last executing test programs: 12m25.503677762s ago: executing program 2 (id=2881): r0 = syz_io_uring_setup(0x304, &(0x7f0000000280)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000400)={0x8, 0xffffffffffffffff, 0x6, {0x8000000000000001, 0x9b}, 0xfc}, 0x8e) 12m25.364761732s ago: executing program 2 (id=2883): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) openat$kvm(0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000340)={0x0, "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"}) bind$l2tp6(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4c040) read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0xfffffec1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x52, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 12m23.152935536s ago: executing program 2 (id=2901): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x7f, {0xc, 0x27, 0x0, {0x2, 0x6, 0x4030cf7f, 0x8000000000000001, 0x6a2, 0x5, 0x80000000, 0x9, 0xe29, 0x8000, 0xfffffffe, 0x0, 0x0, 0x7fdfffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x0, 0x2) 12m23.099413006s ago: executing program 2 (id=2902): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004090) syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 12m22.958341649s ago: executing program 2 (id=2904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x80001) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m22.682278444s ago: executing program 2 (id=2907): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x404001, 0x0, 0x8}, 0x18) 12m22.517078675s ago: executing program 32 (id=2907): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x404001, 0x0, 0x8}, 0x18) 11m35.372929707s ago: executing program 3 (id=3029): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x1000aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r4, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) close(0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) 11m33.215965717s ago: executing program 3 (id=3032): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, 0x0, 0x0, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) unshare(0x6a040000) 11m31.308660548s ago: executing program 3 (id=3037): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x1000aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(0xffffffffffffffff) r4 = socket(0x2b, 0x1, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) 11m29.137111748s ago: executing program 3 (id=3041): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004090) syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 11m28.918513995s ago: executing program 3 (id=3043): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000280)="606ad7f7", 0x4}, {0x0}], 0x2) 11m26.537418973s ago: executing program 3 (id=3050): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x1000aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r4, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) close(0xffffffffffffffff) r5 = socket(0x2b, 0x1, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) 11m26.407771179s ago: executing program 33 (id=3050): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x1000aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r4, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) close(0xffffffffffffffff) r5 = socket(0x2b, 0x1, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) 16.277876568s ago: executing program 4 (id=4470): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, 0x0, 0x0, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, 0x0) unshare(0x6a040000) 13.494595361s ago: executing program 0 (id=4473): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 12.304255763s ago: executing program 4 (id=4475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 11.704749836s ago: executing program 0 (id=4476): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) 11.577178081s ago: executing program 5 (id=4477): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091260010000000000000e30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778fd87105119cc7e2f828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x1, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x40000001, 0x3, 0x38, 0xff, 0x84, 0x7, 0x6, 0x0, 0x8, 0x3, 0x4, 0x8, 0x24ab}], 0xffffffff}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x8000000000, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x2, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.428405044s ago: executing program 4 (id=4481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 10.268292249s ago: executing program 5 (id=4483): socket$kcm(0x2b, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='THAWED\x00', 0x7) 10.171515776s ago: executing program 5 (id=4484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 7.848759253s ago: executing program 4 (id=4486): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 7.63723882s ago: executing program 5 (id=4487): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 7.598923486s ago: executing program 0 (id=4488): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, 0x0) 7.329363444s ago: executing program 1 (id=4489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 5.897867599s ago: executing program 5 (id=4490): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, 0x0, 0x0, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, 0x0) unshare(0x6a040000) 5.041609803s ago: executing program 0 (id=4491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 5.041396752s ago: executing program 1 (id=4492): socket$kcm(0x2b, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='THAWED\x00', 0x7) 5.041214214s ago: executing program 1 (id=4493): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, 0x0, 0x0, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, 0x0) unshare(0x6a040000) 3.930897723s ago: executing program 1 (id=4494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 3.222758376s ago: executing program 0 (id=4495): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x1000aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r3, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) close(0xffffffffffffffff) r4 = socket(0x2b, 0x1, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 3.222453964s ago: executing program 4 (id=4496): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) close(0xffffffffffffffff) 2.020458963s ago: executing program 5 (id=4497): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) close(r6) 2.014313065s ago: executing program 1 (id=4505): socket$inet6(0xa, 0x6, 0xffffcc87) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009f802026a209dbd8ad91002020000090582"], 0x0) 382.240517ms ago: executing program 4 (id=4498): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) close(r6) 374.039989ms ago: executing program 1 (id=4507): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, 0x0, 0x0, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, 0x0) unshare(0x6a040000) 0s ago: executing program 0 (id=4499): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, 0x0) kernel console output (not intermixed with test programs): ed blocking state [ 856.035427][T18653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.069504][T19754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 856.265678][T19843] 9pnet_virtio: no channels available for device syz [ 856.424922][T19754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.522549][T19754] veth0_vlan: entered promiscuous mode [ 856.544531][T19754] veth1_vlan: entered promiscuous mode [ 856.590618][T19754] veth0_macvtap: entered promiscuous mode [ 856.598761][T19754] veth1_macvtap: entered promiscuous mode [ 856.616808][T19754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.631869][T19754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.647645][T12883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.651443][T12883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.663952][T12883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.668043][T12883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.737401][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.740567][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.753218][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.757773][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.961693][ T5941] Bluetooth: hci2: command tx timeout [ 858.931993][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.133400][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.174572][ T5941] Bluetooth: hci2: command tx timeout [ 859.357662][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.463796][T15756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 859.506254][T15756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 859.510836][T15756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 859.515660][T15756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 859.519253][T15756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 859.555314][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.743761][T19866] chnl_net:caif_netlink_parms(): no params data found [ 859.926258][T19866] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.001032][T19866] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.003510][T19866] bridge_slave_0: entered allmulticast mode [ 860.008474][T19866] bridge_slave_0: entered promiscuous mode [ 860.067976][T19866] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.070382][T19866] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.073547][T19866] bridge_slave_1: entered allmulticast mode [ 860.076933][T19866] bridge_slave_1: entered promiscuous mode [ 860.150066][ T46] bridge_slave_1: left allmulticast mode [ 860.152515][ T46] bridge_slave_1: left promiscuous mode [ 860.154602][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.169537][ T46] bridge_slave_0: left allmulticast mode [ 860.172027][ T46] bridge_slave_0: left promiscuous mode [ 860.174562][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.650450][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.664064][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.668935][ T46] bond0 (unregistering): Released all slaves [ 860.681923][T19866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.689324][T19866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.737148][T19866] team0: Port device team_slave_0 added [ 860.741360][T19866] team0: Port device team_slave_1 added [ 860.766105][T19866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.768986][T19866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.780256][T19866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.785957][T19866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.796647][T19866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.820022][T19866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.875314][T19866] hsr_slave_0: entered promiscuous mode [ 860.878095][T19866] hsr_slave_1: entered promiscuous mode [ 860.881133][T19866] debugfs: 'hsr0' already exists in 'hsr' [ 860.895037][T19866] Cannot create hsr debugfs directory [ 861.791714][ T5941] Bluetooth: hci1: command tx timeout [ 863.238651][T19897] 9pnet_virtio: no channels available for device syz [ 863.442753][ T46] hsr_slave_0: left promiscuous mode [ 863.469497][ T46] hsr_slave_1: left promiscuous mode [ 863.475445][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.477962][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.497634][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.501195][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.511862][ T46] veth1_macvtap: left promiscuous mode [ 863.515101][ T46] veth0_macvtap: left promiscuous mode [ 863.517280][ T46] veth1_vlan: left promiscuous mode [ 863.519579][ T46] veth0_vlan: left promiscuous mode [ 863.961140][ T5941] Bluetooth: hci1: command tx timeout [ 863.966863][ T46] team0 (unregistering): Port device team_slave_1 removed [ 863.999522][ T46] team0 (unregistering): Port device team_slave_0 removed [ 864.285145][T19893] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 864.289931][T19893] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 864.294127][T19893] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 866.183576][ T5941] Bluetooth: hci1: command tx timeout [ 866.583282][T19909] 9pnet_virtio: no channels available for device syz [ 868.407354][ T5941] Bluetooth: hci1: command tx timeout [ 868.435985][T19866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 868.451918][T19866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 868.464493][T19866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 868.471751][T19866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 868.664335][T19866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.697134][T19866] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.709332][T12802] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.712554][T12802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.721123][T12802] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.723770][T12802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.397257][T19866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.664835][T19866] veth0_vlan: entered promiscuous mode [ 869.674403][T19866] veth1_vlan: entered promiscuous mode [ 869.717619][T19866] veth0_macvtap: entered promiscuous mode [ 869.726852][T19866] veth1_macvtap: entered promiscuous mode [ 869.743235][T19866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.756871][T19866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.773006][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.777144][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.781058][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.787199][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.940101][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.943591][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.050364][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.053621][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.171819][ T40] audit: type=1326 audit(1775707522.578:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19965 comm="syz.0.3657" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f27f6c code=0x0 [ 875.148737][ T40] audit: type=1326 audit(1775707526.481:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.4.3646" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43f6c code=0x0 [ 877.916616][T20007] 9pnet_virtio: no channels available for device syz [ 877.923644][T20007] siw: device registration error -23 [ 879.522499][T15756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 879.552232][T15756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 879.575992][T15756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 879.580287][T15756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 879.589861][T18653] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.616375][T15756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 879.736889][T18653] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.838970][ T5941] Bluetooth: hci1: command tx timeout [ 881.931197][T18653] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.964120][T20022] chnl_net:caif_netlink_parms(): no params data found [ 882.217458][T18653] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.251633][T20022] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.254813][T20022] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.258292][T20022] bridge_slave_0: entered allmulticast mode [ 882.263564][T20022] bridge_slave_0: entered promiscuous mode [ 882.273072][T20022] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.276217][T20022] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.279983][T20022] bridge_slave_1: entered allmulticast mode [ 882.283530][T20022] bridge_slave_1: entered promiscuous mode [ 882.318754][T20022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.338595][T20022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.401533][T20022] team0: Port device team_slave_0 added [ 882.407438][T20022] team0: Port device team_slave_1 added [ 