last executing test programs: 4m7.489572992s ago: executing program 0 (id=3324): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) close(r6) 4m2.52560451s ago: executing program 0 (id=3332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a45322, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8017, &(0x7f0000000400)=ANY=[@ANYBLOB="fc198b4afdb2fa847472616e733d76697274696f2c63616368653d726561646168656164"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3m59.729255814s ago: executing program 0 (id=3339): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 3m57.840416287s ago: executing program 0 (id=3340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x4fc, 0x0, 0x25, 0x148, 0x340, 0x60, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x1, 0x5, 0x0, 0x1], 0x4, 0x5}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1, "8aaa53abdcd262af029c792dd41e857557f11bf3df0f3adc717d2a04cbd4"}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x558) 3m54.191534631s ago: executing program 0 (id=3347): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a45322, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8017, &(0x7f0000000400)=ANY=[@ANYBLOB="fc198b4afdb2fa847472616e733d76697274696f2c63616368653d726561646168656164"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3m49.493002378s ago: executing program 0 (id=3351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 3m33.881276931s ago: executing program 32 (id=3351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 16.935285375s ago: executing program 4 (id=3680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = syz_open_procfs(0x0, &(0x7f00000028c0)='net/ip6_flowlabel\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a45322, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8017, &(0x7f0000000400)=ANY=[@ANYBLOB="fc198b4afdb2fa847472616e733d76697274696f2c63616368653d726561646168656164"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 13.498392334s ago: executing program 3 (id=3684): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 13.457068462s ago: executing program 4 (id=3685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = syz_open_procfs(0x0, &(0x7f00000028c0)='net/ip6_flowlabel\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a45322, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8017, &(0x7f0000000400)=ANY=[@ANYBLOB="fc198b4afdb2fa847472616e733d76697274696f2c63616368653d726561646168656164"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 11.641392994s ago: executing program 3 (id=3689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) 10.50630713s ago: executing program 4 (id=3690): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) 10.139561287s ago: executing program 1 (id=3691): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)) 9.372632396s ago: executing program 2 (id=3692): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, 0x0, 0x0) dup2(r8, r3) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r2, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x2, 0x6, 0x6, 0xb, 0x2, 0x41}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.862335248s ago: executing program 2 (id=3693): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = syz_open_procfs(0x0, &(0x7f00000028c0)='net/ip6_flowlabel\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a45322, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8017, &(0x7f0000000400)=ANY=[@ANYBLOB="fc198b4afdb2fa847472616e733d76697274696f2c63616368653d726561646168656164"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 8.27760923s ago: executing program 1 (id=3694): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 8.22997081s ago: executing program 3 (id=3695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = syz_open_procfs(0x0, &(0x7f00000028c0)='net/ip6_flowlabel\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a45322, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8017, &(0x7f0000000400)=ANY=[@ANYBLOB="fc198b4afdb2fa847472616e733d76697274696f2c63616368653d726561646168656164"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 6.518484124s ago: executing program 2 (id=3696): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{0x0}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 5.331676582s ago: executing program 1 (id=3699): rseq(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 4.790204016s ago: executing program 3 (id=3700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 4.636605329s ago: executing program 4 (id=3701): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)) 2.330018669s ago: executing program 3 (id=3704): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 1.675084662s ago: executing program 2 (id=3705): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 1.054524345s ago: executing program 3 (id=3706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b 1 [ 1172.858975][T12343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1172.862037][T12343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1172.866082][T12343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1172.870691][T12343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1173.082930][T16758] syzkaller0: entered promiscuous mode [ 1173.084700][T16758] syzkaller0: entered allmulticast mode [ 1173.157870][ T1167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.164058][ T1167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.195666][T16753] chnl_net:caif_netlink_parms(): no params data found [ 1173.347727][ T1167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.356292][ T1167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.433502][T16753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.434049][T12343] Bluetooth: hci1: command 0x040f tx timeout [ 1173.441115][T16753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.446530][T16753] bridge_slave_0: entered allmulticast mode [ 1173.451995][T16753] bridge_slave_0: entered promiscuous mode [ 1173.475264][T16753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.478115][T16753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.480484][T16753] bridge_slave_1: entered allmulticast mode [ 1173.494151][T16753] bridge_slave_1: entered promiscuous mode [ 1173.511007][ T1167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.515252][ T1167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.561124][T16781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2570'. [ 1173.564325][T16753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.565882][T16753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.608693][T16753] team0: Port device team_slave_0 added [ 1173.620426][T16753] team0: Port device team_slave_1 added [ 1173.642541][ T1167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.646190][ T1167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.664443][T12718] usb 42-1: device descriptor read/8, error -110 [ 1173.690622][T16753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.692999][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.701452][T16753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.768163][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 1173.831241][T16790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1173.835316][T16753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.837662][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.848940][T16753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.879838][T16753] hsr_slave_0: entered promiscuous mode [ 1173.882117][T16753] hsr_slave_1: entered promiscuous mode [ 1173.884371][T16753] debugfs: 'hsr0' already exists in 'hsr' [ 1173.886391][T16753] Cannot create hsr debugfs directory [ 1173.981008][ T1167] bridge_slave_1: left allmulticast mode [ 1173.982838][ T1167] bridge_slave_1: left promiscuous mode [ 1173.985335][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.998493][T16800] openvswitch: netlink: Message has 8 unknown bytes. [ 1174.000323][ T1167] bridge_slave_0: left allmulticast mode [ 1174.001499][T16800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.003390][ T1167] bridge_slave_0: left promiscuous mode [ 1174.010398][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.104925][T12718] usb usb42-port1: attempt power cycle [ 1174.335001][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.345911][ T1167] bond0 (unregistering): Released all slaves [ 1174.402813][T16824] siw: device registration error -23 [ 1174.422045][T16821] syzkaller0: entered promiscuous mode [ 1174.424200][T16821] syzkaller0: entered allmulticast mode [ 1174.787458][T12718] usb usb42-port1: unable to enumerate USB device [ 1174.955863][T12343] Bluetooth: hci3: command tx timeout [ 1175.514052][T12343] Bluetooth: hci1: command 0x040f tx timeout [ 1176.094623][T16841] openvswitch: netlink: Message has 8 unknown bytes. [ 1176.098022][T16841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1176.225491][ T1167] hsr_slave_0: left promiscuous mode [ 1176.227701][ T1167] hsr_slave_1: left promiscuous mode [ 1176.282101][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.285399][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.288809][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.291209][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.307264][ T1167] veth1_macvtap: left promiscuous mode [ 1176.309034][ T1167] veth0_macvtap: left promiscuous mode [ 1176.311854][ T1167] veth1_vlan: left promiscuous mode [ 1176.313654][ T1167] veth0_vlan: left promiscuous mode [ 1176.484322][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 1176.501021][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 1176.665290][T16858] syzkaller0: entered promiscuous mode [ 1176.667542][T16858] syzkaller0: entered allmulticast mode [ 1177.026791][T12343] Bluetooth: hci3: command tx timeout [ 1177.584095][T12343] Bluetooth: hci1: command 0x040f tx timeout [ 1178.281156][T16880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2592'. [ 1178.373116][T16753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1178.385113][T16753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1178.392182][T16753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1178.403617][T16753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1178.455605][T16753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.466837][T16753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.475604][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.478544][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.486097][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.489136][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.518999][T16900] openvswitch: netlink: Message has 8 unknown bytes. [ 1178.521197][T16900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1178.612904][T16901] siw: device registration error -23 [ 1178.802069][T16910] netlink: 'syz.3.2598': attribute type 3 has an invalid length. [ 1179.104265][T12343] Bluetooth: hci3: command tx timeout [ 1179.295748][T16912] 9pnet_virtio: no channels available for device syz [ 1179.359943][ T1171] Bluetooth: hci2: Frame reassembly failed (-84) [ 1179.960801][ T1167] IPVS: stop unused estimator thread 0... [ 1180.080071][T16753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.112184][T16753] veth0_vlan: entered promiscuous mode [ 1180.121223][T16753] veth1_vlan: entered promiscuous mode [ 1180.148727][T16753] veth0_macvtap: entered promiscuous mode [ 1180.156314][T16753] veth1_macvtap: entered promiscuous mode [ 1180.167491][T16753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.176014][T16753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.184428][ T80] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.188017][ T80] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.192821][ T80] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.196881][ T80] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.236717][T16932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2604'. [ 1180.332032][T16934] syzkaller0: entered promiscuous mode [ 1180.337201][T16934] syzkaller0: entered allmulticast mode [ 1180.358729][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.362337][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.468256][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.471326][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.647252][T16952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2612'. [ 1180.831322][T16962] siw: device registration error -23 [ 1181.174242][T16980] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2623'. [ 1181.184228][T10009] Bluetooth: hci3: command tx timeout [ 1181.424954][T12343] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1181.633698][T17002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2633'. [ 1181.912848][T17013] netlink: 'syz.0.2637': attribute type 3 has an invalid length. [ 1181.970525][T10009] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1181.976322][T10009] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1181.980401][T10009] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1181.985550][T10009] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1181.988752][T10009] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1182.209546][T17014] chnl_net:caif_netlink_parms(): no params data found [ 1182.269268][T17014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.271685][T17014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.276045][T17014] bridge_slave_0: entered allmulticast mode [ 1182.289866][T17014] bridge_slave_0: entered promiscuous mode [ 1182.299684][T17014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.301972][T17014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.314315][T17014] bridge_slave_1: entered allmulticast mode [ 1182.319106][T17014] bridge_slave_1: entered promiscuous mode [ 1182.372751][T17014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.380100][T17014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.412218][T17014] team0: Port device team_slave_0 added [ 1182.417262][T17014] team0: Port device team_slave_1 added [ 1182.443427][T17014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.448869][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.459674][T17014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.467009][T17014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.470094][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.476752][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.482628][T17014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.483194][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.521590][T17031] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1182.524193][T17031] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1182.527259][T17031] vhci_hcd vhci_hcd.0: Device attached [ 1182.566949][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.571347][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.595396][T17014] hsr_slave_0: entered promiscuous mode [ 1182.596501][T17014] hsr_slave_1: entered promiscuous mode [ 1182.723059][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.730832][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.793197][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.796754][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.801739][T17041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2643'. [ 1182.804370][T12718] usb 38-1: SetAddress Request (21) to port 0 [ 1182.807796][T12718] usb 38-1: new SuperSpeed USB device number 21 using vhci_hcd [ 1182.905779][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.909709][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.942029][T17047] netlink: 'syz.1.2645': attribute type 3 has an invalid length. [ 1183.096351][T17032] vhci_hcd: connection reset by peer [ 1183.103835][ T80] vhci_hcd vhci_hcd.0: stop threads [ 1183.106012][ T80] vhci_hcd vhci_hcd.0: release socket [ 1183.107830][ T80] vhci_hcd vhci_hcd.0: disconnect device [ 1183.156152][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2651'. [ 1183.292860][ T155] bond0 (unregistering): Released all slaves [ 1183.524693][T17075] siw: device registration error -23 [ 1183.703948][T17083] netlink: 'syz.1.2655': attribute type 3 has an invalid length. [ 1183.763162][ T155] hsr_slave_0: left promiscuous mode [ 1183.770154][ T155] hsr_slave_1: left promiscuous mode [ 1183.783715][ T155] veth1_macvtap: left