last executing test programs: 38.830286175s ago: executing program 3 (id=2301): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2c00, 0x2c, 0x2c, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61, 0x8709dcd68c71dd66, 0x2e]}}, 0x0, 0x49, 0x0, 0x1}, 0x28) 38.76951114s ago: executing program 3 (id=2302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX, @ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f00000005c0)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) readv(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002000)=[{{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000900)="60a65788ed9195045d59c4c77d981082e93517fc56f19a2c5d53b4002dae6c378570b28566d61f67b4add67a5a18f5cf9f33cb8d0a6b051f375210f64bae130d75d0a582030de5f2255d354bcd823674b38420d866ba0d5786f4904bbf1f1494dff411513cff2f1a8d10a46809661d6e2fbe058a320e886beabf5fc3b0e446f2ecbab4852862de2d26dca27ea2eb26c9ec92", 0x92}, {&(0x7f00000009c0)="006bba68b5938ff25f2749f05e930528da0d4c752a44785ac027acf2927c7ceb08f67be28ba8ca19bb18484fc3ed6e0c2e4913f8dbf57426737babedc9ebb65b643756", 0x43}, {&(0x7f0000000a40)="6ea3f0904269a1de4ffb64389bd8381b01c1733b6cc5c0140202c9a099c3d52fd128718d87e03a596b6196bd566c673285653b3053c61a43f05650ca55479e45b0f9f5f3bfb56bba19fb4bcd68c2905d6fcc87357eae088e40f879954d8579d912853acf810c48d229fb339029510f85e3f3fd40034dd0f68d7b13e39970a145c910e4027a7fef1a54f8b792dbdc8b2bf5e6b4f4b9f8d6fb9d5a0a24df04a8b714a55ad242f30d9f54a2b2b281075e323ca25971b34db6b103ed50faf53cba2805aafe", 0xc3}], 0x3, &(0x7f0000000c40)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18, 0x1, 0x2, {r2, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [r4]}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x20000000}}], 0x1, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000500)=""/184, &(0x7f00000003c0)="a2f3eb259a349465cc14df88ff16ac4fe7d83f4e0efa18a58dadaafdc9a9661082725e2690ee16357058342ae6a7209caa6298bb7476b89c71780fbc60b254cc4d717b6f475c204a3e184c7f49a5fd1a55f7f911031cfdb76d1c377d69aeddf1a6e5cacecc7d92169ec3994973c103ace7d31f48e982c1271b266dcf0a", &(0x7f0000000280), 0x3, r6}, 0x38) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000090c000/0x2000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x64) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x200080c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setresuid(0x0, 0xee00, 0x0) sendto$inet(r7, &(0x7f0000000680)="b47d7be793c5177f440b3c96342050d7ce840537649af5d5a463f7068c09cd25b0e91aa76f3d506b2485dee14e187fa3f99c7473dcdea88d6c5acaf74f672897170f944c632c5cc4855eab2ae951949f6ed36f41578c4fcebede04bf819175775a3eaee9ac65ce250af9fc428b7a99a0f5e033e0f3cef508bafec3165c27033f930a7f447c0e40993b182f04970513b84fca2239fa37df5bbec8d6fd8c6d7dd8fdbf0e4c46c5321279b2ecd05c4d7b587808ff6c2c22008e686b2dcd32124f2fe686f27b2a44306d4867b6a3debd293ff52ed187081d", 0xd6, 0x50, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r2) 37.863926537s ago: executing program 3 (id=2313): socket$nl_netfilter(0x10, 0x3, 0xc) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0xffffffea, 0x0, 0x0, 0x0) 36.803751472s ago: executing program 3 (id=2325): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0xfff6, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 36.724146928s ago: executing program 3 (id=2328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x180c2, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f00000000c0)='::*{!}}\'^*%}-*\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x2, &(0x7f0000000480)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100), 0x1) unshare(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010400000003fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="814f0400000000002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x80c0) 36.200388213s ago: executing program 3 (id=2333): write$tun(0xffffffffffffffff, &(0x7f0000000680)={@void, @void, @ipv4=@dccp={{0x37, 0x4, 0x1, 0x27, 0x189, 0x65, 0x0, 0xab, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @local, {[@timestamp_addr={0x44, 0x24, 0xe6, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x43}}, {@broadcast, 0xffffc98e}, {@local}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x7, 0xb2, [@loopback]}, @timestamp_prespec={0x44, 0x24, 0x3b, 0x3, 0x6, [{@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x14f8}, {@broadcast, 0x5}]}, @cipso={0x86, 0x2d, 0x3, [{0x0, 0xf, "a6af957bf96d06aac7ee04cba0"}, {0x0, 0x4, "150a"}, {0x0, 0x6, "308bf3c0"}, {0x6, 0xe, "43f6421adef1fb25c2b6c9ea"}]}, @noop, @ssrr={0x89, 0x3, 0x95}, @lsrr={0x83, 0xb, 0x6d, [@broadcast, @private=0xa010102]}, @cipso={0x86, 0x16, 0x3, [{0x2, 0x3, '~'}, {0x1, 0xd, "70ea7e8e6b3616ab4cdb5c"}]}, @ssrr={0x89, 0x13, 0xe9, [@dev={0xac, 0x14, 0x14, 0x29}, @remote, @loopback, @multicast1]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0x4, '~V'}, {0x5, 0x7, "85ba72ef01"}]}]}}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, "ccf866", 0x3, "614bb9"}, "3650d0e1b7df7dd461f507086a4f2ed0f0e8e1debc8a4fe0103076eecb108b597c53de6288a5d300ef952dcb67422223edf8cf6e5810600de867f64673f0d30f25333e43c01ac277c43885dcd559771fa3fe8a37f07de98a14389dbb2a120cbafab01ee2c117301cdbfd0642277b5810b03d688c2655cd0914bb03994844a4bcc7a45868121b5aa0393e96835bdd2bafa114cddcd0e5a9267d82cc1e5f"}}}, 0x189) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x2006c0d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100005e375d602f5efb1264184fcdf43bc27f090b4be873871966addd0d3c3d1329d46b7506b01a82c74a50f6ec04d246d1be0af9d0195faa3880427f5db557cfe02ffc444dffc51fade9e6e9758876066ad06f0ead98932a9fc809bd8dbeedd18dd75b5d842119a044d37ff414aea684950000000000000006219d639f466ed63861cd965f769101", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608faffffff0000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 36.032771777s ago: executing program 32 (id=2333): write$tun(0xffffffffffffffff, &(0x7f0000000680)={@void, @void, @ipv4=@dccp={{0x37, 0x4, 0x1, 0x27, 0x189, 0x65, 0x0, 0xab, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @local, {[@timestamp_addr={0x44, 0x24, 0xe6, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x43}}, {@broadcast, 0xffffc98e}, {@local}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x7, 0xb2, [@loopback]}, @timestamp_prespec={0x44, 0x24, 0x3b, 0x3, 0x6, [{@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x14f8}, {@broadcast, 0x5}]}, @cipso={0x86, 0x2d, 0x3, [{0x0, 0xf, "a6af957bf96d06aac7ee04cba0"}, {0x0, 0x4, "150a"}, {0x0, 0x6, "308bf3c0"}, {0x6, 0xe, "43f6421adef1fb25c2b6c9ea"}]}, @noop, @ssrr={0x89, 0x3, 0x95}, @lsrr={0x83, 0xb, 0x6d, [@broadcast, @private=0xa010102]}, @cipso={0x86, 0x16, 0x3, [{0x2, 0x3, '~'}, {0x1, 0xd, "70ea7e8e6b3616ab4cdb5c"}]}, @ssrr={0x89, 0x13, 0xe9, [@dev={0xac, 0x14, 0x14, 0x29}, @remote, @loopback, @multicast1]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0x4, '~V'}, {0x5, 0x7, "85ba72ef01"}]}]}}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, "ccf866", 0x3, "614bb9"}, "3650d0e1b7df7dd461f507086a4f2ed0f0e8e1debc8a4fe0103076eecb108b597c53de6288a5d300ef952dcb67422223edf8cf6e5810600de867f64673f0d30f25333e43c01ac277c43885dcd559771fa3fe8a37f07de98a14389dbb2a120cbafab01ee2c117301cdbfd0642277b5810b03d688c2655cd0914bb03994844a4bcc7a45868121b5aa0393e96835bdd2bafa114cddcd0e5a9267d82cc1e5f"}}}, 0x189) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x2006c0d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100005e375d602f5efb1264184fcdf43bc27f090b4be873871966addd0d3c3d1329d46b7506b01a82c74a50f6ec04d246d1be0af9d0195faa3880427f5db557cfe02ffc444dffc51fade9e6e9758876066ad06f0ead98932a9fc809bd8dbeedd18dd75b5d842119a044d37ff414aea684950000000000000006219d639f466ed63861cd965f769101", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608faffffff0000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 3.79662284s ago: executing program 2 (id=2527): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'pimreg1\x00', {0xfffffff3}, 0x2}) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x4, 0xff, 0x8000}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$netrom(r0, &(0x7f0000000100)=""/208, 0xd0, 0x23, &(0x7f0000000200)={{0x3, @null, 0x7}, [@bcast, @null, @null, @default, @bcast, @null, @null, @null]}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.log\x00', 0x210000, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002300)={0x20, 0xfffffffffffffff5, r5, {0x6, 0x4, 0xfdf, 0x3}}, 0x20) read$FUSE(r4, &(0x7f0000002340)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000004380)=0x7, 0x4) r7 = getpgrp(r6) timer_create(0x1, &(0x7f00000043c0)={0x0, 0x3, 0x2, @tid=r7}, &(0x7f0000004400)) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000004500)={r8, r2, 0xa, 0xad, &(0x7f0000004440)="e017517c7712b47070b4a2da247b8dda776db6cc8bfbc4fea0237ac57864a8cbafdc8af333f0c954a90704303f8cdc9263eb7456ae19e453b5b37dffdab8799d7881030fb2877d594bfa410d39d1ed3a5cafa2d542b5c7dd6e66c0b66831c89d24d6af1689e344df53d61e90373b882a9624187e72cf20429e15c38374661e82e163924b8a05d3a05aa89b1956553693723c0142963399f20553c5755049fc5e599e60da38a5e08ea840c95328", 0xe0, 0xb0, 0x6, 0x81, 0x8, 0x2, 0x8b, 'syz0\x00'}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f00000045c0)={0xc1, 0x0, 0x1}) bind$unix(r4, &(0x7f0000004640)=@file={0x1, './file0\x00'}, 0x6e) r9 = syz_open_dev$ndb(&(0x7f00000046c0), 0x0, 0x2000) ioctl$BLKGETZONESZ(r9, 0x80041284, &(0x7f0000004700)=0x2) timer_create(0x4, &(0x7f0000004740)={0x0, 0x32, 0x4, @tid=r6}, &(0x7f0000004780)) fsetxattr$trusted_overlay_nlink(r9, &(0x7f00000047c0), &(0x7f0000004800)={'U+', 0x7fff}, 0x16, 0x1) r10 = epoll_create(0x8) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000004840)={0x8001, 0x9, 0x6, 0x0, 0x0, [{{}, 0xfffffffffffffff7}, {{r9}}, {{r4}, 0x181}, {{r0}, 0x1}, {{r3}, 0x3ff}, {{r10}, 0xffff}]}) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000004940)={'\x00', 0x9, 0x800, 0x8, 0x0, 0x0, 0x2, 0x80a0000, '\x00', 0xf}) fcntl$setownex(r4, 0xf, &(0x7f0000004b00)={0x0, r7}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r11, &(0x7f00000051c0)=[{{&(0x7f0000004b40)=@rc, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004bc0)=""/106, 0x6a}, {&(0x7f0000004c40)=""/215, 0xd7}, {&(0x7f0000004d40)=""/138, 0x8a}], 0x3, &(0x7f0000004e40)=""/239, 0xef}, 0x4}, {{&(0x7f0000004f40)=@hci, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004fc0)=""/224, 0xe0}], 0x1, &(0x7f0000005100)=""/141, 0x8d}, 0x49}], 0x2, 0x40000000, &(0x7f0000005200)={0x0, 0x3938700}) fcntl$getownex(r3, 0x10, &(0x7f0000005240)={0x0, 0x0}) ptrace$ARCH_GET_GS(0x1e, r12, &(0x7f0000005280), 0x1004) 3.7962126s ago: executing program 0 (id=2528): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x9fcf, 0x8000, 0x3, 0x3d3, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) r2 = socket$kcm(0x29, 0x7, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x100, 0x4, 0x24}, 0x50) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffffffb}, &(0x7f00000003c0), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000580)={0xc, &(0x7f00000007c0)={0x0, 0x1, 0xc0, {0xc0, 0x22, "13155cdfdab6afe190a0514b02e62bcb3d366a4c6ceaf502ab2102b6330a8955a5c3509b8f7eaa549261060dde6f0620b6afc6737b729a78ee84065a166832e6978cb9b733ce0573d95f8d5cf4be9688f340da677362c5a244675f74bde243d780d17584fabadf7ce787d4d97f976dada5eacb770b842990e87be4177d636c34c7c9acb30db32a4c2d6d545ec2838573b465098470393118c182ba9a5fb8e07fb0aa8934a11cfb48d9036c0857e24f89e60e0f0d3e3e0ee849dbfd515134"}}, &(0x7f0000000600)={0x0, 0x3, 0x50, @string={0x50, 0x3, "4ec683e6e32e495d6ff88a84dacb05bf4c83b6a8bb5d3bf65e3e51cff983fe4d7718d7d6de5f0f08701ac735ca1bf1bf18368daf0e29487bde4513d8edfb7489eda381911bee4119ec7d5f59fdde"}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000700)={0x0, 0x14, 0x5a, "a095639840fafe9ebd198c35f97f783d9126463539dd9be6e153da988b826a9373fadf4a96c4f7215e829b13c20a1ec7d00a39eb5c6021438f095ae4b266939dff8e042cf2e366ac9bbe7d11d94cf7f6fd5ba3906b39c0923d85"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000940)={0xc0, 0xa1, 0x4, 0xfff}, &(0x7f0000000980)={0x40, 0xa0, 0x4, 0xb}, &(0x7f00000009c0)={0xc0, 0xa2, 0x2f, "504f70feccb0c164a43b417f45a4cb1c7871061e25b2de52e0a28315099c7964949c5743c4f05d7942386fea90f34b"}}) close_range(r4, 0xffffffffffffffff, 0x0) 2.919271228s ago: executing program 2 (id=2531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x80000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x25cd8259afaf9f75, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r4, &(0x7f0000000380)='./cgroup\x00', r4, &(0x7f00000003c0)='./mnt\x00', 0x2) 2.860259267s ago: executing program 2 (id=2533): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0xa, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) kexec_load(0x80, 0x7, &(0x7f0000000480)=[{0x0, 0x0, 0x1, 0x7f7}, {&(0x7f0000000140)="975ca7a568be75a88bac1c0dc49392dec1fe3a46bb1ab5cfe2eafce2c79d5bd7e5bd2b6db89f", 0x26, 0x7fff, 0x1ff}, {&(0x7f0000002740)="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", 0x1000, 0x7}, {&(0x7f0000000340)="89131ba81fd716f4c982ee19c9933fc38399285622f205cdaf4018a65312edd6e049b27084ef7a7d6e9e3fc115444f0c74ebb09f66bb302c20afa026a886bdbd298f727b6e89604747b5e5857b8fa0047c0e9eeba83c9d17b1cb25e8799954", 0x5f, 0xf, 0x2}, {&(0x7f00000000c0)="5c868254f570af3b87b13f891201eb1955cc2e5b8449df8b104f6964fda50819d7", 0x21, 0xa, 