last executing test programs: 10.987875044s ago: executing program 2 (id=1921): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0x1}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000002ac0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRES32=r4], 0xa8) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}}}, 0x24}}, 0x240400c0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, 0x0, 0x0, 0x4000080) 9.82464899s ago: executing program 3 (id=1925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001ffa60045000000", 0x1c}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e3", 0x1f}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000180)={0x0, 0x0, "a4cd91", 0x9}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f", @ANYRESDEC], 0x74}}, 0x0) 8.849344974s ago: executing program 0 (id=1926): r0 = openat$pfkey(0xffffff9c, 0x0, 0x84c42, 0x0) r1 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0}, 0x20004081) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x11) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffdc5, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080015}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x4f9a, &(0x7f0000000740)={0x0, 0x5a79, 0x10100, 0x1, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r12 = io_uring_setup(0x67bb, &(0x7f0000000280)) io_uring_enter(r12, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac020000", @ANYRES16, @ANYBLOB, @ANYRES64], 0x2ac}, 0x1, 0x0, 0x0, 0x200448c1}, 0x0) 8.0668153s ago: executing program 0 (id=1927): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x3, 0x102, 0x2, {0xdf, 0x81, 0x3, 0xc4ea}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x8000000000000001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x20000000) sendmsg$key(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) 7.556895046s ago: executing program 3 (id=1929): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="019b79bd7000fbdbdf25010000002b6f3cf88517a2fc000000001c00078018000180084001002f8e3f509a0531d0238ad3f19e4d85bdba8e6116b98e8455fc66b84ca5bb103e366111e7621f8c22ac1990a91f316f1d9b31c9f38c4fd71aace73e387aa7c8a3a8b868e8a4", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 6.973043371s ago: executing program 0 (id=1930): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x24, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket(0xa, 0x3, 0x87) sendto(0xffffffffffffffff, 0x0, 0x0, 0x400c1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x8916, &(0x7f0000000000)) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x3b, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.972690466s ago: executing program 3 (id=1931): chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r4, 0x289e0cb5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 6.397853188s ago: executing program 2 (id=1933): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x300, @empty}}, 0x300, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 6.054729933s ago: executing program 1 (id=1934): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="019b79bd7000fbdbdf25010000002b6f3cf88517a2fc000000001c00078018000180084001002f8e3f509a0531d0238ad3f19e4d85bdba8e6116b98e8455fc66b84ca5bb103e366111e7621f8c22ac1990a91f316f1d9b31c9f38c4fd71aace73e387aa7c8a3a8b868e8a4", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0xee01, &(0x7f0000000000)={0x10001, 0x5, 0x0, 0x4}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3, 0x12) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000000080), &(0x7f0000000040)=0x4) r6 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000005d80)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}], 0x1, 0x4040040) write$cgroup_pid(r6, &(0x7f00000004c0), 0x24) 5.856246704s ago: executing program 1 (id=1935): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5efe) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x43, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000001000)="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", &(0x7f0000000300)="d6ad9b91f34a659538cc402705f70444e6b5656a0ec546d6d903"}}, &(0x7f0000bbdffc)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=fscach']) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 5.428658278s ago: executing program 2 (id=1936): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0}) r1 = io_uring_setup(0xaae, &(0x7f0000000400)={0x0, 0xbfffeffb, 0x800, 0x20000007, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2300000000000019, &(0x7f00000002c0)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x800, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r6, 0x0, 0x0) write$FUSE_INIT(r6, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b0000000000000000700000000000000010000000000000000000000000000000500000000000000ffffff7f00000000d702000006000000020000000000000003000000000000005e770000000000007303000000000000ffffffffffffff7f001000000000000000100000080000000000000000e0000005000000", @ANYRES32, @ANYRES32, @ANYBLOB="f9980645c8bfacc38e8c4fa86fffffffff0f0000000000000500000000000000000000000000000008000000f50b00006367726f75703200"], 0x0, 0x0, 0x0}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 5.418640309s ago: executing program 0 (id=1937): openat$ppp(0xffffffffffffff9c, 0x0, 0x101940, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x40, 0x7, 0x2, 0x401, {{0x21, 0x4, 0x3, 0x2f, 0x84, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x3, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x200}, {@private=0xa010102, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x4b, 0x1, 0x2, [{@empty, 0x9}, {@private=0xa010102, 0x8}]}, @ssrr={0x89, 0x17, 0xcc, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @rand_addr=0x64010101]}, @noop, @lsrr={0x83, 0x13, 0x73, [@private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1]}, @generic={0x5, 0x12, "d7802201f2d0a236131d43990b2f9f20"}, @end]}}}}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x14, 0xd0, 0x1, 0xb, [{@multicast1}, {@local, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x72, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x48}, {@broadcast, 0x8}, {@remote, 0x1}, {@local, 0x4}]}, @cipso={0x86, 0x1d, 0x0, [{0x1, 0xa, "77f4be982e3e1afe"}, {0x2, 0x3, '-'}, {0x6, 0xa, "b9f0c1e88a3e9b2e"}]}]}}}], 0x9c}, 0x4000) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) accept4(r2, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 5.048573168s ago: executing program 3 (id=1938): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x300, @empty}}, 0x300, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.206779313s ago: executing program 1 (id=1939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0x1, 0x1) syz_open_procfs(r2, 0x0) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0x10c}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4.125842053s ago: executing program 0 (id=1940): r0 = openat$pfkey(0xffffff9c, 0x0, 0x84c42, 0x0) r1 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0}, 0x20004081) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x11) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffdc5, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080015}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x4f9a, &(0x7f0000000740)={0x0, 0x5a79, 0x10100, 0x1, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r12 = io_uring_setup(0x67bb, &(0x7f0000000280)) io_uring_enter(r12, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac020000", @ANYRES16, @ANYBLOB, @ANYRES64], 0x2ac}, 0x1, 0x0, 0x0, 0x200448c1}, 0x0) 4.056270443s ago: executing program 2 (id=1941): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsopen(0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) ioctl$int_in(r2, 0x5421, 0x0) shutdown(r2, 0x1) syz_io_uring_setup(0x10b, 0x0, &(0x7f0000000340), 0x0) syz_clone(0x80000000, &(0x7f0000000140)="3a1ce2ffbe423fe0d32869b5f5368e31fce2865ccaf341441c1b9e6d6d4b79d44e7a0c3df53056669934fde1a2da9d0126d87825e62ef07c2307ef182260a21cb57afeb0ce8d1ebae85d5d7697254348d894ea900d6923429bf905b3db16f2fc413b49fc174f2ddebc901a3b977caf180aa823", 0x73, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000400)="cbd9cfccdb3a975bd8864c6535db5e6f4cc0be8110bc7d3d87ce2ca3ba21c80a63e146e31435c80dfb2d0b3f697ec937b1d37bc97bc7c78c02cd84233b67417e28fbe44186ca073eaf5edb8aaa4a07eabf14321a5c5faac3aa3a5f20f6240700be69d3d3386224f735") r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r4 = syz_open_dev$sg(&(0x7f0000000100), 0xf3c, 0x8630644572849689) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040)=0x8000) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7, 0x600000c, 0x0, 0x3}) 2.616182815s ago: executing program 0 (id=1942): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0x1}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000002ac0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="00511ec4f768b5dc13ffae063c01f45f3d30348bb125bae95634594ca07242efefc348e89e00faf9b2e3701261ef1263fa90880f8845de98ae5a0c67ef71a8131a0fb0394530755c52bae04f411ed900caaa5f853b12ac3432e37ccef3a990f35ab8a54ed0f8d9d0cefb8d2d67fab6431ad89d477bb18c36f2eaa7ae481fb814226e34aee60bd1c1b0ef59d49bd56178e297d770073ef432b8a18938d140614680e4f750eb414f3f70fc01c2631be82122cc945dfc35ce3acff63e3aec557756a0016975c28892e848cf27f26207f04295de9559a2f489df7b9a7fdf200267cc247f9f104d3688c42f61c3320b756845bf7b46b3d552ad6950a5bdbe1a253d6c24143e5d15439d40084dfe9cca7ee7906ee4c5a9b4bf7d5ec3167416bf2b432c7dde7f6fbbe93107de1dccbb5f6ac37c8e254a3cf305d69328fa2b051b2b5f3c18b7d145ba6612e95bcf2adf7f05919c974f9c6e85509b39584a3a3fed964750ae5113a2d730a17cba71de14b6dfa153ee63502b42e8a27095b4b7136692b8aca0cdb4026162932e82ad4876e9ce04b310e5e1b4a9e0ee0ccd8f774cf7ce27d66b263dcd30273e99d58f8be084c25747c08161f636db64d587f2a5bdb869aadb1caa8162a78b5c8bb2f22eb24e692305dad7d0eca5de03cd9f196d1c8e350103b8bb0536be5ca7bc9ca048eeb794f480b27939bb03e8917dfd982e373926b606221613d0f2d5164008894b29fa760f4702eda958e2da9851efc78e5167e585903de9af22fbdae548c01989a3ba69805aedceba17e1d2815594af976118af7b247e88e133e6f3745e5abc7cf41f035f01a9ebb9ba19948ed912955b117896fd91eeb61394d73a2daf3806517740e2f68480e3ddc4c7911af7b113bd7e87f8cf9117374bee2c3ce2555406c6190379f6b23d29dc3d473ffa41888e1438e791e21fc2c11f27e41e3c40c6addeb86bd1cef181cbab79dfdd5c707d515d7f8914b6b2ff65cf32ee0fac33d0151f0cb76facc4b4baf1fd1333c14f765aa176d2077d45730f86b7f7779fb4bcf8ed09f1efade49a902b0d74b38e5f5d25d9192e19da7464a9ca24fc5227027aff5b92532147d9d2b6731005c110e53647c3387e72cdaf486b626ce175c2e12116baf15857281b6ed343521685b961e23ff9aaa52236a4d98ddf074d6997b1b758e1a3d781f53aa0c43bb785935dc404177b961a5d708416e849cffeb6d496261131269060266c76b35fc8535599f0c5ad1d10a2840e7362ff5398adf999f8157ece1ce94a755db661733ef303d00a507f0ce14463b50e6a0e6e97a45a285610b36e933d782d796e5e2fa4778058948a00eccc4fb2217d42946d82a9805916e25c66135e2b68a4155091121a918042e88828859f701b4d9269bc525fa66243fcbfd08a45d7bb8e2b55c32f97e5836d443345e5d719c6190ad85d5c35b24d64efe9065ddc86609af6c69f01ff6127aff41fbc14fbfdfd648354191b9b624dc3d864fa12a1a177a8871957084ae54261fa8e3348265a5ae1d6740901aebe4155012b2db03f99a2e81e1348e2efdfe79549e5901ac98d881751b3942d8d9cd3664e4f40760d29a47271c0402baa9708c35db562990b15f0645525d55ba2399d590a4f50d77922defb411d16346b2f4e2da7addfe7cb646ff3e59895593268612ac7cd742ce5a4645ffa23c9882b32333beb6cc4e72a3b0a1b2f82f307dfa52f919bdc772dae4537a26020583514c4780b2a9fdaed0c2dbc7fdc613ebd4efde6d448afa12bff952258776fa704925ae8ebd110f7b71c27f67d4f4a7da84ed326491b23ecb0b7a50a47e5b6513d3a9123cbb64d688f7292385f00c6f88e10ab95f8c4142c7483a8c2b11e75512d4f5db1c31d7adbcc191fe7ebb70dd04f7fe999fe5ae8972538d43ef57102817eb53d1d9e7bda455cca190e0691e838453517e16194a578e43c11665acec5c49aee9d820aad1188bfe9dbd9edded42c22a16d7829da18a6bbf034315f379877ece05c9a809803faf5f9b0c6b8882125649e02e006858850b669c19e0fb7204f1aed8f2d664243638e8955287b4743f3c73effc85a4c1d92544750a780cf8f4a465c7895f53eb8ec1ab2bcb99aa2b4b9052eadbc8d89f9bbc437818a72e14fa032c01e0737545591e68eb4a48c67e5064b5ebbb0f99e40a4353049a165dc7feef528a768b14a08ef3c62d9224ddb5238fbbd93a805271c60c6bada374eb091d8131f91ed7d81ec9acbe49ff6541bdbc8b1d4b1a1ad83ed0420a4d4ad12417a3d67350357dd329fce6f3effee49cecf5fb63102a10d88813821e22ab404cc31ea38a65dc6d68151ba73e13975eaafe7e05ffc3c605a6ea8242a606083610635dd7607e3cf73b80d60cd154b1507d3419a25aa21b29cacc6b4398f9c98e4ccd104144385972aeb15a31a44f1d8f0c34c4edcb7c1f57bb682b971b82ec8993c886f9d5e47c32610afb79e6a37b4fda5a4eaed80fad1a0448e90663c91b8fbb7b8e824357ddb633a68e08628a6756f0b77a9d29b2248cf04c881768af3139fb0306d317d92f69c656227ce713a65d1e7cf86ce9a5738048dc2369d829a7b836d33884cbf369ed3a402096df3765a13b0ef4f26100666362c2218996106f86dc3c2e05b0bbc9c72bd7ba520489a52fd5cbe238c3b5b4c72001f4f85144846d3ff1f0c994854cd575af011abb41b8ab4cbc5c0fae33c558aebadc53d1ba4eb946000142fbdadff7ed449743e49484c3a6fd7845d60a0e2295b503299a25441860955bf5062c8c02d77f1227e529ea22acd0416392c25e62ccf63f9df2bab4ca6b587e73d7a39cba38d3e42a24c921ba66e68aa100bd6719d3eb76aa7d29b97ec961d90cb491b7a6aa33f848916034a411cdc1d8727168360ec8b1f4948c7b52c905a929662c9888a1368570accb36f5ae3a4f7ac3146ec43baf7b76e1f18bb34603216e346304d76bd7adce85a3b341d372639b7fa7cc427cc60c641ef7ee93c6350220f44183dba8cbe09a74d06935f52c90d3e16bcb53ab262b1d56ae9ff2f7c4bb34b33a40d977af05bb25f37952226381bca2cf15af574bbb6cb85eb693a46a3d9df8cd1bad7778579a9dd11f8077028b2e8e15e5b836bd96a1812f75a8db5ad3fb960b77e15c92abf7098909e0f55690bf05304d549afb01305a807a36f5cb73cbd97f2fc677e8ad7db19a196fb8e95e6e379db93394bb268a203cff322dc4bdfb1f3da4a29aa9f8480f3e7a36a2e30433bedfbb8273158781326afe8161220f1610cbf406f768fa5633b20b77879df37495758443e0dcdd90f38944cabe3524256f4f56cfcf2719622a6d41660d94b1f97dd18d091044de0197a1237ecd6204b6f34d5dffe90ace7efe764eef4b30d23bd318de841830d34949b60a6448fc0fb8bd10c591b9dda31220fcfbbe7fe03194da36ba89b59b08dde4ddabb0356ae85db00cbc4fff77e28aa42e0ff192995c9eae5f208e7f9901edab0d57ebbc95083bea57dd119fe11fab3b365f4b74bd8397b15ad297f3419b0d4b8df639e2f62025445215c2f39c05bc82033bb6e351cb220faec7de71544c8f27f0535f6fca3c5a49179596883c0f0b2eb500a62f961a83f52d603a679dc3827d5356eadbfed80a603ae292f1854d6cbb2c8d9b61a295a1d87f3eb10d3706fd00e88c76c00601cb18223fcd27d4f7025a1543abb148d634d2d6592abb45d1968be3dc0ac7e691669b2588374d188d7f71dc45353c8f3a77285b836cc8aaff62fb79d917e4f45a38686ba18fbaada1800470bbb89e8876c2dd2bd5013135548503bcb041b1a15e6607ef0e265153699e81981f8f22990667f57c4f3915fbebf18292c1d636a4ba40e0322ac94a503386ce14434d185d78e9a7a5bb8847bafe6649db3947103ff246d1f2244a46f90cc0f0b4e018ad64b2c2f45a016d0eaf08ce1b48a6d02110ffb3ef2b4c3f56c8eeda503780ca51fae8ba602ecfcc541eed902a946ddc00f391a08f7d1ebcdd0394dd0b77345c416cbded4aad8f7d9df2c597fd25538356e57e7f110835b6a9aaa4c8971a4845602e644958c155d4784e6f273f594771706f33f5727778e3d4a39de0c5061a8efddc1a503656a7fb4cc499cfda606da6674b955b431c628ad5c2f1232506f160a5e868efbdecbf826c883e9519494b79fdc2bdd60223fba4384a977ee24512bdd6739acc3784e82e7b3f65013fa506dce1375ff9b5537c3843e47ada77c1721d0708e09d69ceb642fa2d997d4cd8788c491816260a7d376565eacd2f634589a93741d4dc8d9c8bd9d55fd6e19eac65157385b262cfb0aa00e4f139bcfc1b4a49797dbfae131fa9bbd868b699e7a8234d6f5a36d3024d305fbd63ba18c689efe2999", @ANYRES32=r4], 0xa8) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}}}, 0x24}}, 0x240400c0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, 0x0, 0x0, 0x4000080) 2.615864925s ago: executing program 2 (id=1943): socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_CONNECT={0x10, 0x36, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000600)=@in={0x2, 0x4e23, @multicast2}}) syz_io_uring_setup(0x487, &(0x7f00000003c0)={0x0, 0x10059c4, 0x80, 0x1000, 0x5d0}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) r2 = syz_clone(0x11000200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_open_dev$sg(&(0x7f0000000000), 0x3f61, 0x101) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xcc19, 0x13000, 0x0, 0x301}, &(0x7f0000000100), &(0x7f0000000440)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlockall(0x7) 2.606058468s ago: executing program 3 (id=1944): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x300, @empty}}, 0x300, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.572049505s ago: executing program 1 (id=1945): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000400000000000000010000009500190000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 924.348192ms ago: executing program 1 (id=1946): io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x40) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x29c780}) io_uring_enter(0xffffffffffffffff, 0x3518, 0xaddf, 0x2, 0x0, 