promiscuous mode [ 1183.786701][ T155] veth0_macvtap: left promiscuous mode [ 1183.789217][ T155] veth1_vlan: left promiscuous mode [ 1183.791723][ T155] veth0_vlan: left promiscuous mode [ 1184.009963][T17101] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1184.013200][T17101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1184.074070][T12343] Bluetooth: hci2: command tx timeout [ 1184.524559][T17014] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1184.532191][T17014] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1184.540524][T17014] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1184.555688][T17014] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1184.681261][T17014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.692354][T17014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.702392][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.705664][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.715311][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.719438][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.901761][T17014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.931839][T17014] veth0_vlan: entered promiscuous mode [ 1184.937936][T17014] veth1_vlan: entered promiscuous mode [ 1184.960121][T17014] veth0_macvtap: entered promiscuous mode [ 1184.967024][T17014] veth1_macvtap: entered promiscuous mode [ 1184.978642][T17130] netlink: 'syz.0.2663': attribute type 3 has an invalid length. [ 1184.983302][T17014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.990898][T17014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.002985][ T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.014328][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.018128][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.021783][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.086276][T17139] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1185.089286][T17139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.100158][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.109318][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.131729][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.135783][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.406485][T17148] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1185.409865][T17148] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1185.418369][T17148] vhci_hcd vhci_hcd.0: Device attached [ 1185.560812][T17153] syzkaller0: entered promiscuous mode [ 1185.781292][T17165] netlink: 'syz.1.2674': attribute type 3 has an invalid length. [ 1185.983941][T17151] vhci_hcd: connection closed [ 1185.988261][ T1171] vhci_hcd vhci_hcd.0: stop threads [ 1185.992046][ T1171] vhci_hcd vhci_hcd.0: release socket [ 1185.994222][ T1171] vhci_hcd vhci_hcd.0: disconnect device [ 1186.144177][T12343] Bluetooth: hci2: command tx timeout [ 1186.255783][T17173] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1186.259043][T17173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1186.494623][T17183] siw: device registration error -23 [ 1188.014068][T12718] usb 38-1: device descriptor read/8, error -110 [ 1188.043110][T17196] netlink: 'syz.1.2683': attribute type 3 has an invalid length. [ 1188.224686][T12343] Bluetooth: hci2: command tx timeout [ 1188.438857][T12718] usb usb38-port1: attempt power cycle [ 1189.280115][T17216] 9pnet_virtio: no channels available for device syz [ 1189.283765][T17216] siw: device registration error -23 [ 1189.624924][T17214] siw: device registration error -23 [ 1189.629368][T12718] usb usb38-port1: unable to enumerate USB device [ 1189.789346][T17228] syz_tun: entered allmulticast mode [ 1189.818507][T17227] syz_tun: left allmulticast mode [ 1190.127523][T17242] syzkaller0: entered promiscuous mode [ 1190.325121][T12343] Bluetooth: hci2: command tx timeout [ 1190.352504][T15326] Bluetooth: hci0: Frame reassembly failed (-84) [ 1190.354901][T15326] Bluetooth: hci0: Frame reassembly failed (-84) [ 1190.357064][T15326] Bluetooth: hci0: Frame reassembly failed (-84) [ 1190.359144][T15326] Bluetooth: hci0: Frame reassembly failed (-84) [ 1190.361394][T15326] Bluetooth: hci0: Frame reassembly failed (-84) [ 1191.470970][T17268] 9pnet_virtio: no channels available for device syz [ 1192.384056][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1192.384226][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1195.282730][ T40] audit: type=1326 audit(1775708444.402:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17312 comm="syz.0.2721" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 1195.669375][ T155] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.730461][T15326] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.733443][T15326] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.769813][T15326] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1198.277459][T17348] 9pnet_virtio: no channels available for device syz [ 1198.283485][T17348] siw: device registration error -23 [ 1199.566589][T15326] Bluetooth: hci0: Frame reassembly failed (-84) [ 1200.214297][T17376] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1200.216664][T17376] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1200.510881][T17376] vhci_hcd vhci_hcd.0: Device attached [ 1201.036688][ T29] usb 40-1: SetAddress Request (20) to port 0 [ 1201.039040][ T29] usb 40-1: new SuperSpeed USB device number 20 using vhci_hcd [ 1201.262378][T17377] vhci_hcd: connection reset by peer [ 1201.264600][ T155] vhci_hcd vhci_hcd.1: stop threads [ 1201.266440][ T155] vhci_hcd vhci_hcd.1: release socket [ 1201.268723][ T155] vhci_hcd vhci_hcd.1: disconnect device [ 1201.438504][T17391] 9pnet_virtio: no channels available for device syz [ 1201.584063][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1201.584279][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1201.718539][T17394] siw: device registration error -23 [ 1202.383981][ T40] audit: type=1326 audit(1775708451.502:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.0.2741" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 1202.816916][T17408] siw: device registration error -23 [ 1203.820682][T15326] Bluetooth: hci0: Frame reassembly failed (-84) [ 1204.519379][T17440] 9pnet_virtio: no channels available for device syz [ 1204.523251][T17440] siw: device registration error -23 [ 1204.768100][T17444] syzkaller0: entered promiscuous mode [ 1205.573421][T17453] 9pnet_virtio: no channels available for device syz [ 1205.584376][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1206.064034][ T29] usb 40-1: device descriptor read/8, error -110 [ 1206.495893][ T29] usb usb40-port1: attempt power cycle [ 1206.645449][T17453] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1206.649971][T17453] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1206.653216][T17453] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1207.106304][ T29] usb usb40-port1: unable to enumerate USB device [ 1207.169972][T17483] siw: device registration error -23 [ 1207.592698][T17493] syzkaller0: entered promiscuous mode [ 1208.053329][T17497] fuse: Bad value for 'fd' [ 1210.470776][T17531] siw: device registration error -23 [ 1210.495045][ T40] audit: type=1326 audit(1775708459.622:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17522 comm="syz.1.2776" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1210.521541][T17533] 9pnet_virtio: no channels available for device syz [ 1210.527791][T17533] siw: device registration error -23 [ 1211.296400][T17564] syzkaller0: entered promiscuous mode [ 1211.311714][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2790'. [ 1213.260788][T17591] siw: device registration error -23 [ 1214.532525][T17614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2804'. [ 1214.675676][T17616] syzkaller0: entered promiscuous mode [ 1214.677470][T17616] syzkaller0: entered allmulticast mode [ 1216.189595][T17651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2815'. [ 1216.363758][ T1171] Bluetooth: hci0: Frame reassembly failed (-84) [ 1216.470386][T17658] siw: device registration error -23 [ 1218.384118][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1218.500085][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1218.668974][T17669] 9pnet_virtio: no channels available for device syz [ 1221.230823][T17705] siw: device registration error -23 [ 1222.738112][T17711] syzkaller0: entered promiscuous mode [ 1222.740517][T17711] syzkaller0: entered allmulticast mode [ 1223.960316][T17740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2837'. [ 1223.964242][T17740] openvswitch: netlink: Flow key attr not present in new flow. [ 1224.216579][T17744] siw: device registration error -23 [ 1224.999114][T17761] siw: device registration error -23 [ 1226.463674][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2849'. [ 1226.468361][T17772] openvswitch: netlink: Flow actions attr not present in new flow. [ 1226.914130][ T40] audit: type=1326 audit(1775708476.032:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.1.2852" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1227.060776][T17795] siw: device registration error -23 [ 1228.612312][T17801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2856'. [ 1230.528099][T17811] 9pnet_virtio: no channels available for device syz [ 1230.963646][T17811] siw: device registration error -23 [ 1231.668261][T17819] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1231.670205][T17819] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1231.672599][T17819] vhci_hcd vhci_hcd.0: Device attached [ 1231.844134][T17827] syzkaller0: entered promiscuous mode [ 1231.848554][T17827] syzkaller0: entered allmulticast mode [ 1231.954245][ T10] usb 44-1: SetAddress Request (112) to port 0 [ 1231.956809][ T10] usb 44-1: new SuperSpeed USB device number 112 using vhci_hcd [ 1232.289646][T17820] vhci_hcd: connection reset by peer [ 1232.294591][ T155] vhci_hcd vhci_hcd.3: stop threads [ 1232.296860][ T155] vhci_hcd vhci_hcd.3: release socket [ 1232.299288][ T155] vhci_hcd vhci_hcd.3: disconnect device [ 1234.019075][T17850] 9pnet_virtio: no channels available for device syz [ 1234.029832][T17850] siw: device registration error -23 [ 1234.219118][ T80] Bluetooth: hci0: Frame reassembly failed (-84) [ 1234.245792][T17855] 9pnet_virtio: no channels available for device syz [ 1236.130894][T17872] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1236.133767][T17872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1236.139107][T17872] vhci_hcd vhci_hcd.0: Device attached [ 1236.208636][T17876] syzkaller0: entered promiscuous mode [ 1236.211107][T17876] syzkaller0: entered allmulticast mode [ 1236.224071][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1236.224128][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1236.404193][T16402] usb 40-1: SetAddress Request (24) to port 0 [ 1236.407055][T16402] usb 40-1: new SuperSpeed USB device number 24 using vhci_hcd [ 1236.647765][T17880] siw: device registration error -23 [ 1236.787769][T17873] vhci_hcd: connection reset by peer [ 1236.790829][T13738] vhci_hcd vhci_hcd.1: stop threads [ 1236.792701][T13738] vhci_hcd vhci_hcd.1: release socket [ 1236.795017][T13738] vhci_hcd vhci_hcd.1: disconnect device [ 1237.024241][ T10] usb 44-1: device descriptor read/8, error -110 [ 1237.430470][ T10] usb usb44-port1: attempt power cycle [ 1237.562181][T17885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2878'. [ 1237.668336][T17887] fuse: Unknown parameter '00000000000000000000' [ 1237.941406][T17894] fuse: Unknown parameter '00000000000000000000' [ 1237.995077][ T10] usb usb44-port1: unable to enumerate USB device [ 1238.160670][T17899] openvswitch: netlink: Flow actions attr not present in new flow. [ 1238.777391][T17906] fuse: Unknown parameter '00000000000000000000' [ 1239.936215][T17919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2887'. [ 1240.306851][T17922] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1240.309046][T17922] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1240.322088][T17922] vhci_hcd vhci_hcd.0: Device attached [ 1240.688951][T17931] siw: device registration error -23 [ 1242.002322][T17925] vhci_hcd: connection reset by peer [ 1242.007257][T13738] vhci_hcd vhci_hcd.1: stop threads [ 1242.019738][T13738] vhci_hcd vhci_hcd.1: release socket [ 1242.022104][T16402] usb 40-1: device descriptor read/8, error -110 [ 1242.024844][T13738] vhci_hcd vhci_hcd.1: disconnect device [ 1242.034289][T17936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1242.428240][T16402] usb usb40-port1: attempt power cycle [ 1242.686817][T17950] fuse: Unknown parameter 'user00000000000000000000' [ 1242.923861][T17953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2899'. [ 1242.995081][T16402] usb usb40-port1: unable to enumerate USB device [ 1243.350554][T17964] 9pnet_virtio: no channels available for device syz [ 1243.354966][T17964] siw: device registration error -23 [ 1243.943472][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.946438][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.269148][T17968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1245.007184][T17980] fuse: Unknown parameter 'user00000000000000000000' [ 1245.524048][T17983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1246.258166][T18001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2914'. [ 1246.363097][T17995] siw: device registration error -23 [ 1247.550168][T18014] fuse: Unknown parameter 'user00000000000000000000' [ 1248.049871][T18021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2920'. [ 1248.348120][T18027] 9pnet_virtio: no channels available for device syz [ 1248.749848][T18035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2923'. [ 1248.840128][ T40] audit: type=1326 audit(1775708497.962:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18030 comm="syz.2.2924" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1250.558288][T18054] fuse: Unknown parameter 'user_i00000000000000000000' [ 1251.540850][T18066] siw: device registration error -23 [ 1252.504561][T18075] 9pnet_virtio: no channels available for device syz [ 1253.446339][T18099] fuse: Unknown parameter 'user_i00000000000000000000' [ 1253.548710][T18102] siw: device registration error -23 [ 1255.169975][T18127] 9pnet_virtio: no channels available for device syz [ 1255.178429][T18127] siw: device registration error -23 [ 1256.574068][T18149] siw: device registration error -23 [ 1256.735277][T18152] fuse: Unknown parameter 'user_i00000000000000000000' [ 1257.659579][T18158] 9pnet_virtio: no channels available for device syz [ 1259.034272][T18177] 9pnet_virtio: no channels available for device syz [ 1259.037085][T18177] siw: device registration error -23 [ 1260.552019][T18203] fuse: Unknown parameter 'user_id00000000000000000000' [ 1262.002058][T18234] 9pnet_virtio: no channels available for device syz [ 1262.073441][T18236] 9pnet_virtio: no channels available for device syz [ 1262.644715][T18240] fuse: Unknown parameter 'user_id00000000000000000000' [ 1263.399037][T18255] siw: device registration error -23 [ 1265.802815][T18280] fuse: Unknown parameter 'user_id00000000000000000000' [ 1266.284490][T18286] 9pnet_virtio: no channels available for device syz [ 1266.329199][T18287] 9pnet_virtio: no channels available for device syz [ 1268.434627][T18303] 9pnet_virtio: no channels available for device syz [ 1269.176880][T18311] 9pnet_virtio: no channels available for device syz [ 1269.180644][T18311] siw: device registration error -23 [ 1271.929226][T18349] 9pnet_virtio: no channels available for device syz [ 1272.487917][T18356] 9pnet_virtio: no channels available for device syz [ 1272.491458][T18356] siw: device registration error -23 [ 1273.024110][T18366] 9pnet_virtio: no channels available for device syz [ 1273.035215][T18366] siw: device registration error -23 [ 1275.826717][T18395] siw: device registration error -23 [ 1276.724595][ T155] Bluetooth: hci0: Frame reassembly failed (-84) [ 1276.744402][ T1171] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1277.407701][T18407] 9pnet_virtio: no channels available for device syz [ 1277.833294][T18412] 9pnet_virtio: no channels available for device syz [ 1277.896879][T18414] fuse: Unknown parameter '0x0000000000000005' [ 1278.784073][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1278.784124][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1281.180411][T18447] fuse: Unknown parameter '0x0000000000000005' [ 1281.800207][T18452] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1281.802444][T18452] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1281.805239][T18452] vhci_hcd vhci_hcd.0: Device attached [ 1281.846823][T18456] 9pnet_virtio: no channels available for device syz [ 1281.884442][T18454] vhci_hcd: connection closed [ 1281.884785][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1281.890144][ T12] vhci_hcd vhci_hcd.3: release socket [ 1281.901930][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1282.050408][ T155] Bluetooth: hci0: Frame reassembly failed (-84) [ 1282.052878][ T155] Bluetooth: hci0: Frame reassembly failed (-84) [ 1282.069309][ T155] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1282.083477][T18460] 9pnet_virtio: no channels available for device syz [ 1282.984207][T18470] siw: device registration error -23 [ 1283.120687][T18472] 9pnet_virtio: no channels available for device syz [ 1284.063994][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1284.064990][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1284.117928][T18477] 9pnet_virtio: no channels available for device syz [ 1284.873776][T18491] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1284.876016][T18491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1284.878845][T18491] vhci_hcd vhci_hcd.0: Device attached [ 1284.986676][T18495] vhci_hcd: connection closed [ 1284.987036][ T80] vhci_hcd vhci_hcd.0: stop threads [ 1284.990481][ T80] vhci_hcd vhci_hcd.0: release socket [ 1284.992697][ T80] vhci_hcd vhci_hcd.0: disconnect device [ 1286.953988][T12343] Bluetooth: hci4: command 0x0406 tx timeout [ 1287.383582][T18533] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1287.386316][T18533] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1287.389499][T18533] vhci_hcd vhci_hcd.0: Device attached [ 1287.411048][T18538] siw: device registration error -23 [ 1287.418837][T18536] vhci_hcd: connection closed [ 1287.419075][ T155] vhci_hcd vhci_hcd.2: stop threads [ 1287.423329][ T155] vhci_hcd vhci_hcd.2: release socket [ 1287.426603][ T155] vhci_hcd vhci_hcd.2: disconnect device [ 1287.524206][ T40] audit: type=1326 audit(1775708536.642:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3043" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 1289.559097][T18561] 9pnet_virtio: no channels available for device syz [ 1290.709442][T18568] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1290.711567][T18568] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1290.714687][T18568] vhci_hcd vhci_hcd.0: Device attached [ 1290.755445][T18572] vhci_hcd: connection closed [ 1290.755798][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 1290.760049][ T1141] vhci_hcd vhci_hcd.2: release socket [ 1290.762449][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 1290.930089][T18577] 9pnet_virtio: no channels available for device syz [ 1291.232493][T18579] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1291.234817][T18579] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1291.237475][T18579] vhci_hcd vhci_hcd.0: Device attached [ 1291.270099][T18580] vhci_hcd: connection closed [ 1291.270366][T13738] vhci_hcd vhci_hcd.0: stop threads [ 1291.274708][T13738] vhci_hcd vhci_hcd.0: release socket [ 1291.276953][T13738] vhci_hcd vhci_hcd.0: disconnect device [ 1292.088921][T10009] Bluetooth: hci1: command 0x040f tx timeout [ 1292.331706][T13738] Bluetooth: hci0: Frame reassembly failed (-84) [ 1294.384042][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1294.384071][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1294.576498][T18620] siw: device registration error -23 [ 1294.895103][ T40] audit: type=1326 audit(1775708544.012:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.0.3066" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 1297.274004][T12343] Bluetooth: hci3: command 0x0406 tx timeout [ 1297.390179][T18663] 9pnet_virtio: no channels available for device syz [ 1298.238949][T18669] 9pnet_virtio: no channels available for device syz [ 1298.244386][T18669] siw: device registration error -23 [ 1300.153615][T18705] 9pnet_virtio: no channels available for device syz [ 1300.833658][ T40] audit: type=1326 audit(1775708549.952:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.2.3088" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1300.842424][T18712] 9pnet_virtio: no channels available for device syz [ 1300.846957][T18712] siw: device registration error -23 [ 1301.819259][T18719] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1301.821385][T18719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1301.829723][T18719] vhci_hcd vhci_hcd.0: Device attached [ 1302.093979][T12718] usb 38-1: SetAddress Request (25) to port 0 [ 1302.096046][T12718] usb 38-1: new SuperSpeed USB device number 25 using vhci_hcd [ 1302.375614][T18720] vhci_hcd: connection reset by peer [ 1302.377585][ T1171] vhci_hcd vhci_hcd.0: stop threads [ 1302.379361][ T1171] vhci_hcd vhci_hcd.0: release socket [ 1302.381278][ T1171] vhci_hcd vhci_hcd.0: disconnect device [ 1304.731815][ T1141] Bluetooth: hci0: Frame reassembly failed (-84) [ 1304.734208][T18742] 9pnet_virtio: no channels available for device syz [ 1305.347382][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.349461][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.784073][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1306.995509][T18768] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1306.997907][T18768] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1307.000891][T18768] vhci_hcd vhci_hcd.0: Device attached [ 1307.255963][T18776] 9pnet_virtio: no channels available for device syz [ 1307.262208][T18776] siw: device registration error -23 [ 1307.276230][ T40] audit: type=1326 audit(1775708556.362:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18766 comm="syz.0.3102" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 1307.469706][T10009] Bluetooth: hci2: command 0x0406 tx timeout [ 1308.159497][T12718] usb 38-1: device descriptor read/8, error -110 [ 1308.163790][T18769] vhci_hcd: connection closed [ 1308.164960][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 1308.168299][ T1141] vhci_hcd vhci_hcd.3: release socket [ 1308.180243][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 1308.547389][T12718] usb usb38-port1: attempt power cycle [ 1308.904874][T18787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3106'. [ 1309.923505][T12718] usb usb38-port1: unable to enumerate USB device [ 1311.740593][T18808] siw: device registration error -23 [ 1311.905179][T18810] 9pnet_virtio: no channels available for device syz [ 1313.915553][T18820] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1313.917613][T18820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1313.920233][T18820] vhci_hcd vhci_hcd.0: Device attached [ 1313.990048][T18828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3116'. [ 1314.199817][T17115] usb 38-1: SetAddress Request (29) to port 0 [ 1314.204182][T17115] usb 38-1: new SuperSpeed USB device number 29 using vhci_hcd [ 1314.330156][ T40] audit: type=1326 audit(1775708563.452:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18829 comm="syz.3.3115" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1315.393991][T18825] vhci_hcd: connection reset by peer [ 1315.434213][ T155] vhci_hcd vhci_hcd.0: stop threads [ 1315.435991][ T155] vhci_hcd vhci_hcd.0: release socket [ 1315.437953][ T155] vhci_hcd vhci_hcd.0: disconnect device [ 1316.860489][ T155] Bluetooth: hci0: Frame reassembly failed (-84) [ 1316.872715][T18856] 9pnet_virtio: no channels available for device syz [ 1317.139059][T18860] 9pnet_virtio: no channels available for device syz [ 1317.585467][T18860] siw: device registration error -23 [ 1318.278004][ T1167] Bluetooth: hci5: Frame reassembly failed (-84) [ 1318.306532][ T1141] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1318.335942][T18870] 9pnet_virtio: no channels available for device syz [ 1318.553145][T18872] syzkaller0: entered promiscuous mode [ 1318.556598][T18872] syzkaller0: entered allmulticast mode [ 1318.864300][T12343] Bluetooth: hci0: command 0x1003 tx timeout [ 1318.867166][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1319.198472][T18875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3126'. [ 1319.264978][T17115] usb 38-1: device descriptor read/8, error -110 [ 1319.674974][T17115] usb usb38-port1: attempt power cycle [ 1319.837087][ T155] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1319.840845][ T155] Bluetooth: hci0: Frame reassembly failed (-84) [ 1320.255270][T17115] usb usb38-port1: unable to enumerate USB device [ 1320.304150][T10009] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1320.304569][T12343] Bluetooth: hci5: command 0x1003 tx timeout [ 1320.819608][T18891] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1320.821921][T18891] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1320.844369][T18891] vhci_hcd vhci_hcd.0: Device attached [ 1320.926012][T18896] 9pnet_virtio: no channels available for device syz [ 1321.124021][T15617] usb 40-1: SetAddress Request (28) to port 0 [ 1321.126219][T15617] usb 40-1: new SuperSpeed USB device number 28 using vhci_hcd [ 1321.179867][T18893] vhci_hcd: connection reset by peer [ 1321.182325][ T80] vhci_hcd vhci_hcd.1: stop threads [ 1321.185140][ T80] vhci_hcd vhci_hcd.1: release socket [ 1321.187439][ T80] vhci_hcd vhci_hcd.1: disconnect device [ 1321.322013][T18901] 9pnet_virtio: no channels available for device syz [ 1321.824051][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1321.824078][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1322.502467][T18911] siw: device registration error -23 [ 1322.545648][T18912] 9pnet_virtio: no channels available for device syz [ 1322.549322][T18912] siw: device registration error -23 [ 1323.229556][T18916] syzkaller0: entered promiscuous mode [ 1323.231602][T18916] syzkaller0: entered allmulticast mode [ 1323.956652][T18920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3138'. [ 1324.122892][ T40] audit: type=1326 audit(1775708573.242:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18917 comm="syz.3.3137" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1325.011970][T18936] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1325.014326][T18936] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1325.017384][T18936] vhci_hcd vhci_hcd.0: Device attached [ 1325.261261][T18935] siw: device registration error -23 [ 1325.294033][ T2088] usb 38-1: SetAddress Request (33) to port 0 [ 1325.299394][ T2088] usb 38-1: new SuperSpeed USB device number 33 using vhci_hcd [ 1325.518832][ T80] Bluetooth: hci0: Frame reassembly failed (-84) [ 1325.555340][T18946] 9pnet_virtio: no channels available for device syz [ 1325.647289][ T80] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1325.664556][T18937] vhci_hcd: connection reset by peer [ 1325.666868][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1325.668638][ T12] vhci_hcd vhci_hcd.0: release socket [ 1325.670555][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1326.114630][ T40] audit: type=1326 audit(1775708575.172:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.3.3144" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1326.929717][T15617] usb 40-1: device descriptor read/8, error -110 [ 1327.335432][T15617] usb usb40-port1: attempt power cycle [ 1327.894097][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1327.896754][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1327.902168][T15617] usb usb40-port1: unable to enumerate USB device [ 1328.312564][ T40] audit: type=1326 audit(1775708577.422:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18955 comm="syz.0.3147" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 1328.322180][T18964] syz_tun: entered allmulticast mode [ 1329.315404][T18963] syz_tun: left allmulticast mode [ 1330.384163][ T2088] usb 38-1: device descriptor read/8, error -110 [ 1331.215093][ T2088] usb usb38-port1: attempt power cycle [ 1331.424117][ T40] audit: type=1326 audit(1775708580.312:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18969 comm="syz.2.3149" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1331.774619][ T2088] usb usb38-port1: unable to enumerate USB device [ 1331.813592][T18976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3150'. [ 1331.928029][T18978] syzkaller0: entered promiscuous mode [ 1331.929826][T18978] syzkaller0: entered allmulticast mode [ 1332.401367][T18990] siw: device registration error -23 [ 1332.504742][T18993] 9pnet_virtio: no channels available for device syz [ 1335.618091][T19002] siw: device registration error -23 [ 1335.764317][T19005] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1335.766631][T19005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1335.791185][T19011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3159'. [ 1335.793267][T19005] vhci_hcd vhci_hcd.0: Device attached [ 1336.074457][ T40] audit: type=1326 audit(1775708585.202:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3158" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1336.204170][ T29] usb 44-1: SetAddress Request (117) to port 0 [ 1336.206532][ T29] usb 44-1: new SuperSpeed USB device number 117 using vhci_hcd [ 1336.274440][T19007] vhci_hcd: connection closed [ 1336.294124][ T80] vhci_hcd vhci_hcd.3: stop threads [ 1336.327249][ T80] vhci_hcd vhci_hcd.3: release socket [ 1336.334326][ T80] vhci_hcd vhci_hcd.3: disconnect device [ 1337.512580][ T1171] Bluetooth: hci0: Frame reassembly failed (-84) [ 1337.526293][ T80] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1337.627656][T19032] syzkaller0: entered promiscuous mode [ 1337.629619][T19032] syzkaller0: entered allmulticast mode [ 1337.924052][ T40] audit: type=1326 audit(1775708587.002:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.1.3162" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1339.595781][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1340.063605][ T155] Bluetooth: hci0: Frame reassembly failed (-84) [ 1340.086717][ T46] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1340.667630][T19049] 9pnet_virtio: no channels available for device syz [ 1341.268134][ T29] usb 44-1: device descriptor read/8, error -110 [ 1341.674556][ T29] usb usb44-port1: attempt power cycle [ 1341.919759][T19056] 9pnet_virtio: no channels available for device syz [ 1341.923100][T19056] siw: device registration error -23 [ 1342.065263][T10009] Bluetooth: hci0: command 0x1003 tx timeout [ 1342.068462][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1342.258592][ T29] usb usb44-port1: unable to enumerate USB device [ 1343.957905][ T40] audit: type=1326 audit(1775708593.082:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19065 comm="syz.2.3172" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1344.304198][T19071] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1344.306387][T19071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1344.321417][T19071] vhci_hcd vhci_hcd.0: Device attached [ 1344.754204][ T29] usb 38-1: SetAddress Request (37) to port 0 [ 1344.756448][ T29] usb 38-1: new SuperSpeed USB device number 37 using vhci_hcd [ 1344.846644][T19078] vhci_hcd: connection reset by peer [ 1344.860261][ T155] vhci_hcd vhci_hcd.0: stop threads [ 1344.862088][ T155] vhci_hcd vhci_hcd.0: release socket [ 1344.864065][ T155] vhci_hcd vhci_hcd.0: disconnect device [ 1345.269050][T19084] syz_tun: entered allmulticast mode [ 1345.276789][T19083] syz_tun: left allmulticast mode [ 1345.404220][T19088] syzkaller0: entered promiscuous mode [ 1345.406137][T19088] syzkaller0: entered allmulticast mode [ 1345.843674][T19096] 9pnet_virtio: no channels available for device syz [ 1345.848729][ T1171] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1345.855974][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 1347.365695][T19107] siw: device registration error -23 [ 1347.540040][ T40] audit: type=1326 audit(1775708596.642:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19111 comm="syz.3.3182" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1347.904005][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1348.635505][T19114] 9pnet_virtio: no channels available for device syz [ 1348.639297][T19114] siw: device