882.475689][T20022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.479421][T20022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.493236][T20022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.520726][T20022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.526717][T20022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.538162][T20022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.700906][T20022] hsr_slave_0: entered promiscuous mode [ 882.715494][T20022] hsr_slave_1: entered promiscuous mode [ 882.718834][T20022] debugfs: 'hsr0' already exists in 'hsr' [ 882.721493][T20022] Cannot create hsr debugfs directory [ 882.804638][T18653] bridge_slave_1: left allmulticast mode [ 882.807838][T18653] bridge_slave_1: left promiscuous mode [ 882.811801][T18653] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.817786][T18653] bridge_slave_0: left allmulticast mode [ 882.820260][T18653] bridge_slave_0: left promiscuous mode [ 882.823875][T18653] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.588131][T18653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.595689][T18653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.603411][T18653] bond0 (unregistering): Released all slaves [ 883.614382][T20044] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 883.619543][T20044] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 883.623921][T20044] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 884.050849][ T5941] Bluetooth: hci1: command tx timeout [ 884.844158][T18653] hsr_slave_0: left promiscuous mode [ 884.848916][T18653] hsr_slave_1: left promiscuous mode [ 884.851127][T18653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.856139][T18653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.860483][T18653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.864356][T18653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.873218][T18653] veth1_macvtap: left promiscuous mode [ 884.878549][T18653] veth0_macvtap: left promiscuous mode [ 884.881755][T18653] veth1_vlan: left promiscuous mode [ 884.884148][T18653] veth0_vlan: left promiscuous mode [ 885.470907][T18653] team0 (unregistering): Port device team_slave_1 removed [ 885.504034][T18653] team0 (unregistering): Port device team_slave_0 removed [ 886.273716][ T5941] Bluetooth: hci1: command tx timeout [ 886.743846][ T40] audit: type=1326 audit(1775707537.336:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20072 comm="syz.5.3676" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 887.381560][T20022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 887.398361][T20022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 887.402930][T20022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 887.409034][T20022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 887.530816][T20022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.541267][T20022] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.563390][T20022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 887.566982][T20022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.678622][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.681883][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.695133][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.698244][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.835564][T20022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.307310][T15756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 888.318936][T15756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 888.325304][T15756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 888.341871][T15756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 888.355980][T15756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 888.421283][T18653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.482716][T20022] veth0_vlan: entered promiscuous mode [ 888.505611][T20022] veth1_vlan: entered promiscuous mode [ 888.506748][T15756] Bluetooth: hci1: command tx timeout [ 888.578617][T18653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.615394][T20022] veth0_macvtap: entered promiscuous mode [ 888.627374][T20022] veth1_macvtap: entered promiscuous mode [ 888.637533][T20022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.653416][T20022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.688942][T12802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.692653][T12802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.696346][T12802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.739837][T18653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.804490][T12802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.917701][T18653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.009090][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.012684][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.018605][ T40] audit: type=1326 audit(1775707539.460:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.0.3681" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f27f6c code=0x0 [ 889.107578][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.127623][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.153209][T20103] chnl_net:caif_netlink_parms(): no params data found [ 889.237454][T18653] bridge_slave_1: left allmulticast mode [ 889.239881][T18653] bridge_slave_1: left promiscuous mode [ 889.242536][T18653] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.258756][T18653] bridge_slave_0: left allmulticast mode [ 889.261175][T18653] bridge_slave_0: left promiscuous mode [ 889.263735][T18653] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.515041][T18653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.531344][T18653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.536906][T18653] bond0 (unregistering): Released all slaves [ 890.547910][T15756] Bluetooth: hci2: command tx timeout [ 891.420520][T20103] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.423155][T20103] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.426263][T20103] bridge_slave_0: entered allmulticast mode [ 891.429406][T20103] bridge_slave_0: entered promiscuous mode [ 891.442388][T20103] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.448360][T20103] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.451164][T20103] bridge_slave_1: entered allmulticast mode [ 891.455129][T20103] bridge_slave_1: entered promiscuous mode [ 891.488873][T20103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.502785][T20103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.594401][T20103] team0: Port device team_slave_0 added [ 891.610653][T20103] team0: Port device team_slave_1 added [ 891.872930][T20103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.875901][T20103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.891444][T20103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.915348][T20103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.920225][T20103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.934286][T20103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.012636][T20103] hsr_slave_0: entered promiscuous mode [ 892.016069][T20103] hsr_slave_1: entered promiscuous mode [ 892.019113][T20103] debugfs: 'hsr0' already exists in 'hsr' [ 892.021681][T20103] Cannot create hsr debugfs directory [ 892.202702][T18653] hsr_slave_0: left promiscuous mode [ 892.206150][T18653] hsr_slave_1: left promiscuous mode [ 892.208427][T18653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.214817][T18653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.222676][T18653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.225810][T18653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.261653][T18653] veth1_macvtap: left promiscuous mode [ 892.263656][T18653] veth0_macvtap: left promiscuous mode [ 892.266244][T18653] veth1_vlan: left promiscuous mode [ 892.270804][T18653] veth0_vlan: left promiscuous mode [ 892.508677][T18653] team0 (unregistering): Port device team_slave_1 removed [ 892.525208][T18653] team0 (unregistering): Port device team_slave_0 removed [ 892.770704][T15756] Bluetooth: hci2: command tx timeout [ 893.225458][T20147] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 893.228460][T20147] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 893.232452][T20147] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 894.888458][T20103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 894.909510][T20103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 894.984999][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.995144][T15756] Bluetooth: hci2: command tx timeout [ 895.029466][T20103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 895.042312][T20103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 895.352284][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.446098][T20103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.467051][T20103] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.479198][T12883] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.481553][T12883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.499500][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.501918][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.520201][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 895.527349][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 895.539837][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 895.548614][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 895.553521][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 895.721043][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.963169][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.432318][T20103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.516902][T20103] veth0_vlan: entered promiscuous mode [ 896.537193][T20103] veth1_vlan: entered promiscuous mode [ 896.600139][T20103] veth0_macvtap: entered promiscuous mode [ 896.614631][T20103] veth1_macvtap: entered promiscuous mode [ 896.662413][T20103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.692799][T20103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.718390][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.741934][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.747449][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.864371][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.873077][ T46] bridge_slave_1: left allmulticast mode [ 896.933188][ T46] bridge_slave_1: left promiscuous mode [ 896.959990][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.971842][ T46] bridge_slave_0: left allmulticast mode [ 896.989085][ T46] bridge_slave_0: left promiscuous mode [ 896.993374][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.227752][ T5941] Bluetooth: hci2: command tx timeout [ 897.264598][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.270547][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.276475][ T46] bond0 (unregistering): Released all slaves [ 897.315997][T20202] chnl_net:caif_netlink_parms(): no params data found [ 897.373479][T12802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.384323][T12802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.452875][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.460738][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.479152][T20202] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.482073][T20202] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.491808][T20202] bridge_slave_0: entered allmulticast mode [ 897.496225][T20202] bridge_slave_0: entered promiscuous mode [ 897.506415][T20202] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.547571][T20202] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.550908][T20202] bridge_slave_1: entered allmulticast mode [ 897.569581][T20202] bridge_slave_1: entered promiscuous mode [ 897.646976][T20202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.657960][T20202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.728909][ T5941] Bluetooth: hci3: command tx timeout [ 897.798587][T20202] team0: Port device team_slave_0 added [ 897.829967][T20202] team0: Port device team_slave_1 added [ 897.915354][T20202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.918656][T20202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.933701][T20202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.938077][T20202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.940353][T20202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.949585][T20202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.980182][T20202] hsr_slave_0: entered promiscuous mode [ 897.982925][T20202] hsr_slave_1: entered promiscuous mode [ 897.987007][T20202] debugfs: 'hsr0' already exists in 'hsr' [ 897.988907][T20202] Cannot create hsr debugfs directory [ 898.338661][ T46] hsr_slave_0: left promiscuous mode [ 898.348796][ T46] hsr_slave_1: left promiscuous mode [ 898.351871][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.354822][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.358728][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.367048][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.385291][ T46] veth1_macvtap: left promiscuous mode [ 898.387619][ T46] veth0_macvtap: left promiscuous mode [ 898.390282][ T46] veth1_vlan: left promiscuous mode [ 898.393633][ T46] veth0_vlan: left promiscuous mode [ 898.790919][ T46] team0 (unregistering): Port device team_slave_1 removed [ 898.809123][ T46] team0 (unregistering): Port device team_slave_0 removed [ 898.941913][ T40] audit: type=1326 audit(1775707548.753:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.4.3691" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 898.978472][ T10] infiniband syz0: ib_query_port failed (-19) [ 899.232846][T20259] 9pnet_virtio: no channels available for device syz [ 899.782376][T20202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 899.788729][T20202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 899.797300][T20202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 899.804360][T20202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 899.906892][T20202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.928831][T20202] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.937415][T12883] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.940679][T12883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.952573][ T5941] Bluetooth: hci3: command tx timeout [ 899.962163][T12883] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.965303][T12883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.146891][T20202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.201190][T20202] veth0_vlan: entered promiscuous mode [ 900.224069][T20202] veth1_vlan: entered promiscuous mode [ 900.251302][T20202] veth0_macvtap: entered promiscuous mode [ 900.257002][T20202] veth1_macvtap: entered promiscuous mode [ 900.269638][T20202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.274589][T20202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.287426][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.291617][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.297573][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.301748][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.430990][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.435778][T12457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.440302][T12457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.443988][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.050920][ T40] audit: type=1326 audit(1775707550.709:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20289 comm="syz.0.3689" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 902.185214][ T5941] Bluetooth: hci3: command tx timeout [ 902.745779][ T40] audit: type=1326 audit(1775707552.309:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.3695" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 903.660140][ T40] audit: type=1326 audit(1775707553.160:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.5.3697" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 904.497121][ T5941] Bluetooth: hci3: command tx timeout [ 904.707231][T20322] syz_tun: