last executing test programs: 14m19.066147356s ago: executing program 1 (id=642): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) gettid() io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xb5b3d161c365bf64}]) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d58776ca66a8da3dffb678169e66bb6221e1cb01e9e15f0260cd9d963d62fcd0559084debe6709eee83910bc3c0d7d9665f37f6733b1a9f34ed3805df93d9821c33fca55a7b5dc24534d246f27f5412822842a15e99844354e93b2"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000240)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000000080)={0x0, 0x1, 0xfffffe9c, 0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, 0x0, 0x0) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x401) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x2) r7 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x27, 0x50000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 14m17.389209331s ago: executing program 1 (id=649): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat(0xffffffffffffffff, 0xffffffffffffffff, 0x420002, 0x1a6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_mark(r2, 0x20, 0x13, r2, &(0x7f0000000100)='./file0\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r4 = fanotify_init(0x2, 0x101000) fanotify_mark(r4, 0x1, 0x40000017, r3, 0x0) read(r4, &(0x7f0000000580)=""/190, 0xbe) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000007fffff5850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000240)=ANY=[@ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff17043a73dbc30800450000ec0000000000019078ac1e0001ac1414aa05009078e00000e0440000004000f0904f6e47608f500000002f0000ac1414aa00000000830300070300443400030a010106000000000000000000000000ac1414bb00000000ac1414bb000000000000000000000000ac1414bb000000000000"], 0x0) 14m17.194268804s ago: executing program 1 (id=650): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r0, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=t', 0x31) 14m17.076302158s ago: executing program 1 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 14m16.806913025s ago: executing program 1 (id=653): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='\\x01000000 -0', 0xd) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000054}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="7b9a26bd7000fbdbdf251100000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20000004) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 14m15.005973551s ago: executing program 1 (id=655): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400), 0x121302, 0x0) mmap$dsp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x12, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000200025a729bd7000fddbdf250a0000cdff00000102000100080018004e234e230800060000000000050015000200000014000100fc010000000000000000000000000000080007000500000014000100ff010000000000000000000000000001080017804e"], 0x94}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x1400037e) inotify_add_watch(r7, &(0x7f0000000300)='./file1\x00', 0xa0000006) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x1a6, 0x0, 0x0, 0x4, 0xf}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0xfffffffffffffe99, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x5e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) syz_emit_ethernet(0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000021001122334455000442420300010104010000c9b196fca5a302f3205d9b62a8af05669e6990e8f7ce661c7b418dbbb417975fba701b023297b42fb32a388af37035c2481357decb68905d752aea00a34925a49a18e1"], 0x0) 14m0.008022568s ago: executing program 32 (id=655): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400), 0x121302, 0x0) mmap$dsp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x12, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000200025a729bd7000fddbdf250a0000cdff00000102000100080018004e234e230800060000000000050015000200000014000100fc010000000000000000000000000000080007000500000014000100ff010000000000000000000000000001080017804e"], 0x94}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x1400037e) inotify_add_watch(r7, &(0x7f0000000300)='./file1\x00', 0xa0000006) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x1a6, 0x0, 0x0, 0x4, 0xf}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0xfffffffffffffe99, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x5e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) syz_emit_ethernet(0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000021001122334455000442420300010104010000c9b196fca5a302f3205d9b62a8af05669e6990e8f7ce661c7b418dbbb417975fba701b023297b42fb32a388af37035c2481357decb68905d752aea00a34925a49a18e1"], 0x0) 4.506153985s ago: executing program 3 (id=3545): socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1, 0x6, 0x0, 0x100, 0x4, 0xd40280}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={@remote, @dev={0xfe, 0x80, '\x00', 0x2b}, @private1, 0x1, 0x6, 0xfdfd, 0x100, 0x4, 0x86120186, r2}) 4.080061183s ago: executing program 3 (id=3548): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xbc, &(0x7f0000000780)=""/188, 0x41100, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) read$midi(r8, &(0x7f00000001c0)=""/70, 0xffffffd8) socket$nl_route(0x10, 0x3, 0x0) 3.789578338s ago: executing program 2 (id=3550): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3ff, 0xffffffffffffffa1}}]}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 3.439823525s ago: executing program 0 (id=3551): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x44, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "014803afb700000008000000c3"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44151}, 0x0) 3.380205233s ago: executing program 2 (id=3552): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113000, 0x20) lseek(r0, 0x3, 0x2) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="9204000000000000015601000009b768405e0483"], 0x0) 3.320205876s ago: executing program 0 (id=3553): socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5842) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x3c5, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2a, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xf000, 0x0, 0x309}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 3.063549048s ago: executing program 4 (id=3554): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x437}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) 3.05509227s ago: executing program 0 (id=3555): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000011, 0x32, 0xffffffffffffffff, 0x8000000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000003f80), 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/4088, 0xff8}], 0x1) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000080)=0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x8040) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f00000003c0)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000180)=0xd0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat(r8, &(0x7f0000000140)='./file0\x00', 0x0, 0xb) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x40000004) lseek(r8, 0x5, 0x1) bind$l2tp6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2801000010cb4a970be22a8f6ef58623359b00ff", @ANYRES32=r6, @ANYBLOB="151d0100100000003000128009000100766c616e0000000020000280060005008100000006000100020000000c0002001a0000001a000000d80018806400018014000500f205679596e575fecbe72fb6b5c15d070800010009000000080001000d0800000c00020062726964676530000c0002006272696467653000060002002e000000050006000300000009000200766c616e0000000008000100070000000c00018008000100c20000006400018014000500fce2f6093ec95d33ce122ee10fd8c31e14000400e840e9923b1758bd453c1a9fad974b52080001008100000008000100030e00000c0002006272696467653000080001001308000014000500dc5a1ba34af87ef89c8a64c5b191b65f"], 0x128}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2.689852464s ago: executing program 3 (id=3556): r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001840)={'dummy0\x00', &(0x7f0000001800)=@ethtool_ts_info}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000003c0)={'syz_tun\x00', {0x2, 0x4e21, @loopback}}) 2.689176221s ago: executing program 3 (id=3557): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 2.069217969s ago: executing program 0 (id=3558): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)="703a732f70202e2f66696c65303a301125", 0x11) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xfffffffa, @loopback, 0x788b}, 0x1c) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x82400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0xfffffffffffffffe]}}) 1.660290962s ago: executing program 2 (id=3559): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0x42792000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x88}, {0x0, 0x9}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x3865, 0x100, 0x3, 0x1d}, 0x0, 0x0, &(0x7f0000000000)) r3 = memfd_create(0x0, 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001", @ANYRES32=r4], 0x75) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "a81ef5037a313d882834a7e8543a38267bdcc88850c8d70b5b795116fd55e6a21c2eec400941ac9bb951f967a050f260b917f60c9304e1cba8fb5cd69d56a69f", 0x2a}, 0x48, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000c100"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0100000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000700), 0xb, r7}, 0x38) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, r5, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB="12010102000000406d04900940000102030109026e000301046008080b0001012430010904000000010130000a2401f50a0005000000090401000001023000090401010101023000090501090002b905030a2525000200000106000904020000010230000904020101010230000905820920000602d40a252507000000010500fb03657e95e16da9a08cff573b87b4ab24beebfb5b5c982e88a743280b658265f10ea35b999ae020a120dff91ee5541710237a60f201004a5ace1b97facf303585b0e8392bb3a8a0fff60e3f725e5e60a4616c3490a42cc865d1d7c4b1a5ebdd97670ba052ad174a4f73b6a7469d809d913e7bcef6"], 0x0) ioctl$EVIOCRMFF(r8, 0x83c0550b, &(0x7f0000000140)=0xe) 1.43343392s ago: executing program 2 (id=3560): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3ff, 0xffffffffffffffa1}}]}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 1.404654262s ago: executing program 4 (id=3561): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x48) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/nfs', 0x0, 0x49) mknodat(r5, &(0x7f0000000280)='./file0\x00', 0x2, 0x1) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x800, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x6, 0x5, 0xc9}}]}, 0x54}}, 0x0) 1.400152562s ago: executing program 0 (id=3562): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000011, 0x32, 0xffffffffffffffff, 0x8000000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000003f80), 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/4088, 0xff8}], 0x1) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000080)=0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x8040) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f00000003c0)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000180)=0xd0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat(r8, &(0x7f0000000140)='./file0\x00', 0x0, 0xb) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x8c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xeb3e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x40000004) lseek(r8, 0x5, 0x1) bind$l2tp6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2801000010cb4a970be22a8f6ef58623359b00ff", @ANYRES32=r6, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.205479034s ago: executing program 4 (id=3563): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x48) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/nfs', 0x0, 0x49) mknodat(r5, &(0x7f0000000280)='./file0\x00', 0x2, 0x1) (fail_nth: 1) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x800, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x6, 0x5, 0xc9}}]}, 0x54}}, 0x0) 1.056342985s ago: executing program 0 (id=3564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x364, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x46, 0x3, "c63c37f0963ac9bc110c15ccf301e7923252e263a814071f44e8a7aa4aafffe742f159daf9e7df4e87a3f8db7ae2b8df2c0bea1ffb36cbf5dc2f1fd70f54f15aea28"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf94d}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}]}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6a, 0x3, "375330607ddc6101434df58cd2ac981c6de558904c6c695c963a67c214b9acfcedfbac78de8bda95e686ec436c80d646ea4081ad1d1f1ca62c546b388d98b2fe2654ee14e28fc7873ffff82aa1ad6ae606d0bcc8cb23d4521a5873d915977e9ef9a9e70b0484"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6c}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "a65841d8a45d90d56a219ea574a60510d73e7d4e48d5ec95589791"}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x2400c044}, 0x85) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00f500", 0x28, 0x3a, 0xff, @empty, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 992.78117ms ago: executing program 33 (id=3564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x364, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x46, 0x3, "c63c37f0963ac9bc110c15ccf301e7923252e263a814071f44e8a7aa4aafffe742f159daf9e7df4e87a3f8db7ae2b8df2c0bea1ffb36cbf5dc2f1fd70f54f15aea28"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf94d}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}]}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6a, 0x3, "375330607ddc6101434df58cd2ac981c6de558904c6c695c963a67c214b9acfcedfbac78de8bda95e686ec436c80d646ea4081ad1d1f1ca62c546b388d98b2fe2654ee14e28fc7873ffff82aa1ad6ae606d0bcc8cb23d4521a5873d915977e9ef9a9e70b0484"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6c}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "a65841d8a45d90d56a219ea574a60510d73e7d4e48d5ec95589791"}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x2400c044}, 0x85) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00f500", 0x28, 0x3a, 0xff, @empty, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 945.61204ms ago: executing program 4 (id=3565): r0 = fsmount(0xffffffffffffffff, 0x1, 0x8a) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/222) r1 = dup(r0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c000}, 0x24000005) bind$802154_raw(r1, &(0x7f0000000280)={0x24, @none={0x0, 0xffff}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='minix\x00', 0x2204000, &(0x7f00000003c0)='{]-\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r3, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20004015) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x109, 0x2d}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xed8}]}, 0x50}, 0x1, 0x0, 0x0, 0x240048d1}, 0x4000) mknodat$loop(r0, &(0x7f0000000700)='./file0\x00', 0x8, 0x0) r4 = accept4$unix(r0, &(0x7f0000000740), &(0x7f00000007c0)=0x6e, 0xe53708e8cd097ab4) r5 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000cc0), 0x60000, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000d00), 0x2, 0x0) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000d40), 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000dc0)={&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000880)="93c2a174e5f4e9f7eb26fcf234f79be30b02542a253bc0d37ce8bc9fffae7499e8fd54528d3c129252aeceb9cc781f884e120d42763e2beaa47de63389aa6d995419d13042ca1b6a016b53ffc4e7de513a557a1a434c8430ad0c01892215e88283a872f5ed57f04155772ef1c47f6768c59003e8773996fc4b766bfb7ee6650da3f5245a6fe1106b613b2074649789d68ee2b151e78da137ae7cf2ce461f3a07b452c6034f82fd8cc16e941cb4319a2cc9f6be3dbd59", 0xb6}, {&(0x7f0000000940)="b4e02cd820f5ce8b8babeb87", 0xc}, {&(0x7f0000000980)="41894619f8debf14659b4c7bf29096223764f8ca0a58a2d18766681333092be0a047930b8829dad3b8446540241176c1200d070823f104e4f7229b1c5ef0a89fab3ec13971fb6ca1dc8496c42746a231a9438819b4af76709bb3e8c89c166bc149eb493534c249788509cf3eb975baff16a6a1ee9877035c9610556f9640513b0798fe51d1afaf23bc1b575d9071c04384", 0x91}, {&(0x7f0000000a40)="73c28eed2ac2cb1ac7cbe737cd366466d00f6588c7fd592bc0cc3f9da4651bd96b36c82ad2c6a5bc76b58d51e95b596cefad09262b06bb3d6cca9d89da6202034b4bd7f9c26d6f7072a67dcf230b9f5d9afc2850c93a8e6089b665b381887f7da44319e0a3262787c6e87507eb67a3cee345a76455e8254b9367c027", 0x7c}, {&(0x7f0000000ac0)="a59d63f2468b5121302fddf531585ecb289fc03feb997b0fc902d28aa5a9b09fb50b1b472f74937939f4fb65e116a13eeac6a78403695c0a02439a0ee6048942414583caf0ef16e0c810c989f83e48ad5becec96d588dec26d3d12acfc9a3d392dc4bfe0631992ecce418b70ad1cff04f43baa67dcf09c8e4abf9f189b1713eda7d1496642e65e903c517968ab69814929740ea699f07fecf156889f641f89d5631545a84e851b4fe768d25e924b731fe7518abf163cdf081cfba29f32cfcf8ee2175c", 0xc3}, {&(0x7f0000000bc0)="fc36fe0788359ef42e62c6ea2a9c124e3d87b2bcf6d72adb2494c173837facf93b2f7cb779f7ba2bb07a44fd0bacde71a70f9ec05ce5c17e576322b549524b", 0x3f}, {&(0x7f0000000c00)="942da3d221632943283c263981293ca308bdd014a4ae4b2c1247dac8f43d607e5e4c005e4b133ecc53e6a547102633d037937b637295f6cd170bbc750f8e15479210", 0x42}], 0x7, &(0x7f0000000d80)=[@rights={{0x30, 0x1, 0x1, [r5, r6, r7, r0, r1, r1, r0, r0, r0]}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0x40, 0x44000}, 0x40) getpeername$llc(r1, &(0x7f0000000e00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000e40)=0x10) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000e80)=""/146) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000f40)={{0x0, 0x0, 0x5, 0x6, 0xfb, 0x6, 0xc7f, 0x2, 0xc, 0xa02c, 0x5, 0x7, 0x6, 0xe8, 0x10000}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000fc0)={{r8, 0x6, 0x8000000000000000, 0x7, 0xc5, 0x400, 0x4, 0x0, 0xbf0d, 0x8, 0x81, 0x379, 0x4, 0xffffffffffffffab, 0x8}}) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000001fc0)={0x5, 0xf}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000002000)={0x1, 0x3, 0x17}) r9 = syz_ublk_setup_io_uring(0xf25, &(0x7f0000002040)={0x0, 0x9b0f, 0x11000, 0x2, 0x286, 0x0, r0}, &(0x7f00000020c0), &(0x7f0000002100), &(0x7f0000002140)) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, &(0x7f0000002180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x26) openat$comedi(0xffffff9c, &(0x7f00000022c0)='/dev/comedi2\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000002300)={0x82, 0x6, 0xfffffffd}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002380)={0x2, &(0x7f0000002340)=[{0x4, 0xd0, 0xc, 0x8000}, {0x400, 0x4, 0x1, 0x80}]}, 0x8) fsetxattr$security_capability(r0, &(0x7f00000023c0), &(0x7f0000002480)=@v3={0x3000000, [{0x6, 0x6}, {0x2, 0x5}]}, 0x18, 0x1) 944.176084ms ago: executing program 2 (id=3566): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000011, 0x32, 0xffffffffffffffff, 0x8000000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000003f80), 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/4088, 0xff8}], 0x1) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000080)=0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x8040) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f00000003c0)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000180)=0xd0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat(r8, &(0x7f0000000140)='./file0\x00', 0x0, 0xb) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x40000004) lseek(r8, 0x5, 0x1) bind$l2tp6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2801000010cb4a970be22a8f6ef58623359b00ff", @ANYRES32=r6, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 943.198668ms ago: executing program 3 (id=3567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x2, 0x7, 0x0, 0x6, 0x8, 0x4, {0x6, 0x8000, 0x100000000, 0x0, 0x203, 0x55d, 0xfffffffa, 0x0, 0x80010000, 0xc000, 0x1002, 0x0, 0x0, 0xb4f3, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchdir(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0x101, 0x70bd2b, 0x25dfdbfb, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x400c080) r2 = socket$inet6(0xa, 0x6, 0xa5d) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@local, r3}, 0x14) 870.402611ms ago: executing program 4 (id=3568): move_pages(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}]}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06f40908"], 0xa) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 503.403564ms ago: executing program 3 (id=3569): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000000314000327bd7000fcdbdf258900020073797a31000000000800410073697700140033006c6f00000000000000000000000000000900020073797a320000000008004100736977001400330076657468315f746f5f626174616476000900020073797a3100000000080041007278650014003300626f6e645f736c6176655f3100000000"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x903f01) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) ioctl$USBDEVFS_RESET(r1, 0x8008550e) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0xc050) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000780)='none', &(0x7f00000007c0)='\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00^a&\xcd\x8c.