0x1517f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x6) 843.931525ms ago: executing program 2 (id=1947): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x300, @empty}}, 0x300, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 114.416294ms ago: executing program 3 (id=1948): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) r4 = syz_io_uring_setup(0xa4f, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2110}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1949): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) gettid() r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r4, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) kernel console output (not intermixed with test programs): th. [ 677.187615][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 677.623124][T12564] IPv6: NLM_F_REPLACE set, but no existing node found! [ 677.758594][T12566] netlink: 'syz.0.1354': attribute type 4 has an invalid length. [ 677.762421][T12566] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1354'. [ 681.058690][T12596] overlayfs: failed to resolve './bus': -2 [ 681.446927][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'. [ 684.357653][T12620] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 684.360390][T12620] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 684.363812][T12620] vhci_hcd vhci_hcd.0: Device attached [ 684.977650][ T6008] usb 44-1: SetAddress Request (46) to port 0 [ 684.988337][ T6008] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd [ 685.005497][T12623] netlink: 'syz.0.1370': attribute type 4 has an invalid length. [ 685.008957][T12623] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1370'. [ 685.419662][T12621] vhci_hcd: connection reset by peer [ 685.422311][ T6227] vhci_hcd vhci_hcd.3: stop threads [ 685.424563][ T6227] vhci_hcd vhci_hcd.3: release socket [ 685.427016][ T6227] vhci_hcd vhci_hcd.3: disconnect device [ 685.959746][T12634] netlink: 'syz.2.1371': attribute type 30 has an invalid length. [ 685.960692][T12636] netlink: 'syz.2.1371': attribute type 30 has an invalid length. [ 687.014950][T12642] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 687.018463][T12642] UDF-fs: Scanning with blocksize 2048 failed [ 687.027597][T12642] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 687.030881][T12642] UDF-fs: Scanning with blocksize 4096 failed [ 687.496931][T12648] ntfs3(nullb0): Primary boot signature is not NTFS. [ 687.506294][T12648] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 687.596796][T12651] libceph: resolve '400' (ret=-3): failed [ 687.978770][T12659] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 687.980997][T12659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 687.983889][T12659] vhci_hcd vhci_hcd.0: Device attached [ 688.066140][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 688.206409][T12664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 688.295380][ T6057] usb 40-1: SetAddress Request (42) to port 0 [ 688.298082][ T6057] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 689.640503][T12660] vhci_hcd: connection reset by peer [ 689.649477][ T4904] vhci_hcd vhci_hcd.1: stop threads [ 689.651992][ T4904] vhci_hcd vhci_hcd.1: release socket [ 689.654716][ T4904] vhci_hcd vhci_hcd.1: disconnect device [ 690.007134][T12688] ALSA: mixer_oss: invalid OSS volume '' [ 690.023921][T12688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 690.026712][T12688] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 690.030367][T12688] vhci_hcd vhci_hcd.0: Device attached [ 690.099459][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 690.279860][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 690.284388][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.289936][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.293873][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 690.321563][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 690.325539][ T24] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 690.328967][ T24] usb 7-1: Manufacturer: syz [ 690.350076][ T24] usb 7-1: config 0 descriptor?? [ 690.379553][ T6008] usb 44-1: device descriptor read/8, error -110 [ 690.525314][T12689] vhci_hcd: connection closed [ 690.528571][ T4904] vhci_hcd vhci_hcd.3: stop threads [ 690.534056][ T4904] vhci_hcd vhci_hcd.3: release socket [ 690.537016][ T4904] vhci_hcd vhci_hcd.3: disconnect device [ 690.676482][T12696] netlink: 'syz.0.1383': attribute type 30 has an invalid length. [ 690.733644][T12697] netlink: 'syz.0.1383': attribute type 30 has an invalid length. [ 690.798821][ T6008] usb usb44-port1: attempt power cycle [ 690.862487][ T61] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 690.866151][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.869612][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.931766][ T24] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 690.972799][ T24] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 691.183201][ T24] usb 7-1: USB disconnect, device number 7 [ 692.833931][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 693.114168][T12720] kAFS: Can only specify source 'none' with -o dyn [ 693.489720][ T6008] usb usb44-port1: unable to enumerate USB device [ 693.548238][ T6057] usb 40-1: device descriptor read/8, error -110 [ 693.615162][ T40] audit: type=1326 audit(1769257495.562:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 693.629425][ T40] audit: type=1326 audit(1769257495.562:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 693.639039][ T40] audit: type=1326 audit(1769257495.562:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 693.648858][ T40] audit: type=1326 audit(1769257495.562:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 693.658308][ T40] audit: type=1326 audit(1769257495.562:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 693.945427][ T6057] usb usb40-port1: attempt power cycle [ 694.041178][T12730] ALSA: mixer_oss: invalid OSS volume '' [ 694.043400][ T40] audit: type=1326 audit(1769257495.992:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 694.060879][ T40] audit: type=1326 audit(1769257495.992:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 694.071917][ T40] audit: type=1326 audit(1769257496.042:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 694.088706][T12728] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 694.120475][T12728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 694.153005][ T40] audit: type=1326 audit(1769257496.101:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 694.192052][T12730] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 694.194904][T12730] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 694.200237][T12730] vhci_hcd vhci_hcd.0: Device attached [ 694.241041][ T40] audit: type=1326 audit(1769257496.101:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.1388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 694.369342][T12731] vhci_hcd: connection closed [ 694.388395][ T6227] vhci_hcd vhci_hcd.2: stop threads [ 694.393087][ T6227] vhci_hcd vhci_hcd.2: release socket [ 694.405944][ T6227] vhci_hcd vhci_hcd.2: disconnect device [ 694.459760][T12725] bond2: (slave veth3): Enslaving as an active interface with a down link [ 694.463782][ T6035] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 695.027692][ T6057] usb usb40-port1: unable to enumerate USB device [ 695.414686][T12747] tipc: Started in network mode [ 695.416906][T12747] tipc: Node identity 4, cluster identity 4711 [ 695.419276][T12747] tipc: Node number set to 4 [ 695.524817][T12753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1395'. [ 695.605607][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 696.056303][T12761] overlayfs: missing 'lowerdir' [ 696.861670][T12764] netlink: 'syz.0.1397': attribute type 2 has an invalid length. [ 697.684034][T12775] overlay: Unknown parameter '/' [ 697.688829][T12775] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 697.726052][T12775] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 697.729572][T12775] overlayfs: failed to look up (tracing) for ino (-66) [ 699.103853][T12779] overlayfs: missing 'lowerdir' [ 700.878315][T12797] pim6reg: entered allmulticast mode [ 701.888327][T12792] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 702.432710][T12815] netlink: 'syz.3.1407': attribute type 30 has an invalid length. [ 702.503745][T12814] netlink: 'syz.3.1407': attribute type 30 has an invalid length. [ 703.002397][T12821] tipc: Started in network mode [ 703.045643][T12821] tipc: Node identity 4, cluster identity 4711 [ 703.053274][T12821] tipc: Node number set to 4 [ 703.392367][T12827] overlayfs: missing 'lowerdir' [ 705.163944][T12840] netlink: 'syz.2.1411': attribute type 10 has an invalid length. [ 705.202188][T12840] team0: Cannot enslave team device to itself [ 705.377508][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1413'. [ 705.616162][T12843] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 705.625237][T12843] UDF-fs: Scanning with blocksize 2048 failed [ 705.637696][T12843] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 705.644890][T12843] UDF-fs: Scanning with blocksize 4096 failed [ 706.226314][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 706.383736][T12856] overlayfs: missing 'lowerdir' [ 711.074924][T12914] overlayfs: missing 'workdir' [ 712.420732][T12900] netlink: 'syz.0.1421': attribute type 4 has an invalid length. [ 712.424067][T12900] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1421'. [ 712.983553][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 713.301552][T12943] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 713.304182][T12943] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 713.317577][T12943] vhci_hcd vhci_hcd.0: Device attached [ 713.599960][T12951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 713.617592][ T24] usb 44-1: SetAddress Request (50) to port 0 [ 713.631688][ T24] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd [ 713.959849][T12973] ptrace attach of "/syz-executor exec"[5939] was attempted by "/syz-executor exec"[12973] [ 713.966331][T12968] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1427'. [ 713.981384][T12968] netlink: 'syz.2.1427': attribute type 21 has an invalid length. [ 713.984523][T12968] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1427'. [ 713.997729][T12968] netlink: 'syz.2.1427': attribute type 4 has an invalid length. [ 714.000547][T12968] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1427'. [ 714.043355][T12968] batadv2: entered promiscuous mode [ 714.049610][T12968] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 715.471636][T12944] vhci_hcd: connection reset by peer [ 715.473962][ T12] vhci_hcd vhci_hcd.3: stop threads [ 715.476134][ T12] vhci_hcd vhci_hcd.3: release socket [ 715.481238][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 715.704974][T12981] overlayfs: missing 'lowerdir' [ 715.821389][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 718.182626][T13010] kvm: pic: non byte read [ 718.184520][T13010] kvm: pic: non byte read [ 718.186646][T13010] kvm: pic: non byte read [ 718.188676][T13010] kvm: pic: non byte read [ 718.190655][T13010] kvm: pic: non byte read [ 718.192904][T13010] kvm: pic: non byte read [ 718.236618][T13010] kvm: pic: non byte read [ 718.238587][T13010] kvm: pic: non byte read [ 718.244224][T13010] kvm: pic: non byte read [ 718.246027][T13010] kvm: pic: non byte read [ 718.719355][ T24] usb 44-1: device descriptor read/8, error -110 [ 718.788309][T13020] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 718.790557][T13020] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 718.799091][T13020] vhci_hcd vhci_hcd.0: Device attached [ 718.836776][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 718.911067][T13020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1437'. [ 718.979419][T13020] smc: net device ip6_vti0 erased user defined pnetid SYZ1 [ 718.992544][T13020] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 719.039220][ T6057] usb 41-1: new high-speed USB device number 7 using vhci_hcd [ 719.111988][ T24] usb usb44-port1: attempt power cycle [ 719.229851][T13032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1438'. [ 719.680840][ T24] usb usb44-port1: unable to enumerate USB device [ 719.794698][T13021] vhci_hcd: connection reset by peer [ 719.798203][ T6866] vhci_hcd vhci_hcd.2: stop threads [ 719.800787][ T6866] vhci_hcd vhci_hcd.2: release socket [ 719.803440][ T6866] vhci_hcd vhci_hcd.2: disconnect device [ 720.921108][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 723.984203][T13062] netlink: 'syz.1.1452': attribute type 30 has an invalid length. [ 724.038772][T13063] netlink: 'syz.1.1452': attribute type 30 has an invalid length. [ 724.161849][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 724.181043][ T6057] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 724.527866][T13069] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 724.529968][T13069] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 724.556450][T13069] vhci_hcd vhci_hcd.0: Device attached [ 724.891344][ T6035] usb 38-1: SetAddress Request (50) to port 0 [ 724.893614][ T6035] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 724.937128][T13072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 725.232988][T13070] vhci_hcd: connection reset by peer [ 725.235402][ T1065] vhci_hcd vhci_hcd.0: stop threads [ 725.237532][ T1065] vhci_hcd vhci_hcd.0: release socket [ 725.239806][ T1065] vhci_hcd vhci_hcd.0: disconnect device [ 726.084581][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 726.171314][T13090] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 726.174060][T13090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 726.183019][T13090] vhci_hcd vhci_hcd.0: Device attached [ 726.212866][T13090] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 726.482004][ T7349] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 726.678458][T13090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 726.715422][T13098] tipc: Started in network mode [ 726.723738][T13098] tipc: Node identity 4, cluster identity 4711 [ 726.731975][T13098] tipc: Node number set to 4 [ 727.036831][T13097] bond2: (slave geneve2): making interface the new active one [ 727.050722][T13097] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 727.132131][T13091] vhci_hcd: connection reset by peer [ 727.141865][ T12] vhci_hcd vhci_hcd.2: stop threads [ 727.159994][ T12] vhci_hcd vhci_hcd.2: release socket [ 727.172467][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 727.839211][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 727.956014][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1448'. [ 728.232052][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 728.825651][T13127] netlink: 'syz.2.1456': attribute type 30 has an invalid length. [ 728.872906][T13128] netlink: 'syz.3.1449': attribute type 4 has an invalid length. [ 728.876178][T13128] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1449'. [ 728.876826][T13130] netlink: 'syz.2.1456': attribute type 30 has an invalid length. [ 728.981984][T13131] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 728.984199][T13131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 729.008056][T13131] vhci_hcd vhci_hcd.0: Device attached [ 729.038107][T13134] comedi comedi0: Minor 2 could not be opened [ 729.670046][T13132] vhci_hcd: connection closed [ 729.672920][ T4734] vhci_hcd vhci_hcd.0: stop threads [ 729.677375][ T4734] vhci_hcd vhci_hcd.0: release socket [ 729.679899][ T4734] vhci_hcd vhci_hcd.0: disconnect device [ 730.057396][ T6035] usb 38-1: device descriptor read/8, error -110 [ 730.309249][T13151] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 730.311761][T13151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 730.373216][T13151] vhci_hcd vhci_hcd.0: Device attached [ 730.523804][ T6035] usb usb38-port1: attempt power cycle [ 731.183835][T13162] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.213582][T13162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 731.393511][ T6035] usb usb38-port1: unable to enumerate USB device [ 731.629673][ T7349] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 731.734702][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 732.110481][T13168] netlink: 'syz.0.1463': attribute type 2 has an invalid length. [ 732.565175][ T24] usb 42-1: SetAddress Request (38) to port 0 [ 732.579358][T13153] vhci_hcd: connection closed [ 732.579610][ T13] vhci_hcd vhci_hcd.2: stop threads [ 732.582984][ T24] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 732.589650][ T13] vhci_hcd vhci_hcd.2: release socket [ 732.592256][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 732.603902][ T24] usb 42-1: enqueue for inactive port 0 [ 732.712116][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 732.994494][ T24] usb usb42-port1: attempt power cycle [ 733.182420][T13181] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 733.186185][T13181] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1466'. [ 733.586151][ T24] usb usb42-port1: unable to enumerate USB device [ 735.058821][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 735.812731][T13222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1476'. [ 735.857691][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 735.884871][T13227] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 735.887720][T13227] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 735.891622][T13227] vhci_hcd vhci_hcd.0: Device attached [ 736.022908][T13233] autofs: Unknown parameter '0x0000000000000000' [ 736.171057][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 736.232013][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 736.325167][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.329127][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.334130][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.338488][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.342366][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.347267][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.351470][T13229] vhci_hcd: connection closed [ 736.351838][ T6866] vhci_hcd vhci_hcd.2: stop threads [ 736.357733][ T6866] vhci_hcd vhci_hcd.2: release socket [ 736.360745][ T6866] vhci_hcd vhci_hcd.2: disconnect device [ 736.378302][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.382863][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.392459][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.399243][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.403182][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.408460][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.412580][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.416490][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.421875][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.427877][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.432099][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.440116][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.447580][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.451497][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.458017][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.463695][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.467732][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.473488][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.479611][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 736.483779][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 736.487472][ T24] usb 5-1: Product: syz [ 736.490541][ T24] usb 5-1: Manufacturer: syz [ 736.492663][ T24] usb 5-1: SerialNumber: syz [ 736.498418][ T24] usb 5-1: config 0 descriptor?? [ 736.520394][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 736.925176][T13243] netlink: 'syz.3.1479': attribute type 4 has an invalid length. [ 736.927712][T13243] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1479'. [ 738.149297][T13261] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 738.151495][T13261] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 738.154534][T13261] vhci_hcd vhci_hcd.0: Device attached [ 738.419479][T13262] vhci_hcd: connection closed [ 738.419812][ T1200] vhci_hcd vhci_hcd.2: stop threads [ 738.423748][ T1200] vhci_hcd vhci_hcd.2: release socket [ 738.425556][ T6027] usb 42-1: SetAddress Request (43) to port 0 [ 738.428341][ T6027] usb 42-1: new SuperSpeed USB device number 43 using vhci_hcd [ 738.428428][ T1200] vhci_hcd vhci_hcd.2: disconnect device [ 738.445640][ T6027] usb 42-1: enqueue for inactive port 0 [ 738.468851][ T24] usb 5-1: USB disconnect, device number 6 [ 738.473071][ T24] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 739.721547][ T6027] usb usb42-port1: attempt power cycle [ 739.962143][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 740.313336][ T6027] usb usb42-port1: unable to enumerate USB device [ 741.146087][T13300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 741.149772][T13300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 741.987103][ T29] IPVS: starting estimator thread 0... [ 742.106686][T13302] IPVS: using max 44 ests per chain, 105600 per kthread [ 742.242040][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 742.358131][T13307] netlink: 'syz.2.1491': attribute type 4 has an invalid length. [ 742.360682][T13307] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1491'. [ 743.086085][T13326] comedi comedi0: Minor 2 could not be opened [ 743.586179][T13334] netlink: 'syz.2.1492': attribute type 13 has an invalid length. [ 743.898884][T13336] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 743.901950][T13336] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 743.961107][T13336] vhci_hcd vhci_hcd.0: Device attached [ 744.140149][T13334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 744.316598][ T29] usb 40-1: SetAddress Request (46) to port 0 [ 744.454052][ T29] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 744.668849][T13339] vhci_hcd: connection reset by peer [ 744.670860][ T8895] vhci_hcd vhci_hcd.1: stop threads [ 744.672524][ T8895] vhci_hcd vhci_hcd.1: release socket [ 744.674260][ T8895] vhci_hcd vhci_hcd.1: disconnect device [ 744.949311][ T6027] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 745.130000][ T6027] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 745.133800][ T6027] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 745.142663][ T6027] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 745.146526][ T6027] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 745.157277][ T6027] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 745.177688][ T6027] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 745.181676][ T6027] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 745.185145][ T6027] usb 8-1: Product: syz [ 745.187002][ T6027] usb 8-1: Manufacturer: syz [ 745.218433][ T6027] cdc_wdm 8-1:1.0: skipping garbage [ 745.220870][ T6027] cdc_wdm 8-1:1.0: skipping garbage [ 745.232527][ T6027] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 745.235198][ T6027] cdc_wdm 8-1:1.0: Unknown control protocol [ 745.482727][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'. [ 745.541345][T13365] netlink: 'syz.1.1500': attribute type 30 has an invalid length. [ 745.592925][T13363] netlink: 'syz.1.1500': attribute type 30 has an invalid length. [ 746.854980][ T6057] usb 8-1: USB disconnect, device number 10 [ 747.030667][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 747.030678][ T40] audit: type=1326 audit(1769257549.014:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 747.162487][ T40] audit: type=1326 audit(1769257549.024:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 747.205571][ T40] audit: type=1326 audit(1769257549.024:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 747.212715][ T40] audit: type=1326 audit(1769257549.024:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 747.219921][ T40] audit: type=1326 audit(1769257549.024:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 747.226789][ T40] audit: type=1326 audit(1769257549.024:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 747.234429][ T40] audit: type=1326 audit(1769257549.024:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 747.241330][ T40] audit: type=1326 audit(1769257549.044:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 747.337902][ T40] audit: type=1326 audit(1769257549.044:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 747.419511][ T40] audit: type=1326 audit(1769257549.064:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.0.1503" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 748.668978][T13405] netlink: 'syz.3.1505': attribute type 16 has an invalid length. [ 748.672664][T13405] netlink: 'syz.3.1505': attribute type 17 has an invalid length. [ 748.907890][T13405] tunl0: left promiscuous mode [ 748.950571][T13405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.049137][T13403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 749.051933][T13403] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 749.055846][T13403] vhci_hcd vhci_hcd.0: Device attached [ 749.199239][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 749.199566][T11069] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 750.794879][T13422] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 750.797050][T13422] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 750.819948][T13422] vhci_hcd vhci_hcd.0: Device attached [ 750.960270][T13430] netlink: 'syz.0.1510': attribute type 4 has an invalid length. [ 750.976815][T13430] netlink: 'syz.0.1510': attribute type 4 has an invalid length. [ 751.099585][ T6057] usb 42-1: SetAddress Request (47) to port 0 [ 751.102561][ T6057] usb 42-1: new SuperSpeed USB device number 47 using vhci_hcd [ 751.264711][T13404] vhci_hcd: connection reset by peer [ 751.267679][ T4734] vhci_hcd vhci_hcd.1: stop threads [ 751.270812][ T4734] vhci_hcd vhci_hcd.1: release socket [ 751.273401][ T4734] vhci_hcd vhci_hcd.1: disconnect device [ 751.273652][ T29] usb 40-1: device descriptor read/8, error -110 [ 751.520777][T13425] vhci_hcd: connection reset by peer [ 751.523226][ T4734] vhci_hcd vhci_hcd.2: stop threads [ 751.533111][ T4734] vhci_hcd vhci_hcd.2: release socket [ 751.535602][ T4734] vhci_hcd vhci_hcd.2: disconnect device [ 751.660180][ T29] usb usb40-port1: attempt power cycle [ 751.921648][T13442] netlink: 'syz.0.1511': attribute type 1 has an invalid length. [ 752.056267][T13442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.249668][ T29] usb usb40-port1: unable to enumerate USB device [ 752.333273][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.337934][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.351557][T13438] bond0: (slave veth3): Enslaving as an active interface with a down link [ 752.435226][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 752.435240][ T40] audit: type=1326 audit(1769257554.412:7163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 752.446854][ T40] audit: type=1326 audit(1769257554.412:7164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 752.540056][ T61] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 753.464814][ T61] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 753.467884][ T61] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 753.472338][ T61] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 753.476151][ T61] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 753.479788][ T61] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 753.485278][ T61] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 753.487719][ T61] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 753.493633][ T61] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 753.499357][ T61] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 753.505054][ T61] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 753.514032][ T61] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 753.516428][ T61] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 753.519839][ T61] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 753.524780][ T61] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 753.528337][ T61] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 753.609773][ T61] usb 6-1: string descriptor 0 read error: -22 [ 753.612519][ T61] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 753.616171][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.629827][ T61] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 753.983029][ T6035] usb 6-1: USB disconnect, device number 6 [ 754.247718][T13465] netlink: 107460 bytes leftover after parsing attributes in process `syz.0.1517'. [ 754.283884][ T8895] Bluetooth: hci4: Frame reassembly failed (-84) [ 754.286496][ T8895] Bluetooth: hci4: Frame reassembly failed (-84) [ 754.290000][ T8895] Bluetooth: hci4: Frame reassembly failed (-84) [ 754.696898][T13470] binder: transaction release 13 bad handle 1, ret = -22 [ 756.162173][ T6057] usb 42-1: device descriptor read/8, error -110 [ 756.321230][T11069] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 756.321510][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 756.504840][T13489] bridge0: port 3(erspan0) entered blocking state [ 756.521650][T13489] bridge0: port 3(erspan0) entered disabled state [ 756.527499][T13489] erspan0: entered allmulticast mode [ 756.545645][T13489] erspan0: entered promiscuous mode [ 756.607321][ T6057] usb usb42-port1: attempt power cycle [ 756.764040][T13486] erspan0: left allmulticast mode [ 756.765949][T13486] erspan0: left promiscuous mode [ 756.767857][T13486] bridge0: port 3(erspan0) entered disabled state [ 756.986460][T13495] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 756.988882][T13495] overlayfs: failed to set xattr on upper [ 756.990869][T13495] overlayfs: ...falling back to redirect_dir=nofollow. [ 756.993850][T13495] overlayfs: ...falling back to index=off. [ 756.995736][T13495] overlayfs: ...falling back to uuid=null. [ 757.014650][T13495] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 757.038306][ T40] audit: type=1326 audit(1769257559.021:7165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13490 comm="syz.3.1523" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x0 [ 757.151006][T13497] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 757.153238][T13497] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 757.159719][T13497] vhci_hcd vhci_hcd.0: Device attached [ 757.292032][ T6057] usb usb42-port1: unable to enumerate USB device [ 757.445079][ T6057] usb 40-1: SetAddress Request (50) to port 0 [ 757.448265][T13501] overlay: filesystem on ./bus not supported as upperdir [ 757.454198][ T6057] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 757.801618][ T61] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 757.953838][ T61] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.957940][ T61] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.963176][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 757.967390][ T61] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 757.971407][ T61] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 757.974633][ T61] usb 7-1: Product: syz [ 757.976409][ T61] usb 7-1: Manufacturer: syz [ 757.978327][ T61] usb 7-1: SerialNumber: syz [ 757.984761][ T61] usb 7-1: config 0 descriptor?? [ 758.006912][ T61] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 758.023317][T13267] udevd[13267]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.044923][T13498] vhci_hcd: connection reset by peer [ 758.047043][ T6227] vhci_hcd vhci_hcd.1: stop threads [ 758.049032][ T6227] vhci_hcd vhci_hcd.1: release socket [ 758.050865][ T6227] vhci_hcd vhci_hcd.1: disconnect device [ 758.375337][ T6027] usb 7-1: USB disconnect, device number 8 [ 758.871398][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 759.057661][T13522] wireguard0: entered promiscuous mode [ 759.081270][T13522] wireguard0: entered allmulticast mode [ 760.588079][T13544] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 762.563160][ T6057] usb 40-1: device descriptor read/8, error -110 [ 762.734599][T13555] tunl0: entered promiscuous mode [ 762.748374][T13555] netlink: 'syz.3.1535': attribute type 4 has an invalid length. [ 762.751546][T13555] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1535'. [ 762.927514][T13557] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 762.930056][T13557] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 762.954064][ T6057] usb usb40-port1: attempt power cycle [ 762.960644][T13557] vhci_hcd vhci_hcd.0: Device attached [ 763.057342][ T40] audit: type=1800 audit(1769257565.009:7166): pid=13557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1534" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 763.233396][ T61] usb 42-1: SetAddress Request (51) to port 0 [ 763.236095][ T61] usb 42-1: new SuperSpeed USB device number 51 using vhci_hcd [ 763.328690][T13558] vhci_hcd: connection reset by peer [ 763.331493][ T6227] vhci_hcd vhci_hcd.2: stop threads [ 763.334228][ T6227] vhci_hcd vhci_hcd.2: release socket [ 763.336686][ T6227] vhci_hcd vhci_hcd.2: disconnect device [ 763.535415][ T6057] usb usb40-port1: unable to enumerate USB device [ 763.634277][ T40] audit: type=1326 audit(1769257565.619:7167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 763.642544][ T40] audit: type=1326 audit(1769257565.619:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 763.654782][ T40] audit: type=1326 audit(1769257565.619:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 763.664440][ T40] audit: type=1326 audit(1769257565.619:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 763.715995][ T40] audit: type=1326 audit(1769257565.619:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 763.816759][T13573] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 763.893569][T13573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.959295][T13575] bond0: (slave veth3): Enslaving as an active interface with a down link [ 763.986454][T13576] netlink: 'syz.0.1544': attribute type 4 has an invalid length. [ 763.989079][T13576] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1544'. [ 764.211593][ T40] audit: type=1326 audit(1769257566.119:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 764.221062][ T40] audit: type=1326 audit(1769257566.119:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.3.