entered allmulticast mode [ 904.734264][T20321] syz_tun: left allmulticast mode [ 905.936541][T20333] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 905.938449][T20333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 905.945889][T20333] vhci_hcd vhci_hcd.0: Device attached [ 906.267029][T19329] usb 48-1: SetAddress Request (2) to port 0 [ 906.269093][T19329] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 907.396805][T20334] vhci_hcd: connection reset by peer [ 907.403678][T18653] vhci_hcd vhci_hcd.5: stop threads [ 907.405478][T18653] vhci_hcd vhci_hcd.5: release socket [ 907.407297][T18653] vhci_hcd vhci_hcd.5: disconnect device [ 907.823839][T20346] 9pnet_virtio: no channels available for device syz [ 907.963491][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 909.411492][ T40] audit: type=1326 audit(1775707558.551:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.1.3706" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 911.973391][ T40] audit: type=1326 audit(1775707560.946:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20359 comm="syz.1.3708" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 912.217081][T19329] usb 48-1: device descriptor read/8, error -110 [ 912.520075][T20364] 9pnet_virtio: no channels available for device syz [ 913.200927][T19329] usb usb48-port1: attempt power cycle [ 915.683132][T19329] usb usb48-port1: unable to enumerate USB device [ 916.439773][ T40] audit: type=1326 audit(1775707565.120:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.5.3713" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 916.950987][ T40] audit: type=1326 audit(1775707565.607:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.1.3712" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 917.924182][ T40] audit: type=1326 audit(1775707566.383:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20392 comm="syz.0.3714" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 922.833346][T20406] 9pnet_virtio: no channels available for device syz [ 925.405681][ T40] audit: type=1326 audit(1775707573.505:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20420 comm="syz.5.3721" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 928.244353][T20440] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 928.246511][T20440] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 928.460191][T20440] vhci_hcd vhci_hcd.0: Device attached [ 928.825262][T13912] usb 48-1: SetAddress Request (6) to port 0 [ 928.827062][T13912] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 928.891598][T20441] vhci_hcd: connection reset by peer [ 928.896209][ T46] vhci_hcd vhci_hcd.5: stop threads [ 928.897711][ T46] vhci_hcd vhci_hcd.5: release socket [ 928.900632][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 929.413100][ T40] audit: type=1326 audit(1775707577.210:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20444 comm="syz.4.3725" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 932.124147][T20458] 9pnet_virtio: no channels available for device syz [ 932.140018][T20458] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 932.968813][T20463] 9pnet_virtio: no channels available for device syz [ 934.538333][T13912] usb 48-1: device descriptor read/8, error -110 [ 935.215630][ T40] audit: type=1326 audit(1775707582.488:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20464 comm="syz.4.3730" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 937.191449][T13912] usb usb48-port1: attempt power cycle [ 937.642432][T20482] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 937.645434][T20482] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 937.652482][T20482] vhci_hcd vhci_hcd.0: Device attached [ 937.802107][T13912] usb usb48-port1: unable to enumerate USB device [ 937.940594][ T29] usb 46-1: SetAddress Request (2) to port 0 [ 937.944582][ T29] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 938.165747][T20483] vhci_hcd: connection reset by peer [ 938.168573][T12457] vhci_hcd vhci_hcd.4: stop threads [ 938.170992][T12457] vhci_hcd vhci_hcd.4: release socket [ 938.231865][T12457] vhci_hcd vhci_hcd.4: disconnect device [ 939.276830][ T40] audit: type=1326 audit(1775707586.428:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.0.3735" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 940.168373][T20500] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 940.170858][T20500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 940.178809][T20500] vhci_hcd vhci_hcd.0: Device attached [ 940.647008][T20501] vhci_hcd: connection closed [ 940.647446][T18653] vhci_hcd vhci_hcd.4: stop threads [ 940.651883][T18653] vhci_hcd vhci_hcd.4: release socket [ 940.664158][T18653] vhci_hcd vhci_hcd.4: disconnect device [ 943.540059][ T29] usb 46-1: device descriptor read/8, error -110 [ 943.647411][T20512] 9pnet_virtio: no channels available for device syz [ 943.872989][T20518] 9pnet_virtio: no channels available for device syz [ 945.758389][T20531] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 945.761040][T20531] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.769259][T20532] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 945.771839][T20532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.775696][T20531] vhci_hcd vhci_hcd.0: Device attached [ 945.778435][T20532] vhci_hcd vhci_hcd.0: Device attached [ 946.296431][ T29] usb usb46-port1: attempt power cycle [ 946.711432][T20534] vhci_hcd: connection closed [ 946.725384][ T860] usb 38-1: SetAddress Request (6) to port 0 [ 946.729698][ T860] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 946.799620][T13912] usb 48-1: SetAddress Request (10) to port 0 [ 946.801733][T13912] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 946.821061][T20536] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 946.825569][T12457] vhci_hcd vhci_hcd.5: stop threads [ 946.827720][T12457] vhci_hcd vhci_hcd.5: release socket [ 946.852633][T12457] vhci_hcd vhci_hcd.5: disconnect device [ 947.047034][T20533] vhci_hcd: connection reset by peer [ 947.050056][T12883] vhci_hcd vhci_hcd.0: stop threads [ 947.052390][T12883] vhci_hcd vhci_hcd.0: release socket [ 947.056076][T12883] vhci_hcd vhci_hcd.0: disconnect device [ 947.223909][ T29] usb usb46-port1: unable to enumerate USB device [ 947.839887][ T40] audit: type=1326 audit(1775707594.504:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20551 comm="syz.4.3747" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 947.846429][T20554] siw: device registration error -23 [ 949.833658][T20566] 9pnet_virtio: no channels available for device syz [ 950.017431][T20564] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 950.020006][T20564] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 950.174186][T20564] vhci_hcd vhci_hcd.0: Device attached [ 950.624850][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 950.626940][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 950.737270][ T40] audit: type=1326 audit(1775707597.218:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20569 comm="syz.0.3751" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 951.806079][T20580] siw: device registration error -23 [ 952.110249][ T860] usb 38-1: device descriptor read/8, error -110 [ 952.185388][T13912] usb 48-1: device descriptor read/8, error -110 [ 952.614262][T13912] usb usb48-port1: attempt power cycle [ 952.858141][T20565] vhci_hcd: connection reset by peer [ 952.860207][T12457] vhci_hcd vhci_hcd.1: stop threads [ 952.861929][T12457] vhci_hcd vhci_hcd.1: release socket [ 952.863833][T12457] vhci_hcd vhci_hcd.1: disconnect device [ 954.034742][T13912] usb usb48-port1: unable to enumerate USB device [ 954.039081][ T860] usb usb38-port1: attempt power cycle [ 954.707811][T20596] 9pnet_virtio: no channels available for device syz [ 955.831794][ T860] usb usb38-port1: unable to enumerate USB device [ 956.278902][ T29] usb 40-1: device descriptor read/8, error -110 [ 956.899953][ T29] usb usb40-port1: attempt power cycle [ 957.517873][ T29] usb usb40-port1: unable to enumerate USB device [ 958.388943][T20622] 9pnet_virtio: no channels available for device syz [ 960.233021][T20625] 9pnet_virtio: no channels available for device syz [ 961.747524][T20630] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 961.749682][T20630] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 961.752942][T20630] vhci_hcd vhci_hcd.0: Device attached [ 962.117687][T13912] usb 40-1: SetAddress Request (6) to port 0 [ 962.119751][T13912] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 963.572987][T20631] vhci_hcd: connection reset by peer [ 963.578438][T12802] vhci_hcd vhci_hcd.1: stop threads [ 963.581997][T12802] vhci_hcd vhci_hcd.1: release socket [ 963.587028][T12802] vhci_hcd vhci_hcd.1: disconnect device [ 965.258311][ T40] audit: type=1326 audit(1775707610.675:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.4.3769" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 966.825733][T20667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 966.828256][T20667] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.835566][T20667] vhci_hcd vhci_hcd.0: Device attached [ 966.905458][T20668] vhci_hcd: connection closed [ 966.909131][T12457] vhci_hcd vhci_hcd.0: stop threads [ 966.915022][T12457] vhci_hcd vhci_hcd.0: release socket [ 966.917112][T12457] vhci_hcd vhci_hcd.0: disconnect device [ 968.448606][T13912] usb 40-1: device descriptor read/8, error -110 [ 968.782661][T20682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3774'. [ 968.972815][ T40] audit: type=1326 audit(1775707614.184:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20676 comm="syz.5.3773" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 969.443429][T13912] usb usb40-port1: attempt power cycle [ 969.463893][T20682] syz_tun: entered allmulticast mode [ 969.500084][T20681] syz_tun: left allmulticast mode [ 970.181605][T13912] usb usb40-port1: unable to enumerate USB device [ 970.235981][T20698] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 970.238350][T20698] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 970.240984][T20698] vhci_hcd vhci_hcd.0: Device attached [ 970.392157][T20702] siw: device registration error -23 [ 970.705150][ T860] usb 38-1: SetAddress Request (10) to port 0 [ 970.723687][T20707] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 970.725724][T20707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 970.732256][ T860] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 970.747706][T20707] vhci_hcd vhci_hcd.0: Device attached [ 971.281009][ T40] audit: type=1326 audit(1775707616.402:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.5.3779" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 972.014663][ T29] usb 46-1: SetAddress Request (6) to port 0 [ 972.014746][ T29] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 972.698713][T20699] vhci_hcd: connection reset by peer [ 972.708144][T12457] vhci_hcd vhci_hcd.0: stop threads [ 972.710583][T12457] vhci_hcd vhci_hcd.0: release socket [ 972.714698][T12457] vhci_hcd vhci_hcd.0: disconnect device [ 972.726568][T20708] vhci_hcd: connection reset by peer [ 972.729459][T12457] vhci_hcd vhci_hcd.4: stop threads [ 972.731646][T12457] vhci_hcd vhci_hcd.4: release socket [ 972.734921][T12457] vhci_hcd vhci_hcd.4: disconnect device [ 973.910499][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 974.286876][T20723] 9pnet_virtio: no channels available for device syz [ 975.474662][T20718] siw: device registration error -23 [ 975.764302][T20733] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 975.766438][T20733] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 975.859126][T20733] vhci_hcd vhci_hcd.0: Device attached [ 975.877411][ T40] audit: type=1326 audit(1775707620.753:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20727 comm="syz.4.3784" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 976.141255][T15756] Bluetooth: hci0: command 0x0406 tx timeout [ 976.592072][T20734] vhci_hcd: connection reset by peer [ 976.595039][T12457] vhci_hcd vhci_hcd.0: stop threads [ 976.597208][T12457] vhci_hcd vhci_hcd.0: release socket [ 976.602123][ T860] usb 38-1: device descriptor read/8, error -110 [ 976.602221][T12457] vhci_hcd vhci_hcd.0: disconnect device [ 977.021968][ T860] usb usb38-port1: attempt power cycle [ 977.476032][ T29] usb 46-1: device descriptor read/8, error -110 [ 977.693253][ T860] usb usb38-port1: unable to enumerate USB device [ 977.700952][T20752] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 977.703347][T20752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 977.708936][T20752] vhci_hcd vhci_hcd.0: Device attached [ 977.896242][ T29] usb usb46-port1: attempt power cycle [ 978.061062][ T860] usb 38-1: SetAddress Request (14) to port 0 [ 978.063191][ T860] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 978.211580][ T40] audit: type=1326 audit(1775707622.934:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.1.3788" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 978.523484][ T29] usb usb46-port1: unable to enumerate USB device [ 979.177248][ T40] audit: type=1326 audit(1775707623.832:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.5.3790" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 979.317139][T20753] vhci_hcd: connection reset by peer [ 979.319228][ T71] vhci_hcd vhci_hcd.0: stop threads [ 979.321335][ T71] vhci_hcd vhci_hcd.0: release socket [ 979.323222][ T71] vhci_hcd vhci_hcd.0: disconnect device [ 981.458850][T20776] 9pnet_virtio: no channels available for device syz [ 983.272451][T20791] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 983.274678][T20791] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 983.278050][T20791] vhci_hcd vhci_hcd.0: Device attached [ 983.471313][T20798] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 983.473498][T20798] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 983.491562][T20798] vhci_hcd vhci_hcd.0: Device attached [ 983.560167][ T40] audit: type=1326 audit(1775707627.931:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20794 comm="syz.1.3793" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 983.685990][ T59] usb 48-1: SetAddress Request (14) to port 0 [ 983.686611][ T59] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 984.708180][T20799] vhci_hcd: connection reset by peer [ 984.745400][T20792] vhci_hcd: connection reset by peer [ 984.748476][ T61] vhci_hcd vhci_hcd.0: stop threads [ 984.750877][ T61] vhci_hcd vhci_hcd.0: release socket [ 984.754775][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 984.754774][ T860] usb 38-1: device descriptor read/8, error -110 [ 984.754999][ T61] vhci_hcd vhci_hcd.5: stop threads [ 984.762341][ T61] vhci_hcd vhci_hcd.5: release socket [ 984.764912][ T61] vhci_hcd vhci_hcd.5: disconnect device [ 985.265268][T20810] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 985.267420][T20810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 985.280022][ T860] usb usb38-port1: attempt power cycle [ 985.285795][T20810] vhci_hcd vhci_hcd.0: Device attached [ 985.568252][T19329] usb 40-1: SetAddress Request (10) to port 0 [ 985.570883][T19329] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 986.057929][ T860] usb usb38-port1: unable to enumerate USB device [ 987.174593][T20826] 9pnet_virtio: no channels available for device syz [ 988.337845][T20827] siw: device registration error -23 [ 988.752611][T20811] vhci_hcd: connection reset by peer [ 988.763472][ T61] vhci_hcd vhci_hcd.1: stop threads [ 988.765207][ T61] vhci_hcd vhci_hcd.1: release socket [ 988.767130][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 989.095075][T20838] 9pnet_virtio: no channels available for device syz [ 989.178674][ T59] usb 48-1: device descriptor read/8, error -110 [ 989.620749][ T59] usb usb48-port1: attempt power cycle [ 990.443587][ T59] usb usb48-port1: unable to enumerate USB device [ 990.752466][ T40] audit: type=1326 audit(1775707634.668:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.1.3807" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 990.997309][T19329] usb 40-1: device descriptor read/8, error -110 [ 992.215090][T19329] usb usb40-port1: attempt power cycle [ 993.209188][T19329] usb usb40-port1: unable to enumerate USB device [ 993.393248][T20862] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 993.395383][T20862] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 993.408127][T20862] vhci_hcd vhci_hcd.0: Device attached [ 993.796737][T19329] usb 48-1: SetAddress Request (18) to port 0 [ 993.799561][T19329] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 995.073344][T20863] vhci_hcd: connection reset by peer [ 995.076523][T18653] vhci_hcd vhci_hcd.5: stop threads [ 995.078297][T18653] vhci_hcd vhci_hcd.5: release socket [ 995.080262][T18653] vhci_hcd vhci_hcd.5: disconnect device [ 995.554169][ T40] audit: type=1326 audit(1775707639.160:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.0.3812" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 996.510716][ T40] audit: type=1326 audit(1775707640.021:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20875 comm="syz.1.3813" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 999.909616][T19329] usb 48-1: device descriptor read/8, error -110 [ 1000.324579][T20888] 9pnet_virtio: no channels available for device syz [ 1000.385844][T20893] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1000.388189][T20893] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1000.391809][T20893] vhci_hcd vhci_hcd.0: Device attached [ 1000.635201][T19329] usb usb48-port1: attempt power cycle [ 1000.770805][T20894] vhci_hcd: connection closed [ 1000.788208][T18653] vhci_hcd vhci_hcd.0: stop threads [ 1000.792480][T18653] vhci_hcd vhci_hcd.0: release socket [ 1000.795105][T18653] vhci_hcd vhci_hcd.0: disconnect device [ 1001.318535][T19329] usb usb48-port1: unable to enumerate USB device [ 1001.374299][T20909] siw: device registration error -23 [ 1002.267690][ T40] audit: type=1326 audit(1775707645.440:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20915 comm="syz.0.3821" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1003.698525][ T40] audit: type=1326 audit(1775707646.778:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20920 comm="syz.1.3822" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 1005.267483][T20933] 9pnet_virtio: no channels available for device syz [ 1007.477284][T20938] 9pnet_virtio: no channels available for device syz [ 1007.823432][ T40] audit: type=1326 audit(1775707650.643:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20945 comm="syz.0.3828" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1007.858348][T20949] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1007.860465][T20949] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1010.435145][ T6019] usb 46-1: SetAddress Request (10) to port 0 [ 1010.437287][ T6019] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1010.602882][T20949] vhci_hcd vhci_hcd.0: Device attached [ 1010.725252][T20951] vhci_hcd: connection reset by peer [ 1010.749157][T12457] vhci_hcd vhci_hcd.4: stop threads [ 1010.751363][T12457] vhci_hcd vhci_hcd.4: release socket [ 1010.753686][T12457] vhci_hcd vhci_hcd.4: disconnect device [ 1012.951102][T20973] 9pnet_virtio: no channels available for device syz [ 1013.993083][ T5941] Bluetooth: hci1: command 0x0406 tx timeout [ 1014.033524][ T40] audit: type=1326 audit(1775707656.454:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20979 comm="syz.0.3836" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1015.806799][T20999] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1015.809150][T20999] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1015.812719][T20998] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1015.815358][T20998] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1015.819421][T20998] vhci_hcd vhci_hcd.0: Device attached [ 1016.035768][ T6019] usb 46-1: device descriptor read/8, error -110 [ 1016.038975][T20999] vhci_hcd vhci_hcd.0: Device attached [ 1016.323403][T21009] 9pnet_virtio: no channels available for device syz [ 1017.251170][ T860] usb 48-1: SetAddress Request (22) to port 0 [ 1017.265421][T19329] usb 40-1: SetAddress Request (14) to port 0 [ 1017.268149][T19329] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1017.276180][ T860] usb 48-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1017.289738][ T6019] usb usb46-port1: attempt power cycle [ 1017.669738][T21001] vhci_hcd: connection reset by peer [ 1017.680367][ T61] vhci_hcd vhci_hcd.5: stop threads [ 1017.684399][ T61] vhci_hcd vhci_hcd.5: release socket [ 1017.687220][ T61] vhci_hcd vhci_hcd.5: disconnect device [ 1017.725597][T21000] vhci_hcd: connection reset by peer [ 1017.727583][ T71] vhci_hcd vhci_hcd.1: stop threads [ 1017.729376][ T71] vhci_hcd vhci_hcd.1: release socket [ 1017.731243][ T71] vhci_hcd vhci_hcd.1: disconnect device [ 1017.961165][ T6019] usb usb46-port1: unable to enumerate USB device [ 1019.475122][ T5941] Bluetooth: hci2: command 0x0406 tx timeout [ 1020.152307][T21041] 9pnet_virtio: no channels available for device syz [ 1020.161054][T21041] siw: device registration error -23 [ 1020.226906][T21042] 9pnet_virtio: no channels available for device syz [ 1020.335526][T21044] 9pnet_virtio: no channels available for device syz [ 1022.713017][T19329] usb 40-1: device descriptor read/8, error -110 [ 1022.715497][ T860] usb 48-1: device descriptor read/8, error -110 [ 1023.106721][ T40] audit: type=1326 audit(1775707664.942:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.4.3849" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 1023.181435][ T860] usb usb48-port1: attempt power cycle [ 1023.184827][T19329] usb usb40-port1: attempt power cycle [ 1023.942845][ T860] usb usb48-port1: unable to enumerate USB device [ 1023.945109][T19329] usb usb40-port1: unable to enumerate USB device [ 1024.648466][T21069] syz_tun: entered allmulticast mode [ 1024.674672][T21068] syz_tun: left allmulticast mode [ 1026.195139][T21082] 9pnet_virtio: no channels available for device syz [ 1026.206022][T21082] siw: device registration error -23 [ 1027.786859][T21092] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1027.789104][T21092] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1027.791978][T21092] vhci_hcd vhci_hcd.0: Device attached [ 1028.208952][T21101] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1028.211055][T21101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1028.216538][T21101] vhci_hcd vhci_hcd.0: Device attached [ 1028.243466][ T860] usb 46-1: SetAddress Request (14) to port 0 [ 1028.245472][ T860] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1028.258979][ T40] audit: type=1326 audit(1775707669.752:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21095 comm="syz.5.3857" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1028.537560][ T6019] usb 38-1: SetAddress Request (19) to port 0 [ 1028.544994][ T6019] usb 38-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1029.165333][T21110] siw: device registration error -23 [ 1030.406871][ T5939] Bluetooth: hci3: command 0x0406 tx timeout [ 1030.782918][T21093] vhci_hcd: connection reset by peer [ 1030.786824][ T61] vhci_hcd vhci_hcd.4: stop threads [ 1030.788560][ T61] vhci_hcd vhci_hcd.4: release socket [ 1030.790414][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 1030.836445][T21102] vhci_hcd: connection reset by peer [ 1030.849292][T18653] vhci_hcd vhci_hcd.0: stop threads [ 1030.851145][T18653] vhci_hcd vhci_hcd.0: release socket [ 1030.853397][T18653] vhci_hcd vhci_hcd.0: disconnect device [ 1033.409835][ T40] audit: type=1326 audit(1775707673.467:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.5.3863" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1033.666177][ T860] usb 46-1: device descriptor read/8, error -110 [ 1034.008489][ T6019] usb 38-1: device descriptor read/8, error -110 [ 1034.325299][ T860] usb usb46-port1: attempt power cycle [ 1035.064981][ T6019] usb usb38-port1: attempt power cycle [ 1035.985694][T21145] 9pnet_virtio: no channels available for device syz [ 1036.203372][ T860] usb usb46-port1: unable to enumerate USB device [ 1036.523298][ T6019] usb usb38-port1: unable to enumerate USB device [ 1037.373687][T21165] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1037.376005][T21165] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1037.380968][T21165] vhci_hcd vhci_hcd.0: Device attached [ 1037.716204][ T6019] usb 38-1: SetAddress Request (23) to port 0 [ 1037.718366][ T6019] usb 38-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1038.091267][T21173] siw: device registration error -23 [ 1038.112839][T21166] vhci_hcd: connection reset by peer [ 1038.122650][ T71] vhci_hcd vhci_hcd.0: stop threads [ 1038.124493][ T71] vhci_hcd vhci_hcd.0: release socket [ 1038.126440][ T71] vhci_hcd vhci_hcd.0: disconnect device [ 1038.271597][T21180] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1038.274517][T21180] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1038.280100][T21180] vhci_hcd vhci_hcd.0: Device attached [ 1038.614295][T19329] usb 46-1: SetAddress Request (18) to port 0 [ 1038.618919][T19329] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1038.945378][T21181] vhci_hcd: connection reset by peer [ 1038.956757][ T1173] vhci_hcd vhci_hcd.4: stop threads [ 1038.959314][ T1173] vhci_hcd vhci_hcd.4: release socket [ 1038.962071][ T1173] vhci_hcd vhci_hcd.4: disconnect device [ 1039.140367][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 1040.794061][T21190] 9pnet_virtio: no channels available for device syz [ 1041.798379][ T40] audit: type=1326 audit(1775707682.441:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21197 comm="syz.1.3878" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 1042.797265][ T40] audit: type=1326 audit(1775707683.377:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21203 comm="syz.0.3875" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1043.146093][ T6019] usb 38-1: device descriptor read/8, error -110 [ 1043.618448][T21222] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1043.620571][T21222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1043.623445][T21222] vhci_hcd vhci_hcd.0: Device attached [ 1043.798668][ T6019] usb usb38-port1: attempt power cycle [ 1043.967972][T20453] usb 40-1: SetAddress Request (18) to port 0 [ 1043.971605][T20453] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1044.089576][T19329] usb 46-1: device descriptor read/8, error -110 [ 1044.310408][T21223] vhci_hcd: connection reset by peer [ 1044.318188][ T61] vhci_hcd vhci_hcd.1: stop threads [ 1044.320694][ T61] vhci_hcd vhci_hcd.1: release socket [ 1044.322872][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 1044.396626][ T6019] usb usb38-port1: unable to enumerate USB device [ 1044.526477][T19329] usb usb46-port1: attempt power cycle [ 1044.654216][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1044.683910][T21229] syz_tun: entered allmulticast mode [ 1044.719066][T21228] syz_tun: left allmulticast mode [ 1045.207059][ T40] audit: type=1326 audit(1775707685.473:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21230 comm="syz.4.3883" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 1045.232473][T19329] usb usb46-port1: unable to enumerate USB device [ 1047.068342][T21238] siw: device registration error -23 [ 1048.315273][T21243] 9pnet_virtio: no channels available for device syz [ 1049.385335][T20453] usb 40-1: device descriptor read/8, error -110 [ 1050.711988][ T40] audit: type=1326 audit(1775707690.760:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21244 comm="syz.4.3887" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 1050.719335][T21255] 9pnet_virtio: no channels available for device syz [ 1051.506377][T20453] usb usb40-port1: attempt power cycle [ 1051.915404][T21260] 9pnet_virtio: no channels available for device syz [ 1051.918947][T21260] siw: device registration error -23 [ 1052.406307][T21268] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1052.408553][T21268] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1052.426201][T21268] vhci_hcd vhci_hcd.0: Device attached [ 1052.432856][T20453] usb usb40-port1: unable to enumerate USB device [ 1052.502518][T21272] syz_tun: entered allmulticast mode [ 1052.525564][T21271] syz_tun: left allmulticast mode [ 1052.585537][T21273] siw: device registration error -23 [ 1052.752003][T13912] usb 46-1: SetAddress Request (22) to port 0 [ 1052.760421][T13912] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1052.959438][T21277] 9pnet_virtio: no channels available for device syz [ 1053.024677][T21277] siw: device registration error -23 [ 1055.111377][T21269] vhci_hcd: connection reset by peer [ 1055.113557][T12457] vhci_hcd vhci_hcd.4: stop threads [ 1055.115337][T12457] vhci_hcd vhci_hcd.4: release socket [ 1055.117285][T12457] vhci_hcd vhci_hcd.4: disconnect device [ 1058.206832][T13912] usb 46-1: device descriptor read/8, error -110 [ 1058.635605][T13912] usb usb46-port1: attempt power cycle [ 1059.260089][T13912] usb usb46-port1: unable to enumerate USB device [ 1059.276399][ T40] audit: type=1326 audit(1775707698.789:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.5.3900" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1061.604185][T21330] siw: device registration error -23 [ 1063.853747][T21353] siw: device registration error -23 [ 1065.208349][T21358] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1065.211919][T21358] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1065.219953][T21358] vhci_hcd vhci_hcd.0: Device attached [ 1067.638063][T19329] usb 46-1: SetAddress Request (26) to port 0 [ 1067.640319][T19329] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1068.639233][T21359] vhci_hcd: connection reset by peer [ 1068.643884][ T1173] vhci_hcd vhci_hcd.4: stop threads [ 1068.646272][ T1173] vhci_hcd vhci_hcd.4: release socket [ 1068.650481][ T1173] vhci_hcd vhci_hcd.4: disconnect device [ 1069.232928][T21382] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1069.235318][T21382] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1069.238683][T21382] vhci_hcd vhci_hcd.0: Device attached [ 1069.280273][T21386] 9pnet_virtio: no channels available for device syz [ 1069.286793][T21386] siw: device registration error -23 [ 1070.952355][T21383] vhci_hcd: connection closed [ 1070.952821][ T101] vhci_hcd vhci_hcd.4: stop threads [ 1070.958658][ T101] vhci_hcd vhci_hcd.4: release socket [ 1070.961612][ T101] vhci_hcd vhci_hcd.4: disconnect device [ 1073.076554][T19329] usb 46-1: device descriptor read/8, error -110 [ 1073.761358][T19329] usb usb46-port1: attempt power cycle [ 1073.964900][T21415] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1073.967571][T21415] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1073.991800][T21415] vhci_hcd vhci_hcd.0: Device attached [ 1074.424026][ T6019] usb 38-1: SetAddress Request (27) to port 0 [ 1074.426400][ T6019] usb 38-1: new SuperSpeed USB device number 27 using vhci_hcd [ 1074.585458][T19329] usb usb46-port1: unable to enumerate USB device [ 1075.791255][T21416] vhci_hcd: connection reset by peer [ 1075.793939][T12802] vhci_hcd vhci_hcd.0: stop threads [ 1075.796277][T12802] vhci_hcd vhci_hcd.0: release socket [ 1075.798645][T12802] vhci_hcd vhci_hcd.0: disconnect device [ 1076.517315][ T40] audit: type=1326 audit(1775707714.764:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21428 comm="syz.5.3925" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1080.834452][ T6019] usb 38-1: device descriptor read/8, error -110 [ 1081.631444][T21442] 9pnet_virtio: no channels available for device syz [ 1081.887505][T21451] 9pnet_virtio: no channels available for device syz [ 1081.891886][T21442] siw: device registration error -23 [ 1082.171869][T21451] siw: device registration error -23 [ 1082.194680][T21445] 9pnet_virtio: no channels available for device syz [ 1082.617190][ T6019] usb usb38-port1: attempt power cycle [ 1083.064782][T21468] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1083.067542][T21468] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1083.079302][T21468] vhci_hcd vhci_hcd.0: Device attached [ 1083.299319][ T6019] usb