last executing test programs: 12.857504153s ago: executing program 1 (id=2538): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1, 0x2}, 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) utimensat(r3, &(0x7f0000000080)='./mnt\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="85533da79fcded66d8cca4b8e4995697c24685784cc42ed1a48831bfd9b9d18dc46beb74b6c11fe81a0da58b6f", 0x2d) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r9 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r9, 0x403c6f2b, &(0x7f0000001e40)={0x2, {"140080bb675e8a00008e62c8c1c88a00", "0000000000000300", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r7, 0x0, 0x100000000000000}, 0x38) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000023c0)=ANY=[@ANYBLOB="1c000000070601640000000000000000000000000000010000000000f390ae435c005ef53bab9f8d3b1270b56f3c2533da3e3a46f6f3e2af43b2c8bed9d1d0e7e0be0a6133b4e93bc4b3b0e7ff044d480bf1fcc6a78f00caec6bc9e42eb02063829bbf37f5546bd4bb63082226c16b3c47"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) 9.94603646s ago: executing program 1 (id=2542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x230}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@setlink={0x30, 0x13, 0x501, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10002, 0x30}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000018}, 0xc000) poll(0x0, 0x0, 0x800) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 9.806851495s ago: executing program 2 (id=2543): landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r1 = gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0x42f, 0x870bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100e}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/96, 0x60}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) 9.793136113s ago: executing program 3 (id=2544): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000b80)='loginuid\x00') ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e, 0x24}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163c0000800000827600"/38, 0x26}, {&(0x7f00000004c0)="f0580500", 0x4}], 0x2}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2bc, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'veth1\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xa, 0x7}}}, {{@ip={@remote, @multicast1, 0x0, 0xffffffff, 'macvlan1\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x33, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x318) 9.517500357s ago: executing program 3 (id=2545): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x415, 0x34343459, 0x6436f12a94c2ac80, @stepwise={0x7, 0xfff, 0x0, 0xac3, 0x200, 0x8}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) r3 = syz_io_uring_setup(0x54d, &(0x7f0000000440)={0x0, 0x735a, 0x100, 0x805, 0x388}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r0, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 9.417628915s ago: executing program 3 (id=2546): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r2 = gettid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0x42f, 0x870bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100e}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x24004814, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8.028008534s ago: executing program 2 (id=2548): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) listen(r5, 0x80) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000180)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 7.781879667s ago: executing program 3 (id=2549): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r2 = gettid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0x42f, 0x870bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100e}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24004814, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) readv(r7, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/96, 0x60}], 0x1) 7.175280208s ago: executing program 0 (id=2550): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1, 0x2}, 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) utimensat(r3, &(0x7f0000000080)='./mnt\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="85533da79fcded66d8cca4b8e4995697c24685784cc42ed1a48831bfd9b9d18dc46beb74b6c11fe81a0da58b6fef", 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r9 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r9, 0x403c6f2b, &(0x7f0000001e40)={0x2, {"140080bb675e8a00008e62c8c1c88a00", "0000000000000300", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r7, 0x0, 0x100000000000000}, 0x38) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000023c0)=ANY=[@ANYBLOB="1c000000070601640000000000000000000000000000010000000000f390ae435c005ef53bab9f8d3b1270b56f3c2533da3e3a46f6f3e2af43b2c8bed9d1d0e7e0be0a6133b4e93bc4b3b0e7ff044d480bf1fcc6a78f00caec6bc9e42eb02063829bbf37f5546bd4bb63082226c16b3c47"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) 6.267247861s ago: executing program 1 (id=2551): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x14048007}, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x13df01dc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x8, 0x0, 0x313, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 6.257948886s ago: executing program 2 (id=2559): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x14048007}, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x8, 0x0, 0x313, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x8108}, {r6, 0x441}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x12) 6.077893824s ago: executing program 0 (id=2552): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x14048007}, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x8, 0x0, 0x313, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.497914786s ago: executing program 0 (id=2553): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x415, 0x34343459, 0x6436f12a94c2ac80, @stepwise={0x7, 0xfff, 0x0, 0xac3, 0x200, 0x8}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x26, 0x4004, @fd=r3, 0x800, 0x6, 0x3, 0x19, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000300)=0x1, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_io_uring_setup(0x54d, &(0x7f0000000440)={0x0, 0x735a, 0x100, 0x805, 0x388}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r0, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.40479858s ago: executing program 1 (id=2554): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x415, 0x34343459, 0x6436f12a94c2ac80, @stepwise={0x7, 0xfff, 0x0, 0xac3, 0x200, 0x8}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) r3 = syz_io_uring_setup(0x54d, &(0x7f0000000440)={0x0, 0x735a, 0x100, 0x805, 0x388}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r0, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.369801565s ago: executing program 2 (id=2555): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x14048007}, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x8, 0x0, 0x313, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x8108}, {r6, 0x441}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x12) 3.227981404s ago: executing program 0 (id=2556): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x415, 0x34343459, 0x6436f12a94c2ac80, @stepwise={0x7, 0xfff, 0x0, 0xac3, 0x200, 0x8}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x26, 0x4004, @fd=r3, 0x800, 0x6, 0x3, 0x19, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000300)=0x1, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_io_uring_setup(0x54d, &(0x7f0000000440)={0x0, 0x735a, 0x100, 0x805, 0x388}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r0, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.227602819s ago: executing program 1 (id=2557): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x415, 0x34343459, 0x6436f12a94c2ac80, @stepwise={0x7, 0xfff, 0x0, 0xac3, 0x200, 0x8}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x26, 0x4004, @fd=r3, 0x800, 0x6, 0x3, 0x19, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000300)=0x1, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_io_uring_setup(0x54d, &(0x7f0000000440)={0x0, 0x735a, 0x100, 0x805, 0x388}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r0, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.238294651s ago: executing program 3 (id=2558): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x14048007}, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x8, 0x0, 0x313, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x8108}, {r6, 0x441}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x12) 1.2304293s ago: executing program 1 (id=2560): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r2 = gettid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0x42f, 0x870bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100e}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x24004814, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.140703647s ago: executing program 2 (id=2561): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x415, 0x34343459, 0x6436f12a94c2ac80, @stepwise={0x7, 0xfff, 0x0, 0xac3, 0x200, 0x8}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x26, 0x4004, @fd=r3, 0x800, 0x6, 0x3, 0x19, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000300)=0x1, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_io_uring_setup(0x54d, &(0x7f0000000440)={0x0, 0x735a, 0x100, 0x805, 0x388}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r0, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 997.727928ms ago: executing program 0 (id=2562): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x415, 0x34343459, 0x6436f12a94c2ac80, @stepwise={0x7, 0xfff, 0x0, 0xac3, 0x200, 0x8}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x26, 0x4004, @fd=r3, 0x800, 0x6, 0x3, 0x19, 0x1, {0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x54d, &(0x7f0000000440)={0x0, 0x735a, 0x100, 0x805, 0x388}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r0, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 223.334557ms ago: executing program 0 (id=2563): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x14048007}, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x13df01dc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x8, 0x0, 0x313, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x441}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 222.294426ms ago: executing program 3 (id=2564): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0x3}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x4, 0x1, 0xfc, 0x0, 0x0, 0x2, 0x0, 0xfc, 0x0, 0x0, 0xd], 0x0, [0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0x0, 0x0, 0x634]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5b5ace107c0f0c1}, 0x24051) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0xfffff000) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x103801, 0x80) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 0s ago: executing program 2 (id=2565): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x415, 0x34343459, 0x6436f12a94c2ac80, @stepwise={0x7, 0xfff, 0x0, 0xac3, 0x200, 0x8}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x26, 0x4004, @fd=r3, 0x800, 0x6, 0x3, 0x19, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000300)=0x1, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_io_uring_setup(0x54d, &(0x7f0000000440)={0x0, 0x735a, 0x100, 0x805, 0x388}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r0, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): slave_1 [ 573.176474][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.179668][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.183196][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.187346][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.195908][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.206933][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.210784][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.227833][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.406747][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 576.874648][ T5957] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 577.179980][T13624] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 577.182831][T13624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 577.186498][T13624] vhci_hcd vhci_hcd.0: Device attached [ 577.277504][T13624] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 577.320037][T13624] 8021q: adding VLAN 0 to HW filter on device bond5 [ 577.428050][ T6041] usb 43-1: new low-speed USB device number 7 using vhci_hcd [ 577.726313][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 577.910915][T13625] vhci_hcd: connection reset by peer [ 577.915399][ T13] vhci_hcd vhci_hcd.3: stop threads [ 577.922611][ T13] vhci_hcd vhci_hcd.3: release socket [ 577.926350][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 578.278702][ T40] audit: type=1326 audit(1773622721.798:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34f88 code=0x7ffc0000 [ 578.295732][ T40] audit: type=1326 audit(1773622721.798:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 578.348098][ T40] audit: type=1326 audit(1773622721.798:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 578.389174][ T40] audit: type=1326 audit(1773622721.798:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34f88 code=0x7ffc0000 [ 578.417184][ T40] audit: type=1326 audit(1773622721.798:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 578.476676][ T40] audit: type=1326 audit(1773622721.798:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34f88 code=0x7ffc0000 [ 578.496995][ T40] audit: type=1326 audit(1773622721.798:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34f88 code=0x7ffc0000 [ 578.505363][ T40] audit: type=1326 audit(1773622721.798:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34f88 code=0x7ffc0000 [ 578.521013][ T40] audit: type=1326 audit(1773622721.798:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 578.529141][ T40] audit: type=1326 audit(1773622721.798:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 578.638127][ T5957] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 578.647043][ T5957] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 578.849356][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 580.025856][T13689] usb usb8: usbfs: process 13689 (syz.0.1555) did not claim interface 0 before use [ 580.105463][T13687] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 580.108353][T13687] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 580.113564][T13687] vhci_hcd vhci_hcd.0: Device attached [ 580.152558][T13687] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 580.180283][T13687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 580.345913][T13690] vhci_hcd: connection closed [ 580.506805][ T106] vhci_hcd vhci_hcd.3: stop threads [ 580.511285][ T106] vhci_hcd vhci_hcd.3: release socket [ 580.520558][ T106] vhci_hcd vhci_hcd.3: disconnect device [ 581.117081][ T5957] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 581.133268][T13704] syzkaller0: entered promiscuous mode [ 581.135185][T13704] syzkaller0: entered allmulticast mode [ 581.504049][T13718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 581.506368][T13718] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 581.511914][T13718] vhci_hcd vhci_hcd.0: Device attached [ 581.533855][T13722] binder: 13716:13722 ioctl c0306201 80000040 returned -22 [ 581.542050][T13722] binder: 13716:13722 ioctl c0306201 80000640 returned -22 [ 581.589233][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 581.796979][ T1464] usb 38-1: SetAddress Request (70) to port 0 [ 581.799061][ T1464] usb 38-1: new SuperSpeed USB device number 70 using vhci_hcd [ 582.049045][T13719] vhci_hcd: connection reset by peer [ 582.052881][ T13] vhci_hcd vhci_hcd.0: stop threads [ 582.055035][ T13] vhci_hcd vhci_hcd.0: release socket [ 582.057641][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 582.823852][ T6041] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 582.955391][T11776] libceph: connect (1)[c::]:6789 error -101 [ 582.960859][T11776] libceph: mon0 (1)[c::]:6789 connect error [ 582.988946][T13729] ceph: No mds server is up or the cluster is laggy [ 583.421484][ T5998] libceph: connect (1)[c::]:6789 error -101 [ 583.423492][ T5998] libceph: mon0 (1)[c::]:6789 connect error [ 583.518061][ T5957] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 584.102920][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'. [ 584.106488][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'. [ 584.520401][ T5957] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 584.524272][T13755] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 584.526570][T13755] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.537566][T13755] vhci_hcd vhci_hcd.0: Device attached [ 584.577556][T13755] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 584.623584][T13755] 8021q: adding VLAN 0 to HW filter on device bond9 [ 584.778629][T13756] vhci_hcd: connection closed [ 584.779287][T10391] vhci_hcd vhci_hcd.2: stop threads [ 584.783483][T10391] vhci_hcd vhci_hcd.2: release socket [ 584.787928][ T6041] usb 41-1: new low-speed USB device number 10 using vhci_hcd [ 584.801530][T10391] vhci_hcd vhci_hcd.2: disconnect device [ 585.237850][T13767] binder: 13763:13767 ioctl c0306201 80000040 returned -22 [ 585.240591][T13767] binder: 13763:13767 ioctl c0306201 80000640 returned -22 [ 585.243673][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 585.796941][ T6740] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 585.958302][ T6740] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 585.961694][ T6740] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 585.964718][ T6740] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.968762][ T6740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.974056][ T6740] usb 5-1: config 0 descriptor?? [ 586.122981][T13779] binder: 13778:13779 ioctl 4018620d 0 returned -22 [ 586.125413][T13779] binder: 13778:13779 ioctl c0306201 800004c0 returned -14 [ 586.839687][ T5957] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 586.897255][ T1464] usb 38-1: device descriptor read/8, error -110 [ 587.371820][ T1464] usb usb38-port1: attempt power cycle [ 587.712394][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 587.715268][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 587.736895][T13794] netlink: 'syz.3.1583': attribute type 7 has an invalid length. [ 587.739380][T13794] netlink: 'syz.3.1583': attribute type 13 has an invalid length. [ 587.883447][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 587.947503][ T1464] usb usb38-port1: unable to enumerate USB device [ 588.246514][T13807] usb usb8: usbfs: process 13807 (syz.3.1586) did not claim interface 0 before use [ 588.674845][T13810] syzkaller0: entered promiscuous mode [ 588.679109][T13810] syzkaller0: entered allmulticast mode [ 588.784639][T13813] binder: 13811:13813 ioctl c0306201 80000040 returned -22 [ 588.787484][T13813] binder: 13811:13813 ioctl c0306201 80000640 returned -22 [ 591.366330][ T6041] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 591.588797][ T6040] usb 5-1: USB disconnect, device number 42 [ 593.383316][T13846] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.387007][T13846] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.390623][T13846] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.401743][T13846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 593.427984][T13846] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.432878][T13846] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.441572][T13846] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.456585][T13846] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.484389][T13852] usb usb8: usbfs: process 13852 (syz.1.1597) did not claim interface 0 before use [ 593.569583][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 593.637014][T13856] binder: 13854:13856 ioctl c0306201 80000040 returned -22 [ 593.645726][T13856] binder: 13854:13856 ioctl c0306201 80000640 returned -22 [ 593.910606][ T5957] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 594.141575][T13868] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 594.144508][T13868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 594.148001][T13868] vhci_hcd vhci_hcd.0: Device attached [ 594.687693][ T6041] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 594.690737][T13868] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 595.000520][T13868] 8021q: adding VLAN 0 to HW filter on device bond9 [ 595.194291][T13878] FAULT_INJECTION: forcing a failure. [ 595.194291][T13878] name failslab, interval 1, probability 0, space 0, times 0 [ 595.203825][T13878] CPU: 1 UID: 0 PID: 13878 Comm: syz.2.1604 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.203858][T13878] Tainted: [L]=SOFTLOCKUP [ 595.203864][T13878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 595.203875][T13878] Call Trace: [ 595.203880][T13878] [ 595.203888][T13878] dump_stack_lvl+0x100/0x190 [ 595.203919][T13878] should_fail_ex.cold+0x5/0xa [ 595.203940][T13878] should_failslab+0xc2/0x120 [ 595.203959][T13878] __kmalloc_cache_noprof+0x7a/0x6f0 [ 595.203981][T13878] ? tcf_action_init_1+0x27e/0x6c0 [ 595.203999][T13878] ? __nla_parse+0x40/0x60 [ 595.204027][T13878] tcf_action_init_1+0x27e/0x6c0 [ 595.204048][T13878] ? __pfx_tcf_action_init_1+0x10/0x10 [ 595.204078][T13878] ? tcf_action_fill_size+0x110/0x340 [ 595.204102][T13878] tcf_action_init+0x43f/0xa60 [ 595.204130][T13878] ? __pfx_tcf_action_init+0x10/0x10 [ 595.204199][T13878] tcf_action_add+0xed/0x5c0 [ 595.204222][T13878] ? __pfx_tcf_action_add+0x10/0x10 [ 595.204240][T13878] ? find_held_lock+0x2b/0x80 [ 595.204263][T13878] ? __nla_parse+0x40/0x60 [ 595.204280][T13878] tc_ctl_action+0x2e3/0x470 [ 595.204292][T13878] ? __pfx_tc_ctl_action+0x10/0x10 [ 595.204308][T13878] ? __pfx_tc_ctl_action+0x10/0x10 [ 595.204320][T13878] rtnetlink_rcv_msg+0x3c9/0xe90 [ 595.204337][T13878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 595.204357][T13878] ? __lock_acquire+0x4a5/0x2630 [ 595.204373][T13878] netlink_rcv_skb+0x159/0x420 [ 595.204389][T13878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 595.204405][T13878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.204426][T13878] ? netlink_deliver_tap+0x1ae/0xcc0 [ 595.204444][T13878] netlink_unicast+0x5aa/0x870 [ 595.204462][T13878] ? __pfx_netlink_unicast+0x10/0x10 [ 595.204483][T13878] netlink_sendmsg+0x8b0/0xda0 [ 595.204501][T13878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.204519][T13878] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 595.204561][T13878] ____sys_sendmsg+0x9e1/0xb70 [ 595.204576][T13878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.204593][T13878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.204610][T13878] ___sys_sendmsg+0x190/0x1e0 [ 595.204622][T13878] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.204650][T13878] __sys_sendmsg+0x170/0x220 [ 595.204665][T13878] ? __pfx___sys_sendmsg+0x10/0x10 [ 595.204684][T13878] ? __pfx_ksys_write+0x10/0x10 [ 595.204697][T13878] __do_fast_syscall_32+0xe3/0x8c0 [ 595.204715][T13878] do_fast_syscall_32+0x32/0x70 [ 595.204731][T13878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 595.204744][T13878] RIP: 0023:0xf6fdef6c [ 595.204753][T13878] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 595.204763][T13878] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 595.204773][T13878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007940 [ 595.204780][T13878] RDX: 0000000000080000 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.204786][T13878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 595.204791][T13878] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 595.204797][T13878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 595.204810][T13878] [ 595.327124][T13869] vhci_hcd: connection reset by peer [ 595.431507][T10391] vhci_hcd vhci_hcd.0: stop threads [ 595.433789][T10391] vhci_hcd vhci_hcd.0: release socket [ 595.437230][T10391] vhci_hcd vhci_hcd.0: disconnect device [ 595.760646][T13883] overlay: Unknown parameter '/' [ 595.885768][T13890] binder: 13885:13890 ioctl 4018aee2 80000380 returned -22 [ 596.083580][T13899] usb usb8: usbfs: process 13899 (syz.3.1611) did not claim interface 0 before use [ 596.128700][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 596.143950][T13902] binder: 13901:13902 ioctl c0306201 0 returned -14 [ 597.168086][T13912] overlayfs: invalid origin (0000) [ 597.195185][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 597.217596][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 597.244651][T13914] input: syz1 as /devices/virtual/input/input55 [ 597.250196][T13917] binder: 13916:13917 ioctl c0306201 0 returned -14 [ 598.258813][T13927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 598.261066][T13927] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 598.268018][T13927] vhci_hcd vhci_hcd.0: Device attached [ 598.310623][T13927] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 598.319345][T13930] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 598.321519][T13930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 598.331974][T13930] vhci_hcd vhci_hcd.0: Device attached [ 598.366261][T13927] 8021q: adding VLAN 0 to HW filter on device bond7 [ 598.501770][T13928] vhci_hcd: connection closed [ 598.502155][T10398] vhci_hcd vhci_hcd.3: stop threads [ 598.507487][T10398] vhci_hcd vhci_hcd.3: release socket [ 598.509865][T10398] vhci_hcd vhci_hcd.3: disconnect device [ 598.657742][T13931] vhci_hcd: connection closed [ 598.657935][ T1223] vhci_hcd vhci_hcd.2: stop threads [ 598.661716][ T1223] vhci_hcd vhci_hcd.2: release socket [ 598.663545][ T1223] vhci_hcd vhci_hcd.2: disconnect device [ 598.666974][ T34] usb 42-1: enqueue for inactive port 0 [ 599.002494][T13939] binder: 13938:13939 ioctl c0306201 0 returned -14 [ 599.177734][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 599.187539][ T34] usb usb42-port1: attempt power cycle [ 599.758517][ T34] usb usb42-port1: unable to enumerate USB device [ 600.011622][T13957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1625'. [ 600.949565][ T5957] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 600.984584][ T6041] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 601.682067][T13980] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 601.685036][T13980] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.691974][T13980] vhci_hcd vhci_hcd.0: Device attached [ 601.891073][T13979] netlink: 'syz.3.1631': attribute type 1 has an invalid length. [ 601.941598][T13979] 8021q: adding VLAN 0 to HW filter on device bond8 [ 602.149013][T13981] vhci_hcd: connection closed [ 602.149259][ T1223] vhci_hcd vhci_hcd.3: stop threads [ 602.152843][ T1223] vhci_hcd vhci_hcd.3: release socket [ 602.154947][ T1223] vhci_hcd vhci_hcd.3: disconnect device [ 602.186953][T11776] usb 43-1: new low-speed USB device number 8 using vhci_hcd [ 602.190092][T11776] usb 43-1: enqueue for inactive port 0 [ 602.897110][T11776] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 602.902567][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 603.385374][ T5957] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 604.267112][ T842] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 604.347658][ T5998] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 604.419583][ T842] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 604.423690][ T842] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 604.427742][ T842] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.430697][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.435588][T14012] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 604.440117][ T842] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.498805][ T5998] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 604.502364][ T5998] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 604.648516][ T34] usb 7-1: USB disconnect, device number 49 [ 604.654218][ T5998] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 604.664260][ T5998] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.673506][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.692078][ T5998] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.729518][ T5998] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 604.752623][T14021] udevd[14021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.027753][ T60] usb 6-1: USB disconnect, device number 39 [ 605.465270][ T5957] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 605.678707][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 605.682277][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 605.685644][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 605.713292][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 605.722264][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 605.739236][T14041] usb usb8: usbfs: process 14041 (syz.1.1649) did not claim interface 0 before use [ 606.184074][ T5957] Bluetooth: hci3: unexpected event for opcode 0x040e [ 606.857090][ T34] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 606.875860][ T5957] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 607.028198][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.031740][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.034976][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.038532][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.047174][T14060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.051337][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.257747][ T34] usb 6-1: USB disconnect, device number 40 [ 609.250157][T14088] syzkaller0: entered promiscuous mode [ 609.252586][T14088] syzkaller0: entered allmulticast mode [ 610.068169][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'. [ 610.529023][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'. [ 612.767120][ T6019] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 612.998365][ T6019] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 613.001989][ T6019] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 613.005672][ T6019] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.009442][ T6019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.014889][ T6019] usb 5-1: config 0 descriptor?? [ 613.174101][T14131] syzkaller0: entered promiscuous mode [ 613.175920][T14131] syzkaller0: entered allmulticast mode [ 615.648582][T14163] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 615.651134][T14163] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 615.661757][T14163] vhci_hcd vhci_hcd.0: Device attached [ 615.927025][ T6019] usb 40-1: SetAddress Request (35) to port 0 [ 615.929879][ T6019] usb 40-1: new SuperSpeed USB device number 35 using vhci_hcd [ 616.124318][ T9] usb 5-1: USB disconnect, device number 43 [ 617.107478][T14164] vhci_hcd: connection reset by peer [ 617.168378][T10391] vhci_hcd vhci_hcd.1: stop threads [ 617.170629][T10391] vhci_hcd vhci_hcd.1: release socket [ 617.172962][T10391] vhci_hcd vhci_hcd.1: disconnect device [ 618.028018][T14186] syzkaller0: entered promiscuous mode [ 618.030319][T14186] syzkaller0: entered allmulticast mode [ 619.888992][T14212] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 619.891140][T14212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 619.893704][T14212] vhci_hcd vhci_hcd.0: Device attached [ 620.007235][T14212] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 620.125394][T14212] 8021q: adding VLAN 0 to HW filter on device bond17 [ 620.506900][T14213] vhci_hcd: connection closed [ 620.507176][ T1179] vhci_hcd vhci_hcd.1: stop threads [ 620.512504][ T1179] vhci_hcd vhci_hcd.1: release socket [ 620.515501][ T1179] vhci_hcd vhci_hcd.1: disconnect device [ 620.610436][T14226] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 620.613292][T14226] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 620.617215][T14226] vhci_hcd vhci_hcd.0: Device attached [ 620.887171][ T842] usb 44-1: SetAddress Request (51) to port 0 [ 620.889729][ T842] usb 44-1: new SuperSpeed USB device number 51 using vhci_hcd [ 620.957770][T14227] vhci_hcd: connection reset by peer [ 620.959716][ T1179] vhci_hcd vhci_hcd.3: stop threads [ 620.961477][ T1179] vhci_hcd vhci_hcd.3: release socket [ 620.963699][ T1179] vhci_hcd vhci_hcd.3: disconnect device [ 620.977301][ T6019] usb 40-1: device descriptor read/8, error -110 [ 621.399823][ T6019] usb