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 764.328861][T13580] overlay: Unknown parameter '/' [ 764.333620][T13580] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 764.364836][T13580] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 764.368115][T13580] overlayfs: failed to look up (tracing) for ino (-66) [ 766.017713][T13595] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 766.020259][T13595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 766.024190][T13595] vhci_hcd vhci_hcd.0: Device attached [ 766.069124][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 766.072385][T13595] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 766.078276][T13595] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 766.284163][ T6008] usb 43-1: new high-speed USB device number 9 using vhci_hcd [ 766.630348][T13596] vhci_hcd: connection reset by peer [ 766.633133][ T13] vhci_hcd vhci_hcd.3: stop threads [ 766.646113][ T13] vhci_hcd vhci_hcd.3: release socket [ 766.652937][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 766.679447][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1543'. [ 767.291872][T13618] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 767.294089][T13618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 767.305100][T13618] vhci_hcd vhci_hcd.0: Device attached [ 767.604647][ T7349] usb 40-1: SetAddress Request (54) to port 0 [ 767.606782][ T7349] usb 40-1: new SuperSpeed USB device number 54 using vhci_hcd [ 768.324900][ T61] usb 42-1: device descriptor read/8, error -110 [ 768.361964][T13629] netlink: 'syz.0.1547': attribute type 2 has an invalid length. [ 768.548723][T13628] netlink: 'syz.0.1547': attribute type 2 has an invalid length. [ 768.576368][T13629] !: entered promiscuous mode [ 768.725459][ T61] usb usb42-port1: attempt power cycle [ 768.776562][T13619] vhci_hcd: connection reset by peer [ 768.778914][ T8026] vhci_hcd vhci_hcd.1: stop threads [ 768.780747][ T8026] vhci_hcd vhci_hcd.1: release socket [ 768.782714][ T8026] vhci_hcd vhci_hcd.1: disconnect device [ 769.043584][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 769.048350][T13640] 8021q: VLANs not supported on lo [ 769.050625][T13640] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1551'. [ 769.224243][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 769.286395][ T61] usb usb42-port1: unable to enumerate USB device [ 769.382018][T13643] netlink: 'syz.0.1552': attribute type 4 has an invalid length. [ 769.395187][T13643] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1552'. [ 770.893308][T13672] siw: device registration error -23 [ 771.022741][T11069] Bluetooth: hci2: unexpected event for opcode 0x080c [ 771.265742][T13676] bridge0: port 1(erspan0) entered blocking state [ 771.269212][T13676] bridge0: port 1(erspan0) entered disabled state [ 771.271389][T13676] erspan0: entered allmulticast mode [ 771.273831][T13676] erspan0: entered promiscuous mode [ 771.298661][T13676] bridge0: port 1(erspan0) entered blocking state [ 771.300803][T13676] bridge0: port 1(erspan0) entered forwarding state [ 771.303341][T13684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1558'. [ 771.668074][ T6008] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 771.812447][T11069] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 772.179398][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 772.184466][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 772.188703][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 772.194128][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 772.197693][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 772.679487][ T7349] usb 40-1: device descriptor read/8, error -110 [ 773.146783][ T7349] usb usb40-port1: attempt power cycle [ 773.707918][ T7349] usb usb40-port1: unable to enumerate USB device [ 775.937182][T11069] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 775.942041][T11069] Bluetooth: hci3: Injecting HCI hardware error event [ 775.948914][T11069] Bluetooth: hci3: hardware error 0x00 [ 776.325502][T13738] mkiss: ax0: crc mode is auto. [ 776.753812][T13749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 776.755906][T13749] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 776.758792][T13749] vhci_hcd vhci_hcd.0: Device attached [ 777.107937][ T61] usb 40-1: SetAddress Request (58) to port 0 [ 777.110126][ T61] usb 40-1: new SuperSpeed USB device number 58 using vhci_hcd [ 777.344361][T13757] __nla_validate_parse: 1 callbacks suppressed [ 777.344399][T13757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1572'. [ 777.375024][T13750] vhci_hcd: connection closed [ 777.415463][ T13] vhci_hcd vhci_hcd.1: stop threads [ 777.422353][ T13] vhci_hcd vhci_hcd.1: release socket [ 777.424779][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 777.800082][ T61] usb 40-1: enqueue for inactive port 0 [ 778.007804][T11069] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 779.075425][ T61] usb usb40-port1: attempt power cycle [ 779.678128][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 779.858948][ T61] usb usb40-port1: unable to enumerate USB device [ 783.356408][T13809] erspan0: left allmulticast mode [ 783.358705][T13809] erspan0: left promiscuous mode [ 783.361450][T13809] bridge0: port 1(erspan0) entered disabled state [ 784.508669][T13801] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 784.511368][T13801] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 784.514924][T13801] vhci_hcd vhci_hcd.0: Device attached [ 784.714080][T13818] vhci_hcd: connection closed [ 784.717813][ T13] vhci_hcd vhci_hcd.1: stop threads [ 784.725452][ T13] vhci_hcd vhci_hcd.1: release socket [ 784.728326][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 785.158512][T13835] : renamed from bond_slave_0 [ 785.428282][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 785.490235][T13838] wireguard0: entered promiscuous mode [ 785.492623][T13838] wireguard0: entered allmulticast mode [ 786.013167][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 786.652331][T13855] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 788.481280][T13879] netlink: 'syz.1.1590': attribute type 4 has an invalid length. [ 788.483748][T13879] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1590'. [ 788.867742][T13884] bridge0: port 3(erspan0) entered blocking state [ 788.870248][T13884] bridge0: port 3(erspan0) entered disabled state [ 788.873059][T13884] erspan0: entered allmulticast mode [ 788.882112][T13884] erspan0: entered promiscuous mode [ 788.947232][T13884] erspan0: left allmulticast mode [ 788.948941][T13884] erspan0: left promiscuous mode [ 788.951333][T13884] bridge0: port 3(erspan0) entered disabled state [ 789.481796][ T40] audit: type=1326 audit(1769257591.251:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 789.490284][ T40] audit: type=1326 audit(1769257591.251:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 789.497501][ T40] audit: type=1326 audit(1769257591.261:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 789.998329][ T40] audit: type=1326 audit(1769257591.261:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 790.030301][ T40] audit: type=1326 audit(1769257591.261:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 790.057619][ T40] audit: type=1326 audit(1769257591.261:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf720572b code=0x7ffc0000 [ 790.088298][ T40] audit: type=1326 audit(1769257591.261:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 790.121667][ T40] audit: type=1326 audit(1769257591.261:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 790.130908][ T40] audit: type=1326 audit(1769257591.261:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 790.140639][ T40] audit: type=1326 audit(1769257591.261:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 790.626585][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 790.744123][T13906] netlink: 'syz.2.1606': attribute type 4 has an invalid length. [ 790.747623][T13906] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1606'. [ 791.020046][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 791.556732][T13904] wireguard0: entered promiscuous mode [ 791.559570][T13904] wireguard0: entered allmulticast mode [ 792.049591][T13922] x_tables: duplicate underflow at hook 1 [ 792.059573][T13922] hub 8-0:1.0: USB hub found [ 792.064300][T13922] hub 8-0:1.0: 1 port detected [ 793.420496][T13943] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 793.466110][T13943] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 793.922277][T13941] netlink: 'syz.1.1608': attribute type 4 has an invalid length. [ 793.925240][T13941] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1608'. [ 794.531728][T13938] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 795.795238][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 795.810057][T13963] dvmrp6: entered allmulticast mode [ 798.487079][T13970] netlink: 'syz.1.1613': attribute type 4 has an invalid length. [ 798.489563][T13970] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1613'. [ 798.532604][ T24] IPVS: starting estimator thread 0... [ 798.643666][T13975] IPVS: using max 44 ests per chain, 105600 per kthread [ 799.273617][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'. [ 800.452957][T13999] overlayfs: missing 'workdir' [ 801.129123][T14001] netlink: 'syz.2.1621': attribute type 4 has an invalid length. [ 801.131585][T14001] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1621'. [ 801.405982][T13998] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 802.034939][T14009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 802.038793][T14009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 804.095724][ T5942] Bluetooth: hci2: command 0x0406 tx timeout [ 804.097714][T11069] Bluetooth: hci1: command 0x0406 tx timeout [ 804.646823][T14047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'. [ 805.214459][T14061] bridge0: port 3(erspan0) entered blocking state [ 805.216982][T14061] bridge0: port 3(erspan0) entered disabled state [ 805.219527][T14061] erspan0: entered allmulticast mode [ 805.225268][T14061] erspan0: entered promiscuous mode [ 805.244461][T14061] erspan0: left allmulticast mode [ 805.246239][T14061] erspan0: left promiscuous mode [ 805.248810][T14061] bridge0: port 3(erspan0) entered disabled state [ 805.314544][T14017] udevd[14017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 805.514348][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 805.676934][T14068] netlink: 'syz.2.1628': attribute type 4 has an invalid length. [ 805.680028][T14068] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1628'. [ 806.056621][T14077] overlayfs: missing 'lowerdir' [ 807.486324][T14073] ALSA: mixer_oss: invalid OSS volume '' [ 807.490814][T14073] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 807.492956][T14073] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 807.519512][T14073] vhci_hcd vhci_hcd.0: Device attached [ 807.696355][ T6057] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 807.756422][ T6057] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 808.789912][T14098] comedi comedi0: Minor 2 could not be opened [ 809.248021][T14102] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 809.662452][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 809.662471][ T40] audit: type=1326 audit(1769257611.625:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.2.1641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 809.669490][T14079] vhci_hcd: connection reset by peer [ 809.686822][ T12] vhci_hcd vhci_hcd.0: stop threads [ 809.690318][ T12] vhci_hcd vhci_hcd.0: release socket [ 809.693993][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 809.702458][ T40] audit: type=1326 audit(1769257611.645:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.2.1641" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 809.715144][ T40] audit: type=1326 audit(1769257611.645:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.2.1641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 809.727448][ T40] audit: type=1326 audit(1769257611.655:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.2.1641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 809.739050][ T40] audit: type=1326 audit(1769257611.655:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.2.1641" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 809.837837][T14115] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 809.865582][T14115] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.096435][ T40] audit: type=1326 audit(1769257612.055:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.2.1641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 810.153445][ T40] audit: type=1326 audit(1769257612.065:7263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.2.1641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 810.187911][T14115] bond3: (slave veth5): Enslaving as an active interface with a down link [ 810.729053][ T40] audit: type=1326 audit(1769257612.635:7264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.2.1652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 810.787636][ T40] audit: type=1326 audit(1769257612.645:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.2.1652" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 810.796115][ T40] audit: type=1326 audit(1769257612.645:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.2.1652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 810.859450][T14137] ALSA: mixer_oss: invalid OSS volume '' [ 810.897822][T14137] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 810.899906][T14137] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 810.902817][T14137] vhci_hcd vhci_hcd.0: Device attached [ 811.045831][T14135] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 811.115887][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 811.177554][ T24] usb 43-1: new full-speed USB device number 10 using vhci_hcd [ 811.183952][T14135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 811.408135][T14138] vhci_hcd: connection reset by peer [ 811.418464][ T1065] vhci_hcd vhci_hcd.3: stop threads [ 811.420638][ T1065] vhci_hcd vhci_hcd.3: release socket [ 811.422903][ T1065] vhci_hcd vhci_hcd.3: disconnect device [ 811.466436][T14143] bond4: (slave veth7): Enslaving as an active interface with a down link [ 811.619424][T14144] netlink: 'syz.0.1651': attribute type 4 has an invalid length. [ 811.622714][T14144] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1651'. [ 812.927690][ T6057] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 812.930626][T14155] overlayfs: missing 'lowerdir' [ 813.699035][T14157] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1645'. [ 