) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mremap(&(0x7f0000230000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x10c, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xfc, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @nested={0xd5, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x4, 0xa1}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x10c}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m50.144979304s ago: executing program 0 (id=253): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x802, 0x4) r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4f20, @rand_addr=0x64010100}, 0x10) 6m50.14296245s ago: executing program 0 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6m50.054644965s ago: executing program 0 (id=255): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x2, @short={0x2, 0x1, 0xffff}}, 0x31) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x2000240000a95c, 0x40000009, 0x4000000201, 0x8000000000000001, 0x48d1, 0x0, 0x800000df}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) fchown(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000240)='./file1\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r6 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r6, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f0000001fc0)=[{&(0x7f0000000d00)=""/241, 0xf1}], 0x1, 0x0) ptrace$setsig(0x4203, r6, 0xf8, &(0x7f0000000380)={0x4, 0x1, 0xc}) 6m49.539977733s ago: executing program 0 (id=260): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x204400, 0x91) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x9) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) statx(r3, &(0x7f0000000180)='\x00', 0x1000, 0x4, &(0x7f00000004c0)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000140)=0x8) 6m44.660404435s ago: executing program 0 (id=278): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x14008850) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x54, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67200000000000150600000fff070067070000200000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r6, r0}, 0xc) 6m44.612458606s ago: executing program 32 (id=278): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x14008850) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x54, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r6, r0}, 0xc) 7.413840974s ago: executing program 4 (id=2000): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r4, 0x50504}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x20008084) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x18001, 0x0) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f0000000040)=[0x2a, 0xa]) 6.86161446s ago: executing program 1 (id=2004): openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x1, 0x80002, 0x2) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) dup(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60081, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0xd18a, 0x3, 0x8, 0x2, 0x13, "21aee14adcdc7465bebed7e6c9a23022ca4f00"}) socket$kcm(0x21, 0x2, 0x2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000, 0xfe, &(0x7f00000003c0)=""/254}, {0x0, 0x35, &(0x7f0000000300)=""/53}, {0xfec00000, 0x27, &(0x7f0000000100)=""/39}, {0xe000, 0x1000, &(0x7f0000000f00)=""/4096}]}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xfffd, 0x0, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300020a0000000000000000000000030006000000000002000000ffffffff000000000000000002000100000004d50000080201800140ac1e000100000000000000000f77344f75e73ee6c82d706204bccc97a29f812242749eb750091da45356a743e8833d1a3fa7a6a1d5bb1ce7f7b1b7c846f2fa9ced1c39e546823a608afdec7ce6fa00"/146], 0x50}, 0x1, 0x7}, 0x0) r7 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x0, r7}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00"], 0xa8}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 6.442013167s ago: executing program 2 (id=2007): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x4000000511482, 0x0) io_setup(0x2, &(0x7f00000004c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000040)={0x7, 0x3, 0x0, 0x33, 0x0, 0x1, "7738d911e9202a86146fe4c66b422b0b", 0x8, 0x6, 0x8, 0x76, 0x0, 0x3, 0x5}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x10009}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x108, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0xf4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xac, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x4}}}]}, {0x65, 0x6, "cb8aa8a1f46ed4404b8dc2cad5b2d72acb66ca447ea9708c3299a9568d4b301d9f3e1ebef421c28dccde8db31d86d846e937ee7922d31f60e00c53cd9de3c1b20933b314a89df9c7370aeb8b9f4767f614295eb8f25ef151f3b125f763d9537bf0"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x4d8, 0xffffffff, 0x0, 0x0, 0x230, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1fc, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x4, 0x8000, 0x8, 0x0, 0xffff, 0x8, 0x196, 0xf, 0x18, 0x8}}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x4}, {0x1, 0x2}, {0x1, 0x1, 0x7}, 0x8, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x87, 0x8, 0x6, 0xc}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0x11, 0x1a, 0x40, 0x2, 0x9, 0x208, 0x2c89}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x4, 0x44}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x534) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x5) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 5.967669374s ago: executing program 1 (id=2008): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xfffffe0c, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x8000003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x5}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) rt_sigsuspend(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x3) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, 0x0) syz_emit_ethernet(0x116, &(0x7f00000006c0)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0xd8, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xf5f1], "c00d63830bbfc2e914adfa3c5b7792f44e9d27912b0a7c827a1078dfe5959f135500f45a4d13176349e395839871deb9ffe5a5290a5805ea40b40c766f30a4a209edcbd47ee04f015d52388e118ccdc74eaae43ed1f8b14eb4061037c7c37738de8706daf776833b5bf318b726892d5e1b24931f6208cd13d479c0fc7b920b5fb610c449935469dc7f9a02e7ebb93ffb6d3c"}, {0x8, 0x88be, 0x86ddffff, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x22eb, 0xfffffffe, {{}, 0x2, {0x1}}}, {0x8, 0x6558, 0xfffffffc}}}}}}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x200) syz_open_dev$usbmon(&(0x7f0000000000), 0x43, 0x80300) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) 5.685325654s ago: executing program 3 (id=2009): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000008c0)={0xb, @pix_mp={0x0, 0x38305543}}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x100) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) listen(r3, 0x9) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mremap(&(0x7f0000230000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.002539624s ago: executing program 1 (id=2010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010102, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x72, 0x328, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x73a, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x32}, 0x2, @in=@multicast2, 0x1504, 0x0, 0x3, 0x0, 0xc36, 0xfffffffd}}, 0xe4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) semctl$IPC_RMID(0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) prlimit64(0x0, 0xe, 0x0, 0x0) getgroups(0x1, &(0x7f0000002500)=[0x0]) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000002540)={0x1, 0xa0000000, {r0}, {0xee01}, 0x5, 0x3}) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000009c0)={{}, {0x1, 0x1}, [{0x2, 0x5}, {0x2, 0x6}], {}, [{0x8, 0x2}, {0x8, 0x5}, {0x8, 0x6}, {0x8, 0x1}, {}, {}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x1}], {0x10, 0x5}, {0x20, 0x2}}, 0x7c, 0x3) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0x7fff}}, 0x0, 0x0, 0x500, 0x8, 0x0, 0xa}, 0x9c) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 4.75037073s ago: executing program 3 (id=2011): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0xffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000001340)=""/4095, 0xfff}, {&(0x7f0000002340)=""/70, 0x46}, {&(0x7f00000023c0)=""/106, 0x6a}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000002440)=""/195, 0xc3}, {&(0x7f0000002540)=""/80, 0x50}], 0xa, 0x80000001, 0x3f7a) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000300)=0x800) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r2 = io_uring_setup(0x2a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x28b}) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.679223227s ago: executing program 2 (id=2012): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') socket(0x28, 0x3, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) exit(0x800) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 4.464624677s ago: executing program 3 (id=2013): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010102, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x72, 0x328, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x73a, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x32}, 0x2, @in=@multicast2, 0x1504, 0x0, 0x3, 0x0, 0xc36, 0xfffffffd}}, 0xe4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) getgroups(0x1, &(0x7f0000002500)=[0x0]) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000002540)={0x1, 0xa0000000, {r0}, {0xee01}, 0x5, 0x3}) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000009c0)={{}, {0x1, 0x1}, [{0x2, 0x5}, {0x2, 0x6}], {}, [{0x8, 0x2}, {0x8, 0x5}, {0x8, 0x6}, {0x8, 0x1}, {}, {}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x1}], {0x10, 0x5}, {0x20, 0x2}}, 0x7c, 0x3) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0x7fff}}, 0x0, 0x0, 0x500, 0x8, 0x0, 0xa}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 4.324736087s ago: executing program 4 (id=2014): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010102, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x72, 0x328, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x73a, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x32}, 0x2, @in=@multicast2, 0x1504, 0x0, 0x3, 0x0, 0xc36, 0xfffffffd}}, 0xe4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000002540)={0x1, 0xa0000000, {r0}, {0xee01}, 0x5, 0x3}) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000009c0)={{}, {0x1, 0x1}, [{0x2, 0x5}, {0x2, 0x6}], {}, [{0x8, 0x2}, {0x8, 0x5}, {0x8, 0x6}, {0x8, 0x1}, {}, {}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x1}], {0x10, 0x5}, {0x20, 0x2}}, 0x7c, 0x3) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0x7fff}}, 0x0, 0x0, 0x500, 0x8, 0x0, 0xa}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 3.555081479s ago: executing program 1 (id=2015): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') socket(0x28, 0x3, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) exit(0x800) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 3.532306699s ago: executing program 2 (id=2016): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') socket(0x28, 0x3, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) exit(0x800) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 2.657682461s ago: executing program 4 (id=2017): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0302140000000800d3c54bdf26be0ade0b02adbffcadba2f79a1cddcc846403f8320a676fa525fcfcd473ac24caddf9a"], 0x41, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.637053471s ago: executing program 3 (id=2018): symlink(&(0x7f0000000080)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001200)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000002000062320000000000000009ffff0000000000"], 0x0) read$FUSE(r3, &(0x7f0000006500)={0x2020}, 0x2020) 2.396859404s ago: executing program 1 (id=2019): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x4000000511482, 0x0) io_setup(0x2, &(0x7f00000004c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000040)={0x7, 0x3, 0x0, 0x33, 0x0, 0x1, "7738d911e9202a86146fe4c66b422b0b", 0x8, 0x6, 0x8, 0x76, 0x0, 0x3, 0x5}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x10009}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x108, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0xf4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xac, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x4}}}]}, {0x65, 0x6, "cb8aa8a1f46ed4404b8dc2cad5b2d72acb66ca447ea9708c3299a9568d4b301d9f3e1ebef421c28dccde8db31d86d846e937ee7922d31f60e00c53cd9de3c1b20933b314a89df9c7370aeb8b9f4767f614295eb8f25ef151f3b125f763d9537bf0"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x4d8, 0xffffffff, 0x0, 0x0, 0x230, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1fc, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x4, 0x8000, 0x8, 0x0, 0xffff, 0x8, 0x196, 0xf, 0x18, 0x8}}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x4}, {0x1, 0x2}, {0x1, 0x1, 0x7}, 0x8, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x87, 0x8, 0x6, 0xc}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0x11, 0x1a, 0x40, 0x2, 0x9, 0x208, 0x2c89}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x4, 0x44}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x534) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x5) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x800) 2.345078337s ago: executing program 2 (id=2020): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x4000000511482, 0x0) io_setup(0x2, &(0x7f00000004c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000040)={0x7, 0x3, 0x0, 0x33, 0x0, 0x1, "7738d911e9202a86146fe4c66b422b0b", 0x8, 0x6, 0x8, 0x76, 0x0, 0x3, 0x5}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x10009}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x108, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0xf4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xac, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x4}}}]}, {0x65, 0x6, "cb8aa8a1f46ed4404b8dc2cad5b2d72acb66ca447ea9708c3299a9568d4b301d9f3e1ebef421c28dccde8db31d86d846e937ee7922d31f60e00c53cd9de3c1b20933b314a89df9c7370aeb8b9f4767f614295eb8f25ef151f3b125f763d9537bf0"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x4d8, 0xffffffff, 0x0, 0x0, 0x230, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1fc, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x4, 0x8000, 0x8, 0x0, 0xffff, 0x8, 0x196, 0xf, 0x18, 0x8}}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x4}, {0x1, 0x2}, {0x1, 0x1, 0x7}, 0x8, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x87, 0x8, 0x6, 0xc}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0x11, 0x1a, 0x40, 0x2, 0x9, 0x208, 0x2c89}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x4, 0x44}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x534) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x5) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.985623006s ago: executing program 4 (id=2021): syz_io_uring_setup(0x4d88, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x3, 0x370}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x108, &(0x7f00000001c0)=0x7, 0x0, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x4, 0x5, &(0x7f0000000000)="e7db31f1"}) 1.732266615s ago: executing program 4 (id=2022): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x7045, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r4}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.210171066s ago: executing program 3 (id=2023): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$int_out(r1, 0x2, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.113831088s ago: executing program 2 (id=2024): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmsg$alg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980), 0x1, 0x0, 0xffffff71, 0x844}, 0x24044011) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r2, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc010) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = getegid() writev(r3, &(0x7f0000000080)=[{&(0x7f0000000380)="9af1dffdb581fc7526b7720b82e04536c28587690aab6db68a485b835c42848c6caf9bf29b0f87198b39c67d36a217aedb66fd8e73392dff0b26b311110d2a032ab834f0bb4d9f5900d34b8b2d4a7af596517e115ad5816e86b69ead8b4b6b81476997aac5fa1f4d29098e9957e8aa4c512f8b5a9c84510219dddc92f3e6bceb51a20e6b4ff4581d72d375a18547ece8b27c2ae18271a69b70a79698ba9d2d8f46ab", 0xa2}, {&(0x7f0000000540)="45fed278fba12a3ca6c4638fa7fddf4383c3e336d1bda359890e1176a0d16d6eca02c7d0a53e309f4e6b8d4f284d0a3efabd1e1381cb2faf7bf311caa00446a6397c063d1f2c2bda83861bc677020a86025dde7e711ab16a9bb4b680bf86d7612bab65b1d239ee86d1655eb271af8365152e82a06987476d19f85a8726d6e138b06a17f6337a62ac625087d0ff66568415fbf05f44f873e98afc69f2f6d2af488ffb3a548b5def71dbb7b4795c98536557bf539ed29e68ae2b3e9a9b24a3ab9c369944577a97c692fd27fc5ccac876118168021c5ea7c1f0e9cedde1701e13705471bce35f362743c22b22d427a52fb57fbbaffc1755b8", 0xf7}, {&(0x7f0000000640)="e0096c3b2000e7176c5cc013874e115ce9d22bfa05a1c47f600e6ba88aebf639e0928411520e95458c2cf64de3cf85ff6d9584302d3d7b9ef688e8685474046f4d5cb4d0f72caa6d3fe1246a180f35924423ae5a04f0651e499d3a9ad5e7d54294d13be2c460d9758013e9ca43cc132cd963cd69c971e6fbacc7df77f9412d01923a4b426fb2ea45413a428674aa7619fad60e94e700e205e44857b0788f900c2d86d85a88c0e422753782e38a841d46d4d6d067875aacfe9b94f48ee3b4ed7e51a659594dd461cde60b10de2148f362001f228eae5709ec238db3fef308178994abf8bd6386999bf33be3dbdd640797aa44deff924c9d537ce2977047356ec656da0917607d55d8bc8348a2820234a9f732887d95f581559e22fb6e9ed3b992a45369d6c0ffc112a96a9c04ff7395438a0f1ddeaed75f975e6a088941c98c715110a3ef8021969811cafe89ee9b60ec22c987955268d245dee677bd24b63cc5d8f0fa915249ef3796443e65d77bab39d23cce1b254823bdac52d18d24ccdb24a27a343ad89373aecb5206101748acbb50ba8855816a6f0959c3067236ef9e87e49adb553b217de8420374828bfb16acd3a589e2e18a1dc2a1e751334d2639d3c7945ca8c8b30511b06ecde215b41a4c30c355dcbe6302e36e5092584b3a404ee926f604c75ec121e3570715aa56589f5a94114e4279818afb383456c56760718aa0168d482148d7a8084087e223ec223fb2735c7db83da8768f22b051ae40ce441cd53419cc8fc5ad19b9c1019bfbb6ef6e1be0e74167c32f07115ef4e8427324fb2d314e02481c7bbea030cc04f5ae4578b5d3a5ffdd45952820b642a1fc41f68e04a7953a803ea29ff9ff0b3512269704ea003316c94f4501ecc950ceb48bcb564d2129ba8dafe9a2a0b45ca9cc49b926ab617853326a37b4bb5a841bb8f917048a7f812bd7aeea7d2d1e816b82e3ab92f5df45a03fc6857d9e4969603eaa7d0e874e42bb009ed68ab294006052133694fd2619afaeb2d990e5c72343b6ac877b05c58ea9a8441eb0d60603c1543b25f7bbdd04a964a6693a077fa43b62862632ee9a0e269cf6c17d1bbedbe2ae35485b089ee7f420e36c9d96233cd0a23dc9990cc131df8624b4876d43f8451141ed67aa838b23b9b2536117adca18258f61e72c7f6681dd5bff12e3eec3fc80ecb702fbc07deb56c5ff132ee8653aca4b894e901650fad79ac9ddcaa3b9764bf3737f0c9a9c17901e619e0d98d2c5c8b67900dbaafff52972bae205ec3ce6113f9ae935fcf88952eb1af22ce17ee91b1d595c152b830eec4334363da9f5e508dac29f9adde85471b695623a52d4be305bd3a624472934d8d50bc4e375c5159a10e64c2aac966678acf0a817d661db85f48e6acfd6ba8c5d7a05dfa0fd0fd0fe06670fd1862ffeb2010825220cf6a14938d5004df6ff8191a6a9debd927bbbe7352baf15d0252ce93dde12b168e415b575c9a503d051ec05d0513a7fabd8571cd2011e75ca2433c3f57446dfb97d3993fa67e36b72e24d459c095a76c10323b87f2373356ef9e70bd8933368a956236d0b8dce8f43e1c5c3ffcd3f9b110c515d0afefcab0dcf8ea34e29eb8e1c51fa45900f49b326662bdc3e371a600e33cd7bb72595e1c3ec67b9587acb41f9d57e5a353ac81a84fe41a5cea9bb22f8e5739760950f2fba2b6154826c55ec804bf226ff69c7462f17689314558f614588e7e4c760bea6585ef2841dd6f88d34437aa06567346d53672416614f905c74802e243f1b39cc472aedf6952ec03a2519c7ca160af18f53b207ad9c7e3643a3787884f4cacbe092973e481724472827f3b9656544b2fd588b26cbbfc790a7b1c93728ec0ac7cb1c80ff9fde613701a3ee8e03a34e06e40474cc78e2a54b4de27bd175b8f223c1701b46f3aed711da1bfc66a9deb2120e449495decc56aef2438b0459b666966c773802a92f9c6463d8e1ae8f26a30abedcec56b257d6972e8761623b32f7bacc3e491fde309f4fc82a27595ddd9e51154844c9c3b86a5db904f5556b1237358897705507a5e2d8a38733b0be20af262680b403fb1d6037f8a6f796e69a7e7561e346a887f4b36227330b509e5ec83b69a64d88653e00dbe5ca1a54ba3b4f9c3065dcba1030547b72da5d9b4c7e9c30654f5516312bcb6c69300a22a28db5a5cf77a824bd42feb9881862a8d3579bef1209c76f1454dc08bced3c8ec94cb16e5f94be03d3bc67de67098d4f2bb757d99d86a9de7aa4be01351074ed946bb3208d130326cd8007c8584484c4094bb93f19c0f1aded9d8c95a455d6e49bd48dc7e233717ed2bcde0817d759417a225b6967be643dd3fb6a1b0f3b2ffd80904519d5e210af4b279eb651acc0f45da316622cae8b8ebce88b1510cc4ddfd98150d4c00e304fa256ecd3070f286360f9e1c7796a5d3354d5e47deaafd891babc1d5b33f60f58512409ee5349a03c26f5e3319cc80f23e6be0f13715b018607c4f4a9fe550e06e0df0941d5ba49758af50369202fa78288baeb7674584ef4fce28ecbeb91b0aa989d80b8edb52231210b54fcd4e6e03b3912d260fe10ff476f3316414771fc4b8dea4c6a3c0068dcf430811ec2c6b8d465224dc453e737b28e46f12321c7739f73a864f8274ed83e039f5d4273401bb0c24cb64a6cd0bc08b9d41699d2b1ff3ac511e4b4bc980f3c49e0878b1f6e593c3e9a4d86b9e10e822d84e92785e7bd031c34336bbffec933a1cf962a1d49af8891f072ec99cc7e35ad50c6d8d248f57f3d93fa65310d32f7bd8b935e1854a30e1bf905df1792148119c68f4d3eb16c0763f0394755cb5e68b85dc7db37204cc2af28bc3875b4acdb6f1eb0af70e5e8ed54850dd73e98b45f63a61609f1421fd1bf4b3dc346cb0fb487c12a8c019085ae276b938ffea8080d15ac08b44c9f94acc7f8d4795ee44b08cb9f81b6df1b8f672fec75f9940a609ea5386f7fe894f9618a8dc631345754221843cdb2849f81c904b99ebf9fb08383302a77577377dea4cb3e15ce2831707acbb9442cba1b64d8f2c1053f63ce78906055c429a29920138ea119a1a2f926d888fb4ee71fdd712cf8a679b48f47303939845e87ad2ec538a7db36687c33eb5e9e54ef243d206f7c0999b8ca301d9187806690e099c4f5e21cca299ebb08f2cecb4b52769289d376cbfa011cb670d48ea37530f60ba2ef3f02cd0c498285c9dff8fe779cbe47d097e94ede0de436a90a7e8680dc5efc74a4d6df9b1ea38c788ee0b47ad6172192c227ac1e44d36e2e70ae6889a4f75fc4d9830ce97d3fd739c3c933073baa5cf8e5d1d1e728c2fe2172feaed11d7fee3f75263e00e655959068629ae16dd5f69bda4194cf9ceb7eccde171bacede12b210a83ef301318eda58065bef662e8242176424cf702834b63918520b519139a569debc521044f6215e8c476960b9a9ee5adfedb0b56a10bd61a090a1910aed8b1d74f456acc9cc7f9bf802ba87f4e21ce38e00cd35db65472effdfb97636458d132c9bfe3259aed264b5c9700629198ffbaf4017fe537ca443bae53d671e4ecc611101881bbfdc4f202138d9db5ddc9a60c733639cc474cb86aae8f2894e56dd062885c3a77da626c565b455e5324547bb238d044cd2cd68336197413932bbb30aebb2d8b36d7e8f048373db6c756636627cabc543f489d3ff221910f3e5cf61ea70e8d095cdc6fda9090ae5e410368dc93fa34163f7f0af4f40e78a3d3aff5c75a257e571667fb3353a042a8ae7e66d94975167f2ebb21faba2c6d7343027cd0e86f17c555e7cf532e3107d79435a202868a60beb50eb000bb2034f67e9f94006f3ac50c3fadf62dee5dd6bc9eaf2fa1b690ee040a7c204a29eaf8821cf62dc59977f6dafc8f26cf3da84228517ec831c3f4cffe46f3137e86a020c0a2fcb1ac8d5b0da222df5da3cd36fd3bf64f5618beb789cd11022efe2c8771154ae4a2014de7aa9eb5ff32aa56bf9db366b555ead9fb41266a956beaecbdeb26f7181a36987c626f00d51fa44f816beaa51dfe32fca9bd4942a6ab7693be6734c26a45a369f5d605d7c4127c38f0982dcd862c8e08f6ec9bee92867a5916118abd3e780cb2729653b9cbf898d5a9894ebbf541b7ef0744c32b84966ce1bc29e69f0d42405d565e93be06f5e4c4ee33a91d9ffa62a1b9563f8854084151dd03245682751728c48b47144b9f19635502a1cb743b6e41030a61f8bd79d545090ac49ecad13925a6c1011df721a0b0e8e05a6a4017a308e66ef95e47f2b8555e5d5c3becd5661c8915d34ea908fb42fc372c5b41e15fab696663442db578acd7500ee9ce012d680322556ad8fbed7e572ff1646bb3dbe25abb07550a7121a852560117be8687b399de66c157bbb74784bd4eb79017d42a99fc48a7ca1a5a52a358ddcf91e31042152a78470699ad89215b1d118b1051179f2fa24d237c7c2ac7192d133a568e176430647550fedcd59f7564af11ba2a4583b763808f4f2eb149bc1d797726f0731c937b9a1374dfa31e72f13d03736a0a19aa9edc5b45e70555fd720614bda2702fc3b31cf82f99d1ff3c4428be5e08125ddacac61e409427dbf9d551c03c9694c05b20c9f4f1cd7687b2b84305a31baf3b25f0bc3ef2dccc1e5c235de61100131fabc4e02e9b21ea5c35f292deee5cf17d47cbe2ffaac41b76f3b5ccf042509a7075a6113a5ba3d68394efbe1970b7be56082cd28a2325d777d94be891314d53d834b7967cd9afcaeb7aa87fe0f04a7b82982559d4d541576844604b693da530383b1e27056de89150de4f2c25aaa2c8cce23b7a7605c534fb36a501b48d5e39c13de4a27fced33cc87a7fe268243089588b9af9e13beb9ac1c56d7dc94852a7a8f3b7399f349eb01c33623b77a922993066d521468a089d0a52345c82a6dc60e11f8162eed77ed89d83cbf832a3c6985ccab146a27288b0e38af983a0cb117ba8b09496beb6153eb12ab5cb93782b9dd98486a55f60d289a06e51c5864501710ecfe3f6b122b7cb00c879c25749b3ba6a5e3318e96fedffed818c7407f517217cc45c1781180d1a1d18be2a075e8353a4d26e648a10a0ade14832b98f53955d80582524f32ad30eb8d1448cff353933c2d293ff89342e0e2748b69455460cd39156e6cf62cf183e8e94a0a22cc9e80e979c7f4cdc7d1ac0e25ec81d2d5313a5ea224d137563841d64ed9a11b4906fb8f4c992ef14a1762593c9923d69efd8c968bf4cf2b598827057107dfe949d73eba3f09a8153fa874109fa03f41f87ec37c3a8aedcbbf4142af82864c06dd4be7b8f836ca4df6b0245f1ca96064fc0ba2ac8c14002457e48282547390b3dca1195330c3024e5ed685efacfa32cf183eb4830541e991a3e03f1fb92ab5439f0501a1bacac3f3c99280dc872ce8e80fab9e27d1d7a2b478241ed3b32a94ad3100874fc478b7a571640e913f3697e679df344aec59b62555786285f998b385dab02d18270146317d0f7f26adc2e2a9d004859de86b2c19aab1e8b4319da9483b138891b5d38e57a27eb8f31446090e47d6358843dadbaa780549d54d11ce18ee4126aad17f4d7379b3bfbf6b0d52b4301e348edac5f0ec8c46b629f3c49722eb36b5a628e1920c7f6f0ebb5b85be63b3aceab27c2179fef3b8bd7205826299ec14fb91aff2324e181290f609e29194dcc0d7fb97426ec72b2a8cac070adff2b804a13b563ba213d311909ed93c402538f72b989ea45d058839e85925d0a1bd6141c1caf0576652422dc0e4430", 0x1000}, {&(0x7f0000001640)="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", 0xfb}], 0x4) fchown(r2, 0x0, r4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x9, 0x1, 0x80000001) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) 774.99435ms ago: executing program 1 (id=2025): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x70}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r3 = syz_io_uring_setup(0x61be, &(0x7f00000003c0)={0x0, 0x408b, 0x3180, 0xf7fffffd, 0x39a}, &(0x7f0000000100), &(0x7f0000000080)) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) bind$bt_l2cap(r6, &(0x7f0000000000), 0xe) listen(r6, 0x1) epoll_create1(0x80000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) 627.576163ms ago: executing program 4 (id=2026): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) 29.473804ms ago: executing program 3 (id=2027): syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_delroute={0x38, 0x19, 0x1, 0x70bd2c, 0x25dfcbfb, {0xa, 0x20, 0x20, 0x0, 0xff, 0x0, 0xfe, 0x2}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}, @RTA_GATEWAY={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000680)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x3, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}}}}}}}}, 0x32) 0s ago: executing program 2 (id=2028): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040), 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') socket(0x28, 0x3, 0x1000) r1 = socket(0x1d, 0x2, 0x6) recvfrom$l2tp6(r1, 0x0, 0x0, 0x10100, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read(r3, &(0x7f0000000880)=""/4096, 0x1000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (fail_nth: 5) kernel console output (not intermixed with test programs): [ 428.661831][ T6210] vhci_hcd vhci_hcd.2: stop threads [ 428.664691][ T6210] vhci_hcd vhci_hcd.2: release socket [ 428.666446][ T6210] vhci_hcd vhci_hcd.2: disconnect device [ 428.668336][ T6210] vhci_hcd vhci_hcd.2: stop threads [ 428.669987][ T6210] vhci_hcd vhci_hcd.2: release socket [ 428.671741][ T6210] vhci_hcd vhci_hcd.2: disconnect device [ 428.674292][ T6210] vhci_hcd vhci_hcd.2: stop threads [ 428.675952][ T6210] vhci_hcd vhci_hcd.2: release socket [ 428.677685][ T6210] vhci_hcd vhci_hcd.2: disconnect device [ 428.713045][ T6023] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 428.718480][ T6023] usb 41-1: enqueue for inactive port 0 [ 428.759816][T12323] Cannot find del_set index 1 as target [ 428.783010][ T6023] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 429.745735][T12336] IPv6: NLM_F_REPLACE set, but no existing node found! [ 429.833099][ T59] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 430.273282][T12345] netlink: 'syz.4.1656': attribute type 10 has an invalid length. [ 430.276194][T12345] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 430.279859][T12345] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 430.283832][T12345] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 430.692587][T12353] siw: device registration error -23 [ 431.486624][T12366] netlink: 'syz.3.1662': attribute type 10 has an invalid length. [ 431.495705][T12366] bond0: (slave ªªªªª»): The slave device specified does not support setting the MAC address [ 431.499586][T12366] ªªªªª»: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 431.503715][T12366] bond0: (slave ªªªªª»): Error -22 calling dev_set_mtu [ 431.535030][T12367] Cannot find del_set index 1 as target [ 431.772128][T12369] Cannot find del_set index 1 as target [ 432.244897][T12374] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 432.247096][T12374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.250679][T12374] vhci_hcd vhci_hcd.0: Device attached [ 432.257522][T12374] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 432.260223][T12374] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 432.263113][T12374] vhci_hcd vhci_hcd.0: Device attached [ 432.266175][T12374] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 432.268328][T12374] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 432.270791][T12374] vhci_hcd vhci_hcd.0: Device attached [ 432.273717][T12374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.279481][T12374] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 432.283025][T12374] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 432.286305][T12374] vhci_hcd vhci_hcd.0: Device attached [ 432.290666][T12374] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 432.293677][T12374] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 432.298589][T12374] vhci_hcd vhci_hcd.0: Device attached [ 432.303136][T12374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.309125][T12374] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(24) [ 432.312356][T12374] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 432.316075][T12374] vhci_hcd vhci_hcd.0: Device attached [ 432.320020][T12374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.361923][T12383] vhci_hcd: connection closed [ 432.362176][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 432.362602][T12377] vhci_hcd: connection closed [ 432.372069][ T1148] vhci_hcd vhci_hcd.3: release socket [ 432.376156][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 432.473943][T12379] vhci_hcd: connection closed [ 432.474067][T12381] vhci_hcd: connection closed [ 432.475812][T12385] vhci_hcd: connection closed [ 432.493104][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 432.499573][ T1148] vhci_hcd vhci_hcd.3: release socket [ 432.502467][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 432.503004][T11874] usb 43-1: new low-speed USB device number 9 using vhci_hcd [ 432.505162][T12375] vhci_hcd: connection closed [ 432.507499][T12376] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 432.507781][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 432.515128][ T1148] vhci_hcd vhci_hcd.3: release socket [ 432.516863][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 432.518867][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 432.520605][ T1148] vhci_hcd vhci_hcd.3: release socket [ 432.522339][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 432.524510][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 432.526219][ T1148] vhci_hcd vhci_hcd.3: release socket [ 432.527975][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 432.530030][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 432.531933][ T1148] vhci_hcd vhci_hcd.3: release socket [ 432.534315][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 432.791726][T12394] blktrace: Concurrent blktraces are not allowed on sg0 [ 433.082417][T12407] siw: device registration error -23 [ 433.588967][T12416] netlink: 'syz.4.1673': attribute type 10 has an invalid length. [ 433.591589][T12416] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 433.595272][T12416] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 433.599218][T12416] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 433.788602][T12422] 9p: Bad value for 'rfdno' [ 433.843527][T12423] Cannot find del_set index 1 as target [ 434.250459][T12432] Cannot find del_set index 1 as target [ 434.778562][T12436] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 434.781242][T12436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 434.785317][T12436] vhci_hcd vhci_hcd.0: Device attached [ 435.209801][T12443] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 435.212619][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.216118][T12443] vhci_hcd vhci_hcd.0: Device attached [ 435.222214][T12437] vhci_hcd: connection closed [ 435.222440][T12443] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 435.224795][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 435.227127][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 435.229308][ T1142] vhci_hcd vhci_hcd.3: release socket [ 435.235256][T12443] vhci_hcd vhci_hcd.0: Device attached [ 435.242451][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 435.247720][T12443] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 435.250468][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 435.263165][T12443] vhci_hcd vhci_hcd.0: Device attached [ 435.267064][T12443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 435.277703][T12443] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 435.280561][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 435.293108][T12443] vhci_hcd vhci_hcd.0: Device attached [ 435.299314][T12443] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 435.302072][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 435.309665][T12443] vhci_hcd vhci_hcd.0: Device attached [ 435.317915][T12443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 435.329118][T12443] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(24) [ 435.331956][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 435.341965][T12443] vhci_hcd vhci_hcd.0: Device attached [ 435.345866][T12443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 435.371030][T12457] vhci_hcd: connection closed [ 435.371274][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 435.371775][T12453] vhci_hcd: connection closed [ 435.376232][T12451] vhci_hcd: connection closed [ 435.376391][T12448] vhci_hcd: connection closed [ 435.380662][T12446] vhci_hcd: connection closed [ 435.383189][T12444] vhci_hcd: connection closed [ 435.408517][ T1142] vhci_hcd vhci_hcd.1: release socket [ 435.413163][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 435.415837][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 435.417938][ T1142] vhci_hcd vhci_hcd.1: release socket [ 435.420739][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 435.424633][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 435.426990][ T1142] vhci_hcd vhci_hcd.1: release socket [ 435.431153][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 435.434432][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 435.436584][ T1142] vhci_hcd vhci_hcd.1: release socket [ 435.439202][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 435.442209][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 435.447178][ T1142] vhci_hcd vhci_hcd.1: release socket [ 435.449757][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 435.452295][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 435.453062][ T10] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 435.457579][ T10] usb 39-1: enqueue for inactive port 0 [ 435.473941][ T1142] vhci_hcd vhci_hcd.1: release socket [ 435.476535][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 435.523071][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 435.796252][ T40] audit: type=1326 audit(1768633165.775:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.804099][ T40] audit: type=1326 audit(1768633165.785:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.810994][ T40] audit: type=1326 audit(1768633165.785:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.820314][ T40] audit: type=1326 audit(1768633165.795:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.827123][ T40] audit: type=1326 audit(1768633165.795:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=99 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.834136][ T40] audit: type=1326 audit(1768633165.795:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.840805][ T40] audit: type=1326 audit(1768633165.795:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.845052][T12462] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1683'. [ 435.848551][ T40] audit: type=1326 audit(1768633165.795:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.867189][ T40] audit: type=1326 audit(1768633165.795:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.874142][ T40] audit: type=1326 audit(1768633165.795:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.3.1683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 435.971628][T12469] FAULT_INJECTION: forcing a failure. [ 435.971628][T12469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.975797][T12469] CPU: 0 UID: 0 PID: 12469 Comm: syz.2.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.975813][T12469] Tainted: [L]=SOFTLOCKUP [ 435.975818][T12469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 435.975824][T12469] Call Trace: [ 435.975828][T12469] [ 435.975832][T12469] dump_stack_lvl+0x16c/0x1f0 [ 435.975855][T12469] should_fail_ex+0x512/0x640 [ 435.975869][T12469] _copy_from_user+0x2e/0xd0 [ 435.975882][T12469] vmci_host_unlocked_ioctl+0x8b2/0x2040 [ 435.975898][T12469] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 435.975913][T12469] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 435.975930][T12469] ? do_vfs_ioctl+0x128/0x14f0 [ 435.975944][T12469] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 435.975960][T12469] ? find_held_lock+0x2b/0x80 [ 435.975974][T12469] ? hook_file_ioctl_common+0x144/0x410 [ 435.975990][T12469] ? __fget_files+0x20e/0x3c0 [ 435.976004][T12469] ? __fput_deferred+0x470/0x480 [ 435.976019][T12469] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 435.976033][T12469] compat_ptr_ioctl+0x6e/0xa0 [ 435.976044][T12469] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 435.976056][T12469] __ia32_compat_sys_ioctl+0x242/0x370 [ 435.976071][T12469] __do_fast_syscall_32+0xe8/0x680 [ 435.976083][T12469] do_fast_syscall_32+0x32/0x80 [ 435.976093][T12469] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.976107][T12469] RIP: 0023:0xf70ed579 [ 435.976115][T12469] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 435.976126][T12469] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 435.976136][T12469] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007ac [ 435.976143][T12469] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.976149][T12469] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.976155][T12469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 435.976161][T12469] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.976174][T12469] [ 436.425187][T12487] Cannot find del_set index 1 as target [ 437.611492][T11874] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 437.915750][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'. [ 437.921995][T12510] bridge0: port 2(vlan3) entered blocking state [ 437.924767][T12510] bridge0: port 2(vlan3) entered disabled state [ 437.926816][T12510] vlan3: entered allmulticast mode [ 437.928503][T12510] bridge0: entered allmulticast mode [ 437.931529][T12510] vlan3: left allmulticast mode [ 437.933212][T12510] bridge0: left allmulticast mode [ 438.020617][T12513] overlayfs: failed to resolve './file0': -2 [ 438.638292][T12530] IPv6: NLM_F_REPLACE set, but no existing node found! [ 438.656855][T12528] blktrace: Concurrent blktraces are not allowed on sg0 [ 438.722068][T12533] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 438.724452][T12533] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 438.728771][T12533] vhci_hcd vhci_hcd.0: Device attached [ 438.739140][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'. [ 438.863298][T12534] vhci_hcd: connection closed [ 438.863534][ T12] vhci_hcd vhci_hcd.2: stop threads [ 438.871374][ T12] vhci_hcd vhci_hcd.2: release socket [ 438.874227][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 438.883848][ T6023] usb usb44-port1: attempt power cycle [ 439.456082][T12553] netlink: 'syz.1.1714': attribute type 2 has an invalid length. [ 439.458513][T12553] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 439.461052][T12553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.463038][ T6023] usb usb44-port1: unable to enumerate USB device [ 439.744529][T12558] siw: device registration error -23 [ 440.323519][ T5939] Bluetooth: hci1: command 0x0406 tx timeout [ 440.362539][T12571] netlink: 'syz.1.1720': attribute type 2 has an invalid length. [ 440.367542][T12571] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 440.377988][T12571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.464370][T12578] IPv6: NLM_F_REPLACE set, but no existing node found! [ 441.261030][T12586] overlayfs: failed to resolve './file0': -2 [ 441.267284][T12585] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 441.269890][T12585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 441.273050][T12585] vhci_hcd vhci_hcd.0: Device attached [ 441.278391][T12585] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 441.281194][T12585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 441.304289][T12585] vhci_hcd vhci_hcd.0: Device attached [ 441.309546][T12585] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 441.312147][T12585] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 441.316265][T12585] vhci_hcd vhci_hcd.0: Device attached [ 441.320565][T12585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 441.337497][T12585] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 