usb40-port1: attempt power cycle [ 621.467804][ T5998] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 621.991918][T14243] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 621.994085][T14243] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 621.997264][T14243] vhci_hcd vhci_hcd.0: Device attached [ 622.123762][T14246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 622.125933][T14246] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 622.237353][ T24] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 622.268938][T14246] vhci_hcd vhci_hcd.0: Device attached [ 622.623949][T14247] vhci_hcd: connection closed [ 622.624562][ T12] vhci_hcd vhci_hcd.3: stop threads [ 622.629350][ T12] vhci_hcd vhci_hcd.3: release socket [ 622.641858][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 622.668758][T14243] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 622.696351][T14243] 8021q: adding VLAN 0 to HW filter on device bond10 [ 622.797911][ T6019] usb usb40-port1: unable to enumerate USB device [ 622.910318][T14244] vhci_hcd: connection reset by peer [ 622.912906][T10398] vhci_hcd vhci_hcd.0: stop threads [ 622.914787][T10398] vhci_hcd vhci_hcd.0: release socket [ 622.918787][T10398] vhci_hcd vhci_hcd.0: disconnect device [ 622.993151][T14263] syzkaller0: entered promiscuous mode [ 622.995161][T14263] syzkaller0: entered allmulticast mode [ 623.467351][T14267] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 623.470235][T14267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 623.478565][T14267] vhci_hcd vhci_hcd.0: Device attached [ 624.087209][T14268] vhci_hcd: connection closed [ 624.087587][T10388] vhci_hcd vhci_hcd.3: stop threads [ 624.091550][T10388] vhci_hcd vhci_hcd.3: release socket [ 624.093993][T10388] vhci_hcd vhci_hcd.3: disconnect device [ 624.530328][T14282] CIFS mount error: No usable UNC path provided in device string! [ 624.530328][T14282] [ 624.534069][T14282] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 624.909005][T14290] fuse: Bad value for 'fd' [ 625.168785][T14293] binder: 14291:14293 ioctl c0306201 0 returned -14 [ 625.171782][T14293] binder: 14291:14293 ioctl c0306201 80000640 returned -22 [ 626.159267][ T842] usb 44-1: device descriptor read/8, error -110 [ 626.563843][ T842] usb usb44-port1: attempt power cycle [ 627.272652][ T5957] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 627.359265][ T842] usb usb44-port1: unable to enumerate USB device [ 627.438296][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 628.267469][T14320] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 628.270554][T14320] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 628.274966][T14320] vhci_hcd vhci_hcd.0: Device attached [ 628.558414][T14321] vhci_hcd: connection closed [ 628.563393][ T59] vhci_hcd vhci_hcd.3: stop threads [ 628.580259][ T59] vhci_hcd vhci_hcd.3: release socket [ 628.589595][ T59] vhci_hcd vhci_hcd.3: disconnect device [ 628.607273][ T60] usb 44-1: SetAddress Request (55) to port 0 [ 628.611648][ T60] usb 44-1: new SuperSpeed USB device number 55 using vhci_hcd [ 628.924698][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.927709][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.129195][T14334] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 629.131445][T14334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.196301][T14334] vhci_hcd vhci_hcd.0: Device attached [ 629.456986][ T34] usb 39-1: new low-speed USB device number 16 using vhci_hcd [ 629.599078][T14334] netlink: 'syz.1.1721': attribute type 1 has an invalid length. [ 629.662486][T14334] 8021q: adding VLAN 0 to HW filter on device bond18 [ 629.688580][T14347] fuse: Bad value for 'fd' [ 630.406326][T14350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1726'. [ 630.470976][T14335] vhci_hcd: connection reset by peer [ 630.473551][ T12] vhci_hcd vhci_hcd.1: stop threads [ 630.475827][ T12] vhci_hcd vhci_hcd.1: release socket [ 630.486959][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 630.980659][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 630.983822][ T5957] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 633.159278][T14385] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 633.161988][T14385] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 633.165637][T14385] vhci_hcd vhci_hcd.0: Device attached [ 633.342465][T14386] vhci_hcd: connection closed [ 633.342727][ T12] vhci_hcd vhci_hcd.2: stop threads [ 633.350214][ T12] vhci_hcd vhci_hcd.2: release socket [ 633.354329][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 633.707315][ T60] usb 44-1: device descriptor read/8, error -110 [ 633.947007][ T60] usb 44-1: SetAddress Request (56) to port 0 [ 633.950407][ T60] usb 44-1: new SuperSpeed USB device number 56 using vhci_hcd [ 634.566955][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 634.886907][ T6040] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 634.916182][ T5957] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 635.038497][ T6040] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 635.042227][ T6040] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 635.045482][ T6040] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 635.066911][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.072610][ T6040] usb 5-1: config 0 descriptor?? [ 637.791607][T14433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 637.794483][T14433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.797870][T14433] vhci_hcd vhci_hcd.0: Device attached [ 637.831029][T14433] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 637.843801][T14433] 8021q: adding VLAN 0 to HW filter on device bond19 [ 638.018794][T14437] vhci_hcd: connection closed [ 638.019176][ T106] vhci_hcd vhci_hcd.1: stop threads [ 638.023071][ T106] vhci_hcd vhci_hcd.1: release socket [ 638.024927][ T106] vhci_hcd vhci_hcd.1: disconnect device [ 638.046992][ T6019] usb 39-1: new low-speed USB device number 17 using vhci_hcd [ 638.050240][ T6019] usb 39-1: enqueue for inactive port 0 [ 638.117241][ T6019] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 638.161985][ T24] usb 5-1: USB disconnect, device number 44 [ 638.977163][ T60] usb 44-1: device descriptor read/8, error -110 [ 639.191236][ T60] usb usb44-port1: attempt power cycle [ 639.279431][T14455] usb usb8: usbfs: process 14455 (syz.1.1756) did not claim interface 0 before use [ 639.421450][ T60] usb 44-1: SetAddress Request (57) to port 0 [ 639.424121][ T60] usb 44-1: new SuperSpeed USB device number 57 using vhci_hcd [ 639.972482][ T5957] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 644.090901][T14492] usb usb8: usbfs: process 14492 (syz.3.1766) did not claim interface 0 before use [ 645.337759][ T60] usb 44-1: device descriptor read/8, error -110 [ 645.727000][ T60] usb 44-1: SetAddress Request (58) to port 0 [ 645.741148][ T60] usb 44-1: new SuperSpeed USB device number 58 using vhci_hcd [ 646.785953][T14532] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 646.788156][T14532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 646.803576][T14532] vhci_hcd vhci_hcd.0: Device attached [ 647.058615][ T24] usb 41-1: new low-speed USB device number 11 using vhci_hcd [ 647.697270][T14532] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 648.058526][T14532] 8021q: adding VLAN 0 to HW filter on device bond10 [ 649.126884][T14533] vhci_hcd: connection reset by peer [ 649.129046][ T1179] vhci_hcd vhci_hcd.2: stop threads [ 649.131331][ T1179] vhci_hcd vhci_hcd.2: release socket [ 649.133800][ T1179] vhci_hcd vhci_hcd.2: disconnect device [ 649.892911][T14555] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 649.894967][T14555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 649.906978][T14555] vhci_hcd vhci_hcd.0: Device attached [ 649.982055][T14555] netlink: 'syz.3.1779': attribute type 1 has an invalid length. [ 650.143307][T14555] 8021q: adding VLAN 0 to HW filter on device bond9 [ 650.709599][T14556] vhci_hcd: connection closed [ 650.709829][ T12] vhci_hcd vhci_hcd.3: stop threads [ 650.713571][ T12] vhci_hcd vhci_hcd.3: release socket [ 650.717708][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 650.886449][T14572] binder: 14571:14572 ioctl c0306201 800004c0 returned -14 [ 651.057061][ T60] usb 44-1: device descriptor read/8, error -110 [ 651.167333][ T60] usb usb44-port1: unable to enumerate USB device [ 652.056937][T11776] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 652.897126][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 654.507006][T14615] vhci_hcd vhci_hcd.0: port 0 already used [ 655.105999][T14628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 655.108046][T14628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 655.111699][T14628] vhci_hcd vhci_hcd.0: Device attached [ 655.253018][T14628] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 655.354331][T14628] 8021q: adding VLAN 0 to HW filter on device bond11 [ 655.369755][ T6019] usb 41-1: new low-speed USB device number 12 using vhci_hcd [ 655.612642][T14629] vhci_hcd: connection reset by peer [ 655.615690][ T1179] vhci_hcd vhci_hcd.2: stop threads [ 655.617637][ T1179] vhci_hcd vhci_hcd.2: release socket [ 655.619566][ T1179] vhci_hcd vhci_hcd.2: disconnect device [ 656.583010][T14640] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 656.585485][T14640] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 656.611869][T14640] vhci_hcd vhci_hcd.0: Device attached [ 656.650192][T14640] netlink: 'syz.3.1798': attribute type 1 has an invalid length. [ 656.673256][T14640] 8021q: adding VLAN 0 to HW filter on device bond10 [ 656.792850][T14641] vhci_hcd: connection closed [ 656.793155][ T1179] vhci_hcd vhci_hcd.3: stop threads [ 656.796808][ T1179] vhci_hcd vhci_hcd.3: release socket [ 656.798875][ T1179] vhci_hcd vhci_hcd.3: disconnect device [ 656.847013][ T6041] usb 43-1: new low-speed USB device number 10 using vhci_hcd [ 656.850877][ T6041] usb 43-1: enqueue for inactive port 0 [ 657.004799][ T6041] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 658.812113][T14666] usb usb8: usbfs: process 14666 (syz.1.1807) did not claim interface 0 before use [ 659.850290][T14673] vhci_hcd vhci_hcd.0: port 0 already used [ 659.900585][T14681] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 659.903224][T14681] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.266930][ T34] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 660.418351][ T34] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 660.421783][ T34] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 660.425472][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 660.429447][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.433242][ T34] usb 5-1: config 0 descriptor?? [ 660.497399][ T6019] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 660.525813][T14681] vhci_hcd vhci_hcd.0: Device attached [ 660.777784][ T24] usb 39-1: new low-speed USB device number 18 using vhci_hcd [ 660.883269][T14681] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 661.029811][T14681] 8021q: adding VLAN 0 to HW filter on device bond20 [ 661.213345][T14682] vhci_hcd: connection closed [ 661.213480][ T106] vhci_hcd vhci_hcd.1: stop threads [ 661.217596][ T106] vhci_hcd vhci_hcd.1: release socket [ 661.219395][ T106] vhci_hcd vhci_hcd.1: disconnect device [ 661.343669][ T24] usb 39-1: enqueue for inactive port 0 [ 661.737259][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 663.183661][ T34] usb 5-1: USB disconnect, device number 45 [ 663.276768][T14716] usb usb8: usbfs: process 14716 (syz.0.1818) did not claim interface 0 before use [ 664.250148][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 664.584334][T14729] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 664.587207][T14729] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 664.613947][T14729] vhci_hcd vhci_hcd.0: Device attached [ 664.938018][ T6040] usb 38-1: SetAddress Request (74) to port 0 [ 664.945539][ T6040] usb 38-1: new SuperSpeed USB device number 74 using vhci_hcd [ 665.106160][T14730] vhci_hcd: connection reset by peer [ 665.125262][T10398] vhci_hcd vhci_hcd.0: stop threads [ 665.131367][T10398] vhci_hcd vhci_hcd.0: release socket [ 665.135091][T10398] vhci_hcd vhci_hcd.0: disconnect device [ 665.882927][T14744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 665.885368][T14744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.959156][T14744] vhci_hcd vhci_hcd.0: Device attached [ 666.121834][T14744] netlink: 'syz.2.1825': attribute type 1 has an invalid length. [ 666.267398][ T6019] usb 41-1: new low-speed USB device number 13 using vhci_hcd [ 666.314610][T14744] 8021q: adding VLAN 0 to HW filter on device bond12 [ 666.444925][T14745] vhci_hcd: connection reset by peer [ 666.487263][T10388] vhci_hcd vhci_hcd.2: stop threads [ 666.489224][T10388] vhci_hcd vhci_hcd.2: release socket [ 666.491176][T10388] vhci_hcd vhci_hcd.2: disconnect device [ 667.106781][T14763] usb usb8: usbfs: process 14763 (syz.2.1829) did not claim interface 0 before use [ 667.743382][T14767] virt_wifi0 speed is unknown, defaulting to 1000 [ 668.282592][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 669.477926][T14794] binder: 14791:14794 ioctl c0306201 0 returned -14 [ 669.733983][T14799] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 669.736158][T14799] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 669.739882][T14799] vhci_hcd vhci_hcd.0: Device attached [ 670.016967][ T6040] usb 38-1: device descriptor read/8, error -110 [ 670.195787][T14800] vhci_hcd: connection closed [ 670.196081][ T59] vhci_hcd vhci_hcd.2: stop threads [ 670.199849][ T59] vhci_hcd vhci_hcd.2: release socket [ 670.201749][ T59] vhci_hcd vhci_hcd.2: disconnect device [ 670.410516][ T6040] usb usb38-port1: attempt power cycle [ 671.367141][ T6019] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 671.617426][ T6040] usb usb38-port1: unable to enumerate USB device [ 672.387764][T14822] binder: 14821:14822 ioctl c0306201 800004c0 returned -14 [ 672.487128][ T6019] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 672.637632][ T24] usb usb42-port1: attempt power cycle [ 673.527183][ T6019] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 673.531589][ T6019] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 673.535518][ T6019] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 673.539875][ T6019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.546415][ T6019] usb 5-1: config 0 descriptor?? [ 673.672976][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 674.087786][ T24] usb usb42-port1: unable to enumerate USB device [ 675.006983][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 675.168369][ T24] usb 6-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 675.172374][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 675.175423][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.178700][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.184614][ T24] usb 6-1: config 0 descriptor?? [ 676.452877][T14848] vhci_hcd vhci_hcd.0: port 0 already used [ 677.037300][T11776] usb 5-1: USB disconnect, device number 46 [ 677.186773][T14863] binder: 14862:14863 ioctl c0306201 800004c0 returned -14 [ 677.790025][T14865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 677.792185][T14865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 677.795011][T14865] vhci_hcd vhci_hcd.0: Device attached [ 678.207101][T11776] usb 41-1: new low-speed USB device number 14 using vhci_hcd [ 678.228714][T14865] netlink: 'syz.2.1852': attribute type 1 has an invalid length. [ 678.341727][T14865] 8021q: adding VLAN 0 to HW filter on device bond13 [ 678.490194][T14868] vhci_hcd: connection reset by peer [ 678.493021][ T13] vhci_hcd vhci_hcd.2: stop threads [ 678.494730][ T13] vhci_hcd vhci_hcd.2: release socket [ 678.498708][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 678.799785][ T24] usb 6-1: USB disconnect, device number 41 [ 678.853469][T14880] binder: 14879:14880 ioctl c0306201 800004c0 returned -14 [ 680.362092][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 681.076922][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 681.228459][ T24] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 