0x7}, {&(0x7f0000001740)="80c0981e69934c805eb1b0fe96f55c1f5d9e0578ad48b714c7fd72bda248a34e642934859b5d163dafa6685ab76dcf0793c1ed7a34bbd99eabe09961d8b6063b5ad55fa8966c7b98eee889c9901cd98c26457c2bb35126b819a118cad3cbdc8343f670f6dbd414f6ee4d15a985ec7f47cb74af86056f7537606a0615dfb6cc311c8004efa505ddef20434a9da84605f778606c5eeb7c31c740db060b1080d81cb59329218fcdea5edc5011bfb8f6fb04c5c2972c25a52f7b3ff5c7a8f00e1c1a2d02c811d14cf654ed7c9ebe3303e6e62538b032594309067dbf1c3d1a22f6d3c277b7e40929b7887bedb3d92fdd21ab43969740ba510fcf5159429bdd68a0efdeeb2ae613514b3b3a24bf3e77e673d0a7457fbfaebd8088c7658f0c286b36231eeef13a69a6520f4506b8b0c307ab663f263cafa461e81b979804acabb43c3277152794876c8a1ae842bf1fa14e9747e0c448b3984a9bafdfee7c98e092a934d21b67117dc4ad2f0271740418db8e12161bdb71cec3778b8c04ac2478c70207ff3d7385236852922fbc8b13990e8bb1457e0006c40af1fa30d68540cf20c4da907eb048e7ae6658926abe18042a4fcfc7073121c49a5917267ea9f23e6c13631bb88b52385d04b88f5a9ee77f0702e59c1b1c91a5101079ee16d3c1b038d195273dde03444619ea502f30a02d959f64720239cc2958362b742b8c1a945f0a415ae3bd3fc6770f395fc4d4b1243db0e7a5c370a676b456c74ad90f677b14fe259ccc2df85903c4cc12f216d4abde738b1553104dc1ecfb477ff54240620391bd672b3f927bd2bd6c64762415fc151939d7802ffefc3623825e14cafbd000a8170778e2b146e5cafa608fec128d3cb207d2d894155934d8742c752f174cbc2af33b4ba076cee4012732f55f649148ce96c9edb8a741fc06fd72c91d64c9a049e686a527967340a2e0e2b99f165ca8aceb1f0daa649a0e6780faaa3592e4e0ad92c538fe0df6d89148653c272fdebeb4ded7cb3f91c1ae956423956f7d9d4c381e66a10ac29682ff30bd38b37b07b6304af5949cc980760e5ac5563a402105b255f89b23c99a13b7137c86eb45119064d004f110e3e5f5f24e2e276cc5bf4157ddea6dd541f36d084344e897436b61fb235d4cfe873c620a418c2e3031f7a1b13603cc3719777874763433ce721d83aed453fe6bf9e48ba20ec6a711017e9c05f7250267425048725ea61e5341e144d04f5c8738916fc76d925ff09c147ec460d0f5c413fdbcab441e7be526f31ff722691978fa44d8b60098bf36a10a18ce7a46acf0813f14cb17ef4031e9bfb260e72aaace58c0e00eef82ce5e527fa806dd7f06871e2729473d6af16fae4d6e72f3c4aea0a9ccd06e641d4c12609ff7e1c6b41c4b5162f91340c421aea8098c29fe7e9d66a7cfcc887c30064378829bcc90c1c8a6dc8377e7cfa0c4846f3f6a70d4795c2abde863f32bdd9125782ab224f37f888f434940eaae82a9cc0eecccc126f4f907ff7a5203e7f75a17aa487c3cf722613b5043ce564c5a70bcce5dc6960623383d996172ada3e9a2c14e63d228c509b8113e3171f4c401d29b58363e2e84aaba95a9ddf7a70fbc37b685ce56e0696c1b8a8091953393808575c447f3f15075230612d4e9b7f3c414be2588f6b0b58a94590b76179523650fe44c9e20310852c6dbef7e76374d76030a2db9bf5a78eea28d809fa5ab094f12ba71e0bc5a0db0589b9d785c01bb6adf2086fb0a98662e0f4e1777b1d1959612ab76f2e7c5778fa1d5f3925fff10b38e3f1271a9d50f8424c4fc1a0f6f695feaa659d52b48b8b0ce730b7791de67c94bfa16531f180399b25b37b4c1f43c901ab85557e86603cb4ac72105f7d64fd117194aac3805e08d9503ca96fd5134a42f0d92b2fead86edb7fd04d0b9dcb012b1abfdef6378ecfebf5c06337529c01f6f8d065ff336f8c9fac8f424276342f3283f601778960c6f188fd79c4bffeb53a5cefaf0305203c6b81a11bdf4a07520aeb5a6bce9a42754425b1f8a4d5e2d28f7e330430ca5840989ff53f001baa4ea0c21e5ca3b25292d552e1e40c6e895f494574b0efe90aad476db1fef66133d6840afcfefa41c2a03756c985924a12037500613a5f32d017fa70a93ef2eb26955cdb4b68fc0620b23802314075e77ef50e477ffc4d290ffba537c84dc29fef237bd3c2601db09c7bf38ed9b34becf485838fa4785c612dcb13a5b280722261288a37a584c39ae1a1f169b2a1a18389b717fc022d6d536847ef33dd3971f79823be7a8902d7e8e6e4f9393817bb7887d759621ea676037f249297c456927a0075145e7b7b883e7b581593e11350fd5e6ecbf372b2cd99f8a0577170a29a032f6456a4f16762d27756502095ddf1341fae6dc7c136d52efc85f91dbbd9238f047d0e94546026bd2ae3c1ac830c4e4c6bc7785655823f8c0cfe3c2fe0c15e8d6a5cdab1a25a2ef68fcc65ef76cb423fa93c3de04f7c2e0f4924e0988408211176534f5768f0a56a8b895d9b380ab85511779391953d6c0c8b5d2ff6fa18b3fabedf25b1131be1f4a7fa247d41c2a88334e04f22f1ce25ce9ba205ad566f7367a392879bff5521d2d41ec0051d2dad9b7bc2534196d3f11b03ebbf4092d891a29eb29b09232cbace5bba843ef58e20688d86ce1417dbc75363f3dc29e0a125a1e52c86fad740a8063d1a4a46030065e6331210a9a3fa01f87b200497a43080b5ea7fe0509e36431ba2c200941ae077bd4d62653fd011523b3142c6206d917bcc453ac91d96c76e63fee87bc970e32bcf810b75df0a53a38649ca9040eed572827b9e5b6e57cd0ba042fe873999b5715d3294b9ba50a56f4f22fb5e070b46154981a417885c1e0670848d4aa29128ee13f3f5d1725b99bb0dab241952ca38265293c249a1ee38efceaf50a011eb06773d5a08149a7202f4fc91ef67d66c3823dc59b8eb4c11fc1fe86ed2f8cf22f8a9956b18a2f8d65e87f1face9f79341008c430c8ad9eaa82da21dd4bedf09118c000979d0a0af57045cab9f0f24c8cc81e1f9c096a8084359c53df5772a5dd3c9e2a3778bc3b7323b1d5d150c00cc68532c70ecd59c62e7784f39a6c99b74955b40a6cf26be27e0b89ab5381f5ddcd8cd81fd10becee32b80a49203a8c0e38290a0393aeacd7c41ccaed8881703010136d3c34a569e15a82922eee6f5e71644fc2d0e14781ce112566f440aa7ff7ec33b890c19949ab21c387e695731be3e50c7a24f7ef7be8cf214cf2f67d9b067bc4a7f290f29a35e28256d5f17cc0ac5f0884821a1c189f242dc4fcbcdb8090d34983d19a24c9b6f4910984b8f7dedea1be77cd1897a93ab8400b591d4f6b7cd7540a2fe8aa600be98bb9137b5859c783ec652a4bc45a42dc169f657f0d42e80945137eefcd4e2d16e764fdb4ee7e341f254b430fdb2c6c5ea9f437f5e4f4d915509431ccbf14ab80a4f685f49155dd2a6410ae99520ee09a2f9298df59bd3c9fdb0842ccf7fb9f0f38c9e565d7c0fb5bfdf555a69f2004c9fa1b7e3cfc647cbf6dcaff202aa974287c130807d2c7734075f9905e555f1deb6c7b0d4ee2f702b1e4f5ad40c1982ff4543119b6513e8ad853e1060336c929cc840ec9395ba3798550c8cf5fc10d02a02d853bdb62471bf9978438fe06d194899608a09081cdbf71d18b0010757a706c2fce17eb34152a4654a6c67643ef1a6c63d02c70170eea14b707f961201ff548bec08fe657f20ca5b567fe25ca2ccba5a499643794ab240faa4f08ec8566487bbbd53ec62f1f3dee80827d870467c0201bd406ed2cc4ea7c3301a50bfb174e586e92530afea427d1bef60f4a6fa7fafa18a6f154840a99ed3338417736f0a96364417fe4cd4a5e455feb9fefc702f10f54f383e658244db37a1d815f011fa43a665deac5bfa241a94d97f267dc561c97ea41e468c7df9df8734cf85da81b7d8560501579e8aa306875ff62afbcb4163b8e0f949bbc3f0c17b073b201f014fbd1d6cd2ef3b559eb928f646c6dfc98d12f7b1b1dbd4ba2572f56c3c8ee67f82c271bb4f70fff0321ff34b27c47a2339b95c3141eb26b3bf15dfee5686fcfff10edf44a75af8c0ae3f69eec0fe8ed18df2685b1b70d816e6dc14da7f8f0bff01f4dfc8a8ad0f8310a2c943c691505148a6640b8921a46bff28772621c9240cb6c5139909d0ecbfb6698e4001a3cb535df9e53c7afa2767b7b8bdbdedeb9ba6b9176b32c2249be5b8e86426d7405c179ccb002c9c07d37a553a368decb6d3de429d87442b872549c33630ecd1d6c8b7d7e4e2eae43cfca88b7923d7f54b17c87e6c19e703685be950a020921d65a5c88a5ad17f93f6f27153a1b60c8bc5aab4bc34ef573757c6ca79afa1d061a4131f4eef5ed450a2b582209596d8e94970770c14d428312f084bee2dd18f7221e3d75d3989228f3da0701c516f4e2034defd237ffd6dcda7ff0f614554f04f89f28f9bb94fcbd83d152f58044cf6e3bc0e5efc90cabc18d29449d57f55586a5ffc24489a556ad2b1caeb7b2ebb7945cde9f8570aa245893d63f7106472e48e860816b37c0315600a40da6102da0ed714a5caa7e8e5ee3ae0794831130f3d9f4a8d6860136001763b6e4d25b38c55b59f96c09f58895318fef9c6593d425d655cfc4fe1435bc8b2fe5374f187674a3d90883c9d5dce071a94273f25a76983cc9c4697781ff689fc4ca9058824d3a4a991d4b05fc19ee97edfcb9855a99f700a8836d9c5b18428959dda0aa6b05079e652b60d62f5543d81ab9dd99db46e16fe670fd2418ab8f36ebeac012b7661a1154ca39aafb33f8b792dc74476a3b165791cff1f60dc60f7b7896aefd0dc4c8f116e8b424cb82622ba1392b3e981fb92bcc3869b71f3427c97ed8cb9bccbec91e650df7fe7ba55a5dad1a2fc0a6f79e33ebff123b2b43ce431b0f0230df053c96a8b85fa2592c1ab7059caef1acaf09a0c65e533bc1043015e13f6602446ed8fcdab498e5d40db09af86bf7eefeff653e706f1de6703631275bd6af9eed06464278a68b215f4dd64989ebd0add7fc868ee08e3e5358299480241fbdff7e364566e6842ffaee352b8ad973162eded4baae406a8707c5fee3bf0515920d28c378c26de6678774cf5b0afbbe69d41d69d224faf098df244df397a7e532853c08c6461162f8d3e5b71bc5bcaa8fda14b087e06bb142ef58133d2826c9f1be52caf3d2b23d1bb545034974e7e53e39f71adad34248dda31aa8d76c47096b3498059e4db2d3a92b0451c74ab9f397be68d5a5eb2c9273cb871dce5e27b42be4d7abd9a171cbd15a2af220a8b31bf516861e0a3535c1a21b3745d99e8868922f466c0d4561bc4e1c487cd5cd3f25dccdf7a9e58efc9cf9228b3abadba79713aacab683b20d0fe49e90a49ed4fd8b47a5d61b5f2ea30a01b2f180a3e6ed9791e0cb88e9f7c93d38bcd1b71d4297c892cf2072104a0fcd0a3120fe4c8f31be557157a4201497bc748c805b30739ea17b35e14e99de8222e47bcd215a8ae022fd725a821dab3d8eba6ebc04cf9cda1bd79cfbc445900a7ada7ad35e46e0805cf302274f0b10fda6b74ef936ab1b24e04f4c5859dbac561fd966dd878ca342888fa94f0eb9400eb32f0d085e80e21614a3368b796584bebff7c1d68388a3258a164f1482f6faa5664d7eff8fc5513aabfb861ffdf36b6163b1df103a7da93f5218f2eb5f0f111df9e66dada9618ad7a3972a4eff87d98ddb735d50603644960ac1997cc0b84a8ce49b74c7e58857f5c757c", 0x1000, 0x1, 0x3}, {0x0, 0x0, 0x0, 0xffff0000}], 0x150000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f00000000c0)=[{r5, 0x828e}], 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000c2dc4fc94113345c190d4b7b9e5db9ee146f734f6075409648c9c", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000002c0)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x20000) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) 2.750870574s ago: executing program 4 (id=2534): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30011}}], 0x300, 0xf1c) 2.371772466s ago: executing program 4 (id=2535): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xff, 0x5, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x40, 0x10, 0xc, 0x278d}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001600)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x60000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) 2.130776134s ago: executing program 0 (id=2537): syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x3, @none}}}, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0x10008b, 0xe, 0xc0000}, 0x1b) (async, rerun: 32) r0 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='netlink_extack\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat2(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x600101, 0x361eec5d78782aad, 0x1}, 0x18) (async) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x2, 0xea45d318a58a963b, 0x9, 0x1, 0x8a}}) (async) ioctl$CDROMVOLCTRL(r5, 0x31f, &(0x7f0000000080)={0xa1, 0x3, 0xfe, 0xca}) 2.128834099s ago: executing program 0 (id=2538): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4048090) (async) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x22, 0x800000000004, @tid=r2}, &(0x7f0000000080)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) r3 = userfaultfd(0x80c00) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) (async) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1c09, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xe45, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x442000, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xfffffff, 0x2daf42) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x40, @empty}}, 0x0, 0x0, 0x9, 0xfffffffd, 0x32, 0x0, 0x3e}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x4000880, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) socket(0x10, 0x803, 0x0) 2.061020131s ago: executing program 0 (id=2539): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0xa, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) kexec_load(0x80, 0x7, &(0x7f0000000480)=[{0x0, 0x0, 0x1, 0x7f7}, {&(0x7f0000000140)="975ca7a568be75a88bac1c0dc49392dec1fe3a46bb1ab5cfe2eafce2c79d5bd7e5bd2b6db89f", 0x26, 0x7fff, 0x1ff}, {&(0x7f0000002740)="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", 0x1000, 0x7}, {&(0x7f0000000340)="89131ba81fd716f4c982ee19c9933fc38399285622f205cdaf4018a65312edd6e049b27084ef7a7d6e9e3fc115444f0c74ebb09f66bb302c20afa026a886bdbd298f727b6e89604747b5e5857b8fa0047c0e9eeba83c9d17b1cb25e8799954", 0x5f, 0xf, 0x2}, {&(0x7f00000000c0), 0x0, 0xa, 0x7}, {&(0x7f0000001740)="80c0981e69934c805eb1b0fe96f55c1f5d9e0578ad48b714c7fd72bda248a34e642934859b5d163dafa6685ab76dcf0793c1ed7a34bbd99eabe09961d8b6063b5ad55fa8966c7b98eee889c9901cd98c26457c2bb35126b819a118cad3cbdc8343f670f6dbd414f6ee4d15a985ec7f47cb74af86056f7537606a0615dfb6cc311c8004efa505ddef20434a9da84605f778606c5eeb7c31c740db060b1080d81cb59329218fcdea5edc5011bfb8f6fb04c5c2972c25a52f7b3ff5c7a8f00e1c1a2d02c811d14cf654ed7c9ebe3303e6e62538b032594309067dbf1c3d1a22f6d3c277b7e40929b7887bedb3d92fdd21ab43969740ba510fcf5159429bdd68a0efdeeb2ae613514b3b3a24bf3e77e673d0a7457fbfaebd8088c7658f0c286b36231eeef13a69a6520f4506b8b0c307ab663f263cafa461e81b979804acabb43c3277152794876c8a1ae842bf1fa14e9747e0c448b3984a9bafdfee7c98e092a934d21b67117dc4ad2f0271740418db8e12161bdb71cec3778b8c04ac2478c70207ff3d7385236852922fbc8b13990e8bb1457e0006c40af1fa30d68540cf20c4da907eb048e7ae6658926abe18042a4fcfc7073121c49a5917267ea9f23e6c13631bb88b52385d04b88f5a9ee77f0702e59c1b1c91a5101079ee16d3c1b038d195273dde03444619ea502f30a02d959f64720239cc2958362b742b8c1a945f0a415ae3bd3fc6770f395fc4d4b1243db0e7a5c370a676b456c74ad90f677b14fe259ccc2df85903c4cc12f216d4abde738b1553104dc1ecfb477ff54240620391bd672b3f927bd2bd6c64762415fc151939d7802ffefc3623825e14cafbd000a8170778e2b146e5cafa608fec128d3cb207d2d894155934d8742c752f174cbc2af33b4ba076cee4012732f55f649148ce96c9edb8a741fc06fd72c91d64c9a049e686a527967340a2e0e2b99f165ca8aceb1f0daa649a0e6780faaa3592e4e0ad92c538fe0df6d89148653c272fdebeb4ded7cb3f91c1ae956423956f7d9d4c381e66a10ac29682ff30bd38b37b07b6304af5949cc980760e5ac5563a402105b255f89b23c99a13b7137c86eb45119064d004f110e3e5f5f24e2e276cc5bf4157ddea6dd541f36d084344e897436b61fb235d4cfe873c620a418c2e3031f7a1b13603cc3719777874763433ce721d83aed453fe6bf9e48ba20ec6a711017e9c05f7250267425048725ea61e5341e144d04f5c8738916fc76d925ff09c147ec460d0f5c413fdbcab441e7be526f31ff722691978fa44d8b60098bf36a10a18ce7a46acf0813f14cb17ef4031e9bfb260e72aaace58c0e00eef82ce5e527fa806dd7f06871e2729473d6af16fae4d6e72f3c4aea0a9ccd06e641d4c12609ff7e1c6b41c4b5162f91340c421aea8098c29fe7e9d66a7cfcc887c30064378829bcc90c1c8a6dc8377e7cfa0c4846f3f6a70d4795c2abde863f32bdd9125782ab224f37f888f434940eaae82a9cc0eecccc126f4f907ff7a5203e7f75a17aa487c3cf722613b5043ce564c5a70bcce5dc6960623383d996172ada3e9a2c14e63d228c509b8113e3171f4c401d29b58363e2e84aaba95a9ddf7a70fbc37b685ce56e0696c1b8a8091953393808575c447f3f15075230612d4e9b7f3c414be2588f6b0b58a94590b76179523650fe44c9e20310852c6dbef7e76374d76030a2db9bf5a78eea28d809fa5ab094f12ba71e0bc5a0db0589b9d785c01bb6adf2086fb0a98662e0f4e1777b1d1959612ab76f2e7c5778fa1d5f3925fff10b38e3f1271a9d50f8424c4fc1a0f6f695feaa659d52b48b8b0ce730b7791de67c94bfa16531f180399b25b37b4c1f43c901ab85557e86603cb4ac72105f7d64fd117194aac3805e08d9503ca96fd5134a42f0d92b2fead86edb7fd04d0b9dcb012b1abfdef6378ecfebf5c06337529c01f6f8d065ff336f8c9fac8f424276342f3283f601778960c6f188fd79c4bffeb53a5cefaf0305203c6b81a11bdf4a07520aeb5a6bce9a42754425b1f8a4d5e2d28f7e330430ca5840989ff53f001baa4ea0c21e5ca3b25292d552e1e40c6e895f494574b0efe90aad476db1fef66133d6840afcfefa41c2a03756c985924a12037500613a5f32d017fa70a93ef2eb26955cdb4b68fc0620b23802314075e77ef50e477ffc4d290ffba537c84dc29fef237bd3c2601db09c7bf38ed9b34becf485838fa4785c612dcb13a5b280722261288a37a584c39ae1a1f169b2a1a18389b717fc022d6d536847ef33dd3971f79823be7a8902d7e8e6e4f9393817bb7887d759621ea676037f249297c456927a0075145e7b7b883e7b581593e11350fd5e6ecbf372b2cd99f8a0577170a29a032f6456a4f16762d27756502095ddf1341fae6dc7c136d52efc85f91dbbd9238f047d0e94546026bd2ae3c1ac830c4e4c6bc7785655823f8c0cfe3c2fe0c15e8d6a5cdab1a25a2ef68fcc65ef76cb423fa93c3de04f7c2e0f4924e0988408211176534f5768f0a56a8b895d9b380ab85511779391953d6c0c8b5d2ff6fa18b3fabedf25b1131be1f4a7fa247d41c2a88334e04f22f1ce25ce9ba205ad566f7367a392879bff5521d2d41ec0051d2dad9b7bc2534196d3f11b03ebbf4092d891a29eb29b09232cbace5bba843ef58e20688d86ce1417dbc75363f3dc29e0a125a1e52c86fad740a8063d1a4a46030065e6331210a9a3fa01f87b200497a43080b5ea7fe0509e36431ba2c200941ae077bd4d62653fd011523b3142c6206d917bcc453ac91d96c76e63fee87bc970e32bcf810b75df0a53a38649ca9040eed572827b9e5b6e57cd0ba042fe873999b5715d3294b9ba50a56f4f22fb5e070b46154981a417885c1e0670848d4aa29128ee13f3f5d1725b99bb0dab241952ca38265293c249a1ee38efceaf50a011eb06773d5a08149a7202f4fc91ef67d66c3823dc59b8eb4c11fc1fe86ed2f8cf22f8a9956b18a2f8d65e87f1face9f79341008c430c8ad9eaa82da21dd4bedf09118c000979d0a0af57045cab9f0f24c8cc81e1f9c096a8084359c53df5772a5dd3c9e2a3778bc3b7323b1d5d150c00cc68532c70ecd59c62e7784f39a6c99b74955b40a6cf26be27e0b89ab5381f5ddcd8cd81fd10becee32b80a49203a8c0e38290a0393aeacd7c41ccaed8881703010136d3c34a569e15a82922eee6f5e71644fc2d0e14781ce112566f440aa7ff7ec33b890c19949ab21c387e695731be3e50c7a24f7ef7be8cf214cf2f67d9b067bc4a7f290f29a35e28256d5f17cc0ac5f0884821a1c189f242dc4fcbcdb8090d34983d19a24c9b6f4910984b8f7dedea1be77cd1897a93ab8400b591d4f6b7cd7540a2fe8aa600be98bb9137b5859c783ec652a4bc45a42dc169f657f0d42e80945137eefcd4e2d16e764fdb4ee7e341f254b430fdb2c6c5ea9f437f5e4f4d915509431ccbf14ab80a4f685f49155dd2a6410ae99520ee09a2f9298df59bd3c9fdb0842ccf7fb9f0f38c9e565d7c0fb5bfdf555a69f2004c9fa1b7e3cfc647cbf6dcaff202aa974287c130807d2c7734075f9905e555f1deb6c7b0d4ee2f702b1e4f5ad40c1982ff4543119b6513e8ad853e1060336c929cc840ec9395ba3798550c8cf5fc10d02a02d853bdb62471bf9978438fe06d194899608a09081cdbf71d18b0010757a706c2fce17eb34152a4654a6c67643ef1a6c63d02c70170eea14b707f961201