usb38-port1: unable to enumerate USB device [ 1083.527490][T20453] usb 40-1: SetAddress Request (22) to port 0 [ 1083.529754][T20453] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1085.526507][T21469] vhci_hcd: connection reset by peer [ 1085.529190][ T101] vhci_hcd vhci_hcd.1: stop threads [ 1085.530908][ T101] vhci_hcd vhci_hcd.1: release socket [ 1085.532851][ T101] vhci_hcd vhci_hcd.1: disconnect device [ 1086.489411][T21499] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1086.492255][T21499] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1086.496818][T21499] vhci_hcd vhci_hcd.0: Device attached [ 1086.787649][T19329] usb 38-1: SetAddress Request (31) to port 0 [ 1086.800156][T19329] usb 38-1: new SuperSpeed USB device number 31 using vhci_hcd [ 1087.078935][T21501] vhci_hcd: connection reset by peer [ 1087.139145][T18653] vhci_hcd vhci_hcd.0: stop threads [ 1087.147976][T18653] vhci_hcd vhci_hcd.0: release socket [ 1087.150766][T18653] vhci_hcd vhci_hcd.0: disconnect device [ 1087.387435][ T40] audit: type=1326 audit(1775707725.104:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21506 comm="syz.4.3939" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 1089.052012][T20453] usb 40-1: device descriptor read/8, error -110 [ 1089.596872][ T40] audit: type=1326 audit(1775707727.144:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21524 comm="syz.5.3943" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1089.610824][T20453] usb usb40-port1: attempt power cycle [ 1090.381699][T20453] usb usb40-port1: unable to enumerate USB device [ 1091.309681][T21540] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1091.312662][T21540] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1091.316674][T21540] vhci_hcd vhci_hcd.0: Device attached [ 1091.948654][T21541] vhci_hcd: connection closed [ 1091.950020][ T101] vhci_hcd vhci_hcd.0: stop threads [ 1091.964906][ T101] vhci_hcd vhci_hcd.0: release socket [ 1091.969261][ T101] vhci_hcd vhci_hcd.0: disconnect device [ 1092.214140][ T40] audit: type=1326 audit(1775707729.615:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.4.3947" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 1092.314400][T19329] usb 38-1: device descriptor read/8, error -110 [ 1093.884964][T21557] siw: device registration error -23 [ 1094.831492][T21561] 9pnet_virtio: no channels available for device syz [ 1094.890955][T19329] usb usb38-port1: attempt power cycle [ 1095.738074][T19329] usb usb38-port1: unable to enumerate USB device [ 1095.869984][T21570] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1095.872274][T21570] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1095.875865][T21570] vhci_hcd vhci_hcd.0: Device attached [ 1096.489615][T19329] usb 38-1: SetAddress Request (35) to port 0 [ 1096.492039][T19329] usb 38-1: new SuperSpeed USB device number 35 using vhci_hcd [ 1096.618535][T21581] 9pnet_virtio: no channels available for device syz [ 1096.626483][T21581] siw: device registration error -23 [ 1098.080760][T21588] siw: device registration error -23 [ 1098.186106][T21571] vhci_hcd: connection reset by peer [ 1098.189801][ T101] vhci_hcd vhci_hcd.0: stop threads [ 1098.191844][ T101] vhci_hcd vhci_hcd.0: release socket [ 1098.193802][ T101] vhci_hcd vhci_hcd.0: disconnect device [ 1099.611902][T21592] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1099.614178][T21592] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1099.616825][T21592] vhci_hcd vhci_hcd.0: Device attached [ 1099.882567][T21595] vhci_hcd: connection closed [ 1099.882751][ T101] vhci_hcd vhci_hcd.4: stop threads [ 1099.886999][ T101] vhci_hcd vhci_hcd.4: release socket [ 1099.898289][ T101] vhci_hcd vhci_hcd.4: disconnect device [ 1099.922406][ T6019] usb 46-1: enqueue for inactive port 0 [ 1100.530959][ T6019] usb usb46-port1: attempt power cycle [ 1101.160134][ T6019] usb usb46-port1: unable to enumerate USB device [ 1102.717160][T21625] siw: device registration error -23 [ 1103.083012][T19329] usb 38-1: device descriptor read/8, error -110 [ 1103.503941][T19329] usb usb38-port1: attempt power cycle [ 1104.109244][T19329] usb usb38-port1: unable to enumerate USB device [ 1104.471907][T21646] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1104.474177][T21646] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1104.477194][T21646] vhci_hcd vhci_hcd.0: Device attached [ 1104.793752][ T860] usb 38-1: SetAddress Request (39) to port 0 [ 1104.796577][ T860] usb 38-1: new SuperSpeed USB device number 39 using vhci_hcd [ 1104.797088][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 1105.286768][T21657] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1105.289110][T21657] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1105.291866][T21657] vhci_hcd vhci_hcd.0: Device attached [ 1105.594162][T19329] usb 40-1: SetAddress Request (26) to port 0 [ 1105.596384][T19329] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1105.616662][T21647] vhci_hcd: connection reset by peer [ 1105.619416][T12457] vhci_hcd vhci_hcd.0: stop threads [ 1105.621722][T12457] vhci_hcd vhci_hcd.0: release socket [ 1105.627582][T12457] vhci_hcd vhci_hcd.0: disconnect device [ 1105.756792][T21658] vhci_hcd: connection reset by peer [ 1105.759811][ T1173] vhci_hcd vhci_hcd.1: stop threads [ 1105.763970][ T1173] vhci_hcd vhci_hcd.1: release socket [ 1105.770403][ T1173] vhci_hcd vhci_hcd.1: disconnect device [ 1105.930556][ T40] audit: type=1326 audit(1775707742.454:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21660 comm="syz.5.3971" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1106.754567][T21680] siw: device registration error -23 [ 1110.593331][ T860] usb 38-1: device descriptor read/8, error -110 [ 1111.108546][ T860] usb usb38-port1: attempt power cycle [ 1111.110313][T19329] usb 40-1: device descriptor read/8, error -110 [ 1111.539191][T21706] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1111.541328][T21706] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1111.544414][T21706] vhci_hcd vhci_hcd.0: Device attached [ 1111.607849][T19329] usb usb40-port1: attempt power cycle [ 1112.128547][T20453] usb 48-1: SetAddress Request (26) to port 0 [ 1112.131003][T20453] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1112.172412][ T860] usb usb38-port1: unable to enumerate USB device [ 1112.447179][T21707] vhci_hcd: connection reset by peer [ 1112.449315][T12802] vhci_hcd vhci_hcd.5: stop threads [ 1112.451633][T12802] vhci_hcd vhci_hcd.5: release socket [ 1112.457779][T12802] vhci_hcd vhci_hcd.5: disconnect device [ 1112.465865][T19329] usb usb40-port1: unable to enumerate USB device [ 1113.414127][T21723] 9pnet_virtio: no channels available for device syz [ 1115.322473][T21733] siw: device registration error -23 [ 1115.948843][ T40] audit: type=1326 audit(1775707751.821:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21731 comm="syz.0.3985" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1117.520683][T20453] usb 48-1: device descriptor read/8, error -110 [ 1117.958776][T20453] usb usb48-port1: attempt power cycle [ 1118.641008][T21755] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1118.643435][T21755] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1118.652421][T21755] vhci_hcd vhci_hcd.0: Device attached [ 1118.952056][T13912] usb 38-1: SetAddress Request (43) to port 0 [ 1121.001744][T21766] 9pnet_virtio: no channels available for device syz [ 1121.026269][T13912] usb 38-1: new SuperSpeed USB device number 43 using vhci_hcd [ 1121.051172][T20453] usb usb48-port1: unable to enumerate USB device [ 1121.570623][T21763] 9pnet_virtio: no channels available for device syz [ 1121.901821][T21756] vhci_hcd: connection reset by peer [ 1121.904513][ T101] vhci_hcd vhci_hcd.0: stop threads [ 1121.906835][ T101] vhci_hcd vhci_hcd.0: release socket [ 1121.909702][ T101] vhci_hcd vhci_hcd.0: disconnect device [ 1122.114753][T21777] siw: device registration error -23 [ 1122.670489][T21782] syz_tun: entered allmulticast mode [ 1122.693037][T21781] syz_tun: left allmulticast mode [ 1123.335279][T21786] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1123.337665][T21786] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1123.340560][T21786] vhci_hcd vhci_hcd.0: Device attached [ 1123.621352][T21792] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1123.623530][T21792] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1123.632922][T21792] vhci_hcd vhci_hcd.0: Device attached [ 1123.922415][T19329] usb 46-1: SetAddress Request (34) to port 0 [ 1123.924601][T19329] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1123.928170][T21790] vhci_hcd: connection closed [ 1123.928308][ T101] vhci_hcd vhci_hcd.0: stop threads [ 1123.934160][ T101] vhci_hcd vhci_hcd.0: release socket [ 1123.935988][ T101] vhci_hcd vhci_hcd.0: disconnect device [ 1124.167399][T21793] vhci_hcd: connection reset by peer [ 1124.170142][ T61] vhci_hcd vhci_hcd.4: stop threads [ 1124.172008][ T61] vhci_hcd vhci_hcd.4: release socket [ 1124.173933][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 1124.416010][ T40] audit: type=1326 audit(1775707759.757:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21795 comm="syz.1.3999" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 1125.139084][T21808] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1125.142069][T21808] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1125.157404][T21808] vhci_hcd vhci_hcd.0: Device attached [ 1125.697357][T21809] vhci_hcd: connection closed [ 1125.697659][ T61] vhci_hcd vhci_hcd.0: stop threads [ 1125.701893][ T61] vhci_hcd vhci_hcd.0: release socket [ 1125.713211][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 1125.800097][T21820] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1125.803146][T21820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1125.810176][T21820] vhci_hcd vhci_hcd.0: Device attached [ 1126.342338][T21821] vhci_hcd: connection closed [ 1126.342688][ T101] vhci_hcd vhci_hcd.4: stop threads [ 1126.349417][ T101] vhci_hcd vhci_hcd.4: release socket [ 1126.352349][ T101] vhci_hcd vhci_hcd.4: disconnect device [ 1126.410671][T13912] usb 38-1: device descriptor read/8, error -110 [ 1126.440454][T21860] syzkaller0: mtu greater than device maximum [ 1126.529171][T21867] syzkaller0: entered promiscuous mode [ 1126.531839][T21867] syzkaller0: entered allmulticast mode [ 1126.558361][T21869] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4024'. [ 1126.564661][T21869] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4024'. [ 1126.828536][T13912] usb usb38-port1: attempt power cycle [ 1126.834086][T21893] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4035'. [ 1126.978624][T21908] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4043'. [ 1126.983891][T21908] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1127.228597][T21935] syzkaller0: entered promiscuous mode [ 1127.230480][T21935] syzkaller0: entered allmulticast mode [ 1127.435916][T21945] netlink: 'syz.4.4061': attribute type 10 has an invalid length. [ 1127.438888][T13912] usb usb38-port1: unable to enumerate USB device [ 1129.038652][T21960] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4067'. [ 1129.042714][T21960] 0ªî{: renamed from gretap0 (while UP) [ 1129.046228][T21960] 0ªî{: entered allmulticast mode [ 1129.050228][T21960] A link change request failed with some changes committed already. Interface 30ªî{ may have been left with an inconsistent configuration, please check. [ 1129.274358][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1129.285159][T13912] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1129.333882][T19329] usb 46-1: device descriptor read/8, error -110 [ 1129.434555][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1129.440743][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1129.447948][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.452598][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1129.456859][T13912] usb 5-1: Using ep0 maxpacket: 32 [ 1129.460106][ T10] usb 9-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1129.461183][T13912] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1129.463151][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.463165][ T10] usb 9-1: Product: syz [ 1129.463173][ T10] usb 9-1: Manufacturer: syz [ 1129.463181][ T10] usb 9-1: SerialNumber: syz [ 1129.477225][T13912] usb 5-1: config 0 has no interface number 0 [ 1129.479288][T13912] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1129.482931][T13912] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1129.486529][T13912] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1129.491094][T13912] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1129.496293][T13912] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1129.500064][T13912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.503542][T13912] usb 5-1: Product: syz [ 1129.505577][T13912] usb 5-1: Manufacturer: syz [ 1129.507788][T13912] usb 5-1: SerialNumber: syz [ 1129.525892][T13912] usb 5-1: config 0 descriptor?? [ 1129.529330][T21954] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1129.694480][ T10] usb 9-1: 0:1 : does not exist [ 1129.733977][ T10] usb 9-1: USB disconnect, device number 2 [ 1129.757241][T19329] usb usb46-port1: attempt power cycle [ 1129.814569][T21286] udevd[21286]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1129.830282][ T6250] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1129.833916][ T5307] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1130.000931][ T5307] usb 6-1: Using ep0 maxpacket: 32 [ 1130.004787][ T6250] usb 10-1: config 0 has no interfaces? [ 1130.006823][ T6250] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1130.010084][ T6250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.013405][ T5307] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1130.017241][ T5307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1130.021093][ T5307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1130.026310][ T5307] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1130.029991][ T6250] usb 10-1: config 0 descriptor?? [ 1130.031902][ T5307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.039435][ T5307] usb 6-1: config 0 descriptor?? [ 1130.042066][T21975] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1130.045778][ T5307] hub 6-1:0.0: USB hub found [ 1130.184451][T13912] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 1130.243685][T13912] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 1130.254620][ T10] usb 10-1: USB disconnect, device number 2 [ 1130.262799][ T5307] hub 6-1:0.0: 1 port detected [ 1130.354338][T19329] usb usb46-port1: unable to enumerate USB device [ 1130.417149][T13580] usb 5-1: USB disconnect, device number 37 [ 1130.590555][T13580] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1131.138581][T21996] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1131.386239][ T5307] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 1131.388281][ T5307] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 1131.394901][ T5307] usbhid 6-1:0.0: can't add hid device: -32 [ 1131.397172][ T5307] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1131.405294][ T40] audit: type=1326 audit(1775707766.289:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21997 comm="syz.5.4079" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1131.436856][ T5307] usb 6-1: USB disconnect, device number 47 [ 1131.563584][T13737] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1131.722238][T13737] usb 5-1: Using ep0 maxpacket: 16 [ 1131.736532][T13737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.740090][T13737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.749787][T13737] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1131.754175][T13737] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1131.757408][T13737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.768781][T13737] usb 5-1: config 0 descriptor?? [ 1132.002626][T22006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.007927][T22006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.243064][T13737] belkin 