813.784330][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.786942][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.084695][T14163] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 814.087427][T14163] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 814.091563][T14163] vhci_hcd vhci_hcd.0: Device attached [ 814.301310][T14164] vhci_hcd: connection closed [ 814.301632][ T73] vhci_hcd vhci_hcd.3: stop threads [ 814.305740][ T73] vhci_hcd vhci_hcd.3: release socket [ 814.308115][ T73] vhci_hcd vhci_hcd.3: disconnect device [ 815.656842][T14172] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 815.659538][T14172] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 815.686537][T14172] vhci_hcd vhci_hcd.0: Device attached [ 815.747048][T14169] bridge0: port 3(erspan0) entered blocking state [ 815.749349][T14169] bridge0: port 3(erspan0) entered disabled state [ 815.751498][T14169] erspan0: entered allmulticast mode [ 815.753983][T14169] erspan0: entered promiscuous mode [ 815.759495][T14169] erspan0: left allmulticast mode [ 815.761180][T14169] erspan0: left promiscuous mode [ 815.762902][T14169] bridge0: port 3(erspan0) entered disabled state [ 815.968550][ T6027] usb 40-1: SetAddress Request (63) to port 0 [ 815.968640][ T6027] usb 40-1: new SuperSpeed USB device number 63 using vhci_hcd [ 816.051259][T14181] rdma_rxe: rxe_newlink: failed to add wg2 [ 816.168724][ T6008] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 816.332330][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 816.338738][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 816.343314][ T6008] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 816.347889][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.352513][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.356925][ T6008] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 816.367702][ T6008] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 816.373034][ T6008] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 816.386662][ T6008] usb 5-1: Manufacturer: syz [ 816.399902][ T6008] usb 5-1: config 0 descriptor?? [ 816.630433][T14173] vhci_hcd: connection reset by peer [ 816.633086][ T1200] vhci_hcd vhci_hcd.1: stop threads [ 816.634818][ T1200] vhci_hcd vhci_hcd.1: release socket [ 816.636847][ T1200] vhci_hcd vhci_hcd.1: disconnect device [ 816.776185][T14189] comedi comedi0: Minor 2 could not be opened [ 816.869140][ T6008] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 816.876809][ T6008] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 817.132103][T12591] usb 5-1: USB disconnect, device number 7 [ 817.347627][T14197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1655'. [ 817.434194][T14201] comedi comedi0: Minor 2 could not be opened [ 817.580607][T14203] netlink: 'syz.3.1657': attribute type 13 has an invalid length. [ 817.687108][ T6057] usb usb44-port1: attempt power cycle [ 817.792334][T14203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 818.335024][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1667'. [ 818.568134][T14221] comedi comedi0: Minor 2 could not be opened [ 819.249452][ T6057] usb usb44-port1: unable to enumerate USB device [ 819.320708][T14222] netlink: 'syz.0.1666': attribute type 13 has an invalid length. [ 819.573982][T14177] udevd[14177]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 820.145570][T14222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 820.690787][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'. [ 821.060148][ T6027] usb 40-1: device descriptor read/8, error -110 [ 821.253414][T14248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 821.450518][ T6027] usb usb40-port1: attempt power cycle [ 821.634392][T14241] overlayfs: missing 'lowerdir' [ 821.645371][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 822.030660][ T6027] usb usb40-port1: unable to enumerate USB device [ 822.416334][T14266] netlink: 'syz.2.1665': attribute type 2 has an invalid length. [ 822.436841][T14266] !: entered promiscuous mode [ 822.457415][T14267] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 822.459575][T14267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 822.462584][T14267] vhci_hcd vhci_hcd.0: Device attached [ 822.483604][T14266] netlink: 'syz.2.1665': attribute type 2 has an invalid length. [ 822.761023][ T6057] usb 44-1: SetAddress Request (58) to port 0 [ 822.764559][ T6057] usb 44-1: new SuperSpeed USB device number 58 using vhci_hcd [ 823.836119][T14276] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 823.838245][T14276] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 823.841378][T14276] vhci_hcd vhci_hcd.0: Device attached [ 824.188861][T14268] vhci_hcd: connection reset by peer [ 824.201057][ T1200] vhci_hcd vhci_hcd.3: stop threads [ 824.205067][ T1200] vhci_hcd vhci_hcd.3: release socket [ 824.211763][ T1200] vhci_hcd vhci_hcd.3: disconnect device [ 824.413175][ T29] usb 38-1: SetAddress Request (54) to port 0 [ 824.415885][ T29] usb 38-1: new SuperSpeed USB device number 54 using vhci_hcd [ 824.496906][T14282] vhci_hcd: connection reset by peer [ 824.499466][ T12] vhci_hcd vhci_hcd.0: stop threads [ 824.532152][ T12] vhci_hcd vhci_hcd.0: release socket [ 824.535838][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 824.997891][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 825.566179][T14304] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 825.570188][T14304] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 826.414145][T14311] netlink: 'syz.0.1680': attribute type 4 has an invalid length. [ 826.416628][T14311] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1680'. [ 826.880349][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 827.244799][T14320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1683'. [ 827.861732][ T6057] usb 44-1: device descriptor read/8, error -110 [ 828.272382][ T6057] usb usb44-port1: attempt power cycle [ 828.862419][ T6057] usb usb44-port1: unable to enumerate USB device [ 828.885503][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 829.491844][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 829.491856][ T40] audit: type=1326 audit(1769257631.450:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 829.501080][ T40] audit: type=1326 audit(1769257631.460:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 829.511356][ T40] audit: type=1326 audit(1769257631.470:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 829.521306][ T40] audit: type=1326 audit(1769257631.470:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 829.528375][ T40] audit: type=1326 audit(1769257631.480:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 829.538083][ T40] audit: type=1326 audit(1769257631.480:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 829.550015][ T40] audit: type=1326 audit(1769257631.480:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 829.558282][ T40] audit: type=1326 audit(1769257631.480:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 829.620608][ T29] usb 38-1: device descriptor read/8, error -110 [ 829.624303][ T40] audit: type=1326 audit(1769257631.500:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 829.631284][ T40] audit: type=1326 audit(1769257631.500:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 830.393226][ T29] usb usb38-port1: attempt power cycle [ 830.542457][ T6057] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 830.725488][T14356] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 830.727567][T14356] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 830.730513][T14356] vhci_hcd vhci_hcd.0: Device attached [ 830.772977][ T6057] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 830.775327][ T6057] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 830.778640][ T6057] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 830.782322][ T6057] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 830.965130][ T29] usb usb38-port1: unable to enumerate USB device [ 830.992582][ T843] usb 42-1: SetAddress Request (55) to port 0 [ 830.994555][ T843] usb 42-1: new SuperSpeed USB device number 55 using vhci_hcd [ 831.096330][T14357] vhci_hcd: connection reset by peer [ 831.100057][ T7827] vhci_hcd vhci_hcd.2: stop threads [ 831.102303][ T7827] vhci_hcd vhci_hcd.2: release socket [ 831.105086][ T7827] vhci_hcd vhci_hcd.2: disconnect device [ 831.139478][ T6057] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 831.144080][ T6057] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 831.146537][ T6057] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 831.150121][ T6057] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.153875][ T6057] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 831.157353][ T6057] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 831.161864][ T6057] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 831.164334][ T6057] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 831.167729][ T6057] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.171475][ T6057] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 831.175002][ T6057] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 831.182033][ T6057] usb 5-1: string descriptor 0 read error: -22 [ 831.184264][ T6057] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 831.187190][ T6057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.212630][ T6057] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 831.581925][ T6057] usb 5-1: USB disconnect, device number 8 [ 831.632869][T11069] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 831.807520][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 832.055982][T14372] netlink: 'syz.2.1692': attribute type 4 has an invalid length. [ 832.058497][T14372] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1692'. [ 832.230813][T14376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1693'. [ 832.490247][T14328] udevd[14328]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 832.497659][T14364] udevd[14364]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 832.666721][T14384] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 832.669019][T14384] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 832.671774][T14384] vhci_hcd vhci_hcd.0: Device attached [ 832.917482][T14384] autofs: Unknown parameter '0x0000000000000000' [ 832.983454][ T6057] usb 38-1: SetAddress Request (58) to port 0 [ 833.004330][ T6057] usb 38-1: new SuperSpeed USB device number 58 using vhci_hcd [ 833.812027][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 834.655017][T14385] vhci_hcd: connection reset by peer [ 834.664385][ T1200] vhci_hcd vhci_hcd.0: stop threads [ 834.666094][ T1200] vhci_hcd vhci_hcd.0: release socket [ 834.671045][ T1200] vhci_hcd vhci_hcd.0: disconnect device [ 834.828983][T14411] netlink: 'syz.1.1703': attribute type 4 has an invalid length. [ 834.831394][T14411] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1703'. [ 835.289126][T14416] netlink: 'syz.3.1699': attribute type 10 has an invalid length. [ 835.330546][T14416] team0: Cannot enslave team device to itself [ 836.024597][ T843] usb 42-1: device descriptor read/8, error -110 [ 836.474451][ T843] usb usb42-port1: attempt power cycle [ 836.506048][T14438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1704'. [ 837.053557][ T843] usb usb42-port1: unable to enumerate USB device [ 838.104632][ T6057] usb 38-1: device descriptor read/8, error -110 [ 838.497036][ T6057] usb usb38-port1: attempt power cycle [ 838.885427][T14461] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 838.887711][T14461] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 839.056993][ T6057] usb usb38-port1: unable to enumerate USB device [ 839.734884][T14461] vhci_hcd vhci_hcd.0: Device attached [ 839.917430][T14470] tc_dump_action: action bad kind [ 840.010210][T14462] vhci_hcd: connection closed [ 840.010595][ T7827] vhci_hcd vhci_hcd.3: stop threads [ 840.014047][ T7827] vhci_hcd vhci_hcd.3: release socket [ 840.017847][ T7827] vhci_hcd vhci_hcd.3: disconnect device [ 840.230230][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1712'. [ 840.324993][ T5989] usb 44-1: enqueue for inactive port 0 [ 841.275682][ T5989] usb usb44-port1: attempt power cycle [ 841.813572][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'. [ 841.856843][ T5989] usb usb44-port1: unable to enumerate USB device [ 844.632190][T14525] netlink: 'syz.0.1718': attribute type 10 has an invalid length. [ 845.196420][T14525] team0: Cannot enslave team device to itself [ 845.911763][T14539] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 845.914620][T14539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 845.949387][T14539] vhci_hcd vhci_hcd.0: Device attached [ 846.026501][T14542] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 846.028585][T14542] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 846.039937][T14542] vhci_hcd vhci_hcd.0: Device attached [ 846.144368][T14547] autofs: Unknown parameter '0x0000000000000000' [ 846.282671][ T6057] usb 44-1: SetAddress Request (66) to port 0 [ 846.339488][ T6057] usb 44-1: new SuperSpeed USB device number 66 using vhci_hcd [ 846.396578][ T34] usb 42-1: SetAddress Request (59) to port 0 [ 846.398760][ T34] usb 42-1: new SuperSpeed USB device number 59 using vhci_hcd [ 846.891691][T14545] vhci_hcd: connection reset by peer [ 846.902409][T14500] vhci_hcd vhci_hcd.2: stop threads [ 846.904119][T14500] vhci_hcd vhci_hcd.2: release socket [ 846.923366][T14500] vhci_hcd vhci_hcd.2: disconnect device [ 847.337160][T14540] vhci_hcd: connection reset by peer [ 847.337346][ T4904] vhci_hcd vhci_hcd.3: stop threads [ 847.337361][ T4904] vhci_hcd vhci_hcd.3: release socket [ 847.337414][ T4904] vhci_hcd vhci_hcd.3: disconnect device [ 847.856608][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 848.343908][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 848.614744][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1735'. [ 848.619601][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1735'. [ 848.679050][T14582] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 848.690048][T14582] CIFS mount error: No usable UNC path provided in device string! [ 848.690048][T14582] [ 848.694605][T14582] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 850.441410][T14597] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 850.444495][T14597] overlayfs: failed to set xattr on upper [ 850.469381][T14597] overlayfs: ...falling back to redirect_dir=nofollow. [ 850.471676][T14597] overlayfs: ...falling back to index=off. [ 850.473577][T14597] overlayfs: ...falling back to uuid=null. [ 850.511894][T14598] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 850.514607][T14598] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 850.629288][T14597] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 850.651347][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 850.651360][ T40] audit: type=1326 audit(1769257652.605:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14591 comm="syz.0.1737" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 850.660343][T14598] vhci_hcd vhci_hcd.0: Device attached [ 851.471092][ T34] usb 42-1: device descriptor read/8, error -110 [ 851.515250][T14599] vhci_hcd: connection reset by peer [ 851.520752][T14500] vhci_hcd vhci_hcd.3: stop threads [ 851.523010][T14500] vhci_hcd vhci_hcd.3: release socket [ 851.526064][ T6057] usb 44-1: device descriptor read/8, error -110 [ 851.528936][T14500] vhci_hcd vhci_hcd.3: disconnect device [ 851.677260][T14610] netlink: 'syz.1.1733': attribute type 4 has an invalid length. [ 851.704495][T14610] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1733'. [ 851.868657][ T34] usb usb42-port1: attempt power cycle [ 851.918453][ T6057] usb usb44-port1: attempt power cycle [ 852.181976][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 852.265836][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 852.492428][T14622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1742'. [ 852.499141][ T6057] usb usb44-port1: unable to enumerate USB device [ 852.659970][ T34] usb usb42-port1: unable to enumerate USB device [ 852.775304][T14615] udevd[14615]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 852.792894][T14634] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 852.795146][T14634] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 