registration error -23 [ 1349.247286][T19123] syz_tun: entered allmulticast mode [ 1349.292281][T19121] syz_tun: left allmulticast mode [ 1349.662039][ T40] audit: type=1326 audit(1775708598.782:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19127 comm="syz.3.3187" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1349.834205][ T29] usb 38-1: device descriptor read/8, error -110 [ 1350.430711][ T29] usb usb38-port1: attempt power cycle [ 1351.166768][T19142] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1351.168882][T19142] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1351.171950][T19142] vhci_hcd vhci_hcd.0: Device attached [ 1351.319491][T19143] vhci_hcd: connection closed [ 1351.319808][ T80] vhci_hcd vhci_hcd.2: stop threads [ 1351.323992][ T80] vhci_hcd vhci_hcd.2: release socket [ 1351.326177][ T80] vhci_hcd vhci_hcd.2: disconnect device [ 1351.618536][ T29] usb usb38-port1: unable to enumerate USB device [ 1351.678972][T19154] 9pnet_virtio: no channels available for device syz [ 1351.682469][T19154] siw: device registration error -23 [ 1352.344128][ T40] audit: type=1326 audit(1775708601.462:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.2.3193" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1353.347591][ T40] audit: type=1326 audit(1775708602.472:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3194" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1356.374636][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 1358.294737][ T5953] Bluetooth: hci0: command 0x1003 tx timeout [ 1358.296138][T10009] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1359.408895][ T40] audit: type=1326 audit(1775708608.532:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.2.3202" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1360.406679][T19206] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1360.409080][T19206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1360.413045][T19206] vhci_hcd vhci_hcd.0: Device attached [ 1360.589184][T19207] vhci_hcd: connection closed [ 1360.590815][ T1171] vhci_hcd vhci_hcd.1: stop threads [ 1360.594830][ T1171] vhci_hcd vhci_hcd.1: release socket [ 1360.596750][ T1171] vhci_hcd vhci_hcd.1: disconnect device [ 1361.534070][T19220] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1361.536754][T19220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1361.554025][T19220] vhci_hcd vhci_hcd.0: Device attached [ 1361.803352][T19226] 9pnet_virtio: no channels available for device syz [ 1361.854041][T12718] usb 40-1: SetAddress Request (33) to port 0 [ 1361.856930][T12718] usb 40-1: new SuperSpeed USB device number 33 using vhci_hcd [ 1362.242537][T19228] siw: device registration error -23 [ 1362.567234][T19232] 9pnet_virtio: no channels available for device syz [ 1362.906695][T19221] vhci_hcd: connection reset by peer [ 1362.909966][ T80] vhci_hcd vhci_hcd.1: stop threads [ 1362.912449][ T80] vhci_hcd vhci_hcd.1: release socket [ 1362.914763][ T80] vhci_hcd vhci_hcd.1: disconnect device [ 1365.739954][ T40] audit: type=1326 audit(1775708614.862:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.1.3219" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1366.346467][ T40] audit: type=1326 audit(1775708615.472:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.0.3213" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 1366.844928][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.847767][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.298650][T12718] usb 40-1: device descriptor read/8, error -110 [ 1368.080100][ T155] Bluetooth: hci0: Frame reassembly failed (-84) [ 1368.085289][ T1171] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.088375][T19259] 9pnet_virtio: no channels available for device syz [ 1368.153433][T12718] usb usb40-port1: attempt power cycle [ 1368.724800][T12718] usb usb40-port1: unable to enumerate USB device [ 1368.778080][T19267] 9pnet_virtio: no channels available for device syz [ 1369.417659][ T155] Bluetooth: hci5: Frame reassembly failed (-84) [ 1369.426912][ T155] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1370.143972][T10009] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1370.144170][T12343] Bluetooth: hci0: command 0x1003 tx timeout [ 1370.458736][T19278] 9pnet_virtio: no channels available for device syz [ 1370.461368][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 1371.433998][T10009] Bluetooth: hci5: command 0x1003 tx timeout [ 1371.436087][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1372.039222][ T40] audit: type=1326 audit(1775708621.162:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3223" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1372.814148][ T5953] Bluetooth: hci0: command 0x1003 tx timeout [ 1372.884039][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1374.478280][ T40] audit: type=1326 audit(1775708623.602:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19293 comm="syz.1.3225" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1375.284728][ T40] audit: type=1326 audit(1775708624.302:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19305 comm="syz.2.3229" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1375.960630][T19323] 9pnet_virtio: no channels available for device syz [ 1375.966532][ T1167] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1376.061711][ T80] Bluetooth: hci0: Frame reassembly failed (-84) [ 1377.884281][ T40] audit: type=1326 audit(1775708626.742:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19329 comm="syz.1.3234" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1377.984346][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1379.149317][T19338] 9pnet_virtio: no channels available for device syz [ 1379.318209][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 1379.790422][T19344] siw: device registration error -23 [ 1381.194221][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1381.624549][ T40] audit: type=1326 audit(1775708630.642:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19347 comm="syz.2.3237" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1383.114224][ T40] audit: type=1326 audit(1775708632.232:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19369 comm="syz.3.3244" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1385.057296][ T40] audit: type=1326 audit(1775708634.132:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19374 comm="syz.2.3245" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1385.172452][T13738] Bluetooth: hci0: Frame reassembly failed (-84) [ 1385.183706][ T1167] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1387.070206][T19390] 9pnet_virtio: no channels available for device syz [ 1387.184062][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1387.291104][T19390] siw: device registration error -23 [ 1390.593597][ T40] audit: type=1326 audit(1775708639.712:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.3253" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1392.243359][ T1167] Bluetooth: hci0: Frame reassembly failed (-84) [ 1392.258136][ T155] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1392.770001][T19431] 9pnet_virtio: no channels available for device syz [ 1393.668429][T19433] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1393.671231][T19433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1393.675004][T19433] vhci_hcd vhci_hcd.0: Device attached [ 1393.964308][T15617] usb 44-1: SetAddress Request (121) to port 0 [ 1393.966748][T15617] usb 44-1: new SuperSpeed USB device number 121 using vhci_hcd [ 1394.314011][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1394.432638][T19434] vhci_hcd: connection reset by peer [ 1394.439251][ T46] vhci_hcd vhci_hcd.3: stop threads [ 1394.441744][ T46] vhci_hcd vhci_hcd.3: release socket [ 1394.446222][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 1396.143965][ T40] audit: type=1326 audit(1775708645.262:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.3.3261" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1397.431564][T13738] Bluetooth: hci0: Frame reassembly failed (-84) [ 1397.438854][ T80] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1397.442812][T19460] 9pnet_virtio: no channels available for device syz [ 1398.173227][ T40] audit: type=1326 audit(1775708647.292:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19455 comm="syz.2.3262" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1399.453974][T19470] 9pnet_virtio: no channels available for device syz [ 1399.462648][T13738] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1399.522046][T12343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1399.562053][T15617] usb 44-1: device descriptor read/8, error -110 [ 1399.680175][T13738] Bluetooth: hci5: Frame reassembly failed (-84) [ 1399.682285][T13738] Bluetooth: hci5: Frame reassembly failed (-84) [ 1399.685183][T13738] Bluetooth: hci5: Frame reassembly failed (-84) [ 1399.687235][ T80] Bluetooth: hci5: Frame reassembly failed (-84) [ 1399.964465][T15617] usb usb44-port1: attempt power cycle [ 1400.195755][ T40] audit: type=1326 audit(1775708649.322:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19473 comm="syz.1.3266" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1400.524860][T15617] usb usb44-port1: unable to enumerate USB device [ 1401.514047][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1402.231766][T19485] siw: device registration error -23 [ 1402.841508][ T40] audit: type=1326 audit(1775708651.962:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.1.3271" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1402.850644][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 1404.043493][ T40] audit: type=1326 audit(1775708653.162:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.3.3272" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1404.874005][T19471] Bluetooth: hci0: command 0x1003 tx timeout [ 1404.913327][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1405.177138][ T1167] Bluetooth: hci0: Frame reassembly failed (-84) [ 1405.192907][ T46] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1405.769876][ T40] audit: type=1326 audit(1775708654.612:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.0.3277" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 1406.448066][T19511] 9pnet_virtio: no channels available for device syz [ 1407.114165][T19471] Bluetooth: hci0: command 0x1003 tx timeout [ 1407.131035][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1407.136853][ T80] Bluetooth: hci5: Frame reassembly failed (-84) [ 1407.143292][ T80] Bluetooth: hci5: Frame reassembly failed (-84) [ 1407.143843][T19523] 9pnet_virtio: no channels available for device syz [ 1407.336358][ T80] Bluetooth: hci0: Frame reassembly failed (-84) [ 1407.341021][ T1167] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1408.005646][T19533] 9pnet_virtio: no channels available for device syz [ 1408.012603][T19533] siw: device registration error -23 [ 1409.110263][T19536] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1409.112382][T19536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1409.116039][T19536] vhci_hcd vhci_hcd.0: Device attached [ 1409.194065][T10009] Bluetooth: hci5: command 0x1003 tx timeout [ 1409.197854][T19471] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1409.293546][T19538] vhci_hcd: connection closed [ 1409.293749][ T1167] vhci_hcd vhci_hcd.2: stop threads [ 1409.298471][ T1167] vhci_hcd vhci_hcd.2: release socket [ 1409.300862][ T1167] vhci_hcd vhci_hcd.2: disconnect device [ 1409.344049][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1409.529372][ T1167] Bluetooth: hci0: Frame reassembly failed (-84) [ 1410.954292][ T40] audit: type=1326 audit(1775708659.912:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19551 comm="syz.3.3287" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1411.643201][T19561] 9pnet_virtio: no channels available for device syz [ 1411.703982][T19471] Bluetooth: hci0: command 0x1003 tx timeout [ 1411.763976][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1412.020622][T19557] 9pnet_virtio: no channels available for device syz [ 1413.284273][T19555] siw: device registration error -23 [ 1414.102785][T19572] siw: device registration error -23 [ 1416.134923][T19580] 9pnet_virtio: no channels available for device syz [ 1418.081698][T15326] Bluetooth: hci0: Frame reassembly failed (-84) [ 1418.165229][ T1167] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1418.371815][T19592] fuse: Bad value for 'fd' [ 1419.904148][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1420.774015][ T40] audit: type=1326 audit(1775708669.722:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.3.3298" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8f6c code=0x0 [ 1421.766714][T19616] 9pnet_virtio: no channels available for device syz [ 1422.441497][T19621] 9pnet_virtio: no channels available for device syz [ 1422.589577][T19619] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1422.591888][T19619] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1422.613184][T19619] vhci_hcd vhci_hcd.0: Device attached [ 1422.884156][ T2088] usb 38-1: SetAddress Request (41) to port 0 [ 1422.886425][ T2088] usb 38-1: new SuperSpeed USB device number 41 using vhci_hcd [ 1423.051887][T19623] vhci_hcd: connection reset by peer [ 1423.054644][T13738] vhci_hcd vhci_hcd.0: stop threads [ 1423.057002][T13738] vhci_hcd vhci_hcd.0: release socket [ 1423.059842][T13738] vhci_hcd vhci_hcd.0: disconnect device [ 1423.980865][ T40] audit: type=1326 audit(1775708673.102:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19628 comm="syz.1.3302" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1423.996031][T19636] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1423.998924][T19636] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1426.222529][T19634] siw: device registration error -23 [ 1426.782525][T19636] vhci_hcd vhci_hcd.0: Device attached [ 1427.106295][ T6010] usb 42-1: SetAddress Request (44) to port 0 [ 1427.113823][ T6010] usb 42-1: new SuperSpeed USB device number 44 using vhci_hcd [ 1427.460798][T13738] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1427.502422][T19637] vhci_hcd: connection reset by peer [ 1427.506312][ T80] vhci_hcd vhci_hcd.2: stop threads [ 1427.508657][ T80] vhci_hcd vhci_hcd.2: release socket [ 1427.510975][ T80] vhci_hcd vhci_hcd.2: disconnect device [ 1427.796611][ T40] audit: type=1326 audit(1775708676.922:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19652 comm="syz.2.3309" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1427.887080][T19660] 9pnet_virtio: no channels available for device syz [ 1427.894751][T19660] siw: device registration error -23 [ 1427.994021][ T2088] usb 38-1: device descriptor read/8, error -110 [ 1428.226487][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.228822][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.414536][ T2088] usb usb38-port1: attempt power cycle [ 1428.994896][ T2088] usb usb38-port1: unable to enumerate USB device [ 1429.514134][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1429.516027][T19471] Bluetooth: hci0: command 0x1003 tx timeout [ 1429.619777][T13738] Bluetooth: hci0: Frame reassembly failed (-84) [ 1429.622880][ T46] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1430.577775][T19675] 9pnet_virtio: no channels available for device syz [ 1430.758047][T19675] siw: device registration error -23 [ 1432.036964][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1433.058793][ T6010] usb 42-1: device descriptor read/8, error -110 [ 1433.456366][ T6010] usb usb42-port1: attempt power cycle [ 1434.262650][T19691] siw: device registration error -23 [ 1434.306764][ T6010] usb usb42-port1: unable to enumerate USB device [ 1436.342931][T19696] 9pnet_virtio: no channels available for device syz [ 1436.624322][T19696] siw: device registration error -23 [ 1436.836523][T19698] syz_tun: entered allmulticast mode [ 1436.877873][T19697] syz_tun: left allmulticast mode [ 1437.238865][ T80] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1437.541661][T19708] 9pnet_virtio: no channels available for device syz [ 1437.548428][T19708] siw: device registration error -23 [ 1438.794960][T19713] 9pnet_virtio: no channels available for device syz [ 1438.800845][T19713] siw: device registration error -23 [ 1439.514060][ T5953] Bluetooth: hci0: command 0x1003 tx timeout [ 1439.704020][T19471] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1439.825356][T19720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3325'. [ 1440.838175][T19733] 9pnet_virtio: no channels available for device syz [ 1440.842509][ T1167] Bluetooth: hci0: Frame reassembly failed (-84) [ 1440.915037][T19726] siw: device registration error -23 [ 1441.676118][T19730] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1441.678262][T19730] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1441.684273][T19730] vhci_hcd vhci_hcd.0: Device attached [ 1441.957292][T19737] vhci_hcd: connection closed [ 1441.958080][ T46] vhci_hcd vhci_hcd.0: stop threads [ 1441.986594][ T46] vhci_hcd vhci_hcd.0: release socket [ 1441.988959][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 1442.034068][ T6010] usb 38-1: enqueue for inactive port 0 [ 1442.388453][T19745] siw: device registration error -23 [ 1442.864249][T19471] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1442.951018][ T155] Bluetooth: hci0: Frame reassembly failed (-84) [ 1442.958071][ T155] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1444.269422][ T6010] usb usb38-port1: attempt power cycle [ 1444.270683][T13738] Bluetooth: hci5: Frame reassembly failed (-84) [ 1444.271083][T19753] 9pnet_virtio: no channels available for device syz [ 1444.556108][T19747] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1444.561280][T19757] 9pnet_virtio: no channels available for device syz [ 1444.567608][T19747] Bluetooth: hci6: Frame reassembly failed (-84) [ 1444.825169][ T6010] usb usb38-port1: unable to enumerate USB device [ 1445.024060][T12343] Bluetooth: hci0: command 0x1003 tx timeout [ 1445.024521][T19471] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1445.192356][T19760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3334'. [ 1445.605132][T19769] siw: device registration error -23 [ 1446.304119][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1446.308219][T19471] Bluetooth: hci5: command 0x1003 tx timeout [ 1446.626947][ T5953] Bluetooth: hci6: command 0x1003 tx timeout [ 1446.693604][ T80] Bluetooth: hci0: Frame reassembly failed (-84) [ 1446.707433][T15326] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1446.717679][T19776] 9pnet_virtio: no channels available for device syz [ 1446.734107][T10009] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1448.409328][T19777] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1448.411578][T19777] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1448.415431][T19777] vhci_hcd vhci_hcd.0: Device attached [ 1448.509499][T19789] 9pnet_virtio: no channels available for device syz [ 1448.714616][ T5953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1448.721155][ T6753] usb 44-1: SetAddress Request (125) to port 0 [ 1448.723335][ T6753] usb 44-1: new SuperSpeed USB device number 125 using vhci_hcd [ 1449.992891][ T1171] Bluetooth: hci0: Frame reassembly failed (-84) [ 1451.220819][T19805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3343'. [ 1451.984161][ T5953] Bluetooth: hci0: command 0x1003 tx timeout [ 1451.988154][T10009] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1452.130612][T19787] vhci_hcd: connection reset by peer [ 1452.135770][ T1167] vhci_hcd vhci_hcd.3: stop threads [ 1452.137558][ T1167] vhci_hcd vhci_hcd.3: release socket [ 1452.139402][ T1167] vhci_hcd vhci_hcd.3: disconnect device [ 1452.511283][T19813] 9pnet_virtio: no channels available for device syz [ 1452.868093][ T46] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1452.926654][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 1454.546724][ T6753] usb 44-1: device descriptor read/8, error -110 [ 1454.954913][T10009] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1455.884647][ T6753] usb usb44-port1: attempt power cycle [ 1456.914571][ T6753] usb usb44-port1: unable to enumerate USB device [ 1457.034065][ T40] audit: type=1326 audit(1775708706.062:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19825 comm="syz.1.3346" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1457.105254][T19824] 9pnet_virtio: no channels available for device syz [ 1457.333755][T19824] siw: device registration error -23 [ 1457.662808][T19836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3352'. [ 1457.694082][ T40] audit: type=1326 audit(1775708706.812:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19831 comm="syz.2.3350" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1461.382200][T19860] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1461.385071][T19860] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1461.389258][T19860] vhci_hcd vhci_hcd.0: Device attached [ 1461.728757][T19861] vhci_hcd: connection closed [ 1461.764305][ T1167] vhci_hcd vhci_hcd.3: stop threads [ 1461.769192][ T1167] vhci_hcd vhci_hcd.3: release socket [ 1461.771604][ T1167] vhci_hcd vhci_hcd.3: disconnect device [ 1462.148334][T19866] 9pnet_virtio: no channels available for device syz [ 1462.156837][T19866] siw: device registration error -23 [ 1464.394371][T19872] 9pnet_virtio: no channels available for device syz [ 1464.400930][T19871] siw: device registration error -23 [ 1465.304940][T19876] 9pnet_virtio: no channels available for device syz [ 1465.595103][T19876] siw: device registration error -23 [ 1466.884836][T19881] 9pnet_virtio: no channels available for device syz [ 1467.128983][T19881] siw: device registration error -23 [ 1467.410842][T19883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3361'. [ 1467.861386][T19890] 9pnet_virtio: no channels available for device syz [ 1469.770593][T19894] 9pnet_virtio: no channels available for device syz [ 1470.885148][T19900] 9pnet_virtio: no channels available for device syz [ 1470.937389][T19900] siw: device registration error -23 [ 1473.144768][T19905] 9pnet_virtio: no channels available for device syz [ 1473.204670][T10009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1473.212592][T10009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1473.217598][T10009] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1473.223626][T10009] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1473.227208][T10009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1473.241924][T19905] siw: device registration error -23 [ 1473.465229][T19907] chnl_net:caif_netlink_parms(): no params data found [ 1473.513943][T19907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.516368][T19907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.518735][T19907] bridge_slave_0: entered allmulticast mode [ 1473.522423][T19907] bridge_slave_0: entered promiscuous mode [ 1473.527741][T19907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.530267][T19907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.532888][T19907] bridge_slave_1: entered allmulticast mode [ 1473.536234][T19907] bridge_slave_1: entered promiscuous mode [ 1473.558606][T19907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.565081][T19907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.581884][T19907] team0: Port device team_slave_0 added [ 1473.586024][T19907] team0: Port device team_slave_1 added [ 1473.612239][T19907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.614936][T19907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.622770][T19907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.627655][T19907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.629678][T19907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.638094][T19907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.647252][T19924] 9pnet_virtio: no channels available for device syz [ 1473.653567][T19924] siw: device registration error -23 [ 1473.712695][T19907] hsr_slave_0: entered promiscuous mode [ 1473.716411][T19907] hsr_slave_1: entered promiscuous mode [ 1473.719407][T19907] debugfs: 'hsr0' already exists in 'hsr' [ 1473.721995][T19907] Cannot create hsr debugfs directory [ 1473.887347][T19907] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1473.894866][T19907] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1473.904763][T19907] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1473.917944][T19907] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1473.978537][T19907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.981240][T19907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.984043][T19907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.986324][T19907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1474.095142][T19907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1474.126072][T19907] 8021q: adding VLAN 0 to HW filter on device team0 [ 1474.143576][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.149453][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.514038][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.516864][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1474.653719][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.656474][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1474.696439][T19907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1474.701030][T19907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1475.263974][T10009] Bluetooth: hci0: command tx timeout [ 1475.656991][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.687480][T19907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1475.762665][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.860876][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.020799][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.155117][T19907] veth0_vlan: entered promiscuous mode [ 1476.163663][T19907] veth1_vlan: entered promiscuous mode [ 1476.256743][T19907] veth0_macvtap: entered promiscuous mode [ 1476.263265][T19907] veth1_macvtap: entered promiscuous mode [ 1476.360187][T19956] siw: device registration error -23 [ 1476.365619][ T46] bridge_slave_1: left allmulticast mode [ 1476.367854][ T46] bridge_slave_1: left promiscuous mode [ 1476.374372][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.378902][ T46] bridge_slave_0: left allmulticast mode [ 1476.391141][ T46] bridge_slave_0: left promiscuous mode [ 1476.393179][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.721859][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.730528][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.736931][ T46] bond0 (unregistering): Released all slaves [ 1476.811429][T19907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.076016][T19907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.173734][T19747] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.177343][T19747] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.180520][T19747] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.183489][T19747] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.353032][T10009] Bluetooth: hci0: command tx timeout [ 1477.395612][ T46] hsr_slave_0: left promiscuous mode [ 1477.398191][ T46] hsr_slave_1: left promiscuous mode [ 1477.401000][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.403608][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.408590][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.414879][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.434629][ T46] veth1_macvtap: left promiscuous mode [ 1477.437259][ T46] veth0_macvtap: left promiscuous mode [ 1477.444714][ T46] veth1_vlan: left promiscuous mode [ 1477.447925][ T46] veth0_vlan: left promiscuous mode [ 1477.787751][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1477.796199][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1477.859650][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.862327][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.866872][T15105] infiniband syz0: ib_query_port failed (-19) [ 1477.900793][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.905967][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.427034][T10009] Bluetooth: hci0: command tx timeout [ 1480.724265][T20002] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1480.727290][T20002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1480.730941][T20002] vhci_hcd vhci_hcd.0: Device attached [ 1482.115991][T10009] Bluetooth: hci0: command tx timeout [ 1482.366081][ T6010] usb 40-1: SetAddress Request (37) to port 0 [ 1482.368780][ T6010] usb 40-1: new SuperSpeed USB device number 37 using vhci_hcd [ 1482.371635][T20003] vhci_hcd: connection closed [ 1482.371823][ T80] vhci_hcd vhci_hcd.1: stop threads [ 1482.381790][ T80] vhci_hcd vhci_hcd.1: release socket [ 1482.385376][ T80] vhci_hcd vhci_hcd.1: disconnect device [ 1482.394442][ T6010] usb 40-1: enqueue for inactive port 0 [ 1482.410052][T13738] Bluetooth: hci4: Frame reassembly failed (-84) [ 1482.412784][T13738] Bluetooth: hci4: Frame reassembly failed (-84) [ 1482.419378][T13738] Bluetooth: hci4: Frame reassembly failed (-84) [ 1482.784605][ T6010] usb usb40-port1: attempt power cycle [ 1483.025178][T20022] 9pnet_virtio: no channels available for device syz [ 1483.404964][ T6010] usb usb40-port1: unable to enumerate USB device [ 1483.532169][T20032] 9pnet_virtio: no channels available for device syz [ 1483.592364][T20032] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1484.524136][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1484.767623][ T1171] Bluetooth: hci5: Frame reassembly failed (-84) [ 1484.838749][ T1167] Bluetooth: hci5: Frame reassembly failed (-84) [ 1484.917503][T20040] 9pnet_virtio: no channels available for device syz [ 1484.977379][ T80] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1485.238823][T20042] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1485.241462][T20042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1485.344296][T20042] vhci_hcd vhci_hcd.0: Device attached [ 1486.665870][T20045] vhci_hcd: connection closed [ 1486.675338][T20034] vhci_hcd vhci_hcd.3: stop threads [ 1486.681416][T20034] vhci_hcd vhci_hcd.3: release socket [ 1486.686948][T20034] vhci_hcd vhci_hcd.3: disconnect device [ 1486.794063][T10009] Bluetooth: hci5: command 0x1003 tx timeout [ 1486.804216][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1487.167779][ T6753] usb 44-1: enqueue for inactive port 0 [ 1487.513002][T20065] siw: device registration error -23 [ 1487.557470][T20072] 9pnet_virtio: no channels available for device syz [ 1488.448410][ T6753] usb usb44-port1: attempt power cycle [ 1489.666051][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.668496][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.745882][T20075] 9pnet_virtio: no channels available for device syz [ 1489.765704][ T6753] usb usb44-port1: unable to enumerate USB device [ 1489.922840][T20071] siw: device registration error -23 [ 1490.634204][T20090] siw: device registration error -23 [ 1491.458035][T20099] 9pnet_virtio: no channels available for device syz [ 1492.796493][T20109] 9pnet_virtio: no channels available for device syz [ 1492.802045][T20109] siw: device registration error -23 [ 1495.428331][T20132] 9pnet_virtio: no channels available for device syz [ 1495.432803][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 1497.424048][T10009] Bluetooth: hci4: command 0x1003 tx timeout [ 1497.444112][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1498.514755][T20164] siw: device registration error -23 [ 1499.153163][T20167] 9pnet_virtio: no channels available for device syz [ 1499.376612][T20167] siw: device registration error -23 [ 1500.758894][T20034] Bluetooth: hci4: Frame reassembly failed (-84) [ 1500.766030][T20170] 9pnet_virtio: no channels available for device syz [ 1502.224147][T20187] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1502.226701][T20187] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1502.254317][T20187] vhci_hcd vhci_hcd.0: Device attached [ 1502.686350][T20169] usb 40-1: SetAddress Request (41) to port 0 [ 1502.693657][T20169] usb 40-1: new SuperSpeed USB device number 41 using vhci_hcd [ 1502.784206][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1503.141619][T20188] vhci_hcd: connection reset by peer [ 1503.145475][ T1167] vhci_hcd vhci_hcd.1: stop threads [ 1503.148788][ T1167] vhci_hcd vhci_hcd.1: release socket [ 1503.151278][ T1167] vhci_hcd vhci_hcd.1: disconnect device [ 1504.360276][T20206] 9pnet_virtio: no channels available for device syz [ 1504.366204][T20206] siw: device registration error -23 [ 