681.232747][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 681.236463][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 681.240456][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.244688][ T24] usb 5-1: config 0 descriptor?? [ 681.323329][T14904] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 681.326191][T14904] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 681.330473][T14904] vhci_hcd vhci_hcd.0: Device attached [ 681.489406][T14916] usb usb8: usbfs: process 14916 (syz.3.1864) did not claim interface 0 before use [ 681.530269][T14909] vhci_hcd: connection closed [ 681.530454][T10398] vhci_hcd vhci_hcd.1: stop threads [ 681.534760][T10398] vhci_hcd vhci_hcd.1: release socket [ 681.537489][T10398] vhci_hcd vhci_hcd.1: disconnect device [ 681.626925][T14400] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 681.777003][T14400] usb 7-1: Using ep0 maxpacket: 8 [ 681.779996][T14400] usb 7-1: config 0 has no interfaces? [ 681.781843][T14400] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 681.784860][T14400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.788912][T14400] usb 7-1: config 0 descriptor?? [ 681.992715][ T6576] usb 7-1: USB disconnect, device number 50 [ 682.178274][T14923] binder: BINDER_SET_CONTEXT_MGR already set [ 682.186935][T14923] binder: 14922:14923 ioctl 4018620d 80004a80 returned -16 [ 682.190028][T14923] binder: 14922:14923 ioctl c0306201 800004c0 returned -14 [ 683.839098][T11776] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 683.857666][ T1464] usb 5-1: USB disconnect, device number 47 [ 684.040176][T14944] fuse: Bad value for 'fd' [ 684.499407][T14952] usb usb8: usbfs: process 14952 (syz.2.1874) did not claim interface 0 before use [ 686.719933][T14958] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 686.722071][T14958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 686.729422][T14958] vhci_hcd vhci_hcd.0: Device attached [ 686.978213][T14961] vhci_hcd: connection closed [ 686.979948][ T106] vhci_hcd vhci_hcd.2: stop threads [ 686.989261][ T106] vhci_hcd vhci_hcd.2: release socket [ 686.991085][ T106] vhci_hcd vhci_hcd.2: disconnect device [ 687.007194][T11776] usb 42-1: enqueue for inactive port 0 [ 688.109930][T11776] usb usb42-port1: attempt power cycle [ 688.362611][T14982] binder: 14981:14982 ioctl c0306201 800004c0 returned -14 [ 688.831293][T14991] usb usb8: usbfs: process 14991 (syz.1.1883) did not claim interface 0 before use [ 688.837828][T11776] usb usb42-port1: unable to enumerate USB device [ 690.339183][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.341316][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.678887][T15019] usb usb8: usbfs: process 15019 (syz.1.1892) did not claim interface 0 before use [ 692.467176][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 692.711606][ T9] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 692.716812][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 692.723504][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.732691][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.746389][ T9] usb 5-1: config 0 descriptor?? [ 694.863690][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 695.130028][ T1464] usb 5-1: USB disconnect, device number 48 [ 695.159820][T15064] random: crng reseeded on system resumption [ 695.163987][T15063] usb usb8: usbfs: process 15063 (syz.3.1904) did not claim interface 0 before use [ 695.314698][T15071] ntfs3(nullb0): Primary boot signature is not NTFS. [ 695.317891][T15071] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 695.577020][T11776] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 695.638735][T15073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1908'. [ 695.737131][T11776] usb 5-1: Using ep0 maxpacket: 8 [ 695.747345][T11776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.751286][T11776] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 695.753927][T11776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 695.756297][T11776] usb 5-1: SerialNumber: syz [ 695.768190][T11776] usb 5-1: config 0 descriptor?? [ 697.553297][T15100] binder: 15099:15100 ioctl c0306201 800004c0 returned -14 [ 697.667953][ T34] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 697.838338][ T34] usb 6-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 697.841754][ T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 697.845096][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 697.848253][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.856041][ T34] usb 6-1: config 0 descriptor?? [ 698.120602][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 698.650118][T11776] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 698.657214][T11776] usb 5-1: USB disconnect, device number 49 [ 698.698379][T15113] usb usb8: usbfs: process 15113 (syz.0.1918) did not claim interface 0 before use [ 699.352507][T15125] x_tables: duplicate underflow at hook 1 [ 699.361700][T15125] hub 8-0:1.0: USB hub found [ 699.369602][T15125] hub 8-0:1.0: 1 port detected [ 700.367391][ T24] usb 6-1: USB disconnect, device number 42 [ 700.465498][T15145] binder: 15144:15145 ioctl c0306201 800004c0 returned -14 [ 702.464536][T15158] usb usb8: usbfs: process 15158 (syz.2.1932) did not claim interface 0 before use [ 702.465364][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 705.445300][T15200] usb usb8: usbfs: process 15200 (syz.2.1945) did not claim interface 0 before use [ 706.078387][T15219] binder: 15218:15219 ioctl c0306201 800004c0 returned -14 [ 707.850114][T15230] bridge0: port 3(veth0_to_bridge) entered blocking state [ 707.852681][T15230] bridge0: port 3(veth0_to_bridge) entered disabled state [ 707.857992][T15230] veth0_to_bridge: entered allmulticast mode [ 707.861025][T15230] veth0_to_bridge: entered promiscuous mode [ 708.156920][T11776] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 708.348631][T11776] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.352336][T11776] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.355800][T11776] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 708.359214][T11776] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 708.363384][T11776] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 708.366310][T11776] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.407399][T11776] usb 8-1: config 0 descriptor?? [ 708.827823][T11776] hid_parser_main: 5 callbacks suppressed [ 708.827841][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.832211][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.834602][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.842327][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.844762][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.852438][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.854877][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.862549][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.864973][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.867682][T11776] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 708.878751][T11776] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 708.892646][T15245] usb usb8: usbfs: process 15245 (syz.1.1959) did not claim interface 0 before use [ 709.119856][T11776] usb 8-1: USB disconnect, device number 22 [ 709.891661][T15272] binder: 15271:15272 ioctl c0306201 800004c0 returned -14 [ 710.175959][T15281] usb usb8: usbfs: process 15281 (syz.0.1971) did not claim interface 0 before use [ 712.693431][T15308] binder: 15307:15308 ioctl c0306201 800004c0 returned -14 [ 714.519977][T15310] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 714.521211][T15328] binder: 15327:15328 ioctl c0306201 800004c0 returned -14 [ 714.522845][T15310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 714.528921][T15310] vhci_hcd vhci_hcd.0: Device attached [ 714.766908][ T24] usb 41-1: new low-speed USB device number 15 using vhci_hcd [ 715.008352][T15310] netlink: 'syz.2.1980': attribute type 1 has an invalid length. [ 715.065385][T15310] 8021q: adding VLAN 0 to HW filter on device bond14 [ 715.213200][T15329] vhci_hcd: connection reset by peer [ 715.215257][ T13] vhci_hcd vhci_hcd.2: stop threads [ 715.217121][ T13] vhci_hcd vhci_hcd.2: release socket [ 715.219212][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 715.384048][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 717.037371][T15361] binder: 15360:15361 ioctl c0306201 800004c0 returned -14 [ 717.339974][T15365] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 717.342145][T15365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 717.345063][T15365] vhci_hcd vhci_hcd.0: Device attached [ 717.431635][T15365] netlink: 'syz.2.1991': attribute type 1 has an invalid length. [ 717.468881][T15365] 8021q: adding VLAN 0 to HW filter on device bond15 [ 717.917702][T15366] vhci_hcd: connection closed [ 717.917989][ T1179] vhci_hcd vhci_hcd.2: stop threads [ 717.921243][ T1179] vhci_hcd vhci_hcd.2: release socket [ 717.923041][ T1179] vhci_hcd vhci_hcd.2: disconnect device [ 718.568350][ T34] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 718.758953][ T34] usb 6-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 718.763505][ T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 718.767739][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.771756][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.779400][ T34] usb 6-1: config 0 descriptor?? [ 718.986728][T15391] virt_wifi0 speed is unknown, defaulting to 1000 [ 719.847261][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 720.967942][T15408] binder: 15407:15408 ioctl c0306201 800004c0 returned -14 [ 721.350870][ T1464] usb 6-1: USB disconnect, device number 43 [ 721.372706][ T5957] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 721.617019][ T34] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 721.730218][T11776] hid_parser_main: 5 callbacks suppressed [ 721.730231][T11776] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 721.793988][T11776] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 721.823638][T15425] fido_id[15425]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 722.355173][ T34] usb 8-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 722.459669][ T34] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 722.462500][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 722.465415][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.469942][ T34] usb 8-1: config 0 descriptor?? [ 724.673407][T11776] usb 8-1: USB disconnect, device number 23 [ 724.870743][ T5957] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 725.217558][ T24] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 725.368362][ T24] usb 7-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 725.371621][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 725.374536][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 725.378025][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.429727][ T24] usb 7-1: config 0 descriptor?? [ 727.353574][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 727.704808][T15484] binder: 15483:15484 ioctl c0306201 800004c0 returned -14 [ 728.650180][T15492] binder: 15491:15492 ioctl c0306201 800004c0 returned -14 [ 728.850066][ T34] usb 7-1: USB disconnect, device number 51 [ 731.774340][T15531] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 731.776474][T15531] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 731.780060][T15531] vhci_hcd vhci_hcd.0: Device attached [ 731.953317][T15532] vhci_hcd: connection closed [ 731.953858][ T59] vhci_hcd vhci_hcd.0: stop threads [ 731.957399][ T59] vhci_hcd vhci_hcd.0: release socket [ 731.959204][ T59] vhci_hcd vhci_hcd.0: disconnect device [ 732.197135][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 732.252304][T15540] binder: 15539:15540 ioctl c0306201 800004c0 returned -14 [ 733.383768][T15550] binder: 15546:15550 ioctl c0306201 800004c0 returned -14 [ 734.450000][T15563] usb usb8: usbfs: process 15563 (syz.2.2042) did not claim interface 0 before use [ 735.215796][T15572] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 735.217752][T15572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 735.220997][T15572] vhci_hcd vhci_hcd.0: Device attached [ 735.458425][T11776] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 735.542023][T15572] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 735.564113][T15572] 8021q: adding VLAN 0 to HW filter on device bond11 [ 736.414791][T15586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2047'. [ 736.488750][T15591] binder: 15590:15591 ioctl c0306201 800004c0 returned -14 [ 736.680480][T15595] virt_wifi0 speed is unknown, defaulting to 1000 [ 737.467660][T15574] vhci_hcd: connection reset by peer [ 737.470470][ T106] vhci_hcd vhci_hcd.0: stop threads [ 737.472240][ T106] vhci_hcd vhci_hcd.0: release socket [ 737.474058][ T106] vhci_hcd vhci_hcd.0: disconnect device [ 737.797763][T15610] vhci_hcd vhci_hcd.0: port 0 already used [ 737.839090][T15614] binder: 15613:15614 ioctl c0306201 800004c0 returned -14 [ 739.907171][T15637] binder: 15636:15637 ioctl c0306201 800004c0 returned -14 [ 740.238999][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 740.243044][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 740.246128][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 740.249491][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 740.252488][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 740.257679][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'. [ 740.268619][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 740.416938][T15666] binder: 15665:15666 ioctl c0306201 800004c0 returned -14 [ 740.516778][T15667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 740.519539][T15667] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 740.536272][T15667] vhci_hcd vhci_hcd.0: Device attached [ 740.647027][T11776] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 741.702268][T15668] vhci_hcd: connection closed [ 741.702434][T10388] vhci_hcd vhci_hcd.0: stop threads [ 741.705859][T10388] vhci_hcd vhci_hcd.0: release socket [ 741.710538][T10388] vhci_hcd vhci_hcd.0: disconnect device [ 741.904635][T15678] xt_cluster: node mask cannot exceed total number of nodes [ 741.907887][T15679] xt_cluster: node mask cannot exceed total number of nodes [ 742.294134][T15700] binder: 15699:15700 ioctl c0306201 800004c0 returned -14 [ 742.648825][T15709] FAULT_INJECTION: forcing a failure. [ 742.648825][T15709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.653376][T15709] CPU: 3 UID: 0 PID: 15709 Comm: syz.3.