ff548bec08fe657f20ca5b567fe25ca2ccba5a499643794ab240faa4f08ec8566487bbbd53ec62f1f3dee80827d870467c0201bd406ed2cc4ea7c3301a50bfb174e586e92530afea427d1bef60f4a6fa7fafa18a6f154840a99ed3338417736f0a96364417fe4cd4a5e455feb9fefc702f10f54f383e658244db37a1d815f011fa43a665deac5bfa241a94d97f267dc561c97ea41e468c7df9df8734cf85da81b7d8560501579e8aa306875ff62afbcb4163b8e0f949bbc3f0c17b073b201f014fbd1d6cd2ef3b559eb928f646c6dfc98d12f7b1b1dbd4ba2572f56c3c8ee67f82c271bb4f70fff0321ff34b27c47a2339b95c3141eb26b3bf15dfee5686fcfff10edf44a75af8c0ae3f69eec0fe8ed18df2685b1b70d816e6dc14da7f8f0bff01f4dfc8a8ad0f8310a2c943c691505148a6640b8921a46bff28772621c9240cb6c5139909d0ecbfb6698e4001a3cb535df9e53c7afa2767b7b8bdbdedeb9ba6b9176b32c2249be5b8e86426d7405c179ccb002c9c07d37a553a368decb6d3de429d87442b872549c33630ecd1d6c8b7d7e4e2eae43cfca88b7923d7f54b17c87e6c19e703685be950a020921d65a5c88a5ad17f93f6f27153a1b60c8bc5aab4bc34ef573757c6ca79afa1d061a4131f4eef5ed450a2b582209596d8e94970770c14d428312f084bee2dd18f7221e3d75d3989228f3da0701c516f4e2034defd237ffd6dcda7ff0f614554f04f89f28f9bb94fcbd83d152f58044cf6e3bc0e5efc90cabc18d29449d57f55586a5ffc24489a556ad2b1caeb7b2ebb7945cde9f8570aa245893d63f7106472e48e860816b37c0315600a40da6102da0ed714a5caa7e8e5ee3ae0794831130f3d9f4a8d6860136001763b6e4d25b38c55b59f96c09f58895318fef9c6593d425d655cfc4fe1435bc8b2fe5374f187674a3d90883c9d5dce071a94273f25a76983cc9c4697781ff689fc4ca9058824d3a4a991d4b05fc19ee97edfcb9855a99f700a8836d9c5b18428959dda0aa6b05079e652b60d62f5543d81ab9dd99db46e16fe670fd2418ab8f36ebeac012b7661a1154ca39aafb33f8b792dc74476a3b165791cff1f60dc60f7b7896aefd0dc4c8f116e8b424cb82622ba1392b3e981fb92bcc3869b71f3427c97ed8cb9bccbec91e650df7fe7ba55a5dad1a2fc0a6f79e33ebff123b2b43ce431b0f0230df053c96a8b85fa2592c1ab7059caef1acaf09a0c65e533bc1043015e13f6602446ed8fcdab498e5d40db09af86bf7eefeff653e706f1de6703631275bd6af9eed06464278a68b215f4dd64989ebd0add7fc868ee08e3e5358299480241fbdff7e364566e6842ffaee352b8ad973162eded4baae406a8707c5fee3bf0515920d28c378c26de6678774cf5b0afbbe69d41d69d224faf098df244df397a7e532853c08c6461162f8d3e5b71bc5bcaa8fda14b087e06bb142ef58133d2826c9f1be52caf3d2b23d1bb545034974e7e53e39f71adad34248dda31aa8d76c47096b3498059e4db2d3a92b0451c74ab9f397be68d5a5eb2c9273cb871dce5e27b42be4d7abd9a171cbd15a2af220a8b31bf516861e0a3535c1a21b3745d99e8868922f466c0d4561bc4e1c487cd5cd3f25dccdf7a9e58efc9cf9228b3abadba79713aacab683b20d0fe49e90a49ed4fd8b47a5d61b5f2ea30a01b2f180a3e6ed9791e0cb88e9f7c93d38bcd1b71d4297c892cf2072104a0fcd0a3120fe4c8f31be557157a4201497bc748c805b30739ea17b35e14e99de8222e47bcd215a8ae022fd725a821dab3d8eba6ebc04cf9cda1bd79cfbc445900a7ada7ad35e46e0805cf302274f0b10fda6b74ef936ab1b24e04f4c5859dbac561fd966dd878ca342888fa94f0eb9400eb32f0d085e80e21614a3368b796584bebff7c1d68388a3258a164f1482f6faa5664d7eff8fc5513aabfb861ffdf36b6163b1df103a7da93f5218f2eb5f0f111df9e66dada9618ad7a3972a4eff87d98ddb735d50603644960ac1997cc0b84a8ce49b74c7e58857f5c757c", 0x1000, 0x1, 0x3}, {0x0, 0x0, 0x0, 0xffff0000}], 0x150000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f00000000c0)=[{r5, 0x828e}], 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000c2dc4fc94113345c190d4b7b9e5db9ee146f734f6075409648c9c", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000002c0)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x20000) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) 2.060733697s ago: executing program 1 (id=2540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r1, 0x402, 0x5) pipe(&(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x7ffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x12, 0x6, r2, 0x0, 0x0, 0x0, 0x80000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.919415445s ago: executing program 2 (id=2541): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000002c0)="01000000020000000000a824b55a2a6d0b00c145f94cd977df45909260d4753c259449f9b1466da811a4dc2cc004b98fa98616ca", 0x34, 0xffffffffffffffff) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) 1.91900134s ago: executing program 2 (id=2542): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x1, 0x4, 0x7}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000000009010800000000000000000300000908000540000000200800034000109ac508000640000000010c000480080001407fffffff1404020006000340000100000600034000020000080005400000000f080006400000000008000340000000070c0004800800014000008001"], 0x70}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24040804) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_vmscan_wakeup_kswapd\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f00000001c0)={0x8, 0x11f, 0xfa00, {0x2, {0x6, 0xa0, "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", 0x8, 0x1, 0x7f, 0x4c, 0x6, 0x8, 0xa}}}, 0x128) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r6) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0x204}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000440)={0xfffffff, 0x0, 0x409, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x990a62, 0x5, '\x00', @ptr=0xfffffa6c}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.85746252s ago: executing program 4 (id=2543): r0 = fsopen(&(0x7f0000000140)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.622770295s ago: executing program 4 (id=2544): syz_emit_ethernet(0x482, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x7, 0x5, 0x31363553, 0x0, 0x5, [{0x8c65, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x3ffffffe, 0x4}, {0x9, 0xd2}, {0x2, 0x800}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x1}}) r0 = socket(0x1f, 0x3, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8098000a80140007000000000000000000000000b0719e9c778eb90042bf1a788c305e00000000001400350500", @ANYRESDEC=r1, @ANYRES16=r1, @ANYRES8=r0], 0x50}}, 0x0) r2 = gettid() tkill(r2, 0x7) sched_setaffinity(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x200008c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800450, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e7c733dafa46163638173792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') rename(0x0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffc000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x1fffffffffffffe3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f1108", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500f60000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="53dff3a44139bbbbbbbbbbbb0800450000280066000090889078ac1e00fc22d9a7f2fc2150cbaf43016c93bd2b776baa4cb9c0010100"], 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) 1.622280037s ago: executing program 2 (id=2545): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x9fcf, 0x8000, 0x3, 0x3d3, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) r2 = socket$kcm(0x29, 0x7, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffffffb}, &(0x7f00000003c0), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000580)={0xc, &(0x7f00000007c0)={0x0, 0x1, 0xc0, {0xc0, 0x22, "13155cdfdab6afe190a0514b02e62bcb3d366a4c6ceaf502ab2102b6330a8955a5c3509b8f7eaa549261060dde6f0620b6afc6737b729a78ee84065a166832e6978cb9b733ce0573d95f8d5cf4be9688f340da677362c5a244675f74bde243d780d17584fabadf7ce787d4d97f976dada5eacb770b842990e87be4177d636c34c7c9acb30db32a4c2d6d545ec2838573b465098470393118c182ba9a5fb8e07fb0aa8934a11cfb48d9036c0857e24f89e60e0f0d3e3e0ee849dbfd515134"}}, &(0x7f0000000600)={0x0, 0x3, 0x50, @string={0x50, 0x3, "4ec683e6e32e495d6ff88a84dacb05bf4c83b6a8bb5d3bf65e3e51cff983fe4d7718d7d6de5f0f08701ac735ca1bf1bf18368daf0e29487bde4513d8edfb7489eda381911bee4119ec7d5f59fdde"}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000700)={0x0, 0x14, 0x5a, "a095639840fafe9ebd198c35f97f783d9126463539dd9be6e153da988b826a9373fadf4a96c4f7215e829b13c20a1ec7d00a39eb5c6021438f095ae4b266939dff8e042cf2e366ac9bbe7d11d94cf7f6fd5ba3906b39c0923d85"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000940)={0xc0, 0xa1, 0x4, 0xfff}, &(0x7f0000000980)={0x40, 0xa0, 0x4, 0xb}, &(0x7f00000009c0)={0xc0, 0xa2, 0x2f, "504f70feccb0c164a43b417f45a4cb1c7871061e25b2de52e0a28315099c7964949c5743c4f05d7942386fea90f34b"}}) close_range(r4, 0xffffffffffffffff, 0x0) 1.37372612s ago: executing program 1 (id=2546): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0xa, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) kexec_load(0x80, 0x6, &(0x7f0000000480)=[{0x0, 0x0, 0x1, 0x7f7}, {&(0x7f0000000140)="975ca7a568be75a88bac1c0dc49392dec1fe3a46bb1ab5cfe2eafce2c79d5bd7e5bd2b6db89f", 0x26, 0x7fff, 0x1ff}, {&(0x7f0000002740)="9de6873fba2982c0494a67b014cc270a0ea573083870dbc088a60dd82cff13deac24482f282ddffa22f7c03ee76125a3ea20e143f895db207585731a74df4c43b5739bb06859802c1e770f424e14fa828be0cc4ce99b23222ea5c4d27d60db87f2a110f378792630ba81d0fac0a3d06207f64a2d254e4fe1b59e1919620e55ef13ddbd855313ce878e89795163ba2295e757a18bc114a688934c5efda7d6daa6a9ece9010f6028db911b8d6b88064e003c70166e093ba6cbd6bd2b9affd623a762c29b4bfd1babf8c65d4b7616e748856f6d2d02bc51a6b3a1b45919a054de6ae4159ef400ea28162a1ebd0349e7994ba70b21114deadb084e15dc712308d11884c84bf4e404e628a73c9a05f87a505cc3bafc7f1b3851c07f70aedbfccfd97efff6be5e751edbc8bdcb98ba3060b0cb98a89b61d4a6a384b4e9dc5eda257fc6dd710e9f77a7c9332678df29a2b8aab4b5a9c5a9d4f85e38889f5d48bfabec56d482f5d4a15e49546741656d66e88430570261078029761d6bc4ffeb70301d7568b8da5e341f2e693dfe21d27d564326b664a4fd176924ae32e7fa0ccba3231c06d1f273658291467ab160d0ccdee952a4ba2a4856c44e8e26268253d2ff411d4285ad2d8957d04f212e5144963dc2f78877a373ac2670295f7d7efe48c6d335d2534ad9b7c0f20223d7872de36e518c9798cceb4f9747cfbb93dd33abd494b5596b9fb4ef0fe8154f092f914105f3cdfa4c66a6ccc9c2119560dcaead85985875513c692751bfbad893e21b94b1e88bcf223c240babf82ed949bdec21078da3b729f1fe92de959c80f553e17726e90b04aa58a2a9628029968daf6f43f030489b3ce980d357b8a883f0507214e6b6fbfc478a2d457c1fd2fb7419926c79c731549f318a355f2398152b03e74d96d407964afbd3f40f3fa4efb01895b1c99af99952140d5698964226412a4920c626affcd21edb0f89a5bfec3e84dd30a765dbf3b5aea3c27df4080ff72143f6a36149138cb2d37cd83986ee3a47b453eb2dd5d545fdf6877aaeffb2d8cee2b96a5bba8d73de0cee5e49854e81d52f04be14fb788099db4b7873d8eb48fe663afad5d1256fdaa8ef96dabed37aa32f6864ac5590959864c177c1886ee1d6f295f50a08c5a254f9bbce05616f32ad826f721bcda06d173d0f33c1234c974d06d4ba5334aed93a3fe96de6e3b25c6676e9493e6ed4509f3ca78f8a28653193a8e9944df40397bc04b92517381932cc4c41ee64b6f1bba5ff4c2145dc9d932f49f31c445fd9ef010530d9e4d882f289de0ccc5cb179a4ea737abd43651ccfdabb4e5c7d4fa25ffce906b4d11fe18489e9f50d1cfa31f1a7c03a59de0d0051abebc5b5d8bcdd55bd2ecc389b60cd0fe292731418c902eeebe6f2aa4277850f0dc40b9611e43a7a421560ab29e0e6ade59986dc86628c7fe7448e7fa4c337ae51a10ded10b9b5a3c8f09f990699ff6e9cd1657b181856d29c6300c0e5fbec24bf3a6d2a5c35cc3409448a32a02005ede01fb9682bdc5b107c0cbaaed02839f76091f0c0ffb2656c5866d456037db72acaf8db686faca04d8e2a4fd18336ede2eea77bdd1738ba3af66b0669a1208841df412d82ecc3463f00e45679dfefcbfb4d60fe2a7a34d92ee0b1aa444f1f265b7f515180bffc88cbee93e4c57665cdd5d40104f6d8605cd14793d5fbe7d9f3cc3e1eab7fa5188b8ce0cf40bf5d550f31f69ecfac091942bb1fed3d592bd9821ae318658ce72d5c0fdff38eefd0b08cd0f72f28471cae13fdc1dff6314e31279da5bf8ea590ab364e8799aef6ee502110f7065fad8b8335aa5af6ce333f9101bc8c824973c8046f64478a6d94a2169020b29374c6c52ca409a6193c3946d33634d912259a00317aca2a90be383253f9d3d09a8a1423b8503a1c6a6a03331eaa0e26644f05bb7832ff48a4df472eefc6b69004f3b039941c7bf67ec0299056b09111570c2832a7ce539fb8e3c7f20f025e347537378bb1669a38bcb25bda4f21787ebcd31af71aa2f06befe56c689cb67361530ba4b56ed6c30bd701caa928c2334bbe4a4264acb0fb0eef2260234c0a877428b3f973a8b0479099f457f77687dc7e378d3462fad4e7bb6b0e8236c96db264d734aaebc01c5d140fcc72c752a315ae03fc84f99553fe703c9d39976b010259f31b0bf4330b32388d4e7f15cfd4abfaec137ca8bd74dc6a944fad4040e2ada752382230a6592c9314c308f46f2573b326a78d90c71a90ef98c47eb0cbe343f8e4a9367e3aabbddf8a3be8191901de6d57771176af37377faaea0fc76bcdfcb0345160bf711bfbefe73ee5e12d5e6387f5800cc89067b9dff63ea6247c7b6fcb7e81685dffdbd79729eb84e8f7fde37eeddd6314e6c1e2a6f36a8284134781096f7cd2cc5d87fa574045e8ea1fc6816c3dbc7a5155bb65ed5aa98400970bb0dbc79b617a1fe6a7671458c381ab8eeac8a2ab9fbcb9e7b12be713d447c272d53c7d6207683c29b49966b05da15d25ec03b557f4a7748c0bf1f8d542d895287717b3f9d4e556679a91463784138a383f210572c12480bfeb02784cabd52501ca4ac9981c96ea7894c9a7ed7b86c35ac6c50cde204f8cb5391f220493b980401da3db6ec43ca4c4dc6fe5ca13b0d8698802868939e2b58933568d8129383b2af8e4cc040394ab59922e4dde29a0c8275a7ffaa71a642ed663865d7ce0fb724e10f6fcbc45386d990ed21b2f84795ab15582f019829ad8c9066756621dd7e1cbcd7e0802011b6420dd4d11f69ea12e226de65974384aff5ccf9f368874d8b0d5578560eef50f6dd1b2e3ae8339dbb1281c07e7efcd09487285604adc4bd3830ac25f00d936512254206dde43ed24683bf0910f9759220a2c95a47ed218fa58d187400e5a0c627d3797e3f2c37f6b9ac9733562f55d8096527589b4a65bd01e12ac67d4fee669d5c75085f6cf43215c028002d8fefb176ad234ffd82a2445f475be9df9b6cae06ceaca48ec95cce65c96ef209f60675990a235180c1f617eb1dbc27b1e927d6cede8c1c0a40d97f90ce724e5f849acc00988c4267efa1f698376ceacb71cd7c0be5b69774965715021e502369e8a4c0c53fe88a69699e0505c9ea9392b2798bd4696a990a33e7c36d9c03824f51a78b0539ca0883720bd096f2ad2a237b934a966fb4bb7de1c69a236135d4d056cb7867726b0a82255a8b65721f49a89504dcce51f09af4bcec443d06789b03d63ee1c1304fa14d760c7006bea455f0ee264b7a90584d5ea67bd37c0d93ec4fc89ab621ee325f28c77c416764aa43bd0c3707d673eb98ae27827065f08da4e1374ba9f5186f33798cb160693313efe64e06637411f6b9ab036cc816ae07874f5ee5d3f6d77dbc31e2f6d610ed3aea21a7446bec12a337c509132ecb6f1fcc7eedfb7fe2bd9ea3a0d50e2bdfbd731ee7d15df96399d526c14f981e2c4493bdb8bd76b6475f77b8b7cdd1ff2903e88dda462c7f1d1306d6e71aa4ab9b9e4a130c2640a4d4779ed3712cc76b760d2a50529f8ae240ae5caed6660c18631c9a9cd49511e627fc981a833bf18dbf146095a094aa5251f85f8cbd8a7cf0367aca3e4b40cea2696eb87601268a6a60f9ee592b23e7f533df1510b0a7502f622d9d09ed4462c641378a5ba5d5e406d0d175e9eb2f2981833d0c7d476c552763e93528c2b9dcdb8efed9e04672e4bab112267db2849c6ddf372f3d17b86ef7f4184c34e95be027164d6c4ea6dc8302452f12186ce0251db76055bcd879d9a072a8208109778f4dc1037b4e722ab6150fe6358d1c5d4488cc57b5fe10950713fbf7cd90aec792c4a696d9d2a96383e755782e7359155b8d84e4040672048c47c897f5f283e0cbc579307497a8ed228fb947c60c0c240d1f835093a9245a9c6839e84b79d4fd6b8b8adce0c48e886ca44fcff7661ea2112ddbee941cb0ea50f3ac0f37da8e45657f823a82c8f65b8f72ba210e5ce0c4cca30bc407c2a9e8e9e7f6748c3daac2beed2efdd79892cc87f7221f57b085808f093605f3083d7c70076816a65640b6a780f3ee479e9291e7baa97322ddcdc7869b2d8f99de9d22c711c139ad2a53e1766d9e2ee86cb3243875b6a86e4d130fa75ab77e8acae512a00f0fd91b51d0f796470be9cf7e7454cb31151cfbed9d407f55c1acac1975f4ab2c159d9b26c4580749a12b9b3f8ac20560571fd7a3eea53b06e6ad4074d6062baa956d0f7dc23ef94264f29035e978ea9d2503722799c84ca7d82c783990bc1bfdfec90434f9f7a3efdd11f4347e22866c25ad07235b22f6cf256003a21426a688e8d37db0139568587d43a75bda82e97a07849d1210aac47282891179d39af71b1104341a833169911aaa9778ef71546fe510c4dedd35a50f9b8bacbe0e9ed4fb03bcac3c559776b705ce1086442efa2f2bd8bc56eafb08f979537af5190f822e2563a17e2e8c79e009e6059af5279d280baf82c85e3bd6aa4cb34fa91413539aa343b25b9185d5f88241ca30a0c91980d085c30680fa891984086716dad98c2f2a4a45be976a2c0e449b9ce28c5abf5c3e3c1b4dbb50b5e680c068a2e7f9ca0988a344c10fcecc414442ebe751691860d9a7857c5de75ca0b2baaf78afc3295d4555948b9f19161dbb436aea5446d12be4345620923e806047931004c975467263e34da5eaedf79d65ff32bd15a81e0c011756d6c56f22ed3c814a296066caa2020d8720f2ec603db2f710ca56f62ab062d710303e9050fcf1ae43bbd38be98e48309a99dc38c13fec8c503b467b4314bb0b12cade66b542a599ead1709522963e53a33a9c506a9b340c1c7150a8824c4f33c09242eb2f75b401a8af73ef0f93ac87ed3d9b0d290598245bd2659c0a75aa0b0437ec209f0bfe855a07ad20d0819786dc13bd288b8d07cba6f9a8c28425925d2803862e05499dde7a2a15536c7085eb666f2f21be5405693d2bd7106f70a1f6f057d0b71983cfcf1dc10a01681849e5095673e43e589a822923cd6b043e7a313321cc1e6ee7ca676cd0eeff72f6b97f6b1a78a978219bd2c2aad6dee59d823b972c4b15f4de4aa67418c33142a37900851915ceb187efccb733924af3ffb5842510f94f94485a2b20b18672f42989770c0a37d2802e1ef5d2b1de59e80f2b5f53e5ccc307e69fe02e6451ed042bf838bb365036bf32864cf5c5545a1f3a2adb65c3e560d2ed244575e00c57c39350834e53c3bc8c4a104b7a9820c84ef4b46166ba63301cb49134d26a714a871e32563759df52e794da0f0b9e36974ffc5a43ddc70ec621f4d082c0b0093ae0b99933db469ff01e0f2f93696f41b28b782018b3b4ab05cc0b074512413f2abb02c4544281eda6afabc589ffce9a238248ae1ceb8a50fd0dc260f19903fd499a2e88bfefca8be81cb3835759f92bae5bb122c4cd167b3e8008f20485ba9490d86e40c70ca6fb17673921269dd571dba22c5afe7cd300626f74329f356706bb9839554a0fc43a1f6d5f8bc5158508679ed85ddf97ae48b842d7b12f0aac2714cc4bf278f54ed3b4606dd5c29d440c7fe905334f1f80957313fbb3d066562c2f0c1137a1fc68b0559e85e4451fdce63708266a70c38cf414a97de854075e140a5697354f0b42e3347ff930e16018d5b46f4229551105b094a58d3ec4e08c33692d8e400d8e7a27795155f0ecf411688b872ffd59c62e21cf75c210d842ed5e514627f01d464ec1c40b542f632787dd4990650dc89c3ea27ca29e211f91acef6aa519df8a30a8b2dc7a159e0", 