441.340193][T12585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 441.345037][T12585] vhci_hcd vhci_hcd.0: Device attached [ 441.350138][T12585] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 441.352843][T12585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 441.356265][T12585] vhci_hcd vhci_hcd.0: Device attached [ 441.359613][T12585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 441.369077][T12585] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(24) [ 441.371780][T12585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 441.375066][T12585] vhci_hcd vhci_hcd.0: Device attached [ 441.377637][T12585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 441.513047][ T6022] usb 43-1: new low-speed USB device number 10 using vhci_hcd [ 441.521160][T12599] vhci_hcd: connection closed [ 441.521496][ T62] vhci_hcd vhci_hcd.3: stop threads [ 441.521658][T12597] vhci_hcd: connection closed [ 441.526127][T12595] vhci_hcd: connection closed [ 441.526549][T12589] vhci_hcd: connection closed [ 441.528262][T12591] vhci_hcd: connection closed [ 441.529168][ T62] vhci_hcd vhci_hcd.3: release socket [ 441.529272][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 441.539048][ T62] vhci_hcd vhci_hcd.3: stop threads [ 441.539148][T12587] vhci_hcd: connection reset by peer [ 441.541481][ T62] vhci_hcd vhci_hcd.3: release socket [ 441.546726][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 441.549412][ T62] vhci_hcd vhci_hcd.3: stop threads [ 441.562027][ T62] vhci_hcd vhci_hcd.3: release socket [ 441.564655][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 441.567347][ T62] vhci_hcd vhci_hcd.3: stop threads [ 441.569834][ T62] vhci_hcd vhci_hcd.3: release socket [ 441.573067][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 441.576018][ T62] vhci_hcd vhci_hcd.3: stop threads [ 441.578349][ T62] vhci_hcd vhci_hcd.3: release socket [ 441.580730][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 441.582733][ T62] vhci_hcd vhci_hcd.3: stop threads [ 441.584620][ T62] vhci_hcd vhci_hcd.3: release socket [ 441.586899][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 441.637989][T12603] siw: device registration error -23 [ 442.238602][T12614] siw: device registration error -23 [ 442.552852][T12616] could not open pipe file descriptor [ 442.566424][T12606] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 442.569019][T12606] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 442.623647][T12606] vhci_hcd vhci_hcd.0: Device attached [ 442.640861][T12622] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 442.643905][T12622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.648233][T12622] vhci_hcd vhci_hcd.0: Device attached [ 442.656245][T12622] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 442.658615][T12622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.662205][T12622] vhci_hcd vhci_hcd.0: Device attached [ 442.668929][T12622] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 442.671488][T12622] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 442.675174][T12622] vhci_hcd vhci_hcd.0: Device attached [ 442.679166][T12622] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 442.681717][T12622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.687015][T12622] vhci_hcd vhci_hcd.0: Device attached [ 442.691145][T12622] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 442.693730][T12622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.697361][T12622] vhci_hcd vhci_hcd.0: Device attached [ 442.697849][T12617] vhci_hcd: connection closed [ 442.701567][T12622] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(24) [ 442.706444][T12622] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 442.710637][ T6415] vhci_hcd vhci_hcd.4: stop threads [ 442.710864][T12622] vhci_hcd vhci_hcd.0: Device attached [ 442.712423][ T6415] vhci_hcd vhci_hcd.4: release socket [ 442.717260][T12622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 442.719693][ T6415] vhci_hcd vhci_hcd.4: disconnect device [ 442.721588][T12622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 442.728226][T12622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 442.745203][T12638] Cannot find del_set index 1 as target [ 442.911170][T12636] vhci_hcd: connection closed [ 442.911609][ T12] vhci_hcd vhci_hcd.2: stop threads [ 442.911847][T12633] vhci_hcd: connection closed [ 442.914181][T12631] vhci_hcd: connection closed [ 442.915462][ T34] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 442.916599][T12624] vhci_hcd: connection closed [ 442.921228][T12627] vhci_hcd: connection closed [ 442.923377][T12625] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 442.923436][ T12] vhci_hcd vhci_hcd.2: release socket [ 442.929994][T12629] vhci_hcd: connection closed [ 442.931352][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 442.967213][ T12] vhci_hcd vhci_hcd.2: stop threads [ 442.973954][ T12] vhci_hcd vhci_hcd.2: release socket [ 442.976218][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 442.978612][ T12] vhci_hcd vhci_hcd.2: stop threads [ 442.980290][ T12] vhci_hcd vhci_hcd.2: release socket [ 442.982024][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 442.990093][ T12] vhci_hcd vhci_hcd.2: stop threads [ 442.991859][ T12] vhci_hcd vhci_hcd.2: release socket [ 442.994415][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 442.996383][ T12] vhci_hcd vhci_hcd.2: stop threads [ 442.998098][ T12] vhci_hcd vhci_hcd.2: release socket [ 443.002486][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 443.006014][ T12] vhci_hcd vhci_hcd.2: stop threads [ 443.009047][ T12] vhci_hcd vhci_hcd.2: release socket [ 443.012519][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 443.913189][T12654] netlink: 'syz.1.1735': attribute type 10 has an invalid length. [ 443.920734][T12654] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 443.924723][T12654] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 443.928556][T12654] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 444.213264][T12655] siw: device registration error -23 [ 444.565166][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.567781][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.573039][ T5939] Bluetooth: hci1: command 0x0406 tx timeout [ 444.617242][T12667] netlink: 'syz.4.1738': attribute type 10 has an invalid length. [ 444.619804][T12667] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 444.623259][T12667] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 444.627074][T12667] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 445.263422][T12661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.268884][T12661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 445.447150][T12679] overlay: ./bus is not a directory [ 446.209277][T12685] IPv6: NLM_F_REPLACE set, but no existing node found! [ 446.562976][ T5939] Bluetooth: hci0: command 0x2016 tx timeout [ 446.653289][ T6022] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 446.736057][T12700] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 446.738614][T12700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.742046][T12700] vhci_hcd vhci_hcd.0: Device attached [ 446.747381][T12700] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 446.750211][T12700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.753869][T12700] vhci_hcd vhci_hcd.0: Device attached [ 446.758471][T12700] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 446.761293][T12700] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 446.765115][T12700] vhci_hcd vhci_hcd.0: Device attached [ 446.769558][T12700] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 446.772414][T12700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.776020][T12700] vhci_hcd vhci_hcd.0: Device attached [ 446.780515][T12700] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 446.783249][T12700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.786490][T12700] vhci_hcd vhci_hcd.0: Device attached [ 446.789927][T12700] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(24) [ 446.792300][T12700] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 446.795865][T12700] vhci_hcd vhci_hcd.0: Device attached [ 446.800027][T12700] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 446.804883][T12700] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 446.808153][T12700] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 446.823716][T12713] vhci_hcd: connection closed [ 446.823796][T12711] vhci_hcd: connection closed [ 446.824025][T12705] vhci_hcd: connection closed [ 446.826050][T12709] vhci_hcd: connection closed [ 446.829773][T12707] vhci_hcd: connection closed [ 446.831582][T12701] vhci_hcd: connection closed [ 446.833668][ T6210] vhci_hcd vhci_hcd.1: stop threads [ 446.843077][ T6210] vhci_hcd vhci_hcd.1: release socket [ 446.845254][ T6210] vhci_hcd vhci_hcd.1: disconnect device [ 446.853225][ T6210] vhci_hcd vhci_hcd.1: stop threads [ 446.854970][ T6210] vhci_hcd vhci_hcd.1: release socket [ 446.856877][ T6210] vhci_hcd vhci_hcd.1: disconnect device [ 446.858875][ T6210] vhci_hcd vhci_hcd.1: stop threads [ 446.860527][ T6210] vhci_hcd vhci_hcd.1: release socket [ 446.867011][ T6210] vhci_hcd vhci_hcd.1: disconnect device [ 446.869543][ T6210] vhci_hcd vhci_hcd.1: stop threads [ 446.871748][ T6210] vhci_hcd vhci_hcd.1: release socket [ 446.877523][ T6210] vhci_hcd vhci_hcd.1: disconnect device [ 446.879491][ T6210] vhci_hcd vhci_hcd.1: stop threads [ 446.881233][ T6210] vhci_hcd vhci_hcd.1: release socket [ 446.887244][ T6210] vhci_hcd vhci_hcd.1: disconnect device [ 446.893138][ T6210] vhci_hcd vhci_hcd.1: stop threads [ 446.894773][ T6210] vhci_hcd vhci_hcd.1: release socket [ 446.899222][ T6210] vhci_hcd vhci_hcd.1: disconnect device [ 446.913324][T11874] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 447.028094][T12717] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 447.030204][T12717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 447.033420][T12717] vhci_hcd vhci_hcd.0: Device attached [ 447.155062][T12727] bond1: option mode: unable to set because the bond device has slaves [ 447.158923][T12727] netlink: 'syz.4.1755': attribute type 10 has an invalid length. [ 447.161918][T12727] rdma_rxe: rxe_newlink: failed to add syz_tun [ 447.283068][ T5939] Bluetooth: hci1: command 0x0406 tx timeout [ 447.622987][ T6053] usb 44-1: SetAddress Request (54) to port 0 [ 447.625128][ T6053] usb 44-1: new SuperSpeed USB device number 54 using vhci_hcd [ 447.654915][T12718] vhci_hcd: connection reset by peer [ 447.656901][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 447.658632][ T6210] vhci_hcd vhci_hcd.3: release socket [ 447.660404][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 447.682974][ T1333] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 447.843155][ T1333] usb 6-1: Using ep0 maxpacket: 16 [ 447.846047][ T1333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 447.850546][ T1333] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.853979][ T1333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.856473][ T1333] usb 6-1: Product: syz [ 447.857910][ T1333] usb 6-1: Manufacturer: syz [ 447.859441][ T1333] usb 6-1: SerialNumber: syz [ 447.862249][ T1333] usb 6-1: config 0 descriptor?? [ 447.865735][ T1333] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.868611][ T1333] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 448.073013][ T34] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 448.123341][ T1333] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 448.185011][ T1333] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 448.187650][ T1333] em28xx 6-1:0.0: board has no eeprom [ 448.243168][ T1333] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 448.246163][ T1333] em28xx 6-1:0.0: dvb set to bulk mode. [ 448.250368][ T1333] usb 6-1: USB disconnect, device number 29 [ 448.252820][ T1333] em28xx 6-1:0.0: Disconnecting em28xx [ 448.255720][ T24] em28xx 6-1:0.0: Binding DVB extension [ 448.274984][ T24] em28xx 6-1:0.0: Registering input extension [ 448.277050][ T1333] em28xx 6-1:0.0: Closing input extension [ 448.283561][ T1333] em28xx 6-1:0.0: Freeing device [ 448.305787][T12740] Cannot find del_set index 1 as target [ 448.645663][T12745] Cannot find del_set index 1 as target [ 448.843571][T12749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 448.846466][T12749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.849889][T12749] vhci_hcd vhci_hcd.0: Device attached [ 448.855739][T12749] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 448.858540][T12749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.861984][T12749] vhci_hcd vhci_hcd.0: Device attached [ 448.867203][T12749] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 448.870007][T12749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 448.873461][T12749] vhci_hcd vhci_hcd.0: Device attached [ 448.877120][T12749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.882401][T12749] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 448.885228][T12749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.889506][T12749] vhci_hcd vhci_hcd.0: Device attached [ 448.900393][T12749] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 448.902580][T12749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.913268][T12749] vhci_hcd vhci_hcd.0: Device attached [ 448.915810][T12749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.919740][T12749] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(24) [ 448.921837][T12749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.928766][T12749] vhci_hcd vhci_hcd.0: Device attached [ 448.931262][T12749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.939784][T12760] vhci_hcd: connection closed [ 448.939926][T12758] vhci_hcd: connection closed [ 448.940024][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 448.941649][T12756] vhci_hcd: connection closed [ 448.941939][T12750] vhci_hcd: connection closed [ 448.943596][ T1151] vhci_hcd vhci_hcd.1: release socket [ 448.943617][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 448.945981][T12754] vhci_hcd: connection closed [ 448.953714][T12752] vhci_hcd: connection closed [ 448.957458][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 448.960718][ T1151] vhci_hcd vhci_hcd.1: release socket [ 448.962471][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 448.965749][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 448.967375][ T1151] vhci_hcd vhci_hcd.1: release socket [ 448.969112][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 448.971021][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 448.972641][ T1151] vhci_hcd vhci_hcd.1: release socket [ 448.974617][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 448.976719][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 448.978330][ T1151] vhci_hcd vhci_hcd.1: release socket [ 448.980035][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 448.982015][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 448.984365][ T1151] vhci_hcd vhci_hcd.1: release socket [ 448.986201][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 449.033097][ T1333] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 449.353826][ T6218] usb usb42-port1: attempt power cycle [ 449.363143][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 449.399582][T12765] siw: device registration error -23 [ 449.923956][ T6218] usb usb42-port1: unable to enumerate USB device [ 451.010430][T12791] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 451.012573][T12791] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 451.015539][T12791] vhci_hcd vhci_hcd.0: Device attached [ 451.350733][T12799] siw: device registration error -23 [ 451.813567][T12792] vhci_hcd: connection closed [ 451.814040][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 451.817366][ T1142] vhci_hcd vhci_hcd.3: release socket [ 451.820517][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 452.673856][T12822] netlink: 'syz.4.1776': attribute type 10 has an invalid length. [ 452.676434][T12822] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 452.680233][T12822] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 452.684168][T12822] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 452.802496][ T6053] usb 44-1: device descriptor read/8, error -110 [ 453.193913][ T6053] usb usb44-port1: attempt power cycle [ 453.842037][ T6053] usb usb44-port1: unable to enumerate USB device [ 455.466245][T12865] bond1: option mode: unable to set because the bond device has slaves [ 455.471176][T12865] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 455.474623][T12865] rdma_rxe: rxe_newlink: failed to add syz_tun [ 456.911460][T12872] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 456.914117][T12872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.917437][T12872] vhci_hcd vhci_hcd.0: Device attached [ 456.922063][T12872] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 456.925348][T12872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.928726][T12872] vhci_hcd vhci_hcd.0: Device attached [ 456.932748][T12872] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 456.935381][T12872] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 456.938718][T12872] vhci_hcd vhci_hcd.0: Device attached [ 456.942377][T12872] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 456.944341][T12872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.946800][T12872] vhci_hcd vhci_hcd.0: Device attached [ 456.950487][T12872] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 456.952591][T12872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.955923][T12872] vhci_hcd vhci_hcd.0: Device attached [ 456.961160][T12872] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(23) [ 456.963238][T12872] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 456.968272][T12884] IPv6: NLM_F_REPLACE set, but no existing node found! [ 456.971742][T12872] vhci_hcd vhci_hcd.0: Device attached [ 456.976549][T12872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 456.980463][T12872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 456.984289][T12872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 456.996291][T12887] vhci_hcd: connection closed [ 456.996502][T12882] vhci_hcd: connection closed [ 456.996598][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 456.997346][T12891] FAULT_INJECTION: forcing a failure. [ 456.997346][T12891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.997382][T12891] CPU: 1 UID: 0 PID: 12891 Comm: syz.2.