852.798290][T14634] vhci_hcd vhci_hcd.0: Device attached [ 852.854443][T14634] autofs: Unknown parameter '0x0000000000000000' [ 852.887134][T14632] udevd[14632]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 853.088503][ T6027] usb 40-1: SetAddress Request (67) to port 0 [ 853.091575][ T6027] usb 40-1: new SuperSpeed USB device number 67 using vhci_hcd [ 853.437465][T14639] netlink: 'syz.3.1751': attribute type 4 has an invalid length. [ 853.453862][T14639] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1751'. [ 853.843517][T14635] vhci_hcd: connection reset by peer [ 853.845540][ T60] vhci_hcd vhci_hcd.1: stop threads [ 853.847634][ T60] vhci_hcd vhci_hcd.1: release socket [ 853.849681][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 853.869630][T14648] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 853.872380][T14648] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 853.876779][T14648] vhci_hcd vhci_hcd.0: Device attached [ 853.896310][T14647] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 853.898496][T14647] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 853.902359][T14647] vhci_hcd vhci_hcd.0: Device attached [ 854.149117][ T34] usb 42-1: SetAddress Request (63) to port 0 [ 854.152445][ T34] usb 42-1: new SuperSpeed USB device number 63 using vhci_hcd [ 854.168683][T12591] usb 38-1: SetAddress Request (62) to port 0 [ 854.171410][T12591] usb 38-1: new SuperSpeed USB device number 62 using vhci_hcd [ 854.358777][T14651] vhci_hcd: connection reset by peer [ 854.363260][ T4904] vhci_hcd vhci_hcd.0: stop threads [ 854.373337][ T4904] vhci_hcd vhci_hcd.0: release socket [ 854.379082][ T4904] vhci_hcd vhci_hcd.0: disconnect device [ 854.574404][T14649] vhci_hcd: connection reset by peer [ 854.576783][ T1200] vhci_hcd vhci_hcd.2: stop threads [ 854.588844][ T1200] vhci_hcd vhci_hcd.2: release socket [ 854.591119][ T1200] vhci_hcd vhci_hcd.2: disconnect device [ 855.219078][T14663] netlink: 'syz.3.1746': attribute type 4 has an invalid length. [ 855.221560][T14663] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1746'. [ 855.262977][T14664] netlink: 'syz.1.1745': attribute type 10 has an invalid length. [ 855.353361][T14664] team0: Cannot enslave team device to itself [ 858.190077][ T6027] usb 40-1: device descriptor read/8, error -110 [ 858.381187][T14681] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 858.383918][T14681] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 858.390111][T14681] vhci_hcd vhci_hcd.0: Device attached [ 858.586816][T14682] vhci_hcd: connection closed [ 858.587097][ T4904] vhci_hcd vhci_hcd.1: stop threads [ 858.592923][ T4904] vhci_hcd vhci_hcd.1: release socket [ 858.595508][ T4904] vhci_hcd vhci_hcd.1: disconnect device [ 858.923069][T14673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 858.926390][T14673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 859.179009][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1752'. [ 859.230052][T12591] usb 38-1: device descriptor read/8, error -110 [ 859.240037][ T34] usb 42-1: device descriptor read/8, error -110 [ 859.520712][T14695] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 859.522859][T14695] overlayfs: failed to set xattr on upper [ 859.524722][T14695] overlayfs: ...falling back to redirect_dir=nofollow. [ 859.526877][T14695] overlayfs: ...falling back to index=off. [ 859.528710][T14695] overlayfs: ...falling back to uuid=null. [ 859.559346][T14695] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 859.620456][T12591] usb usb38-port1: attempt power cycle [ 859.640508][ T34] usb usb42-port1: attempt power cycle [ 859.706113][ T40] audit: type=1326 audit(1769257661.662:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.1.1750" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x0 [ 859.816731][ T40] audit: type=1326 audit(1769257661.772:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.2.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 859.823646][ T40] audit: type=1326 audit(1769257661.772:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.2.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 859.830575][ T40] audit: type=1326 audit(1769257661.772:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.2.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 859.837557][ T40] audit: type=1326 audit(1769257661.782:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.2.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 859.844425][ T40] audit: type=1326 audit(1769257661.782:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.2.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 859.851790][ T40] audit: type=1326 audit(1769257661.782:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.2.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf715572b code=0x7ffc0000 [ 859.858356][ T40] audit: type=1326 audit(1769257661.782:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.2.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 859.865393][ T40] audit: type=1326 audit(1769257661.782:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.2.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 860.051371][ T40] audit: type=1326 audit(1769257661.782:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.2.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 860.270126][T11069] Bluetooth: hci2: command 0x0406 tx timeout [ 860.320693][ T34] usb usb42-port1: unable to enumerate USB device [ 860.340645][T12591] usb usb38-port1: unable to enumerate USB device [ 860.638960][T14711] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 860.641253][T14711] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 860.644998][T14711] vhci_hcd vhci_hcd.0: Device attached [ 860.648087][T14712] vhci_hcd: connection closed [ 860.690464][ T60] vhci_hcd vhci_hcd.3: stop threads [ 860.693579][ T60] vhci_hcd vhci_hcd.3: release socket [ 860.695267][ T60] vhci_hcd vhci_hcd.3: disconnect device [ 860.716500][T14704] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 860.728951][T14704] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 860.956474][T14715] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 860.958562][T14715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 860.961662][T14715] vhci_hcd vhci_hcd.0: Device attached [ 861.000349][T11069] Bluetooth: hci1: command 0x0406 tx timeout [ 861.100861][T14718] autofs: Unknown parameter '0x0000000000000000' [ 861.250932][ T34] usb 42-1: SetAddress Request (67) to port 0 [ 861.253498][ T34] usb 42-1: new SuperSpeed USB device number 67 using vhci_hcd [ 861.598018][T14716] vhci_hcd: connection reset by peer [ 861.603191][T12924] vhci_hcd vhci_hcd.2: stop threads [ 861.606022][T12924] vhci_hcd vhci_hcd.2: release socket [ 861.608064][T12924] vhci_hcd vhci_hcd.2: disconnect device [ 862.334819][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'. [ 862.695806][ T4904] Bluetooth: hci4: Frame reassembly failed (-84) [ 863.771083][T14755] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 863.773228][T14755] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 863.791194][T14755] vhci_hcd vhci_hcd.0: Device attached [ 863.901154][T14754] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 863.903921][T14754] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 863.921083][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 863.924950][T14755] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 863.944055][T14755] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 863.991885][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.995202][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.998644][T14754] vhci_hcd vhci_hcd.0: Device attached [ 864.048560][ T7349] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 864.261223][ T6027] usb 38-1: SetAddress Request (66) to port 0 [ 864.263258][ T6027] usb 38-1: new SuperSpeed USB device number 66 using vhci_hcd [ 864.671570][T11069] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 864.814494][T14756] vhci_hcd: connection reset by peer [ 864.865473][ T1065] vhci_hcd vhci_hcd.1: stop threads [ 864.870044][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1771'. [ 864.873993][ T1065] vhci_hcd vhci_hcd.1: release socket [ 864.878992][ T1065] vhci_hcd vhci_hcd.1: disconnect device [ 864.993226][T14758] vhci_hcd: connection reset by peer [ 864.995951][ T4904] vhci_hcd vhci_hcd.0: stop threads [ 864.998009][ T4904] vhci_hcd vhci_hcd.0: release socket [ 865.000233][ T4904] vhci_hcd vhci_hcd.0: disconnect device [ 866.352055][ T34] usb 42-1: device descriptor read/8, error -110 [ 866.742210][ T34] usb usb42-port1: attempt power cycle [ 867.282482][T14795] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 867.284635][T14795] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 867.292749][T14795] vhci_hcd vhci_hcd.0: Device attached [ 867.368576][T14797] autofs: Unknown parameter '0x0000000000000000' [ 867.390979][ T34] usb 42-1: SetAddress Request (70) to port 0 [ 867.394214][ T34] usb 42-1: new SuperSpeed USB device number 70 using vhci_hcd [ 867.463166][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 867.880984][T14809] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 867.883084][T14809] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 867.904657][T14809] vhci_hcd vhci_hcd.0: Device attached [ 868.070068][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'. [ 868.164699][T14796] vhci_hcd: connection reset by peer [ 868.166655][ T73] vhci_hcd vhci_hcd.2: stop threads [ 868.168478][ T73] vhci_hcd vhci_hcd.2: release socket [ 868.170236][ T73] vhci_hcd vhci_hcd.2: disconnect device [ 868.265122][T14813] vhci_hcd: connection closed [ 868.265424][ T73] vhci_hcd vhci_hcd.1: stop threads [ 868.268568][ T73] vhci_hcd vhci_hcd.1: release socket [ 868.271950][ T73] vhci_hcd vhci_hcd.1: disconnect device [ 869.142351][ T7349] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 869.312587][ T6027] usb 38-1: device descriptor read/8, error -110 [ 869.713335][ T6027] usb usb38-port1: attempt power cycle [ 869.822439][T14836] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 869.824934][T14836] overlayfs: failed to set xattr on upper [ 869.825449][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 869.826767][T14836] overlayfs: ...falling back to redirect_dir=nofollow. [ 869.831985][T14836] overlayfs: ...falling back to index=off. [ 869.842469][T14836] overlayfs: ...falling back to uuid=null. [ 869.899103][T14836] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 869.927586][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 869.927604][ T40] audit: type=1326 audit(1769257671.880:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.1778" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 870.274636][ T6027] usb usb38-port1: unable to enumerate USB device [ 870.357626][T14846] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 870.359715][T14846] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 870.362317][T14846] vhci_hcd vhci_hcd.0: Device attached [ 870.375285][T14846] netlink: 'syz.0.1782': attribute type 1 has an invalid length. [ 870.406774][T14846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 870.445440][T12591] usb usb40-port1: attempt power cycle [ 870.452043][T14846] bond2: (slave geneve2): making interface the new active one [ 870.456156][T14846] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 870.612727][ T6057] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 871.013670][T12591] usb usb40-port1: unable to enumerate USB device [ 871.041438][ T40] audit: type=1326 audit(1769257672.989:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.1.1781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7fc00000 [ 871.329809][T14860] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 871.331770][T14860] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 871.339542][T14860] vhci_hcd vhci_hcd.0: Device attached [ 871.602998][ T61] usb 44-1: SetAddress Request (70) to port 0 [ 871.608980][ T61] usb 44-1: new SuperSpeed USB device number 70 using vhci_hcd [ 872.043339][T14847] vhci_hcd: connection reset by peer [ 872.046912][ T4904] vhci_hcd vhci_hcd.0: stop threads [ 872.049388][ T4904] vhci_hcd vhci_hcd.0: release socket [ 872.051237][ T4904] vhci_hcd vhci_hcd.0: disconnect device [ 872.443350][ T34] usb 42-1: device descriptor read/8, error -110 [ 872.553414][ T34] usb usb42-port1: unable to enumerate USB device [ 872.563538][T14861] vhci_hcd: connection reset by peer [ 872.568144][ T1200] vhci_hcd vhci_hcd.3: stop threads [ 872.570304][ T1200] vhci_hcd vhci_hcd.3: release socket [ 872.623218][ T1200] vhci_hcd vhci_hcd.3: disconnect device [ 872.820257][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 872.898717][T14876] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 872.900859][T14876] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 872.904326][T14876] vhci_hcd vhci_hcd.0: Device attached [ 873.014539][T14879] autofs: Unknown parameter '0x0000000000000000' [ 873.577761][T14877] vhci_hcd: connection closed [ 873.578911][ T8895] vhci_hcd vhci_hcd.0: stop threads [ 873.582768][ T8895] vhci_hcd vhci_hcd.0: release socket [ 873.591887][ T8895] vhci_hcd vhci_hcd.0: disconnect device [ 873.632044][T14890] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 873.634836][T14890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 873.642185][T14890] vhci_hcd vhci_hcd.0: Device attached [ 874.227142][T14892] vhci_hcd: connection closed [ 874.227525][ T8895] vhci_hcd vhci_hcd.3: stop threads [ 874.230760][ T8895] vhci_hcd vhci_hcd.3: release socket [ 874.233264][ T8895] vhci_hcd vhci_hcd.3: disconnect device [ 875.375889][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.378139][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.590521][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'. [ 875.707065][ T6057] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 876.674543][ T61] usb 44-1: device descriptor read/8, error -110 [ 877.065082][ T843] usb usb38-port1: attempt power cycle [ 877.079218][ T61] usb usb44-port1: attempt power cycle [ 877.154109][T14919] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 877.157758][T14919] overlayfs: failed to set xattr on upper [ 877.160322][T14919] overlayfs: ...falling back to redirect_dir=nofollow. [ 877.163285][T14919] overlayfs: ...falling back to index=off. [ 877.301337][T14919] overlayfs: ...falling back to uuid=null. [ 877.328648][T14925] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 877.666466][ T61] usb usb44-port1: unable to enumerate USB device [ 878.979398][T14931] netlink: 'syz.1.1797': attribute type 4 has an invalid length. [ 878.982777][T14931] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1797'. [ 879.058527][ T40] audit: type=1326 audit(1769257681.007:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.2.1795" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 879.315815][ T843] usb usb38-port1: unable to enumerate USB device [ 881.034109][T14945] netlink: 'syz.3.1800': attribute type 4 has an invalid length. [ 881.105927][T14939] netlink: 'syz.0.1806': attribute type 4 has an invalid length. [ 881.109215][T14939] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1806'. [ 881.115727][T14953] netlink: 'syz.3.1800': attribute type 4 has an invalid length. [ 881.631033][T14957] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 881.633171][T14957] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 881.660299][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'. [ 881.738396][T14957] vhci_hcd vhci_hcd.0: Device attached [ 881.860929][T14965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 881.863074][T14965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 881.892147][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 881.895760][T14957] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 881.912532][T14957] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 881.951521][T14965] vhci_hcd vhci_hcd.0: Device attached [ 881.985581][ T24] usb 41-1: new high-speed USB device number 9 using vhci_hcd [ 882.236047][ T6027] usb 38-1: SetAddress Request (74) to port 0 [ 882.238122][ T6027] usb 38-1: new SuperSpeed USB device number 74 using vhci_hcd [ 882.714794][T14966] vhci_hcd: connection reset by peer [ 883.325988][T14500] vhci_hcd vhci_hcd.0: stop threads [ 883.327745][T14500] vhci_hcd vhci_hcd.0: release socket [ 883.332311][T14500] vhci_hcd