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.653405][T15709] Tainted: [L]=SOFTLOCKUP [ 742.653408][T15709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 742.653415][T15709] Call Trace: [ 742.653419][T15709] [ 742.653423][T15709] dump_stack_lvl+0x100/0x190 [ 742.653442][T15709] should_fail_ex.cold+0x5/0xa [ 742.653455][T15709] _copy_to_user+0x32/0xd0 [ 742.653469][T15709] simple_read_from_buffer+0xcb/0x170 [ 742.653486][T15709] proc_fail_nth_read+0x1af/0x230 [ 742.653500][T15709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.653514][T15709] ? rw_verify_area+0xce/0x6d0 [ 742.653528][T15709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.653540][T15709] vfs_read+0x1e4/0xb30 [ 742.653559][T15709] ? __pfx_vfs_read+0x10/0x10 [ 742.653574][T15709] ? find_held_lock+0x2b/0x80 [ 742.653584][T15709] ? __fget_files+0x215/0x3d0 [ 742.653596][T15709] ? __fget_files+0x21f/0x3d0 [ 742.653609][T15709] ksys_read+0x12a/0x250 [ 742.653625][T15709] ? __pfx_ksys_read+0x10/0x10 [ 742.653645][T15709] do_int80_emulation+0x141/0x6b0 [ 742.653664][T15709] asm_int80_emulation+0x1a/0x20 [ 742.653675][T15709] RIP: 0023:0xf7165cab [ 742.653688][T15709] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 742.653699][T15709] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 742.653709][T15709] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f541d5d0 [ 742.653715][T15709] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 742.653721][T15709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 742.653726][T15709] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 742.653732][T15709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 742.653745][T15709] [ 742.808208][ T24] usb usb38-port1: attempt power cycle [ 742.962540][T15712] binder: 15711:15712 ioctl c0306201 800004c0 returned -14 [ 743.909324][T15722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2081'. [ 744.628191][ T24] usb usb38-port1: unable to enumerate USB device [ 744.697510][T11776] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 744.888395][T11776] usb 6-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 744.892583][T11776] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.896282][T11776] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 744.909075][T11776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.925930][T11776] usb 6-1: config 0 descriptor?? [ 745.136160][T15750] vhci_hcd vhci_hcd.0: port 0 already used [ 745.160667][T15754] binder: 15753:15754 ioctl c0306201 800004c0 returned -14 [ 746.951227][T15773] binder: 15772:15773 ioctl c0306201 800004c0 returned -14 [ 748.203840][T15324] usb 6-1: USB disconnect, device number 44 [ 748.307316][T15798] usb usb8: usbfs: process 15798 (syz.1.2098) did not claim interface 0 before use [ 749.716978][ T40] kauditd_printk_skb: 200 callbacks suppressed [ 749.716996][ T40] audit: type=1800 audit(1773622893.098:772): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2096" name="cpuset.memory_pressure_enabled" dev="9p" ino=72614113 res=0 errno=0 [ 749.849973][T15810] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 749.852985][T15810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 749.864257][T15810] vhci_hcd vhci_hcd.0: Device attached [ 750.252504][T15811] vhci_hcd: connection closed [ 750.253946][T10388] vhci_hcd vhci_hcd.2: stop threads [ 750.262985][T10388] vhci_hcd vhci_hcd.2: release socket [ 750.266949][ T6019] usb 42-1: SetAddress Request (63) to port 0 [ 750.268933][ T6019] usb 42-1: new SuperSpeed USB device number 63 using vhci_hcd [ 750.278430][T10388] vhci_hcd vhci_hcd.2: disconnect device [ 750.615413][T15819] usb usb8: usbfs: process 15819 (syz.1.2103) did not claim interface 0 before use [ 750.776973][ T6019] usb 42-1: enqueue for inactive port 0 [ 750.815079][T15823] binder: 15822:15823 ioctl c0306201 800004c0 returned -14 [ 751.316994][ T1464] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 751.474764][ T1464] usb 8-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 751.481550][ T1464] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.489589][ T1464] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 751.497726][ T1464] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.507220][ T1464] usb 8-1: config 0 descriptor?? [ 751.778710][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.780828][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.929245][ T6019] usb usb42-port1: attempt power cycle [ 752.648090][ T6019] usb usb42-port1: unable to enumerate USB device [ 752.908260][T15858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 752.910503][T15858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 752.913823][T15858] vhci_hcd vhci_hcd.0: Device attached [ 753.150039][ T6019] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 754.293512][T15858] netlink: 'syz.0.2111': attribute type 1 has an invalid length. [ 754.333411][T15858] 8021q: adding VLAN 0 to HW filter on device bond12 [ 754.468240][T15860] vhci_hcd: connection reset by peer [ 754.471898][ T106] vhci_hcd vhci_hcd.0: stop threads [ 754.481515][ T106] vhci_hcd vhci_hcd.0: release socket [ 754.485593][ T106] vhci_hcd vhci_hcd.0: disconnect device [ 755.977033][ T842] usb 8-1: USB disconnect, device number 24 [ 757.457330][T15890] vhci_hcd vhci_hcd.0: port 0 already used [ 758.160559][T15896] binder: 15895:15896 ioctl c0306201 800004c0 returned -14 [ 758.247062][ T6019] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 758.247368][T15898] usb usb8: usbfs: process 15898 (syz.2.2118) did not claim interface 0 before use [ 758.807869][T15902] usb usb8: usbfs: process 15902 (syz.0.2128) did not claim interface 0 before use [ 759.760633][ T6019] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 759.929552][ T6019] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 759.944091][ T6019] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.967371][ T6019] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 759.970462][ T6019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.999508][ T6019] usb 5-1: config 0 descriptor?? [ 761.880244][T15933] usb usb8: usbfs: process 15933 (syz.3.2126) did not claim interface 0 before use [ 762.010928][T15936] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 762.013131][T15936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 762.015978][T15936] vhci_hcd vhci_hcd.0: Device attached [ 762.073911][T15936] netlink: 'syz.2.2125': attribute type 1 has an invalid length. [ 762.262997][T15324] usb 41-1: new low-speed USB device number 16 using vhci_hcd [ 762.317761][T15936] 8021q: adding VLAN 0 to HW filter on device bond16 [ 762.625618][T15937] vhci_hcd: connection reset by peer [ 762.632785][T10388] vhci_hcd vhci_hcd.2: stop threads [ 762.635043][T10388] vhci_hcd vhci_hcd.2: release socket [ 762.643239][T10388] vhci_hcd vhci_hcd.2: disconnect device [ 764.274826][T11776] usb 5-1: USB disconnect, device number 50 [ 765.166419][T15965] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 765.168523][T15965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 765.187133][T15965] vhci_hcd vhci_hcd.0: Device attached [ 765.335171][T15970] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 765.337285][T15970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 765.348967][T15966] vhci_hcd: connection closed [ 765.349191][T15970] vhci_hcd vhci_hcd.0: Device attached [ 765.367130][T10398] vhci_hcd vhci_hcd.1: stop threads [ 765.369243][T10398] vhci_hcd vhci_hcd.1: release socket [ 765.371606][T10398] vhci_hcd vhci_hcd.1: disconnect device [ 765.445766][T15970] netlink: 'syz.3.2132': attribute type 1 has an invalid length. [ 765.507172][T15970] 8021q: adding VLAN 0 to HW filter on device bond11 [ 765.616910][ T34] usb 43-1: new low-speed USB device number 11 using vhci_hcd [ 766.146487][T15971] vhci_hcd: connection reset by peer [ 766.172311][ T13] vhci_hcd vhci_hcd.3: stop threads [ 766.174035][ T13] vhci_hcd vhci_hcd.3: release socket [ 766.176083][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 768.149405][T16000] binder: 15997:16000 ioctl c0306201 800004c0 returned -14 [ 768.240217][T15324] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 769.056671][T16009] usb usb8: usbfs: process 16009 (syz.0.2144) did not claim interface 0 before use [ 769.428292][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 769.438821][T16023] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 769.440922][T16023] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 769.443955][T16023] vhci_hcd vhci_hcd.0: Device attached [ 769.727341][ T842] usb 40-1: SetAddress Request (41) to port 0 [ 769.729447][ T842] usb 40-1: new SuperSpeed USB device number 41 using vhci_hcd [ 770.046428][T16024] vhci_hcd: connection reset by peer [ 770.048718][T10398] vhci_hcd vhci_hcd.1: stop threads [ 770.050681][T10398] vhci_hcd vhci_hcd.1: release socket [ 770.068498][T10398] vhci_hcd vhci_hcd.1: disconnect device [ 771.245944][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 771.278436][T16037] binder: 16036:16037 ioctl c0306201 800004c0 returned -14 [ 773.472829][T16064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 773.475032][T16064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 773.486180][T16064] vhci_hcd vhci_hcd.0: Device attached [ 773.551623][T16064] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 773.597793][T16064] 8021q: adding VLAN 0 to HW filter on device bond13 [ 773.726965][ T34] usb 37-1: new low-speed USB device number 11 using vhci_hcd [ 773.921588][T16065] vhci_hcd: connection reset by peer [ 773.959801][T10398] vhci_hcd vhci_hcd.0: stop threads [ 773.977298][T10398] vhci_hcd vhci_hcd.0: release socket [ 773.996410][T10398] vhci_hcd vhci_hcd.0: disconnect device [ 774.370123][T16070] binder: 16069:16070 ioctl c0306201 800004c0 returned -14 [ 774.817038][ T842] usb 40-1: device descriptor read/8, error -110 [ 775.614619][T16083] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 775.616810][T16083] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 775.621321][T16083] vhci_hcd vhci_hcd.0: Device attached [ 776.267424][ T842] usb usb40-port1: attempt power cycle [ 776.613972][T16094] binder: BINDER_SET_CONTEXT_MGR already set [ 776.616687][T16094] binder: 16093:16094 ioctl 4018620d 80004a80 returned -16 [ 776.637342][T16094] binder: 16093:16094 ioctl c0306201 800004c0 returned -14 [ 777.500569][T16084] vhci_hcd: connection closed [ 777.501066][ T12] vhci_hcd vhci_hcd.0: stop threads [ 777.505525][ T12] vhci_hcd vhci_hcd.0: release socket [ 777.518497][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 777.740695][ T842] usb usb40-port1: unable to enumerate USB device [ 778.816934][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 779.427231][ T842] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 779.600587][ T842] usb 7-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 779.604939][ T842] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 779.609321][ T842] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.612804][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.630808][ T842] usb 7-1: config 0 descriptor?? [ 780.538989][ T6198] usb usb38-port1: attempt power cycle [ 780.549508][T16132] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 780.551666][T16132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 780.564403][T16132] vhci_hcd vhci_hcd.0: Device attached [ 780.580476][T16132] netlink: 'syz.3.2171': attribute type 1 has an invalid length. [ 780.594361][T16132] 8021q: adding VLAN 0 to HW filter on device bond12 [ 780.735676][T16133] vhci_hcd: connection closed [ 780.736034][T10401] vhci_hcd vhci_hcd.3: stop threads [ 780.739374][T10401] vhci_hcd vhci_hcd.3: release socket [ 780.741758][T10401] vhci_hcd vhci_hcd.3: disconnect device [ 780.834584][ T1464] usb 43-1: new low-speed USB device number 12 using vhci_hcd [ 780.917785][ T1464] usb 43-1: enqueue for inactive port 0 [ 781.301824][ T1464] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 781.353776][T16138] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 781.356628][T16138] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 781.361634][T16138] vhci_hcd vhci_hcd.0: Device attached [ 781.392560][T16138] netlink: 'syz.0.2174': attribute type 1 has an invalid length. [ 781.409151][T16138] 8021q: adding VLAN 0 to HW filter on device bond14 [ 781.427753][ T6198] usb usb38-port1: unable to enumerate USB device [ 781.608210][ T34] usb 37-1: new low-speed USB device number 12 using vhci_hcd [ 781.608709][T16139] vhci_hcd: connection closed [ 781.612019][T10388] vhci_hcd vhci_hcd.0: stop threads [ 781.616512][T10388] vhci_hcd vhci_hcd.0: release socket [ 781.624286][T10388] vhci_hcd vhci_hcd.0: disconnect device [ 782.602315][ T1464] usb 7-1: USB disconnect, device number 52 [ 782.829053][T16154] binder: 16153:16154 ioctl c0306201 800004c0 returned -14 [ 785.700449][T16192] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 785.744015][T16192] 8021q: adding VLAN 0 to HW filter on device bond17 [ 785.887098][T16195] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 785.889191][T16195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 785.908493][T16195] vhci_hcd vhci_hcd.0: Device attached [ 785.959852][T16195] netlink: 'syz.1.2184': attribute type 1 has an invalid length. [ 786.013787][T16195] 8021q: adding VLAN 0 to HW filter on device bond21 [ 786.127039][T16188] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 786.129240][T16188] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 786.132768][T16189] vhci_hcd: connection closed [ 786.134434][T16188] vhci_hcd vhci_hcd.0: Device attached [ 786.140303][T16168] vhci_hcd vhci_hcd.2: stop threads [ 786.146964][T14400] usb 39-1: new low-speed USB device number 19 using vhci_hcd [ 786.151669][T16168] vhci_hcd vhci_hcd.2: release socket [ 786.157688][T16168] vhci_hcd vhci_hcd.2: disconnect device [ 786.333842][T16196] vhci_hcd: connection reset by peer [ 786.336450][T10398] vhci_hcd vhci_hcd.1: stop threads [ 786.343438][T10398] vhci_hcd vhci_hcd.1: release socket [ 786.346308][T10398] vhci_hcd vhci_hcd.1: disconnect device [ 786.533548][ T6198] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 786.726960][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 787.128686][ T6198] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 787.132011][ T6198] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.134899][ T6198] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.206891][ T6198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.211160][ T6198] usb 5-1: config 0 descriptor?? [ 789.982253][ T842] usb 5-1: USB disconnect, device number 51 [ 790.040201][T16230] binder: 16229:16230 ioctl c0306201 800004c0 returned -14 [ 791.286989][T14400] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 795.964264][T16255] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 795.967203][T16255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 795.970473][T16255] vhci_hcd vhci_hcd.0: Device attached [ 795.978219][T16255] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 795.990703][T16255] 8021q: adding VLAN 0 to HW filter on device bond18 [ 796.177121][T16266] vhci_hcd: connection closed [ 796.256968][ T34] usb 41-1: new low-speed USB device number 17 using vhci_hcd [ 796.376916][T16267] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 796.437680][ T13] vhci_hcd vhci_hcd.2: stop threads [ 796.440000][ T13] vhci_hcd vhci_hcd.2: release socket [ 796.444834][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 798.036967][ T6740] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 798.198422][ T6740] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 798.207109][ T6740] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.216938][ T6740] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 798.227676][ T6740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.246755][ T6740] usb 5-1: config 0 descriptor?? [ 801.387224][ T34] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 802.221644][T14400] usb 5-1: USB disconnect, device number 52 [ 804.805085][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2223'. [ 804.808256][ T842] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 804.975981][ T842] usb 7-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 804.979670][ T842] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 804.983878][ T842] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 804.987542][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.002570][ T842] usb 7-1: config 0 descriptor?? [ 806.681315][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 809.514218][ T842] usb 7-1: USB disconnect, device number 53 [ 810.350659][T16417] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 810.352808][T16417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.355413][T16417] vhci_hcd vhci_hcd.0: Device attached [ 810.380445][T16417] netlink: 'syz.3.2236': attribute type 1 has an invalid length. [ 810.411358][T16417] 8021q: adding VLAN 0 to HW filter on device bond13 [ 810.646924][ T6740] usb 43-1: new low-speed USB device number 13 using vhci_hcd [ 810.667531][T16418] vhci_hcd: connection reset by peer [ 810.675348][ T13] vhci_hcd vhci_hcd.3: stop threads [ 810.677638][ T13] vhci_hcd vhci_hcd.3: release socket [ 810.680135][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 813.222439][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.224570][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.767026][ T6740] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 817.602640][T16489] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 817.604768][T16489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 817.607706][T16489] vhci_hcd vhci_hcd.0: Device attached [ 817.629500][T16489] netlink: 'syz.3.2249': attribute type 1 has an invalid length. [ 817.651090][T16489] 8021q: adding VLAN 0 to HW filter on device bond14 [ 