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.997397][T12891] Tainted: [L]=SOFTLOCKUP [ 456.997401][T12891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 456.997407][T12891] Call Trace: [ 456.997411][T12891] [ 456.997416][T12891] dump_stack_lvl+0x16c/0x1f0 [ 456.997436][T12891] should_fail_ex+0x512/0x640 [ 456.997452][T12891] _copy_to_user+0x32/0xd0 [ 456.997466][T12891] simple_read_from_buffer+0xcb/0x170 [ 456.997482][T12891] proc_fail_nth_read+0x197/0x240 [ 456.997501][T12891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.997519][T12891] ? rw_verify_area+0xcf/0x6c0 [ 456.997533][T12891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.997557][T12891] vfs_read+0x1e4/0xcf0 [ 456.997577][T12891] ? __pfx___mutex_lock+0x10/0x10 [ 456.997589][T12891] ? __pfx_vfs_read+0x10/0x10 [ 456.997602][T12891] ? find_held_lock+0x2b/0x80 [ 456.997619][T12891] ? __fget_files+0x20e/0x3c0 [ 456.997638][T12891] ksys_read+0x12a/0x250 [ 456.997652][T12891] ? __pfx_ksys_read+0x10/0x10 [ 456.997670][T12891] __do_fast_syscall_32+0xe8/0x680 [ 456.997683][T12891] do_fast_syscall_32+0x32/0x80 [ 456.997693][T12891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.997706][T12891] RIP: 0023:0xf70ed579 [ 456.997715][T12891] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 456.997726][T12891] RSP: 002b:00000000f54dd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 456.997736][T12891] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54dd620 [ 456.997743][T12891] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 456.997749][T12891] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 456.997755][T12891] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 456.997761][T12891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.997774][T12891] [ 456.998063][T12879] vhci_hcd: connection closed [ 456.999557][ T1148] vhci_hcd vhci_hcd.4: release socket [ 457.001346][T12877] vhci_hcd: connection closed [ 457.001371][T12875] vhci_hcd: connection closed [ 457.001507][T12873] vhci_hcd: connection closed [ 457.005893][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 457.093556][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 457.095738][ T1148] vhci_hcd vhci_hcd.4: release socket [ 457.097769][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 457.099689][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 457.101354][ T1148] vhci_hcd vhci_hcd.4: release socket [ 457.104028][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 457.106056][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 457.107814][ T1148] vhci_hcd vhci_hcd.4: release socket [ 457.109543][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 457.112228][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 457.114585][ T1148] vhci_hcd vhci_hcd.4: release socket [ 457.116433][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 457.118235][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 457.120045][ T1148] vhci_hcd vhci_hcd.4: release socket [ 457.121919][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 457.163197][ T5984] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 458.345081][T12911] FAULT_INJECTION: forcing a failure. [ 458.345081][T12911] name failslab, interval 1, probability 0, space 0, times 0 [ 458.349266][T12911] CPU: 0 UID: 0 PID: 12911 Comm: syz.1.1802 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.349283][T12911] Tainted: [L]=SOFTLOCKUP [ 458.349287][T12911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 458.349293][T12911] Call Trace: [ 458.349297][T12911] [ 458.349302][T12911] dump_stack_lvl+0x16c/0x1f0 [ 458.349323][T12911] should_fail_ex+0x512/0x640 [ 458.349336][T12911] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 458.349351][T12911] should_failslab+0xc2/0x120 [ 458.349367][T12911] kmem_cache_alloc_node_noprof+0x86/0x800 [ 458.349380][T12911] ? __alloc_skb+0x156/0x410 [ 458.349395][T12911] ? __alloc_skb+0x156/0x410 [ 458.349406][T12911] __alloc_skb+0x156/0x410 [ 458.349417][T12911] ? __alloc_skb+0x35d/0x410 [ 458.349429][T12911] ? __pfx___alloc_skb+0x10/0x10 [ 458.349441][T12911] ? netlink_autobind.isra.0+0x158/0x370 [ 458.349461][T12911] netlink_alloc_large_skb+0x69/0x140 [ 458.349478][T12911] netlink_sendmsg+0x698/0xdd0 [ 458.349496][T12911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.349513][T12911] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 458.349528][T12911] ____sys_sendmsg+0xa5d/0xc30 [ 458.349539][T12911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.349549][T12911] ? get_compat_msghdr+0x11a/0x170 [ 458.349569][T12911] ___sys_sendmsg+0x134/0x1d0 [ 458.349584][T12911] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.349603][T12911] ? find_held_lock+0x2b/0x80 [ 458.349625][T12911] __sys_sendmsg+0x16d/0x220 [ 458.349640][T12911] ? __pfx___sys_sendmsg+0x10/0x10 [ 458.349659][T12911] ? do_user_addr_fault+0x843/0x1370 [ 458.349674][T12911] __do_fast_syscall_32+0xe8/0x680 [ 458.349691][T12911] do_fast_syscall_32+0x32/0x80 [ 458.349707][T12911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.349721][T12911] RIP: 0023:0xf709d579 [ 458.349731][T12911] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 458.349741][T12911] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 458.349751][T12911] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 458.349757][T12911] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.349763][T12911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.349768][T12911] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 458.349774][T12911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.349787][T12911] [ 458.483024][ T34] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 458.583089][ T6053] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 458.634269][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.638610][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.642064][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.648464][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.652856][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.658874][ T34] usb 7-1: config 0 descriptor?? [ 458.756733][ T6053] usb 6-1: config 8 has an invalid interface number: 229 but max is 1 [ 458.759524][ T6053] usb 6-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 458.762352][ T6053] usb 6-1: config 8 has an invalid interface number: 131 but max is 1 [ 458.765001][ T6053] usb 6-1: config 8 has an invalid interface number: 76 but max is 1 [ 458.767827][ T6053] usb 6-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 458.772115][ T6053] usb 6-1: config 8 has no interface number 0 [ 458.774869][ T6053] usb 6-1: config 8 has no interface number 1 [ 458.777548][ T6053] usb 6-1: config 8 has no interface number 2 [ 458.779789][ T6053] usb 6-1: config 8 interface 229 altsetting 1 has an invalid endpoint descriptor of length 5, skipping [ 458.783362][ T6053] usb 6-1: config 8 interface 229 altsetting 1 endpoint 0x6 has an invalid bInterval 251, changing to 11 [ 458.786886][ T6053] usb 6-1: config 8 interface 229 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 458.790386][ T6053] usb 6-1: config 8 interface 229 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 458.793915][ T6053] usb 6-1: config 8 interface 229 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.798096][ T6053] usb 6-1: too many endpoints for config 8 interface 131 altsetting 141: 139, using maximum allowed: 30 [ 458.801665][ T6053] usb 6-1: config 8 interface 131 altsetting 141 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 458.805258][ T6053] usb 6-1: config 8 interface 131 altsetting 141 has 2 endpoint descriptors, different from the interface descriptor's value: 139 [ 458.809499][ T6053] usb 6-1: too many endpoints for config 8 interface 76 altsetting 83: 158, using maximum allowed: 30 [ 458.813089][ T6053] usb 6-1: config 8 interface 76 altsetting 83 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 458.817348][ T6053] usb 6-1: config 8 interface 229 has no altsetting 0 [ 458.819468][ T6053] usb 6-1: config 8 interface 131 has no altsetting 0 [ 458.821450][ T6053] usb 6-1: config 8 interface 76 has no altsetting 0 [ 458.825254][ T6053] usb 6-1: New USB device found, idVendor=257a, idProduct=2608, bcdDevice=18.2a [ 458.828557][ T6053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.834387][ T6053] usb 6-1: Product: syz [ 458.835987][ T6053] usb 6-1: Manufacturer: 턢〙霔㚠袨㲓⋈ [ 458.873661][ T6053] usb 6-1: SerialNumber: syz [ 458.984211][T12923] netlink: 'syz.4.1804': attribute type 10 has an invalid length. [ 458.986789][T12923] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 458.990340][T12923] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 458.994507][T12923] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 459.199309][ T6053] option 6-1:8.229: GSM modem (1-port) converter detected [ 459.213945][ T6053] option 6-1:8.131: GSM modem (1-port) converter detected [ 459.220805][ T34] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 459.234379][ T6053] option 6-1:8.76: GSM modem (1-port) converter detected [ 459.244133][ T6053] usb 6-1: USB disconnect, device number 30 [ 459.248248][ T6053] option 6-1:8.229: device disconnected [ 459.251483][ T6053] option 6-1:8.131: device disconnected [ 459.255202][ T6053] option 6-1:8.76: device disconnected [ 459.609355][ T24] usb 7-1: USB disconnect, device number 28 [ 459.766630][T12931] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 459.768739][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.771404][T12931] vhci_hcd vhci_hcd.0: Device attached [ 459.781216][T12931] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 459.783345][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.785914][T12931] vhci_hcd vhci_hcd.0: Device attached [ 459.789001][T12931] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 459.791081][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 459.793757][T12931] vhci_hcd vhci_hcd.0: Device attached [ 459.796755][T12931] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 459.798835][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.801203][T12931] vhci_hcd vhci_hcd.0: Device attached [ 459.804307][T12931] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 459.806388][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.808725][T12931] vhci_hcd vhci_hcd.0: Device attached [ 459.811629][T12931] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(23) [ 459.813700][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 459.816346][T12931] vhci_hcd vhci_hcd.0: Device attached [ 459.819066][T12931] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 459.822155][T12931] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 459.825598][T12931] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 459.836311][T12942] vhci_hcd: connection closed [ 459.836351][T12938] vhci_hcd: connection closed [ 459.836486][T12940] vhci_hcd: connection closed [ 459.836525][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 459.836541][ T1143] vhci_hcd vhci_hcd.1: release socket [ 459.836553][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 459.838013][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 459.839514][T12936] vhci_hcd: connection closed [ 459.841033][T12934] vhci_hcd: connection closed [ 459.843109][T12932] vhci_hcd: connection closed [ 459.850900][ T1143] vhci_hcd vhci_hcd.1: release socket [ 459.862943][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 459.875790][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 459.877567][ T1143] vhci_hcd vhci_hcd.1: release socket [ 459.879322][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 459.887671][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 459.889748][ T1143] vhci_hcd vhci_hcd.1: release socket [ 459.892079][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 459.897858][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 459.899530][ T1143] vhci_hcd vhci_hcd.1: release socket [ 459.912276][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 459.914630][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 459.916345][ T1143] vhci_hcd vhci_hcd.1: release socket [ 459.918115][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 459.982339][T12358] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 461.266499][T12966] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 461.269601][T12966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.275204][T12966] vhci_hcd vhci_hcd.0: Device attached [ 461.291034][T12966] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 461.293174][T12966] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 461.296746][T12966] vhci_hcd vhci_hcd.0: Device attached [ 461.301637][T12966] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 461.303802][T12966] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 461.308045][T12966] vhci_hcd vhci_hcd.0: Device attached [ 461.313866][T12966] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.320643][T12966] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 461.322799][T12966] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 461.325704][T12966] vhci_hcd vhci_hcd.0: Device attached [ 461.381571][T12966] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 461.383638][T12978] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.384534][T12966] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 461.390591][T12966] vhci_hcd vhci_hcd.0: Device attached [ 461.394093][T12978] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(25) [ 461.396826][T12978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 461.399944][T12978] vhci_hcd vhci_hcd.0: Device attached [ 461.411232][T12966] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.433232][T12979] vhci_hcd: connection closed [ 461.433442][ T12] vhci_hcd vhci_hcd.1: stop threads [ 461.433589][T12973] vhci_hcd: connection closed [ 461.434354][T12975] vhci_hcd: connection closed [ 461.435572][ T12] vhci_hcd vhci_hcd.1: release socket [ 461.437074][T12971] vhci_hcd: connection closed [ 461.437177][T12969] vhci_hcd: connection closed [ 461.437281][T12967] vhci_hcd: connection closed [ 461.440011][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 461.450749][ T12] vhci_hcd vhci_hcd.1: stop threads [ 461.462252][ T12] vhci_hcd vhci_hcd.1: release socket [ 461.465013][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 461.467552][ T12] vhci_hcd vhci_hcd.1: stop threads [ 461.469700][ T12] vhci_hcd vhci_hcd.1: release socket [ 461.471726][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 461.474593][ T12] vhci_hcd vhci_hcd.1: stop threads [ 461.476294][ T12] vhci_hcd vhci_hcd.1: release socket [ 461.478374][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 461.480656][ T12] vhci_hcd vhci_hcd.1: stop threads [ 461.482511][ T12] vhci_hcd vhci_hcd.1: release socket [ 461.485216][ T6022] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 461.488658][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 461.492099][ T12] vhci_hcd vhci_hcd.1: stop threads [ 461.496055][ T12] vhci_hcd vhci_hcd.1: release socket [ 461.498399][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 461.645940][ T6022] usb 7-1: config 8 has an invalid interface number: 229 but max is 1 [ 461.649640][ T6022] usb 7-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 461.654242][ T6022] usb 7-1: config 8 has an invalid interface number: 131 but max is 1 [ 461.658000][ T6022] usb 7-1: config 8 has an invalid interface number: 76 but max is 1 [ 461.663819][ T6022] usb 7-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 461.667616][ T6022] usb 7-1: config 8 has no interface number 0 [ 461.670175][ T6022] usb 7-1: config 8 has no interface number 1 [ 461.672740][ T6022] usb 7-1: config 8 has no interface number 2 [ 461.676085][ T6022] usb 7-1: config 8 interface 229 altsetting 1 has an invalid endpoint descriptor of length 5, skipping [ 461.680800][ T6022] usb 7-1: config 8 interface 229 altsetting 1 endpoint 0x6 has an invalid bInterval 251, changing to 11 [ 461.686163][ T6022] usb 7-1: config 8 interface 229 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 461.690597][ T6022] usb 7-1: config 8 interface 229 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 461.695796][ T6022] usb 7-1: config 8 interface 229 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.701237][ T6022] usb 7-1: too many endpoints for config 8 interface 131 altsetting 141: 139, using maximum allowed: 30 [ 461.708187][ T6022] usb 7-1: config 8 interface 131 altsetting 141 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 461.712836][ T6022] usb 7-1: config 8 interface 131 altsetting 141 has 2 endpoint descriptors, different from the interface descriptor's value: 139 [ 461.717731][ T6022] usb 7-1: too many endpoints for config 8 interface 76 altsetting 83: 158, using maximum allowed: 30 [ 461.722355][ T6022] usb 7-1: config 8 interface 76 altsetting 83 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 461.728490][ T6022] usb 7-1: config 8 interface 229 has no altsetting 0 [ 461.731297][ T6022] usb 7-1: config 8 interface 131 has no altsetting 0 [ 461.734592][ T6022] usb 7-1: config 8 interface 76 has no altsetting 0 [ 461.739640][ T6022] usb 7-1: New USB device found, idVendor=257a, idProduct=2608, bcdDevice=18.2a [ 461.743904][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.747355][ T6022] usb 7-1: Product: syz [ 461.749237][ T6022] usb 7-1: Manufacturer: 턢〙霔㚠袨㲓⋈ [ 461.751915][ T6022] usb 7-1: SerialNumber: syz [ 461.875180][T12982] FAULT_INJECTION: forcing a failure. [ 461.875180][T12982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.880320][T12982] CPU: 1 UID: 0 PID: 12982 Comm: syz.3.1815 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.880337][T12982] Tainted: [L]=SOFTLOCKUP [ 461.880341][T12982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.880347][T12982] Call Trace: [ 461.880352][T12982] [ 461.880357][T12982] dump_stack_lvl+0x16c/0x1f0 [ 461.880378][T12982] should_fail_ex+0x512/0x640 [ 461.880394][T12982] __kvm_read_guest_page+0x186/0x250 [ 461.880412][T12982] kvm_fetch_guest_virt+0x128/0x1a0 [ 461.880429][T12982] __do_insn_fetch_bytes+0x4fa/0x720 [ 461.880444][T12982] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 461.880458][T12982] ? __pfx___schedule+0x10/0x10 [ 461.880476][T12982] x86_decode_insn+0xf88/0x6170 [ 461.880498][T12982] ? __pfx_x86_decode_insn+0x10/0x10 [ 461.880514][T12982] ? vmx_cache_reg+0x333/0x5e0 [ 461.880531][T12982] ? kvm_register_read_raw+0xe9/0x240 [ 461.880544][T12982] ? init_decode_cache+0xd/0x2a0 [ 461.880559][T12982] ? init_emulate_ctxt+0x337/0x510 [ 461.880574][T12982] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 461.880594][T12982] x86_emulate_instruction+0x838/0x1c00 [ 461.880607][T12982] ? kvm_mmu_page_fault+0x2d1/0x1c60 [ 461.880620][T12982] ? __schedule+0x114c/0x6150 [ 461.880636][T12982] handle_ud+0x103/0x280 [ 461.880647][T12982] ? __pfx_handle_ud+0x10/0x10 [ 461.880660][T12982] ? __lock_acquire+0x436/0x2890 [ 461.880671][T12982] ? rcu_is_watching+0x12/0xc0 [ 461.880685][T12982] ? __vmx_complete_interrupts+0x111/0x4e0 [ 461.880698][T12982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 461.880715][T12982] handle_exception_nmi+0x856/0x1720 [ 461.880730][T12982] ? __pfx_handle_exception_nmi+0x10/0x10 [ 461.880743][T12982] vmx_handle_exit+0x129b/0x1a00 [ 461.880763][T12982] vcpu_run+0x3468/0x5a80 [ 461.880775][T12982] ? vmx_vcpu_load_vmcs+0x222/0x770 [ 461.880795][T12982] ? __pfx_vcpu_run+0x10/0x10 [ 461.880815][T12982] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 461.880828][T12982] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 461.880844][T12982] kvm_vcpu_ioctl+0x76d/0x16d0 [ 461.880862][T12982] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 461.880878][T12982] ? tomoyo_path_number_perm+0x18d/0x580 [ 461.880893][T12982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 461.880910][T12982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 461.880926][T12982] ? do_vfs_ioctl+0x128/0x14f0 [ 461.880939][T12982] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 461.880958][T12982] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 461.880974][T12982] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 461.880990][T12982] ? __fget_files+0x20e/0x3c0 [ 461.881004][T12982] ? __fput_deferred+0x470/0x480 [ 461.881017][T12982] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 461.881034][T12982] __ia32_compat_sys_ioctl+0x242/0x370 [ 461.881049][T12982] __do_fast_syscall_32+0xe8/0x680 [ 461.881061][T12982] do_fast_syscall_32+0x32/0x80 [ 461.881071][T12982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 461.881084][T12982] RIP: 0023:0xf7f82579 [ 461.881093][T12982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 461.881103][T12982] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 461.881113][T12982] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 461.881119][T12982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 461.881125][T12982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.881131][T12982] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 461.881137][T12982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.881150][T12982] [ 462.605219][T12994] IPv6: NLM_F_CREATE should be specified when creating new route [ 462.954086][T12963] Set syz1 is full, maxelem 65536 reached [ 462.980612][ T6022] option 7-1:8.229: GSM modem (1-port) converter detected [ 462.988720][ T6022] option 7-1:8.131: GSM modem (1-port) converter detected [ 462.995457][ T6022] option 7-1:8.76: GSM modem (1-port) converter detected [ 463.003725][ T6022] usb 7-1: USB disconnect, device number 29 [ 463.019118][ T6022] option 7-1:8.229: device disconnected [ 463.027564][ T6022] option 7-1:8.131: device disconnected [ 463.031578][ T6022] option 7-1:8.76: device disconnected [ 463.444449][T13001] overlayfs: failed to resolve './file0': -2 [ 463.449157][ T64] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 463.716557][T13012] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 463.719553][T13012] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 463.723511][T13012] vhci_hcd vhci_hcd.0: Device attached [ 463.808025][T13011] syzkaller0: entered promiscuous mode [ 463.808987][T13016] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 463.809846][T13011] syzkaller0: entered allmulticast mode [ 463.812142][T13016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 463.812442][T13016] vhci_hcd vhci_hcd.0: Device attached [ 463.828058][T13016] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 463.830435][T13016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 463.833612][T13016] vhci_hcd vhci_hcd.0: Device attached [ 463.841663][T13016] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 463.844016][T13016] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 463.847811][T13016] vhci_hcd vhci_hcd.0: Device attached [ 463.853811][T13016] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 463.873024][T13016] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 463.875195][T13016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 463.878434][T13016] vhci_hcd vhci_hcd.0: Device attached [ 463.907538][T13016] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 463.909893][T13016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 463.913992][T13016] vhci_hcd vhci_hcd.0: Device attached [ 463.923224][T13016] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 463.941337][T13016] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(24) [ 