\xda|\x9ex\x00\x1d\x1cL\t\\\x15Dk\xb7\x04\xd5\x7fj\xf4H\x9d\xb2\x8b\xf7\x8a3[\xc3\x99\x14\nc\xdfV\x1bR?\xaf\xe67\xa6\x99\xcc>', 0x0) syz_usb_control_io(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) r5 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x4205, 0x8, 0x0, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_setup(0x6c6b, &(0x7f0000000280)={0x0, 0xc89f, 0x2000, 0x0, 0x199}) read$char_usb(r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) 250.148723ms ago: executing program 4 (id=3570): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x94, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x94}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x800, 0x729, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, @in={0x2, 0x5e22, @local}, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000340), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1, 0x2e, "b8ce5f5a304ccb4fe78a1669db39e382000000c54a8635dce6e9d29ec8853355e827f3d616e85e93814f25fa92faf49fd7965d2eb7b755f8da073f546efc5c43b0332848ba70bada75419e02dd321aabdfa5a999770400000000000000f9f58dedbcce4b542ddac2e7ffa1ffd7b20801bbb973c42376a655bbc9144a68"}, &(0x7f0000000240)=0x7c) 0s ago: executing program 2 (id=3571): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x87, 0x100087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/tcm.usb0/file0\x00', 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') socket(0x10, 0x3, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00', 0x0, 0x72) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x343302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000006c0)="94e5daa345c4f7aa937db3097361ac5072d03d53bc0b4d41f8c28838850ca5d437b5ee4b40125a9ea4d5c496ef9d2688857f33f7399f60b2fbc9f75b5ef6bee052b789b05989e2509c1ae43cce29d05b0e6e2807879480460350a442aa3b95552c593b7b44fb337bc70e81abc3e3b164b9ff266dfc5c27938a89676d240a44487e6319cf31387554028fbf022d46bb6fb99eef7cb5e5281262ebc2df4e6e306bf30631cd02f351a6157cdcc99e789a2df19fd996771b4adeddc49d413c3e972ef0816a0d5829000000000000547a020f503704afc6d35ee9259e9587672b39c1dd875d40cfe47f744f670f66f6", 0xed}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) creat(0x0, 0x175) kernel console output (not intermixed with test programs): tion reset by peer [ 862.407773][ T5582] vhci_hcd vhci_hcd.3: stop threads [ 862.409691][ T5582] vhci_hcd vhci_hcd.3: release socket [ 862.411670][ T5582] vhci_hcd vhci_hcd.3: disconnect device [ 862.546295][T14371] usb 42-1: device descriptor read/8, error -110 [ 863.010430][ T5878] usb 5-1: device descriptor read/8, error -71 [ 863.051358][T14371] usb usb42-port1: attempt power cycle [ 863.588970][ T5878] usb usb5-port1: unable to enumerate USB device [ 863.688531][T14371] usb usb42-port1: unable to enumerate USB device [ 864.509877][T17409] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 864.542975][T17409] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 864.545540][T17409] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 864.556980][T17409] vhci_hcd vhci_hcd.0: Device attached [ 864.840555][T14371] usb 46-1: SetAddress Request (98) to port 0 [ 864.848170][T14371] usb 46-1: new SuperSpeed USB device number 98 using vhci_hcd [ 865.351081][T17398] kexec: Could not allocate control_code_buffer [ 865.443900][T17413] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 865.446043][T17413] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 865.449064][T17413] vhci_hcd vhci_hcd.0: Device attached [ 865.757329][T17413] rdma_rxe: rxe_newlink: failed to add wg2 [ 865.762912][T17414] vhci_hcd: connection closed [ 865.763182][ T5582] vhci_hcd vhci_hcd.2: stop threads [ 865.765732][T17410] vhci_hcd: connection reset by peer [ 865.767361][ T5582] vhci_hcd vhci_hcd.2: release socket [ 865.774006][ T5582] vhci_hcd vhci_hcd.2: disconnect device [ 865.776666][ T5582] vhci_hcd vhci_hcd.4: stop threads [ 865.778859][ T5582] vhci_hcd vhci_hcd.4: release socket [ 865.782221][ T5582] vhci_hcd vhci_hcd.4: disconnect device [ 865.920568][T16863] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 866.091361][T16863] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.096414][T16863] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 866.100068][T16863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 866.103798][T16863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 866.106844][T16863] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 866.111527][T16863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.115535][T16863] usb 8-1: config 0 descriptor?? [ 866.300531][ T55] usb 44-1: device descriptor read/8, error -110 [ 866.507629][T17426] bond0: Error: CAN devices cannot be enslaved [ 866.739243][T17434] syz2: rxe_newlink: already configured on wg2 [ 866.775855][ T55] usb usb44-port1: attempt power cycle [ 866.820482][ T29] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 866.824991][T16863] usbhid 8-1:0.0: can't add hid device: -71 [ 866.982770][ T29] usb 5-1: device descriptor read/64, error -71 [ 867.230513][ T29] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 867.361619][ T29] usb 5-1: device descriptor read/64, error -71 [ 867.364625][ T55] usb usb44-port1: unable to enumerate USB device [ 867.410091][T16863] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 867.480690][ T29] usb usb5-port1: attempt power cycle [ 867.493811][T16863] usb 8-1: USB disconnect, device number 68 [ 868.110521][ T29] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 868.716256][ T29] usb 5-1: device descriptor read/8, error -71 [ 868.932548][T17455] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 868.934674][T17455] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 868.937130][T17455] vhci_hcd vhci_hcd.0: Device attached [ 869.153949][T17459] binder: BINDER_SET_CONTEXT_MGR already set [ 869.156357][T17459] binder: 17452:17459 ioctl 4018620d 800002c0 returned -16 [ 869.215901][T17455] rdma_rxe: rxe_newlink: failed to add wg2 [ 869.222178][T17456] vhci_hcd: connection closed [ 869.223613][ T5582] vhci_hcd vhci_hcd.2: stop threads [ 869.230529][ T5582] vhci_hcd vhci_hcd.2: release socket [ 869.232399][ T5582] vhci_hcd vhci_hcd.2: disconnect device [ 869.271332][ T29] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 869.301190][ T29] usb 5-1: device descriptor read/8, error -71 [ 869.411133][ T29] usb usb5-port1: unable to enumerate USB device [ 869.487922][T17451] kexec: Could not allocate control_code_buffer [ 869.589856][T17462] bond0: Error: CAN devices cannot be enslaved [ 869.666160][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.669393][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.900483][ T5813] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 869.912682][T14371] usb 46-1: device descriptor read/8, error -110 [ 870.050481][ T5813] usb 5-1: device descriptor read/64, error -71 [ 870.122094][T17469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2895'. [ 870.313840][T14371] usb usb46-port1: attempt power cycle [ 870.360465][ T5813] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 870.457236][T17477] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 870.459258][T17477] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 870.462396][T17477] vhci_hcd vhci_hcd.0: Device attached [ 870.490538][ T5813] usb 5-1: device descriptor read/64, error -71 [ 870.531202][T17477] rdma_rxe: rxe_newlink: failed to add wg2 [ 870.601019][ T5813] usb usb5-port1: attempt power cycle [ 870.731017][ T29] usb 44-1: SetAddress Request (106) to port 0 [ 870.744321][ T29] usb 44-1: new SuperSpeed USB device number 106 using vhci_hcd [ 870.882503][T14371] usb usb46-port1: unable to enumerate USB device [ 870.951855][ T5813] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 870.984293][ T5813] usb 5-1: device descriptor read/8, error -71 [ 871.265664][T17486] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 871.270596][T16863] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 871.272276][ T5813] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 871.288681][T17486] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 871.290782][T17486] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 871.300610][T17486] vhci_hcd vhci_hcd.0: Device attached [ 871.312370][ T5813] usb 5-1: device descriptor read/8, error -71 [ 871.424045][T16863] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 871.428794][T16863] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 871.432473][ T5813] usb usb5-port1: unable to enumerate USB device [ 871.433668][T16863] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 871.439459][T16863] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 871.443350][T16863] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 871.447400][T16863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.455649][T16863] usb 9-1: config 0 descriptor?? [ 871.580527][T14371] usb 42-1: SetAddress Request (91) to port 0 [ 871.582529][T14371] usb 42-1: new SuperSpeed USB device number 91 using vhci_hcd [ 871.638531][T17478] vhci_hcd: connection reset by peer [ 871.641494][ T5582] vhci_hcd vhci_hcd.3: stop threads [ 871.643281][ T5582] vhci_hcd vhci_hcd.3: release socket [ 871.645860][ T5582] vhci_hcd vhci_hcd.3: disconnect device [ 871.866400][T17487] vhci_hcd: connection reset by peer [ 871.872116][ T5582] vhci_hcd vhci_hcd.2: stop threads [ 871.874077][ T5582] vhci_hcd vhci_hcd.2: release socket [ 871.875992][ T5582] vhci_hcd vhci_hcd.2: disconnect device [ 872.050682][T16863] usbhid 9-1:0.0: can't add hid device: -71 [ 872.056665][T16863] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 872.064960][T16863] usb 9-1: USB disconnect, device number 50 [ 872.738613][T17504] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 872.772176][T17504] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 872.774906][T17504] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 872.787056][T17504] vhci_hcd vhci_hcd.0: Device attached [ 873.387374][T17507] vhci_hcd: connection closed [ 873.388106][ T5582] vhci_hcd vhci_hcd.2: stop threads [ 873.392248][ T5582] vhci_hcd vhci_hcd.2: release socket [ 873.394547][ T5582] vhci_hcd vhci_hcd.2: disconnect device [ 874.152468][T17521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2907'. [ 874.324479][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2908'. [ 874.809722][T17518] kexec: Could not allocate control_code_buffer [ 875.201717][T17530] bond0: Error: CAN devices cannot be enslaved [ 875.500617][ T34] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 875.645523][ T34] usb 9-1: device descriptor read/64, error -71 [ 875.820651][ T29] usb 44-1: device descriptor read/8, error -110 [ 876.221171][T16863] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 876.370467][ T34] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 876.391431][T16863] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 876.395307][T16863] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.402739][T16863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 876.406207][T16863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 876.409199][T16863] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 876.413884][T16863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.418310][T16863] usb 7-1: config 0 descriptor?? [ 876.500508][ T34] usb 9-1: device descriptor read/64, error -71 [ 876.511509][ T29] usb usb44-port1: attempt power cycle [ 876.614379][ T34] usb usb9-port1: attempt power cycle [ 876.620547][T14371] usb 42-1: device descriptor read/8, error -110 [ 876.950465][ T34] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 876.970931][ T34] usb 9-1: device descriptor read/8, error -71 [ 876.975176][T16863] usbhid 7-1:0.0: can't add hid device: -71 [ 876.978939][T16863] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 876.985141][T16863] usb 7-1: USB disconnect, device number 53 [ 877.011441][T14371] usb usb42-port1: attempt power cycle [ 877.071631][ T29] usb usb44-port1: unable to enumerate USB device [ 877.157224][T17556] siw: device registration error -23 [ 877.221255][ T34] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 877.242181][ T34] usb 9-1: device descriptor read/8, error -71 [ 877.351048][ T34] usb usb9-port1: unable to enumerate USB device [ 877.973983][T14371] usb usb42-port1: unable to enumerate USB device [ 879.011133][T17567] rdma_rxe: rxe_newlink: failed to add wg2 [ 881.054939][T17590] siw: device registration error -23 [ 881.603136][T17586] kexec: Could not allocate control_code_buffer [ 881.719120][T17599] bond0: Error: CAN devices cannot be enslaved [ 882.030539][ T2318] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 882.170673][ T2318] usb 5-1: device descriptor read/64, error -71 [ 882.296221][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2930'. [ 882.462652][ T2318] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 882.650980][ T2318] usb 5-1: device descriptor read/64, error -71 [ 882.779999][ T2318] usb usb5-port1: attempt power cycle [ 883.100874][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2933'. [ 883.134954][ T2318] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 883.185804][ T2318] usb 5-1: device descriptor read/8, error -71 [ 883.461386][ T2318] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 884.305812][ T2318] usb 5-1: device descriptor read/8, error -71 [ 884.348494][T17621] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 884.350798][T17621] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 884.369343][T17621] vhci_hcd vhci_hcd.0: Device attached [ 884.449741][ T2318] usb usb5-port1: unable to enumerate USB device [ 884.492749][T17621] rdma_rxe: rxe_newlink: failed to add wg2 [ 884.661293][T14371] usb 42-1: SetAddress Request (95) to port 0 [ 884.670557][T14371] usb 42-1: new SuperSpeed USB device number 95 using vhci_hcd [ 884.860916][T17634] siw: device registration error -23 [ 885.376302][T17637] kexec: Could not allocate control_code_buffer [ 885.605086][T17622] vhci_hcd: connection reset by peer [ 885.613105][T11035] vhci_hcd vhci_hcd.2: stop threads [ 885.624544][T11035] vhci_hcd vhci_hcd.2: release socket [ 885.631609][T11035] vhci_hcd vhci_hcd.2: disconnect device [ 885.835795][T17642] siw: device registration error -23 [ 887.241564][T17657] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 887.243695][T17657] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 887.247823][T17657] vhci_hcd vhci_hcd.0: Device attached [ 887.414587][T17657] syz2: rxe_newlink: already configured on wg2 [ 887.736478][T17659] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 887.738534][T17659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 887.756973][T17659] vhci_hcd vhci_hcd.0: Device attached [ 888.396979][ T29] usb 46-1: SetAddress Request (102) to port 0 [ 888.399002][ T29] usb 46-1: new SuperSpeed USB device number 102 using vhci_hcd [ 888.412567][T17671] bond0: Error: CAN devices cannot be enslaved [ 888.531202][T17655] rdma_rxe: rxe_newlink: failed to add wg2 [ 888.760494][T17664] vhci_hcd: connection closed [ 888.760725][T11035] vhci_hcd vhci_hcd.3: stop threads [ 888.765941][T11035] vhci_hcd vhci_hcd.3: release socket [ 888.768172][T11035] vhci_hcd vhci_hcd.3: disconnect device [ 888.774204][ T7810] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 888.920622][ T7810] usb 7-1: device descriptor read/64, error -71 [ 888.931896][T17658] vhci_hcd: connection reset by peer [ 888.933965][T11035] vhci_hcd vhci_hcd.4: stop threads [ 888.937505][T11035] vhci_hcd vhci_hcd.4: release socket [ 888.939313][T11035] vhci_hcd vhci_hcd.4: disconnect device [ 889.191717][ T7810] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 889.352503][ T7810] usb 7-1: device descriptor read/64, error -71 [ 889.480792][ T7810] usb usb7-port1: attempt power cycle [ 889.740566][T14371] usb 42-1: device descriptor read/8, error -110 [ 890.074953][T17691] syz.3.2950: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 890.079223][T17691] CPU: 0 UID: 0 PID: 17691 Comm: syz.3.2950 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.079241][T17691] Tainted: [L]=SOFTLOCKUP [ 890.079246][T17691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 890.079253][T17691] Call Trace: [ 890.079260][T17691] [ 890.079266][T17691] dump_stack_lvl+0x100/0x190 [ 890.079285][T17691] warn_alloc.cold+0x94/0xa8 [ 890.079297][T17691] ? __pfx_warn_alloc+0x10/0x10 [ 890.079311][T17691] ? find_held_lock+0x2b/0x80 [ 890.079325][T17691] ? psi_memstall_leave+0x19c/0x360 [ 890.079343][T17691] ? psi_memstall_leave+0x1e6/0x360 [ 890.079359][T17691] ? psi_memstall_leave+0x1eb/0x360 [ 890.079373][T17691] ? lockdep_hardirqs_on+0x78/0x100 [ 890.079393][T17691] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 890.079412][T17691] ? __pfx_clockevents_program_event+0x10/0x10 [ 890.079428][T17691] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 890.079442][T17691] ? __pfx___schedule+0x10/0x10 [ 890.079457][T17691] ? preempt_schedule_irq+0x7b/0x90 [ 890.079472][T17691] ? irqentry_exit+0x24d/0xa00 [ 890.079486][T17691] ? lockdep_hardirqs_on+0x78/0x100 [ 890.079506][T17691] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 890.079525][T17691] ? policy_nodemask+0xed/0x4f0 [ 890.079544][T17691] alloc_pages_mpol+0x1fb/0x540 [ 890.079560][T17691] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 