0x1000, 0x7}, {&(0x7f0000000340)="89131ba81fd716f4c982ee19c9933fc38399285622f205cdaf4018a65312edd6e049b27084ef7a7d6e9e3fc115444f0c74ebb09f66bb302c20afa026a886bdbd298f727b6e89604747b5e5857b8fa0047c0e9eeba83c9d17b1cb25e8799954", 0x5f, 0xf, 0x2}, {&(0x7f0000001740)="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", 0x1000, 0x1, 0x3}, {0x0, 0x0, 0x0, 0xffff0000}], 0x150000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f00000000c0)=[{r5, 0x828e}], 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000c2dc4fc94113345c190d4b7b9e5db9ee146f734f6075409648c9c", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000002c0)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x20000) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) 1.192695372s ago: executing program 0 (id=2547): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000000206010800000000000000000000000004000780050005000a00000005000400000000000900020073797a02f93100000000100003003abc4d673a"], 0x44}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x2, 0x4002) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$midi(0x0, 0x2, 0x28002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x80000000000000a, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500, 0x8d}}], 0x600, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 611.704397ms ago: executing program 4 (id=2548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000120000000000000002000000850000002000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="0a00070008021100000100003000508011000a004abee339084eeef16f162471f40000000800070000000000050002"], 0x58}}, 0x800) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x40011) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff1085000000ae00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x79, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 318.241504ms ago: executing program 0 (id=2549): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0xa, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) kexec_load(0x80, 0x7, &(0x7f0000000480)=[{0x0, 0x0, 0x1, 0x7f7}, {&(0x7f0000000140)="975ca7a568be75a88bac1c0dc49392dec1fe3a46bb1ab5cfe2eafce2c79d5bd7e5bd2b6db89f", 0x26, 0x7fff, 0x1ff}, {&(0x7f0000002740)="9de6873fba2982c0494a67b014cc270a0ea573083870dbc088a60dd82cff13deac24482f282ddffa22f7c03ee76125a3ea20e143f895db207585731a74df4c43b5739bb06859802c1e770f424e14fa828be0cc4ce99b23222ea5c4d27d60db87f2a110f378792630ba81d0fac0a3d06207f64a2d254e4fe1b59e1919620e55ef13ddbd855313ce878e89795163ba2295e757a18bc114a688934c5efda7d6daa6a9ece9010f6028db911b8d6b88064e003c70166e093ba6cbd6bd2b9affd623a762c29b4bfd1babf8c65d4b7616e748856f6d2d02bc51a6b3a1b45919a054de6ae4159ef400ea28162a1ebd0349e7994ba70b21114deadb084e15dc712308d11884c84bf4e404e628a73c9a05f87a505cc3bafc7f1b3851c07f70aedbfccfd97efff6be5e751edbc8bdcb98ba3060b0cb98a89b61d4a6a384b4e9dc5eda257fc6dd710e9f77a7c9332678df29a2b8aab4b5a9c5a9d4f85e38889f5d48bfabec56d482f5d4a15e49546741656d66e88430570261078029761d6bc4ffeb70301d7568b8da5e341f2e693dfe21d27d564326b664a4fd176924ae32e7fa0ccba3231c06d1f273658291467ab160d0ccdee952a4ba2a4856c44e8e26268253d2ff411d4285ad2d8957d04f212e5144963dc2f78877a373ac2670295f7d7efe48c6d335d2534ad9b7c0f20223d7872de36e518c9798cceb4f9747cfbb93dd33abd494b5596b9fb4ef0fe8154f092f914105f3cdfa4c66a6ccc9c2119560dcaead85985875513c692751bfbad893e21b94b1e88bcf223c240babf82ed949bdec21078da3b729f1fe92de959c80f553e17726e90b04aa58a2a9628029968daf6f43f030489b3ce980d357b8a883f0507214e6b6fbfc478a2d457c1fd2fb7419926c79c731549f318a355f2398152b03e74d96d407964afbd3f40f3fa4efb01895b1c99af99952140d5698964226412a4920c626affcd21edb0f89a5bfec3e84dd30a765dbf3b5aea3c27df4080ff72143f6a36149138cb2d37cd83986ee3a47b453eb2dd5d545fdf6877aaeffb2d8cee2b96a5bba8d73de0cee5e49854e81d52f04be14fb788099db4b7873d8eb48fe663afad5d1256fdaa8ef96dabed37aa32f6864ac5590959864c177c1886ee1d6f295f50a08c5a254f9bbce05616f32ad826f721bcda06d173d0f33c1234c974d06d4ba5334aed93a3fe96de6e3b25c6676e9493e6ed4509f3ca78f8a28653193a8e9944df40397bc04b92517381932cc4c41ee64b6f1bba5ff4c2145dc9d932f49f31c445fd9ef010530d9e4d882f289de0ccc5cb179a4ea737abd43651ccfdabb4e5c7d4fa25ffce906b4d11fe18489e9f50d1cfa31f1a7c03a59de0d0051abebc5b5d8bcdd55bd2ecc389b60cd0fe292731418c902eeebe6f2aa4277850f0dc40b9611e43a7a421560ab29e0e6ade59986dc86628c7fe7448e7fa4c337ae51a10ded10b9b5a3c8f09f990699ff6e9cd1657b181856d29c6300c0e5fbec24bf3a6d2a5c35cc3409448a32a02005ede01fb9682bdc5b107c0cbaaed02839f76091f0c0ffb2656c5866d456037db72acaf8db686faca04d8e2a4fd18336ede2eea77bdd1738ba3af66b0669a1208841df412d82ecc3463f00e45679dfefcbfb4d60fe2a7a34d92ee0b1aa444f1f265b7f515180bffc88cbee93e4c57665cdd5d40104f6d8605cd14793d5fbe7d9f3cc3e1eab7fa5188b8ce0cf40bf5d550f31f69ecfac091942bb1fed3d592bd9821ae318658ce72d5c0fdff38eefd0b08cd0f72f28471cae13fdc1dff6314e31279da5bf8ea590ab364e8799aef6ee502110f7065fad8b8335aa5af6ce333f9101bc8c824973c8046f64478a6d94a2169020b29374c6c52ca409a6193c3946d33634d912259a00317aca2a90be383253f9d3d09a8a1423b8503a1c6a6a03331eaa0e26644f05bb7832ff48a4df472eefc6b69004f3b039941c7bf67ec0299056b09111570c2832a7ce539fb8e3c7f20f025e347537378bb1669a38bcb25bda4f21787ebcd31af71aa2f06befe56c689cb67361530ba4b56ed6c30bd701caa928c2334bbe4a4264acb0fb0eef2260234c0a877428b3f973a8b0479099f457f77687dc7e378d3462fad4e7bb6b0e8236c96db264d734aaebc01c5d140fcc72c752a315ae03fc84f99553fe703c9d39976b010259f31b0bf4330b32388d4e7f15cfd4abfaec137ca8bd74dc6a944fad4040e2ada752382230a6592c9314c308f46f2573b326a78d90c71a90ef98c47eb0cbe343f8e4a9367e3aabbddf8a3be8191901de6d57771176af37377faaea0fc76bcdfcb0345160bf711bfbefe73ee5e12d5e6387f5800cc89067b9dff63ea6247c7b6fcb7e81685dffdbd79729eb84e8f7fde37eeddd6314e6c1e2a6f36a8284134781096f7cd2cc5d87fa574045e8ea1fc6816c3dbc7a5155bb65ed5aa98400970bb0dbc79b617a1fe6a7671458c381ab8eeac8a2ab9fbcb9e7b12be713d447c272d53c7d6207683c29b49966b05da15d25ec03b557f4a7748c0bf1f8d542d895287717b3f9d4e556679a91463784138a383f210572c12480bfeb02784cabd52501ca4ac9981c96ea7894c9a7ed7b86c35ac6c50cde204f8cb5391f220493b980401da3db6ec43ca4c4dc6fe5ca13b0d8698802868939e2b58933568d8129383b2af8e4cc040394ab59922e4dde29a0c8275a7ffaa71a642ed663865d7ce0fb724e10f6fcbc45386d990ed21b2f84795ab15582f019829ad8c9066756621dd7e1cbcd7e0802011b6420dd4d11f69ea12e226de65974384aff5ccf9f368874d8b0d5578560eef50f6dd1b2e3ae8339dbb1281c07e7efcd09487285604adc4bd3830ac25f00d936512254206dde43ed24683bf0910f9759220a2c95a47ed218fa58d187400e5a0c627d3797e3f2c37f6b9ac9733562f55d8096527589b4a65bd01e12ac67d4fee669d5c75085f6cf43215c028002d8fefb176ad234ffd82a2445f475be9df9b6cae06ceaca48ec95cce65c96ef209f60675990a235180c1f617eb1dbc27b1e927d6cede8c1c0a40d97f90ce724e5f849acc00988c4267efa1f698376ceacb71cd7c0be5b69774965715021e502369e8a4c0c53fe88a69699e0505c9ea9392b2798bd4696a990a33e7c36d9c03824f51a78b0539ca0883720bd096f2ad2a237b934a966fb4bb7de1c69a236135d4d056cb7867726b0a82255a8b65721f49a89504dcce51f09af4bcec443d06789b03d63ee1c1304fa14d760c7006bea455f0ee264b7a90584d5ea67bd37c0d93ec4fc89ab621ee325f28c77c416764aa43bd0c3707d673eb98ae27827065f08da4e1374ba9f5186f33798cb160693313efe64e06637411f6b9ab036cc816ae07874f5ee5d3f6d77dbc31e2f6d610ed3aea21a7446bec12a337c509132ecb6f1fcc7eedfb7fe2bd9ea3a0d50e2bdfbd731ee7d15df96399d526c14f981e2c4493bdb8bd76b6475f77b8b7cdd1ff2903e88dda462c7f1d1306d6e71aa4ab9b9e4a130c2640a4d4779ed3712cc76b760d2a50529f8ae240ae5caed6660c18631c9a9cd49511e627fc981a833bf18dbf146095a094aa5251f85f8cbd8a7cf0367aca3e4b40cea2696eb87601268a6a60f9ee592b23e7f533df1510b0a7502f622d9d09ed4462c641378a5ba5d5e406d0d175e9eb2f2981833d0c7d476c552763e93528c2b9dcdb8efed9e04672e4bab112267db2849c6ddf372f3d17b86ef7f4184c34e95be027164d6c4ea6dc8302452f12186ce0251db76055bcd879d9a072a8208109778f4dc1037b4e722ab6150fe6358d1c5d4488cc57b5fe10950713fbf7cd90aec792c4a696d9d2a96383e755782e7359155b8d84e4040672048c47c897f5f283e0cbc579307497a8ed228fb947c60c0c240d1f835093a9245a9c6839e84b79d4fd6b8b8adce0c48e886ca44fcff7661ea2112ddbee941cb0ea50f3ac0f37da8e45657f823a82c8f65b8f72ba210e5ce0c4cca30bc407c2a9e8e9e7f6748c3daac2beed2efdd79892cc87f7221f57b085808f093605f3083d7c70076816a65640b6a780f3ee479e9291e7baa97322ddcdc7869b2d8f99de9d22c711c139ad2a53e1766d9e2ee86cb3243875b6a86e4d130fa75ab77e8acae512a00f0fd91b51d0f796470be9cf7e7454cb31151cfbed9d407f55c1acac1975f4ab2c159d9b26c4580749a12b9b3f8ac20560571fd7a3eea53b06e6ad4074d6062baa956d0f7dc23ef94264f29035e978ea9d2503722799c84ca7d82c783990bc1bfdfec90434f9f7a3efdd11f4347e22866c25ad07235b22f6cf256003a21426a688e8d37db0139568587d43a75bda82e97a07849d1210aac47282891179d39af71b1104341a833169911aaa9778ef71546fe510c4dedd35a50f9b8bacbe0e9ed4fb03bcac3c559776b705ce1086442efa2f2bd8bc56eafb08f979537af5190f822e2563a17e2e8c79e009e6059af5279d280baf82c85e3bd6aa4cb34fa91413539aa343b25b9185d5f88241ca30a0c91980d085c30680fa891984086716dad98c2f2a4a45be976a2c0e449b9ce28c5abf5c3e3c1b4dbb50b5e680c068a2e7f9ca0988a344c10fcecc414442ebe751691860d9a7857c5de75ca0b2baaf78afc3295d4555948b9f19161dbb436aea5446d12be4345620923e806047931004c975467263e34da5eaedf79d65ff32bd15a81e0c011756d6c56f22ed3c814a296066caa2020d8720f2ec603db2f710ca56f62ab062d710303e9050fcf1ae43bbd38be98e48309a99dc38c13fec8c503b467b4314bb0b12cade66b542a599ead1709522963e53a33a9c506a9b340c1c7150a8824c4f33c09242eb2f75b401a8af73ef0f93ac87ed3d9b0d290598245bd2659c0a75aa0b0437ec209f0bfe855a07ad20d0819786dc13bd288b8d07cba6f9a8c28425925d2803862e05499dde7a2a15536c7085eb666f2f21be5405693d2bd7106f70a1f6f057d0b71983cfcf1dc10a01681849e5095673e43e589a822923cd6b043e7a313321cc1e6ee7ca676cd0eeff72f6b97f6b1a78a978219bd2c2aad6dee59d823b972c4b15f4de4aa67418c33142a37900851915ceb187efccb733924af3ffb5842510f94f94485a2b20b18672f42989770c0a37d2802e1ef5d2b1de59e80f2b5f53e5ccc307e69fe02e6451ed042bf838bb365036bf32864cf5c5545a1f3a2adb65c3e560d2ed244575e00c57c39350834e53c3bc8c4a104b7a9820c84ef4b46166ba63301cb49134d26a714a871e32563759df52e794da0f0b9e36974ffc5a43ddc70ec621f4d082c0b0093ae0b99933db469ff01e0f2f93696f41b28b782018b3b4ab05cc0b074512413f2abb02c4544281eda6afabc589ffce9a238248ae1ceb8a50fd0dc260f19903fd499a2e88bfefca8be81cb3835759f92bae5bb122c4cd167b3e8008f20485ba9490d86e40c70ca6fb17673921269dd571dba22c5afe7cd300626f74329f356706bb9839554a0fc43a1f6d5f8bc5158508679ed85ddf97ae48b842d7b12f0aac2714cc4bf278f54ed3b4606dd5c29d440c7fe905334f1f80957313fbb3d066562c2f0c1137a1fc68b0559e85e4451fdce63708266a70c38cf414a97de854075e140a5697354f0b42e3347ff930e16018d5b46f4229551105b094a58d3ec4e08c33692d8e400d8e7a27795155f0ecf411688b872ffd59c62e21cf75c210d842ed5e514627f01d464ec1c40b542f632787dd4990650dc89c3ea27ca29e211f91acef6aa519df8a30a8b2dc7a159e0", 0x1000, 0x7}, {&(0x7f0000000340)="89131ba81fd716f4c982ee19c9933fc38399285622f205cdaf4018a65312edd6e049b27084ef7a7d6e9e3fc115444f0c74ebb09f66bb302c20afa026a886bdbd298f727b6e89604747b5e5857b8fa0047c0e9eeba83c9d17b1cb25e8799954", 0x5f, 0xf, 0x2}, {&(0x7f00000000c0)="5c868254f570af3b87b13f891201eb1955cc2e5b8449df8b104f6964fda50819d7", 0x21, 0xa, 0x7}, {&(0x7f0000001740)="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", 0x1000, 0x1, 0x3}, {0x0, 0x0, 0x0, 0xffff0000}], 0x150000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f00000000c0)=[{r5, 0x828e}], 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000c2dc4fc94113345c190d4b7b9e5db9ee146f734f6075409648c9c", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000002c0)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x20000) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) 292.430946ms ago: executing program 1 (id=2550): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="020100060c17000000000000fcdbdf2505000600331000000a004e2300000006ff020000000000000000000000000001220000000000000005000500320000000a"], 0x60}}, 0x0) 238.715143ms ago: executing program 1 (id=2551): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x9) socket(0x840000000002, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0x7, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xb) r2 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) read(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 54.757542ms ago: executing program 4 (id=2552): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000010000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffe0}, {0x1, 0x7}, {0x3, 0xb}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r3, 0xfffffffffffffffd, 0x2) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000300)={{0xbed, 0x7, 0xfff, 0x3}, 'syz0\x00', 0x9}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a00000000000000000a000000040000000c000b000000000019649929"], 0x24}, 0x1, 0xe0ffff}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x4, 0x4, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r7, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r7, 0x22d0, 0x20, 0x0, 0x0, 0x0) 54.566743ms ago: executing program 1 (id=2553): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x40, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "184a3397bdbf5b01"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dadff534af70b8224c364d950aee7573"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) 0s ago: executing program 1 (id=2554): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='nilfs2_segment_usage_allocated\x00', r6}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000001000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c000380080001400000000018000380140001ed76657468315f746f5f626f6e64000000080002400000000030000000160a0101000b000000000000010000000900020073797a31000000000900010073797a300000000004000380140000001000010000000000000000000000000a"], 