1505.231275][T20213] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1505.233419][T20213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1505.236571][T20213] vhci_hcd vhci_hcd.0: Device attached [ 1505.504145][ T6010] usb 44-1: SetAddress Request (8) to port 0 [ 1505.504194][ T6010] usb 44-1: new SuperSpeed USB device number 8 using vhci_hcd [ 1506.156595][T20214] vhci_hcd: connection reset by peer [ 1506.159375][ T1167] vhci_hcd vhci_hcd.3: stop threads [ 1506.161650][ T1167] vhci_hcd vhci_hcd.3: release socket [ 1506.165886][ T1167] vhci_hcd vhci_hcd.3: disconnect device [ 1507.990130][T20231] 9pnet_virtio: no channels available for device syz [ 1507.995037][T20231] siw: device registration error -23 [ 1508.004451][T20169] usb 40-1: device descriptor read/8, error -110 [ 1508.163069][T20233] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1508.165372][T20233] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1508.318641][T20233] vhci_hcd vhci_hcd.0: Device attached [ 1508.413074][T20169] usb 40-1: SetAddress Request (42) to port 0 [ 1508.415336][T20169] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1508.803214][T20246] siw: device registration error -23 [ 1509.164487][T20248] 9pnet_virtio: no channels available for device syz [ 1509.219054][T20248] siw: device registration error -23 [ 1510.601256][ T6010] usb 44-1: device descriptor read/8, error -110 [ 1511.428941][ T6010] usb usb44-port1: attempt power cycle [ 1511.638783][T20234] vhci_hcd: connection reset by peer [ 1511.644389][ T80] vhci_hcd vhci_hcd.1: stop threads [ 1511.646935][ T80] vhci_hcd vhci_hcd.1: release socket [ 1511.649313][ T80] vhci_hcd vhci_hcd.1: disconnect device [ 1512.067266][T20257] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1512.069996][T20257] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1512.073449][T20257] vhci_hcd vhci_hcd.0: Device attached [ 1512.334169][ T6685] usb 46-1: SetAddress Request (2) to port 0 [ 1512.336865][ T6685] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1512.522418][ T6010] usb usb44-port1: unable to enumerate USB device [ 1512.624083][T20261] vhci_hcd: connection reset by peer [ 1512.626913][ T1171] vhci_hcd vhci_hcd.4: stop threads [ 1512.629256][ T1171] vhci_hcd vhci_hcd.4: release socket [ 1512.631907][ T1171] vhci_hcd vhci_hcd.4: disconnect device [ 1513.504248][T20169] usb 40-1: device descriptor read/8, error -110 [ 1514.377059][T20169] usb usb40-port1: attempt power cycle [ 1515.370409][T20169] usb usb40-port1: unable to enumerate USB device [ 1515.381673][T20284] 9pnet_virtio: no channels available for device syz [ 1516.984236][T20277] 9pnet_virtio: no channels available for device syz [ 1517.004910][T20277] siw: device registration error -23 [ 1517.141170][T20290] syz_tun: entered allmulticast mode [ 1517.181497][T20289] syz_tun: left allmulticast mode [ 1517.424032][ T6685] usb 46-1: device descriptor read/8, error -110 [ 1519.258121][ T6685] usb usb46-port1: attempt power cycle [ 1519.817904][ T6685] usb usb46-port1: unable to enumerate USB device [ 1520.161350][T20302] 9pnet_virtio: no channels available for device syz [ 1520.173022][T20302] siw: device registration error -23 [ 1521.005730][T20312] 9pnet_virtio: no channels available for device syz [ 1521.012441][T20312] siw: device registration error -23 [ 1522.026812][T20322] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1522.029475][T20322] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1522.033622][T20322] vhci_hcd vhci_hcd.0: Device attached [ 1522.614103][T20169] usb 44-1: SetAddress Request (12) to port 0 [ 1522.616571][T20169] usb 44-1: new SuperSpeed USB device number 12 using vhci_hcd [ 1523.655773][T20315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1523.657916][T20315] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1523.660627][T20315] vhci_hcd vhci_hcd.0: Device attached [ 1524.158566][T20331] 9pnet_virtio: no channels available for device syz [ 1524.623231][ T6010] usb 42-1: SetAddress Request (48) to port 0 [ 1524.627592][T20338] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1524.630644][T20338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1524.644392][ T6010] usb 42-1: new SuperSpeed USB device number 48 using vhci_hcd [ 1524.717290][T20338] vhci_hcd vhci_hcd.0: Device attached [ 1524.894662][T20333] vhci_hcd: connection reset by peer [ 1524.897309][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 1524.899432][ T1141] vhci_hcd vhci_hcd.2: release socket [ 1524.901636][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 1524.905457][T20323] vhci_hcd: connection reset by peer [ 1524.907582][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 1524.909310][ T1141] vhci_hcd vhci_hcd.3: release socket [ 1524.911136][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 1525.004896][ T5684] usb 40-1: SetAddress Request (45) to port 0 [ 1525.007583][ T5684] usb 40-1: new SuperSpeed USB device number 45 using vhci_hcd [ 1525.251645][T20339] vhci_hcd: connection reset by peer [ 1525.259298][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 1525.261031][ T1141] vhci_hcd vhci_hcd.1: release socket [ 1525.262858][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 1525.407891][T19747] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1525.412593][T19747] Bluetooth: hci4: Frame reassembly failed (-84) [ 1525.437340][T20349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1525.440277][T20349] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1525.548347][T20349] vhci_hcd vhci_hcd.0: Device attached [ 1525.939300][T20350] vhci_hcd: connection closed [ 1525.939752][ T80] vhci_hcd vhci_hcd.3: stop threads [ 1525.943423][ T80] vhci_hcd vhci_hcd.3: release socket [ 1525.946445][ T80] vhci_hcd vhci_hcd.3: disconnect device [ 1527.424017][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1527.424074][T10009] Bluetooth: hci4: command 0x1003 tx timeout [ 1527.746096][T20169] usb 44-1: device descriptor read/8, error -110 [ 1528.179025][T20372] 9pnet_virtio: no channels available for device syz [ 1528.645323][T20372] siw: device registration error -23 [ 1528.848946][T20169] usb usb44-port1: attempt power cycle [ 1530.026589][ T6010] usb 42-1: device descriptor read/8, error -110 [ 1530.064015][ T5684] usb 40-1: device descriptor read/8, error -110 [ 1530.742181][ T6010] usb usb42-port1: attempt power cycle [ 1530.745224][T20169] usb usb44-port1: unable to enumerate USB device [ 1531.749109][T20385] siw: device registration error -23 [ 1533.315580][ T5684] usb usb40-port1: attempt power cycle [ 1533.594723][ T6010] usb usb42-port1: unable to enumerate USB device [ 1533.635633][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 1534.094424][ T5684] usb usb40-port1: unable to enumerate USB device [ 1534.138582][T20400] 9pnet_virtio: no channels available for device syz [ 1534.230655][T20405] 9pnet_virtio: no channels available for device syz [ 1534.236885][T20405] siw: device registration error -23 [ 1535.714080][T10009] Bluetooth: hci4: command 0x1003 tx timeout [ 1535.717021][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1535.895844][T20410] 9pnet_virtio: no channels available for device syz [ 1536.138208][T20413] syzkaller0: entered promiscuous mode [ 1536.140011][T20413] syzkaller0: entered allmulticast mode [ 1536.275343][T20414] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1536.278359][T20414] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1536.295634][T20414] vhci_hcd vhci_hcd.0: Device attached [ 1536.649538][T20420] siw: device registration error -23 [ 1536.936220][T20426] 9pnet_virtio: no channels available for device syz [ 1539.273976][T20415] vhci_hcd: connection closed [ 1539.274356][T19747] vhci_hcd vhci_hcd.1: stop threads [ 1539.278940][T19747] vhci_hcd vhci_hcd.1: release socket [ 1539.282030][T19747] vhci_hcd vhci_hcd.1: disconnect device [ 1539.346530][ T5684] usb 40-1: enqueue for inactive port 0 [ 1539.373654][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1539.379949][T19747] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1539.404998][T20432] 9pnet_virtio: no channels available for device syz [ 1540.710033][ T5684] usb usb40-port1: attempt power cycle [ 1541.019982][T20443] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1541.022620][T20443] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1541.026862][T20443] vhci_hcd vhci_hcd.0: Device attached [ 1541.244639][ T5684] usb 40-1: SetAddress Request (52) to port 0 [ 1541.256840][ T5684] usb 40-1: new SuperSpeed USB device number 52 using vhci_hcd [ 1541.424100][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1541.424154][T10009] Bluetooth: hci4: command 0x1003 tx timeout [ 1542.065227][T20451] syzkaller0: entered promiscuous mode [ 1542.067427][T20451] syzkaller0: entered allmulticast mode [ 1542.097385][T20444] vhci_hcd: connection reset by peer [ 1542.099357][ T80] vhci_hcd vhci_hcd.1: stop threads [ 1542.101305][ T80] vhci_hcd vhci_hcd.1: release socket [ 1542.103804][ T80] vhci_hcd vhci_hcd.1: disconnect device [ 1544.838394][T20454] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1544.840554][T20454] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1544.843162][T20454] vhci_hcd vhci_hcd.0: Device attached [ 1545.234820][T20466] vhci_hcd: connection closed [ 1545.235137][ T1141] vhci_hcd vhci_hcd.4: stop threads [ 1545.238615][ T1141] vhci_hcd vhci_hcd.4: release socket [ 1545.240700][ T1141] vhci_hcd vhci_hcd.4: disconnect device [ 1545.254045][T20364] usb 46-1: enqueue for inactive port 0 [ 1545.606173][T20474] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1545.608408][T20474] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1545.619736][T20474] vhci_hcd vhci_hcd.0: Device attached [ 1545.784920][T20364] usb usb46-port1: attempt power cycle [ 1546.259432][T20475] vhci_hcd: connection closed [ 1546.261265][ T1171] vhci_hcd vhci_hcd.1: stop threads [ 1546.277899][ T1171] vhci_hcd vhci_hcd.1: release socket [ 1546.280761][ T1171] vhci_hcd vhci_hcd.1: disconnect device [ 1546.304501][ T5684] usb 40-1: device descriptor read/8, error -110 [ 1547.050713][T20364] usb usb46-port1: unable to enumerate USB device [ 1547.055269][ T5684] usb usb40-port1: unable to enumerate USB device [ 1548.053255][T20493] syzkaller0: entered promiscuous mode [ 1548.055192][T20493] syzkaller0: entered allmulticast mode [ 1550.494227][T20501] siw: device registration error -23 [ 1550.856496][T20500] __kmem_cache_create_args(9p-fcall-cache-439) failed with error -12 [ 1550.859221][T20500] CPU: 1 UID: 0 PID: 20500 Comm: syz.4.3475 Not tainted syzkaller #0 PREEMPT(full) [ 1550.859239][T20500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1550.859248][T20500] Call Trace: [ 1550.859299][T20500] [ 1550.859306][T20500] dump_stack_lvl+0x100/0x190 [ 1550.859378][T20500] __kmem_cache_create_args.cold+0x33/0x6e [ 1550.859400][T20500] p9_client_create+0xa5d/0xd40 [ 1550.859550][T20500] ? __pfx_p9_client_create+0x10/0x10 [ 1550.859568][T20500] ? lockdep_init_map_type+0x5c/0x250 [ 1550.859587][T20500] ? __raw_spin_lock_init+0x3a/0x110 [ 1550.859609][T20500] v9fs_session_init+0x40/0xce0 [ 1550.859687][T20500] ? kasan_save_track+0x14/0x30 [ 1550.859702][T20500] v9fs_get_tree+0xb8/0xb50 [ 1550.859715][T20500] ? rcu_is_watching+0x12/0xc0 [ 1550.859737][T20500] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1550.859752][T20500] ? bpf_lsm_capable+0x9/0x10 [ 1550.859766][T20500] ? security_capable+0x80/0x260 [ 1550.859808][T20500] vfs_get_tree+0x92/0x320 [ 1550.859828][T20500] path_mount+0x7d0/0x23d0 [ 1550.859850][T20500] ? __pfx_path_mount+0x10/0x10 [ 1550.859865][T20500] ? lockdep_hardirqs_on+0x78/0x100 [ 1550.859919][T20500] ? putname+0xb1/0x110 [ 1550.859933][T20500] ? kmem_cache_free+0x124/0x6a0 [ 1550.859957][T20500] ? __ia32_sys_mount+0x292/0x310 [ 1550.859973][T20500] __ia32_sys_mount+0x292/0x310 [ 1550.859990][T20500] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1550.860011][T20500] __do_fast_syscall_32+0xe3/0x8c0 [ 1550.860028][T20500] do_fast_syscall_32+0x32/0x70 [ 1550.860043][T20500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1550.860059][T20500] RIP: 0023:0xf703ef6c [ 1550.860069][T20500] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1550.860081][T20500] RSP: 002b:00000000f53eb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1550.860137][T20500] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000480 [ 1550.860148][T20500] RDX: 00000000800004c0 RSI: 000000000000008c RDI: 0000000000000000 [ 1550.860157][T20500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1550.860165][T20500] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1550.860172][T20500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1550.860188][T20500] [ 1551.108606][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.110703][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.374134][T20523] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1553.377309][T20523] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1553.384089][T20523] vhci_hcd vhci_hcd.0: Device attached [ 1553.641916][T20532] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1553.644832][T20532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1553.651442][T20532] vhci_hcd vhci_hcd.0: Device attached [ 1553.724045][T20364] usb 40-1: SetAddress Request (53) to port 0 [ 1553.726819][T20364] usb 40-1: new SuperSpeed USB device number 53 using vhci_hcd [ 1553.751244][ T80] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1553.755594][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1553.914079][ T5684] usb 44-1: SetAddress Request (16) to port 0 [ 1553.916979][ T5684] usb 44-1: new SuperSpeed USB device number 16 using vhci_hcd [ 1554.650303][T20533] vhci_hcd: connection reset by peer [ 1554.657163][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 1554.660701][ T1141] vhci_hcd vhci_hcd.3: release socket [ 1554.663188][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 1554.693703][T20524] vhci_hcd: connection reset by peer [ 1554.698191][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 1554.701949][ T1141] vhci_hcd vhci_hcd.1: release socket [ 1554.706577][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 1554.791032][ T1167] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1554.795969][T20034] Bluetooth: hci5: Frame reassembly failed (-84) [ 1554.805383][T20540] 9pnet_virtio: no channels available for device syz [ 1555.834106][T19471] Bluetooth: hci4: command 0x1003 tx timeout [ 1555.984075][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1556.864076][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 1556.864140][T10009] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1557.998394][T20560] Bluetooth: MGMT ver 1.23 [ 1558.970341][T20364] usb 40-1: device descriptor read/8, error -110 [ 1559.024258][ T5684] usb 44-1: device descriptor read/8, error -110 [ 1559.455747][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 1559.786466][T20364] usb usb40-port1: attempt power cycle [ 1559.789194][ T5684] usb usb44-port1: attempt power cycle [ 1560.405542][T20364] usb usb40-port1: unable to enumerate USB device [ 1560.409464][ T5684] usb usb44-port1: unable to enumerate USB device [ 1560.550590][T20580] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1560.553260][T20580] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1560.567371][T20580] vhci_hcd vhci_hcd.0: Device attached [ 1560.665961][ T155] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1560.666068][T20584] 9pnet_virtio: no channels available for device syz [ 1560.670117][ T1141] Bluetooth: hci5: Frame reassembly failed (-84) [ 1560.675862][ T1141] Bluetooth: hci5: Frame reassembly failed (-84) [ 1560.994611][T20364] usb 40-1: SetAddress Request (57) to port 0 [ 1561.002306][T20364] usb 40-1: new SuperSpeed USB device number 57 using vhci_hcd [ 1561.184125][T20581] vhci_hcd: connection reset by peer [ 1561.186342][ T80] vhci_hcd vhci_hcd.1: stop threads [ 1561.188208][ T80] vhci_hcd vhci_hcd.1: release socket [ 1561.190663][ T80] vhci_hcd vhci_hcd.1: disconnect device [ 1561.514108][T19471] Bluetooth: hci4: command 0x1003 tx timeout [ 1561.514343][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1561.833715][T20590] siw: device registration error -23 [ 1562.196508][T20595] 9pnet_virtio: no channels available for device syz [ 1562.704055][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1563.465505][T20600] 