817.913739][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 818.047445][T16490] vhci_hcd: connection closed [ 818.047962][ T13] vhci_hcd vhci_hcd.3: stop threads [ 818.051544][ T13] vhci_hcd vhci_hcd.3: release socket [ 818.059299][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 818.096997][ T6740] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 822.036252][T16542] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 822.039073][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 822.047256][T16542] vhci_hcd vhci_hcd.0: Device attached [ 822.083467][T16542] netlink: 'syz.1.2265': attribute type 1 has an invalid length. [ 822.237738][T16542] 8021q: adding VLAN 0 to HW filter on device bond22 [ 822.286952][ T842] usb 39-1: new low-speed USB device number 20 using vhci_hcd [ 822.455108][T16543] vhci_hcd: connection reset by peer [ 822.457175][T16168] vhci_hcd vhci_hcd.1: stop threads [ 822.458929][T16168] vhci_hcd vhci_hcd.1: release socket [ 822.461466][T16168] vhci_hcd vhci_hcd.1: disconnect device [ 824.005003][T16562] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 824.007191][T16562] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 824.041527][T16562] vhci_hcd vhci_hcd.0: Device attached [ 824.318645][ T6740] usb 42-1: SetAddress Request (67) to port 0 [ 824.322758][ T6740] usb 42-1: new SuperSpeed USB device number 67 using vhci_hcd [ 824.382100][T16563] vhci_hcd: connection reset by peer [ 824.384793][T10398] vhci_hcd vhci_hcd.2: stop threads [ 824.387584][T10398] vhci_hcd vhci_hcd.2: release socket [ 824.390044][T10398] vhci_hcd vhci_hcd.2: disconnect device [ 824.921077][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 827.367274][ T842] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 829.497370][ T6740] usb 42-1: device descriptor read/8, error -110 [ 830.147033][ T6740] usb usb42-port1: attempt power cycle [ 830.191386][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 830.459217][T16620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2280'. [ 830.730201][ T6740] usb usb42-port1: unable to enumerate USB device [ 832.967625][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 833.197045][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2290'. [ 836.356424][T16698] x_tables: duplicate underflow at hook 1 [ 836.371451][T16698] hub 8-0:1.0: USB hub found [ 836.377044][T16698] hub 8-0:1.0: 1 port detected [ 837.022401][T16710] binder: 16709:16710 ioctl c0306201 800004c0 returned -14 [ 840.369354][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 840.374252][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 840.378902][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 840.382688][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 840.386215][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 840.562664][T16736] virt_wifi0 speed is unknown, defaulting to 1000 [ 841.372601][T16751] binder: 16750:16751 ioctl c0306201 800004c0 returned -14 [ 841.492580][T16736] chnl_net:caif_netlink_parms(): no params data found [ 841.566774][T16736] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.569321][T16736] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.571698][T16736] bridge_slave_0: entered allmulticast mode [ 841.575593][T16736] bridge_slave_0: entered promiscuous mode [ 841.580106][T16736] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.582495][T16736] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.584925][T16736] bridge_slave_1: entered allmulticast mode [ 841.587933][T16736] bridge_slave_1: entered promiscuous mode [ 841.625255][T16736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.679772][T16168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.709344][T16736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.790588][T16736] team0: Port device team_slave_0 added [ 841.806947][T16168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.822199][T16736] team0: Port device team_slave_1 added [ 841.866874][T16736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.869343][T16736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.878732][T16736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.912017][T16168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.931291][T16736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.934619][T16736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.946255][T16736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.038855][T16168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.064761][T16736] hsr_slave_0: entered promiscuous mode [ 842.067522][T16736] hsr_slave_1: entered promiscuous mode [ 842.070406][T16736] debugfs: 'hsr0' already exists in 'hsr' [ 842.072376][T16736] Cannot create hsr debugfs directory [ 842.287411][T16168] bridge_slave_1: left allmulticast mode [ 842.290395][T16168] bridge_slave_1: left promiscuous mode [ 842.294223][T16168] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.340986][T16168] bridge_slave_0: left allmulticast mode [ 842.343728][T16168] bridge_slave_0: left promiscuous mode [ 842.347361][T16168] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.430226][ T5957] Bluetooth: hci4: command tx timeout [ 843.249398][T16168] bond1 (unregistering): (slave geneve2): Releasing active interface [ 844.013991][T16168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.019440][T16168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.023248][T16168] bond0 (unregistering): Released all slaves [ 844.029127][T16168] bond1 (unregistering): Released all slaves [ 844.041302][T16168] bond2 (unregistering): Released all slaves [ 844.084181][T16168] bond3 (unregistering): Released all slaves [ 844.101685][T16168] bond4 (unregistering): Released all slaves [ 844.110883][T16168] bond5 (unregistering): Released all slaves [ 844.119813][T16168] bond6 (unregistering): Released all slaves [ 844.126426][T16168] bond7 (unregistering): Released all slaves [ 844.134202][T16168] bond8 (unregistering): Released all slaves [ 844.140885][T16168] bond9 (unregistering): Released all slaves [ 844.150814][T16168] bond10 (unregistering): Released all slaves [ 844.169469][T16168] bond11 (unregistering): Released all slaves [ 844.176241][T16168] bond12 (unregistering): Released all slaves [ 844.189014][T16168] bond13 (unregistering): Released all slaves [ 844.216230][T16168] bond14 (unregistering): Released all slaves [ 844.227434][T16168] bond15 (unregistering): Released all slaves [ 844.238200][T16168] bond16 (unregistering): Released all slaves [ 844.253432][T16168] bond17 (unregistering): Released all slaves [ 844.260975][T16168] bond18 (unregistering): Released all slaves [ 844.269995][T16168] bond19 (unregistering): Released all slaves [ 844.276496][T16168] bond20 (unregistering): Released all slaves [ 844.284981][T16168] bond21 (unregistering): Released all slaves [ 844.291460][T16168] bond22 (unregistering): Released all slaves [ 844.466976][T16168] tipc: Left network mode [ 844.506902][ T5957] Bluetooth: hci4: command tx timeout [ 844.594150][T16780] x_tables: duplicate underflow at hook 1 [ 844.630019][T16780] hub 8-0:1.0: USB hub found [ 844.633086][T16780] hub 8-0:1.0: 1 port detected [ 844.699238][T16788] binder: 16787:16788 ioctl c0306201 800004c0 returned -14 [ 844.924393][T16168] hsr_slave_0: left promiscuous mode [ 844.926651][T16168] hsr_slave_1: left promiscuous mode [ 844.929853][T16168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.932840][T16168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.936317][T16168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.941648][T16168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.945050][T16168] batman_adv: batadv0: Removing interface: ipvlan2 [ 844.959166][T16168] veth1_macvtap: left promiscuous mode [ 844.961692][T16168] veth0_macvtap: left promiscuous mode [ 844.964130][T16168] veth1_vlan: left promiscuous mode [ 844.966336][T16168] veth0_vlan: left promiscuous mode [ 845.124438][T16168] team0 (unregistering): Port device team_slave_1 removed [ 845.131269][T16168] team0 (unregistering): Port device team_slave_0 removed [ 845.425849][T16736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 845.433751][T16736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 845.441698][T16736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 845.476200][T16736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 845.534293][T16736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.544617][T16736] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.551116][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.553940][T10401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.562349][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.565196][T10388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.596347][T16736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.603150][T16736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 845.742822][T16168] IPVS: stop unused estimator thread 0... [ 845.755314][T16736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.780339][T16736] veth0_vlan: entered promiscuous mode [ 845.785783][T16736] veth1_vlan: entered promiscuous mode [ 845.801658][T16736] veth0_macvtap: entered promiscuous mode [ 845.805935][T16736] veth1_macvtap: entered promiscuous mode [ 845.815515][T16736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.822191][T16736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.829999][T10401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.837579][T10401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.852590][T10401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.856406][T10401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.892383][T10404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.895842][T10404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.920541][T10391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.923628][T10391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.580537][T16823] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 846.583419][T16823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 846.586730][T16823] vhci_hcd vhci_hcd.0: Device attached [ 846.588342][ T5957] Bluetooth: hci4: command tx timeout [ 846.644438][T16823] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 846.699404][T16823] 8021q: adding VLAN 0 to HW filter on device bond15 [ 846.827270][ T842] usb 43-1: new low-speed USB device number 14 using vhci_hcd [ 847.214824][T16824] vhci_hcd: connection reset by peer [ 847.269836][T10388] vhci_hcd vhci_hcd.3: stop threads [ 847.272748][T10388] vhci_hcd vhci_hcd.3: release socket [ 847.301039][T10388] vhci_hcd vhci_hcd.3: disconnect device [ 848.259392][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'. [ 848.667068][ T5957] Bluetooth: hci4: command tx timeout [ 849.936130][T16854] binder: 16853:16854 ioctl c0306201 800004c0 returned -14 [ 850.984392][T16871] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 850.987093][T16871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 851.137028][T16871] vhci_hcd vhci_hcd.0: Device attached [ 852.047442][ T842] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 853.137428][ T6740] usb 39-1: new low-speed USB device number 21 using vhci_hcd [ 853.161335][T16871] netlink: 'syz.1.2330': attribute type 1 has an invalid length. [ 853.172702][T16871] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 853.404475][T16872] vhci_hcd: connection reset by peer [ 853.456126][T10401] vhci_hcd vhci_hcd.1: stop threads [ 853.458108][T10401] vhci_hcd vhci_hcd.1: release socket [ 853.459909][T10401] vhci_hcd vhci_hcd.1: disconnect device [ 853.531981][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'. [ 853.609493][T16898] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 853.612462][T16898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 853.624944][T16898] vhci_hcd vhci_hcd.0: Device attached [ 853.679182][T16898] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 853.726680][T16898] 8021q: adding VLAN 0 to HW filter on device bond19 [ 853.876943][ T6576] usb 41-1: new low-speed USB device number 18 using vhci_hcd [ 854.190005][T16899] vhci_hcd: connection reset by peer [ 854.198743][T10398] vhci_hcd vhci_hcd.2: stop threads [ 854.200312][T10398] vhci_hcd vhci_hcd.2: release socket [ 854.203981][T10398] vhci_hcd vhci_hcd.2: disconnect device [ 855.381246][T16922] binder: 16921:16922 ioctl c0306201 800004c0 returned -14 [ 855.519515][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 859.291002][ T6740] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 859.697606][ T6576] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 865.354032][T17019] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 865.356694][T17019] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 865.368899][T17019] vhci_hcd vhci_hcd.0: Device attached [ 865.381464][T17023] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 865.383632][T17023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 865.400773][T17023] vhci_hcd vhci_hcd.0: Device attached [ 865.493135][T17023] netlink: 'syz.2.2365': attribute type 1 has an invalid length. [ 865.626487][T17020] vhci_hcd: connection closed [ 865.628138][ T1223] vhci_hcd vhci_hcd.1: stop threads [ 865.632709][ T1223] vhci_hcd vhci_hcd.1: release socket [ 865.636634][ T1223] vhci_hcd vhci_hcd.1: disconnect device [ 865.717046][ T24] usb 41-1: new low-speed USB device number 19 using vhci_hcd [ 865.825405][T17023] 8021q: adding VLAN 0 to HW filter on device bond20 [ 867.154532][T17025] vhci_hcd: connection reset by peer [ 867.156755][T10401] vhci_hcd vhci_hcd.2: stop threads [ 867.159309][T10401] vhci_hcd vhci_hcd.2: release socket [ 867.162734][T10401] vhci_hcd vhci_hcd.2: disconnect device [ 867.627678][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 867.632705][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 867.635629][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 867.638635][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 867.641788][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 867.794690][T17044] virt_wifi0 speed is unknown, defaulting to 1000 [ 868.464114][T17044] chnl_net:caif_netlink_parms(): no params data found [ 868.590550][T17044] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.593137][T17044] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.595557][T17044] bridge_slave_0: entered allmulticast mode [ 868.598345][T17044] bridge_slave_0: entered promiscuous mode [ 868.606995][ T6740] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 868.997163][T17044] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.000127][T17044] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.003309][T17044] bridge_slave_1: entered allmulticast mode [ 869.016501][T17044] bridge_slave_1: entered promiscuous mode [ 869.066740][T17044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.075954][T17044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.092081][T17044] team0: Port device team_slave_0 added [ 869.096252][T17044] team0: Port device team_slave_1 added [ 869.109815][T17044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.111830][T17044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.120663][T17044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.124625][T17044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.126742][T17044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.134539][T17044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.146096][ T6740] usb 6-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 869.149793][ T6740] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 869.166983][ T6740] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 869.170778][ T6740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.187697][ T6740] usb 6-1: config 0 descriptor?? [ 869.570108][T17044] hsr_slave_0: entered promiscuous mode [ 869.586961][T17044] hsr_slave_1: entered promiscuous mode [ 869.696895][ T5957] Bluetooth: hci2: command tx timeout [ 869.962862][T10401] bridge_slave_1: left allmulticast mode [ 869.964761][T10401] bridge_slave_1: left promiscuous mode [ 869.966668][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.989105][T10401] bridge_slave_0: left allmulticast mode [ 