0xd0}}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r7, 0x100000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kernel console output (not intermixed with test programs): 6 [ 363.346715][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.350142][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.353529][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.357581][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 363.360513][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.364500][ T10] usb 5-1: config 0 descriptor?? [ 363.596810][T16597] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 363.637033][T16602] __nla_validate_parse: 4 callbacks suppressed [ 363.637049][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2156'. [ 363.644822][T16602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2156'. [ 363.664454][T16607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2157'. [ 363.682459][T16609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2158'. [ 363.732811][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 363.759901][T16614] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 363.762434][T16614] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 363.766185][T16614] vhci_hcd vhci_hcd.0: Device attached [ 363.770528][T16456] random: crng reseeded on system resumption [ 363.780378][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input29 [ 363.805393][ T10] shield 0003:0955:7214.0018: Registered Thunderstrike controller [ 363.820895][ T10] shield 0003:0955:7214.0018: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 363.824689][T16619] program syz.3.2160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.912790][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 363.916044][ T9] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 363.922858][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.928038][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.931657][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.937184][T16615] vhci_hcd: connection closed [ 363.937601][ T62] vhci_hcd: stop threads [ 363.941045][ T62] vhci_hcd: release socket [ 363.947930][ T62] vhci_hcd: disconnect device [ 363.948668][ T9] usbtmc 7-1:16.0: bulk endpoints not found [ 363.981077][ T10] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 363.986641][ T9] usb 5-1: USB disconnect, device number 45 [ 363.993191][ T10] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 363.997232][ T10] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 364.001562][ T10] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 364.250223][ T9] usb 7-1: USB disconnect, device number 44 [ 364.264528][T16643] binder: BINDER_SET_CONTEXT_MGR already set [ 364.266591][T16643] binder: 16637:16643 ioctl 4018620d 80000040 returned -16 [ 364.611334][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2167'. [ 364.653636][T16653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2168'. [ 365.073501][ T5952] Bluetooth: hci4: command tx timeout [ 365.080106][T16964] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 365.082871][T16964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.087693][T16964] vhci_hcd vhci_hcd.0: Device attached [ 365.100843][T16964] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(17) [ 365.103696][T16964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 365.120981][T16964] vhci_hcd vhci_hcd.0: Device attached [ 365.227062][T16964] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 365.229097][T16964] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 365.232782][T16964] vhci_hcd vhci_hcd.0: Device attached [ 365.254466][T16964] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 365.293297][T16964] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(23) [ 365.296018][T16964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 365.301072][T16964] vhci_hcd vhci_hcd.0: Device attached [ 365.313547][T16964] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(25) [ 365.316026][T16964] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 365.319532][T16964] vhci_hcd vhci_hcd.0: Device attached [ 365.322783][ T6012] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 365.323840][T16964] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 365.325309][T17078] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2175'. [ 365.347424][T17081] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 365.349470][T17081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 365.352165][T16964] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(29) [ 365.354280][T16964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 365.356864][T16964] vhci_hcd vhci_hcd.0: Device attached [ 365.358043][T17081] vhci_hcd vhci_hcd.0: Device attached [ 365.361864][T16964] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 365.407786][T17079] vhci_hcd: connection closed [ 365.408305][T17075] vhci_hcd: connection closed [ 365.409696][T16969] vhci_hcd: connection closed [ 365.410097][T16988] vhci_hcd: connection closed [ 365.412379][T17083] vhci_hcd: connection closed [ 365.413496][ T62] vhci_hcd: stop threads [ 365.422922][ T62] vhci_hcd: release socket [ 365.423344][T16967] vhci_hcd: connection reset by peer [ 365.424509][ T62] vhci_hcd: disconnect device [ 365.443491][ T62] vhci_hcd: stop threads [ 365.444900][ T62] vhci_hcd: release socket [ 365.450209][ T62] vhci_hcd: disconnect device [ 365.456530][ T62] vhci_hcd: stop threads [ 365.458448][ T62] vhci_hcd: release socket [ 365.463230][ T62] vhci_hcd: disconnect device [ 365.470752][ T62] vhci_hcd: stop threads [ 365.474529][ T62] vhci_hcd: release socket [ 365.479155][ T62] vhci_hcd: disconnect device [ 365.525433][ T62] vhci_hcd: stop threads [ 365.528872][ T62] vhci_hcd: release socket [ 365.533002][ T62] vhci_hcd: disconnect device [ 365.538015][ T62] vhci_hcd: stop threads [ 365.540840][ T62] vhci_hcd: release socket [ 365.547705][ T62] vhci_hcd: disconnect device [ 365.735939][ T53] usb 44-1: SetAddress Request (51) to port 0 [ 365.738493][ T53] usb 44-1: new SuperSpeed USB device number 51 using vhci_hcd [ 365.989390][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 365.994867][T17197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2179'. [ 366.007251][T17082] vhci_hcd: connection reset by peer [ 366.014910][ T1148] vhci_hcd: stop threads [ 366.016762][ T1148] vhci_hcd: release socket [ 366.018643][ T1148] vhci_hcd: disconnect device [ 366.063754][ T6028] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 366.213522][ T6028] usb 6-1: Using ep0 maxpacket: 8 [ 366.217467][ T6028] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 366.220742][ T6028] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.225320][ T6028] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.228326][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.233678][ T6028] usbtmc 6-1:16.0: bulk endpoints not found [ 366.237074][T17407] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.321769][T17507] FAULT_INJECTION: forcing a failure. [ 366.321769][T17507] name failslab, interval 1, probability 0, space 0, times 0 [ 366.328288][T17507] CPU: 3 UID: 0 PID: 17507 Comm: syz.0.2185 Not tainted syzkaller #0 PREEMPT(full) [ 366.328306][T17507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 366.328319][T17507] Call Trace: [ 366.328324][T17507] [ 366.328332][T17507] dump_stack_lvl+0x16c/0x1f0 [ 366.328351][T17507] should_fail_ex+0x512/0x640 [ 366.328368][T17507] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 366.328383][T17507] should_failslab+0xc2/0x120 [ 366.328412][T17507] __kmalloc_node_noprof+0xe0/0x8a0 [ 366.328425][T17507] ? __get_vm_area_node+0x208/0x330 [ 366.328439][T17507] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 366.328458][T17507] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 366.328472][T17507] __vmalloc_node_range_noprof+0x3e5/0x1480 [ 366.328492][T17507] ? bpf_prog_calc_tag+0x67/0x350 [ 366.328510][T17507] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 366.328525][T17507] ? sort+0x97/0xd0 [ 366.328541][T17507] ? __pfx_sort+0x10/0x10 [ 366.328555][T17507] ? __pfx_cmp_subprogs+0x10/0x10 [ 366.328575][T17507] ? bpf_prog_calc_tag+0x67/0x350 [ 366.328593][T17507] __vmalloc_node_noprof+0xad/0xf0 [ 366.328608][T17507] ? bpf_prog_calc_tag+0x67/0x350 [ 366.328623][T17507] bpf_prog_calc_tag+0x67/0x350 [ 366.328640][T17507] bpf_check+0x61fa/0xbdd0 [ 366.328655][T17507] ? __lock_acquire+0x622/0x1c90 [ 366.328671][T17507] ? css_rstat_updated+0x1c2/0x510 [ 366.328684][T17507] ? __pfx_css_rstat_updated+0x10/0x10 [ 366.328699][T17507] ? __lock_acquire+0xb8a/0x1c90 [ 366.328715][T17507] ? __pfx_bpf_check+0x10/0x10 [ 366.328732][T17507] ? find_held_lock+0x2b/0x80 [ 366.328745][T17507] ? rcu_is_watching+0x12/0xc0 [ 366.328756][T17507] ? ktime_get_with_offset+0x26e/0x3b0 [ 366.328770][T17507] ? __asan_memset+0x23/0x50 [ 366.328779][T17507] ? lsm_blob_alloc+0x2b/0x90 [ 366.328793][T17507] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 366.328809][T17507] bpf_prog_load+0x112e/0x2850 [ 366.328823][T17507] ? __pfx_bpf_prog_load+0x10/0x10 [ 366.328832][T17507] ? __lock_acquire+0xb8a/0x1c90 [ 366.328861][T17507] __sys_bpf+0x3e72/0x4980 [ 366.328874][T17507] ? __pfx___sys_bpf+0x10/0x10 [ 366.328884][T17507] ? find_held_lock+0x2b/0x80 [ 366.328898][T17507] ? find_held_lock+0x2b/0x80 [ 366.328912][T17507] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 366.328939][T17507] ? fput+0x9b/0xd0 [ 366.328953][T17507] ? ksys_write+0x1ac/0x250 [ 366.328964][T17507] ? __pfx_ksys_write+0x10/0x10 [ 366.328978][T17507] __ia32_sys_bpf+0x76/0xe0 [ 366.328990][T17507] __do_fast_syscall_32+0x7c/0x300 [ 366.329005][T17507] do_fast_syscall_32+0x32/0x80 [ 366.329019][T17507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 366.329033][T17507] RIP: 0023:0xf7ff5579 [ 366.329042][T17507] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 366.329051][T17507] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 366.329062][T17507] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 366.329069][T17507] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.329075][T17507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.329080][T17507] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 366.329086][T17507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.329100][T17507] [ 366.329140][T17507] syz.0.2185: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 366.437623][T17507] CPU: 3 UID: 0 PID: 17507 Comm: syz.0.2185 Not tainted syzkaller #0 PREEMPT(full) [ 366.437639][T17507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 366.437645][T17507] Call Trace: [ 366.437650][T17507] [ 366.437655][T17507] dump_stack_lvl+0x16c/0x1f0 [ 366.437673][T17507] warn_alloc+0x248/0x3a0 [ 366.437685][T17507] ? __pfx_warn_alloc+0x10/0x10 [ 366.437695][T17507] ? dump_stack_lvl+0x1a3/0x1f0 [ 366.437709][T17507] ? should_fail_ex+0x354/0x640 [ 366.437726][T17507] ? rcu_is_watching+0x12/0xc0 [ 366.437739][T17507] ? trace_kmalloc+0x2b/0xd0 [ 366.437751][T17507] ? __kmalloc_node_noprof+0x364/0x8a0 [ 366.437763][T17507] ? __get_vm_area_node+0x208/0x330 [ 366.437777][T17507] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 366.437795][T17507] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 366.437814][T17507] ? bpf_prog_calc_tag+0x67/0x350 [ 366.437833][T17507] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 366.437847][T17507] ? sort+0x97/0xd0 [ 366.437862][T17507] ? __pfx_sort+0x10/0x10 [ 366.437877][T17507] ? __pfx_cmp_subprogs+0x10/0x10 [ 366.437891][T17507] ? bpf_prog_calc_tag+0x67/0x350 [ 366.437905][T17507] __vmalloc_node_noprof+0xad/0xf0 [ 366.437920][T17507] ? bpf_prog_calc_tag+0x67/0x350 [ 366.437935][T17507] bpf_prog_calc_tag+0x67/0x350 [ 366.437951][T17507] bpf_check+0x61fa/0xbdd0 [ 366.437965][T17507] ? __lock_acquire+0x622/0x1c90 [ 366.437981][T17507] ? css_rstat_updated+0x1c2/0x510 [ 366.437994][T17507] ? __pfx_css_rstat_updated+0x10/0x10 [ 366.438009][T17507] ? __lock_acquire+0xb8a/0x1c90 [ 366.438025][T17507] ? __pfx_bpf_check+0x10/0x10 [ 366.438043][T17507] ? find_held_lock+0x2b/0x80 [ 366.438055][T17507] ? rcu_is_watching+0x12/0xc0 [ 366.438065][T17507] ? ktime_get_with_offset+0x26e/0x3b0 [ 366.438079][T17507] ? __asan_memset+0x23/0x50 [ 366.438089][T17507] ? lsm_blob_alloc+0x2b/0x90 [ 366.438103][T17507] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 366.438119][T17507] bpf_prog_load+0x112e/0x2850 [ 366.438132][T17507] ? __pfx_bpf_prog_load+0x10/0x10 [ 366.438141][T17507] ? __lock_acquire+0xb8a/0x1c90 [ 366.438170][T17507] __sys_bpf+0x3e72/0x4980 [ 366.438182][T17507] ? __pfx___sys_bpf+0x10/0x10 [ 366.438197][T17507] ? find_held_lock+0x2b/0x80 [ 366.438210][T17507] ? find_held_lock+0x2b/0x80 [ 366.438224][T17507] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 366.438246][T17507] ? fput+0x9b/0xd0 [ 366.438260][T17507] ? ksys_write+0x1ac/0x250 [ 366.438271][T17507] ? __pfx_ksys_write+0x10/0x10 [ 366.438285][T17507] __ia32_sys_bpf+0x76/0xe0 [ 366.438296][T17507] __do_fast_syscall_32+0x7c/0x300 [ 366.438312][T17507] do_fast_syscall_32+0x32/0x80 [ 366.438325][T17507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 366.438338][T17507] RIP: 0023:0xf7ff5579 [ 366.438346][T17507] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 366.438356][T17507] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 366.438366][T17507] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 366.438373][T17507] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.438379][T17507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.438385][T17507] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 366.438391][T17507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.438404][T17507] [ 366.438408][T17507] Mem-Info: [ 366.555361][T17507] active_anon:8593 inactive_anon:3557 isolated_anon:0 [ 366.555361][T17507] active_file:9070 inactive_file:11468 isolated_file:0 [ 366.555361][T17507] unevictable:1768 dirty:138 writeback:0 [ 366.555361][T17507] slab_reclaimable:6215 slab_unreclaimable:57299 [ 366.555361][T17507] mapped:28763 shmem:5437 pagetables:3166 [ 366.555361][T17507] sec_pagetables:325 bounce:0 [ 366.555361][T17507] kernel_misc_reclaimable:0 [ 366.555361][T17507] free:51962 free_pcp:17786 free_cma:0 [ 366.571119][T17507] Node 0 active_anon:192kB inactive_anon:52kB active_file:460kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1456kB dirty:8kB writeback:0kB shmem:16572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8336kB pagetables:1792kB sec_pagetables:1176kB all_unreclaimable? yes Balloon:0kB [ 366.582510][T17507] Node 1 active_anon:35484kB inactive_anon:14176kB active_file:35820kB inactive_file:45872kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:114796kB dirty:544kB writeback:0kB shmem:6480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7304kB