890.079575][T17691] ? alloc_frozen_pages_noprof+0x13c/0x160 [ 890.079586][T17691] ? __sanitizer_cov_trace_pc+0x17/0x70 [ 890.079604][T17691] alloc_pages_noprof+0x1a/0x160 [ 890.079615][T17691] kimage_alloc_pages+0x72/0x380 [ 890.079634][T17691] kimage_alloc_control_pages+0x157/0xa20 [ 890.079653][T17691] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 890.079668][T17691] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 890.079689][T17691] do_kexec_load+0x275/0x810 [ 890.079707][T17691] ? __pfx_do_kexec_load+0x10/0x10 [ 890.079727][T17691] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 890.079746][T17691] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 890.079768][T17691] __do_fast_syscall_32+0xe7/0x970 [ 890.079787][T17691] do_fast_syscall_32+0x32/0x70 [ 890.079803][T17691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 890.079818][T17691] RIP: 0023:0xf709efec [ 890.079833][T17691] Code: Unable to access opcode bytes at 0xf709efc2. [ 890.079838][T17691] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 000000000000011b [ 890.079849][T17691] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 890.079855][T17691] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 890.079861][T17691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 890.079867][T17691] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 890.079874][T17691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 890.079886][T17691] [ 890.079892][T17691] Mem-Info: [ 890.151325][T14371] usb usb42-port1: attempt power cycle [ 890.152712][T17691] active_anon:3342 inactive_anon:1060 isolated_anon:0 [ 890.152712][T17691] active_file:6243 inactive_file:15646 isolated_file:0 [ 890.152712][T17691] unevictable:0 dirty:247 writeback:0 [ 890.152712][T17691] slab_reclaimable:7221 slab_unreclaimable:62770 [ 890.152712][T17691] mapped:25388 shmem:2873 pagetables:1181 [ 890.152712][T17691] sec_pagetables:316 bounce:0 [ 890.152712][T17691] kernel_misc_reclaimable:0 [ 890.152712][T17691] free:27627 free_pcp:224 free_cma:0 [ 890.179760][T17691] Node 0 active_anon:24kB inactive_anon:240kB active_file:112kB inactive_file:2960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:672kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7296kB pagetables:1276kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 890.190016][T17691] Node 1 active_anon:13344kB inactive_anon:4000kB active_file:24860kB inactive_file:58224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100880kB dirty:984kB writeback:0kB shmem:11488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6212kB pagetables:3448kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 890.200632][T17691] Node 0 DMA free:2220kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB zspages:36kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.209995][T17691] lowmem_reserve[]: 0 280 280 280 280 [ 890.211805][T17691] Node 0 DMA32 free:33904kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:240kB active_file:112kB inactive_file:2944kB unevictable:0kB writepending:4kB zspages:1536kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.222011][T17691] lowmem_reserve[]: 0 0 0 0 0 [ 890.223513][T17691] Node 1 DMA32 free:76584kB boost:26624kB min:73764kB low:85548kB high:97332kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13356kB inactive_anon:4000kB active_file:15288kB inactive_file:66660kB unevictable:0kB writepending:984kB zspages:5356kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1032kB local_pcp:0kB free_cma:0kB [ 890.234267][T17691] lowmem_reserve[]: 0 0 0 0 0 [ 890.235837][T17691] Node 0 DMA: 37*4kB (U) 11*8kB (U) 5*16kB (U) 2*32kB (U) 3*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2236kB [ 890.241291][T17691] Node 0 DMA32: 1219*4kB (UME) 385*8kB (UME) 109*16kB (UME) 257*32kB (UME) 64*64kB (UME) 35*128kB (UME) 7*256kB (M) 7*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 33924kB [ 890.247850][T17691] Node 1 DMA32: 2030*4kB (UME) 1093*8kB (UME) 457*16kB (UME) 225*32kB (UME) 121*64kB (UME) 74*128kB (UME) 41*256kB (UME) 26*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 77520kB [ 890.250452][ T7810] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 890.254598][T17691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.259127][T17691] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 890.262115][T17691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.265357][T17691] Node 1 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 890.268220][T17691] 24554 total pagecache pages [ 890.269962][T17691] 697 pages in swap cache [ 890.271933][T17691] Free swap = 100632kB [ 890.273358][T17691] Total swap = 124996kB [ 890.275027][T17691] 524155 pages RAM [ 890.276395][T17691] 0 pages HighMem/MovableOnly [ 890.278272][T17691] 211495 pages reserved [ 890.279917][T17691] 0 pages cma reserved [ 890.452034][ T7810] usb 7-1: device descriptor read/8, error -71 [ 890.543552][T17696] siw: device registration error -23 [ 890.700738][ T7810] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 890.721106][ T7810] usb 7-1: device descriptor read/8, error -71 [ 890.752652][T14371] usb usb42-port1: unable to enumerate USB device [ 890.832035][ T7810] usb usb7-port1: unable to enumerate USB device [ 891.006576][T17691] kexec: Could not allocate control_code_buffer [ 891.468884][T17707] siw: device registration error -23 [ 891.612611][T17709] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 891.615290][T17709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 891.618898][T17709] vhci_hcd vhci_hcd.0: Device attached [ 891.632766][T17709] rdma_rxe: rxe_newlink: failed to add wg2 [ 892.549386][T13211] usb 44-1: SetAddress Request (111) to port 0 [ 892.768302][T17722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2961'. [ 892.800575][T13211] usb 44-1: new SuperSpeed USB device number 111 using vhci_hcd [ 893.081411][T17710] vhci_hcd: connection reset by peer [ 893.124101][ T5582] vhci_hcd vhci_hcd.3: stop threads [ 893.126193][ T5582] vhci_hcd vhci_hcd.3: release socket [ 893.128212][ T5582] vhci_hcd vhci_hcd.3: disconnect device [ 893.500581][ T29] usb 46-1: device descriptor read/8, error -110 [ 893.921054][ T29] usb usb46-port1: attempt power cycle [ 894.339812][T17745] rdma_rxe: rxe_newlink: failed to add wg2 [ 894.516484][T17744] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 894.519168][T17744] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 894.522165][T17744] vhci_hcd vhci_hcd.0: Device attached [ 894.588918][ T29] usb usb46-port1: unable to enumerate USB device [ 894.616413][T17744] rdma_rxe: rxe_newlink: failed to add wg2 [ 894.822546][T17735] kexec: Could not allocate control_code_buffer [ 895.403610][T17758] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 895.463419][T17758] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 895.465989][T17758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 895.481012][T17758] vhci_hcd vhci_hcd.0: Device attached [ 895.568248][T17761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2970'. [ 895.751525][ T29] usb 38-1: SetAddress Request (103) to port 0 [ 895.780702][ T29] usb 38-1: new SuperSpeed USB device number 103 using vhci_hcd [ 895.872181][T17747] vhci_hcd: connection closed [ 895.873836][ T5582] vhci_hcd vhci_hcd.3: stop threads [ 895.891113][ T5582] vhci_hcd vhci_hcd.3: release socket [ 895.903291][ T5582] vhci_hcd vhci_hcd.3: disconnect device [ 896.313269][T17762] vhci_hcd: connection reset by peer [ 896.324598][T17767] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 896.326959][T17767] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 896.340546][T17767] vhci_hcd vhci_hcd.0: Device attached [ 896.343059][ T5582] vhci_hcd vhci_hcd.0: stop threads [ 896.348206][ T5582] vhci_hcd vhci_hcd.0: release socket [ 896.356024][ T5582] vhci_hcd vhci_hcd.0: disconnect device [ 896.410205][T17773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2973'. [ 896.411615][T17767] syz2: rxe_newlink: already configured on wg2 [ 896.797097][T17770] vhci_hcd: connection closed [ 896.797617][ T5582] vhci_hcd vhci_hcd.4: stop threads [ 896.802208][ T5582] vhci_hcd vhci_hcd.4: release socket [ 896.805012][ T5582] vhci_hcd vhci_hcd.4: disconnect device [ 897.506542][T17783] siw: device registration error -23 [ 897.900873][T13211] usb 44-1: device descriptor read/8, error -110 [ 898.301876][T13211] usb usb44-port1: attempt power cycle [ 899.400993][T13211] usb usb44-port1: unable to enumerate USB device [ 900.195630][ T5734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 900.200818][ T5734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 900.205653][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 900.210008][ T5734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 900.212886][ T5734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 900.573379][T17832] siw: device registration error -23 [ 900.620106][ T5582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.723052][ T5582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.734963][T17816] wg2 speed is unknown, defaulting to 1000 [ 900.790205][ T5582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.881570][ T5582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.983556][ T29] usb 38-1: device descriptor read/8, error -110 [ 901.035536][T17835] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 901.037650][T17835] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 901.066417][T17835] vhci_hcd vhci_hcd.0: Device attached [ 901.134248][T17835] rdma_rxe: rxe_newlink: failed to add wg2 [ 901.212988][ T5582] bridge_slave_1: left allmulticast mode [ 901.215500][ T5582] bridge_slave_1: left promiscuous mode [ 901.218187][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.226614][ T5582] bridge_slave_0: left allmulticast mode [ 901.229150][ T5582] bridge_slave_0: left promiscuous mode [ 901.232415][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.360659][ T5813] usb 44-1: SetAddress Request (115) to port 0 [ 901.363378][ T5813] usb 44-1: new SuperSpeed USB device number 115 using vhci_hcd [ 901.677553][ T5582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.679971][ T41] smbdirect: ib_dev[syz1] removed [ 901.686845][ T5582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.693623][ T5582] bond0 (unregistering): (slave bond1): Releasing backup interface [ 901.697820][ T5582] bond0 (unregistering): Released all slaves [ 901.706986][ T5582] bond1 (unregistering): Released all slaves [ 901.741185][T17816] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.743976][T17816] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.746664][T17816] bridge_slave_0: entered allmulticast mode [ 901.747324][T17856] rdma_rxe: rxe_newlink: failed to add wg2 [ 901.750889][T17816] bridge_slave_0: entered promiscuous mode [ 901.760708][ T1036] wg2 speed is unknown, defaulting to 1000 [ 901.763635][T17816] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.766343][ T1036] syz2: Port: 1 Link DOWN [ 901.770001][T17816] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.773352][T17816] bridge_slave_1: entered allmulticast mode [ 901.776398][T17816] bridge_slave_1: entered promiscuous mode [ 901.792358][T17816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.798904][T17816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.821632][T17816] team0: Port device team_slave_0 added [ 901.825067][T17816] team0: Port device team_slave_1 added [ 901.839920][T17816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.842387][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.851598][T17816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.856545][T17816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.858910][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.867351][T17816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.894270][T17816] hsr_slave_0: entered promiscuous mode [ 901.896876][T17816] hsr_slave_1: entered promiscuous mode [ 901.899337][T17816] debugfs: 'hsr0' already exists in 'hsr' [ 901.901494][T17816] Cannot create hsr debugfs directory [ 902.152868][ T29] usb usb38-port1: attempt power cycle [ 902.181929][ T5878] wg2 speed is unknown, defaulting to 1000 [ 902.220660][ T5734] Bluetooth: hci3: command tx timeout [ 902.465230][T17867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2989'. [ 902.465879][T17841] vhci_hcd: connection reset by peer [ 902.480938][ T12] vhci_hcd vhci_hcd.3: stop threads [ 902.483102][ T12] vhci_hcd vhci_hcd.3: release socket [ 902.485338][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 902.771485][ T29] usb usb38-port1: unable to enumerate USB device [ 903.844364][T17816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 903.854508][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 903.858768][T17816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 903.878025][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 903.881146][T17816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 903.892124][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 903.896819][T17816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 903.932658][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 903.988124][T17816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.014241][T17816] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.019743][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.022251][T10205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.032771][ T5582] hsr_slave_0: left promiscuous mode [ 904.036188][ T5582] hsr_slave_1: left promiscuous mode [ 904.039113][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.047261][ T5582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.069600][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.076464][ T5582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.091966][ T5582] veth1_macvtap: left promiscuous mode [ 904.093821][ T5582] veth0_macvtap: left promiscuous mode [ 904.097535][ T5582] veth1_vlan: left promiscuous mode [ 904.100029][ T5582] veth0_vlan: left promiscuous mode [ 904.303697][ T5734] Bluetooth: hci3: command tx timeout [ 904.361533][ T5582] team0 (unregistering): Port device team_slave_1 removed [ 904.370850][ T5582] team0 (unregistering): Port device team_slave_0 removed [ 904.403952][ T41] smc: removing ib device syz2 [ 904.513659][ T41] smbdirect: ib_dev[syz2] removed [ 904.682215][T17905] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 904.708452][T17905] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 904.711142][T17905] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 904.723327][T17905] vhci_hcd vhci_hcd.0: Device attached [ 904.810241][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.813287][T10205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.861284][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.865992][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.300337][T17908] vhci_hcd: connection closed [ 905.301842][T11035] vhci_hcd vhci_hcd.3: stop threads [ 905.306620][T11035] vhci_hcd vhci_hcd.3: release socket [ 905.310149][T11035] vhci_hcd vhci_hcd.3: disconnect device [ 905.526280][T17816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.880818][T17816] veth0_vlan: entered promiscuous mode [ 905.886504][T17816] veth1_vlan: entered promiscuous mode [ 905.903271][T17816] veth0_macvtap: entered promiscuous mode [ 905.910110][T17816] veth1_macvtap: entered promiscuous mode [ 905.924538][T17816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.931956][T17816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.240091][T10202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.245771][T10202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.273469][T10205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.277738][T10205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.380685][ T5734] Bluetooth: hci3: command tx timeout [ 906.430602][ T5582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.435141][ T5582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.438842][ T5582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.443812][ T5582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.472160][ T5813] usb 44-1: device descriptor read/8, error -110 [ 906.862341][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2982'. [ 906.881593][ T5813] usb usb44-port1: attempt power cycle [ 907.162061][T17946] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 907.164825][T17946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 907.247904][T17946] vhci_hcd vhci_hcd.0: Device attached [ 907.453933][T17946] wg2 speed is unknown, defaulting to 1000 [ 907.461568][T17946] wg2 speed is unknown, defaulting to 1000 [ 907.476872][T17946] wg2 speed is unknown, defaulting to 1000 [ 907.509155][ T5813] usb usb44-port1: unable to enumerate USB device [ 907.611663][T14371] usb 38-1: SetAddress Request (107) to port 0 [ 907.616877][T14371] usb 38-1: new SuperSpeed USB device number 107 using vhci_hcd [ 907.927625][ T29] wg2 speed is unknown, defaulting to 1000 [ 907.937766][T17946] infiniband syz2: set active [ 907.939865][T17946] infiniband syz2: added wg2 [ 907.976406][T17946] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 907.997623][T17946] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 908.018027][T17946] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 908.074141][T17946] RDS/IB: syz2: added [ 908.076005][T17946] smc: adding ib device syz2 with port count 1 [ 908.078623][T17946] smc: ib device syz2 port 1 has no pnetid [ 908.091294][T17946] wg2 speed is unknown, defaulting to 1000 [ 908.097535][ T29] wg2 speed is unknown, defaulting to 1000 [ 908.468353][T17946] wg2 speed is unknown, defaulting to 1000 [ 908.478447][T17947] vhci_hcd: connection reset by peer [ 908.480857][ T5582] vhci_hcd vhci_hcd.0: stop threads [ 908.482647][ T5582] vhci_hcd vhci_hcd.0: release socket [ 908.486492][ T5582] vhci_hcd vhci_hcd.0: disconnect device [ 908.530501][ T5734] Bluetooth: hci3: command tx timeout [ 908.579439][T17946] wg2 speed is unknown, defaulting to 1000 [ 908.674447][T17946] wg2 speed is unknown, defaulting to 1000 [ 909.101234][T17971] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 909.105988][T17971] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 909.111590][T17971] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 909.119984][T17971] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 909.487680][T17974] rdma_rxe: rxe_newlink: failed to add wg2 [ 909.520156][T17978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3003'. [ 911.147753][T17994] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 911.530011][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.553629][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.902762][T17995] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 911.904872][T17995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 911.934482][T17995] vhci_hcd vhci_hcd.0: Device attached [ 911.947702][T17996] vhci_hcd: connection closed [ 911.973737][T11035] vhci_hcd vhci_hcd.2: stop threads [ 911.997827][T11035] vhci_hcd