869.991544][T10401] bridge_slave_0: left promiscuous mode [ 870.004183][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.089280][T10401] bond2 (unregistering): (slave geneve2): Releasing active interface [ 870.241836][T10401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.245894][T10401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.284566][T10401] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 870.288248][T10401] bond0 (unregistering): Released all slaves [ 870.292888][T10401] bond1 (unregistering): Released all slaves [ 870.301044][T10401] bond2 (unregistering): Released all slaves [ 870.308833][T10401] bond3 (unregistering): Released all slaves [ 870.315528][T10401] bond4 (unregistering): Released all slaves [ 870.323392][T10401] bond5 (unregistering): Released all slaves [ 870.331901][T10401] bond6 (unregistering): Released all slaves [ 870.344285][T10401] bond7 (unregistering): Released all slaves [ 870.352958][T10401] bond8 (unregistering): Released all slaves [ 870.361515][T10401] bond9 (unregistering): Released all slaves [ 870.371276][T10401] bond10 (unregistering): Released all slaves [ 870.382389][T10401] bond11 (unregistering): Released all slaves [ 870.393341][T10401] bond12 (unregistering): Released all slaves [ 870.400828][T10401] bond13 (unregistering): Released all slaves [ 870.410315][T10401] bond14 (unregistering): Released all slaves [ 870.421752][T10401] bond15 (unregistering): Released all slaves [ 870.431338][T10401] bond16 (unregistering): Released all slaves [ 870.441880][T10401] bond17 (unregistering): Released all slaves [ 870.452225][T10401] bond18 (unregistering): Released all slaves [ 870.469370][T10401] bond19 (unregistering): Released all slaves [ 870.477136][T10401] bond20 (unregistering): Released all slaves [ 870.808010][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 871.762343][T17044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 871.796097][T17044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 871.817166][T17044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 871.826179][T17044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 871.867153][ T5957] Bluetooth: hci2: command tx timeout [ 871.953857][T17044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.973919][T17044] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.997716][T10404] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.000705][T10404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.006965][T10404] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.009840][T10404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.084612][T17044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 872.101212][T17044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 872.129286][T14400] usb 6-1: USB disconnect, device number 45 [ 872.316314][T17102] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 872.318420][T17102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 872.325191][T17102] vhci_hcd vhci_hcd.0: Device attached [ 872.469769][T17044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.521588][T17107] vhci_hcd: connection closed [ 872.521754][T10404] vhci_hcd vhci_hcd.0: stop threads [ 872.526331][T10401] hsr_slave_0: left promiscuous mode [ 872.528958][T10404] vhci_hcd vhci_hcd.0: release socket [ 872.530802][T10401] hsr_slave_1: left promiscuous mode [ 872.531162][T10404] vhci_hcd vhci_hcd.0: disconnect device [ 872.532994][T10401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.538991][T10401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.915232][T17044] veth0_vlan: entered promiscuous mode [ 872.949940][T17044] veth1_vlan: entered promiscuous mode [ 872.982276][T17044] veth0_macvtap: entered promiscuous mode [ 872.988770][T17044] veth1_macvtap: entered promiscuous mode [ 873.029595][T17044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.050603][T17044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.090119][T10388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.096700][T10388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.107103][T10388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.120267][T10388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.241764][T10388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.251529][T10388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.265301][ T1223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.284109][ T1223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.585572][T10401] IPVS: stop unused estimator thread 0... [ 873.946957][ T5957] Bluetooth: hci2: command tx timeout [ 874.670404][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.673251][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.027276][ T5957] Bluetooth: hci2: command tx timeout [ 876.767189][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 876.773114][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 876.778398][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 876.785800][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 876.790889][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 876.950393][T17164] chnl_net:caif_netlink_parms(): no params data found [ 877.038482][T17164] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.041505][T17164] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.044664][T17164] bridge_slave_0: entered allmulticast mode [ 877.048759][T17164] bridge_slave_0: entered promiscuous mode [ 877.053474][T17164] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.056564][T17164] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.062060][T17164] bridge_slave_1: entered allmulticast mode [ 877.065965][T17164] bridge_slave_1: entered promiscuous mode [ 877.120585][T17164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.127461][T17164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.153143][T17164] team0: Port device team_slave_0 added [ 877.155549][T17173] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 877.158147][T17173] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 877.158516][T17164] team0: Port device team_slave_1 added [ 877.168182][T17173] vhci_hcd vhci_hcd.0: Device attached [ 877.174753][T17164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.177675][T17164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.186784][T17164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.193441][T17164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.198490][T17164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.210192][T17164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.382545][T17164] hsr_slave_0: entered promiscuous mode [ 877.384944][T17164] hsr_slave_1: entered promiscuous mode [ 877.389130][T17164] debugfs: 'hsr0' already exists in 'hsr' [ 877.391117][T17164] Cannot create hsr debugfs directory [ 877.486564][T17174] vhci_hcd: connection closed [ 877.486924][T10401] vhci_hcd vhci_hcd.1: stop threads [ 877.491335][T10401] vhci_hcd vhci_hcd.1: release socket [ 877.493847][T10401] vhci_hcd vhci_hcd.1: disconnect device [ 877.527081][T14400] usb 40-1: enqueue for inactive port 0 [ 878.109454][T14400] usb usb40-port1: attempt power cycle [ 878.521367][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2398'. [ 878.574676][ T13] bridge_slave_1: left allmulticast mode [ 878.581519][ T13] bridge_slave_1: left promiscuous mode [ 878.586929][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.594232][ T13] bridge_slave_0: left allmulticast mode [ 878.600064][ T13] bridge_slave_0: left promiscuous mode [ 878.605820][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.817030][ T5957] Bluetooth: hci1: command tx timeout [ 878.914037][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.920996][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.925593][ T13] bond0 (unregistering): Released all slaves [ 878.959317][ T13] bond1 (unregistering): Released all slaves [ 878.988870][ T13] bond2 (unregistering): Released all slaves [ 878.996407][ T13] bond3 (unregistering): Released all slaves [ 879.027944][ T13] bond4 (unregistering): Released all slaves [ 879.041367][ T13] bond5 (unregistering): Released all slaves [ 879.051456][ T13] bond6 (unregistering): Released all slaves [ 879.070416][ T13] bond7 (unregistering): Released all slaves [ 879.090150][ T13] bond8 (unregistering): Released all slaves [ 879.106591][ T13] bond9 (unregistering): Released all slaves [ 879.124455][ T13] bond10 (unregistering): Released all slaves [ 879.145399][ T13] bond11 (unregistering): Released all slaves [ 879.160264][ T13] bond12 (unregistering): Released all slaves [ 879.173570][ T13] bond13 (unregistering): Released all slaves [ 879.190770][ T13] bond14 (unregistering): Released all slaves [ 879.204697][ T13] bond15 (unregistering): Released all slaves [ 879.370102][T14400] usb usb40-port1: unable to enumerate USB device [ 879.654869][ T13] hsr_slave_0: left promiscuous mode [ 879.659650][ T13] hsr_slave_1: left promiscuous mode [ 879.763389][ T13] team0 (unregistering): Port device team_slave_1 removed [ 879.787442][ T13] team0 (unregistering): Port device team_slave_0 removed [ 880.323745][T17164] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 880.376103][T17164] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 880.389471][T17164] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 880.392022][ T13] IPVS: stop unused estimator thread 0... [ 880.404806][T17164] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 880.522470][T17164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.536697][T17164] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.544238][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.546976][T10401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.567951][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.571147][T10388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.749105][T17164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.783132][T17164] veth0_vlan: entered promiscuous mode [ 880.792787][T17164] veth1_vlan: entered promiscuous mode [ 880.805094][T17164] veth0_macvtap: entered promiscuous mode [ 880.812604][T17164] veth1_macvtap: entered promiscuous mode [ 880.906934][ T5957] Bluetooth: hci1: command tx timeout [ 881.008359][T17164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.018608][T17164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.029368][T10388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.033198][T10388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.040633][T10388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.044538][T10388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.640809][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.646649][T10401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.700373][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.705781][T10401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.486639][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 882.694421][T17251] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 882.697202][T17251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 882.704644][T17251] vhci_hcd vhci_hcd.0: Device attached [ 882.977055][T11776] usb 42-1: SetAddress Request (71) to port 0 [ 882.980362][T11776] usb 42-1: new SuperSpeed USB device number 71 using vhci_hcd [ 882.987180][ T5957] Bluetooth: hci1: command tx timeout [ 883.237208][T17252] vhci_hcd: connection reset by peer [ 883.239888][T10404] vhci_hcd vhci_hcd.2: stop threads [ 883.242226][T10404] vhci_hcd vhci_hcd.2: release socket [ 883.244833][T10404] vhci_hcd vhci_hcd.2: disconnect device [ 885.070129][ T5957] Bluetooth: hci1: command tx timeout [ 887.136979][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 888.065522][T11776] usb 42-1: device descriptor read/8, error -110 [ 888.077282][T17307] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 888.080131][T17307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 888.083384][T17307] vhci_hcd vhci_hcd.0: Device attached [ 888.101291][T17307] netlink: 'syz.2.2422': attribute type 1 has an invalid length. [ 888.181445][T17312] vhci_hcd: connection closed [ 888.181635][T16168] vhci_hcd vhci_hcd.2: stop threads [ 888.184972][T16168] vhci_hcd vhci_hcd.2: release socket [ 888.186734][T16168] vhci_hcd vhci_hcd.2: disconnect device [ 888.251960][T17315] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 888.254188][T17315] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 888.257767][T17315] vhci_hcd vhci_hcd.0: Device attached [ 888.477380][T11776] usb usb42-port1: attempt power cycle [ 888.526994][ T9] usb 40-1: SetAddress Request (50) to port 0 [ 888.529377][ T9] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 888.822694][T17316] vhci_hcd: connection reset by peer [ 888.837612][ T106] vhci_hcd vhci_hcd.1: stop threads [ 888.839929][ T106] vhci_hcd vhci_hcd.1: release socket [ 888.849442][ T106] vhci_hcd vhci_hcd.1: disconnect device [ 888.891471][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'. [ 889.069156][T11776] usb usb42-port1: unable to enumerate USB device [ 889.350362][T17329] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 889.352764][T17329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 889.355886][T17329] vhci_hcd vhci_hcd.0: Device attached [ 889.400328][T17329] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 889.596923][T15324] usb 43-1: new low-speed USB device number 15 using vhci_hcd [ 889.733243][T17330] vhci_hcd: connection reset by peer [ 889.736456][T10388] vhci_hcd vhci_hcd.3: stop threads [ 889.738362][T10388] vhci_hcd vhci_hcd.3: release socket [ 889.740639][T10388] vhci_hcd vhci_hcd.3: disconnect device [ 890.915741][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 891.218107][T17355] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 891.220990][T17355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 891.224445][T17355] vhci_hcd vhci_hcd.0: Device attached [ 891.247708][T17355] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 891.311067][T17358] vhci_hcd: connection closed [ 891.311340][ T106] vhci_hcd vhci_hcd.2: stop threads [ 891.315977][ T106] vhci_hcd vhci_hcd.2: release socket [ 891.318526][ T106] vhci_hcd vhci_hcd.2: disconnect device [ 891.937474][T17371] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 891.939665][T17371] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 891.942548][T17371] vhci_hcd vhci_hcd.0: Device attached [ 892.083216][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 892.233127][ T6740] usb 38-1: SetAddress Request (88) to port 0 [ 892.253776][ T6740] usb 38-1: new SuperSpeed USB device number 88 using vhci_hcd [ 892.508147][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 892.656688][T17372] vhci_hcd: connection reset by peer [ 892.670028][ T106] vhci_hcd vhci_hcd.0: stop threads [ 892.672322][ T106] vhci_hcd vhci_hcd.0: release socket [ 892.685376][ T106] vhci_hcd vhci_hcd.0: disconnect device [ 893.687405][ T9] usb 40-1: device descriptor read/8, error -110 [ 894.208340][T17396] binder: 17395:17396 ioctl c0306201 800004c0 returned -14 [ 894.307540][ T9] usb usb40-port1: attempt power cycle [ 894.736998][T15324] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 895.979530][T17398] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 895.982426][T17398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 895.985720][T17398] vhci_hcd vhci_hcd.0: Device attached [ 896.005861][T17398] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 896.033917][T17398] 8021q: adding VLAN 0 to HW filter on device bond15 [ 896.076970][T17408] vhci_hcd: connection closed [ 896.078347][T16168] vhci_hcd vhci_hcd.0: stop threads [ 896.082035][T16168] vhci_hcd vhci_hcd.0: release socket [ 896.084118][T16168] vhci_hcd vhci_hcd.0: disconnect device [ 896.086634][T17392] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 896.088853][T17392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 896.093925][T17392] vhci_hcd vhci_hcd.0: Device attached [ 896.120374][T17392] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 896.279310][T17414] vhci_hcd: connection closed [ 896.279671][T10404] vhci_hcd vhci_hcd.3: stop threads [ 896.285588][T10404] vhci_hcd vhci_hcd.3: release socket [ 896.288515][T10404] vhci_hcd