pagetables:10892kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB [ 366.592999][T17507] Node 0 DMA free:2120kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:516kB local_pcp:32kB free_cma:0kB [ 366.602029][T17507] lowmem_reserve[]: 0 294 294 294 294 [ 366.603857][T17507] Node 0 DMA32 free:16700kB boost:0kB min:13448kB low:16808kB high:20168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:192kB inactive_anon:52kB active_file:460kB inactive_file:0kB unevictable:3536kB writepending:8kB zspages:8kB present:1032196kB managed:301124kB mlocked:0kB bounce:0kB free_pcp:13580kB local_pcp:3068kB free_cma:0kB [ 366.614084][T17507] lowmem_reserve[]: 0 0 0 0 0 [ 366.615604][T17507] Node 1 DMA32 free:188340kB boost:20480kB min:67624kB low:79408kB high:91192kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35584kB inactive_anon:14176kB active_file:35820kB inactive_file:45872kB unevictable:3536kB writepending:544kB zspages:2436kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:55784kB local_pcp:14748kB free_cma:0kB [ 366.642761][T17507] lowmem_reserve[]: 0 0 0 0 0 [ 366.644421][T17507] Node 0 DMA: 32*4kB (UM) 21*8kB (U) 10*16kB (UM) 6*32kB (UM) 1*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2120kB [ 366.654588][T17507] Node 0 DMA32: 193*4kB (UM) 53*8kB (UME) 11*16kB (UME) 49*32kB (ME) 51*64kB (UME) 28*128kB (UME) 11*256kB (UME) 6*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 16700kB [ 366.668196][T17507] Node 1 DMA32: 61*4kB (U) 4*8kB (U) 3*16kB (UM) 113*32kB (UME) 9*64kB (UME) 48*128kB (ME) 50*256kB (UME) 26*512kB (UME) 72*1024kB (UM) 18*2048kB (UM) 10*4096kB (UM) = 188324kB [ 366.673913][T17507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.676962][T17507] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.679884][T17507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.683014][T17507] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.685884][T17507] 24778 total pagecache pages [ 366.687462][T17507] 331 pages in swap cache [ 366.688876][T17507] Free swap = 118208kB [ 366.690224][T17507] Total swap = 124996kB [ 366.691584][T17507] 524155 pages RAM [ 366.692912][T17507] 0 pages HighMem/MovableOnly [ 366.694838][T17507] 207979 pages reserved [ 366.696503][T17507] 0 pages cma reserved [ 366.781112][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 368.143626][T17922] binder: BINDER_SET_CONTEXT_MGR already set [ 368.145746][T17922] binder: 17741:17922 ioctl 4018620d 80000040 returned -16 [ 368.624696][T18257] bond2: Invalid ad_actor_system MAC address. [ 368.627039][T18257] bond2: option ad_actor_system: invalid value (68719607821) [ 368.631210][T18257] bond2 (unregistering): Released all slaves [ 368.861203][ T9] usb 6-1: USB disconnect, device number 26 [ 369.363391][T18684] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 369.365589][T18684] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 369.368592][T18684] vhci_hcd vhci_hcd.0: Device attached [ 369.412116][T18688] __nla_validate_parse: 2 callbacks suppressed [ 369.412131][T18688] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2213'. [ 369.462873][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 369.500308][T18692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 369.609249][T18796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2217'. [ 369.612791][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 369.621034][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.629083][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.635999][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 369.646375][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 369.651820][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.663298][ T9] usb 6-1: config 0 descriptor?? [ 369.974660][T18685] vhci_hcd: connection closed [ 369.976410][ T13] vhci_hcd: stop threads [ 369.979422][ T13] vhci_hcd: release socket [ 369.981018][ T13] vhci_hcd: disconnect device [ 370.087376][T18366] random: crng reseeded on system resumption [ 370.099430][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 370.115363][ T9] shield 0003:0955:7214.0019: Registered Thunderstrike controller [ 370.117957][ T9] shield 0003:0955:7214.0019: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 370.214314][T19315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2226'. [ 370.305057][T15561] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 370.307229][ T6028] usb 6-1: USB disconnect, device number 27 [ 370.308524][T15561] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 370.313944][T15561] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 370.317379][T15561] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 370.367355][T19519] trusted_key: syz.2.2227 sent an empty control message without MSG_MORE. [ 370.422774][ T6012] vhci_hcd: vhci_device speed not set [ 370.832830][ T53] usb 44-1: device descriptor read/8, error -110 [ 370.855963][T19736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2236'. [ 370.963876][T19941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2238'. [ 371.019823][T19944] overlayfs: workdir and upperdir must be separate subtrees [ 371.076874][T19963] cgroup2: Unknown parameter 'favordyoíods' [ 371.187492][T20154] tmpfs: Unknown parameter 'grpquott' [ 371.189860][T20154] loop6: detected capacity change from 0 to 524287999 [ 371.223322][ T53] usb usb44-port1: attempt power cycle [ 371.360202][T20286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2248'. [ 371.600202][T20575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2252'. [ 371.828438][ T53] usb usb44-port1: unable to enumerate USB device [ 371.888100][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 371.892235][T20678] sctp: [Deprecated]: syz.2.2254 (pid 20678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.892235][T20678] Use struct sctp_sack_info instead [ 372.036493][T20787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2258'. [ 372.202409][ T841] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 372.565394][ T40] kauditd_printk_skb: 340 callbacks suppressed [ 372.565405][ T40] audit: type=1326 audit(1764051361.923:11696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.574328][ T40] audit: type=1326 audit(1764051361.923:11697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.581007][ T40] audit: type=1326 audit(1764051361.923:11698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.591166][ T40] audit: type=1326 audit(1764051361.923:11699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.598930][ T40] audit: type=1326 audit(1764051361.923:11700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.606181][ T40] audit: type=1326 audit(1764051361.923:11701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.613011][ T40] audit: type=1326 audit(1764051361.923:11702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.619846][ T40] audit: type=1326 audit(1764051361.923:11703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.628569][ T40] audit: type=1326 audit(1764051361.923:11704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.635517][ T40] audit: type=1326 audit(1764051361.923:11705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.0.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 372.832843][ T841] usb 7-1: device descriptor read/64, error -71 [ 373.073023][ T841] usb 7-1: new low-speed USB device number 46 using dummy_hcd [ 373.132133][T21173] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 373.134201][T21173] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.138835][T21173] vhci_hcd vhci_hcd.0: Device attached [ 373.144286][T21173] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(17) [ 373.146607][T21173] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.149138][T21173] vhci_hcd vhci_hcd.0: Device attached [ 373.154650][T21173] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 373.156706][T21173] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 373.159160][T21173] vhci_hcd vhci_hcd.0: Device attached [ 373.161704][T21173] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.181401][T21173] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(23) [ 373.183596][T21173] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.186332][T21173] vhci_hcd vhci_hcd.0: Device attached [ 373.189309][T21173] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(25) [ 373.191392][T21173] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 373.193971][T21173] vhci_hcd vhci_hcd.0: Device attached [ 373.196296][T21173] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.200169][T21173] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(29) [ 373.202327][T21173] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.202781][ T841] usb 7-1: device descriptor read/64, error -71 [ 373.205182][T21173] vhci_hcd vhci_hcd.0: Device attached [ 373.210388][T21173] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.217331][T21217] vhci_hcd: connection closed [ 373.217488][ T13] vhci_hcd: stop threads [ 373.217645][T21221] vhci_hcd: connection closed [ 373.217719][T21197] vhci_hcd: connection closed [ 373.218188][T21219] vhci_hcd: connection closed [ 373.218305][T21213] vhci_hcd: connection closed [ 373.218424][T21215] vhci_hcd: connection closed [ 373.219066][ T13] vhci_hcd: release socket [ 373.219077][ T13] vhci_hcd: disconnect device [ 373.219455][ T13] vhci_hcd: stop threads [ 373.233273][ T13] vhci_hcd: release socket [ 373.234664][ T13] vhci_hcd: disconnect device [ 373.236268][ T13] vhci_hcd: stop threads [ 373.237609][ T13] vhci_hcd: release socket [ 373.239067][ T13] vhci_hcd: disconnect device [ 373.240766][ T13] vhci_hcd: stop threads [ 373.242133][ T13] vhci_hcd: release socket [ 373.243954][ T13] vhci_hcd: disconnect device [ 373.245927][ T13] vhci_hcd: stop threads [ 373.248071][ T13] vhci_hcd: release socket [ 373.249516][ T13] vhci_hcd: disconnect device [ 373.251321][ T13] vhci_hcd: stop threads [ 373.252745][ T13] vhci_hcd: release socket [ 373.254192][ T13] vhci_hcd: disconnect device [ 373.323356][ T841] usb usb7-port1: attempt power cycle [ 373.673819][ T841] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 373.694103][ T841] usb 7-1: device descriptor read/8, error -71 [ 373.837029][T21444] ubi0: attaching mtd0 [ 373.839161][T21444] ubi0: scanning is finished [ 373.942807][ T841] usb 7-1: new low-speed USB device number 48 using dummy_hcd [ 373.963705][ T841] usb 7-1: device descriptor read/8, error -71 [ 373.991052][T21444] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 373.993541][T21444] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 373.995813][T21444] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 373.997970][T21444] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 374.000260][T21444] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 374.002282][T21444] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 374.004750][T21444] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 374.007778][T21444] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 374.011205][T21449] ubi0: background thread "ubi_bgt0d" started, PID 21449 [ 374.011308][T21446] ubi0: detaching mtd0 [ 374.017750][T21446] ubi0: mtd0 is detached [ 374.082970][ T841] usb usb7-port1: unable to enumerate USB device [ 374.734668][T21870] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 374.737017][T21870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.739747][T21870] vhci_hcd vhci_hcd.0: Device attached [ 374.743610][T21870] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(17) [ 374.745654][T21870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.747995][T21870] vhci_hcd vhci_hcd.0: Device attached [ 374.751998][T21870] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 374.753980][T21870] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 374.756594][T21870] vhci_hcd vhci_hcd.0: Device attached [ 374.763241][T21870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 374.770955][T21870] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(23) [ 374.773578][T21870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.776762][T21870] vhci_hcd vhci_hcd.0: Device attached [ 374.791767][T21870] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(25) [ 374.793893][T21870] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 374.796720][T21870] vhci_hcd vhci_hcd.0: Device attached [ 374.799315][T21870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 374.810417][T21870] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(29) [ 374.813092][T21870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.815787][T21870] vhci_hcd vhci_hcd.0: Device attached [ 374.818102][T21870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 374.824596][T21982] vhci_hcd: connection closed [ 374.824774][T21966] vhci_hcd: connection closed [ 374.825039][T21891] vhci_hcd: connection closed [ 374.825500][T21938] vhci_hcd: connection closed [ 374.825604][T21879] vhci_hcd: connection closed [ 374.825679][T21871] vhci_hcd: connection closed [ 374.826626][ T62] vhci_hcd: stop threads [ 374.835641][ T62] vhci_hcd: release socket [ 374.837558][ T62] vhci_hcd: disconnect device [ 374.839696][ T62] vhci_hcd: stop threads [ 374.841500][ T62] vhci_hcd: release socket [ 374.844108][ T62] vhci_hcd: disconnect device [ 374.846207][ T62] vhci_hcd: stop threads [ 374.847930][ T62] vhci_hcd: release socket [ 374.849942][ T62] vhci_hcd: disconnect device [ 374.852069][ T62] vhci_hcd: stop threads [ 374.853989][ T62] vhci_hcd: release socket [ 374.855906][ T62] vhci_hcd: disconnect device [ 374.857922][ T62] vhci_hcd: stop threads [ 374.859700][ T62] vhci_hcd: release socket [ 374.861470][ T62] vhci_hcd: disconnect device [ 374.863621][ T62] vhci_hcd: stop threads [ 374.865372][ T62] vhci_hcd: release socket [ 374.867308][ T62] vhci_hcd: disconnect device [ 374.913079][ T24] vhci_hcd: vhci_device speed not set [ 375.527166][T22501] ubi0: attaching mtd0 [ 375.529889][T22501] ubi0: scanning is finished [ 375.718822][T22501] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 375.721339][T22501] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 375.723772][T22501] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 375.726029][T22501] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 375.728491][T22501] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 375.730666][T22501] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 375.733704][T22501] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 375.739773][T22501] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 375.743159][T22527] ubi0: detaching mtd0 [ 375.745053][T22617] ubi0: background thread "ubi_bgt0d" started, PID 22617 [ 375.752513][T22527] ubi0: mtd0 is detached [ 376.098443][T22818] FAULT_INJECTION: forcing a failure. [ 376.098443][T22818] name failslab, interval 1, probability 0, space 0, times 0 [ 376.104143][T22818] CPU: 0 UID: 0 