9pnet_virtio: no channels available for device syz [ 1563.519074][T20600] siw: device registration error -23 [ 1566.269210][T20364] usb 40-1: device descriptor read/8, error -110 [ 1566.734228][T20364] usb usb40-port1: attempt power cycle [ 1567.319270][T20364] usb usb40-port1: unable to enumerate USB device [ 1568.465917][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1571.034112][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 1571.124020][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1571.493739][T20649] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1571.496807][T20649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1571.514214][T20649] vhci_hcd vhci_hcd.0: Device attached [ 1571.808764][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 1571.820201][T19747] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1573.296546][ T8500] usb 40-1: SetAddress Request (61) to port 0 [ 1573.298627][ T8500] usb 40-1: new SuperSpeed USB device number 61 using vhci_hcd [ 1573.834065][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1574.078793][T20654] vhci_hcd: connection reset by peer [ 1574.134778][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 1574.136550][ T1141] vhci_hcd vhci_hcd.1: release socket [ 1574.138564][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 1576.259364][T20687] syz_tun: entered allmulticast mode [ 1576.282906][T20686] syz_tun: left allmulticast mode [ 1576.444611][T20689] fuse: Bad value for 'group_id' [ 1576.446786][T20689] fuse: Bad value for 'group_id' [ 1577.855945][ T1167] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1577.867696][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 1578.085928][T20705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1578.164043][T20709] 9pnet_virtio: no channels available for device syz [ 1578.167651][T20034] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1578.225909][ T1141] Bluetooth: hci5: Frame reassembly failed (-84) [ 1578.340357][T20711] siw: device registration error -23 [ 1578.864358][ T8500] usb 40-1: device descriptor read/8, error -110 [ 1579.689443][ T8500] usb usb40-port1: attempt power cycle [ 1579.904297][T19471] Bluetooth: hci4: command 0x1003 tx timeout [ 1579.907497][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1580.013600][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1580.031909][T19747] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1580.224064][T10009] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1580.226130][T19471] Bluetooth: hci5: command 0x1003 tx timeout [ 1580.599023][T20728] 9pnet_virtio: no channels available for device syz [ 1580.605249][ T80] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1580.611880][ T80] Bluetooth: hci5: Frame reassembly failed (-84) [ 1580.870625][ T8500] usb usb40-port1: unable to enumerate USB device [ 1582.065069][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1582.065247][T10009] Bluetooth: hci4: command 0x1003 tx timeout [ 1582.623999][T10009] Bluetooth: hci5: command 0x1003 tx timeout [ 1582.627056][T19471] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1584.399609][T20750] siw: device registration error -23 [ 1585.971453][T20771] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1585.973600][T20771] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1585.983166][T20771] vhci_hcd vhci_hcd.0: Device attached [ 1586.776812][T20772] vhci_hcd: connection closed [ 1586.784397][T19747] vhci_hcd vhci_hcd.2: stop threads [ 1586.788697][T19747] vhci_hcd vhci_hcd.2: release socket [ 1586.803934][T19747] vhci_hcd vhci_hcd.2: disconnect device [ 1587.094842][T20779] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1587.097534][T20779] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1587.100211][T20779] vhci_hcd vhci_hcd.0: Device attached [ 1587.198407][T20783] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1587.200636][T20783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1587.211333][T20783] vhci_hcd vhci_hcd.0: Device attached [ 1587.364054][ T6685] usb 44-1: SetAddress Request (20) to port 0 [ 1587.366257][ T6685] usb 44-1: new SuperSpeed USB device number 20 using vhci_hcd [ 1588.059545][T20364] usb 46-1: SetAddress Request (10) to port 0 [ 1588.061772][T20364] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1588.115055][T20784] vhci_hcd: connection reset by peer [ 1588.340565][T19747] vhci_hcd vhci_hcd.4: stop threads [ 1588.349023][T19747] vhci_hcd vhci_hcd.4: release socket [ 1588.359126][T19747] vhci_hcd vhci_hcd.4: disconnect device [ 1588.754884][T20781] vhci_hcd: connection reset by peer [ 1588.757562][ T1167] vhci_hcd vhci_hcd.3: stop threads [ 1588.759734][ T1167] vhci_hcd vhci_hcd.3: release socket [ 1588.762629][ T1167] vhci_hcd vhci_hcd.3: disconnect device [ 1589.540911][ T1167] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1589.609277][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 1590.735930][T19747] Bluetooth: hci5: Frame reassembly failed (-84) [ 1590.750861][T19747] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1590.760300][T20818] 9pnet_virtio: no channels available for device syz [ 1591.674039][T19471] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1592.464938][ T6685] usb 44-1: device descriptor read/8, error -110 [ 1592.812587][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 1592.815903][T10009] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1592.898880][ T6685] usb usb44-port1: attempt power cycle [ 1593.104005][T20364] usb 46-1: device descriptor read/8, error -110 [ 1593.468865][ T6685] usb usb44-port1: unable to enumerate USB device [ 1593.568747][T20364] usb usb46-port1: attempt power cycle [ 1596.020406][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1596.028935][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1596.129394][T20843] 9pnet_virtio: no channels available for device syz [ 1596.194150][T20364] usb usb46-port1: unable to enumerate USB device [ 1598.084277][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1598.089077][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 1598.345106][T20878] 9pnet_virtio: no channels available for device syz [ 1598.570210][T15326] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1598.595899][T19747] Bluetooth: hci5: Frame reassembly failed (-84) [ 1599.274002][T10009] Bluetooth: hci0: command 0x0406 tx timeout [ 1599.393988][T20879] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1599.396384][T20879] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1599.414134][T20879] vhci_hcd vhci_hcd.0: Device attached [ 1599.684154][ T6010] usb 44-1: SetAddress Request (24) to port 0 [ 1599.687124][ T6010] usb 44-1: new SuperSpeed USB device number 24 using vhci_hcd [ 1599.948855][T20880] vhci_hcd: connection closed [ 1599.949165][T20881] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1599.954571][ T80] vhci_hcd vhci_hcd.3: stop threads [ 1599.979128][ T80] vhci_hcd vhci_hcd.3: release socket [ 1599.983149][ T80] vhci_hcd vhci_hcd.3: disconnect device [ 1600.624083][T19471] Bluetooth: hci5: command 0x1003 tx timeout [ 1600.624104][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1601.683265][T20897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1601.840088][T19747] Bluetooth: hci4: Frame reassembly failed (-84) [ 1601.848325][T19747] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1602.452617][T20909] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1602.455564][T20909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1602.474635][T19747] Bluetooth: hci5: Frame reassembly failed (-84) [ 1602.495742][T20909] vhci_hcd vhci_hcd.0: Device attached [ 1602.538885][T20910] 9pnet_virtio: no channels available for device syz [ 1602.783652][T20911] vhci_hcd: connection closed [ 1602.811937][T15326] vhci_hcd vhci_hcd.3: stop threads [ 1602.816413][T15326] vhci_hcd vhci_hcd.3: release socket [ 1602.824741][T15326] vhci_hcd vhci_hcd.3: disconnect device [ 1603.824156][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1604.544060][T19471] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1604.873166][T20916] 9pnet_virtio: no channels available for device syz [ 1604.887906][ T6010] usb 44-1: device descriptor read/8, error -110 [ 1604.889395][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 1604.893028][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 1604.896942][T20922] 9pnet_virtio: no channels available for device syz [ 1604.905828][ T1167] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1605.439888][ T6010] usb usb44-port1: attempt power cycle [ 1606.371675][ T6010] usb usb44-port1: unable to enumerate USB device [ 1606.690954][T20946] 9pnet_virtio: no channels available for device syz [ 1606.948152][T19471] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1606.954808][T10009] Bluetooth: hci4: command 0x1003 tx timeout [ 1607.418950][T19747] Bluetooth: hci5: Frame reassembly failed (-84) [ 1607.827552][T20952] 9pnet_virtio: no channels available for device syz [ 1607.842160][ T1167] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1608.109255][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 1608.704134][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1609.703343][T20969] siw: device registration error -23 [ 1610.244056][T10009] Bluetooth: hci4: command 0x1003 tx timeout [ 1610.246774][T19471] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1611.868549][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 1611.890949][T13738] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1612.547330][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.550643][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.777584][T15326] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1613.781719][T15326] Bluetooth: hci5: Frame reassembly failed (-84) [ 1613.904103][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 1613.906913][T19471] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1614.528624][T21006] 9pnet_virtio: no channels available for device syz [ 1614.532702][T21006] siw: device registration error -23 [ 1615.834765][T19471] Bluetooth: hci5: command 0x1003 tx timeout [ 1615.837811][T10009] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1616.475647][T21015] 9pnet_virtio: no channels available for device syz [ 1618.339200][ T1171] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1618.355662][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1618.370798][T21030] fuse: Unknown parameter 'grou00000000000000000000' [ 1618.771282][T21031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1618.773767][T21031] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1618.835072][T21031] vhci_hcd vhci_hcd.0: Device attached [ 1619.114408][T17115] usb 42-1: SetAddress Request (53) to port 0 [ 1619.116498][T17115] usb 42-1: new SuperSpeed USB device number 53 using vhci_hcd [ 1619.179591][T21035] vhci_hcd: connection reset by peer [ 1619.207279][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1619.209613][ T12] vhci_hcd vhci_hcd.2: release socket [ 1619.212044][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1619.490822][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 1619.511696][ T1171] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1619.515162][T21046] 9pnet_virtio: no channels available for device syz [ 1620.297227][T21055] 9pnet_virtio: no channels available for device syz [ 1620.393974][T19471] Bluetooth: hci4: command 0x1003 tx timeout [ 1620.394406][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1621.504026][T10009] Bluetooth: hci5: command 0x1003 tx timeout [ 1621.504072][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1623.865213][T21102] syzkaller0: entered promiscuous mode [ 1624.595004][T17115] usb 42-1: device descriptor read/8, error -110 [ 1625.736396][T17115] usb usb42-port1: attempt power cycle [ 1627.010611][T17115] usb usb42-port1: unable to enumerate USB device [ 1629.298178][T13738] Bluetooth: hci4: Frame reassembly failed (-84) [ 1629.303094][ T1171] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1630.294336][T19747] Bluetooth: hci5: Frame reassembly failed (-84) [ 1630.297101][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 1630.319496][T19747] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1630.340996][T21158] 9pnet_virtio: no channels available for device syz [ 1630.919187][T21167] 9pnet_virtio: no channels available for device syz [ 1631.343993][T19471] Bluetooth: hci4: command 0x1003 tx timeout [ 1631.344009][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1632.304079][T10009] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1632.304094][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 1633.894882][T19747] Bluetooth: hci4: Frame reassembly failed (-84) [ 1633.897481][T15326] Bluetooth: hci4: Frame reassembly failed (-84) [ 1633.902965][T19747] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1634.362338][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 1634.379009][T21200] 9pnet_virtio: no channels available for device syz [ 1634.418163][T19747] Bluetooth: hci6: Frame reassembly failed (-84) [ 1634.429066][T21202] 9pnet_virtio: no channels available for device syz [ 1634.676009][ T80] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1634.808701][T13738] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1635.905096][T12343] Bluetooth: hci4: command 0x1003 tx timeout [ 1635.908385][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1636.384071][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1636.463985][T10009] Bluetooth: hci6: command 0x1003 tx timeout [ 1636.464003][T19471] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1640.175180][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1640.211534][ T80] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1640.468510][T21253] 9pnet_virtio: no channels available for device syz [ 1640.989044][T21254] 9pnet_virtio: no channels available for device syz [ 1642.234347][T21268] 9pnet_virtio: no channels available for device syz [ 1642.236150][T19471] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1642.325947][T13738] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1642.329455][T13738] Bluetooth: hci5: Frame reassembly failed (-84) [ 1643.084494][T21270] fuse: Unknown parameter 'group_i00000000000000000000' [ 1644.221355][T21280] __kmem_cache_create_args(9p-fcall-cache-463) failed with error -12 [ 1644.224714][T21280] CPU: 1 UID: 0 PID: 21280 Comm: syz.2.3641 Tainted: G L syzkaller #0 PREEMPT(full) [ 1644.224736][T21280] Tainted: [L]=SOFTLOCKUP [ 1644.224741][T21280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1644.224749][T21280] Call Trace: [ 1644.224754][T21280] [ 1644.224760][T21280] dump_stack_lvl+0x100/0x190 [ 1644.224782][T21280] __kmem_cache_create_args.cold+0x33/0x6e [ 1644.224801][T21280] p9_client_create+0xa5d/0xd40 [ 1644.224819][T21280] ? __pfx_p9_client_create+0x10/0x10 [ 1644.224837][T21280] ? lockdep_init_map_type+0x5c/0x250 [ 1644.224854][T21280] ? __raw_spin_lock_init+0x3a/0x110 [ 1644.224873][T21280] v9fs_session_init+0x40/0xce0 [ 1644.224893][T21280] ? kasan_save_track+0x14/0x30 [ 1644.224906][T21280] v9fs_get_tree+0xb8/0xb50 [ 1644.224916][T21280] ? rcu_is_watching+0x12/0xc0 [ 1644.224934][T21280] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1644.224947][T21280] ? bpf_lsm_capable+0x9/0x10 [ 1644.224959][T21280] ? security_capable+0x80/0x260 [ 1644.224972][T21280] vfs_get_tree+0x92/0x320 [ 1644.224989][T21280] path_mount+0x7d0/0x23d0 [ 1644.225005][T21280] ? __pfx_path_mount+0x10/0x10 [ 1644.225018][T21280] ? lockdep_hardirqs_on+0x78/0x100 [ 1644.225032][T21280] ? putname+0xb1/0x110 [ 1644.225043][T21280] ? kmem_cache_free+0x124/0x6a0 [ 1644.225064][T21280] ? __ia32_sys_mount+0x292/0x310 [ 1644.225077][T21280] __ia32_sys_mount+0x292/0x310 [ 1644.225091][T21280] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1644.225109][T21280] __do_fast_syscall_32+0xe3/0x8c0 [ 1644.225124][T21280] do_fast_syscall_32+0x32/0x70 [ 1644.225137][T21280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1644.225152][T21280] RIP: 0023:0xf7f42f6c [ 1644.225161][T21280] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1644.225173][T21280] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1644.225185][T21280] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000480 [ 