0003:1020:0006.000F: item fetching failed at offset 5/9 [ 1132.246092][T13737] belkin 0003:1020:0006.000F: parse failed [ 1132.248050][T13737] belkin 0003:1020:0006.000F: probe with driver belkin failed with error -22 [ 1132.456566][T13580] usb 5-1: USB disconnect, device number 38 [ 1133.051412][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1133.228087][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1133.232147][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.239374][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.243251][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1133.248494][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1133.256393][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.309549][ T10] usb 10-1: config 0 descriptor?? [ 1133.756840][ T10] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 1133.759823][ T10] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 1133.763256][ T10] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 1133.766224][ T10] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 1133.769683][ T10] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 1133.789687][ T10] appleir 0003:05AC:8241.0010: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 1133.844942][T22020] 9pnet_virtio: no channels available for device syz [ 1134.035531][ T10] usb 10-1: USB disconnect, device number 3 [ 1134.471375][ T40] audit: type=1326 audit(1775707769.105:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22023 comm="syz.0.4087" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1134.662777][T22026] fido_id[22026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory [ 1135.978690][T22032] 9pnet_virtio: no channels available for device syz [ 1137.663060][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1137.706337][T22046] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1137.708722][T22046] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1137.712453][T22046] vhci_hcd vhci_hcd.0: Device attached [ 1137.846357][ T10] usb 9-1: config 0 has no interfaces? [ 1137.849977][ T10] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1137.856647][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.872395][ T10] usb 9-1: config 0 descriptor?? [ 1138.004968][T13912] usb 38-1: SetAddress Request (47) to port 0 [ 1138.007954][T13912] usb 38-1: new SuperSpeed USB device number 47 using vhci_hcd [ 1138.097337][ T10] usb 9-1: USB disconnect, device number 3 [ 1138.134625][T20453] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 1138.295840][T20453] usb 10-1: config 2 has an invalid interface number: 200 but max is 0 [ 1138.307997][T20453] usb 10-1: config 2 has no interface number 0 [ 1138.310616][T20453] usb 10-1: config 2 interface 200 has no altsetting 0 [ 1138.313315][T20453] usb 10-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=64.06 [ 1138.317817][T22047] vhci_hcd: connection reset by peer [ 1138.318750][T20453] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.324348][ T101] vhci_hcd vhci_hcd.0: stop threads [ 1138.326675][ T101] vhci_hcd vhci_hcd.0: release socket [ 1138.329292][ T101] vhci_hcd vhci_hcd.0: disconnect device [ 1138.559269][T20453] usb 10-1: string descriptor 0 read error: -71 [ 1138.562326][T20453] usb 10-1: bad CDC descriptors [ 1138.567661][T20453] cdc_acm 10-1:2.200: Zero length descriptor references [ 1138.570089][T20453] cdc_acm 10-1:2.200: probe with driver cdc_acm failed with error -22 [ 1138.578697][T20453] usb 10-1: USB disconnect, device number 4 [ 1138.614012][ T6250] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1138.635303][T19329] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1138.776275][ T6250] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1138.781167][ T6250] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1138.786142][ T6250] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1138.794371][ T6250] usb 9-1: string descriptor 0 read error: -22 [ 1138.795552][T19329] usb 6-1: Using ep0 maxpacket: 16 [ 1138.797376][ T6250] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1138.800041][T19329] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1138.802726][ T6250] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.806946][T19329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.820103][T19329] usb 6-1: config 0 descriptor?? [ 1138.827986][T19329] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1139.040779][ T6250] usb 9-1: Can't get UAC3 power state for id 10 [ 1139.138973][T19329] usb 6-1: Detected FT232B [ 1139.259512][T19329] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1139.286456][T19329] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1139.306302][T19329] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1139.558865][T19329] usb 6-1: USB disconnect, device number 48 [ 1139.603699][T19329] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1139.632262][T19329] ftdi_sio 6-1:0.0: device disconnected [ 1139.749259][ T6250] usb 9-1: 2:0: failed to get current value for ch 0 (-32) [ 1140.767834][ T6250] usb 9-1: 2:0: failed to get current value for ch 1 (-71) [ 1140.944164][ T6250] usb 9-1: USB disconnect, device number 4 [ 1141.926613][ T40] audit: type=1326 audit(1775707776.068:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.0.4103" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1142.414909][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1142.420979][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1142.431462][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1142.436878][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1143.436340][T13912] usb 38-1: device descriptor read/8, error -110 [ 1143.455481][T22103] siw: device registration error -23 [ 1143.484192][T22102] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1143.486323][T22102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1143.624892][T22102] vhci_hcd vhci_hcd.0: Device attached [ 1143.633066][T22109] hub 9-0:1.0: USB hub found [ 1143.635828][T22109] hub 9-0:1.0: 1 port detected [ 1143.673639][T22095] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1143.675850][T22095] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1143.689887][T22095] vhci_hcd vhci_hcd.0: Device attached [ 1143.871475][T13912] usb usb38-port1: attempt power cycle [ 1143.978265][ T39] usb 46-1: SetAddress Request (38) to port 0 [ 1143.978308][ T39] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1143.983157][T19329] usb 48-1: SetAddress Request (30) to port 0 [ 1143.983336][T19329] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1144.656477][T13912] usb usb38-port1: unable to enumerate USB device [ 1144.931914][T22110] vhci_hcd: connection reset by peer [ 1144.934838][T18653] vhci_hcd vhci_hcd.4: stop threads [ 1144.937406][T18653] vhci_hcd vhci_hcd.4: release socket [ 1144.939844][T18653] vhci_hcd vhci_hcd.4: disconnect device [ 1145.881697][T22134] 9pnet_virtio: no channels available for device syz [ 1145.889370][T22134] siw: device registration error -23 [ 1146.609030][T22106] vhci_hcd: connection reset by peer [ 1146.613501][ T61] vhci_hcd vhci_hcd.5: stop threads [ 1146.615519][ T61] vhci_hcd vhci_hcd.5: release socket [ 1146.628395][ T61] vhci_hcd vhci_hcd.5: disconnect device [ 1147.269553][ T6250] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1147.431456][ T6250] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1147.436072][ T6250] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1147.441840][ T6250] usb 9-1: string descriptor 0 read error: -22 [ 1147.444212][ T6250] usb 9-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1147.447882][ T6250] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.462560][T22143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1147.689392][ T6250] usbhid 9-1:1.0: can't add hid device: -71 [ 1147.691928][ T6250] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1147.704758][ T6250] usb 9-1: USB disconnect, device number 5 [ 1147.765901][T22154] usb usb5: usbfs: process 22154 (syz.0.4127) did not claim interface 0 before use [ 1147.905612][T22146] hub 9-0:1.0: USB hub found [ 1147.907804][T22146] hub 9-0:1.0: 1 port detected [ 1148.049436][ T40] audit: type=1326 audit(1775707781.860:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22151 comm="syz.1.4126" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 1148.049689][T13737] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1148.220676][T13737] usb 5-1: Using ep0 maxpacket: 16 [ 1148.225437][T13737] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1148.229744][T13737] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1148.234536][T13737] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1148.240159][T13737] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1148.245846][T13737] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1148.252371][T13737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.256006][T13737] usb 5-1: Product: syz [ 1148.258189][T13737] usb 5-1: Manufacturer: syz [ 1148.260509][T13737] usb 5-1: SerialNumber: syz [ 1148.511507][T13737] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1148.737238][ T5307] usb 5-1: USB disconnect, device number 39 [ 1148.963898][T22155] usblp0: removed [ 1149.407895][T19329] usb 48-1: device descriptor read/8, error -110 [ 1149.407926][ T39] usb 46-1: device descriptor read/8, error -110 [ 1149.840059][T19329] usb usb48-port1: attempt power cycle [ 1149.859678][ T39] usb usb46-port1: attempt power cycle [ 1149.877600][T22184] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1149.879959][T22184] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1149.883749][T22184] vhci_hcd vhci_hcd.0: Device attached [ 1150.026644][ T39] usb 46-1: SetAddress Request (40) to port 0 [ 1150.029671][ T39] usb 46-1: new SuperSpeed USB device number 40 using vhci_hcd [ 1150.402286][T22186] vhci_hcd: connection reset by peer [ 1150.404931][T18653] vhci_hcd vhci_hcd.4: stop threads [ 1150.407450][T18653] vhci_hcd vhci_hcd.4: release socket [ 1150.409987][T18653] vhci_hcd vhci_hcd.4: disconnect device [ 1150.533064][ T40] audit: type=1326 audit(1775707784.181:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22201 comm="syz.5.4143" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1150.557293][T22209] siw: device registration error -23 [ 1150.651869][T19329] usb usb48-port1: unable to enumerate USB device [ 1152.552008][T22229] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1152.554071][T22229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1152.557620][T22229] vhci_hcd vhci_hcd.0: Device attached [ 1152.560330][ T40] audit: type=1326 audit(1775707786.081:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.4.4147" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 1152.892123][ T860] usb 48-1: SetAddress Request (34) to port 0 [ 1152.895393][ T860] usb 48-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1154.162038][T22232] vhci_hcd: connection reset by peer [ 1154.164450][ T61] vhci_hcd vhci_hcd.5: stop threads [ 1154.166592][ T61] vhci_hcd vhci_hcd.5: release socket [ 1154.176917][ T61] vhci_hcd vhci_hcd.5: disconnect device [ 1155.168923][ T6250] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1155.274672][T22238] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1155.277861][T22238] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1155.281218][T22238] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1155.338989][ T6250] usb 10-1: Using ep0 maxpacket: 32 [ 1155.342655][ T6250] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1155.345904][ T6250] usb 10-1: config 0 has no interface number 0 [ 1155.354580][ T6250] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1155.358438][ T6250] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.362313][ T6250] usb 10-1: Product: syz [ 1155.364155][ T6250] usb 10-1: Manufacturer: syz [ 1155.366163][ T6250] usb 10-1: SerialNumber: syz [ 1155.371744][ T6250] usb 10-1: config 0 descriptor?? [ 1155.487911][ T39] usb 46-1: device descriptor read/8, error -110 [ 1155.594068][T13737] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1155.815817][ T6250] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1155.821964][ T6250] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1157.328492][ T6250] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 1157.338205][ T6250] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1157.346338][ T6250] usb 10-1: USB disconnect, device number 5 [ 1157.568670][ T40] audit: type=1326 audit(1775707790.760:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22264 comm="syz.1.4163" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 1157.733746][ T39] usb usb46-port1: unable to enumerate USB device [ 1157.756643][T13737] usb 9-1: config 0 has an invalid interface number: 237 but max is 0 [ 1157.759766][T13737] usb 9-1: config 0 has no interface number 0 [ 1157.762025][T13737] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1157.766234][T13737] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1157.769532][T13737] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1157.773209][T13737] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1157.778736][T13737] usb 9-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1157.782108][T13737] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1157.785021][T13737] usb 9-1: Product: syz [ 1157.786502][T13737] usb 9-1: Manufacturer: syz [ 1157.788026][T13737] usb 9-1: SerialNumber: syz [ 1157.794106][T13737] usb 9-1: config 0 descriptor?? [ 1157.801847][T13737] xpad 9-1:0.237: probe with driver xpad failed with error -5 [ 1158.016008][ T6250] usb 9-1: USB disconnect, device number 6 [ 1158.298064][ T860] usb 48-1: device descriptor read/8, error -110 [ 1158.663587][T22284] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1158.666819][T22284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1158.671845][T22284] vhci_hcd vhci_hcd.0: Device attached [ 1158.805058][ T860] usb usb48-port1: attempt power cycle [ 1158.970886][T13912] usb 40-1: SetAddress Request (30) to port 0 [ 1158.973096][T13912] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1160.190142][ T860] usb usb48-port1: unable to enumerate USB device [ 1161.066653][ T40] audit: type=1326 audit(1775707793.539:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22304 comm="syz.5.4176" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1161.403063][T22285] vhci_hcd: connection reset by peer [ 1161.406662][T18653] vhci_hcd vhci_hcd.1: stop threads [ 1161.437798][T18653] vhci_hcd vhci_hcd.1: release socket [ 1161.445601][T18653] vhci_hcd vhci_hcd.1: disconnect device [ 1162.422821][T22335] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1162.425713][T22335] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1162.428848][T22335] vhci_hcd vhci_hcd.0: Device attached [ 1162.803590][T19329] usb 46-1: SetAddress Request (42) to port 0 [ 1162.807463][T19329] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1164.452848][T13912] usb 40-1: device descriptor read/8, error -110 [ 1164.528349][T22336] vhci_hcd: connection reset by peer [ 1164.538226][T15756] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1164.538270][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 1164.540431][ T1173] vhci_hcd vhci_hcd.4: stop threads [ 1164.540458][ T1173] vhci_hcd vhci_hcd.4: release socket [ 1164.540508][ T1173] vhci_hcd vhci_hcd.4: disconnect device [ 1164.580993][ T6250] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1164.742931][ T6250] usb 10-1: config 0 has no interfaces? [ 1164.745788][ T6250] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1164.750128][ T6250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.756154][ T6250] usb 10-1: config 0 descriptor?? [ 1164.946217][T13912] usb usb40-port1: attempt power cycle [ 1164.997377][T13737] usb 10-1: USB disconnect, device number 6 [ 1165.158140][ T40] audit: type=1326 audit(1775707797.853:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22358 comm="syz.0.4196" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1165.568543][T13912] usb usb40-port1: unable to enumerate USB