vhci_hcd.0: disconnect device [ 885.476500][T14958] vhci_hcd: connection reset by peer [ 885.478775][T14500] vhci_hcd vhci_hcd.2: stop threads [ 885.486385][T14500] vhci_hcd vhci_hcd.2: release socket [ 885.488817][T14500] vhci_hcd vhci_hcd.2: disconnect device [ 885.616092][T14980] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 885.618200][T14980] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 885.631663][T14980] vhci_hcd vhci_hcd.0: Device attached [ 885.896222][T14981] vhci_hcd: connection closed [ 885.896561][ T7349] usb 44-1: SetAddress Request (74) to port 0 [ 885.896658][T14637] vhci_hcd vhci_hcd.3: stop threads [ 885.898340][ T7349] usb 44-1: new SuperSpeed USB device number 74 using vhci_hcd [ 885.900382][T14637] vhci_hcd vhci_hcd.3: release socket [ 885.907130][T14637] vhci_hcd vhci_hcd.3: disconnect device [ 885.916557][ T7349] usb 44-1: enqueue for inactive port 0 [ 886.307711][ T7349] usb usb44-port1: attempt power cycle [ 886.593856][ T40] audit: type=1326 audit(1769257688.536:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 886.609855][ T40] audit: type=1326 audit(1769257688.546:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 886.622711][ T40] audit: type=1326 audit(1769257688.546:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 886.642282][ T40] audit: type=1326 audit(1769257688.546:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 886.660863][ T40] audit: type=1326 audit(1769257688.546:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 886.677849][ T40] audit: type=1326 audit(1769257688.546:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 886.887202][ T7349] usb usb44-port1: unable to enumerate USB device [ 887.066673][ T7349] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 887.286771][ T7349] usb 5-1: Using ep0 maxpacket: 8 [ 887.375022][ T7349] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 887.377708][ T7349] usb 5-1: config 0 has no interface number 0 [ 887.381216][ T7349] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 887.384641][ T7349] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 887.396727][ T7349] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 887.406977][ T7349] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 887.411185][ T7349] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 887.416951][ T7349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.421720][ T7349] usb 5-1: config 0 descriptor?? [ 887.634452][ T7349] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 887.644079][ T6027] usb 38-1: device descriptor read/8, error -110 [ 887.653278][ T40] audit: type=1326 audit(1769257688.546:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 887.686913][ T40] audit: type=1326 audit(1769257688.546:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 887.695058][ T40] audit: type=1326 audit(1769257688.556:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 887.724551][ T40] audit: type=1326 audit(1769257688.556:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.3.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 888.434750][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 888.554964][T15004] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 888.558747][T15004] overlayfs: failed to set xattr on upper [ 888.561566][T15004] overlayfs: ...falling back to redirect_dir=nofollow. [ 888.565568][T15004] overlayfs: ...falling back to index=off. [ 888.568750][T15004] overlayfs: ...falling back to uuid=null. [ 888.708213][T15007] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 888.728008][ T6027] usb usb38-port1: attempt power cycle [ 888.757384][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 889.314493][T15011] netlink: 'syz.1.1811': attribute type 4 has an invalid length. [ 889.317181][T15011] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1811'. [ 889.327790][ T6027] usb usb38-port1: unable to enumerate USB device [ 889.567378][ T843] usb 5-1: USB disconnect, device number 9 [ 889.589577][ T843] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 889.789693][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 889.907823][T15027] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 889.907841][T15027] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 889.908275][T15027] vhci_hcd vhci_hcd.0: Device attached [ 890.188092][ T24] usb 40-1: SetAddress Request (73) to port 0 [ 890.192178][ T24] usb 40-1: new SuperSpeed USB device number 73 using vhci_hcd [ 890.537286][T15028] vhci_hcd: connection reset by peer [ 890.545424][T14908] vhci_hcd vhci_hcd.1: stop threads [ 890.549660][T14908] vhci_hcd vhci_hcd.1: release socket [ 890.552326][T14908] vhci_hcd vhci_hcd.1: disconnect device [ 890.835342][T15039] netlink: 107460 bytes leftover after parsing attributes in process `syz.2.1818'. [ 890.995165][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 891.135824][T15044] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 891.137920][T15044] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 891.158301][T15044] vhci_hcd vhci_hcd.0: Device attached [ 891.329508][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1817'. [ 891.334886][T15044] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 891.350842][T15044] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 891.402807][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.407840][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.419050][ T61] usb 37-1: new high-speed USB device number 8 using vhci_hcd [ 891.757279][T15051] netlink: 'syz.1.1819': attribute type 4 has an invalid length. [ 891.826397][T15051] netlink: 'syz.1.1819': attribute type 4 has an invalid length. [ 892.330743][T15045] vhci_hcd: connection reset by peer [ 892.334136][ T13] vhci_hcd vhci_hcd.0: stop threads [ 892.349801][ T13] vhci_hcd vhci_hcd.0: release socket [ 892.638162][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 892.653174][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 892.691954][T15055] mkiss: ax0: crc mode is auto. [ 893.318171][T15068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 893.320341][T15068] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 893.323970][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 893.351801][T15068] vhci_hcd vhci_hcd.0: Device attached [ 893.532116][T15075] rdma_rxe: rxe_newlink: failed to add wg2 [ 893.940339][T15069] vhci_hcd: connection closed [ 893.940690][ T1200] vhci_hcd vhci_hcd.0: stop threads [ 893.944241][ T1200] vhci_hcd vhci_hcd.0: release socket [ 893.947706][ T1200] vhci_hcd vhci_hcd.0: disconnect device [ 895.129489][T15087] Invalid source name [ 895.270957][ T24] usb 40-1: device descriptor read/8, error -110 [ 895.864371][ T24] usb usb40-port1: attempt power cycle [ 896.469700][ T24] usb usb40-port1: unable to enumerate USB device [ 896.510193][ T61] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 896.603837][T15100] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 896.605972][T15100] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 896.609783][T15100] vhci_hcd vhci_hcd.0: Device attached [ 896.726919][T15100] rdma_rxe: rxe_newlink: failed to add wg2 [ 897.191727][T15110] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 897.194562][T15110] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 897.202047][T15101] vhci_hcd: connection closed [ 897.202265][ T7827] vhci_hcd vhci_hcd.0: stop threads [ 897.206460][ T7827] vhci_hcd vhci_hcd.0: release socket [ 897.210704][T15110] vhci_hcd vhci_hcd.0: Device attached [ 897.213635][ T7827] vhci_hcd vhci_hcd.0: disconnect device [ 897.298044][T15110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 897.302421][T15110] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 897.318863][T15110] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 897.449675][T13788] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 897.654792][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 897.809598][T15111] vhci_hcd: connection reset by peer [ 897.820844][ T8026] vhci_hcd vhci_hcd.1: stop threads [ 897.830291][ T8026] vhci_hcd vhci_hcd.1: release socket [ 897.839623][ T8026] vhci_hcd vhci_hcd.1: disconnect device [ 898.629889][T15130] netlink: 107460 bytes leftover after parsing attributes in process `syz.3.1835'. [ 898.680170][ T6057] usb usb38-port1: attempt power cycle [ 898.713195][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 899.384478][ T6057] usb usb38-port1: unable to enumerate USB device [ 899.532483][T15132] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 899.535268][T15132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 899.539116][T15132] vhci_hcd vhci_hcd.0: Device attached [ 899.567361][T15132] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 899.730985][T15132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 899.775573][T15136] bond3: (slave geneve2): making interface the new active one [ 899.785157][T15136] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 899.918083][T15141] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 899.920224][T15141] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 899.929764][T15141] vhci_hcd vhci_hcd.0: Device attached [ 900.118622][T15146] rdma_rxe: rxe_newlink: failed to add wg2 [ 900.250169][ T24] usb 42-1: SetAddress Request (71) to port 0 [ 900.255642][ T24] usb 42-1: new SuperSpeed USB device number 71 using vhci_hcd [ 900.415183][T15137] vhci_hcd: connection closed [ 900.415369][ T60] vhci_hcd vhci_hcd.1: stop threads [ 900.418619][ T60] vhci_hcd vhci_hcd.1: release socket [ 900.430026][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 900.476166][T15142] vhci_hcd: connection reset by peer [ 900.478212][ T60] vhci_hcd vhci_hcd.2: stop threads [ 900.480273][ T60] vhci_hcd vhci_hcd.2: release socket [ 900.482209][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 900.760067][T11069] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 901.267844][ T29] libceph: connect (1)[c::]:6789 error -101 [ 901.276183][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 901.359365][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1842'. [ 901.363923][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 901.432923][T15166] CIFS mount error: No usable UNC path provided in device string! [ 901.432923][T15166] [ 901.440485][T15166] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 901.565329][T15155] ceph: No mds server is up or the cluster is laggy [ 902.351060][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 902.590348][T13788] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 903.212985][T15192] dlm: no local IP address has been set [ 903.216788][T15192] dlm: cannot start dlm midcomms -107 [ 905.331125][ T24] usb 42-1: device descriptor read/8, error -110 [ 905.808104][T15220] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 905.810290][T15220] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 905.817496][T15220] vhci_hcd vhci_hcd.0: Device attached [ 906.058783][T15220] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 906.071495][ T7349] usb 43-1: new low-speed USB device number 11 using vhci_hcd [ 906.151647][ T24] usb usb42-port1: attempt power cycle [ 906.692481][T15220] 8021q: adding VLAN 0 to HW filter on device bond4 [ 906.776442][T15234] 9p: Unknown Cache mode or invalid value fscach [ 906.793979][T15227] bond4: (slave geneve3): making interface the new active one [ 906.810086][T15227] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 906.922471][ T24] usb usb42-port1: unable to enumerate USB device [ 907.297520][T15221] vhci_hcd: connection reset by peer [ 907.299632][ T7827] vhci_hcd vhci_hcd.3: stop threads [ 907.301795][ T7827] vhci_hcd vhci_hcd.3: release socket [ 907.303592][ T7827] vhci_hcd vhci_hcd.3: disconnect device [ 907.538867][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 907.722092][T15247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1859'. [ 908.907369][T15258] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 909.218155][T15267] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 909.220262][T15267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 909.287922][T15267] vhci_hcd vhci_hcd.0: Device attached [ 909.552075][ T6057] usb 42-1: SetAddress Request (75) to port 0 [ 909.554836][ T6057] usb 42-1: new SuperSpeed USB device number 75 using vhci_hcd [ 909.665973][T14997] udevd[14997]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 909.991878][T15268] vhci_hcd: connection reset by peer [ 909.993871][ T13] vhci_hcd vhci_hcd.2: stop threads [ 909.995602][ T13] vhci_hcd vhci_hcd.2: release socket [ 909.997480][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 910.526007][T15292] netlink: 'syz.1.1868': attribute type 4 has an invalid length. [ 910.529293][T15292] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 910.558389][T15293] tc_dump_action: action bad kind [ 910.582289][T15292] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1868'. [ 910.999344][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1867'. [ 911.172493][ T7349] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 911.492489][T15294] could not allocate digest TFM handle cbcmac(aes) [ 913.077603][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 913.843065][T15337] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 913.845398][T15337] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 913.849139][T15337] vhci_hcd vhci_hcd.0: Device attached [ 914.158335][ T34] usb 40-1: SetAddress Request (77) to port 0 [ 914.161176][ T34] usb 40-1: new SuperSpeed USB device number 77 using vhci_hcd [ 914.170309][T15346] netlink: zone id is out of range [ 914.204078][T15346] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1876'. [ 914.264681][T15347] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 914.269021][T15347] overlayfs: maximum fs stacking depth exceeded [ 914.444373][T15339] vhci_hcd: connection reset by peer [ 914.448973][ T1177] vhci_hcd vhci_hcd.1: stop threads [ 914.451145][ T1177] vhci_hcd vhci_hcd.1: release socket [ 914.454661][ T1177] vhci_hcd vhci_hcd.1: disconnect device [ 914.503498][T15346] gretap0: entered promiscuous mode [ 914.603107][ T6057] usb 42-1: device descriptor read/8, error -110 [ 914.683750][ T6008] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 914.784794][T15352] overlay: Unknown parameter 'seclabel' [ 914.843239][ T6008] usb 8-1: Using ep0 maxpacket: 32 [ 914.847569][ T6008] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 914.850972][ T6008] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 914.859292][T15356] tc_dump_action: action bad kind [ 914.859783][ T6008] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 914.871036][ T6008] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 914.881422][ T6008] usb 8-1: config 0 interface 0 has no altsetting 0 [ 914.890932][ T6008] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 914.896234][ T6008] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 914.898903][ T6008] usb 8-1: Product: syz [ 914.900283][ T6008] usb 8-1: Manufacturer: syz [ 914.901794][ T6008] usb 8-1: SerialNumber: syz [ 914.912032][ T6008] usb 8-1: config 0 descriptor?? [ 914.921380][ T6008] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 914.932087][ T6008] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 915.004480][ T6057] usb usb42-port1: attempt power cycle [ 915.596643][ T6057] usb usb42-port1: unable to enumerate USB device [ 916.664979][T15363] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 916.687295][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'. [ 916.693842][T15363] netlink: 'syz.1.1880': attribute type 5 has an invalid length. [ 916.701438][T15363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1880'. [ 916.784272][T15363] geneve3: entered promiscuous mode [ 916.804368][T15363] geneve3: entered allmulticast mode [ 916.969849][ T60] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 916.973652][ T60] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 916.977134][ T60] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 916.980651][ T60] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 917.081669][T15377] Invalid source name [ 917.366349][ T54] usb 8-1: USB disconnect, device number 11 [ 917.382534][ T54] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 917.666095][T15383] tmpfs: Bad value for 'mpol' [ 917.708698][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 