463.944442][T13016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 463.949617][T13016] vhci_hcd vhci_hcd.0: Device attached [ 463.966809][T13016] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 464.004128][T13027] vhci_hcd: connection closed [ 464.004309][ T75] vhci_hcd vhci_hcd.3: stop threads [ 464.008518][ T75] vhci_hcd vhci_hcd.3: release socket [ 464.011159][ T75] vhci_hcd vhci_hcd.3: disconnect device [ 464.016183][T13025] vhci_hcd: connection closed [ 464.017085][ T75] vhci_hcd vhci_hcd.3: stop threads [ 464.021289][ T75] vhci_hcd vhci_hcd.3: release socket [ 464.024623][ T75] vhci_hcd vhci_hcd.3: disconnect device [ 464.028627][T13023] vhci_hcd: connection closed [ 464.028805][ T75] vhci_hcd vhci_hcd.3: stop threads [ 464.032816][ T75] vhci_hcd vhci_hcd.3: release socket [ 464.035684][ T75] vhci_hcd vhci_hcd.3: disconnect device [ 464.040686][T13021] vhci_hcd: connection closed [ 464.041133][ T75] vhci_hcd vhci_hcd.3: stop threads [ 464.043108][T11874] usb 40-1: SetAddress Request (46) to port 0 [ 464.046340][ T75] vhci_hcd vhci_hcd.3: release socket [ 464.047390][T11874] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 464.050213][ T75] vhci_hcd vhci_hcd.3: disconnect device [ 464.057747][T13019] vhci_hcd: connection closed [ 464.058205][T13017] vhci_hcd: connection closed [ 464.060624][ T75] vhci_hcd vhci_hcd.3: stop threads [ 464.072981][ T10] usb 43-1: new low-speed USB device number 11 using vhci_hcd [ 464.076360][T13018] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 464.076478][ T75] vhci_hcd vhci_hcd.3: release socket [ 464.087246][ T75] vhci_hcd vhci_hcd.3: disconnect device [ 464.089797][ T75] vhci_hcd vhci_hcd.3: stop threads [ 464.092146][ T75] vhci_hcd vhci_hcd.3: release socket [ 464.096604][T13013] vhci_hcd: connection reset by peer [ 464.099385][ T75] vhci_hcd vhci_hcd.3: disconnect device [ 464.102173][ T75] vhci_hcd vhci_hcd.1: stop threads [ 464.104607][ T75] vhci_hcd vhci_hcd.1: release socket [ 464.107104][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 464.139514][T13032] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 464.142401][T13032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.147068][T13032] vhci_hcd vhci_hcd.0: Device attached [ 464.152734][T13032] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 464.155418][T13032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.159238][T13032] vhci_hcd vhci_hcd.0: Device attached [ 464.164768][T13032] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 464.167541][T13032] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 464.170691][T13032] vhci_hcd vhci_hcd.0: Device attached [ 464.175704][T13032] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 464.178461][T13032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.181741][T13032] vhci_hcd vhci_hcd.0: Device attached [ 464.186979][T13032] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 464.189753][T13032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.193132][T13032] vhci_hcd vhci_hcd.0: Device attached [ 464.202454][T13032] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(24) [ 464.204633][T13032] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 464.207867][T13032] vhci_hcd vhci_hcd.0: Device attached [ 464.222426][T13032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 464.239242][T13032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 464.252222][T13032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 464.393066][T12358] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 464.461733][T13041] vhci_hcd: connection closed [ 464.462041][T13039] vhci_hcd: connection closed [ 464.462054][ T6410] vhci_hcd vhci_hcd.2: stop threads [ 464.463789][T13037] vhci_hcd: connection closed [ 464.463909][T13035] vhci_hcd: connection closed [ 464.465336][T13043] vhci_hcd: connection closed [ 464.465917][T13033] vhci_hcd: connection reset by peer [ 464.476398][ T6410] vhci_hcd vhci_hcd.2: release socket [ 464.479142][ T6410] vhci_hcd vhci_hcd.2: disconnect device [ 464.481776][ T6410] vhci_hcd vhci_hcd.2: stop threads [ 464.484271][ T6410] vhci_hcd vhci_hcd.2: release socket [ 464.489015][ T6410] vhci_hcd vhci_hcd.2: disconnect device [ 464.492235][ T6410] vhci_hcd vhci_hcd.2: stop threads [ 464.495055][ T6410] vhci_hcd vhci_hcd.2: release socket [ 464.497566][ T6410] vhci_hcd vhci_hcd.2: disconnect device [ 464.500294][ T6410] vhci_hcd vhci_hcd.2: stop threads [ 464.502842][ T6410] vhci_hcd vhci_hcd.2: release socket [ 464.505512][ T6410] vhci_hcd vhci_hcd.2: disconnect device [ 464.508558][ T6410] vhci_hcd vhci_hcd.2: stop threads [ 464.510883][ T6410] vhci_hcd vhci_hcd.2: release socket [ 464.514508][ T6410] vhci_hcd vhci_hcd.2: disconnect device [ 464.517201][ T6410] vhci_hcd vhci_hcd.2: stop threads [ 464.520258][ T6410] vhci_hcd vhci_hcd.2: release socket [ 464.522776][ T6410] vhci_hcd vhci_hcd.2: disconnect device [ 466.455933][T13062] netlink: 'syz.3.1831': attribute type 10 has an invalid length. [ 466.665007][T13067] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 466.732332][T13068] syz1: rxe_newlink: already configured on syz_tun [ 466.842954][T13062] bond0: (slave ªªªªª»): The slave device specified does not support setting the MAC address [ 466.847363][T13062] ªªªªª»: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 466.852560][T13062] bond0: (slave ªªªªª»): Error -22 calling dev_set_mtu [ 466.855807][T13065] bond2: option mode: unable to set because the bond device has slaves [ 466.973555][ T6037] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 467.124794][ T6037] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 467.128347][ T6037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.133528][ T6037] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 467.137378][ T6037] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 467.140611][ T6037] usb 6-1: Manufacturer: syz [ 467.149426][ T6037] usb 6-1: config 0 descriptor?? [ 467.213223][ T6037] rc_core: IR keymap rc-hauppauge not found [ 467.215767][ T6037] Registered IR keymap rc-empty [ 467.219824][ T6037] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 467.227095][ T6037] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input51 [ 467.374415][T13081] Cannot find del_set index 1 as target [ 467.410530][ T6037] usb 6-1: USB disconnect, device number 31 [ 467.430361][T13069] udevd[13069]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 467.460961][T13084] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 467.463058][T13084] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 467.466393][T13084] vhci_hcd vhci_hcd.0: Device attached [ 467.483215][T13084] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 467.485531][T13084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.489377][T13084] vhci_hcd vhci_hcd.0: Device attached [ 467.502580][T13084] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 467.504625][T13084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 467.509075][T13084] vhci_hcd vhci_hcd.0: Device attached [ 467.519329][T13084] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 467.538473][T13084] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 467.541124][T13084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.544547][T13084] vhci_hcd vhci_hcd.0: Device attached [ 467.558921][T13084] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 467.561034][T13084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.563996][T13084] vhci_hcd vhci_hcd.0: Device attached [ 467.573212][T13084] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 467.583638][T13084] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(24) [ 467.585839][T13084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.588766][T13084] vhci_hcd vhci_hcd.0: Device attached [ 467.591710][T13084] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 467.599828][T13096] vhci_hcd: connection closed [ 467.600106][T13094] vhci_hcd: connection closed [ 467.600470][T13086] vhci_hcd: connection closed [ 467.601930][T13092] vhci_hcd: connection closed [ 467.605477][T13088] vhci_hcd: connection closed [ 467.607106][T13090] vhci_hcd: connection closed [ 467.609484][ T6410] vhci_hcd vhci_hcd.3: stop threads [ 467.613153][ T6410] vhci_hcd vhci_hcd.3: release socket [ 467.615789][ T6410] vhci_hcd vhci_hcd.3: disconnect device [ 467.618179][ T6410] vhci_hcd vhci_hcd.3: stop threads [ 467.619986][ T6410] vhci_hcd vhci_hcd.3: release socket [ 467.621882][ T6410] vhci_hcd vhci_hcd.3: disconnect device [ 467.624073][ T6410] vhci_hcd vhci_hcd.3: stop threads [ 467.626281][ T6410] vhci_hcd vhci_hcd.3: release socket [ 467.628419][ T6410] vhci_hcd vhci_hcd.3: disconnect device [ 467.630725][ T6410] vhci_hcd vhci_hcd.3: stop threads [ 467.632537][ T6410] vhci_hcd vhci_hcd.3: release socket [ 467.635341][ T6410] vhci_hcd vhci_hcd.3: disconnect device [ 467.637987][ T6410] vhci_hcd vhci_hcd.3: stop threads [ 467.640679][ T6410] vhci_hcd vhci_hcd.3: release socket [ 467.642799][ T6410] vhci_hcd vhci_hcd.3: disconnect device [ 467.647047][ T6410] vhci_hcd vhci_hcd.3: stop threads [ 467.649518][ T6410] vhci_hcd vhci_hcd.3: release socket [ 467.651553][ T6410] vhci_hcd vhci_hcd.3: disconnect device [ 468.228068][T13107] could not open pipe file descriptor [ 468.382996][T13108] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 468.385548][T13108] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 468.389421][T13108] vhci_hcd vhci_hcd.0: Device attached [ 468.652983][ T6023] usb 46-1: SetAddress Request (42) to port 0 [ 468.655065][ T6023] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 469.150225][T11874] usb 40-1: device descriptor read/8, error -110 [ 469.223030][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 469.238593][T13109] vhci_hcd: connection reset by peer [ 469.241149][ T6410] vhci_hcd vhci_hcd.4: stop threads [ 469.243845][ T6410] vhci_hcd vhci_hcd.4: release socket [ 469.245670][ T6410] vhci_hcd vhci_hcd.4: disconnect device [ 469.396778][T13122] netlink: 'syz.2.1842': attribute type 10 has an invalid length. [ 469.399419][T13122] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 469.404352][T13122] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 469.408206][T13122] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 469.514928][T12358] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 469.543606][T11874] usb usb40-port1: attempt power cycle [ 470.144241][T13119] Cannot find del_set index 1 as target [ 470.191506][T11874] usb usb40-port1: unable to enumerate USB device [ 470.323129][ T64] Bluetooth: hci0: command 0x2016 tx timeout [ 470.811951][ T143] usb usb42-port1: attempt power cycle [ 471.553454][ T143] usb usb42-port1: unable to enumerate USB device [ 472.337540][T13162] netlink: 'syz.4.1854': attribute type 10 has an invalid length. [ 472.340927][T13162] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 472.344855][T13162] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 472.349028][T13162] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 472.413134][ T5939] Bluetooth: hci0: command 0x2016 tx timeout [ 473.145179][T13171] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 473.147372][T13171] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.159682][T13171] vhci_hcd vhci_hcd.0: Device attached [ 473.183448][T13175] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 473.185517][T13175] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 473.189204][T13175] vhci_hcd vhci_hcd.0: Device attached [ 473.223294][T13171] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 473.225493][T13171] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 473.229436][T13171] vhci_hcd vhci_hcd.0: Device attached [ 473.249121][T13171] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 473.271704][T13171] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 473.273907][T13171] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 473.280974][T13171] vhci_hcd vhci_hcd.0: Device attached [ 473.301194][T13171] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 473.303539][T13171] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 473.308491][T13171] vhci_hcd vhci_hcd.0: Device attached [ 473.320192][T13171] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 473.350047][T13171] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(24) [ 473.352912][T13171] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 473.359175][T13171] vhci_hcd vhci_hcd.0: Device attached [ 473.369632][T13171] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 473.413285][ T5984] usb 39-1: new low-speed USB device number 12 using vhci_hcd [ 473.425181][T13186] vhci_hcd: connection closed [ 473.426163][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 473.428647][T13184] vhci_hcd: connection closed [ 473.429372][ T1151] vhci_hcd vhci_hcd.1: release socket [ 473.433381][T13182] vhci_hcd: connection closed [ 473.435654][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 473.440890][T13180] vhci_hcd: connection closed [ 473.441691][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 473.442113][T13173] vhci_hcd: connection reset by peer [ 473.448004][T13176] vhci_hcd: connection closed [ 473.451432][ T1151] vhci_hcd vhci_hcd.1: release socket [ 473.457138][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 473.461530][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 473.467257][ T1151] vhci_hcd vhci_hcd.1: release socket [ 473.483201][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 473.486554][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 473.495764][ T1151] vhci_hcd vhci_hcd.1: release socket [ 473.497589][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 473.509680][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 473.511901][ T1151] vhci_hcd vhci_hcd.1: release socket [ 473.523180][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 473.532982][ T1151] vhci_hcd vhci_hcd.1: stop threads [ 473.534743][ T1151] vhci_hcd vhci_hcd.1: release socket [ 473.540215][ T1151] vhci_hcd vhci_hcd.1: disconnect device [ 473.683231][ T6023] usb 46-1: device descriptor read/8, error -110 [ 473.686640][T13189] Cannot find del_set index 1 as target [ 473.750484][T13191] overlayfs: failed to resolve './file0': -2 [ 474.598204][ T6023] usb usb46-port1: attempt power cycle [ 474.844397][T13204] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 474.846653][T13204] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 474.849397][T13204] vhci_hcd vhci_hcd.0: Device attached [ 474.904898][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 475.034156][ T24] usb 6-1: device descriptor read/64, error -71 [ 475.062493][T13206] vhci_hcd: connection closed [ 475.065772][ T1151] vhci_hcd vhci_hcd.3: stop threads [ 475.069058][ T1151] vhci_hcd vhci_hcd.3: release socket [ 475.070952][ T1151] vhci_hcd vhci_hcd.3: disconnect device [ 475.159068][ T6023] usb usb46-port1: unable to enumerate USB device [ 475.298285][T13214] siw: device registration error -23 [ 475.504510][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 475.637260][ T24] usb 6-1: device descriptor read/64, error -71 [ 475.744225][ T24] usb usb6-port1: attempt power cycle [ 476.127622][T13225] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 476.129749][T13225] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.132578][T13225] vhci_hcd vhci_hcd.0: Device attached [ 476.136772][T13225] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 476.138899][T13225] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.141353][T13225] vhci_hcd vhci_hcd.0: Device attached [ 476.144479][T13225] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 476.146611][T13225] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 476.149112][T13225] vhci_hcd vhci_hcd.0: Device attached [ 476.151673][T13225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.156153][T13225] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 476.158442][T13225] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.161033][T13225] vhci_hcd vhci_hcd.0: Device attached [ 476.164540][T13225] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(20) [ 476.166689][T13225] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.169177][T13225] vhci_hcd vhci_hcd.0: Device attached [ 476.171697][T13225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.176221][T13225] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(24) [ 476.178320][T13225] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.180828][T13225] vhci_hcd vhci_hcd.0: Device attached [ 476.183286][T13225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.189879][T13236] vhci_hcd: connection closed [ 476.190201][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 476.190274][T13232] vhci_hcd: connection closed [ 476.190312][T13234] vhci_hcd: connection closed [ 476.192602][T13230] vhci_hcd: connection closed [ 476.194115][ T1143] vhci_hcd vhci_hcd.4: release socket [ 476.194130][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 476.194155][T13228] vhci_hcd: connection closed [ 476.195774][T13226] vhci_hcd: connection closed [ 476.205202][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 476.208426][ T1143] vhci_hcd vhci_hcd.4: release socket [ 476.210033][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 476.212067][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 476.213855][ T1143] vhci_hcd vhci_hcd.4: release socket [ 476.215583][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 476.217581][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 476.219248][ T1143] vhci_hcd vhci_hcd.4: release socket [ 476.220968][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 476.223120][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 476.225116][ T1143] vhci_hcd vhci_hcd.4: release socket [ 476.226877][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 476.228807][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 476.230768][ T1143] vhci_hcd vhci_hcd.4: release socket [ 476.232744][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 476.563084][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 476.689809][ T24] usb 6-1: device descriptor read/8, error -71 [ 476.953191][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 476.976068][ T24] usb 6-1: device descriptor read/8, error -71 [ 477.104753][ T24] usb usb6-port1: unable to enumerate USB device [ 478.041521][T13256] bond1: option mode: unable to set because the bond device has slaves [ 478.053129][T13256] netlink: 'syz.3.1875': attribute type 10 has an invalid length. [ 478.056126][T13256] rdma_rxe: rxe_newlink: failed to add syz_tun [ 478.252437][T13259] syzkaller0: entered promiscuous mode [ 478.255233][T13259] syzkaller0: entered allmulticast mode [ 478.349864][T13262] siw: device registration error -23 [ 478.565116][ T5984] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 479.944051][T13272] netlink: 'syz.1.1879': attribute type 10 has an invalid length. [ 480.898696][T13266] netlink: 'syz.2.1878': attribute type 2 has an invalid length. [ 480.901141][T13266] netlink: 723 bytes leftover after parsing attributes in process `syz.2.1878'. [ 480.904212][T13272] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 480.908496][T13272] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 480.913623][T13272] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 481.786970][T13290] could not open pipe file descriptor [ 482.020994][T13300] could not open pipe file descriptor [ 482.049589][T13298] bridge0: port 1(syz_tun) entered disabled state [ 482.248988][T13298] veth1_vlan: left allmulticast mode [ 482.337174][T13298] tipc: Resetting bearer [ 482.341597][T13298] bond0: left promiscuous mode [ 482.378378][T13305] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.381434][T13305] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.384647][T13305] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.387751][T13305] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.068749][T13318] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 483.071538][T13318] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 483.083099][T13318] vhci_hcd vhci_hcd.0: Device attached [ 483.088200][T13318] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 483.090973][T13318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 483.098006][T13318] vhci_hcd vhci_hcd.0: Device attached [ 483.104353][T13318] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 483.107159][T13318] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 483.122998][T13318] vhci_hcd vhci_hcd.0: Device attached [ 483.126562][T13318] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 483.141248][T13318] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 483.144170][T13318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 483.147515][T13318] vhci_hcd vhci_hcd.0: Device attached [ 483.154970][T13318] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(20) [ 483.157066][T13318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 