vhci_hcd.2: release socket [ 912.007120][T11035] vhci_hcd vhci_hcd.2: disconnect device [ 912.704362][T14371] usb 38-1: device descriptor read/8, error -110 [ 913.117766][T14371] usb usb38-port1: attempt power cycle [ 913.566191][T18005] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 913.568314][T18005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 913.572142][T18005] vhci_hcd vhci_hcd.0: Device attached [ 913.671046][T18005] syz2: rxe_newlink: already configured on wg2 [ 913.830494][T14371] usb 38-1: SetAddress Request (110) to port 0 [ 913.832576][T14371] usb 38-1: new SuperSpeed USB device number 110 using vhci_hcd [ 914.521100][T18017] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 914.529803][T18018] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 914.531887][T18018] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 914.538055][T18018] vhci_hcd vhci_hcd.0: Device attached [ 914.903369][T18018] rdma_rxe: rxe_newlink: failed to add wg2 [ 915.170616][ T5520] usb 42-1: SetAddress Request (99) to port 0 [ 915.173092][ T5520] usb 42-1: new SuperSpeed USB device number 99 using vhci_hcd [ 915.401111][T18007] vhci_hcd: connection reset by peer [ 915.414955][T11035] vhci_hcd vhci_hcd.0: stop threads [ 915.417706][T11035] vhci_hcd vhci_hcd.0: release socket [ 915.442513][T11035] vhci_hcd vhci_hcd.0: disconnect device [ 915.723104][T18019] vhci_hcd: connection reset by peer [ 915.728135][T11035] vhci_hcd vhci_hcd.2: stop threads [ 915.736618][T11035] vhci_hcd vhci_hcd.2: release socket [ 915.747122][T11035] vhci_hcd vhci_hcd.2: disconnect device [ 916.287594][T18038] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 916.328596][T18038] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 916.330692][T18038] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 916.349315][T18038] vhci_hcd vhci_hcd.0: Device attached [ 916.991765][T18041] vhci_hcd: connection closed [ 917.016828][T11035] vhci_hcd vhci_hcd.0: stop threads [ 917.379013][T11035] vhci_hcd vhci_hcd.0: release socket [ 917.385594][T11035] vhci_hcd vhci_hcd.0: disconnect device [ 917.968489][T18054] siw: device registration error -23 [ 918.867243][T18050] kexec: Could not allocate control_code_buffer [ 919.084061][T18066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3025'. [ 919.990479][T14371] usb 38-1: device descriptor read/8, error -110 [ 920.097594][T18071] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 920.099701][T18071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 920.100603][T14371] usb usb38-port1: unable to enumerate USB device [ 920.109351][T18071] vhci_hcd vhci_hcd.0: Device attached [ 920.130698][T18071] rdma_rxe: rxe_newlink: failed to add wg2 [ 920.230834][ T5520] usb 42-1: device descriptor read/8, error -110 [ 920.384220][ T5813] usb 46-1: SetAddress Request (107) to port 0 [ 920.390993][ T5813] usb 46-1: new SuperSpeed USB device number 107 using vhci_hcd [ 920.641035][ T5520] usb usb42-port1: attempt power cycle [ 921.210329][T18077] kexec: Could not allocate control_code_buffer [ 921.231112][ T5520] usb usb42-port1: unable to enumerate USB device [ 921.439004][T18073] vhci_hcd: connection reset by peer [ 921.465715][ T5582] vhci_hcd vhci_hcd.4: stop threads [ 921.467694][ T5582] vhci_hcd vhci_hcd.4: release socket [ 921.469735][ T5582] vhci_hcd vhci_hcd.4: disconnect device [ 921.673715][T18092] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 921.697451][T18097] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 921.700034][T18097] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 921.709433][T18097] vhci_hcd vhci_hcd.0: Device attached [ 921.746101][T18095] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 921.748201][T18095] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 921.751208][T18095] vhci_hcd vhci_hcd.0: Device attached [ 921.787369][T18095] rdma_rxe: rxe_newlink: failed to add wg2 [ 922.000856][ T5520] usb 38-1: SetAddress Request (111) to port 0 [ 922.003099][ T5520] usb 38-1: new SuperSpeed USB device number 111 using vhci_hcd [ 922.020497][ T7810] usb 42-1: SetAddress Request (103) to port 0 [ 922.026505][ T7810] usb 42-1: new SuperSpeed USB device number 103 using vhci_hcd [ 922.190014][T18098] vhci_hcd: connection reset by peer [ 922.193103][ T5582] vhci_hcd vhci_hcd.0: stop threads [ 922.195994][ T5582] vhci_hcd vhci_hcd.0: release socket [ 922.198001][ T5582] vhci_hcd vhci_hcd.0: disconnect device [ 922.440442][T18100] vhci_hcd: connection reset by peer [ 922.446181][ T5582] vhci_hcd vhci_hcd.2: stop threads [ 922.449135][ T5582] vhci_hcd vhci_hcd.2: release socket [ 922.455501][ T5582] vhci_hcd vhci_hcd.2: disconnect device [ 923.742071][T18110] kexec: Could not allocate control_code_buffer [ 924.414272][T18132] syz2: rxe_newlink: already configured on wg2 [ 925.501183][ T5813] usb 46-1: device descriptor read/8, error -110 [ 925.785400][T18142] kexec: Could not allocate control_code_buffer [ 925.913082][ T5813] usb usb46-port1: attempt power cycle [ 926.611358][ T5813] usb usb46-port1: unable to enumerate USB device [ 926.624404][T18160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3048'. [ 927.101017][ T7810] usb 42-1: device descriptor read/8, error -110 [ 927.160255][ T5520] usb 38-1: device descriptor read/8, error -110 [ 927.318616][T18175] rdma_rxe: rxe_newlink: failed to add wg2 [ 927.596494][ T5520] usb usb38-port1: attempt power cycle [ 927.851215][ T7810] usb usb42-port1: attempt power cycle [ 928.175903][ T5520] usb usb38-port1: unable to enumerate USB device [ 928.851156][ T7810] usb usb42-port1: unable to enumerate USB device [ 929.414418][T18198] binder: 18197:18198 ioctl 4018620d 0 returned -22 [ 929.703010][T18205] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 929.705009][T18205] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 929.707743][T18205] vhci_hcd vhci_hcd.0: Device attached [ 929.753339][T18205] syz2: rxe_newlink: already configured on wg2 [ 930.000521][ T5520] usb 38-1: SetAddress Request (115) to port 0 [ 930.012855][ T5520] usb 38-1: new SuperSpeed USB device number 115 using vhci_hcd [ 930.359225][T18201] kexec: Could not allocate control_code_buffer [ 931.009196][T18206] vhci_hcd: connection reset by peer [ 931.013753][T11035] vhci_hcd vhci_hcd.0: stop threads [ 931.021287][T11035] vhci_hcd vhci_hcd.0: release socket [ 931.026299][T11035] vhci_hcd vhci_hcd.0: disconnect device [ 931.114923][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.148222][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.714273][T18226] siw: device registration error -23 [ 933.372705][T18240] bond0: Error: CAN devices cannot be enslaved [ 933.428177][T18230] kexec: Could not allocate control_code_buffer [ 933.760466][T15318] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 933.876615][T18251] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 933.878725][T18251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 933.884609][T18251] vhci_hcd vhci_hcd.0: Device attached [ 933.901634][T15318] usb 5-1: device descriptor read/64, error -71 [ 933.941099][T18251] rdma_rxe: rxe_newlink: failed to add wg2 [ 934.169049][ T55] usb 44-1: SetAddress Request (119) to port 0 [ 934.200884][ T55] usb 44-1: new SuperSpeed USB device number 119 using vhci_hcd [ 934.220672][T18258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3072'. [ 934.667924][T15318] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 935.100814][ T5520] usb 38-1: device descriptor read/8, error -110 [ 935.190568][T15318] usb 5-1: device descriptor read/64, error -71 [ 935.400492][T15318] usb usb5-port1: attempt power cycle [ 935.731549][ T5520] usb usb38-port1: attempt power cycle [ 935.761796][T15318] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 935.793577][T15318] usb 5-1: device descriptor read/8, error -71 [ 935.929293][T18276] rdma_rxe: rxe_newlink: failed to add wg2 [ 936.031364][T15318] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 936.067348][T15318] usb 5-1: device descriptor read/8, error -71 [ 936.083823][T18269] rdma_rxe: rxe_newlink: failed to add wg2 [ 936.255956][T15318] usb usb5-port1: unable to enumerate USB device [ 936.781465][ T5520] usb usb38-port1: unable to enumerate USB device [ 937.663940][T18252] vhci_hcd: connection reset by peer [ 937.667127][ T5582] vhci_hcd vhci_hcd.3: stop threads [ 937.674594][ T5582] vhci_hcd vhci_hcd.3: release socket [ 937.681681][ T5582] vhci_hcd vhci_hcd.3: disconnect device [ 938.132259][T18305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3082'. [ 938.856225][T18310] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 938.858448][T18310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.869221][T18310] vhci_hcd vhci_hcd.0: Device attached [ 938.913447][T18310] rdma_rxe: rxe_newlink: failed to add wg2 [ 939.214876][ T5520] usb 46-1: SetAddress Request (111) to port 0 [ 939.230448][ T5520] usb 46-1: new SuperSpeed USB device number 111 using vhci_hcd [ 939.269730][ T55] usb 44-1: device descriptor read/8, error -110 [ 939.344335][T18320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3086'. [ 939.353982][T18320] netlink: 'syz.0.3086': attribute type 1 has an invalid length. [ 939.616287][T18323] rdma_rxe: rxe_newlink: failed to add wg2 [ 939.682464][ T55] usb usb44-port1: attempt power cycle [ 939.840178][T18326] rdma_rxe: rxe_newlink: failed to add wg2 [ 940.272438][ T55] usb usb44-port1: unable to enumerate USB device [ 940.966967][T18311] vhci_hcd: connection reset by peer [ 940.970667][T11035] vhci_hcd vhci_hcd.4: stop threads [ 940.979059][T11035] vhci_hcd vhci_hcd.4: release socket [ 940.990812][T11035] vhci_hcd vhci_hcd.4: disconnect device [ 944.040554][T18366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3097'. [ 944.109042][T18368] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 944.300719][ T5520] usb 46-1: device descriptor read/8, error -110 [ 944.692957][ T5520] usb usb46-port1: attempt power cycle [ 945.076569][T18381] rdma_rxe: rxe_newlink: failed to add wg2 [ 945.253442][T18384] syz2: rxe_newlink: already configured on wg2 [ 945.290319][ T5520] usb usb46-port1: unable to enumerate USB device [ 946.423759][T18386] kexec: Could not allocate control_code_buffer [ 946.719405][T18400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3107'. [ 946.833498][T18402] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 946.858237][T18402] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 946.860335][T18402] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 946.873611][T18402] vhci_hcd vhci_hcd.0: Device attached [ 946.899599][T10201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.904392][T10201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.150743][ T5520] usb 38-1: SetAddress Request (119) to port 0 [ 947.153602][ T5520] usb 38-1: new SuperSpeed USB device number 119 using vhci_hcd [ 947.968016][T18412] siw: device registration error -23 [ 947.982737][T18404] vhci_hcd: connection reset by peer [ 947.997167][T11035] vhci_hcd vhci_hcd.0: stop threads [ 948.008759][T11035] vhci_hcd vhci_hcd.0: release socket [ 948.020957][T11035] vhci_hcd vhci_hcd.0: disconnect device [ 949.544458][T18426] rdma_rxe: rxe_newlink: failed to add wg2 [ 949.547041][T18427] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 949.569181][T18427] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 949.571616][T18427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 949.581167][T18427] vhci_hcd vhci_hcd.0: Device attached [ 949.672178][T18432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3114'. [ 950.327769][T18430] vhci_hcd: connection closed [ 950.328641][T11035] vhci_hcd vhci_hcd.0: stop threads [ 950.338399][T11035] vhci_hcd vhci_hcd.0: release socket [ 950.342672][T11035] vhci_hcd vhci_hcd.0: disconnect device [ 950.430576][T18438] siw: device registration error -23 [ 950.619507][T18441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3117'. [ 952.086069][T18454] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 952.096392][T18454] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 952.098852][T18454] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 952.104104][T18454] vhci_hcd vhci_hcd.0: Device attached [ 952.123710][T10201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.127374][T10201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.206411][T18457] siw: device registration error -23 [ 952.220536][ T5520] usb 38-1: device descriptor read/8, error -110 [ 952.380928][T14371] usb 42-1: SetAddress Request (107) to port 0 [ 952.383098][T14371] usb 42-1: new SuperSpeed USB device number 107 using vhci_hcd [ 952.621463][ T5520] usb usb38-port1: attempt power cycle [ 952.665858][T18455] vhci_hcd: connection reset by peer [ 952.667841][ T5582] vhci_hcd vhci_hcd.2: stop threads [ 952.669599][ T5582] vhci_hcd vhci_hcd.2: release socket [ 952.673298][ T5582] vhci_hcd vhci_hcd.2: disconnect device [ 953.253797][ T5520] usb usb38-port1: unable to enumerate USB device [ 953.390297][T18472] syz2: rxe_newlink: already configured on wg2 [ 953.937390][T18478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'. [ 954.116511][T18474] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 954.119125][T18474] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 954.122529][T18474] vhci_hcd vhci_hcd.0: Device attached [ 954.546402][T18474] rdma_rxe: rxe_newlink: failed to add wg2 [ 954.550149][T18479] vhci_hcd: connection closed [ 954.550810][ T5582] vhci_hcd vhci_hcd.4: stop threads [ 954.560504][ T5582] vhci_hcd vhci_hcd.4: release socket [ 954.562327][ T5582] vhci_hcd vhci_hcd.4: disconnect device [ 956.107878][T18499] rdma_rxe: rxe_newlink: failed to add wg2 [ 956.373306][T18507] siw: device registration error -23 [ 957.107882][T18519] siw: device registration error -23 [ 957.406906][T18522] rdma_rxe: rxe_newlink: failed to add wg2 [ 957.420672][T14371] usb 42-1: device descriptor read/8, error -110 [ 957.811646][T14371] usb usb42-port1: attempt power cycle [ 958.087393][T18530] siw: device registration error -23 [ 958.219183][T18533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3139'. [ 959.141002][T14371] usb usb42-port1: unable to enumerate USB device [ 959.488396][T18543] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 959.526993][T18543] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 959.529700][T18543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 959.540915][T18543] vhci_hcd vhci_hcd.0: Device attached [ 959.580123][T10205] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 959.810557][T14371] usb 42-1: SetAddress Request (111) to port 0 [ 959.815205][T14371] usb 42-1: new SuperSpeed USB device number 111 using vhci_hcd [ 959.998198][T18550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3146'. [ 960.060614][T18544] vhci_hcd: connection reset by peer [ 960.407536][ T5582] vhci_hcd vhci_hcd.2: stop threads [ 960.411657][ T5582] vhci_hcd vhci_hcd.2: release socket [ 960.420867][ T5582] vhci_hcd vhci_hcd.2: disconnect device [ 961.159888][T18567] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 961.176640][T18567] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 961.179117][T18567] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 961.182583][T18567] vhci_hcd vhci_hcd.0: Device attached [ 961.216794][T17042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.230914][T17042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.450526][ T5520] usb 44-1: SetAddress Request (123) to port 0 [ 961.452851][ T5520] usb 44-1: new SuperSpeed USB device number 123 using vhci_hcd [ 961.796089][T18568] vhci_hcd: connection reset by peer [ 961.798145][ T5582] vhci_hcd vhci_hcd.3: stop threads [ 961.800749][ T5582] vhci_hcd vhci_hcd.3: release socket [ 961.802810][ T5582] vhci_hcd vhci_hcd.3: disconnect device [ 962.593752][T18595] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 962.608546][T18595] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 962.610999][T18595] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 962.621706][T18595] vhci_hcd vhci_hcd.0: Device attached [ 963.022190][T18601] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 963.024232][T18601] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 963.032779][T18601] vhci_hcd vhci_hcd.0: Device attached [ 963.079454][T10201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.083309][T10201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.231872][T18596] vhci_hcd: connection closed [ 963.232362][ T5582] vhci_hcd vhci_hcd.3: stop threads [ 963.235672][ T5582] vhci_hcd vhci_hcd.3: release socket [ 963.237435][ T5582] vhci_hcd vhci_hcd.3: disconnect device [ 963.320712][ T29] usb 46-1: SetAddress Request (115) to port 0 [ 963.323487][ T29] usb 46-1: new SuperSpeed USB device number 115 using vhci_hcd [ 963.581250][T18602] vhci_hcd: connection reset by peer [ 963.583385][ T5582] vhci_hcd vhci_hcd.4: stop threads [ 963.585049][ T5582] vhci_hcd vhci_hcd.4: release socket [ 963.586801][ T5582] vhci_hcd vhci_hcd.4: disconnect device [ 964.570054][T18618] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 964.626667][T18618] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 964.629091][T18618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 964.640719][T18618] vhci_hcd vhci_hcd.0: Device attached [ 964.860662][T14371] usb 42-1: device descriptor read/8, error -110 [ 965.004602][T18621] vhci_hcd: connection closed [ 965.006267][ T12] vhci_hcd vhci_hcd.3: stop threads [ 965.018626][ T12] vhci_hcd vhci_hcd.3: release socket [ 965.026818][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 965.261479][T14371] usb usb42-port1: attempt power cycle [ 965.832218][T14371] usb usb42-port1: unable to enumerate USB device [ 966.540599][ T5520] usb 44-1: device descriptor read/8, error -110 [ 967.036448][ T5520] usb usb44-port1: attempt power cycle [ 967.557399][T18643] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 967.767909][T18643] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 967.770755][T18643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 967.813402][T18643] vhci_hcd vhci_hcd.0: Device attached [ 967.815958][T16352] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 968.001741][T18646] vhci_hcd: connection closed [ 968.002091][ T12] vhci_hcd vhci_hcd.2: stop threads [ 968.005556][ T12] vhci_hcd vhci_hcd.2: release socket [ 968.007311][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 968.137924][T18655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3170'. [ 968.371128][ T5520] usb usb44-port1: unable to enumerate USB device [ 968.376296][T18656] syz2: rxe_newlink: already configured on wg2 [ 968.394350][ T29] usb 46-1: device descriptor read/8, error -110 [ 968.864626][ T29] usb usb46-port1: attempt power cycle [ 969.129767][T18664] siw: device registration error -23 [ 969.471512][ T29] usb usb46-port1: unable to enumerate USB device [ 970.039589][T18672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3174'. [ 973.008774][T18697] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 973.057266][T18697] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 