917.715084][T15384] netfs: Duplicate cookie detected [ 917.717283][T15384] netfs: O-cookie c=0000000a [fl=4000 na=0 nA=0 s=-] [ 917.719939][T15384] netfs: O-cookie V=00000010 [9p,syz,] [ 917.722152][T15384] netfs: O-key=[8] '5d00580400000000' [ 917.724036][T15384] netfs: N-cookie c=0000000b [fl=8 na=0 nA=0 s=-] [ 917.726703][T15384] netfs: N-cookie V=00000010 [9p,syz,] [ 917.729083][T15384] netfs: N-key=[8] '5d00580400000000' [ 917.812688][T15383] random: crng reseeded on system resumption [ 917.818418][T15383] Restarting kernel threads ... [ 917.821725][T15383] Done restarting kernel threads. [ 919.133046][T15395] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 919.136033][T15395] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 919.164333][T15395] vhci_hcd vhci_hcd.0: Device attached [ 919.244168][ T34] usb 40-1: device descriptor read/8, error -110 [ 919.698197][T15404] netlink: 'syz.2.1887': attribute type 4 has an invalid length. [ 919.790502][T15396] vhci_hcd: connection closed [ 919.790992][ T7827] vhci_hcd vhci_hcd.0: stop threads [ 919.796106][ T7827] vhci_hcd vhci_hcd.0: release socket [ 919.798273][ T7827] vhci_hcd vhci_hcd.0: disconnect device [ 919.808820][T15406] netlink: 'syz.2.1887': attribute type 4 has an invalid length. [ 919.955754][ T34] usb usb40-port1: attempt power cycle [ 920.120393][ T24] usb 38-1: enqueue for inactive port 0 [ 920.244811][T15409] tipc: Failed to remove unknown binding: 66,1,1/4:886006467/886006469 [ 920.249110][T15409] tipc: Failed to remove unknown binding: 66,1,1/4:886006467/886006469 [ 920.252512][T15409] tipc: Failed to remove unknown binding: 66,1,1/4:886006467/886006469 [ 920.295065][T15409] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 920.686280][ T34] usb usb40-port1: unable to enumerate USB device [ 920.855467][ T24] usb usb38-port1: attempt power cycle [ 920.906069][T15418] virtio-fs: tag not found [ 921.350051][T15428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1896'. [ 921.354103][T15428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1896'. [ 921.438424][ T24] usb usb38-port1: unable to enumerate USB device [ 921.847406][T15428] Process accounting resumed [ 921.904233][T15424] random: crng reseeded on system resumption [ 922.549645][T15441] : renamed from bond_slave_0 (while UP) [ 922.602618][T15442] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 922.604734][T15442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 922.609928][T15442] vhci_hcd vhci_hcd.0: Device attached [ 922.875042][ T6008] usb 38-1: SetAddress Request (86) to port 0 [ 922.879361][ T6008] usb 38-1: new SuperSpeed USB device number 86 using vhci_hcd [ 923.263204][T15443] vhci_hcd: connection reset by peer [ 923.267112][ T6227] vhci_hcd vhci_hcd.0: stop threads [ 923.269540][ T6227] vhci_hcd vhci_hcd.0: release socket [ 923.271797][ T6227] vhci_hcd vhci_hcd.0: disconnect device [ 923.706397][T15453] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 923.708500][T15453] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 923.711214][T15453] vhci_hcd vhci_hcd.0: Device attached [ 923.985330][ T24] usb 40-1: SetAddress Request (81) to port 0 [ 923.988093][ T24] usb 40-1: new SuperSpeed USB device number 81 using vhci_hcd [ 924.727916][T15459] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 924.730066][T15459] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 924.735199][T15459] vhci_hcd vhci_hcd.0: Device attached [ 925.005555][ T5989] usb 42-1: SetAddress Request (79) to port 0 [ 925.007715][ T5989] usb 42-1: new SuperSpeed USB device number 79 using vhci_hcd [ 925.204728][T15454] vhci_hcd: connection reset by peer [ 925.213420][ T8026] vhci_hcd vhci_hcd.1: stop threads [ 925.221931][ T8026] vhci_hcd vhci_hcd.1: release socket [ 925.232596][ T8026] vhci_hcd vhci_hcd.1: disconnect device [ 925.246420][T15465] vhci_hcd: connection reset by peer [ 925.248775][ T6227] vhci_hcd vhci_hcd.2: stop threads [ 925.251170][ T6227] vhci_hcd vhci_hcd.2: release socket [ 925.255510][ T6227] vhci_hcd vhci_hcd.2: disconnect device [ 927.411565][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 927.976121][ T6008] usb 38-1: device descriptor read/8, error -110 [ 928.586735][ T6008] usb usb38-port1: attempt power cycle [ 929.086446][ T24] usb 40-1: device descriptor read/8, error -110 [ 929.157177][ T6008] usb usb38-port1: unable to enumerate USB device [ 929.487340][ T24] usb usb40-port1: attempt power cycle [ 930.047950][ T24] usb usb40-port1: unable to enumerate USB device [ 930.056671][ T5989] usb 42-1: device descriptor read/8, error -110 [ 930.467579][ T5989] usb usb42-port1: attempt power cycle [ 931.480801][ T5989] usb usb42-port1: unable to enumerate USB device [ 931.756899][ T5989] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 931.931430][ T5989] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 931.934897][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 931.954166][ T5989] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 931.957521][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 931.962047][ T5989] usb 7-1: Product: syz [ 931.963485][ T5989] usb 7-1: Manufacturer: syz [ 931.966710][ T5989] usb 7-1: SerialNumber: syz [ 931.976808][ T5989] usb 7-1: config 0 descriptor?? [ 931.988408][ T5989] usb 7-1: selecting invalid altsetting 0 [ 932.078817][T15524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 932.080964][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 932.094638][T15524] vhci_hcd vhci_hcd.0: Device attached [ 932.301771][T15525] vhci_hcd: connection closed [ 932.315500][ T6866] vhci_hcd vhci_hcd.3: stop threads [ 932.370490][ T6866] vhci_hcd vhci_hcd.3: release socket [ 932.385253][ T6866] vhci_hcd vhci_hcd.3: disconnect device [ 933.398272][ T5989] usb 7-1: USB disconnect, device number 9 [ 933.902099][T15548] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 933.904995][T15548] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 933.932220][T15548] vhci_hcd vhci_hcd.0: Device attached [ 933.935036][ T29] libceph: connect (1)[c::]:6789 error -101 [ 933.944012][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 934.048996][T15547] ceph: No mds server is up or the cluster is laggy [ 934.210310][ T29] libceph: connect (1)[c::]:6789 error -101 [ 934.224928][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 934.248630][ T5989] usb 38-1: SetAddress Request (90) to port 0 [ 934.250779][ T5989] usb 38-1: new SuperSpeed USB device number 90 using vhci_hcd [ 934.446277][T15549] vhci_hcd: connection reset by peer [ 934.455364][T14637] vhci_hcd vhci_hcd.0: stop threads [ 934.457855][T14637] vhci_hcd vhci_hcd.0: release socket [ 934.460488][T14637] vhci_hcd vhci_hcd.0: disconnect device [ 935.096839][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'. [ 935.232237][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 935.282667][T15579] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 935.284812][T15579] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 935.580348][T15579] vhci_hcd vhci_hcd.0: Device attached [ 936.101937][ T29] usb 40-1: SetAddress Request (85) to port 0 [ 936.104483][ T29] usb 40-1: new SuperSpeed USB device number 85 using vhci_hcd [ 936.868625][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.870987][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.964356][T15580] vhci_hcd: connection reset by peer [ 936.972522][ T1065] vhci_hcd vhci_hcd.1: stop threads [ 936.974622][ T1065] vhci_hcd vhci_hcd.1: release socket [ 936.987314][ T1065] vhci_hcd vhci_hcd.1: disconnect device [ 937.222018][T15596] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 937.225972][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'. [ 937.229178][T15596] netlink: 'syz.3.1925': attribute type 5 has an invalid length. [ 937.231683][T15596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1925'. [ 937.306648][ T24] infiniband syz0: ib_query_port failed (-19) [ 937.425326][T15596] geneve4: entered promiscuous mode [ 937.427240][T15596] geneve4: entered allmulticast mode [ 937.526159][ T8895] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 937.588396][ T8895] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 937.728504][ T8895] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 937.731387][ T8895] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 938.280724][T15602] /dev/sr0: Can't open blockdev [ 939.328601][ T5989] usb 38-1: device descriptor read/8, error -110 [ 939.338801][T15623] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 939.340939][T15623] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 939.344504][T15623] vhci_hcd vhci_hcd.0: Device attached [ 939.628752][ T843] usb 44-1: SetAddress Request (78) to port 0 [ 939.632630][ T843] usb 44-1: new SuperSpeed USB device number 78 using vhci_hcd [ 939.714037][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 939.719281][ T5989] usb usb38-port1: attempt power cycle [ 939.875297][T15624] vhci_hcd: connection reset by peer [ 939.877472][ T1177] vhci_hcd vhci_hcd.3: stop threads [ 939.880176][ T1177] vhci_hcd vhci_hcd.3: release socket [ 939.882620][ T1177] vhci_hcd vhci_hcd.3: disconnect device [ 940.399443][ T5989] usb usb38-port1: unable to enumerate USB device [ 940.635735][T15643] 9p: Unknown Cache mode or invalid value fscach [ 940.728000][T15645] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 940.728000][T15645] program syz.0.1937 not setting count and/or reply_len properly [ 941.083722][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 941.168954][ T29] usb 40-1: device descriptor read/8, error -110 [ 941.560019][ T29] usb usb40-port1: attempt power cycle [ 942.669819][ T29] usb usb40-port1: unable to enumerate USB device [ 943.796631][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1944'. [ 943.839327][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 944.924643][ T843] usb 44-1: device descriptor read/8, error -110 [ 944.983271][ T60] smc: removing ib device syz2 [ 945.277558][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 945.330686][ T843] usb usb44-port1: attempt power cycle [ 945.900630][ T843] usb usb44-port1: unable to enumerate USB device [ 947.160931][ T60] ------------[ cut here ]------------ [ 947.163361][ T60] !xa_empty(&pool->xa) [ 947.163373][ T60] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: kworker/u32:3/60 [ 947.168729][ T60] Modules linked in: [ 947.170521][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u32:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.174533][ T60] Tainted: [L]=SOFTLOCKUP [ 947.175931][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 947.179284][ T60] Workqueue: ib-unreg-wq ib_unregister_work [ 947.181242][ T60] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 947.182987][ T60] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 96 58 64 f9 5b c3 cc cc cc cc e8 8b 58 64 f9 90 <0f> 0b 90 e8 82 58 64 f9 5b c3 cc cc cc cc e8 f7 ae cd f9 eb d0 0f [ 947.188974][ T60] RSP: 0018:ffffc900007bfb30 EFLAGS: 00010293 [ 947.190988][ T60] RAX: 0000000000000000 RBX: ffff8880129c5358 RCX: ffffffff887cee94 [ 947.193506][ T60] RDX: ffff8880209ca4c0 RSI: ffffffff88a1f675 RDI: ffff8880129c53d8 [ 947.196018][ T60] RBP: ffffffff88a05980 R08: 0000000000000005 R09: 0000000000000001 [ 947.198887][ T60] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880129c4698 [ 947.201548][ T60] R13: ffff8880129c3fe0 R14: ffff8880129c3fe0 R15: ffff8880129c50b8 [ 947.204130][ T60] FS: 0000000000000000(0000) GS:ffff8880974e5000(0000) knlGS:0000000000000000 [ 947.206947][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.209076][ T60] CR2: 0000000080005000 CR3: 000000000e392000 CR4: 0000000000352ef0 [ 947.211678][ T60] Call Trace: [ 947.212761][ T60] [ 947.213723][ T60] rxe_dealloc+0x25/0xc0 [ 947.215104][ T60] ib_dealloc_device+0x49/0x230 [ 947.216672][ T60] __ib_unregister_device+0x396/0x480 [ 947.218409][ T60] ? process_one_work+0x80b/0x1840 [ 947.220048][ T60] ? rcu_is_watching+0x12/0xc0 [ 947.221613][ T60] ib_unregister_work+0x19/0x30 [ 947.223200][ T60] process_one_work+0x9c2/0x1840 [ 947.224792][ T60] ? __pfx_process_one_work+0x10/0x10 [ 947.226512][ T60] ? assign_work+0x19c/0x250 [ 947.228011][ T60] worker_thread+0x5da/0xe40 [ 947.229520][ T60] ? kthread+0x17d/0x730 [ 947.230944][ T60] ? __pfx_worker_thread+0x10/0x10 [ 947.232691][ T60] kthread+0x3b3/0x730 [ 947.234043][ T60] ? __pfx_kthread+0x10/0x10 [ 947.235543][ T60] ? ret_from_fork+0x79/0xaf0 [ 947.236978][ T60] ? ret_from_fork+0x79/0xaf0 [ 947.238493][ T60] ? rcu_is_watching+0x12/0xc0 [ 947.240055][ T60] ? __pfx_kthread+0x10/0x10 [ 947.241680][ T60] ret_from_fork+0x754/0xaf0 [ 947.243431][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 947.245080][ T60] ? __switch_to+0x7b9/0x10c0 [ 947.246616][ T60] ? __pfx_kthread+0x10/0x10 [ 947.248140][ T60] ret_from_fork_asm+0x1a/0x30 [ 947.249713][ T60] [ 947.250801][ T60] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 947.253100][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u32:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.256489][ T60] Tainted: [L]=SOFTLOCKUP [ 947.258110][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 947.261426][ T60] Workqueue: ib-unreg-wq ib_unregister_work [ 947.263406][ T60] Call Trace: [ 947.264920][ T60] [ 947.266208][ T60] dump_stack_lvl+0x100/0x190 [ 947.268270][ T60] vpanic+0x20d/0x630 [ 947.269987][ T60] panic+0xd1/0xd1 [ 947.271737][ T60] ? __pfx_panic+0x10/0x10 [ 947.273615][ T60] ? check_panic_on_warn+0x1f/0x90 [ 947.275898][ T60] check_panic_on_warn.cold+0x19/0x34 [ 947.278219][ T60] ? rxe_pool_cleanup+0x46/0x60 [ 947.280347][ T60] __warn.cold+0x191/0x2f8 [ 947.282274][ T60] __report_bug+0x296/0x3d0 [ 947.284256][ T60] ? rxe_pool_cleanup+0x46/0x60 [ 947.286373][ T60] ? __pfx___report_bug+0x10/0x10 [ 947.288565][ T60] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 947.291192][ T60] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 947.293732][ T60] ? __flush_workqueue+0x426/0x1200 [ 947.295957][ T60] ? __mutex_unlock_slowpath+0x15c/0x790 [ 947.298310][ T60] ? rxe_pool_cleanup+0x46/0x60 [ 947.300387][ T60] report_bug+0xb2/0x220 [ 947.302239][ T60] ? rxe_pool_cleanup+0x46/0x60 [ 947.304374][ T60] handle_bug+0x166/0x2a0 [ 947.306272][ T60] exc_invalid_op+0x17/0x50 [ 947.308294][ T60] asm_exc_invalid_op+0x1a/0x20 [ 947.310429][ T60] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 947.312766][ T60] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 96 58 64 f9 5b c3 cc cc cc cc e8 8b 58 64 f9 90 <0f> 0b 90 e8 82 58 64 f9 5b c3 cc cc cc cc e8 f7 ae cd f9 eb d0 0f [ 947.321000][ T60] RSP: 0018:ffffc900007bfb30 EFLAGS: 00010293 [ 947.323639][ T60] RAX: 0000000000000000 RBX: ffff8880129c5358 RCX: ffffffff887cee94 [ 947.326488][ T60] RDX: ffff8880209ca4c0 RSI: ffffffff88a1f675 RDI: ffff8880129c53d8 [ 947.329553][ T60] RBP: ffffffff88a05980 R08: 0000000000000005 R09: 0000000000000001 [ 947.332896][ T60] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880129c4698 [ 947.335790][ T60] R13: ffff8880129c3fe0 R14: ffff8880129c3fe0 R15: ffff8880129c50b8 [ 947.338826][ T60] ? __pfx_rxe_dealloc+0x10/0x10 [ 947.340989][ T60] ? __ib_unregister_device+0x384/0x480 [ 947.343384][ T60] ? rxe_pool_cleanup+0x45/0x60 [ 947.345426][ T60] rxe_dealloc+0x25/0xc0 [ 947.347262][ T60] ib_dealloc_device+0x49/0x230 [ 947.348978][ T60] __ib_unregister_device+0x396/0x480 [ 947.350968][ T60] ? process_one_work+0x80b/0x1840 [ 947.353080][ T60] ? rcu_is_watching+0x12/0xc0 [ 947.355050][ T60] ib_unregister_work+0x19/0x30 [ 947.357060][ T60] process_one_work+0x9c2/0x1840 [ 947.358814][ T60] ? __pfx_process_one_work+0x10/0x10 [ 947.360556][ T60] ? assign_work+0x19c/0x250 [ 947.362591][ T60] worker_thread+0x5da/0xe40 [ 947.364549][ T60] ? kthread+0x17d/0x730 [ 947.366376][ T60] ? __pfx_worker_thread+0x10/0x10 [ 947.368642][ T60] kthread+0x3b3/0x730 [ 947.370122][ T60] ? __pfx_kthread+0x10/0x10 [ 947.371793][ T60] ? ret_from_fork+0x79/0xaf0 [ 947.373638][ T60] ? ret_from_fork+0x79/0xaf0 [ 947.375568][ T60] ? rcu_is_watching+0x12/0xc0 [ 947.377619][ T60] ? __pfx_kthread+0x10/0x10 [ 947.379665][ T60] ret_from_fork+0x754/0xaf0 [ 947.381645][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 947.383544][ T60] ? __switch_to+0x7b9/0x10c0 [ 947.385306][ T60] ? __pfx_kthread+0x10/0x10 [ 947.387287][ T60] ret_from_fork_asm+0x1a/0x30 [ 947.389405][ T60] [ 947.391464][ T60] Kernel Offset: disabled [ 947.393195][ T60] Rebooting in 86400 seconds..