483.159486][T13318] vhci_hcd vhci_hcd.0: Device attached [ 483.173623][T13318] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 483.177783][T13318] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(24) [ 483.180543][T13318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 483.193084][T13318] vhci_hcd vhci_hcd.0: Device attached [ 483.220897][T13329] vhci_hcd: connection closed [ 483.221245][T13273] vhci_hcd vhci_hcd.4: stop threads [ 483.221584][T13325] vhci_hcd: connection closed [ 483.222602][T13321] vhci_hcd: connection closed [ 483.223219][T13327] vhci_hcd: connection closed [ 483.223313][T13323] vhci_hcd: connection closed [ 483.230159][T13273] vhci_hcd vhci_hcd.4: release socket [ 483.233510][T13319] vhci_hcd: connection closed [ 483.240330][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 483.250716][T13273] vhci_hcd vhci_hcd.4: stop threads [ 483.252393][T13273] vhci_hcd vhci_hcd.4: release socket [ 483.260827][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 483.262846][T13273] vhci_hcd vhci_hcd.4: stop threads [ 483.273905][T13273] vhci_hcd vhci_hcd.4: release socket [ 483.281148][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 483.291475][T13273] vhci_hcd vhci_hcd.4: stop threads [ 483.294158][T13273] vhci_hcd vhci_hcd.4: release socket [ 483.301573][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 483.303742][T13273] vhci_hcd vhci_hcd.4: stop threads [ 483.307088][T13273] vhci_hcd vhci_hcd.4: release socket [ 483.309337][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 483.311773][T13273] vhci_hcd vhci_hcd.4: stop threads [ 483.314413][T13273] vhci_hcd vhci_hcd.4: release socket [ 483.319672][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 483.333100][ T143] usb 45-1: new low-speed USB device number 11 using vhci_hcd [ 483.335431][ T143] usb 45-1: enqueue for inactive port 0 [ 483.403720][ T143] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 483.427096][T13333] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 483.429882][T13333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 483.434038][T13333] vhci_hcd vhci_hcd.0: Device attached [ 483.702987][ T6023] usb 44-1: SetAddress Request (59) to port 0 [ 483.705137][ T6023] usb 44-1: new SuperSpeed USB device number 59 using vhci_hcd [ 483.843021][ T5298] Bluetooth: hci0: command 0x2016 tx timeout [ 484.093736][ T5298] Bluetooth: hci1: command 0x0406 tx timeout [ 484.208386][T13335] vhci_hcd: connection reset by peer [ 484.215412][T13305] vhci_hcd vhci_hcd.3: stop threads [ 484.223098][T13305] vhci_hcd vhci_hcd.3: release socket [ 484.225660][T13305] vhci_hcd vhci_hcd.3: disconnect device [ 485.923307][ T5939] Bluetooth: hci0: command 0x2016 tx timeout [ 486.163051][ T5939] Bluetooth: hci1: command 0x0406 tx timeout [ 487.055276][T13369] bond1: option mode: unable to set because the bond device has slaves [ 487.084326][T13369] netlink: 'syz.3.1901': attribute type 10 has an invalid length. [ 487.087586][T13369] rdma_rxe: rxe_newlink: failed to add syz_tun [ 487.786014][T13371] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 487.789330][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 487.795016][T13371] vhci_hcd vhci_hcd.0: Device attached [ 487.800457][T13371] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 487.803414][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 487.807620][T13371] vhci_hcd vhci_hcd.0: Device attached [ 487.812390][T13371] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 487.815300][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 487.819257][T13371] vhci_hcd vhci_hcd.0: Device attached [ 487.823400][T13371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 487.829131][T13371] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 487.832076][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 487.836093][T13371] vhci_hcd vhci_hcd.0: Device attached [ 487.840772][T13371] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 487.843724][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 487.847865][T13371] vhci_hcd vhci_hcd.0: Device attached [ 487.852492][T13371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 487.858740][T13371] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(24) [ 487.861768][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 487.865820][T13371] vhci_hcd vhci_hcd.0: Device attached [ 487.881196][T13382] vhci_hcd: connection closed [ 487.881577][ T1148] vhci_hcd vhci_hcd.1: stop threads [ 487.881644][T13380] vhci_hcd: connection closed [ 487.883985][ T1148] vhci_hcd vhci_hcd.1: release socket [ 487.886788][T13376] vhci_hcd: connection closed [ 487.887995][T13378] vhci_hcd: connection closed [ 487.891025][T13374] vhci_hcd: connection closed [ 487.892834][ T1148] vhci_hcd vhci_hcd.1: disconnect device [ 487.898222][T13372] vhci_hcd: connection closed [ 487.898420][ T1148] vhci_hcd vhci_hcd.1: stop threads [ 487.901691][ T1148] vhci_hcd vhci_hcd.1: release socket [ 487.903982][T13361] netlink: 'syz.4.1898': attribute type 10 has an invalid length. [ 487.903987][ T1148] vhci_hcd vhci_hcd.1: disconnect device [ 487.904012][T13361] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 487.906657][ T1148] vhci_hcd vhci_hcd.1: stop threads [ 487.909322][T13361] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 487.913487][ T1148] vhci_hcd vhci_hcd.1: release socket [ 487.915652][T13361] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 487.924722][ T1148] vhci_hcd vhci_hcd.1: disconnect device [ 487.927032][ T1148] vhci_hcd vhci_hcd.1: stop threads [ 487.928914][ T1148] vhci_hcd vhci_hcd.1: release socket [ 487.931113][ T1148] vhci_hcd vhci_hcd.1: disconnect device [ 487.934374][ T1148] vhci_hcd vhci_hcd.1: stop threads [ 487.936114][ T1148] vhci_hcd vhci_hcd.1: release socket [ 487.938232][ T1148] vhci_hcd vhci_hcd.1: disconnect device [ 487.940091][ T1148] vhci_hcd vhci_hcd.1: stop threads [ 487.941982][ T1148] vhci_hcd vhci_hcd.1: release socket [ 487.944030][ T1148] vhci_hcd vhci_hcd.1: disconnect device [ 487.973138][ T6037] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 488.813004][ T6023] usb 44-1: device descriptor read/8, error -110 [ 489.753516][ T6023] usb usb44-port1: attempt power cycle [ 490.363871][ T6023] usb usb44-port1: unable to enumerate USB device [ 490.905135][T13411] netlink: 'syz.3.1910': attribute type 10 has an invalid length. [ 490.907703][T13411] bond0: (slave ªªªªª»): The slave device specified does not support setting the MAC address [ 490.911075][T13411] ªªªªª»: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 490.916129][T13411] bond0: (slave ªªªªª»): Error -22 calling dev_set_mtu [ 490.924972][T13416] netlink: 'syz.2.1912': attribute type 10 has an invalid length. [ 490.928295][T13416] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 490.932608][T13416] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 490.937692][T13416] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 493.209159][T13422] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 493.211290][T13422] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.215557][T13422] vhci_hcd vhci_hcd.0: Device attached [ 493.224753][T13422] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 493.227529][T13422] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 493.232469][T13422] vhci_hcd vhci_hcd.0: Device attached [ 493.241883][T13422] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 493.244326][T13422] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 493.247215][T13422] vhci_hcd vhci_hcd.0: Device attached [ 493.250306][T13422] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 493.255208][T13422] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 493.257310][T13422] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 493.259739][T13422] vhci_hcd vhci_hcd.0: Device attached [ 493.263030][T13422] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 493.265169][T13422] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 493.267827][T13422] vhci_hcd vhci_hcd.0: Device attached [ 493.271125][T13422] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 493.275161][T13422] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(24) [ 493.277285][T13422] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 493.279971][T13422] vhci_hcd vhci_hcd.0: Device attached [ 493.289285][T13433] vhci_hcd: connection closed [ 493.289372][T13431] vhci_hcd: connection closed [ 493.289606][T13435] vhci_hcd: connection closed [ 493.291462][T13427] vhci_hcd: connection closed [ 493.293492][T13424] vhci_hcd: connection closed [ 493.295195][T13429] vhci_hcd: connection closed [ 493.300083][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 493.305093][ T6210] vhci_hcd vhci_hcd.3: release socket [ 493.307523][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 493.310168][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 493.312305][ T6210] vhci_hcd vhci_hcd.3: release socket [ 493.314553][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 493.316489][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 493.318577][ T6210] vhci_hcd vhci_hcd.3: release socket [ 493.320696][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 493.322698][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 493.325129][ T6210] vhci_hcd vhci_hcd.3: release socket [ 493.326906][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 493.328867][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 493.330524][ T6210] vhci_hcd vhci_hcd.3: release socket [ 493.332287][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 493.334689][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 493.336406][ T6210] vhci_hcd vhci_hcd.3: release socket [ 493.338147][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 493.554032][T13441] netlink: 'syz.2.1914': attribute type 10 has an invalid length. [ 493.556572][T13441] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 493.560207][T13441] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 493.564284][T13441] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 493.659830][T13443] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 493.662636][T13443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.666030][T13443] vhci_hcd vhci_hcd.0: Device attached [ 493.670806][T13443] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 493.673657][T13443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.677516][T13443] vhci_hcd vhci_hcd.0: Device attached [ 493.681895][T13443] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 493.684694][T13443] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 493.687567][T13443] vhci_hcd vhci_hcd.0: Device attached [ 493.691344][T13443] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 493.693673][T13443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.696184][T13443] vhci_hcd vhci_hcd.0: Device attached [ 493.699315][T13443] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 493.701441][T13443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.703987][T13443] vhci_hcd vhci_hcd.0: Device attached [ 493.707475][T13443] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(24) [ 493.709578][T13443] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 493.712129][T13443] vhci_hcd vhci_hcd.0: Device attached [ 493.714837][T13443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 493.717933][T13443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 493.721022][T13443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 493.766521][T13454] vhci_hcd: connection closed [ 493.766628][T13452] vhci_hcd: connection closed [ 493.769005][ T75] vhci_hcd vhci_hcd.1: stop threads [ 493.769144][T13450] vhci_hcd: connection closed [ 493.772450][ T75] vhci_hcd vhci_hcd.1: release socket [ 493.773058][T13448] vhci_hcd: connection closed [ 493.773178][T13446] vhci_hcd: connection closed [ 493.773382][T13444] vhci_hcd: connection closed [ 493.784249][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 493.789641][ T75] vhci_hcd vhci_hcd.1: stop threads [ 493.791486][ T75] vhci_hcd vhci_hcd.1: release socket [ 493.793387][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 493.795342][ T75] vhci_hcd vhci_hcd.1: stop threads [ 493.797024][ T75] vhci_hcd vhci_hcd.1: release socket [ 493.799345][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 493.801850][ T75] vhci_hcd vhci_hcd.1: stop threads [ 493.804490][ T75] vhci_hcd vhci_hcd.1: release socket [ 493.806297][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 493.808252][ T75] vhci_hcd vhci_hcd.1: stop threads [ 493.809888][ T75] vhci_hcd vhci_hcd.1: release socket [ 493.812169][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 493.815447][ T75] vhci_hcd vhci_hcd.1: stop threads [ 493.817074][ T75] vhci_hcd vhci_hcd.1: release socket [ 493.818694][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 493.843172][ T6037] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 493.939822][T13457] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 493.942617][T13457] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.946384][T13457] vhci_hcd vhci_hcd.0: Device attached [ 494.223042][ T1333] usb 46-1: SetAddress Request (46) to port 0 [ 494.225403][ T1333] usb 46-1: new SuperSpeed USB device number 46 using vhci_hcd [ 494.469187][T13458] vhci_hcd: connection reset by peer [ 494.476292][ T75] vhci_hcd vhci_hcd.4: stop threads [ 494.478661][ T75] vhci_hcd vhci_hcd.4: release socket [ 494.481910][ T75] vhci_hcd vhci_hcd.4: disconnect device [ 495.718064][T13484] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 495.721076][T13484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 495.725606][T13484] vhci_hcd vhci_hcd.0: Device attached [ 495.853152][T13487] netlink: 'syz.2.1923': attribute type 10 has an invalid length. [ 495.855758][T13487] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 495.859394][T13487] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 495.863341][T13487] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 496.192994][T12358] usb 40-1: SetAddress Request (50) to port 0 [ 496.195232][T12358] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 496.329910][T13485] vhci_hcd: connection reset by peer [ 496.332115][T13305] vhci_hcd vhci_hcd.1: stop threads [ 496.334653][T13305] vhci_hcd vhci_hcd.1: release socket [ 496.336694][T13305] vhci_hcd vhci_hcd.1: disconnect device [ 496.473547][T13491] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1924'. [ 496.795687][T13505] netlink: 'syz.2.1925': attribute type 10 has an invalid length. [ 496.798944][T13505] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 496.803552][T13505] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 496.808443][T13505] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 498.973111][ T6022] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 499.283247][ T1333] usb 46-1: device descriptor read/8, error -110 [ 499.443056][ T6022] usb 6-1: Using ep0 maxpacket: 16 [ 499.455427][ T6022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 499.473305][ T6022] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 499.477058][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.479636][ T6022] usb 6-1: Product: syz [ 499.480999][ T6022] usb 6-1: Manufacturer: syz [ 499.482539][ T6022] usb 6-1: SerialNumber: syz [ 499.496536][ T6022] usb 6-1: config 0 descriptor?? [ 499.513424][ T6022] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 499.516407][ T6022] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 499.596538][T13537] syzkaller0: entered promiscuous mode [ 499.599972][T13537] syzkaller0: entered allmulticast mode [ 499.697472][ T1333] usb usb46-port1: attempt power cycle [ 499.734861][T13542] netlink: 'syz.2.1939': attribute type 10 has an invalid length. [ 499.738236][T13542] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 499.743682][T13542] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 499.748790][T13542] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 499.786945][ T6022] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 499.872139][ T6022] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 499.875522][ T6022] em28xx 6-1:0.0: board has no eeprom [ 499.973004][ T6022] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 499.978019][ T6022] em28xx 6-1:0.0: dvb set to bulk mode. [ 499.980752][ T24] em28xx 6-1:0.0: Binding DVB extension [ 500.052298][ T24] em28xx 6-1:0.0: Registering input extension [ 500.056776][ T6022] usb 6-1: USB disconnect, device number 36 [ 500.076929][ T6022] em28xx 6-1:0.0: Disconnecting em28xx [ 500.079450][ T6022] em28xx 6-1:0.0: Closing input extension [ 500.144927][ T6022] em28xx 6-1:0.0: Freeing device [ 500.289216][ T1333] usb usb46-port1: unable to enumerate USB device [ 500.403061][ T5939] Bluetooth: hci1: command 0x0406 tx timeout [ 500.675360][T13549] netlink: 'syz.2.1940': attribute type 10 has an invalid length. [ 501.156063][T13553] siw: device registration error -23 [ 501.306523][T12358] usb 40-1: device descriptor read/8, error -110 [ 501.716389][T12358] usb usb40-port1: attempt power cycle [ 501.726416][T13559] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 501.728677][T13559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 501.744085][T13559] vhci_hcd vhci_hcd.0: Device attached [ 501.752403][T13559] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 501.754609][T13559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 501.757722][T13559] vhci_hcd vhci_hcd.0: Device attached [ 501.761204][T13559] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 501.763573][T13559] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 501.766671][T13559] vhci_hcd vhci_hcd.0: Device attached [ 501.770422][T13559] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 501.772630][T13559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 501.775832][T13559] vhci_hcd vhci_hcd.0: Device attached [ 501.780835][T13559] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 501.783690][T13559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 501.787139][T13559] vhci_hcd vhci_hcd.0: Device attached [ 501.791770][T13559] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(24) [ 501.794605][T13559] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 501.797803][T13559] vhci_hcd vhci_hcd.0: Device attached [ 501.800662][T13559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 501.804174][T13559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 501.808187][T13559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 501.822638][T13568] vhci_hcd: connection closed [ 501.822692][T13570] vhci_hcd: connection closed [ 501.823233][T13566] vhci_hcd: connection closed [ 501.825241][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 501.827036][T13564] vhci_hcd: connection closed [ 501.827092][T13562] vhci_hcd: connection closed [ 501.828401][ T1143] vhci_hcd vhci_hcd.4: release socket [ 501.828415][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 501.828673][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 501.830135][T13560] vhci_hcd: connection closed [ 501.832122][ T1143] vhci_hcd vhci_hcd.4: release socket [ 501.832143][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 501.844008][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 501.846433][ T1143] vhci_hcd vhci_hcd.4: release socket [ 501.848680][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 501.858940][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 501.867000][ T1143] vhci_hcd vhci_hcd.4: release socket [ 501.869306][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 501.871959][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 501.881916][ T1143] vhci_hcd vhci_hcd.4: release socket [ 501.884082][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 501.886007][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 501.887680][ T1143] vhci_hcd vhci_hcd.4: release socket [ 501.889566][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 501.933155][ T6037] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 502.285382][T12358] usb usb40-port1: unable to enumerate USB device [ 502.516250][T13549] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 502.519828][T13549] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 502.523789][T13549] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 502.949827][T13587] netlink: 'syz.2.1946': attribute type 10 has an invalid length. [ 503.343551][T13587] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 503.348107][T13587] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 503.352708][T13587] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 503.418419][T13591] Cannot find del_set index 1 as target [ 504.600631][T13609] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 504.604069][T13609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 504.608729][T13609] vhci_hcd vhci_hcd.0: Device attached [ 504.615071][T13609] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 