973.059611][T18697] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 973.077628][T18697] vhci_hcd vhci_hcd.0: Device attached [ 973.351216][ T5520] usb 42-1: SetAddress Request (116) to port 0 [ 973.354168][ T5520] usb 42-1: new SuperSpeed USB device number 116 using vhci_hcd [ 973.477931][T18710] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 973.480119][T18710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 973.490773][T18710] vhci_hcd vhci_hcd.0: Device attached [ 973.640110][T18698] vhci_hcd: connection reset by peer [ 973.643942][ T12] vhci_hcd vhci_hcd.2: stop threads [ 973.647665][ T12] vhci_hcd vhci_hcd.2: release socket [ 973.654703][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 973.733410][T18711] vhci_hcd: connection closed [ 973.734457][ T12] vhci_hcd vhci_hcd.4: stop threads [ 973.739683][ T12] vhci_hcd vhci_hcd.4: release socket [ 973.745533][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 973.760571][ T29] usb 46-1: enqueue for inactive port 0 [ 974.367866][ T29] usb usb46-port1: attempt power cycle [ 974.599168][T18728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3188'. [ 974.956327][ T29] usb usb46-port1: unable to enumerate USB device [ 975.318197][T18735] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 976.071564][T18737] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 976.080568][T18737] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 976.082742][T18737] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 976.085976][T18737] vhci_hcd vhci_hcd.0: Device attached [ 976.091462][T10201] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 976.201848][T18746] vhci_hcd: connection closed [ 976.202162][ T12] vhci_hcd vhci_hcd.3: stop threads [ 976.209219][ T12] vhci_hcd vhci_hcd.3: release socket [ 976.213861][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 976.399253][T18754] syz2: rxe_newlink: already configured on wg2 [ 977.424272][T18767] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 977.463358][T18767] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 977.466158][T18767] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 977.490786][T18767] vhci_hcd vhci_hcd.0: Device attached [ 977.560531][T16352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.561312][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3200'. [ 977.563086][T16352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.810492][T14371] usb 38-1: SetAddress Request (123) to port 0 [ 977.815940][T14371] usb 38-1: new SuperSpeed USB device number 123 using vhci_hcd [ 978.134055][T18769] vhci_hcd: connection reset by peer [ 978.144091][ T5582] vhci_hcd vhci_hcd.0: stop threads [ 978.146263][ T5582] vhci_hcd vhci_hcd.0: release socket [ 978.150483][ T5582] vhci_hcd vhci_hcd.0: disconnect device [ 978.391192][ T5520] usb 42-1: device descriptor read/8, error -110 [ 978.603689][T18787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3202'. [ 978.674507][T18788] rdma_rxe: rxe_newlink: failed to add wg2 [ 978.805983][ T5520] usb usb42-port1: attempt power cycle [ 979.496871][ T5520] usb usb42-port1: unable to enumerate USB device [ 979.685506][T18796] syz2: rxe_newlink: already configured on wg2 [ 980.995990][T18807] rdma_rxe: rxe_newlink: failed to add wg2 [ 981.136699][T18814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3210'. [ 981.138912][T18815] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 981.203528][T18815] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 981.206264][T18815] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 981.209906][T18815] vhci_hcd vhci_hcd.0: Device attached [ 981.268400][T10201] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 981.640492][ T29] usb 46-1: SetAddress Request (123) to port 0 [ 981.642604][ T29] usb 46-1: new SuperSpeed USB device number 123 using vhci_hcd [ 982.220944][T18822] rdma_rxe: rxe_newlink: failed to add wg2 [ 982.357296][T18816] vhci_hcd: connection reset by peer [ 982.360127][ T5582] vhci_hcd vhci_hcd.4: stop threads [ 982.362677][ T5582] vhci_hcd vhci_hcd.4: release socket [ 982.365262][ T5582] vhci_hcd vhci_hcd.4: disconnect device [ 982.767486][T18834] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 982.911965][T18834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 982.914303][T18834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 982.934146][T18834] vhci_hcd vhci_hcd.0: Device attached [ 983.650779][T18840] rdma_rxe: rxe_newlink: failed to add wg2 [ 984.331945][T18838] vhci_hcd: connection reset by peer [ 984.338620][ T12] vhci_hcd vhci_hcd.0: stop threads [ 984.340449][ T12] vhci_hcd vhci_hcd.0: release socket [ 984.362906][T14371] usb 38-1: device descriptor read/8, error -110 [ 984.363122][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 984.647225][T18858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3220'. [ 984.751501][T14371] usb usb38-port1: attempt power cycle [ 985.379225][T14371] usb usb38-port1: unable to enumerate USB device [ 986.700573][ T29] usb 46-1: device descriptor read/8, error -110 [ 987.141569][ T29] usb usb46-port1: attempt power cycle [ 987.252969][T18875] syz2: rxe_newlink: already configured on wg2 [ 987.877749][ T29] usb usb46-port1: unable to enumerate USB device [ 988.480075][T18874] rdma_rxe: rxe_newlink: failed to add wg2 [ 988.977526][T18887] kexec: Could not allocate control_code_buffer [ 991.275315][T18918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3234'. [ 991.953477][T18923] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 991.999619][T18923] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 992.001791][T18923] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 992.035173][T18923] vhci_hcd vhci_hcd.0: Device attached [ 992.075946][T10198] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 992.443231][T18924] vhci_hcd: connection closed [ 992.454380][ T12] vhci_hcd vhci_hcd.3: stop threads [ 992.467107][ T12] vhci_hcd vhci_hcd.3: release socket [ 992.481832][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 992.546990][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.552161][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.600998][T14371] usb 44-1: enqueue for inactive port 0 [ 992.670130][T18931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3237'. [ 994.036380][T14371] usb usb44-port1: attempt power cycle [ 994.722732][T18934] rdma_rxe: rxe_newlink: failed to add wg2 [ 994.784893][T14371] usb usb44-port1: unable to enumerate USB device [ 994.910739][T18945] rdma_rxe: rxe_newlink: failed to add wg2 [ 996.877676][T18972] siw: device registration error -23 [ 998.121217][T18977] syz2: rxe_newlink: already configured on wg2 [ 998.674705][T18990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3250'. [ 998.806949][T18985] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 998.844990][T18985] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 998.847442][T18985] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 998.853061][T18985] vhci_hcd vhci_hcd.0: Device attached [ 999.120721][T18991] vhci_hcd: connection closed [ 999.120865][ T5878] usb 44-1: SetAddress Request (5) to port 0 [ 999.128385][ T12] vhci_hcd vhci_hcd.3: stop threads [ 999.132846][ T12] vhci_hcd vhci_hcd.3: release socket [ 999.138633][ T5878] usb 44-1: new SuperSpeed USB device number 5 using vhci_hcd [ 999.141629][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 999.174153][ T5878] usb 44-1: enqueue for inactive port 0 [ 999.402355][T18971] rdma_rxe: rxe_newlink: failed to add wg2 [ 999.570975][ T5878] usb usb44-port1: attempt power cycle [ 1000.151809][ T5878] usb usb44-port1: unable to enumerate USB device [ 1001.589750][T19015] rdma_rxe: rxe_newlink: failed to add wg2 [ 1002.012031][T18900] syz.4.3229 (18900) used greatest stack depth: 18264 bytes left [ 1003.334440][T19025] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1003.384247][T19025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1003.386350][T19025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1003.390921][T19027] siw: device registration error -23 [ 1003.425509][T19025] vhci_hcd vhci_hcd.0: Device attached [ 1003.710338][ T29] usb 44-1: SetAddress Request (9) to port 0 [ 1003.748224][ T29] usb 44-1: new SuperSpeed USB device number 9 using vhci_hcd [ 1004.921633][T19042] siw: device registration error -23 [ 1006.158093][T19046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3263'. [ 1006.341322][T14371] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1007.168256][T19026] vhci_hcd: connection reset by peer [ 1007.331981][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1007.353021][ T12] vhci_hcd vhci_hcd.3: release socket [ 1007.355506][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1008.028722][T19050] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1008.351506][T19050] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1008.354176][T19050] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1008.370280][T19050] vhci_hcd vhci_hcd.0: Device attached [ 1008.542708][T19066] vhci_hcd: connection closed [ 1008.543128][ T5582] vhci_hcd vhci_hcd.0: stop threads [ 1008.578320][ T5582] vhci_hcd vhci_hcd.0: release socket [ 1008.597774][ T5582] vhci_hcd vhci_hcd.0: disconnect device [ 1008.630513][ T2318] usb 38-1: enqueue for inactive port 0 [ 1008.860525][ T29] usb 44-1: device descriptor read/8, error -110 [ 1009.131401][ T2318] usb usb38-port1: attempt power cycle [ 1009.170190][T19072] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1009.233273][T19072] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1009.235337][T19072] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1009.243571][T19072] vhci_hcd vhci_hcd.0: Device attached [ 1009.273874][ T29] usb usb44-port1: attempt power cycle [ 1009.479053][ T48] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1009.510716][T14371] usb 46-1: SetAddress Request (127) to port 0 [ 1009.513397][T14371] usb 46-1: new SuperSpeed USB device number 127 using vhci_hcd [ 1009.639396][T18947] syz.3.3240 (18947) used greatest stack depth: 18200 bytes left [ 1009.733116][ T2318] usb usb38-port1: unable to enumerate USB device [ 1009.935728][ T29] usb usb44-port1: unable to enumerate USB device [ 1010.102136][T19076] vhci_hcd: connection reset by peer [ 1010.107154][ T5582] vhci_hcd vhci_hcd.4: stop threads [ 1010.108820][ T5582] vhci_hcd vhci_hcd.4: release socket [ 1010.133589][ T5582] vhci_hcd vhci_hcd.4: disconnect device [ 1012.455184][T19094] kexec: Could not allocate control_code_buffer [ 1014.407375][T19131] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1014.449983][T19131] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1014.452460][T19131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1014.477517][T19131] vhci_hcd vhci_hcd.0: Device attached [ 1014.516338][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.519877][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.550779][T14371] usb 46-1: device descriptor read/8, error -110 [ 1014.571632][T19128] binder: 19127:19128 ioctl c0306201 0 returned -14 [ 1014.712008][T19132] vhci_hcd: connection closed [ 1014.712720][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1014.718337][ T12] vhci_hcd vhci_hcd.2: release socket [ 1014.723469][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1014.771053][ T29] usb 42-1: enqueue for inactive port 0 [ 1014.946414][T14371] usb usb46-port1: attempt power cycle [ 1015.265285][ T29] usb usb42-port1: attempt power cycle [ 1015.533321][T14371] usb usb46-port1: unable to enumerate USB device [ 1015.808469][T19143] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1015.862334][ T29] usb usb42-port1: unable to enumerate USB device [ 1015.868499][T19143] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1015.871074][T19143] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1015.896459][T19143] vhci_hcd vhci_hcd.0: Device attached [ 1016.161082][ T29] usb 38-1: SetAddress Request (5) to port 0 [ 1016.163089][ T29] usb 38-1: new SuperSpeed USB device number 5 using vhci_hcd [ 1016.209718][T19144] vhci_hcd: connection reset by peer [ 1016.216898][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1016.218648][ T12] vhci_hcd vhci_hcd.0: release socket [ 1016.225078][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1016.460625][T19151] siw: device registration error -23 [ 1017.458917][T19158] binder: 19157:19158 ioctl c0306201 0 returned -14 [ 1018.049062][T19169] rdma_rxe: rxe_newlink: failed to add wg2 [ 1018.681183][T19165] kexec: Could not allocate control_code_buffer [ 1018.683303][T19174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1018.685270][T19174] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1018.701710][T19174] vhci_hcd vhci_hcd.0: Device attached [ 1018.754568][T17042] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1018.980526][T14371] usb 44-1: SetAddress Request (13) to port 0 [ 1018.983089][T14371] usb 44-1: new SuperSpeed USB device number 13 using vhci_hcd [ 1019.212932][T19176] vhci_hcd: connection reset by peer [ 1019.216400][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1019.218927][ T12] vhci_hcd vhci_hcd.3: release socket [ 1019.221659][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1019.685761][T19193] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1019.727844][T19193] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1019.729958][T19193] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1019.764367][T19193] vhci_hcd vhci_hcd.0: Device attached [ 1020.040561][ T5520] usb 46-1: SetAddress Request (5) to port 0 [ 1020.043120][ T5520] usb 46-1: new SuperSpeed USB device number 5 using vhci_hcd [ 1020.155485][T19194] vhci_hcd: connection reset by peer [ 1020.175328][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1020.190005][ T12] vhci_hcd vhci_hcd.4: release socket [ 1020.203751][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1021.044399][T19207] siw: device registration error -23 [ 1021.071168][T19208] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1021.089949][T19208] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1021.092544][T19208] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1021.108888][T19208] vhci_hcd vhci_hcd.0: Device attached [ 1021.263513][ T29] usb 38-1: device descriptor read/8, error -110 [ 1021.565795][T19209] vhci_hcd: connection closed [ 1021.566717][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1021.586553][ T12] vhci_hcd vhci_hcd.3: release socket [ 1021.593624][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1021.763414][ T29] usb usb38-port1: attempt power cycle [ 1021.814297][T19216] syz2: rxe_newlink: already configured on wg2 [ 1022.342661][ T29] usb usb38-port1: unable to enumerate USB device [ 1022.386917][T19219] binder: 19218:19219 ioctl c0306201 0 returned -14 [ 1022.567188][T19224] binder: 19223:19224 ioctl c0306201 0 returned -14 [ 1022.911748][T19230] rdma_rxe: rxe_newlink: failed to add wg2 [ 1023.767210][T19247] rdma_rxe: rxe_newlink: failed to add wg2 [ 1024.061799][T14371] usb 44-1: device descriptor read/8, error -110 [ 1024.102838][T19244] syz2: rxe_newlink: already configured on wg2 [ 1024.456706][T14371] usb usb44-port1: attempt power cycle [ 1025.100702][ T5520] usb 46-1: device descriptor read/8, error -110 [ 1025.113096][T14371] usb usb44-port1: unable to enumerate USB device [ 1025.308871][T19267] rdma_rxe: rxe_newlink: failed to add wg2 [ 1025.340465][ T5091] Bluetooth: hci3: command 0x0406 tx timeout [ 1025.521271][ T5520] usb usb46-port1: attempt power cycle [ 1026.100224][T19282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3328'. [ 1026.101725][ T5520] usb usb46-port1: unable to enumerate USB device [ 1026.148701][T19278] binder: 19277:19278 ioctl c0306201 0 returned -14 [ 1026.691272][T19291] rdma_rxe: rxe_newlink: failed to add wg2 [ 1027.519037][T19300] rdma_rxe: rxe_newlink: failed to add wg2 [ 1027.569568][T19299] syz2: rxe_newlink: already configured on wg2 [ 1028.742932][T19315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 1029.567418][T19326] rdma_rxe: rxe_newlink: failed to add wg2 [ 1029.986497][T19329] rdma_rxe: rxe_newlink: failed to add wg2 [ 1030.069296][T19335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3332'. [ 1032.992301][T19356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3340'. [ 1033.432269][T19363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3342'. [ 1033.448208][T19365] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1033.450948][T19365] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1033.477416][T19364] binder: 19359:19364 ioctl c0306201 0 returned -14 [ 1033.494458][T19365] vhci_hcd vhci_hcd.0: Device attached [ 1034.102152][T14371] usb 42-1: SetAddress Request (124) to port 0 [ 1034.109713][T14371] usb 42-1: new SuperSpeed USB device number 124 using vhci_hcd [ 1034.233094][T19365] rdma_rxe: rxe_newlink: failed to add wg2 [ 1035.587736][T19389] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1035.590070][T19389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1035.632757][T19389] vhci_hcd vhci_hcd.0: Device attached [ 1035.757466][T19389] rdma_rxe: rxe_newlink: failed to add wg2 [ 1035.940511][ T29] usb 44-1: SetAddress Request (17) to port 0 [ 1035.950727][ T29] usb 44-1: new SuperSpeed USB device number 17 using vhci_hcd [ 1036.192998][T19405] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1036.317083][T19406] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1036.319177][T19406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1036.322231][T19406] vhci_hcd vhci_hcd.0: Device attached [ 1036.465413][T19411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3352'. [ 1036.590533][ T5520] usb 46-1: SetAddress Request (9) to port 0 [ 1036.603825][ T5520] usb 46-1: new SuperSpeed USB device number 9 using vhci_hcd [ 1036.869697][T19407] vhci_hcd: connection reset by peer [ 1036.881253][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1036.901272][ T12] vhci_hcd vhci_hcd.4: release socket [ 1036.920970][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1038.445838][T19427] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1038.474960][T19427] vhci_hcd vhci_hcd.0: port 0 already used [ 1038.584352][T19431] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1038.586438][T19431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1038.601587][T19366] vhci_hcd: connection reset by peer [ 1038.621237][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1038.623807][T19431] vhci_hcd vhci_hcd.0: Device attached [ 1038.624405][ T12] vhci_hcd vhci_hcd.2: release socket [ 1038.627971][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1038.692138][T19431] rdma_rxe: rxe_newlink: failed to add wg2 [ 1039.262258][T14371] usb 42-1: device descriptor read/8, error -110 [ 1039.307366][T19390] vhci_hcd: connection reset by peer [ 1039.314538][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1039.327495][ T12] vhci_hcd vhci_hcd.3: release socket [ 1039.330332][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1039.663027][T14371] usb usb42-port1: attempt power cycle [ 1039.971073][T19430] kexec: Could not allocate control_code_buffer [ 1040.250498][T14371] usb usb42-port1: unable to enumerate USB device [ 1040.654408][T19465] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1040.688344][T19465] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1040.690449][T19465] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1040.703848][T19465] vhci_hcd vhci_hcd.0: Device attached [ 1040.918252][T10198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.921946][T10198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.100991][ T29] usb 44-1: device descriptor read/8, error -110 [ 1041.160523][T14371] usb 38-1: SetAddress Request (9) to port 0 [ 1041.170636][T14371] usb 38-1: new SuperSpeed USB device number 9 using vhci_hcd [ 1041.288661][T19466] vhci_hcd: connection reset by peer [ 1041.293559][ T5582] vhci_hcd vhci_hcd.0: stop threads [ 1041.295906][ T5582] vhci_hcd vhci_hcd.0: release socket [ 1041.309649][ T5582] vhci_hcd vhci_hcd.0: disconnect device [ 1041.351036][T19471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3365'. [ 1041.501304][ T29] usb usb44-port1: attempt power cycle [ 1041.942299][T19432] vhci_hcd: connection reset by peer [ 1041.953440][ T5582] vhci_hcd vhci_hcd.4: stop threads [ 1041.966060][ T5582] vhci_hcd vhci_hcd.4: release socket [ 1041.984823][ T5520] usb 46-1: device descriptor read/8, error -110 [ 1041.984849][ T5582] vhci_hcd vhci_hcd.4: disconnect device [ 1042.081438][ T29] usb usb44-port1: unable to enumerate USB device [ 1042.403815][ T5520] usb usb46-port1: attempt power cycle [ 1042.912240][T19486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1043.071731][ T5520] usb usb46-port1: unable to enumerate USB device [ 1044.536187][T19513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3378'. [ 1045.787922][ T2318] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1045.931779][ T2318] usb 7-1: device descriptor read/64, error -71 [ 1046.170448][ T2318] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1046.220520][T14371] usb 38-1: device descriptor read/8, error -110 [ 1046.300530][ T2318] usb 7-1: device descriptor read/64, error -71 [ 1046.411913][ T2318] usb usb7-port1: attempt power cycle [ 1046.611110][T14371] usb usb38-port1: attempt power cycle [ 1046.750631][ T2318] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1046.781054][ T2318] usb 7-1: device descriptor read/8, error -71 [ 1047.040486][ T2318] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1047.071040][ T2318] usb 7-1: device descriptor read/8, error -71 [ 1047.181778][ T2318] usb usb7-port1: unable to enumerate USB device [ 1047.184136][T14371] usb usb38-port1: unable to enumerate USB device [ 1047.239505][T19545] kexec: Could not allocate control_code_buffer [ 1047.309805][T19562] ehci-pci 0000:00:1d.7: remove, state 1 [ 1047.312550][T19562] usb usb1: USB disconnect, device number 1 [ 1047.315038][T19562] usb 1-1: USB disconnect, device number 2 [ 1047.527712][T19562] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 1047.821568][ T2318] usb 2-1: new full-speed USB device number 3 using uhci_hcd [ 1047.996375][ T2318] usb 2-1: not running at top speed; connect to a high speed hub [ 1048.001309][ T2318] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 1048.025162][ T2318] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 1048.031049][ T2318] usb 2-1: Product: QEMU USB Tablet [ 1048.033995][ T2318] usb 2-1: Manufacturer: QEMU [ 1048.037819][ T2318] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 1048.072631][ T2318] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input14 [ 1048.167836][ T2318] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 1048.193034][T19565] usb 2-1: USB disconnect, device number 3 [ 1048.627204][T19565] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 1048.646588][T19580] fido_id[19580]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory [ 1048.656159][T19565] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 1048.681345][T19565] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 1048.710832][T19565] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 1048.725014][T19565] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 1048.734592][T19565] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1048.738251][T19565] usb usb1: Product: EHCI Host Controller [ 1048.741208][T19565] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 1048.744126][T19565] usb usb1: SerialNumber: 0000:00:1d.7 [ 1048.774585][T19565] hub 1-0:1.0: USB hub found [ 1048.783684][T19565] hub 1-0:1.0: 6 ports detected [ 1048.846405][T19565] hub 2-0:1.0: USB hub found [ 1048.851190][T19565] hub 2-0:1.0: 2 ports detected [ 1048.913406][T19565] hub 3-0:1.0: USB hub found [ 1048.920218][T19565] hub 3-0:1.0: 2 ports detected [ 1048.976920][T19565] hub 4-0:1.0: USB hub found [ 1048.979663][T19565] hub 4-0:1.0: 2 ports detected [ 1049.080670][ T5878] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 1049.271469][ T5878] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 1049.292496][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 1049.297220][ T5878] usb 1-1: Product: QEMU USB Tablet [ 1049.301826][ T5878] usb 1-1: Manufacturer: QEMU [ 1049.325161][ T5878] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 1049.367773][ T5878] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input15 [ 1049.437016][ T5878] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 1049.600621][T18000] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1049.633451][T19600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3401'. [ 1049.783829][T18000] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1049.794552][T18000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 1049.799535][T18000] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1049.803709][T18000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.810004][T19595] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1049.819186][T18000] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 1049.833544][T18000] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 1050.110053][T19609] jffs2: notice: (19609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1050.180773][T19595] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1050.191822][T19595] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1050.199726][T19595] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1050.238523][T19606] wg2 speed is unknown, defaulting to 1000 [ 1050.316714][T19595] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1050.633167][ T5878] usb 7-1: USB disconnect, device number 64 [ 1050.651097][ T5878] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1050.662754][ T5878] spcp8x5 7-1:1.0: device disconnected [ 1051.266136][T19625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3407'. [ 1051.271500][T19625] netlink: 'syz.0.3407': attribute type 2 has an invalid length. [ 1051.410885][T19612] kexec: Could not allocate control_code_buffer [ 1051.472214][T19628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3408'. [ 1052.325818][T19638] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.447784][T19638] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.664716][T19638] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.769819][T19638] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.990520][ T5878] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1053.127771][ T5443] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1053.140441][ T5878] usb 8-1: Using ep0 maxpacket: 32 [ 1053.143305][ T5878] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1053.147938][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.155006][ T5878] usb 8-1: config 0 descriptor?? [ 1053.166117][ T5878] as10x_usb: device has been detected [ 1053.175099][ T5878] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1053.206029][ T5878] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1053.248796][ T5878] as10x_usb: error during firmware upload part1 [ 1053.251934][ T5878] Registered device nBox DVB-T Dongle [ 1053.370078][T18000] usb 8-1: USB disconnect, device number 69 [ 1053.403089][T18000] Unregistered device nBox DVB-T Dongle [ 1053.407209][T18000] as10x_usb: device has been disconnected [ 1053.426199][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1053.706008][T19679] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1053.983773][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.986882][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.032436][T19689] random: crng reseeded on system resumption [ 1054.298676][T19686] rdma_rxe: rxe_newlink: failed to add wg2 [ 1054.348082][T19689] syz.0.3418 (19689) used greatest stack depth: 18040 bytes left [ 1054.484224][ T5443] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1054.982917][T19701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3420'. [ 1055.214501][T19703] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1055.217278][T19703] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1055.253212][T19703] vhci_hcd vhci_hcd.0: Device attached [ 1055.310696][T19703] syz2: rxe_newlink: already configured on wg2 [ 1055.332981][T19684] wg2 speed is unknown, defaulting to 1000 [ 1055.548475][ T2318] usb 38-1: SetAddress Request (13) to port 0 [ 1055.550519][ T2318] usb 38-1: new SuperSpeed USB device number 13 using vhci_hcd [ 1056.040809][T19716] jffs2: notice: (19716) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1056.077371][ T5443] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1056.226743][T19713] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1057.229338][T19743] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.464379][T19743] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.778966][T19752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3428'. [ 1058.141663][T19704] vhci_hcd: connection reset by peer [ 1058.158209][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1058.169588][ T12] vhci_hcd vhci_hcd.0: release socket [ 1058.174099][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1058.706146][T19743] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.846771][T19743] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.334017][ T5443] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1059.527631][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1059.625134][T19783] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1059.627851][T19783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1059.635816][T19783] vhci_hcd vhci_hcd.0: Device attached [ 1059.640165][T19788] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1059.657876][T19788] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 1059.660287][T19788] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 1059.663062][T19788] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1059.674965][T19788] pci 0000:00:01.0: Adding to iommu group 1 [ 1059.676666][T19783] rdma_rxe: rxe_newlink: failed to add wg2 [ 1059.704012][T19788] pci 0000:00:01.0: vgaarb: bridge control possible [ 1059.706623][T19788] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 1059.757322][T19788] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1059.767027][T19788] pci 0000:00:01.0: ROM [mem 0x81000000-0x8100ffff pref]: assigned [ 1059.772967][T19788] pci 0000:00:01.0: BAR 2 [mem 0x81010000-0x81010fff]: assigned [ 1059.804949][T19788] bochs-drm 0000:00:01.0: enabling device (0100 -> 0102) [ 1059.818006][T19788] [drm] Found bochs VGA, ID 0xb0c5. [ 1059.819821][T19788] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81010000. [ 1059.824833][ T5443] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1059.887163][T19788] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1059.900528][T14371] usb 44-1: SetAddress Request (21) to port 0 [ 1059.907641][T14371] usb 44-1: new SuperSpeed USB device number 21 using vhci_hcd [ 1060.086151][T19788] Console: switching to colour frame buffer device 160x50 [ 1060.096840][T19788] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1060.189158][ T5443] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1060.503640][T19818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3439'. [ 1060.582034][T19785] vhci_hcd: connection reset by peer [ 1060.586857][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1060.593653][ T12] vhci_hcd vhci_hcd.3: release socket [ 1060.599677][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1060.700925][ T2318] usb 38-1: device descriptor read/8, error -110 [ 1061.110987][ T2318] usb usb38-port1: attempt power cycle [ 1061.386060][T19829] wg2 speed is unknown, defaulting to 1000 [ 1061.672437][ T2318] usb usb38-port1: unable to enumerate USB device [ 1062.455851][T19842] kexec: Could not allocate control_code_buffer [ 1062.676856][T19854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1062.718216][T19856] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1062.724042][T19856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3449'. [ 1063.236796][T19871] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1063.239608][T19871] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1063.243502][T19871] vhci_hcd vhci_hcd.0: Device attached [ 1063.358428][T19869] syz2: rxe_newlink: already configured on wg2 [ 1063.444983][T19881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3452'. [ 1063.453298][T19871] rdma_rxe: rxe_newlink: failed to add wg2 [ 1065.002050][T19872] vhci_hcd: connection closed [ 1065.002199][ T5582] vhci_hcd vhci_hcd.3: stop threads [ 1065.005633][ T5582] vhci_hcd vhci_hcd.3: release socket [ 1065.007469][ T5582] vhci_hcd vhci_hcd.3: disconnect device [ 1065.020543][T14371] usb 44-1: device descriptor read/8, error -110 [ 1065.120086][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.128837][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.234583][T19919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.260978][T19921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3463'. [ 1065.426056][T14371] usb usb44-port1: attempt power cycle [ 1065.852832][T19929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1065.977826][T19910] kexec: Could not allocate control_code_buffer [ 1066.000966][T14371] usb usb44-port1: unable to enumerate USB device [ 1066.048730][T19932] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1066.050686][T19932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1066.058232][T19932] vhci_hcd vhci_hcd.0: Device attached [ 1066.077501][T19932] rdma_rxe: rxe_newlink: failed to add wg2 [ 1066.320623][T14371] usb 46-1: SetAddress Request (13) to port 0 [ 1066.322481][T14371] usb 46-1: new SuperSpeed USB device number 13 using vhci_hcd [ 1067.098039][T19949] rdma_rxe: rxe_newlink: failed to add wg2 [ 1067.696697][T19933] vhci_hcd: connection reset by peer [ 1067.699394][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1067.701907][ T12] vhci_hcd vhci_hcd.4: release socket [ 1067.712813][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1068.442850][ T1135] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1068.446202][ T1135] sr 2:0:0:0: [sr0] tag#11 Sense Key : Illegal Request [current] [ 1068.448987][ T1135] sr 2:0:0:0: [sr0] tag#11 Add. Sense: Invalid command operation code [ 1068.451920][ T1135] sr 2:0:0:0: [sr0] tag#11 CDB: opcode=0xf0 (vendor) f0 76 8e 74 58 35 d2 b6 ed f9 3d dd [ 1069.068480][T20008] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1069.070594][T20008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1069.074254][T20008] vhci_hcd vhci_hcd.0: Device attached [ 1069.092419][T20008] rdma_rxe: rxe_newlink: failed to add wg2 [ 1069.340471][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 1069.342695][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1069.717636][T20009] vhci_hcd: connection reset by peer [ 1069.720849][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1069.722611][ T12] vhci_hcd vhci_hcd.2: release socket [ 1069.725358][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1070.252528][T20025] binder: 20023:20025 ioctl c0306201 0 returned -14 [ 1070.279551][T20025] input: syz0 as /devices/virtual/input/input16 [ 1070.333488][ T42] audit: type=1326 audit(1786423756.001:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.4.3481" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x0 [ 1070.642852][T20038] trusted_key: syz.2.3483 sent an empty control message without MSG_MORE. [ 1071.320109][T20076] Console: switching to colour dummy device 80x25 [ 1071.368962][T20079] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1071.421223][T14371] usb 46-1: device descriptor read/8, error -110 [ 1071.434820][T20079] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1071.439804][T20079] pci 0000:00:01.0: BAR 2 [mem 0x81010000-0x81010fff] [ 1071.445920][T20079] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1071.451256][T20079] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1071.476294][T20079] pci 0000:00:01.0: Adding to iommu group 1 [ 1071.484787][T20079] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1071.486956][T20079] pci 0000:00:01.0: vgaarb: bridge control possible [ 1071.489133][T20079] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 1071.506788][T20079] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1071.510704][T20079] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1071.516172][T20079] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1071.525451][T20079] [drm] Found bochs VGA, ID 0xb0c5. [ 1071.527129][T20079] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1071.536442][T20079] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1071.629138][T20079] Console: switching to colour frame buffer device 160x50 [ 1071.638029][T20079] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1071.832582][T20094] netlink: 'syz.0.3490': attribute type 1 has an invalid length. [ 1071.833003][T14371] usb usb46-port1: attempt power cycle [ 1071.844615][ T5520] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1071.865185][T20094] bond1: entered promiscuous mode [ 1071.868752][T20094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1071.928923][T20094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1071.938652][T20094] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1071.942623][T20094] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1071.967671][T20094] bond1: (slave ip6gre1): making interface the new active one [ 1071.974500][T20094] ip6gre1: entered promiscuous mode [ 1071.992660][T20094] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1072.030502][ T5520] usb 7-1: Using ep0 maxpacket: 32 [ 1072.038312][ T5520] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1072.053822][ T5520] usb 7-1: config 0 has no interfaces? [ 1072.063082][ T5520] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.070502][ T5520] usb 7-1: Product: syz [ 1072.071923][ T5520] usb 7-1: Manufacturer: syz [ 1072.073386][ T5520] usb 7-1: SerialNumber: syz [ 1072.083955][ T5520] usb 7-1: config 0 descriptor?? [ 1072.182852][T20105] FAULT_INJECTION: forcing a failure. [ 1072.182852][T20105] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.187604][T20102] netlink: 