1644.225192][T21280] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1644.225199][T21280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1644.225205][T21280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1644.225211][T21280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1644.225225][T21280] [ 1644.303999][T19471] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1645.502873][T15326] Bluetooth: hci4: Frame reassembly failed (-84) [ 1645.505565][T13738] Bluetooth: hci4: Frame reassembly failed (-84) [ 1645.508504][T15326] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1647.523974][T10009] Bluetooth: hci4: command 0x1003 tx timeout [ 1647.526882][T19471] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1652.580123][T21330] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1652.582805][T21330] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1652.587019][T21330] vhci_hcd vhci_hcd.0: Device attached [ 1652.687982][T21336] siw: device registration error -23 [ 1653.401689][T21344] siw: device registration error -23 [ 1654.024083][ T6685] usb 42-1: SetAddress Request (57) to port 0 [ 1654.026371][ T6685] usb 42-1: new SuperSpeed USB device number 57 using vhci_hcd [ 1654.412886][T21349] 9pnet_virtio: no channels available for device syz [ 1656.181280][T21334] vhci_hcd: connection reset by peer [ 1656.183551][ T46] vhci_hcd vhci_hcd.2: stop threads [ 1656.185689][ T46] vhci_hcd vhci_hcd.2: release socket [ 1656.187566][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 1656.512887][T15326] Bluetooth: hci5: Frame reassembly failed (-84) [ 1656.515780][T15326] Bluetooth: hci5: Frame reassembly failed (-84) [ 1656.530910][ T1171] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1656.544026][T19471] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1658.110569][T21381] 9pnet_virtio: no channels available for device syz [ 1658.543989][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 1658.544260][T10009] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1659.104333][ T6685] usb 42-1: device descriptor read/8, error -110 [ 1660.328719][ T6685] usb usb42-port1: attempt power cycle [ 1661.194817][ T6685] usb usb42-port1: unable to enumerate USB device [ 1661.228363][T21393] 9pnet_virtio: no channels available for device syz [ 1663.629896][T21407] __kmem_cache_create_args(9p-fcall-cache-469) failed with error -12 [ 1663.633342][T21407] CPU: 1 UID: 0 PID: 21407 Comm: syz.1.3670 Tainted: G L syzkaller #0 PREEMPT(full) [ 1663.633375][T21407] Tainted: [L]=SOFTLOCKUP [ 1663.633383][T21407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1663.633397][T21407] Call Trace: [ 1663.633403][T21407] [ 1663.633409][T21407] dump_stack_lvl+0x100/0x190 [ 1663.633433][T21407] __kmem_cache_create_args.cold+0x33/0x6e [ 1663.633453][T21407] p9_client_create+0xa5d/0xd40 [ 1663.633470][T21407] ? __pfx_p9_client_create+0x10/0x10 [ 1663.633487][T21407] ? lockdep_init_map_type+0x5c/0x250 [ 1663.633509][T21407] ? __raw_spin_lock_init+0x3a/0x110 [ 1663.633529][T21407] v9fs_session_init+0x40/0xce0 [ 1663.633548][T21407] ? kasan_save_track+0x14/0x30 [ 1663.633562][T21407] v9fs_get_tree+0xb8/0xb50 [ 1663.633574][T21407] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1663.633587][T21407] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1663.633600][T21407] ? vfs_get_tree+0x49/0x320 [ 1663.633618][T21407] vfs_get_tree+0x92/0x320 [ 1663.633636][T21407] path_mount+0x7d0/0x23d0 [ 1663.633655][T21407] ? __pfx_path_mount+0x10/0x10 [ 1663.633667][T21407] ? lockdep_hardirqs_on+0x78/0x100 [ 1663.633682][T21407] ? putname+0xb1/0x110 [ 1663.633694][T21407] ? kmem_cache_free+0x124/0x6a0 [ 1663.633714][T21407] ? __ia32_sys_mount+0x292/0x310 [ 1663.633727][T21407] __ia32_sys_mount+0x292/0x310 [ 1663.633742][T21407] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1663.633761][T21407] __do_fast_syscall_32+0xe3/0x8c0 [ 1663.633779][T21407] do_fast_syscall_32+0x32/0x70 [ 1663.633792][T21407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1663.633806][T21407] RIP: 0023:0xf6fcef6c [ 1663.633816][T21407] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1663.633827][T21407] RSP: 002b:00000000f537b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1663.633853][T21407] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000480 [ 1663.633861][T21407] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1663.633867][T21407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1663.633874][T21407] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1663.633882][T21407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1663.633897][T21407] [ 1665.936008][T21434] siw: device registration error -23 [ 1667.055220][T21443] siw: device registration error -23 [ 1670.117908][T21450] fuse: Unknown parameter 'group_id00000000000000000000' [ 1670.702354][ T46] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1670.723436][ T46] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1670.726578][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1670.728743][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1670.730876][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 1671.359312][T21477] 9pnet_virtio: no channels available for device syz [ 1672.783965][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1672.783989][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 1673.858397][T21488] siw: device registration error -23 [ 1674.115068][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.117540][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.242636][T13738] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1674.317063][T15326] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1674.320320][T15326] Bluetooth: hci4: Frame reassembly failed (-84) [ 1675.269942][T21501] 9pnet_virtio: no channels available for device syz [ 1676.268220][T21500] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1676.271060][T21500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1676.275509][T21500] vhci_hcd vhci_hcd.0: Device attached [ 1676.304121][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1676.554085][ T6100] usb 42-1: SetAddress Request (61) to port 0 [ 1676.557025][ T6100] usb 42-1: new SuperSpeed USB device number 61 using vhci_hcd [ 1676.802082][T21505] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1676.805085][T21505] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1676.819607][T21505] vhci_hcd vhci_hcd.0: Device attached [ 1676.901593][T21506] vhci_hcd: connection reset by peer [ 1676.911586][ T46] vhci_hcd vhci_hcd.2: stop threads [ 1676.914463][ T46] vhci_hcd vhci_hcd.2: release socket [ 1676.920613][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 1677.095062][ T6685] usb 44-1: SetAddress Request (28) to port 0 [ 1677.097831][ T6685] usb 44-1: new SuperSpeed USB device number 28 using vhci_hcd [ 1677.140117][T21512] vhci_hcd: connection reset by peer [ 1677.142907][T19747] vhci_hcd vhci_hcd.3: stop threads [ 1677.145790][T19747] vhci_hcd vhci_hcd.3: release socket [ 1677.148920][T19747] vhci_hcd vhci_hcd.3: disconnect device [ 1677.276812][T21516] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1677.279911][T21516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1677.283618][T21516] vhci_hcd vhci_hcd.0: Device attached [ 1677.554304][T17115] usb 46-1: SetAddress Request (14) to port 0 [ 1677.557003][T17115] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1677.621258][T21517] vhci_hcd: connection reset by peer [ 1677.623806][ T46] vhci_hcd vhci_hcd.4: stop threads [ 1677.625415][ T46] vhci_hcd vhci_hcd.4: release socket [ 1677.627161][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 1677.706252][T21521] fuse: Unknown parameter 'group_id00000000000000000000' [ 1678.376655][T19747] Bluetooth: hci4: Frame reassembly failed (-84) [ 1679.113055][T21539] 9pnet_virtio: no channels available for device syz [ 1679.120073][T21539] siw: device registration error -23 [ 1679.661379][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 1679.680975][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 1679.691199][T21534] 9pnet_virtio: no channels available for device syz [ 1680.384094][T10009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1681.664000][ T6100] usb 42-1: device descriptor read/8, error -110 [ 1681.664053][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1681.814089][T21555] 9pnet_virtio: no channels available for device syz [ 1681.819408][T21555] siw: device registration error -23 [ 1682.708026][ T6685] usb 44-1: device descriptor read/8, error -110 [ 1683.364500][ T6100] usb usb42-port1: attempt power cycle [ 1683.447812][T17115] usb 46-1: device descriptor read/8, error -110 [ 1683.449659][ T6685] usb usb44-port1: attempt power cycle [ 1683.930219][T17115] usb usb46-port1: attempt power cycle [ 1684.476282][T21576] siw: device registration error -23 [ 1684.484663][T17115] usb usb46-port1: unable to enumerate USB device [ 1684.729405][T15326] Bluetooth: hci4: Frame reassembly failed (-84) [ 1684.916773][ T6100] usb usb42-port1: unable to enumerate USB device [ 1684.922796][ T6685] usb usb44-port1: unable to enumerate USB device [ 1684.932727][T21580] 9pnet_virtio: no channels available for device syz [ 1685.265878][T15326] Bluetooth: hci4: Frame reassembly failed (-84) [ 1685.512627][T21584] 9pnet_virtio: no channels available for device syz [ 1686.783981][T19471] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1686.875129][T15326] Bluetooth: hci5: Frame reassembly failed (-84) [ 1687.593517][T21604] 9pnet_virtio: no channels available for device syz [ 1687.815728][T21597] ------------[ cut here ]------------ [ 1687.817892][T21597] !rwb [ 1687.817903][T21597] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x164/0x1c0, CPU#2: syz.3.3706/21597 [ 1687.822264][T21597] Modules linked in: [ 1687.824766][T21597] CPU: 2 UID: 0 PID: 21597 Comm: syz.3.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1687.828241][T21597] Tainted: [L]=SOFTLOCKUP [ 1687.829623][T21597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1687.832799][T21597] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 1687.834949][T21597] Code: b5 21 fd 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc 4c 89 f7 e8 0e 51 8d fd eb 83 4c 89 f7 e8 04 51 8d fd eb d0 e8 ed b4 21 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 df b4 21 fd 90 0f 0b 90 48 b8 00 00 00 [ 1687.841139][T21597] RSP: 0018:ffffc9000ed77b38 EFLAGS: 00010287 [ 1687.843241][T21597] RAX: 000000000001291b RBX: ffff888026e39000 RCX: ffffc9000db93000 [ 1687.846022][T21597] RDX: 0000000000080000 RSI: ffffffff84e68e93 RDI: ffffffff8c1b1e20 [ 1687.848566][T21597] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1687.851364][T21597] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888027c068d8 [ 1687.854207][T21597] R13: ffff88802968802c R14: ffff888026e39390 R15: ffff888027c068e8 [ 1687.857187][T21597] FS: 0000000000000000(0000) GS:ffff888097340000(0063) knlGS:00000000f5464b40 [ 1687.860065][T21597] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1687.862284][T21597] CR2: 00000000f516cf30 CR3: 000000002adbe000 CR4: 0000000000352ef0 [ 1687.864924][T21597] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1687.867531][T21597] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1687.870148][T21597] Call Trace: [ 1687.871269][T21597] [ 1687.872232][T21597] blk_register_queue+0x42c/0x590 [ 1687.874030][T21597] __add_disk+0x73f/0xe40 [ 1687.875549][T21597] add_disk_fwnode+0x118/0x5c0 [ 1687.877212][T21597] loop_add+0x90b/0xb60 [ 1687.878626][T21597] ? find_held_lock+0x2b/0x80 [ 1687.880204][T21597] ? __pfx_loop_add+0x10/0x10 [ 1687.881832][T21597] ? loop_control_ioctl+0x1f0/0x620 [ 1687.883724][T21597] ? idr_get_next+0xec/0x150 [ 1687.885549][T21597] loop_control_ioctl+0x1fa/0x620 [ 1687.887370][T21597] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1687.889312][T21597] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1687.891097][T21597] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1687.892869][T21597] __do_fast_syscall_32+0xe3/0x8c0 [ 1687.894811][T21597] do_fast_syscall_32+0x32/0x70 [ 1687.896771][T21597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1687.898983][T21597] RIP: 0023:0xf7fe8f6c [ 1687.900414][T21597] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1687.906731][T21597] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1687.909427][T21597] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004c82 [ 1687.911928][T21597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1687.914664][T21597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1687.917243][T21597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.920001][T21597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1687.922613][T21597] [ 1687.923656][T21597] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1687.926020][T21597] CPU: 2 UID: 0 PID: 21597 Comm: syz.3.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1687.929504][T21597] Tainted: [L]=SOFTLOCKUP [ 1687.931053][T21597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1687.934939][T21597] Call Trace: [ 1687.936049][T21597] [ 1687.937007][T21597] dump_stack_lvl+0x100/0x190 [ 1687.938523][T21597] vpanic+0x552/0x970 [ 1687.939830][T21597] ? __pfx_vpanic+0x10/0x10 [ 1687.941522][T21597] panic+0xd1/0xe0 [ 1687.942737][T21597] ? __pfx_panic+0x10/0x10 [ 1687.944298][T21597] check_panic_on_warn.cold+0x19/0x34 [ 1687.946288][T21597] ? wbt_init_enable_default+0x164/0x1c0 [ 1687.948211][T21597] __warn.cold+0x191/0x348 [ 1687.949697][T21597] __report_bug+0x296/0x3d0 [ 1687.951313][T21597] ? wbt_init_enable_default+0x164/0x1c0 [ 1687.953171][T21597] ? __pfx___report_bug+0x10/0x10 [ 1687.954873][T21597] ? wbt_init_enable_default+0x164/0x1c0 [ 1687.956770][T21597] report_bug+0xb2/0x220 [ 1687.958216][T21597] ? wbt_init_enable_default+0x164/0x1c0 [ 1687.960112][T21597] handle_bug+0x16a/0x2a0 [ 1687.961499][T21597] exc_invalid_op+0x17/0x50 [ 1687.962986][T21597] asm_exc_invalid_op+0x1a/0x20 [ 1687.964653][T21597] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 1687.966704][T21597] Code: b5 21 fd 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc 4c 89 f7 e8 0e 51 8d fd eb 83 4c 89 f7 e8 04 51 8d fd eb d0 e8 ed b4 21 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 df b4 21 fd 90 0f 0b 90 48 b8 00 00 00 [ 1687.972885][T21597] RSP: 0018:ffffc9000ed77b38 EFLAGS: 00010287 [ 1687.974861][T21597] RAX: 000000000001291b RBX: ffff888026e39000 RCX: ffffc9000db93000 [ 1687.977798][T21597] RDX: 0000000000080000 RSI: ffffffff84e68e93 RDI: ffffffff8c1b1e20 [ 1687.980487][T21597] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1687.983011][T21597] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888027c068d8 [ 1687.985803][T21597] R13: ffff88802968802c R14: ffff888026e39390 R15: ffff888027c068e8 [ 1687.988575][T21597] ? wbt_init_enable_default+0x163/0x1c0 [ 1687.990527][T21597] ? wbt_init_enable_default+0x163/0x1c0 [ 1687.992391][T21597] blk_register_queue+0x42c/0x590 [ 1687.994037][T21597] __add_disk+0x73f/0xe40 [ 1687.995728][T21597] add_disk_fwnode+0x118/0x5c0 [ 1687.997397][T21597] loop_add+0x90b/0xb60 [ 1687.998913][T21597] ? find_held_lock+0x2b/0x80 [ 1688.000451][T21597] ? __pfx_loop_add+0x10/0x10 [ 1688.002060][T21597] ? loop_control_ioctl+0x1f0/0x620 [ 1688.003863][T21597] ? idr_get_next+0xec/0x150 [ 1688.005448][T21597] loop_control_ioctl+0x1fa/0x620 [ 1688.007085][T21597] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1688.008862][T21597] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1688.010619][T21597] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1688.012411][T21597] __do_fast_syscall_32+0xe3/0x8c0 [ 1688.014103][T21597] do_fast_syscall_32+0x32/0x70 [ 1688.015765][T21597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1688.017819][T21597] RIP: 0023:0xf7fe8f6c [ 1688.019312][T21597] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1688.025860][T21597] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1688.028515][T21597] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004c82 [ 1688.031066][T21597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1688.033886][T21597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1688.036783][T21597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1688.039777][T21597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1688.042787][T21597] [ 1688.044488][T21597] Kernel Offset: disabled [ 1688.045895][T21597] Rebooting in 86400 seconds..