504.618363][T13609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 504.621611][T13609] vhci_hcd vhci_hcd.0: Device attached [ 504.626764][T13609] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 504.629589][T13609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 504.633575][T13609] vhci_hcd vhci_hcd.0: Device attached [ 504.638153][T13609] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 504.641072][T13609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 504.643727][T13621] rdma_rxe: rxe_newlink: failed to add syz_tun [ 504.645829][T13609] vhci_hcd vhci_hcd.0: Device attached [ 504.652957][T13609] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 504.656336][T13609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 504.660172][T13609] vhci_hcd vhci_hcd.0: Device attached [ 504.672191][T13609] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(24) [ 504.675093][T13609] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 504.681432][T13609] vhci_hcd vhci_hcd.0: Device attached [ 504.697505][T13609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 504.705443][T13609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 504.818680][T13618] vhci_hcd: connection closed [ 504.818922][ T1148] vhci_hcd vhci_hcd.2: stop threads [ 504.824101][T13622] vhci_hcd: connection closed [ 504.824631][T13616] vhci_hcd: connection closed [ 504.824930][ T1148] vhci_hcd vhci_hcd.2: release socket [ 504.826604][T13614] vhci_hcd: connection closed [ 504.827746][ T1148] vhci_hcd vhci_hcd.2: disconnect device [ 504.829371][T13610] vhci_hcd: connection closed [ 504.830935][ T1148] vhci_hcd vhci_hcd.2: stop threads [ 504.832650][T13624] vhci_hcd: connection closed [ 504.834444][ T1148] vhci_hcd vhci_hcd.2: release socket [ 504.840091][ T1148] vhci_hcd vhci_hcd.2: disconnect device [ 504.842370][ T1148] vhci_hcd vhci_hcd.2: stop threads [ 504.844323][ T1148] vhci_hcd vhci_hcd.2: release socket [ 504.846414][ T1148] vhci_hcd vhci_hcd.2: disconnect device [ 504.848558][ T1148] vhci_hcd vhci_hcd.2: stop threads [ 504.850871][ T1148] vhci_hcd vhci_hcd.2: release socket [ 504.853360][ T1148] vhci_hcd vhci_hcd.2: disconnect device [ 504.855906][ T1148] vhci_hcd vhci_hcd.2: stop threads [ 504.858141][ T1148] vhci_hcd vhci_hcd.2: release socket [ 504.860510][ T1148] vhci_hcd vhci_hcd.2: disconnect device [ 504.863907][ T1148] vhci_hcd vhci_hcd.2: stop threads [ 504.865868][ T1148] vhci_hcd vhci_hcd.2: release socket [ 504.867889][ T1148] vhci_hcd vhci_hcd.2: disconnect device [ 504.893029][ T6037] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 504.895541][ T6037] usb 41-1: enqueue for inactive port 0 [ 504.963156][ T6037] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 505.481140][T13632] qrtr: Invalid version 48 [ 506.009069][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.011154][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.298413][T13640] netlink: 'syz.3.1960': attribute type 10 has an invalid length. [ 506.301167][T13640] bond0: (slave ªªªªª»): The slave device specified does not support setting the MAC address [ 506.304682][T13640] ªªªªª»: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 506.308646][T13640] bond0: (slave ªªªªª»): Error -22 calling dev_set_mtu [ 506.458940][T13644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1961'. [ 506.582220][T12358] usb usb42-port1: attempt power cycle [ 507.770995][T13646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.085975][T12358] usb usb42-port1: unable to enumerate USB device [ 509.056202][T13666] overlayfs: failed to resolve './file0': -2 [ 509.163423][T13667] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 509.165612][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 509.168282][T13667] vhci_hcd vhci_hcd.0: Device attached [ 509.172448][T13667] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 509.174700][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 509.178034][T13667] vhci_hcd vhci_hcd.0: Device attached [ 509.181738][T13667] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 509.184204][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 509.187264][T13667] vhci_hcd vhci_hcd.0: Device attached [ 509.190228][T13667] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(20) [ 509.192470][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 509.195245][T13667] vhci_hcd vhci_hcd.0: Device attached [ 509.199209][T13667] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 509.201327][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 509.204123][T13667] vhci_hcd vhci_hcd.0: Device attached [ 509.208364][T13667] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(24) [ 509.210528][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 509.213074][T13667] vhci_hcd vhci_hcd.0: Device attached [ 509.215525][T13667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 509.218735][T13667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 509.235208][T13678] vhci_hcd: connection closed [ 509.235322][T13676] vhci_hcd: connection closed [ 509.235353][T13674] vhci_hcd: connection closed [ 509.239558][T13672] vhci_hcd: connection closed [ 509.242034][T13670] vhci_hcd: connection closed [ 509.243812][T13668] vhci_hcd: connection closed [ 509.273358][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 509.276668][ T1143] vhci_hcd vhci_hcd.3: release socket [ 509.278403][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 509.293780][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 509.295959][ T1143] vhci_hcd vhci_hcd.3: release socket [ 509.298550][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 509.300963][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 509.303938][ T1143] vhci_hcd vhci_hcd.3: release socket [ 509.305992][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 509.308147][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 509.310083][ T1143] vhci_hcd vhci_hcd.3: release socket [ 509.312194][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 509.317231][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 509.319641][ T1143] vhci_hcd vhci_hcd.3: release socket [ 509.321932][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 509.326526][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 509.328721][ T1143] vhci_hcd vhci_hcd.3: release socket [ 509.332149][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 509.343252][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 510.597195][T13695] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 510.599958][T13695] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 510.604276][T13695] vhci_hcd vhci_hcd.0: Device attached [ 510.741798][T13697] vhci_hcd: connection closed [ 510.821653][ T6210] vhci_hcd vhci_hcd.1: stop threads [ 510.895855][T13704] IPv6: NLM_F_REPLACE set, but no existing node found! [ 510.904919][ T6022] usb 40-1: SetAddress Request (54) to port 0 [ 510.906972][ T6022] usb 40-1: new SuperSpeed USB device number 54 using vhci_hcd [ 511.183079][ T6210] vhci_hcd vhci_hcd.1: release socket [ 511.185717][ T6210] vhci_hcd vhci_hcd.1: disconnect device [ 512.587089][ T143] hid-generic 0080:0003:0001.0008: unknown main item tag 0x0 [ 512.589739][ T143] hid-generic 0080:0003:0001.0008: unknown main item tag 0x0 [ 512.633861][ T143] hid-generic 0080:0003:0001.0008: hidraw1: HID v0.03 Device [syz0] on syz1 [ 512.922836][T13716] fido_id[13716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 512.957712][T13718] could not open pipe file descriptor [ 513.099153][T13722] overlayfs: failed to resolve './file0': -2 [ 513.369746][T13727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 513.371920][T13727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.798771][T13731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 513.800905][T13731] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 513.808550][T13731] vhci_hcd vhci_hcd.0: Device attached [ 513.922580][T13737] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 513.925137][T13737] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 514.042174][T13735] vhci_hcd: connection reset by peer [ 514.049335][T13737] vhci_hcd vhci_hcd.0: Device attached [ 514.056175][ T75] vhci_hcd vhci_hcd.1: stop threads [ 514.058734][ T75] vhci_hcd vhci_hcd.1: release socket [ 514.071470][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 514.283449][T13743] IPv6: NLM_F_REPLACE set, but no existing node found! [ 514.343175][ T6218] usb 42-1: SetAddress Request (67) to port 0 [ 514.348780][ T6218] usb 42-1: new SuperSpeed USB device number 67 using vhci_hcd [ 514.567619][T13738] vhci_hcd: connection reset by peer [ 514.570610][ T75] vhci_hcd vhci_hcd.2: stop threads [ 514.574023][ T75] vhci_hcd vhci_hcd.2: release socket [ 514.576441][ T75] vhci_hcd vhci_hcd.2: disconnect device [ 514.630160][T13746] ucma_write: process 1675 (syz.1.1983) changed security contexts after opening file descriptor, this is not allowed. [ 515.125283][T13752] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 515.128125][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 515.131133][T13752] vhci_hcd vhci_hcd.0: Device attached [ 515.137077][T13752] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 515.139852][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 515.143220][T13752] vhci_hcd vhci_hcd.0: Device attached [ 515.148897][T13752] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 515.151736][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 515.155098][T13752] vhci_hcd vhci_hcd.0: Device attached [ 515.159600][T13752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 515.164410][T13752] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 515.166517][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 515.169032][T13752] vhci_hcd vhci_hcd.0: Device attached [ 515.172995][T13752] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 515.175152][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 515.177622][T13752] vhci_hcd vhci_hcd.0: Device attached [ 515.182373][T13752] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(22) [ 515.184566][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 515.187164][T13752] vhci_hcd vhci_hcd.0: Device attached [ 515.190714][T13752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 515.216094][T13763] vhci_hcd: connection closed [ 515.216486][T13761] vhci_hcd: connection closed [ 515.216489][T13759] vhci_hcd: connection closed [ 515.218518][T13757] vhci_hcd: connection closed [ 515.222054][T13755] vhci_hcd: connection closed [ 515.223828][T13753] vhci_hcd: connection closed [ 515.225952][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 515.228846][ T1148] vhci_hcd vhci_hcd.3: release socket [ 515.230381][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 515.232274][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 515.233892][ T1148] vhci_hcd vhci_hcd.3: release socket [ 515.235430][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 515.237125][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 515.238788][ T1148] vhci_hcd vhci_hcd.3: release socket [ 515.252422][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 515.254443][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 515.255971][ T1148] vhci_hcd vhci_hcd.3: release socket [ 515.258135][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 515.265337][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 515.267736][ T1148] vhci_hcd vhci_hcd.3: release socket [ 515.270157][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 515.272698][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 515.275042][ T1148] vhci_hcd vhci_hcd.3: release socket [ 515.277378][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 515.344845][ T1333] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 515.363164][ T5939] Bluetooth: hci0: command 0x2016 tx timeout [ 515.442982][ T5939] Bluetooth: hci1: command 0x0406 tx timeout [ 515.838598][T13780] ªªªªªª speed is unknown, defaulting to 1000 [ 515.918694][T13780] ªªªªªª speed is unknown, defaulting to 1000 [ 515.921385][T13780] ªªªªªª speed is unknown, defaulting to 1000 [ 516.002999][ T6022] usb 40-1: device descriptor read/8, error -110 [ 516.310223][T13790] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 516.403941][ T6022] usb usb40-port1: attempt power cycle [ 516.501661][T13790] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 516.505720][T13790] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 516.509579][T13790] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 516.927195][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 516.940473][T13801] bridge0: port 3(syz_tun) entered blocking state [ 516.943398][T13801] bridge0: port 3(syz_tun) entered forwarding state [ 516.946373][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.949292][T13801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.952534][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.955657][T13801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.963760][ T6022] usb usb40-port1: unable to enumerate USB device [ 517.006794][T13801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.082825][T12358] ªªªªªª speed is unknown, defaulting to 1000 [ 517.099588][T13795] Cannot find map_set index 2 as target [ 517.719903][T13819] bond1: option mode: unable to set because the bond device has slaves [ 517.731729][T13819] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 517.735645][T13819] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 517.747471][T13819] netlink: 'syz.4.2000': attribute type 10 has an invalid length. [ 517.750863][T13819] rdma_rxe: rxe_newlink: failed to add syz_tun [ 517.798877][T13822] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 517.801291][T13822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.806155][T13822] vhci_hcd vhci_hcd.0: Device attached [ 517.811208][T13822] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 517.814424][T13822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.818169][T13822] vhci_hcd vhci_hcd.0: Device attached [ 517.823257][T13822] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 517.826031][T13822] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 517.829749][T13822] vhci_hcd vhci_hcd.0: Device attached [ 517.834532][T13822] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 517.836769][T13822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.839981][T13822] vhci_hcd vhci_hcd.0: Device attached [ 517.843579][T13822] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 517.845835][T13822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.848580][T13822] vhci_hcd vhci_hcd.0: Device attached [ 517.851277][T13822] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 517.855013][T13822] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 517.858360][T13822] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 517.870151][T13829] vhci_hcd: connection closed [ 517.870184][T13831] vhci_hcd: connection closed [ 517.870485][T13825] vhci_hcd: connection closed [ 517.872326][T13827] vhci_hcd: connection closed [ 517.875843][T13823] vhci_hcd: connection closed [ 518.024532][ T6210] vhci_hcd vhci_hcd.2: stop threads [ 518.028486][ T6210] vhci_hcd vhci_hcd.2: release socket [ 518.030698][ T6210] vhci_hcd vhci_hcd.2: disconnect device [ 518.035493][ T6210] vhci_hcd vhci_hcd.2: stop threads [ 518.037507][ T6210] vhci_hcd vhci_hcd.2: release socket [ 518.039803][ T6210] vhci_hcd vhci_hcd.2: disconnect device [ 518.042396][ T6210] vhci_hcd vhci_hcd.2: stop threads [ 518.045483][ T6210] vhci_hcd vhci_hcd.2: release socket [ 518.047764][ T6210] vhci_hcd vhci_hcd.2: disconnect device [ 518.050776][ T6210] vhci_hcd vhci_hcd.2: stop threads [ 518.053165][ T6210] vhci_hcd vhci_hcd.2: release socket [ 518.055639][ T6210] vhci_hcd vhci_hcd.2: disconnect device [ 518.058244][ T6210] vhci_hcd vhci_hcd.2: stop threads [ 518.060437][ T6210] vhci_hcd vhci_hcd.2: release socket [ 518.062672][ T6210] vhci_hcd vhci_hcd.2: disconnect device [ 518.493046][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 518.877743][T13850] netlink: 'syz.3.2006': attribute type 10 has an invalid length. [ 518.880298][T13850] bond0: (slave ªªªªª»): The slave device specified does not support setting the MAC address [ 518.884007][T13850] ªªªªª»: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 518.887843][T13850] bond0: (slave ªªªªª»): Error -22 calling dev_set_mtu [ 519.443000][ T6218] usb 42-1: device descriptor read/8, error -110 [ 519.529630][T13857] IPv6: NLM_F_REPLACE set, but no existing node found! [ 519.841599][ T6218] usb usb42-port1: attempt power cycle [ 520.433858][ T6218] usb usb42-port1: unable to enumerate USB device [ 520.491164][T13863] netlink: 'syz.1.2010': attribute type 10 has an invalid length. [ 520.494859][T13863] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 520.500109][T13863] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 520.505377][T13863] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 520.571757][T13865] could not open pipe file descriptor [ 521.516825][T13876] netlink: 'syz.4.2014': attribute type 10 has an invalid length. [ 521.519950][T13876] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 521.523642][T13876] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 521.528380][T13876] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 521.537731][T13873] netlink: 'syz.3.2013': attribute type 10 has an invalid length. [ 521.541127][T13873] bond0: (slave ªªªªª»): The slave device specified does not support setting the MAC address [ 521.545597][T13873] ªªªªª»: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 521.550633][T13873] bond0: (slave ªªªªª»): Error -22 calling dev_set_mtu [ 522.342688][T13889] overlayfs: failed to resolve './file0': -2 [ 522.643343][ T64] Bluetooth: hci0: command 0x2016 tx timeout [ 523.186627][T13894] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 523.188811][T13894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 523.192144][T13894] vhci_hcd vhci_hcd.0: Device attached [ 523.225661][T13902] usb usb8: usbfs: process 13902 (syz.4.2021) did not claim interface 0 before use [ 523.305980][T13905] vhci_hcd: connection closed [ 523.309120][T13305] vhci_hcd vhci_hcd.3: stop threads [ 523.342988][T13305] vhci_hcd vhci_hcd.3: release socket [ 523.345321][T13305] vhci_hcd vhci_hcd.3: disconnect device [ 523.454277][T13909] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 523.457025][T13909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.460975][T13909] vhci_hcd vhci_hcd.0: Device attached [ 523.466323][T13909] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 523.469173][T13909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.472382][T13909] vhci_hcd vhci_hcd.0: Device attached [ 523.474930][T13907] Cannot find del_set index 1 as target [ 523.477807][T13909] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 523.480620][T13909] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 523.483955][T13909] vhci_hcd vhci_hcd.0: Device attached [ 523.505790][T13909] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 523.508585][T13909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.511588][T13909] vhci_hcd vhci_hcd.0: Device attached [ 523.515839][T13909] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(22) [ 523.518694][T13909] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 523.522063][T13909] vhci_hcd vhci_hcd.0: Device attached [ 523.525599][T13909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 523.529875][T13909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 523.534602][T13909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 523.553048][T13918] vhci_hcd: connection closed [ 523.553202][T13916] vhci_hcd: connection closed [ 523.553285][T13273] vhci_hcd vhci_hcd.4: stop threads [ 523.553436][T13912] vhci_hcd: connection closed [ 523.553585][T13910] vhci_hcd: connection closed [ 523.561156][T13914] vhci_hcd: connection closed [ 523.563421][T13273] vhci_hcd vhci_hcd.4: release socket [ 523.567495][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 523.569433][T13273] vhci_hcd vhci_hcd.4: stop threads [ 523.571486][T13273] vhci_hcd vhci_hcd.4: release socket [ 523.574302][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 523.576192][T13273] vhci_hcd vhci_hcd.4: stop threads [ 523.578252][T13273] vhci_hcd vhci_hcd.4: release socket [ 523.580447][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 523.595141][T13273] vhci_hcd vhci_hcd.4: stop threads [ 523.596887][T13273] vhci_hcd vhci_hcd.4: release socket [ 523.598660][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 523.602385][T13273] vhci_hcd vhci_hcd.4: stop threads [ 523.606665][T13273] vhci_hcd vhci_hcd.4: release socket [ 523.609958][T13273] vhci_hcd vhci_hcd.4: disconnect device [ 523.643680][ T5984] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 524.723260][T13931] Bluetooth: hci0: command 0x2016 tx timeout [ 525.197069][T13937] FAULT_INJECTION: forcing a failure. [ 525.197069][T13937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.199075][T13937] [ 