device [ 1165.628198][T13737] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1166.110400][T13737] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1166.780155][T13737] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1166.783804][T13737] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1166.790038][T13737] usb 10-1: string descriptor 0 read error: -22 [ 1166.792546][T13737] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1166.795924][T13737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.037309][T13737] usb 10-1: Can't get UAC3 power state for id 10 [ 1168.214530][T19329] usb 46-1: device descriptor read/8, error -110 [ 1168.695870][T13737] usb 10-1: 2:0: failed to get current value for ch 0 (-71) [ 1168.794789][T19329] usb usb46-port1: attempt power cycle [ 1168.891862][T22380] siw: device registration error -23 [ 1169.448927][T19329] usb usb46-port1: unable to enumerate USB device [ 1169.784369][T22394] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1169.786493][T22394] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1169.789553][T22394] vhci_hcd vhci_hcd.0: Device attached [ 1169.900996][T13737] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1169.970324][T13737] usb 10-1: USB disconnect, device number 7 [ 1170.402989][T22395] vhci_hcd: connection closed [ 1170.403271][ T61] vhci_hcd vhci_hcd.1: stop threads [ 1170.407580][ T61] vhci_hcd vhci_hcd.1: release socket [ 1170.409364][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 1170.441875][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 1170.448630][T19329] usb 40-1: enqueue for inactive port 0 [ 1170.928511][T13737] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1171.110129][T13737] usb 9-1: Using ep0 maxpacket: 8 [ 1171.248822][T19329] usb usb40-port1: attempt power cycle [ 1171.369546][T13737] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.374972][T13737] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1171.386010][T13737] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1171.390736][T13737] usb 9-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 1171.394677][T13737] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.401996][T13737] usb 9-1: config 0 descriptor?? [ 1171.847023][T22405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.855957][T22405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.869971][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x1 [ 1171.873397][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x4 [ 1171.876458][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x0 [ 1171.880229][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x0 [ 1171.886604][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x0 [ 1171.889119][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x0 [ 1171.891824][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x0 [ 1171.894178][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x0 [ 1171.896864][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x0 [ 1171.899699][T13737] wacom 0003:056A:00F8.0011: unknown main item tag 0x0 [ 1171.902907][T13737] wacom 0003:056A:00F8.0011: item fetching failed at offset 40/41 [ 1171.905729][T13737] wacom 0003:056A:00F8.0011: parse failed [ 1171.907625][T13737] wacom 0003:056A:00F8.0011: probe with driver wacom failed with error -22 [ 1172.029996][T19329] usb usb40-port1: unable to enumerate USB device [ 1172.076402][T13737] usb 9-1: USB disconnect, device number 7 [ 1174.011713][T22429] 9pnet_virtio: no channels available for device syz [ 1174.679392][ T8132] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1174.839614][ T8132] usb 10-1: Using ep0 maxpacket: 16 [ 1174.845941][ T8132] usb 10-1: New USB device found, idVendor=0582, idProduct=0113, bcdDevice= 0.40 [ 1174.849224][ T8132] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.852334][ T8132] usb 10-1: Product: syz [ 1174.853803][ T8132] usb 10-1: Manufacturer: syz [ 1174.855560][ T8132] usb 10-1: SerialNumber: syz [ 1175.411831][T22445] kernel profiling enabled (shift: 0) [ 1176.108837][ T8132] usb 10-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1176.110966][ T8132] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1176.113536][ T8132] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1176.119526][ T8132] usb 10-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1176.121932][ T8132] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1176.124470][ T8132] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1176.130807][ T8132] usb 10-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1176.133067][ T8132] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1176.158515][ T8132] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1176.222498][T22071] udevd[22071]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1176.634962][ T8132] usb 10-1: USB disconnect, device number 8 [ 1178.879393][T19329] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1179.130836][T22467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1179.216144][T19329] usb 9-1: config index 0 descriptor too short (expected 24929, got 18) [ 1179.219522][T19329] usb 9-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 1179.223659][T19329] usb 9-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 1179.227701][T19329] usb 9-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 1179.232126][T19329] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1179.235904][T19329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.685670][T19329] usb 9-1: string descriptor 0 read error: -71 [ 1179.688784][T19329] usb 9-1: USB disconnect, device number 8 [ 1180.684948][ T6250] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1180.791853][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1180.855826][ T6250] usb 5-1: Using ep0 maxpacket: 32 [ 1180.859144][ T6250] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.865044][ T6250] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1180.868636][ T6250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.871520][ T6250] usb 5-1: Product: syz [ 1180.873416][ T6250] usb 5-1: Manufacturer: syz [ 1180.875558][ T6250] usb 5-1: SerialNumber: syz [ 1180.890481][ T6250] usb 5-1: config 0 descriptor?? [ 1180.896720][ T6250] usb 5-1: bad CDC descriptors [ 1180.900846][ T6250] usb 5-1: unsupported MDLM descriptors [ 1180.977807][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1180.985119][ T10] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1180.989603][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.993451][ T10] usb 6-1: Product: syz [ 1180.995659][ T10] usb 6-1: Manufacturer: syz [ 1180.998036][ T10] usb 6-1: SerialNumber: syz [ 1181.114841][ T6250] usb 5-1: USB disconnect, device number 40 [ 1181.881023][T22495] IPv6: addrconf: prefix option has invalid lifetime [ 1182.020608][ T40] audit: type=1326 audit(1775707813.649:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22489 comm="syz.0.4230" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1183.109701][T22505] siw: device registration error -23 [ 1183.538749][ T10] usb 6-1: current rate 516674 is different from the runtime rate 48000 [ 1183.574395][ T10] usb 6-1: USB disconnect, device number 49 [ 1183.609571][T21957] udevd[21957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1184.281058][T22517] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1184.283208][T22517] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1184.371700][T22517] vhci_hcd vhci_hcd.0: Device attached [ 1184.873901][T19329] usb 46-1: SetAddress Request (46) to port 0 [ 1184.876060][T19329] usb 46-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1185.136200][T22518] vhci_hcd: connection reset by peer [ 1185.139870][T12883] vhci_hcd vhci_hcd.4: stop threads [ 1185.142620][T12883] vhci_hcd vhci_hcd.4: release socket [ 1185.262283][T12883] vhci_hcd vhci_hcd.4: disconnect device [ 1185.549825][T22538] binder: 22536:22538 ioctl c0306201 0 returned -14 [ 1185.552959][T22537] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1185.555899][T22537] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1185.579525][ T40] audit: type=1326 audit(1775707816.990:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.5.4238" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1185.687747][T22537] vhci_hcd vhci_hcd.0: Device attached [ 1185.931750][ T39] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1185.995852][T13912] usb 40-1: SetAddress Request (38) to port 0 [ 1185.998869][T13912] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1186.115315][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1186.121111][ T39] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1186.134699][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.137262][ T39] usb 5-1: Product: syz [ 1186.138627][ T39] usb 5-1: Manufacturer: syz [ 1186.140173][ T39] usb 5-1: SerialNumber: syz [ 1186.359957][T22539] vhci_hcd: connection reset by peer [ 1186.377898][T18653] vhci_hcd vhci_hcd.1: stop threads [ 1186.380363][T18653] vhci_hcd vhci_hcd.1: release socket [ 1186.383185][T18653] vhci_hcd vhci_hcd.1: disconnect device [ 1187.503873][ T39] usb 5-1: current rate 516674 is different from the runtime rate 48000 [ 1187.730609][ T6250] usb 5-1: USB disconnect, device number 41 [ 1187.851505][T21978] udevd[21978]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1188.339147][T22580] netlink: 'syz.0.4257': attribute type 4 has an invalid length. [ 1188.346458][T22580] netlink: 'syz.0.4257': attribute type 4 has an invalid length. [ 1188.505161][T22582] fuse: root generation should be zero [ 1190.384387][T19329] usb 46-1: device descriptor read/8, error -110 [ 1190.849881][T19329] usb usb46-port1: attempt power cycle [ 1191.314679][T22610] siw: device registration error -23 [ 1192.249479][T13912] usb 40-1: device descriptor read/8, error -110 [ 1193.224610][T22617] 9pnet_virtio: no channels available for device syz [ 1193.340154][T22618] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1193.343133][T22618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1193.358564][T22618] vhci_hcd vhci_hcd.0: Device attached [ 1193.562128][T19329] usb usb46-port1: unable to enumerate USB device [ 1193.843647][T13912] usb usb40-port1: attempt power cycle [ 1193.914194][T20453] usb 48-1: SetAddress Request (38) to port 0 [ 1193.916338][T20453] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1193.956241][T22626] 9pnet_virtio: no channels available for device syz [ 1193.961055][T22626] siw: device registration error -23 [ 1194.078262][T22619] vhci_hcd: connection reset by peer [ 1194.082505][ T101] vhci_hcd vhci_hcd.5: stop threads [ 1194.084980][ T101] vhci_hcd vhci_hcd.5: release socket [ 1194.104678][ T101] vhci_hcd vhci_hcd.5: disconnect device [ 1194.459936][T13912] usb usb40-port1: unable to enumerate USB device [ 1194.619505][T13737] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1194.782150][T13737] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.785826][T13737] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.791158][T13737] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.794610][T13737] usb 9-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1194.797400][T13737] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.807033][T13737] usb 9-1: config 0 descriptor?? [ 1195.258881][T13737] hid-rmi 0003:0461:4E72.0012: hidraw1: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 1195.466329][T13737] usb 9-1: USB disconnect, device number 9 [ 1196.169201][T22650] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1197.105974][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4289'. [ 1197.136159][T22672] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4289'. [ 1197.158225][T22672] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4289'. [ 1197.270424][T22676] tipc: Started in network mode [ 1197.280371][T22676] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1197.289882][T22676] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 1197.293845][T22676] tipc: Enabled bearer , priority 10 [ 1197.770927][T22681] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1198.455054][ T860] tipc: Node number set to 1 [ 1198.466504][T22688] __kmem_cache_create_args(9p-fcall-cache-167) failed with error -12 [ 1198.469110][T22688] CPU: 1 UID: 0 PID: 22688 Comm: syz.1.4292 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.469134][T22688] Tainted: [L]=SOFTLOCKUP [ 1198.469139][T22688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1198.469149][T22688] Call Trace: [ 1198.469156][T22688] [ 1198.469163][T22688] dump_stack_lvl+0x100/0x190 [ 1198.469192][T22688] __kmem_cache_create_args.cold+0x33/0x6e [ 1198.469213][T22688] p9_client_create+0xa5d/0xd40 [ 1198.469235][T22688] ? __pfx_p9_client_create+0x10/0x10 [ 1198.469251][T22688] ? lockdep_init_map_type+0x5c/0x250 [ 1198.469271][T22688] ? __raw_spin_lock_init+0x3a/0x110 [ 1198.469293][T22688] v9fs_session_init+0x40/0xce0 [ 1198.469318][T22688] ? kasan_save_track+0x14/0x30 [ 1198.469333][T22688] v9fs_get_tree+0xb8/0xb50 [ 1198.469343][T22688] ? rcu_is_watching+0x12/0xc0 [ 1198.469363][T22688] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1198.469375][T22688] ? bpf_lsm_capable+0x9/0x10 [ 1198.469389][T22688] ? security_capable+0x80/0x260 [ 1198.469405][T22688] vfs_get_tree+0x92/0x320 [ 1198.469422][T22688] path_mount+0x7d0/0x23d0 [ 1198.469441][T22688] ? __pfx_path_mount+0x10/0x10 [ 1198.469454][T22688] ? lockdep_hardirqs_on+0x78/0x100 [ 1198.469470][T22688] ? putname+0xb1/0x110 [ 1198.469482][T22688] ? kmem_cache_free+0x124/0x6a0 [ 1198.469504][T22688] ? __ia32_sys_mount+0x292/0x310 [ 1198.469518][T22688] __ia32_sys_mount+0x292/0x310 [ 1198.469532][T22688] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1198.469550][T22688] __do_fast_syscall_32+0xe3/0x8c0 [ 1198.469569][T22688] do_fast_syscall_32+0x32/0x70 [ 1198.469582][T22688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1198.469598][T22688] RIP: 0023:0xf7ff2f6c [ 1198.469610][T22688] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1198.469624][T22688] RSP: 002b:00000000f547450c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1198.469639][T22688] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000480 [ 1198.469647][T22688] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1198.469655][T22688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1198.469661][T22688] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1198.469668][T22688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1198.469681][T22688] [ 1199.224218][T22698] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1199.226868][T22698] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1199.258699][T22698] vhci_hcd vhci_hcd.0: Device attached [ 1199.340902][T20453] usb 48-1: device descriptor read/8, error -110 [ 1199.567131][T13912] usb 46-1: SetAddress Request (50) to port 0 [ 1199.569677][T13912] usb 46-1: new SuperSpeed USB device number 50 using vhci_hcd [ 1199.848202][T20453] usb usb48-port1: attempt power cycle [ 1200.016220][ T40] audit: type=1326 audit(1775707830.503:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22700 comm="syz.1.4295" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2f6c code=0x0 [ 1200.304767][T22699] vhci_hcd: connection reset by peer [ 1200.308763][ T71] vhci_hcd vhci_hcd.4: stop threads [ 1200.312878][ T71] vhci_hcd vhci_hcd.4: release socket [ 1200.316328][ T71] vhci_hcd vhci_hcd.4: disconnect device [ 1200.444626][T20453] usb usb48-port1: unable to enumerate USB device [ 1200.496878][ T5307] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1200.545904][T22724] overlayfs: failed to resolve './file1': -2 [ 1200.551835][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4304'. [ 1200.659451][ T5307] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.667856][ T5307] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1200.671064][ T5307] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1200.677439][ T5307] usb 10-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1200.685133][ T5307] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.688585][ T5307] usb 10-1: Product: syz [ 