vhci_hcd.3: disconnect device [ 896.457837][ T9] usb usb40-port1: unable to enumerate USB device [ 897.296978][ T6740] usb 38-1: device descriptor read/8, error -110 [ 897.698378][ T6740] usb usb38-port1: attempt power cycle [ 898.832242][ T6740] usb usb38-port1: unable to enumerate USB device [ 898.861229][T17444] binder: 17443:17444 ioctl c0306201 800004c0 returned -14 [ 898.958457][T17445] vhci_hcd vhci_hcd.0: port 0 already used [ 900.476452][T17460] netlink: 'syz.2.2456': attribute type 1 has an invalid length. [ 900.492818][T17460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 900.512128][T17460] bond1: (slave geneve2): making interface the new active one [ 900.516825][T17460] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 900.567078][T17454] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 900.570026][T17454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 900.581713][T17454] vhci_hcd vhci_hcd.0: Device attached [ 900.630973][T17461] vhci_hcd: connection closed [ 900.631349][T16168] vhci_hcd vhci_hcd.2: stop threads [ 900.635605][T16168] vhci_hcd vhci_hcd.2: release socket [ 900.638175][T16168] vhci_hcd vhci_hcd.2: disconnect device [ 904.460517][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 904.465641][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 904.470066][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 904.482105][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 904.487736][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 904.536347][T17494] binder: 17493:17494 ioctl c0306201 800004c0 returned -14 [ 904.743303][T17491] chnl_net:caif_netlink_parms(): no params data found [ 904.792240][T17491] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.794753][T17491] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.797193][T17491] bridge_slave_0: entered allmulticast mode [ 904.799914][T17491] bridge_slave_0: entered promiscuous mode [ 904.803147][T17491] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.805442][T17491] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.807967][T17491] bridge_slave_1: entered allmulticast mode [ 904.810621][T17491] bridge_slave_1: entered promiscuous mode [ 904.828419][T17491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.833757][T17491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.848816][T17491] team0: Port device team_slave_0 added [ 904.851981][T17491] team0: Port device team_slave_1 added [ 904.867768][T17491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.871028][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.881427][T17491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.890164][T17491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.893379][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.905793][T17491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.958196][T17491] hsr_slave_0: entered promiscuous mode [ 904.960579][T17491] hsr_slave_1: entered promiscuous mode [ 904.962819][T17491] debugfs: 'hsr0' already exists in 'hsr' [ 904.965070][T17491] Cannot create hsr debugfs directory [ 905.431866][T10391] veth0_to_bridge: left allmulticast mode [ 905.433755][T10391] veth0_to_bridge: left promiscuous mode [ 905.435682][T10391] bridge0: port 3(veth0_to_bridge) entered disabled state [ 905.443260][T10391] bridge_slave_1: left allmulticast mode [ 905.445285][T10391] bridge_slave_1: left promiscuous mode [ 905.447522][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.451308][T10391] bridge_slave_0: left allmulticast mode [ 905.453393][T10391] bridge_slave_0: left promiscuous mode [ 905.455242][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.656642][T17511] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 905.658809][T17511] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 905.662425][T17511] vhci_hcd vhci_hcd.0: Device attached [ 905.846650][T10391] bond2 (unregistering): (slave geneve2): Releasing active interface [ 905.974975][T10391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.978800][T10391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.981964][T10391] bond0 (unregistering): Released all slaves [ 905.986553][T10391] bond1 (unregistering): Released all slaves [ 905.998303][T15324] usb 40-1: SetAddress Request (54) to port 0 [ 905.999243][T10391] bond2 (unregistering): Released all slaves [ 906.000499][T15324] usb 40-1: new SuperSpeed USB device number 54 using vhci_hcd [ 906.007337][T10391] bond3 (unregistering): Released all slaves [ 906.014233][T10391] bond4 (unregistering): Released all slaves [ 906.020947][T10391] bond5 (unregistering): Released all slaves [ 906.027505][T10391] bond6 (unregistering): Released all slaves [ 906.033976][T10391] bond7 (unregistering): Released all slaves [ 906.040645][T10391] bond8 (unregistering): Released all slaves [ 906.047268][T10391] bond9 (unregistering): Released all slaves [ 906.056600][T10391] bond10 (unregistering): Released all slaves [ 906.064693][T17512] vhci_hcd: connection reset by peer [ 906.070139][T10391] bond11 (unregistering): Released all slaves [ 906.074177][ T106] vhci_hcd vhci_hcd.1: stop threads [ 906.076477][ T106] vhci_hcd vhci_hcd.1: release socket [ 906.077026][T10391] bond12 (unregistering): Released all slaves [ 906.080173][ T106] vhci_hcd vhci_hcd.1: disconnect device [ 906.085045][T10391] bond13 (unregistering): Released all slaves [ 906.091469][T10391] bond14 (unregistering): Released all slaves [ 906.101433][T10391] bond15 (unregistering): Released all slaves [ 906.496989][ T5957] Bluetooth: hci3: command tx timeout [ 907.028320][T10391] hsr_slave_0: left promiscuous mode [ 907.034482][T10391] hsr_slave_1: left promiscuous mode [ 907.038163][T10391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.041434][T10391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.060742][T10391] pimreg (unregistering): left allmulticast mode [ 907.273460][T10391] team0 (unregistering): Port device team_slave_1 removed [ 907.290737][T10391] team0 (unregistering): Port device team_slave_0 removed [ 907.612896][T17491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 907.647441][T17491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 907.665551][T17491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 907.670835][T17491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 907.727744][T17491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.736625][T17491] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.744274][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.746615][T10401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.750387][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.753451][T10401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.795960][T17491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 907.814116][T17491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 908.021931][T17491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.033744][T17572] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 908.035898][T17572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 908.045228][T17572] vhci_hcd vhci_hcd.0: Device attached [ 908.125210][T17491] veth0_vlan: entered promiscuous mode [ 908.139073][T17491] veth1_vlan: entered promiscuous mode [ 908.148763][T17572] netlink: 'syz.2.2470': attribute type 1 has an invalid length. [ 908.170454][T17572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 908.183801][T17491] veth0_macvtap: entered promiscuous mode [ 908.200311][T17491] veth1_macvtap: entered promiscuous mode [ 908.229702][T17491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.241418][T17491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.268060][ T1223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.271951][ T1223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.275355][ T1223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.283104][ T1223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.286965][T17257] usb 41-1: new low-speed USB device number 20 using vhci_hcd [ 908.307751][T10398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.313140][T10398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.326606][ T1223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.329646][ T1223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.578534][ T5957] Bluetooth: hci3: command tx timeout [ 908.653641][T17574] vhci_hcd: connection reset by peer [ 908.667599][T10391] vhci_hcd vhci_hcd.2: stop threads [ 908.669437][T10391] vhci_hcd vhci_hcd.2: release socket [ 908.671336][T10391] vhci_hcd vhci_hcd.2: disconnect device [ 909.288103][T17595] binder: 17594:17595 ioctl c0306201 800004c0 returned -14 [ 910.657040][ T5957] Bluetooth: hci3: command tx timeout [ 911.066979][T15324] usb 40-1: device descriptor read/8, error -110 [ 911.609698][T15324] usb usb40-port1: attempt power cycle [ 911.948120][T17608] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 911.950345][T17608] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 911.953066][T17608] vhci_hcd vhci_hcd.0: Device attached [ 912.068544][T17614] vhci_hcd: connection closed [ 912.068807][ T13] vhci_hcd vhci_hcd.2: stop threads [ 912.073272][ T13] vhci_hcd vhci_hcd.2: release socket [ 912.075666][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 912.199312][T15324] usb usb40-port1: unable to enumerate USB device [ 912.736991][ T5957] Bluetooth: hci3: command tx timeout [ 913.876966][T17257] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 916.593812][T17638] fuse: Bad value for 'fd' [ 918.127207][T17651] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 918.129561][T17651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 918.132809][T17651] vhci_hcd vhci_hcd.0: Device attached [ 918.152186][T17651] netlink: 'syz.3.2486': attribute type 1 has an invalid length. [ 918.172621][T17651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 918.366978][ T39] usb 43-1: new low-speed USB device number 16 using vhci_hcd [ 919.543987][T17651] bond1: (slave geneve2): making interface the new active one [ 919.555495][T17651] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 919.671874][T17654] vhci_hcd: connection reset by peer [ 919.674329][T10391] vhci_hcd vhci_hcd.3: stop threads [ 919.676374][T10391] vhci_hcd vhci_hcd.3: release socket [ 919.678643][T10391] vhci_hcd vhci_hcd.3: disconnect device [ 919.768109][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 921.666888][ T6740] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 923.654867][ T39] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 925.374491][ T6740] usb 5-1: unable to read config index 0 descriptor/all [ 925.383726][ T6740] usb 5-1: can't read configurations, error -71 [ 926.152125][T17727] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 926.154272][T17727] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 926.157722][T17727] vhci_hcd vhci_hcd.0: Device attached [ 926.186348][T17727] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 926.209257][T17727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 926.417009][ T6019] usb 41-1: new low-speed USB device number 21 using vhci_hcd [ 926.797383][T17728] vhci_hcd: connection reset by peer [ 926.800785][T10391] vhci_hcd vhci_hcd.2: stop threads [ 926.803968][T10391] vhci_hcd vhci_hcd.2: release socket [ 926.806348][T10391] vhci_hcd vhci_hcd.2: disconnect device [ 931.546950][ T6019] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 931.730847][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 933.391938][T17783] fuse: Bad value for 'group_id' [ 933.393624][T17783] fuse: Bad value for 'group_id' [ 936.100607][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.103757][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.273453][T17811] Cannot find add_set index 0 as target [ 937.353594][T17826] fuse: Bad value for 'group_id' [ 937.355864][T17826] fuse: Bad value for 'group_id' [ 941.753561][T17873] 9p: Bad value for 'rfdno' [ 941.761586][T17861] Cannot find add_set index 0 as target [ 944.461373][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2538'. [ 947.220935][T17908] Cannot find add_set index 0 as target [ 949.225140][T17933] 9p: Bad value for 'rfdno' [ 949.861939][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2550'. [ 958.832625][T17983] Oops: general protection fault, probably for non-canonical address 0xdffffc000000013c: 0000 [#1] SMP KASAN NOPTI [ 958.837927][T17983] KASAN: null-ptr-deref in range [0x00000000000009e0-0x00000000000009e7] [ 958.841736][T17983] CPU: 0 UID: 0 PID: 17983 Comm: syz.1.2560 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.846521][T17983] Tainted: [L]=SOFTLOCKUP [ 958.848439][T17983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 958.852839][T17983] RIP: 0010:task_work_cancel_match+0x86/0x250 [ 958.855557][T17983] Code: 40 04 00 f3 f3 f3 65 48 8b 05 ee a7 3c 12 48 89 44 24 70 31 c0 e8 3a 60 37 00 4c 89 f8 48 c7 44 24 38 00 00 00 00 48 c1 e8 03 <42> 80 3c 30 00 0f 85 7e 01 00 00 4c 8b b3 e0 09 00 00 4d 85 f6 75 [ 958.863968][T17983] RSP: 0000:ffffc90003317ba8 EFLAGS: 00010206 [ 958.866705][T17983] RAX: 000000000000013c RBX: 0000000000000000 RCX: ffffc9003160a000 [ 958.870174][T17983] RDX: 0000000000080000 RSI: ffffffff81d0b826 RDI: 0000000000000000 [ 958.873697][T17983] RBP: 1ffff92000662f78 R08: 0000000000000007 R09: 0000000000000000 [ 958.877181][T17983] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff81d0b3c0 [ 958.880690][T17983] R13: ffff888027ee6d40 R14: dffffc0000000000 R15: 00000000000009e0 [ 958.884209][T17983] FS: 0000000000000000(0000) GS:ffff88809714a000(0063) knlGS:00000000f53f5b40 [ 958.888150][T17983] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 958.891074][T17983] CR2: 00000000f51862f9 CR3: 00000000637da000 CR4: 0000000000352ef0 [ 958.894617][T17983] Call Trace: [ 958.896130][T17983] [ 958.897473][T17983] ? __pfx_task_work_cancel_match+0x10/0x10 [ 958.900123][T17983] task_work_cancel+0x23/0x30 [ 958.902285][T17983] landlock_restrict_sibling_threads+0xafe/0x1280 [ 958.905168][T17983] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 958.908189][T17983] ? __pfx___might_resched+0x10/0x10 [ 958.910529][T17983] ? landlock_merge_ruleset+0x213/0x830 [ 958.912997][T17983] __do_sys_landlock_restrict_self+0x5c9/0x9e0 [ 958.915739][T17983] do_int80_emulation+0x141/0x6b0 [ 958.917991][T17983] asm_int80_emulation+0x1a/0x20 [ 958.920238][T17983] RIP: 0023:0xf7f54f6c [ 958.922079][T17983] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 958.930475][T17983] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 00000000000001be [ 958.934135][T17983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000008 [ 958.937598][T17983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.941075][T17983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.944561][T17983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.948020][T17983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.951509][T17983] [ 958.952902][T17983] Modules linked in: [ 958.955081][T17983] ---[ end trace 0000000000000000 ]--- [ 959.013741][T17983] RIP: 0010:task_work_cancel_match+0x86/0x250 [ 959.074846][T17983] Code: 40 04 00 f3 f3 f3 65 48 8b 05 ee a7 3c 12 48 89 44 24 70 31 c0 e8 3a 60 37 00 4c 89 f8 48 c7 44 24 38 00 00 00 00 48 c1 e8 03 <42> 80 3c 30 00 0f 85 7e 01 00 00 4c 8b b3 e0 09 00 00 4d 85 f6 75 [ 959.106881][T17983] RSP: 0000:ffffc90003317ba8 EFLAGS: 00010206 [ 959.139264][T17983] RAX: 000000000000013c RBX: 0000000000000000 RCX: ffffc9003160a000 [ 959.144043][T17983] RDX: 0000000000080000 RSI: ffffffff81d0b826 RDI: 0000000000000000 [ 959.147800][T17983] RBP: 1ffff92000662f78 R08: 0000000000000007 R09: 0000000000000000 [ 959.151404][T17983] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff81d0b3c0 [ 959.155038][T17983] R13: ffff888027ee6d40 R14: dffffc0000000000 R15: 00000000000009e0 [ 959.158636][T17983] FS: 0000000000000000(0000) GS:ffff88809714a000(0063) knlGS:00000000f53f5b40 [ 959.163111][T17983] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 959.166189][T17983] CR2: 00000000f546bff4 CR3: 00000000637da000 CR4: 0000000000352ef0 [ 959.217252][T17983] Kernel panic - not syncing: Fatal exception [ 959.220601][T17983] Kernel Offset: disabled [ 959.222552][T17983] Rebooting in 86400 seconds..