525.199084][T13937] ====================================================== [ 525.199090][T13937] WARNING: possible circular locking dependency detected [ 525.199099][T13937] syzkaller #0 Tainted: G L [ 525.199108][T13937] ------------------------------------------------------ [ 525.199114][T13937] syz.2.2028/13937 is trying to acquire lock: [ 525.199122][T13937] ffffffff8e2d6ac0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 525.199167][T13937] [ 525.199167][T13937] but task is already holding lock: [ 525.199172][T13937] ffff88802b23add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 525.199218][T13937] [ 525.199218][T13937] which lock already depends on the new lock. [ 525.199218][T13937] [ 525.199223][T13937] [ 525.199223][T13937] the existing dependency chain (in reverse order) is: [ 525.199229][T13937] [ 525.199229][T13937] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 525.199248][T13937] _raw_spin_lock_nested+0x31/0x40 [ 525.199271][T13937] raw_spin_rq_lock_nested+0x29/0x130 [ 525.199289][T13937] task_rq_lock+0xcf/0x490 [ 525.199308][T13937] cgroup_move_task+0x81/0x2a0 [ 525.199329][T13937] css_set_move_task+0x288/0x5f0 [ 525.199352][T13937] cgroup_post_fork+0x201/0x9e0 [ 525.199374][T13937] copy_process+0x56b6/0x7430 [ 525.199395][T13937] kernel_clone+0xfc/0x910 [ 525.199416][T13937] user_mode_thread+0xc8/0x110 [ 525.199438][T13937] rest_init+0x23/0x2b0 [ 525.199454][T13937] start_kernel+0x3ef/0x4d0 [ 525.199471][T13937] x86_64_start_reservations+0x18/0x30 [ 525.199489][T13937] x86_64_start_kernel+0x130/0x190 [ 525.199506][T13937] common_startup_64+0x13e/0x148 [ 525.199523][T13937] [ 525.199523][T13937] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 525.199543][T13937] _raw_spin_lock_irqsave+0x3a/0x60 [ 525.199564][T13937] try_to_wake_up+0xb7/0x1860 [ 525.199582][T13937] __wake_up_common+0x135/0x1f0 [ 525.199595][T13937] __wake_up+0x31/0x60 [ 525.199615][T13937] tty_port_default_wakeup+0x4d/0x60 [ 525.199640][T13937] serial8250_tx_chars+0x68e/0x860 [ 525.199660][T13937] serial8250_handle_irq+0x761/0xcb0 [ 525.199675][T13937] serial8250_default_handle_irq+0x9e/0x270 [ 525.199689][T13937] serial8250_interrupt+0xf8/0x1d0 [ 525.199703][T13937] __handle_irq_event_percpu+0x236/0x890 [ 525.199723][T13937] handle_irq_event+0xab/0x1e0 [ 525.199740][T13937] handle_edge_irq+0x3ca/0x9e0 [ 525.199756][T13937] __common_interrupt+0xd0/0x2f0 [ 525.199776][T13937] common_interrupt+0xba/0xe0 [ 525.199811][T13937] asm_common_interrupt+0x26/0x40 [ 525.199826][T13937] pv_native_safe_halt+0xf/0x20 [ 525.199847][T13937] default_idle+0x13/0x20 [ 525.199863][T13937] default_idle_call+0x6c/0xb0 [ 525.199879][T13937] do_idle+0x38d/0x510 [ 525.199897][T13937] cpu_startup_entry+0x4f/0x60 [ 525.199915][T13937] start_secondary+0x21d/0x2d0 [ 525.199928][T13937] common_startup_64+0x13e/0x148 [ 525.199946][T13937] [ 525.199946][T13937] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 525.199966][T13937] _raw_spin_lock_irqsave+0x3a/0x60 [ 525.199986][T13937] __wake_up+0x1c/0x60 [ 525.200004][T13937] tty_port_default_wakeup+0x4d/0x60 [ 525.200024][T13937] serial8250_tx_chars+0x68e/0x860 [ 525.200044][T13937] serial8250_handle_irq+0x761/0xcb0 [ 525.200057][T13937] serial8250_default_handle_irq+0x9e/0x270 [ 525.200072][T13937] serial8250_interrupt+0xf8/0x1d0 [ 525.200087][T13937] __handle_irq_event_percpu+0x236/0x890 [ 525.200106][T13937] handle_irq_event+0xab/0x1e0 [ 525.200124][T13937] handle_edge_irq+0x3ca/0x9e0 [ 525.200142][T13937] __common_interrupt+0xd0/0x2f0 [ 525.200163][T13937] common_interrupt+0xba/0xe0 [ 525.200180][T13937] asm_common_interrupt+0x26/0x40 [ 525.200201][T13937] _raw_spin_unlock_irqrestore+0x31/0x80 [ 525.200223][T13937] uart_write+0x2a4/0xb30 [ 525.200245][T13937] n_tty_write+0x434/0x1280 [ 525.200260][T13937] file_tty_write.constprop.0+0x503/0x9b0 [ 525.200283][T13937] redirected_tty_write+0xd4/0x120 [ 525.200304][T13937] vfs_write+0x7d3/0x11d0 [ 525.200325][T13937] ksys_write+0x12a/0x250 [ 525.200344][T13937] do_syscall_64+0xcd/0xf80 [ 525.200358][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.200374][T13937] [ 525.200374][T13937] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 525.200396][T13937] _raw_spin_lock_irqsave+0x3a/0x60 [ 525.200417][T13937] serial8250_console_write+0x181/0x1890 [ 525.200431][T13937] console_flush_one_record+0x796/0xc60 [ 525.200450][T13937] console_unlock+0xef/0x240 [ 525.200467][T13937] vprintk_emit+0x407/0x6b0 [ 525.200485][T13937] _printk+0xc7/0x100 [ 525.200499][T13937] register_console+0x823/0x1210 [ 525.200518][T13937] univ8250_console_init+0x5f/0x90 [ 525.200537][T13937] console_init+0x152/0x600 [ 525.200555][T13937] start_kernel+0x298/0x4d0 [ 525.200571][T13937] x86_64_start_reservations+0x18/0x30 [ 525.200589][T13937] x86_64_start_kernel+0x130/0x190 [ 525.200605][T13937] common_startup_64+0x13e/0x148 [ 525.200623][T13937] [ 525.200623][T13937] -> #0 (console_owner){-.-.}-{0:0}: [ 525.200642][T13937] __lock_acquire+0x1669/0x2890 [ 525.200656][T13937] lock_acquire+0x179/0x330 [ 525.200668][T13937] console_lock_spinning_enable+0x72/0x80 [ 525.200687][T13937] console_flush_one_record+0x73f/0xc60 [ 525.200706][T13937] console_unlock+0xef/0x240 [ 525.200723][T13937] vprintk_emit+0x407/0x6b0 [ 525.200741][T13937] _printk+0xc7/0x100 [ 525.200755][T13937] should_fail_ex+0x4e7/0x640 [ 525.200771][T13937] strncpy_from_user+0x3b/0x2e0 [ 525.200786][T13937] strncpy_from_user_nofault+0x7f/0x180 [ 525.200805][T13937] bpf_bprintf_prepare+0xe90/0x13f0 [ 525.200823][T13937] bpf_trace_printk+0xda/0x190 [ 525.200843][T13937] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 525.200857][T13937] bpf_trace_run2+0x239/0x5c0 [ 525.200878][T13937] __bpf_trace_contention_begin+0xc9/0x110 [ 525.200892][T13937] trace_contention_begin.constprop.0+0xd6/0x140 [ 525.200910][T13937] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 525.200925][T13937] do_raw_spin_lock+0x20e/0x2b0 [ 525.200940][T13937] raw_spin_rq_lock_nested+0x7e/0x130 [ 525.200961][T13937] __schedule+0x331/0x6150 [ 525.200981][T13937] preempt_schedule_irq+0x51/0x90 [ 525.201003][T13937] irqentry_exit+0x1d8/0x8c0 [ 525.201016][T13937] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 525.201031][T13937] stack_trace_consume_entry+0xd7/0x170 [ 525.201055][T13937] arch_stack_walk+0x88/0x100 [ 525.201072][T13937] stack_trace_save+0x8e/0xc0 [ 525.201094][T13937] kasan_save_stack+0x33/0x60 [ 525.201114][T13937] kasan_save_track+0x14/0x30 [ 525.201133][T13937] kasan_save_free_info+0x3b/0x60 [ 525.201149][T13937] __kasan_slab_free+0x5f/0x80 [ 525.201169][T13937] kfree+0x2f8/0x6e0 [ 525.201184][T13937] tomoyo_path_number_perm+0x470/0x580 [ 525.201207][T13937] security_file_ioctl_compat+0x9b/0x240 [ 525.201243][T13937] __ia32_compat_sys_ioctl+0xc3/0x370 [ 525.201262][T13937] __do_fast_syscall_32+0xe8/0x680 [ 525.201276][T13937] do_fast_syscall_32+0x32/0x80 [ 525.201291][T13937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.201309][T13937] [ 525.201309][T13937] other info that might help us debug this: [ 525.201309][T13937] [ 525.201313][T13937] Chain exists of: [ 525.201313][T13937] console_owner --> &p->pi_lock --> &rq->__lock [ 525.201313][T13937] [ 525.201337][T13937] Possible unsafe locking scenario: [ 525.201337][T13937] [ 525.201341][T13937] CPU0 CPU1 [ 525.201346][T13937] ---- ---- [ 525.201350][T13937] lock(&rq->__lock); [ 525.201360][T13937] lock(&p->pi_lock); [ 525.201371][T13937] lock(&rq->__lock); [ 525.201381][T13937] lock(console_owner); [ 525.201391][T13937] [ 525.201391][T13937] *** DEADLOCK *** [ 525.201391][T13937] [ 525.201395][T13937] 5 locks held by syz.2.2028/13937: [ 525.201404][T13937] #0: ffffffff8edbadb8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x237/0x580 [ 525.201442][T13937] #1: ffff88802b23add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 525.201481][T13937] #2: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x5c0 [ 525.201520][T13937] #3: ffffffff8e3b6f00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 525.201555][T13937] #4: ffffffff8e3b6f78 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 525.201594][T13937] [ 525.201594][T13937] stack backtrace: [ 525.201603][T13937] CPU: 0 UID: 0 PID: 13937 Comm: syz.2.2028 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.201626][T13937] Tainted: [L]=SOFTLOCKUP [ 525.201632][T13937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 525.201643][T13937] Call Trace: [ 525.201650][T13937] [ 525.201657][T13937] dump_stack_lvl+0x116/0x1f0 [ 525.201684][T13937] print_circular_bug+0x275/0x340 [ 525.201709][T13937] check_noncircular+0x146/0x160 [ 525.201736][T13937] __lock_acquire+0x1669/0x2890 [ 525.201755][T13937] lock_acquire+0x179/0x330 [ 525.201769][T13937] ? console_lock_spinning_enable+0x61/0x80 [ 525.201788][T13937] ? console_lock_spinning_enable+0x4a/0x80 [ 525.201806][T13937] console_lock_spinning_enable+0x72/0x80 [ 525.201822][T13937] ? console_lock_spinning_enable+0x61/0x80 [ 525.201842][T13937] console_flush_one_record+0x73f/0xc60 [ 525.201862][T13937] ? __pfx_console_flush_one_record+0x10/0x10 [ 525.201882][T13937] ? __lock_acquire+0x436/0x2890 [ 525.201898][T13937] ? is_printk_cpu_sync_owner+0x32/0x40 [ 525.201921][T13937] console_unlock+0xef/0x240 [ 525.201940][T13937] ? __pfx_console_unlock+0x10/0x10 [ 525.201958][T13937] ? do_raw_spin_unlock+0x100/0x230 [ 525.201977][T13937] ? _printk+0xc7/0x100 [ 525.201991][T13937] ? __down_trylock_console_sem+0xb0/0x140 [ 525.202010][T13937] vprintk_emit+0x407/0x6b0 [ 525.202030][T13937] ? __pfx_vprintk_emit+0x10/0x10 [ 525.202051][T13937] ? __pfx_check_buffer+0x10/0x10 [ 525.202069][T13937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 525.202093][T13937] _printk+0xc7/0x100 [ 525.202110][T13937] ? __pfx__printk+0x10/0x10 [ 525.202150][T13937] ? __pfx____ratelimit+0x10/0x10 [ 525.202176][T13937] should_fail_ex+0x4e7/0x640 [ 525.202201][T13937] strncpy_from_user+0x3b/0x2e0 [ 525.202220][T13937] strncpy_from_user_nofault+0x7f/0x180 [ 525.202241][T13937] bpf_bprintf_prepare+0xe90/0x13f0 [ 525.202263][T13937] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 525.202281][T13937] ? trace_buffer_unlock_commit_regs+0xcf/0x540 [ 525.202304][T13937] ? bpf_trace_run2+0x3f9/0x5c0 [ 525.202325][T13937] bpf_trace_printk+0xda/0x190 [ 525.202346][T13937] ? __pfx_bpf_trace_printk+0x10/0x10 [ 525.202368][T13937] ? bpf_trace_run2+0x3f9/0x5c0 [ 525.202394][T13937] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 525.202408][T13937] bpf_trace_run2+0x239/0x5c0 [ 525.202431][T13937] ? __pfx_bpf_trace_printk+0x10/0x10 [ 525.202451][T13937] ? __pfx_bpf_trace_run2+0x10/0x10 [ 525.202475][T13937] ? find_held_lock+0x2b/0x80 [ 525.202496][T13937] __bpf_trace_contention_begin+0xc9/0x110 [ 525.202513][T13937] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 525.202531][T13937] ? __pfx_bpf_trace_run2+0x10/0x10 [ 525.202554][T13937] trace_contention_begin.constprop.0+0xd6/0x140 [ 525.202572][T13937] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 525.202591][T13937] ? __lock_acquire+0x436/0x2890 [ 525.202606][T13937] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 525.202627][T13937] do_raw_spin_lock+0x20e/0x2b0 [ 525.202644][T13937] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.202662][T13937] ? rcu_qs+0x2b/0xe0 [ 525.202682][T13937] ? rcu_note_context_switch+0x191/0x1de0 [ 525.202706][T13937] raw_spin_rq_lock_nested+0x7e/0x130 [ 525.202727][T13937] ? preempt_schedule_irq+0x51/0x90 [ 525.202751][T13937] __schedule+0x331/0x6150 [ 525.202774][T13937] ? mark_held_locks+0x49/0x80 [ 525.202789][T13937] ? irqentry_exit+0x1dd/0x8c0 [ 525.202803][T13937] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 525.202830][T13937] ? __pfx___schedule+0x10/0x10 [ 525.202855][T13937] preempt_schedule_irq+0x51/0x90 [ 525.202879][T13937] irqentry_exit+0x1d8/0x8c0 [ 525.202892][T13937] ? rcu_is_watching+0x12/0xc0 [ 525.202914][T13937] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 525.202932][T13937] RIP: 0010:stack_trace_consume_entry+0xd7/0x170 [ 525.202958][T13937] Code: 02 00 0f 85 9a 00 00 00 8d 45 01 89 43 10 48 8b 03 48 8d 2c e8 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 64 48 89 75 00 8b 43 08 39 43 10 0f 92 c0 48 83 c4 08 5b 5d c3 [ 525.202974][T13937] RSP: 0018:ffffc9000370f7f0 EFLAGS: 00000246 [ 525.202988][T13937] RAX: dffffc0000000000 RBX: ffffc9000370f8d0 RCX: ffffc9000370f764 [ 525.202999][T13937] RDX: 1ffff920006e1f30 RSI: ffffffff8b756728 RDI: ffffc9000370f8dc [ 525.203009][T13937] RBP: ffffc9000370f980 R08: 0000000000000001 R09: 00000000f5d7b50d [ 525.203020][T13937] R10: 0000000000000002 R11: 000000000001403f R12: ffffffff81a8eb80 [ 525.203030][T13937] R13: ffffc9000370f8d0 R14: 0000000000000000 R15: ffff8880242f4980 [ 525.203041][T13937] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 525.203068][T13937] ? __do_fast_syscall_32+0xe8/0x680 [ 525.203086][T13937] ? unwind_get_return_address+0x59/0xa0 [ 525.203107][T13937] arch_stack_walk+0x88/0x100 [ 525.203128][T13937] ? __do_fast_syscall_32+0xe8/0x680 [ 525.203146][T13937] stack_trace_save+0x8e/0xc0 [ 525.203168][T13937] ? __pfx_stack_trace_save+0x10/0x10 [ 525.203200][T13937] ? __lock_acquire+0x436/0x2890 [ 525.203216][T13937] kasan_save_stack+0x33/0x60 [ 525.203236][T13937] ? kasan_save_stack+0x33/0x60 [ 525.203256][T13937] ? kasan_save_track+0x14/0x30 [ 525.203275][T13937] ? kasan_save_free_info+0x3b/0x60 [ 525.203292][T13937] ? __kasan_slab_free+0x5f/0x80 [ 525.203312][T13937] ? kfree+0x2f8/0x6e0 [ 525.203328][T13937] ? tomoyo_path_number_perm+0x470/0x580 [ 525.203345][T13937] ? security_file_ioctl_compat+0x9b/0x240 [ 525.203365][T13937] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 525.203399][T13937] kasan_save_track+0x14/0x30 [ 525.203420][T13937] kasan_save_free_info+0x3b/0x60 [ 525.203437][T13937] __kasan_slab_free+0x5f/0x80 [ 525.203458][T13937] kfree+0x2f8/0x6e0 [ 525.203474][T13937] ? tomoyo_path_number_perm+0x470/0x580 [ 525.203493][T13937] ? tomoyo_path_number_perm+0x470/0x580 [ 525.203510][T13937] tomoyo_path_number_perm+0x470/0x580 [ 525.203528][T13937] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.203557][T13937] ? find_held_lock+0x2b/0x80 [ 525.203576][T13937] ? hook_file_ioctl_common+0x144/0x410 [ 525.203599][T13937] ? __fget_files+0x20e/0x3c0 [ 525.203620][T13937] ? __fput_deferred+0x470/0x480 [ 525.203638][T13937] security_file_ioctl_compat+0x9b/0x240 [ 525.203659][T13937] __ia32_compat_sys_ioctl+0xc3/0x370 [ 525.203680][T13937] __do_fast_syscall_32+0xe8/0x680 [ 525.203697][T13937] do_fast_syscall_32+0x32/0x80 [ 525.203712][T13937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.203730][T13937] RIP: 0023:0xf70ed579 [ 525.203743][T13937] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 525.203756][T13937] RSP: 002b:00000000f54bc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 525.203772][T13937] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000008914 [ 525.203782][T13937] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 525.203792][T13937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.203802][T13937] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 525.203811][T13937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.203826][T13937] [ 525.733605][T13937] CPU: 0 UID: 0 PID: 13937 Comm: syz.2.2028 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.733633][T13937] Tainted: [L]=SOFTLOCKUP [ 525.733639][T13937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 525.733650][T13937] Call Trace: [ 525.733658][T13937] [ 525.733666][T13937] dump_stack_lvl+0x116/0x1f0 [ 525.733697][T13937] should_fail_ex+0x512/0x640 [ 525.733718][T13937] strncpy_from_user+0x3b/0x2e0 [ 525.733737][T13937] strncpy_from_user_nofault+0x7f/0x180 [ 525.733758][T13937] bpf_bprintf_prepare+0xe90/0x13f0 [ 525.733781][T13937] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 525.733800][T13937] ? trace_buffer_unlock_commit_regs+0xcf/0x540 [ 525.733821][T13937] ? bpf_trace_run2+0x3f9/0x5c0 [ 525.733842][T13937] bpf_trace_printk+0xda/0x190 [ 525.733861][T13937] ? __pfx_bpf_trace_printk+0x10/0x10 [ 525.733883][T13937] ? bpf_trace_run2+0x3f9/0x5c0 [ 525.733907][T13937] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 525.733921][T13937] bpf_trace_run2+0x239/0x5c0 [ 525.733941][T13937] ? __pfx_bpf_trace_printk+0x10/0x10 [ 525.733960][T13937] ? __pfx_bpf_trace_run2+0x10/0x10 [ 525.733983][T13937] ? find_held_lock+0x2b/0x80 [ 525.734005][T13937] __bpf_trace_contention_begin+0xc9/0x110 [ 525.734021][T13937] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 525.734037][T13937] ? __pfx_bpf_trace_run2+0x10/0x10 [ 525.734059][T13937] trace_contention_begin.constprop.0+0xd6/0x140 [ 525.734076][T13937] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 525.734094][T13937] ? __lock_acquire+0x436/0x2890 [ 525.734108][T13937] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 525.734151][T13937] do_raw_spin_lock+0x20e/0x2b0 [ 525.734169][T13937] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.734184][T13937] ? rcu_qs+0x2b/0xe0 [ 525.734202][T13937] ? rcu_note_context_switch+0x191/0x1de0 [ 525.734224][T13937] raw_spin_rq_lock_nested+0x7e/0x130 [ 525.734244][T13937] ? preempt_schedule_irq+0x51/0x90 [ 525.734265][T13937] __schedule+0x331/0x6150 [ 525.734286][T13937] ? mark_held_locks+0x49/0x80 [ 525.734300][T13937] ? irqentry_exit+0x1dd/0x8c0 [ 525.734314][T13937] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 525.734341][T13937] ? __pfx___schedule+0x10/0x10 [ 525.734366][T13937] preempt_schedule_irq+0x51/0x90 [ 525.734389][T13937] irqentry_exit+0x1d8/0x8c0 [ 525.734401][T13937] ? rcu_is_watching+0x12/0xc0 [ 525.734420][T13937] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 525.734443][T13937] RIP: 0010:stack_trace_consume_entry+0xd7/0x170 [ 525.734470][T13937] Code: 02 00 0f 85 9a 00 00 00 8d 45 01 89 43 10 48 8b 03 48 8d 2c e8 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 64 48 89 75 00 8b 43 08 39 43 10 0f 92 c0 48 83 c4 08 5b 5d c3 [ 525.734485][T13937] RSP: 0018:ffffc9000370f7f0 EFLAGS: 00000246 [ 525.734500][T13937] RAX: dffffc0000000000 RBX: ffffc9000370f8d0 RCX: ffffc9000370f764 [ 525.734511][T13937] RDX: 1ffff920006e1f30 RSI: ffffffff8b756728 RDI: ffffc9000370f8dc [ 525.734521][T13937] RBP: ffffc9000370f980 R08: 0000000000000001 R09: 00000000f5d7b50d [ 525.734532][T13937] R10: 0000000000000002 R11: 000000000001403f R12: ffffffff81a8eb80 [ 525.734541][T13937] R13: ffffc9000370f8d0 R14: 0000000000000000 R15: ffff8880242f4980 [ 525.734552][T13937] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 525.734579][T13937] ? __do_fast_syscall_32+0xe8/0x680 [ 525.734597][T13937] ? unwind_get_return_address+0x59/0xa0 [ 525.734617][T13937] arch_stack_walk+0x88/0x100 [ 525.734636][T13937] ? __do_fast_syscall_32+0xe8/0x680 [ 525.734653][T13937] stack_trace_save+0x8e/0xc0 [ 525.734674][T13937] ? __pfx_stack_trace_save+0x10/0x10 [ 525.734699][T13937] ? __lock_acquire+0x436/0x2890 [ 525.734715][T13937] kasan_save_stack+0x33/0x60 [ 525.734736][T13937] ? kasan_save_stack+0x33/0x60 [ 525.734756][T13937] ? kasan_save_track+0x14/0x30 [ 525.734776][T13937] ? kasan_save_free_info+0x3b/0x60 [ 525.734793][T13937] ? __kasan_slab_free+0x5f/0x80 [ 525.734814][T13937] ? kfree+0x2f8/0x6e0 [ 525.734828][T13937] ? tomoyo_path_number_perm+0x470/0x580 [ 525.734847][T13937] ? security_file_ioctl_compat+0x9b/0x240 [ 525.734868][T13937] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 525.734900][T13937] kasan_save_track+0x14/0x30 [ 525.734921][T13937] kasan_save_free_info+0x3b/0x60 [ 525.734938][T13937] __kasan_slab_free+0x5f/0x80 [ 525.734958][T13937] kfree+0x2f8/0x6e0 [ 525.734973][T13937] ? tomoyo_path_number_perm+0x470/0x580 [ 525.734992][T13937] ? tomoyo_path_number_perm+0x470/0x580 [ 525.735010][T13937] tomoyo_path_number_perm+0x470/0x580 [ 525.735030][T13937] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.735061][T13937] ? find_held_lock+0x2b/0x80 [ 525.735080][T13937] ? hook_file_ioctl_common+0x144/0x410 [ 525.735104][T13937] ? __fget_files+0x20e/0x3c0 [ 525.735127][T13937] ? __fput_deferred+0x470/0x480 [ 525.735146][T13937] security_file_ioctl_compat+0x9b/0x240 [ 525.735168][T13937] __ia32_compat_sys_ioctl+0xc3/0x370 [ 525.735190][T13937] __do_fast_syscall_32+0xe8/0x680 [ 525.735208][T13937] do_fast_syscall_32+0x32/0x80 [ 525.735225][T13937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.735246][T13937] RIP: 0023:0xf70ed579 [ 525.735259][T13937] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 525.735275][T13937] RSP: 002b:00000000f54bc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 525.735291][T13937] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000008914 [ 525.735302][T13937] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 525.735313][T13937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.735323][T13937] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 525.735334][T13937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.735349][T13937] [ 526.403101][ T64] Bluetooth: hci1: command 0x0406 tx timeout