1200.699890][ T5307] usb 10-1: Manufacturer: syz [ 1200.701510][ T5307] usb 10-1: SerialNumber: syz [ 1200.706855][ T5307] usb 10-1: config 0 descriptor?? [ 1200.713495][ T5307] uvcvideo 10-1:0.0: Found Unit with invalid ID 0 [ 1200.725798][T22730] syzkaller1: entered promiscuous mode [ 1200.727910][T22730] syzkaller1: entered allmulticast mode [ 1200.930124][ T5307] uvcvideo 10-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1200.940798][ T5307] uvcvideo 10-1:0.0: No valid video chain found. [ 1200.944649][ T5307] usb 10-1: USB disconnect, device number 9 [ 1201.298405][T20453] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1201.481639][T20453] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1201.484380][T20453] usb 5-1: config 0 has no interface number 0 [ 1201.486462][T20453] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1201.490276][T20453] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.494078][T20453] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1201.498819][T20453] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1201.502706][T20453] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1201.506092][T20453] usb 5-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 1201.508698][T20453] usb 5-1: Manufacturer: syz [ 1201.512824][T20453] usb 5-1: config 0 descriptor?? [ 1202.163226][T20453] uclogic 0003:145F:0212.0013: failed retrieving string descriptor #100: -71 [ 1202.167031][T20453] uclogic 0003:145F:0212.0013: failed retrieving pen parameters: -71 [ 1202.169732][T20453] uclogic 0003:145F:0212.0013: pen probing failed: -71 [ 1202.172236][T20453] uclogic 0003:145F:0212.0013: failed probing parameters: -71 [ 1202.174987][T20453] uclogic 0003:145F:0212.0013: probe with driver uclogic failed with error -71 [ 1202.184370][T20453] usb 5-1: USB disconnect, device number 42 [ 1202.249481][ T860] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1202.377529][T19329] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1202.420336][ T860] usb 9-1: Using ep0 maxpacket: 16 [ 1202.424631][ T860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.428224][ T860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.431433][ T860] usb 9-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1202.434346][ T860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.438827][ T860] usb 9-1: config 0 descriptor?? [ 1202.541530][T19329] usb 10-1: not running at top speed; connect to a high speed hub [ 1202.547033][T19329] usb 10-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1202.551392][T19329] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1202.556178][T19329] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1202.559589][T19329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.562311][T19329] usb 10-1: Product: syz [ 1202.563783][T19329] usb 10-1: Manufacturer: syz [ 1202.565358][T19329] usb 10-1: SerialNumber: syz [ 1202.796151][T19329] usb 10-1: USB disconnect, device number 10 [ 1202.884858][ T860] apple 0003:05AC:024B.0014: unknown global tag 0xe [ 1202.890041][ T860] apple 0003:05AC:024B.0014: item 0 1 1 14 parsing failed [ 1202.892971][ T860] apple 0003:05AC:024B.0014: parse failed [ 1202.894937][ T860] apple 0003:05AC:024B.0014: probe with driver apple failed with error -22 [ 1203.104940][T21010] usb 9-1: USB disconnect, device number 10 [ 1204.975715][T13912] usb 46-1: device descriptor read/8, error -110 [ 1205.027161][T22968] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4421'. [ 1205.403653][T13912] usb usb46-port1: attempt power cycle [ 1206.023199][T13912] usb usb46-port1: unable to enumerate USB device [ 1208.493523][T23084] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1208.495889][T23084] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1208.499010][T23084] vhci_hcd vhci_hcd.0: Device attached [ 1208.532824][ T40] audit: type=1326 audit(1775707838.467:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23073 comm="syz.0.4469" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1210.973275][T19329] usb 48-1: SetAddress Request (42) to port 0 [ 1210.993027][T19329] usb 48-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1211.111876][T23085] vhci_hcd: connection closed [ 1211.387196][T12457] vhci_hcd vhci_hcd.5: stop threads [ 1211.391612][T12457] vhci_hcd vhci_hcd.5: release socket [ 1211.394248][T12457] vhci_hcd vhci_hcd.5: disconnect device [ 1212.167963][T23106] 9pnet_virtio: no channels available for device syz [ 1213.891971][T23119] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1213.894053][T23119] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1213.896606][T23119] vhci_hcd vhci_hcd.0: Device attached [ 1214.126558][T23127] vhci_hcd: connection closed [ 1214.137458][T12883] vhci_hcd vhci_hcd.0: stop threads [ 1214.142205][T12883] vhci_hcd vhci_hcd.0: release socket [ 1214.144904][T12883] vhci_hcd vhci_hcd.0: disconnect device [ 1215.648507][T23141] 9pnet_virtio: no channels available for device syz [ 1216.528233][T19329] usb 48-1: device descriptor read/8, error -110 [ 1216.913499][T23154] siw: device registration error -23 [ 1216.954279][T19329] usb usb48-port1: attempt power cycle [ 1217.178998][T23158] 9pnet_virtio: no channels available for device syz [ 1217.445464][T23160] 9pnet_virtio: no channels available for device syz [ 1218.634112][T23160] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1218.637307][T23160] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1218.640476][T23160] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1218.648561][T19329] usb usb48-port1: unable to enumerate USB device [ 1220.502520][T23183] 9pnet_virtio: no channels available for device syz [ 1221.613882][T23187] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1221.616087][T23187] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1221.619645][T23187] vhci_hcd vhci_hcd.0: Device attached [ 1221.901566][T13912] usb 46-1: SetAddress Request (54) to port 0 [ 1221.904439][T13912] usb 46-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1222.420754][T23188] vhci_hcd: connection reset by peer [ 1222.428386][T12883] vhci_hcd vhci_hcd.4: stop threads [ 1222.430014][T12883] vhci_hcd vhci_hcd.4: release socket [ 1222.433092][T12883] vhci_hcd vhci_hcd.4: disconnect device [ 1222.612843][T23199] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1222.615073][T23199] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1222.618316][T23199] vhci_hcd vhci_hcd.0: Device attached [ 1222.830721][ T40] audit: type=1326 audit(1775707851.793:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23196 comm="syz.0.4495" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 1222.960539][ T860] usb 48-1: SetAddress Request (46) to port 0 [ 1222.961291][ T860] usb 48-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1223.847622][T23200] vhci_hcd: connection reset by peer [ 1223.849724][T12457] vhci_hcd vhci_hcd.5: stop threads [ 1223.851490][T12457] vhci_hcd vhci_hcd.5: release socket [ 1223.853368][T12457] vhci_hcd vhci_hcd.5: disconnect device [ 1224.109942][T23212] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1224.112125][T23212] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1224.114898][T23212] vhci_hcd vhci_hcd.0: Device attached [ 1224.549997][T23191] ------------[ cut here ]------------ [ 1224.552160][T23191] inode->i_blocks [ 1224.552171][T23191] WARNING: mm/shmem.c:1430 at shmem_evict_inode+0x8e6/0xbd0, CPU#1: syz.5.4497/23191 [ 1224.556881][T23191] Modules linked in: [ 1224.558232][T23191] CPU: 1 UID: 0 PID: 23191 Comm: syz.5.4497 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.562468][T23191] Tainted: [L]=SOFTLOCKUP [ 1224.564077][T23191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1224.570635][T23191] RIP: 0010:shmem_evict_inode+0x8e6/0xbd0 [ 1224.572766][T23191] Code: fe e8 ce cc b9 ff 45 85 ff 75 ac e8 14 d2 b9 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 95 79 92 ff e9 e5 fd ff ff e8 fb d1 b9 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 ed d1 b9 ff 4c 89 e2 48 b8 00 00 00 00 [ 1224.579768][T23191] RSP: 0000:ffffc90003007948 EFLAGS: 00010293 [ 1224.582321][T23191] RAX: 0000000000000000 RBX: ffff888028a83bb8 RCX: ffffffff824e6ade [ 1224.585250][T23191] RDX: ffff888020daa4c0 RSI: ffffffff824e7185 RDI: ffff888020daa4c0 [ 1224.588014][T23191] RBP: ffffc90003007a70 R08: 0000000000000007 R09: 0000000000000000 [ 1224.590910][T23191] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 1224.593562][T23191] R13: 0000000000000000 R14: ffff888028a83be8 R15: 0000000000000000 [ 1224.596287][T23191] FS: 0000000000000000(0000) GS:ffff888097240000(0000) knlGS:0000000000000000 [ 1224.599026][T23191] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1224.601163][T23191] CR2: 00000000f736ead8 CR3: 0000000054d8e000 CR4: 0000000000352ef0 [ 1224.603668][T23191] Call Trace: [ 1224.605101][T23191] [ 1224.606236][T23191] ? inode_wait_for_writeback+0x171/0x390 [ 1224.608486][T23191] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1224.610320][T23191] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1224.612455][T23191] ? find_held_lock+0x2b/0x80 [ 1224.613919][T23191] ? evict+0x37e/0xad0 [ 1224.615271][T23191] ? evict+0x37e/0xad0 [ 1224.616647][T23191] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1224.618260][T23191] evict+0x3c2/0xad0 [ 1224.619523][T23191] ? find_held_lock+0x2b/0x80 [ 1224.621248][T23191] ? __pfx_evict+0x10/0x10 [ 1224.623162][T23191] ? iput.part.0+0x5fd/0xf50 [ 1224.624755][T23191] iput.part.0+0x605/0xf50 [ 1224.626391][T23191] ? __pfx_inode_just_drop+0x10/0x10 [ 1224.628189][T23191] iput+0x35/0x40 [ 1224.629524][T23191] dentry_unlink_inode+0x2a1/0x490 [ 1224.631216][T23191] __dentry_kill+0x1d0/0x600 [ 1224.632718][T23191] finish_dput+0x76/0x480 [ 1224.634093][T23191] dput.part.0+0x456/0x570 [ 1224.635715][T23191] dput+0x1f/0x30 [ 1224.637390][T23191] __fput+0x519/0xb40 [ 1224.639070][T23191] ? _raw_spin_unlock_irq+0x23/0x50 [ 1224.641263][T23191] task_work_run+0x150/0x240 [ 1224.643255][T23191] ? __pfx_task_work_run+0x10/0x10 [ 1224.645410][T23191] ? do_raw_spin_unlock+0x145/0x1e0 [ 1224.647866][T23191] do_exit+0x8b8/0x2b60 [ 1224.649796][T23191] ? preempt_schedule_thunk+0x16/0x30 [ 1224.652307][T23191] ? __pfx_do_exit+0x10/0x10 [ 1224.654366][T23191] ? preempt_schedule_thunk+0x16/0x30 [ 1224.656668][T23191] do_group_exit+0xd5/0x2a0 [ 1224.658778][T23191] __ia32_sys_exit_group+0x3e/0x50 [ 1224.660947][T23191] ia32_sys_call+0x19ea/0x19f0 [ 1224.663029][T23191] __do_fast_syscall_32+0xe3/0x8c0 [ 1224.665334][T23191] do_fast_syscall_32+0x32/0x70 [ 1224.667608][T23191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.670740][T23191] RIP: 0023:0xf7f87f6c [ 1224.672501][T23191] Code: Unable to access opcode bytes at 0xf7f87f42. [ 1224.675220][T23191] RSP: 002b:00000000ff80727c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 1224.678754][T23191] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1224.682152][T23191] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f71b6d99 [ 1224.685473][T23191] RBP: 00000000f7412ff4 R08: 0000000000000000 R09: 0000000000000000 [ 1224.688969][T23191] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1224.692447][T23191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.695326][T23191] [ 1224.696477][T23191] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1224.699137][T23191] CPU: 1 UID: 0 PID: 23191 Comm: syz.5.4497 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.703178][T23191] Tainted: [L]=SOFTLOCKUP [ 1224.704930][T23191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1224.709013][T23191] Call Trace: [ 1224.710110][T23191] [ 1224.711065][T23191] dump_stack_lvl+0x100/0x190 [ 1224.712596][T23191] vpanic+0x552/0x970 [ 1224.713854][T23191] ? __pfx_vpanic+0x10/0x10 [ 1224.715289][T23191] panic+0xd1/0xe0 [ 1224.716561][T23191] ? __pfx_panic+0x10/0x10 [ 1224.717976][T23191] ? check_panic_on_warn+0x1f/0x90 [ 1224.719589][T23191] check_panic_on_warn.cold+0x19/0x34 [ 1224.721234][T23191] ? shmem_evict_inode+0x8e6/0xbd0 [ 1224.722854][T23191] __warn.cold+0x191/0x348 [ 1224.724274][T23191] __report_bug+0x296/0x3d0 [ 1224.725774][T23191] ? shmem_evict_inode+0x8e6/0xbd0 [ 1224.727351][T23191] ? __pfx___report_bug+0x10/0x10 [ 1224.729039][T23191] ? find_held_lock+0x2b/0x80 [ 1224.730579][T23191] ? inode_set_ctime_current+0x9c/0x8a0 [ 1224.732343][T23191] ? timestamp_truncate+0x22e/0x2f0 [ 1224.733987][T23191] ? shmem_evict_inode+0x8e6/0xbd0 [ 1224.735607][T23191] report_bug+0xb2/0x220 [ 1224.736940][T23191] ? shmem_evict_inode+0x8e6/0xbd0 [ 1224.738551][T23191] handle_bug+0x16a/0x2a0 [ 1224.739943][T23191] exc_invalid_op+0x17/0x50 [ 1224.741445][T23191] asm_exc_invalid_op+0x1a/0x20 [ 1224.743095][T23191] RIP: 0010:shmem_evict_inode+0x8e6/0xbd0 [ 1224.745108][T23191] Code: fe e8 ce cc b9 ff 45 85 ff 75 ac e8 14 d2 b9 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 95 79 92 ff e9 e5 fd ff ff e8 fb d1 b9 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 ed d1 b9 ff 4c 89 e2 48 b8 00 00 00 00 [ 1224.751239][T23191] RSP: 0000:ffffc90003007948 EFLAGS: 00010293 [ 1224.753064][T23191] RAX: 0000000000000000 RBX: ffff888028a83bb8 RCX: ffffffff824e6ade [ 1224.755527][T23191] RDX: ffff888020daa4c0 RSI: ffffffff824e7185 RDI: ffff888020daa4c0 [ 1224.757999][T23191] RBP: ffffc90003007a70 R08: 0000000000000007 R09: 0000000000000000 [ 1224.760560][T23191] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 1224.763411][T23191] R13: 0000000000000000 R14: ffff888028a83be8 R15: 0000000000000000 [ 1224.766051][T23191] ? shmem_evict_inode+0x23e/0xbd0 [ 1224.767698][T23191] ? shmem_evict_inode+0x8e5/0xbd0 [ 1224.769261][T23191] ? shmem_evict_inode+0x8e5/0xbd0 [ 1224.770797][T23191] ? inode_wait_for_writeback+0x171/0x390 [ 1224.772623][T23191] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1224.774276][T23191] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1224.776159][T23191] ? find_held_lock+0x2b/0x80 [ 1224.777597][T23191] ? evict+0x37e/0xad0 [ 1224.778892][T23191] ? evict+0x37e/0xad0 [ 1224.780179][T23191] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1224.781878][T23191] evict+0x3c2/0xad0 [ 1224.783173][T23191] ? find_held_lock+0x2b/0x80 [ 1224.784673][T23191] ? __pfx_evict+0x10/0x10 [ 1224.786132][T23191] ? iput.part.0+0x5fd/0xf50 [ 1224.787710][T23191] iput.part.0+0x605/0xf50 [ 1224.789266][T23191] ? __pfx_inode_just_drop+0x10/0x10 [ 1224.791030][T23191] iput+0x35/0x40 [ 1224.792247][T23191] dentry_unlink_inode+0x2a1/0x490 [ 1224.793884][T23191] __dentry_kill+0x1d0/0x600 [ 1224.795383][T23191] finish_dput+0x76/0x480 [ 1224.796738][T23191] dput.part.0+0x456/0x570 [ 1224.798148][T23191] dput+0x1f/0x30 [ 1224.799343][T23191] __fput+0x519/0xb40 [ 1224.800612][T23191] ? _raw_spin_unlock_irq+0x23/0x50 [ 1224.802520][T23191] task_work_run+0x150/0x240 [ 1224.804347][T23191] ? __pfx_task_work_run+0x10/0x10 [ 1224.806328][T23191] ? do_raw_spin_unlock+0x145/0x1e0 [ 1224.808004][T23191] do_exit+0x8b8/0x2b60 [ 1224.809335][T23191] ? preempt_schedule_thunk+0x16/0x30 [ 1224.810975][T23191] ? __pfx_do_exit+0x10/0x10 [ 1224.812461][T23191] ? preempt_schedule_thunk+0x16/0x30 [ 1224.814160][T23191] do_group_exit+0xd5/0x2a0 [ 1224.815630][T23191] __ia32_sys_exit_group+0x3e/0x50 [ 1224.817256][T23191] ia32_sys_call+0x19ea/0x19f0 [ 1224.818743][T23191] __do_fast_syscall_32+0xe3/0x8c0 [ 1224.820403][T23191] do_fast_syscall_32+0x32/0x70 [ 1224.821993][T23191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.824326][T23191] RIP: 0023:0xf7f87f6c [ 1224.825844][T23191] Code: Unable to access opcode bytes at 0xf7f87f42. [ 1224.828172][T23191] RSP: 002b:00000000ff80727c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 1224.830756][T23191] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1224.833251][T23191] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f71b6d99 [ 1224.835708][T23191] RBP: 00000000f7412ff4 R08: 0000000000000000 R09: 0000000000000000 [ 1224.838163][T23191] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1224.840551][T23191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.843114][T23191] [ 1224.844976][T23191] Kernel Offset: disabled [ 1224.846486][T23191] Rebooting in 86400 seconds..