'syz.0.3491': attribute type 10 has an invalid length. [ 1072.189563][T20105] CPU: 0 UID: 0 PID: 20105 Comm: syz.4.3492 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.189581][T20105] Tainted: [L]=SOFTLOCKUP [ 1072.189586][T20105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1072.189598][T20105] Call Trace: [ 1072.189610][T20105] [ 1072.189615][T20105] dump_stack_lvl+0x100/0x190 [ 1072.189705][T20105] should_fail_ex.cold+0x5/0xa [ 1072.189725][T20105] should_failslab+0xc2/0x120 [ 1072.189748][T20105] __kmalloc_noprof+0xfc/0x820 [ 1072.189766][T20105] ? rcu_is_watching+0x12/0xc0 [ 1072.189786][T20105] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1072.189826][T20105] tomoyo_realpath_from_path+0xb6/0x690 [ 1072.189845][T20105] tomoyo_path_number_perm+0x23c/0x580 [ 1072.189859][T20105] ? tomoyo_path_number_perm+0x22e/0x580 [ 1072.189873][T20105] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1072.189887][T20105] ? get_pid_task+0x106/0x250 [ 1072.189920][T20105] ? find_held_lock+0x2b/0x80 [ 1072.189938][T20105] ? __fget_files+0x215/0x3d0 [ 1072.189954][T20105] ? hook_file_ioctl_common+0x140/0x440 [ 1072.189968][T20105] ? __fget_files+0x215/0x3d0 [ 1072.189983][T20105] ? __fget_files+0x21f/0x3d0 [ 1072.189996][T20105] security_file_ioctl_compat+0xd3/0x230 [ 1072.190011][T20105] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1072.190030][T20105] __do_fast_syscall_32+0xe7/0x970 [ 1072.190072][T20105] ? lockdep_hardirqs_on+0x78/0x100 [ 1072.190089][T20105] do_fast_syscall_32+0x32/0x70 [ 1072.190105][T20105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.190120][T20105] RIP: 0023:0xf7f04fec [ 1072.190135][T20105] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 1072.190145][T20105] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1072.190157][T20105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185500 [ 1072.190164][T20105] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.190170][T20105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.190178][T20105] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1072.190185][T20105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.190199][T20105] [ 1072.190236][T20105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1072.193414][T20102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3491'. [ 1072.193818][T20102] dummy0: entered promiscuous mode [ 1072.252663][T20106] fuse: Bad value for 'group_id' [ 1072.263846][T20102] bridge0: port 3(dummy0) entered blocking state [ 1072.274678][T20102] bridge0: port 3(dummy0) entered disabled state [ 1072.277072][T20102] dummy0: entered allmulticast mode [ 1072.282508][T20106] fuse: Bad value for 'group_id' [ 1072.384678][T20102] bridge0: port 3(dummy0) entered blocking state [ 1072.389774][T20102] bridge0: port 3(dummy0) entered forwarding state [ 1072.397934][ T5734] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1072.432054][ T5520] usb 7-1: USB disconnect, device number 65 [ 1072.434661][T14371] usb usb46-port1: unable to enumerate USB device [ 1072.521911][T20073] kexec: Could not allocate control_code_buffer [ 1072.632244][ T5834] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1072.649343][ T5834] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1072.685850][T20115] rdma_rxe: rxe_newlink: failed to add wg2 [ 1072.888812][T20124] syzkaller0: entered promiscuous mode [ 1072.892324][T20124] syzkaller0: entered allmulticast mode [ 1072.978534][T20125] tmpfs: Unknown parameter 'n_inodes91' [ 1073.384086][T20135] rdma_rxe: rxe_newlink: failed to add wg2 [ 1074.387736][ T29] usb 42-1: device descriptor read/8, error -110 [ 1074.780518][ T5734] Bluetooth: hci2: command 0x0406 tx timeout [ 1074.783154][ T5834] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1074.783673][ T29] usb usb42-port1: attempt power cycle [ 1074.847904][ T5834] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1075.034300][T20157] netlink: 'syz.2.3503': attribute type 1 has an invalid length. [ 1075.171336][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3503'. [ 1075.351452][ T29] usb usb42-port1: unable to enumerate USB device [ 1076.854215][T20152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1076.857854][T20153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1076.862034][T20157] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1077.104059][T20169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1077.430681][T20173] syz2: rxe_newlink: already configured on wg2 [ 1078.066360][T20175] kexec: Could not allocate control_code_buffer [ 1078.514565][T20184] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1078.546268][T20184] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1078.548379][T20184] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1078.560045][T20184] vhci_hcd vhci_hcd.0: Device attached [ 1078.578529][T10203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.584641][T10203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.820623][ T29] usb 46-1: SetAddress Request (17) to port 0 [ 1078.823225][ T29] usb 46-1: new SuperSpeed USB device number 17 using vhci_hcd [ 1078.940567][ T5734] Bluetooth: hci3: command 0x0406 tx timeout [ 1078.940700][ T5834] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1078.958879][T20188] vhci_hcd: connection reset by peer [ 1078.963743][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1078.968155][ T12] vhci_hcd vhci_hcd.4: release socket [ 1078.971789][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1079.018781][T20194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3512'. [ 1079.050586][T20194] netlink: 'syz.2.3512': attribute type 1 has an invalid length. [ 1079.342624][ T5834] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1080.400552][ T5813] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1080.406741][T20212] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1080.409474][T20212] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1080.418563][T20212] vhci_hcd vhci_hcd.0: Device attached [ 1080.449761][T20212] rdma_rxe: rxe_newlink: failed to add wg2 [ 1080.572096][ T5813] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.580810][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.590124][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.598911][ T5813] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1080.610457][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.625263][ T5813] usb 7-1: config 0 descriptor?? [ 1080.790434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1080.802403][T14371] usb 44-1: SetAddress Request (25) to port 0 [ 1080.807331][T14371] usb 44-1: new SuperSpeed USB device number 25 using vhci_hcd [ 1080.958785][T20221] x_tables: duplicate underflow at hook 1 [ 1081.291704][ T5813] usbhid 7-1:0.0: can't add hid device: -71 [ 1081.296779][ T5813] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1081.319872][ T5813] usb 7-1: USB disconnect, device number 66 [ 1081.493029][T20225] syzkaller0: entered promiscuous mode [ 1081.495445][T20225] syzkaller0: entered allmulticast mode [ 1081.956148][T20237] ALSA: mixer_oss: invalid OSS volume '' [ 1082.097172][T20213] vhci_hcd: connection reset by peer [ 1082.099735][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1082.102002][ T12] vhci_hcd vhci_hcd.3: release socket [ 1082.104207][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1082.863838][T20255] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1082.865966][T20255] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1082.869409][T20255] vhci_hcd vhci_hcd.0: Device attached [ 1083.372625][T20265] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1083.375114][T20265] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1083.386099][T20265] vhci_hcd vhci_hcd.0: Device attached [ 1083.423746][T20265] rdma_rxe: rxe_newlink: failed to add wg2 [ 1083.739554][T20256] vhci_hcd: connection closed [ 1083.739726][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1083.743472][ T12] vhci_hcd vhci_hcd.4: release socket [ 1083.745388][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1083.900574][ T29] usb 46-1: device descriptor read/8, error -110 [ 1084.291069][ T29] usb usb46-port1: attempt power cycle [ 1084.369678][T20280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3537'. [ 1084.382330][T20280] ip6gre2: entered promiscuous mode [ 1084.385079][T20280] ip6gre2: entered allmulticast mode [ 1084.396097][T20280] netlink: 'syz.0.3537': attribute type 6 has an invalid length. [ 1084.398848][T20280] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3537'. [ 1084.735549][T20291] vhci_hcd vhci_hcd.0: port 0 already used [ 1084.737684][T20292] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3541'. [ 1084.853802][ T29] usb usb46-port1: unable to enumerate USB device [ 1084.866734][T20296] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1084.939341][T20296] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1084.941939][T20296] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1085.006481][T20296] vhci_hcd vhci_hcd.0: Device attached [ 1085.178390][T20266] vhci_hcd: connection closed [ 1085.178602][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1085.182917][ T12] vhci_hcd vhci_hcd.3: release socket [ 1085.184597][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1085.290674][ T29] usb 42-1: SetAddress Request (6) to port 0 [ 1085.292826][ T29] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1085.541673][T20306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3544'. [ 1085.549662][T20306] netlink: 'syz.4.3544': attribute type 1 has an invalid length. [ 1085.805852][T20301] vhci_hcd: connection reset by peer [ 1085.814612][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1085.819779][ T12] vhci_hcd vhci_hcd.2: release socket [ 1085.838875][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1085.900604][T14371] usb 44-1: device descriptor read/8, error -110 [ 1086.005608][T20308] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1086.007750][T20308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1086.015408][T20308] vhci_hcd vhci_hcd.0: Device attached [ 1086.063714][T20308] syz2: rxe_newlink: already configured on wg2 [ 1086.300598][ T2318] usb 38-1: SetAddress Request (17) to port 0 [ 1086.303695][ T2318] usb 38-1: new SuperSpeed USB device number 17 using vhci_hcd [ 1086.309236][T14371] usb usb44-port1: attempt power cycle [ 1086.911349][T14371] usb usb44-port1: unable to enumerate USB device [ 1087.261999][T20309] vhci_hcd: connection reset by peer [ 1087.264278][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1087.268949][ T12] vhci_hcd vhci_hcd.0: release socket [ 1087.275099][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1087.600472][ T9] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1087.760925][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1087.774463][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1087.787569][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1087.798267][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1087.954585][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.957813][ T9] usb 7-1: Product: syz [ 1087.959408][ T9] usb 7-1: Manufacturer: syz [ 1087.972504][ T9] usb 7-1: SerialNumber: syz [ 1087.992552][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 1087.996848][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1088.172995][T20351] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1088.195776][T20351] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1088.197870][T20351] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1088.206801][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1088.216110][T20351] vhci_hcd vhci_hcd.0: Device attached [ 1088.454282][T20354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.459785][T20354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.491670][ T5520] usb 46-1: SetAddress Request (21) to port 0 [ 1088.498471][ T5520] usb 46-1: new SuperSpeed USB device number 21 using vhci_hcd [ 1088.538589][ T5834] usb 7-1: USB disconnect, device number 67 [ 1088.544434][ T5834] usblp0: removed [ 1088.676438][T20356] overlayfs: failed lookup in lower (newroot/281, name='file1', err=-40): overlapping layers [ 1088.712495][T20352] vhci_hcd: connection reset by peer [ 1088.724275][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1088.726446][ T12] vhci_hcd vhci_hcd.4: release socket [ 1088.734252][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1088.814954][T20359] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1088.816993][T20359] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1088.820092][T20359] vhci_hcd vhci_hcd.0: Device attached [ 1088.834855][T20359] rdma_rxe: rxe_newlink: failed to add wg2 [ 1089.080479][T14371] usb 44-1: SetAddress Request (29) to port 0 [ 1089.085016][T14371] usb 44-1: new SuperSpeed USB device number 29 using vhci_hcd [ 1089.331652][T15512] overlayfs: failed lookup in lower (newroot/281, name='bus', err=-40): overlapping layers [ 1089.349406][T15512] overlayfs: failed lookup in lower (newroot/281, name='bus', err=-40): overlapping layers [ 1089.416119][T20360] vhci_hcd: connection reset by peer [ 1089.419326][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1089.440240][ T12] vhci_hcd vhci_hcd.3: release socket [ 1089.442750][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1089.566333][T20371] FAULT_INJECTION: forcing a failure. [ 1089.566333][T20371] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.572481][T20371] CPU: 3 UID: 0 PID: 20371 Comm: syz.4.3563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.572500][T20371] Tainted: [L]=SOFTLOCKUP [ 1089.572505][T20371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1089.572517][T20371] Call Trace: [ 1089.572529][T20371] [ 1089.572535][T20371] dump_stack_lvl+0x100/0x190 [ 1089.572611][T20371] should_fail_ex.cold+0x5/0xa [ 1089.572630][T20371] should_failslab+0xc2/0x120 [ 1089.572653][T20371] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1089.572674][T20371] ? do_getname+0x35/0x390 [ 1089.572699][T20371] do_getname+0x35/0x390 [ 1089.572714][T20371] __ia32_sys_mknodat+0xa0/0xf0 [ 1089.572733][T20371] __do_fast_syscall_32+0xe7/0x970 [ 1089.572775][T20371] ? lockdep_hardirqs_on+0x78/0x100 [ 1089.572792][T20371] do_fast_syscall_32+0x32/0x70 [ 1089.572808][T20371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1089.572823][T20371] RIP: 0023:0xf7f04fec [ 1089.572837][T20371] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 1089.572849][T20371] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 1089.572860][T20371] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000280 [ 1089.572867][T20371] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000000 [ 1089.572873][T20371] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1089.572879][T20371] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1089.572886][T20371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1089.572898][T20371] [ 1089.641547][ T12] dummy0: left allmulticast mode [ 1089.649268][ T12] bridge0: port 3(dummy0) entered disabled state [ 1089.657004][ T12] bridge_slave_1: left allmulticast mode [ 1089.658756][ T12] bridge_slave_1: left promiscuous mode [ 1089.660699][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.681858][ T12] bridge_slave_0: left allmulticast mode [ 1089.683999][ T12] bridge_slave_0: left promiscuous mode [ 1089.686332][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.741371][ T12] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1089.744426][ T12] ip6gre1 (unregistering): left promiscuous mode [ 1089.842587][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.850760][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.884479][ T12] bond0 (unregistering): Released all slaves [ 1089.889483][ T12] bond1 (unregistering): Released all slaves [ 1089.904299][T18000] wg2 speed is unknown, defaulting to 1000 [ 1089.912861][T18000] syz2: Port: 1 Link DOWN [ 1089.923591][T18000] wg2 speed is unknown, defaulting to 1000 [ 1089.949135][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1089.962509][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1089.965992][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1089.980266][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1089.995862][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1090.072774][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1090.076104][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1090.079691][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1090.083883][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1090.086841][ T5734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1090.114645][T20379] syz.4.3568: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1090.119252][T20379] CPU: 2 UID: 0 PID: 20379 Comm: syz.4.3568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.119270][T20379] Tainted: [L]=SOFTLOCKUP [ 1090.119275][T20379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1090.119285][T20379] Call Trace: [ 1090.119292][T20379] [ 1090.119299][T20379] dump_stack_lvl+0x100/0x190 [ 1090.119323][T20379] warn_alloc.cold+0x94/0xa8 [ 1090.119354][T20379] ? __pfx_warn_alloc+0x10/0x10 [ 1090.119383][T20379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1090.119403][T20379] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1090.119439][T20379] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1090.119460][T20379] ? clockevents_program_event+0x1ef/0x820 [ 1090.119483][T20379] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1090.119498][T20379] ? __pfx_clockevents_program_event+0x10/0x10 [ 1090.119518][T20379] ? find_held_lock+0x2b/0x80 [ 1090.119549][T20379] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 1090.119580][T20379] ? mark_held_locks+0x40/0x70 [ 1090.119608][T20379] ? irqentry_exit+0x24d/0xa00 [ 1090.119646][T20379] __folio_alloc_noprof+0x13/0x260 [ 1090.119670][T20379] alloc_migration_target+0x1d7/0x6d0 [ 1090.119701][T20379] migrate_pages_batch+0x5dc/0x45c0 [ 1090.119733][T20379] ? __pfx_alloc_migration_target+0x10/0x10 [ 1090.119774][T20379] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1090.119814][T20379] ? __lock_acquire+0x49f/0x1a40 [ 1090.119831][T20379] ? __lock_acquire+0x49f/0x1a40 [ 1090.119855][T20379] migrate_pages_sync+0x12c/0x880 [ 1090.119886][T20379] ? __pfx_alloc_migration_target+0x10/0x10 [ 1090.119916][T20379] ? mt_find+0x687/0x8e0 [ 1090.119938][T20379] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1090.119969][T20379] ? cmp_ex_search+0x8b/0xb0 [ 1090.120011][T20379] ? bsearch+0x9e/0xd0 [ 1090.120075][T20379] ? __pfx_cmp_ex_search+0x10/0x10 [ 1090.120109][T20379] migrate_pages+0x1a83/0x2850 [ 1090.120143][T20379] ? ex_handler_uaccess.isra.0+0xfa/0x200 [ 1090.120183][T20379] ? __pfx_alloc_migration_target+0x10/0x10 [ 1090.120219][T20379] ? __pfx_migrate_pages+0x10/0x10 [ 1090.120250][T20379] ? __bad_area_nosemaphore+0x320/0x3f0 [ 1090.120277][T20379] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 1090.120306][T20379] ? irqentry_exit+0x24d/0xa00 [ 1090.120332][T20379] ? lockdep_hardirqs_on+0x78/0x100 [ 1090.120376][T20379] move_pages_and_store_status+0xf1/0x230 [ 1090.120410][T20379] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1090.120447][T20379] ? __might_fault+0x111/0x140 [ 1090.120472][T20379] kernel_move_pages+0xfd9/0x14a0 [ 1090.120511][T20379] ? __pfx_kernel_move_pages+0x10/0x10 [ 1090.120544][T20379] ? kcov_ioctl+0x17a/0x750 [ 1090.120583][T20379] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1090.120612][T20379] ? kcov_ioctl+0x17a/0x750 [ 1090.120642][T20379] __ia32_sys_move_pages+0xdd/0x1b0 [ 1090.120661][T20379] ? __do_fast_syscall_32+0x98/0x970 [ 1090.120691][T20379] ? lockdep_hardirqs_on+0x78/0x100 [ 1090.120716][T20379] __do_fast_syscall_32+0xe7/0x970 [ 1090.120748][T20379] do_fast_syscall_32+0x32/0x70 [ 1090.120781][T20379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.120805][T20379] RIP: 0023:0xf7f04fec [ 1090.120829][T20379] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 1090.120839][T20379] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1090.120859][T20379] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000002 [ 1090.120872][T20379] RDX: 0000000080000500 RSI: 0000000080000040 RDI: 0000000000000000 [ 1090.120884][T20379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1090.120895][T20379] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1090.120906][T20379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1090.120932][T20379] [ 1090.240994][T20379] Mem-Info: [ 1090.242095][T20379] active_anon:1870 inactive_anon:1305 isolated_anon:0 [ 1090.242095][T20379] active_file:5843 inactive_file:20201 isolated_file:0 [ 1090.242095][T20379] unevictable:1000 dirty:154 writeback:0 [ 1090.242095][T20379] slab_reclaimable:7318 slab_unreclaimable:60950 [ 1090.242095][T20379] mapped:24327 shmem:1088 pagetables:1461 [ 1090.242095][T20379] sec_pagetables:320 bounce:0 [ 1090.242095][T20379] kernel_misc_reclaimable:0 [ 1090.242095][T20379] free:55495 free_pcp:732 free_cma:0 [ 1090.279680][T20379] Node 0 active_anon:0kB inactive_anon:232kB active_file:384kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:440kB dirty:0kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7296kB pagetables:1268kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1090.290832][T20379] Node 1 active_anon:7480kB inactive_anon:4988kB active_file:22988kB inactive_file:80760kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:96468kB dirty:616kB writeback:0kB shmem:4348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6604kB pagetables:4576kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1090.302725][T20379] Node 0 DMA free:2264kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1090.306860][T20380] wg2 speed is unknown, defaulting to 1000 [ 1090.315318][T20379] lowmem_reserve[]: 0 280 280 280 280 [ 1090.317510][T20379] Node 0 DMA32 free:38452kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:224kB active_file:400kB inactive_file:32kB unevictable:0kB writepending:0kB zspages:1332kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1090.329109][T20379] lowmem_reserve[]: 0 0 0 0 0 [ 1090.332612][T20379] Node 1 DMA32 free:180856kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7440kB inactive_anon:4988kB active_file:23084kB inactive_file:80784kB unevictable:4000kB writepending:656kB zspages:4944kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:2992kB free_cma:0kB [ 1090.343628][T20379] lowmem_reserve[]: 0 0 0 0 0 [ 1090.345339][T20379] Node 0 DMA: 40*4kB (UM) 11*8kB (U) 6*16kB (UM) 2*32kB (U) 3*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2264kB [ 1090.350122][T20379] Node 0 DMA32: 1335*4kB (UME) 449*8kB (UME) 139*16kB (UME) 285*32kB (UME) 74*64kB (UME) 35*128kB (UME) 5*256kB (M) 7*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 38452kB [ 1090.356150][T20379] Node 1 DMA32: 3775*4kB (UME) 1568*8kB (ME) 622*16kB (UME) 577*32kB (UME) 219*64kB (UME) 104*128kB (UME) 109*256kB (UME) 63*512kB (UM) 26*1024kB (UM) 5*2048kB (UM) 0*4096kB = 180412kB [ 1090.362232][T20379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1090.365383][T20379] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1090.368235][T20379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1090.371394][T20379] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1090.374566][T20379] 27989 total pagecache pages [ 1090.376295][T20379] 904 pages in swap cache [ 1090.377848][T20379] Free swap = 103304kB [ 1090.379328][T20379] Total swap = 124996kB [ 1090.380617][ T29] usb 42-1: device descriptor read/8, error -110 [ 1090.380960][T20379] 524155 pages RAM [ 1090.384852][T20379] 0 pages HighMem/MovableOnly [ 1090.387250][T20379] 211495 pages reserved [ 1090.388708][T20379] 0 pages cma reserved [ 1090.582749][ T55] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1090.662069][ T12] hsr_slave_0: left promiscuous mode [ 1090.665072][ T12] hsr_slave_1: left promiscuous mode [ 1090.667752][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.676887][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.685290][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.688342][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.702230][ T12] veth1_macvtap: left promiscuous mode [ 1090.704570][ T12] veth0_macvtap: left promiscuous mode [ 1090.707064][ T12] veth1_vlan: left promiscuous mode [ 1090.709330][ T12] veth0_vlan: left promiscuous mode [ 1090.741653][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 1090.745685][ T55] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1090.754368][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1090.758425][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.763644][ T55] usb 8-1: config 0 descriptor?? [ 1090.774043][ T29] usb usb42-port1: attempt power cycle [ 1090.846108][T20409] [ 1090.847154][T20409] ====================================================== [ 1090.849971][T20409] WARNING: possible circular locking dependency detected [ 1090.852649][T20409] syzkaller #0 Tainted: G L [ 1090.855437][T20409] ------------------------------------------------------ [ 1090.858041][T20409] syz.2.3571/20409 is trying to acquire lock: [ 1090.860027][T20409] ffffffff9024e980 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 1090.862963][T20409] [ 1090.862963][T20409] but task is already holding lock: [ 1090.865449][T20409] ffff88806dbb8390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 1090.868356][T20409] [ 1090.868356][T20409] which lock already depends on the new lock. [ 1090.868356][T20409] [ 1090.871648][T20409] [ 1090.871648][T20409] the existing dependency chain (in reverse order) is: [ 1090.874479][T20409] [ 1090.874479][T20409] -> #3 (&gi->lock){+.+.}-{4:4}: [ 1090.876699][T20409] lock_acquire+0x1b9/0x370 [ 1090.878407][T20409] __mutex_lock+0x1a4/0x1bd0 [ 1090.880021][T20409] config_usb_cfg_link+0x57/0x3a0 [ 1090.881878][T20409] configfs_symlink+0x540/0x11f0 [ 1090.883685][T20409] vfs_symlink+0x178/0x4d0 [ 1090.885335][T20409] filename_symlinkat+0x2a6/0x560 [ 1090.887065][T20409] __ia32_sys_symlinkat+0x9b/0xe0 [ 1090.888908][T20409] __do_fast_syscall_32+0xe7/0x970 [ 1090.890703][T20409] do_fast_syscall_32+0x32/0x70 [ 1090.892435][T20409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.894572][T20409] [ 1090.894572][T20409] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 1090.897270][T20409] lock_acquire+0x1b9/0x370 [ 1090.898867][T20409] down_write+0x8b/0x1f0 [ 1090.900374][T20409] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1090.902456][T20409] usbg_make_tpg+0x261/0x620 [ 1090.904070][T20409] target_fabric_make_tpg+0xab/0x8c0 [ 1090.905862][T20409] configfs_mkdir+0x51e/0xb70 [ 1090.907454][T20409] vfs_mkdir+0x361/0x850 [ 1090.908972][T20409] filename_mkdirat+0x48b/0x5e0 [ 1090.910587][T20409] __ia32_sys_mkdir+0x6a/0x90 [ 1090.912147][T20409] __do_fast_syscall_32+0xe7/0x970 [ 1090.913901][T20409] do_fast_syscall_32+0x32/0x70 [ 1090.915589][T20409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.917712][T20409] [ 1090.917712][T20409] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 1090.920100][T20409] lock_acquire+0x1b9/0x370 [ 1090.921749][T20409] __mutex_lock+0x1a4/0x1bd0 [ 1090.923352][T20409] usbg_make_tpg+0x1a4/0x620 [ 1090.924971][T20409] target_fabric_make_tpg+0xab/0x8c0 [ 1090.926778][T20409] configfs_mkdir+0x51e/0xb70 [ 1090.928336][T20409] vfs_mkdir+0x361/0x850 [ 1090.929872][T20409] filename_mkdirat+0x48b/0x5e0 [ 1090.931594][T20409] __ia32_sys_mkdir+0x6a/0x90 [ 1090.933237][T20409] __do_fast_syscall_32+0xe7/0x970 [ 1090.935030][T20409] do_fast_syscall_32+0x32/0x70 [ 1090.936762][T20409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.938906][T20409] [ 1090.938906][T20409] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 1090.941399][T20409] check_prev_add+0xeb/0xe60 [ 1090.942994][T20409] __lock_acquire+0x136c/0x1a40 [ 1090.944680][T20409] lock_acquire+0x1b9/0x370 [ 1090.946254][T20409] __mutex_lock+0x1a4/0x1bd0 [ 1090.947862][T20409] tcm_alloc+0x20/0x440 [ 1090.949378][T20409] usb_get_function+0x5e/0xd0 [ 1090.951006][T20409] config_usb_cfg_link+0x1ed/0x3a0 [ 1090.952790][T20409] configfs_symlink+0x540/0x11f0 [ 1090.954490][T20409] vfs_symlink+0x178/0x4d0 [ 1090.956037][T20409] filename_symlinkat+0x2a6/0x560 [ 1090.957753][T20409] __ia32_sys_symlinkat+0x9b/0xe0 [ 1090.959504][T20409] __do_fast_syscall_32+0xe7/0x970 [ 1090.961254][T20409] do_fast_syscall_32+0x32/0x70 [ 1090.962969][T20409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.965094][T20409] [ 1090.965094][T20409] other info that might help us debug this: [ 1090.965094][T20409] [ 1090.968242][T20409] Chain exists of: [ 1090.968242][T20409] tpg_instances_lock --> &sb->s_type->i_mutex_key#24 --> &gi->lock [ 1090.968242][T20409] [ 1090.972495][T20409] Possible unsafe locking scenario: [ 1090.972495][T20409] [ 1090.974792][T20409] CPU0 CPU1 [ 1090.976470][T20409] ---- ---- [ 1090.978147][T20409] lock(&gi->lock); [ 1090.979392][T20409] lock(&sb->s_type->i_mutex_key#24); [ 1090.981908][T20409] lock(&gi->lock); [ 1090.983914][T20409] lock(tpg_instances_lock); [ 1090.985403][T20409] [ 1090.985403][T20409] *** DEADLOCK *** [ 1090.985403][T20409] [ 1090.987924][T20409] 3 locks held by syz.2.3571/20409: [ 1090.989559][T20409] #0: ffff888021718450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1090.992519][T20409] #1: ffff888012f1ee80 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 1090.995883][T20409] #2: ffff88806dbb8390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 1090.998802][T20409] [ 1090.998802][T20409] stack backtrace: [ 1091.000670][T20409] CPU: 3 UID: 0 PID: 20409 Comm: syz.2.3571 Tainted: G L syzkaller #0 PREEMPT(full) [ 1091.000687][T20409] Tainted: [L]=SOFTLOCKUP [ 1091.000691][T20409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1091.000699][T20409] Call Trace: [ 1091.000706][T20409] [ 1091.000713][T20409] dump_stack_lvl+0x100/0x190 [ 1091.000727][T20409] print_circular_bug.cold+0x178/0x1c7 [ 1091.000748][T20409] check_noncircular+0x146/0x160 [ 1091.000769][T20409] check_prev_add+0xeb/0xe60 [ 1091.000789][T20409] __lock_acquire+0x136c/0x1a40 [ 1091.000803][T20409] lock_acquire+0x1b9/0x370 [ 1091.000813][T20409] ? tcm_alloc+0x20/0x440 [ 1091.000829][T20409] ? __pfx___might_resched+0x10/0x10 [ 1091.000861][T20409] __mutex_lock+0x1a4/0x1bd0 [ 1091.000879][T20409] ? tcm_alloc+0x20/0x440 [ 1091.000896][T20409] ? tcm_alloc+0x20/0x440 [ 1091.000911][T20409] ? __mutex_lock+0x26d/0x1bd0 [ 1091.000929][T20409] ? config_usb_cfg_link+0x57/0x3a0 [ 1091.000945][T20409] ? __pfx___mutex_lock+0x10/0x10 [ 1091.000964][T20409] ? tcm_alloc+0x20/0x440 [ 1091.000977][T20409] tcm_alloc+0x20/0x440 [ 1091.000992][T20409] usb_get_function+0x5e/0xd0 [ 1091.001002][T20409] config_usb_cfg_link+0x1ed/0x3a0 [ 1091.001017][T20409] ? mntput_no_expire+0xe7/0x220 [ 1091.001035][T20409] configfs_symlink+0x540/0x11f0 [ 1091.001051][T20409] ? bpf_lsm_inode_permission+0x9/0x10 [ 1091.001074][T20409] ? security_inode_permission+0xbf/0x250 [ 1091.001090][T20409] ? __pfx_configfs_symlink+0x10/0x10 [ 1091.001111][T20409] vfs_symlink+0x178/0x4d0 [ 1091.001127][T20409] filename_symlinkat+0x2a6/0x560 [ 1091.001141][T20409] ? __pfx_filename_symlinkat+0x10/0x10 [ 1091.001154][T20409] ? strncpy_from_user+0x19d/0x2d0 [ 1091.001171][T20409] ? do_getname+0x191/0x390 [ 1091.001186][T20409] __ia32_sys_symlinkat+0x9b/0xe0 [ 1091.001201][T20409] __do_fast_syscall_32+0xe7/0x970 [ 1091.001222][T20409] do_fast_syscall_32+0x32/0x70 [ 1091.001239][T20409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1091.001253][T20409] RIP: 0023:0xf7f42fec [ 1091.001270][T20409] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 1091.001275][T20409] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 1091.001286][T20409] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 00000000ffffff9c [ 1091.001293][T20409] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1091.001300][T20409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1091.001326][T20409] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1091.001333][T20409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1091.001345][T20409] [ 1091.081075][ T55] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1091.281205][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1091.286038][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1091.318139][T10202] smc: removing ib device syz2 [ 1091.329923][T10202] smbdirect: ib_dev[syz2] removed [ 1091.351213][ T29] usb usb42-port1: unable to enumerate USB device [ 1091.423658][ T2318] usb 38-1: device descriptor read/8, error -110 [ 1091.613108][ T5813] usb 8-1: USB disconnect, device number 70 [ 1091.820920][ T2318] usb usb38-port1: attempt power cycle [ 1092.028262][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.115713][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.194062][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.276533][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.358664][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.381313][ T2318] usb usb38-port1: unable to enumerate USB device [ 1092.425515][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.488810][ T5443] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1092.496885][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.574609][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.633230][ T5443] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1092.696714][ T12] bridge_slave_1: left allmulticast mode [ 1092.699111][ T12] bridge_slave_1: left promiscuous mode [ 1092.703772][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.708172][ T12] bridge_slave_0: left allmulticast mode [ 1092.710720][ T12] bridge_slave_0: left promiscuous mode [ 1092.713248][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.725735][ T12] bridge_slave_1: left allmulticast mode [ 1092.728152][ T12] bridge_slave_1: left promiscuous mode [ 1092.730973][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.737975][ T12] bridge_slave_0: left allmulticast mode [ 1092.740671][ T12] bridge_slave_0: left promiscuous mode [ 1092.743169][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.757273][ T12] bridge_slave_1: left allmulticast mode [ 1092.761617][ T12] bridge_slave_1: left promiscuous mode [ 1092.763701][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.766914][ T12] bridge_slave_0: left allmulticast mode [ 1092.768877][ T12] bridge_slave_0: left promiscuous mode [ 1092.772282][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.822033][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.825779][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.829130][ T12] bond0 (unregistering): Released all slaves [ 1092.861933][T10203] smbdirect: ib_dev[syz1] removed [ 1092.863693][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.869212][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.874195][ T12] bond0 (unregistering): Released all slaves [ 1092.902385][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.906676][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.910263][ T12] bond0 (unregistering): Released all slaves [ 1092.916235][ T5443] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1093.044841][ T5443] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1093.199367][ T5443] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1093.316413][ T5443] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1093.458684][ T5443] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1093.576279][ T12] hsr_slave_0: left promiscuous mode [ 1093.579558][ T12] hsr_slave_1: left promiscuous mode [ 1093.583012][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.583021][ T5520] usb 46-1: device descriptor read/8, error -110 [ 1093.585861][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.592047][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.595116][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.601181][ T12] hsr_slave_0: left promiscuous mode [ 1093.603860][ T12] hsr_slave_1: left promiscuous mode [ 1093.606397][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.609478][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.613564][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.616645][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.624104][ T12] hsr_slave_0: left promiscuous mode [ 1093.626800][ T12] hsr_slave_1: left promiscuous mode [ 1093.629433][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.633027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.636508][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.639564][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.650636][ T12] veth1_macvtap: left promiscuous mode [ 1093.653047][ T12] veth0_macvtap: left promiscuous mode [ 1093.655391][ T12] veth1_vlan: left promiscuous mode [ 1093.657573][ T12] veth0_vlan: left promiscuous mode [ 1093.661288][ T12] veth1_macvtap: left promiscuous mode [ 1093.663630][ T12] veth0_macvtap: left promiscuous mode [ 1093.665959][ T12] veth1_vlan: left promiscuous mode [ 1093.668187][ T12] veth0_vlan: left promiscuous mode [ 1093.671331][ T12] veth1_macvtap: left promiscuous mode [ 1093.673682][ T12] veth0_macvtap: left promiscuous mode [ 1093.675985][ T12] veth1_vlan: left promiscuous mode [ 1093.678139][ T12] veth0_vlan: left promiscuous mode [ 1093.826853][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1093.833970][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1093.943484][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1093.951058][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1093.991007][ T5520] usb usb46-port1: attempt power cycle [ 1094.064555][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1094.071561][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1094.136976][ T5443] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1094.140569][T14371] usb 44-1: device descriptor read/8, error -110 [ 1094.531776][T14371] usb usb44-port1: attempt power cycle [ 1094.566005][ T5520] usb usb46-port1: unable to enumerate USB device [ 1095.101549][T14371] usb usb44-port1: unable to enumerate USB device