PID: 22818 Comm: syz.2.2298 Not tainted syzkaller #0 PREEMPT(full) [ 376.104169][T22818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 376.104180][T22818] Call Trace: [ 376.104187][T22818] [ 376.104196][T22818] dump_stack_lvl+0x16c/0x1f0 [ 376.104226][T22818] should_fail_ex+0x512/0x640 [ 376.104258][T22818] should_failslab+0xc2/0x120 [ 376.104284][T22818] kmem_cache_alloc_noprof+0x75/0x6e0 [ 376.104303][T22818] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 376.104326][T22818] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 376.104343][T22818] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 376.104364][T22818] idr_get_free+0x528/0xa30 [ 376.104390][T22818] idr_alloc_u32+0x190/0x2f0 [ 376.104409][T22818] ? __pfx_idr_alloc_u32+0x10/0x10 [ 376.104430][T22818] ? lock_acquire+0x179/0x350 [ 376.104456][T22818] idr_alloc_cyclic+0x10b/0x230 [ 376.104475][T22818] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 376.104492][T22818] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.104526][T22818] btf_new_fd+0x389/0x54d0 [ 376.104567][T22818] ? __pfx_btf_new_fd+0x10/0x10 [ 376.104591][T22818] ? aa_get_newest_label+0xd2/0x250 [ 376.104620][T22818] ? bpf_lsm_capable+0x9/0x10 [ 376.104641][T22818] ? security_capable+0x7e/0x260 [ 376.104668][T22818] ? ns_capable+0xd7/0x110 [ 376.104690][T22818] __sys_bpf+0x39f/0x4980 [ 376.104715][T22818] ? __pfx___sys_bpf+0x10/0x10 [ 376.104732][T22818] ? find_held_lock+0x2b/0x80 [ 376.104757][T22818] ? find_held_lock+0x2b/0x80 [ 376.104784][T22818] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 376.104826][T22818] ? fput+0x9b/0xd0 [ 376.104847][T22818] ? ksys_write+0x1ac/0x250 [ 376.104866][T22818] ? __pfx_ksys_write+0x10/0x10 [ 376.104890][T22818] __ia32_sys_bpf+0x76/0xe0 [ 376.104910][T22818] __do_fast_syscall_32+0x7c/0x300 [ 376.104937][T22818] do_fast_syscall_32+0x32/0x80 [ 376.104959][T22818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.104980][T22818] RIP: 0023:0xf7f86579 [ 376.104995][T22818] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 376.105011][T22818] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 376.105029][T22818] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000000 [ 376.105040][T22818] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.105050][T22818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.105059][T22818] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 376.105069][T22818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.105104][T22818] [ 376.254257][T22820] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 376.256400][T22820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.258717][T22820] vhci_hcd vhci_hcd.0: Device attached [ 376.262301][T22820] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(17) [ 376.264584][T22820] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.267846][T22820] vhci_hcd vhci_hcd.0: Device attached [ 376.270826][T22820] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 376.272825][T22820] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 376.275491][T22820] vhci_hcd vhci_hcd.0: Device attached [ 376.277848][T22820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.281406][T22820] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(23) [ 376.283525][T22820] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.286508][T22820] vhci_hcd vhci_hcd.0: Device attached [ 376.289537][T22820] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(25) [ 376.291592][T22820] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 376.294106][T22820] vhci_hcd vhci_hcd.0: Device attached [ 376.296404][T22820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.299861][T22820] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(29) [ 376.301873][T22820] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.304593][T22820] vhci_hcd vhci_hcd.0: Device attached [ 376.307271][T22820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.313689][T22829] vhci_hcd: connection closed [ 376.313874][ T62] vhci_hcd: stop threads [ 376.313936][T22827] vhci_hcd: connection closed [ 376.313963][T22825] vhci_hcd: connection closed [ 376.314281][T22835] vhci_hcd: connection closed [ 376.314377][T22833] vhci_hcd: connection closed [ 376.314450][T22821] vhci_hcd: connection closed [ 376.315447][ T62] vhci_hcd: release socket [ 376.326666][ T62] vhci_hcd: disconnect device [ 376.329658][ T62] vhci_hcd: stop threads [ 376.331022][ T62] vhci_hcd: release socket [ 376.332446][ T62] vhci_hcd: disconnect device [ 376.334124][ T62] vhci_hcd: stop threads [ 376.335616][ T62] vhci_hcd: release socket [ 376.337075][ T62] vhci_hcd: disconnect device [ 376.338669][ T62] vhci_hcd: stop threads [ 376.340206][ T62] vhci_hcd: release socket [ 376.341614][ T62] vhci_hcd: disconnect device [ 376.343358][ T62] vhci_hcd: stop threads [ 376.344788][ T62] vhci_hcd: release socket [ 376.346228][ T62] vhci_hcd: disconnect device [ 376.348124][ T62] vhci_hcd: stop threads [ 376.349462][ T62] vhci_hcd: release socket [ 376.350878][ T62] vhci_hcd: disconnect device [ 376.510917][T22941] __nla_validate_parse: 3 callbacks suppressed [ 376.510933][T22941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2303'. [ 377.256135][T23465] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 377.286867][T23469] input: syz0 as /devices/virtual/input/input31 [ 378.025108][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.027823][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.287012][T23796] netlink: 'syz.0.2326': attribute type 11 has an invalid length. [ 378.845556][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.854285][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.860589][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.871958][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.889817][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.067916][T24010] chnl_net:caif_netlink_parms(): no params data found [ 379.177021][T24010] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.179215][T24010] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.181394][T24010] bridge_slave_0: entered allmulticast mode [ 379.183959][T24010] bridge_slave_0: entered promiscuous mode [ 379.191348][T24010] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.194097][T24010] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.198405][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.199253][T24010] bridge_slave_1: entered allmulticast mode [ 379.203175][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.203306][T24127] ubi0: attaching mtd0 [ 379.204092][T24010] bridge_slave_1: entered promiscuous mode [ 379.210816][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.211341][T24127] ubi0: scanning is finished [ 379.219681][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.224144][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.261773][T24010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.272462][T24010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.370871][T24010] team0: Port device team_slave_0 added [ 379.388472][T24127] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 379.388973][T24010] team0: Port device team_slave_1 added [ 379.398076][T24127] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 379.402586][T24127] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 379.405628][T24127] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 379.408090][T24127] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 379.410300][T24127] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 379.412773][T24127] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 379.415950][T24127] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 379.419051][T24133] ubi0: background thread "ubi_bgt0d" started, PID 24133 [ 379.420364][T24131] ubi0: detaching mtd0 [ 379.424966][T24131] ubi0: mtd0 is detached [ 379.435350][T24135] IPVS: Unknown mcast interface: lo [ 379.457261][T24010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.460062][T24010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.467993][T24010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.491009][T24010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.493785][T24010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.504916][T24010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.794073][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.798794][ T12] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 379.802072][ T12] bond0 (unregistering): Released all slaves [ 379.843479][T24010] hsr_slave_0: entered promiscuous mode [ 379.845956][T24010] hsr_slave_1: entered promiscuous mode [ 379.848086][T24010] debugfs: 'hsr0' already exists in 'hsr' [ 379.849893][T24010] Cannot create hsr debugfs directory [ 379.952105][T24126] chnl_net:caif_netlink_parms(): no params data found [ 380.113036][T24126] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.119423][T24126] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.122263][T24126] bridge_slave_0: entered allmulticast mode [ 380.124929][T24126] bridge_slave_0: entered promiscuous mode [ 380.136612][T24126] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.140273][T24126] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.143366][T24126] bridge_slave_1: entered allmulticast mode [ 380.146699][T24126] bridge_slave_1: entered promiscuous mode [ 380.167094][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 380.167105][ T40] audit: type=1326 audit(1764575657.569:11761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.176844][ T40] audit: type=1326 audit(1764575657.569:11762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.183859][ T40] audit: type=1326 audit(1764575657.569:11763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.191617][ T40] audit: type=1326 audit(1764575657.569:11764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.198588][ T40] audit: type=1326 audit(1764575657.569:11765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.205934][ T40] audit: type=1326 audit(1764575657.569:11766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.213359][ T40] audit: type=1326 audit(1764575657.569:11767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.221431][ T40] audit: type=1326 audit(1764575657.569:11768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.229904][ T40] audit: type=1326 audit(1764575657.569:11769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.234809][T24126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.248156][ T40] audit: type=1326 audit(1764575657.651:11770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.1.2344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 380.265149][ T12] hsr_slave_0: left promiscuous mode [ 380.268575][ T12] hsr_slave_1: left promiscuous mode [ 380.271013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.275013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.915419][ T5952] Bluetooth: hci0: command tx timeout [ 380.919852][ T12] team0 (unregistering): Port device team_slave_1 removed [ 380.990918][ T12] team0 (unregistering): Port device team_slave_0 removed [ 381.229678][ T5952] Bluetooth: hci1: command tx timeout [ 381.538432][T24126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.576198][T24010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.584629][T24471] m: renamed from vlan0 (while UP) [ 381.622687][T24126] team0: Port device team_slave_0 added [ 381.630168][T24126] team0: Port device team_slave_1 added [ 381.675407][T24010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.682066][T24126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.684399][T24126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.692591][T24126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.699504][T24126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.701827][T24126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.711469][T24126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.734114][T24581] No control pipe specified [ 381.806724][T24126] hsr_slave_0: entered promiscuous mode [ 381.809243][T24126] hsr_slave_1: entered promiscuous mode [ 381.813049][T24126] debugfs: 'hsr0' already exists in 'hsr' [ 381.814846][T24126] Cannot create hsr debugfs directory [ 381.828771][T24010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.921865][T24010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.064186][ T12] IPVS: stop unused estimator thread 0... [ 382.066055][T24692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2352'. [ 382.073326][T24126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.079204][T24126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.083425][T24126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.089091][T24126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 382.147429][T24010] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.153452][T24010] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.160970][T24010] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.165317][T24010] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.169520][ T12] bridge_slave_1: left allmulticast mode [ 382.171345][ T12] bridge_slave_1: left promiscuous mode [ 382.173678][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.177179][ T12] bridge_slave_0: left allmulticast mode [ 382.179051][ T12] bridge_slave_0: left promiscuous mode [ 382.181081][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.479099][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.482651][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.486420][ T12] bond0 (unregistering): Released all slaves [ 382.523398][T24906] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.526624][T24906] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.567360][T24906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.573833][T24906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.608083][T25015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 382.632029][ T12] tipc: Left network mode [ 382.634244][ T1148] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.651034][ T1148] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.654744][ T1148] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.675416][ T1148] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.715971][T24126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.767925][T24010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.772640][T24126] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.781439][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.783710][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.793233][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.795453][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.800861][T24010] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.820762][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.823998][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.840199][T25129] ubi0: attaching mtd0 [ 382.842615][T25129] ubi0: scanning is finished [ 382.860289][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.863248][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.948099][ T5952] Bluetooth: hci0: command tx timeout [ 382.988722][ T12] hsr_slave_0: left promiscuous mode [ 383.002737][T25129] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 383.011354][T25129] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 383.014287][T25129] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 383.017112][T25129] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 383.019395][T25129] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 383.021696][T25129] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 383.024783][T25129] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 383.028689][T25129] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 383.033735][T25243] ubi0: background thread "ubi_bgt0d" started, PID 25243 [ 383.036657][T25132] ubi0: detaching mtd0 [ 383.045375][T25132] ubi0: mtd0 is detached [ 383.058685][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'. [ 383.254916][ T5952] Bluetooth: hci1: command tx timeout [ 383.678852][T25350] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 383.692654][T25350] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 383.699794][T25350] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 383.706156][T25350] kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 383.718973][T25350] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 383.776006][ T12] team0 (unregistering): Port device team_slave_1 removed [ 383.845416][ T12] team0 (unregistering): Port device team_slave_0 removed [ 384.399160][T24126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.403038][T25348] lo: Caught tx_queue_len zero misconfig [ 384.412196][T24010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.440235][T24010] veth0_vlan: entered promiscuous mode [ 384.456119][T24010] veth1_vlan: entered promiscuous mode [ 384.484556][T24010] veth0_macvtap: entered promiscuous mode [ 384.489013][T24010] veth1_macvtap: entered promiscuous mode [ 384.503318][T24010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.510354][T24010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.593069][ T1189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.597470][ T1189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.606424][ T1189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.610499][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.613945][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.625907][ T1189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.646110][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.649091][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.729088][T24126] veth0_vlan: entered promiscuous mode [ 384.738009][T24126] veth1_vlan: entered promiscuous mode [ 384.791919][T24126] veth0_macvtap: entered promiscuous mode [ 384.798424][T24126] veth1_macvtap: entered promiscuous mode [ 384.808798][T25474] ubi0: attaching mtd0 [ 384.811274][T25474] ubi0: scanning is finished [ 384.816216][T24126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.826884][T24126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.835796][ T80] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.840080][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.845818][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.849718][ T80] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.887075][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.890199][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.920287][T25474] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 384.922762][T25474] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 384.926048][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.927519][T25474] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 384.929446][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.930988][T25474] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 384.936104][T25474] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 384.938382][T25474] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 384.940899][T25474] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 384.944242][T25474] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 384.947775][T25481] ubi0: background thread "ubi_bgt0d" started, PID 25481 [ 384.947815][T25473] ubi: mtd0 is already attached to ubi0 [ 384.968903][T25477] ubi0: detaching mtd0 [ 384.971400][T25477] ubi0: mtd0 is detached [ 384.985818][ T5952] Bluetooth: hci0: command tx timeout [ 385.270190][ T34] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 385.289939][ T5952] Bluetooth: hci1: command tx timeout [ 385.427402][ T34] usb 5-1: device descriptor read/64, error -71 [ 385.454276][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.458252][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.461381][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.464281][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.467022][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.701183][ T34] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 385.739796][T25496] chnl_net:caif_netlink_parms(): no params data found [ 385.828609][ T34] usb 5-1: device descriptor read/64, error -71 [ 385.852245][T25496] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.854549][T25496] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.856851][T25496] bridge_slave_0: entered allmulticast mode [ 385.860872][T25496] bridge_slave_0: entered promiscuous mode [ 385.878210][T25496] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.880529][T25496] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.883074][T25496] bridge_slave_1: entered allmulticast mode [ 385.885785][T25496] bridge_slave_1: entered promiscuous mode [ 385.922429][T25496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.929006][T25496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.946460][ T34] usb usb5-port1: attempt power cycle [ 385.988599][T25496] team0: Port device team_slave_0 added [ 386.007724][T25496] team0: Port device team_slave_1 added [ 386.039375][T25496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.041549][T25496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.050845][T25496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.067330][T25496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.069666][T25496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.078752][T25496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.131165][T25496] hsr_slave_0: entered promiscuous mode [ 386.133589][T25496] hsr_slave_1: entered promiscuous mode [ 386.298918][ T1189] bridge_slave_1: left allmulticast mode [ 386.299307][ T34] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 386.305961][ T1189] bridge_slave_1: left promiscuous mode [ 386.307865][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.312628][ T1189] bridge_slave_0: left allmulticast mode [ 386.314450][ T1189] bridge_slave_0: left promiscuous mode [ 386.316392][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.328915][ T34] usb 5-1: device descriptor read/8, error -71 [ 386.577481][ T34] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 386.605244][ T34] usb 5-1: device descriptor read/8, error -71 [ 386.678233][ T1189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.683697][ T1189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.687094][ T1189] bond0 (unregistering): Released all slaves [ 386.694271][ T1189] bond1 (unregistering): (slave veth5): Releasing active interface [ 386.697841][ T1189] bond1 (unregistering): Released all slaves [ 386.711729][ T34] usb usb5-port1: unable to enumerate USB device [ 386.782885][ T1189] : left promiscuous mode [ 386.900183][ T1189] tipc: Left network mode [ 387.015763][ T5952] Bluetooth: hci0: command tx timeout [ 387.165354][ T1189] hsr_slave_0: left promiscuous mode [ 387.168824][ T1189] hsr_slave_1: left promiscuous mode [ 387.170902][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.193135][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.333590][ T5952] Bluetooth: hci1: command tx timeout [ 387.489003][ T5952] Bluetooth: hci2: command tx timeout [ 388.112220][T25529] overlayfs: failed to resolve './file1': -2 [ 388.274320][T25532] ubi0: attaching mtd0 [ 388.284602][T25532] ubi0: scanning is finished [ 388.301283][ T1189] team0 (unregistering): Port device team_slave_1 removed [ 388.410111][ T1189] team0 (unregistering): Port device team_slave_0 removed [ 388.434696][T25532] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 388.439299][T25532] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 388.442640][T25532] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 388.446070][T25532] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 388.449511][T25532] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 388.452912][T25532] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 388.456331][T25532] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 388.459744][T25532] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 388.463255][T25535] ubi0: detaching mtd0 [ 388.486531][T25535] ubi0: mtd0 is detached [ 388.607065][T25539] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 388.609926][T25539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 388.614298][T25539] vhci_hcd vhci_hcd.0: Device attached [ 388.873113][ T6012] usb 40-1: SetAddress Request (27) to port 0 [ 388.875412][ T6012] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd [ 389.086417][T25496] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.101821][T25496] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.113290][T25496] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.120843][T25496] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.315670][T25540] vhci_hcd: connection reset by peer [ 389.320411][ T12] vhci_hcd: stop threads [ 389.322102][ T12] vhci_hcd: release socket [ 389.323977][ T12] vhci_hcd: disconnect device [ 389.532982][ T5952] Bluetooth: hci2: command tx timeout [ 389.786747][ T1189] IPVS: stop unused estimator thread 0... [ 390.177727][T25496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.196513][T25566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 390.204083][T25566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2383'. [ 390.206093][T25496] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.215770][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.218306][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.236728][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.239085][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.239149][T25564] ubi0: attaching mtd0 [ 390.245067][T25564] ubi0: scanning is finished [ 390.375466][T25496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.385356][T25564] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 390.399555][T25564] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 390.401864][T25564] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 390.402455][T25496] veth0_vlan: entered promiscuous mode [ 390.404032][T25564] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 390.408318][T25564] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 390.409595][T25496] veth1_vlan: entered promiscuous mode [ 390.410508][T25564] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 390.414753][T25564] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 390.417906][T25564] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 390.421449][T25576] ubi0: detaching mtd0 [ 390.421453][T25584] ubi0: background thread "ubi_bgt0d" started, PID 25584 [ 390.423109][T25496] veth0_macvtap: entered promiscuous mode [ 390.426761][T25576] ubi0: mtd0 is detached [ 390.429736][T25496] veth1_macvtap: entered promiscuous mode [ 390.432518][T25585] ubi0: attaching mtd0 [ 390.434697][T25585] ubi0: scanning is finished [ 390.443680][T25496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.450529][T25496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.459759][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.463553][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.466807][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.470853][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.513385][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.516058][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.527249][ T6028] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 390.530499][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.533013][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.546443][T25585] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 390.548988][T25585] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 390.551275][T25585] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 390.553497][T25585] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 390.556177][T25585] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 390.558851][T25585] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 390.561465][T25585] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 390.565127][T25585] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 390.568876][T25586] ubi0: detaching mtd0 [ 390.578407][T25586] ubi0: mtd0 is detached [ 390.580633][T25591] ubi0: attaching mtd0 [ 390.583459][T25591] ubi0: scanning is finished [ 390.689319][ T6028] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.693175][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.696954][ T6028] usb 6-1: Product: syz [ 390.698840][ T6028] usb 6-1: Manufacturer: syz [ 390.700875][ T6028] usb 6-1: SerialNumber: syz [ 390.707631][ T6028] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 390.729350][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 390.797828][T25591] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 390.801155][T25591] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 390.804786][T25591] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 390.807982][T25591] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 390.811254][T25591] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 390.814749][T25591] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 390.817519][T25591] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 390.821886][T25591] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 390.826025][T25599] ubi0: background thread "ubi_bgt0d" started, PID 25599 [ 390.826100][T25594] ubi0: detaching mtd0 [ 390.831866][T25594] ubi0: mtd0 is detached [ 391.194425][T25601] __vm_enough_memory: pid: 25601, comm: syz.0.2389, bytes: 4294963200 not enough memory for the allocation [ 391.361691][T25606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 391.365676][T25606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2391'. [ 391.478584][T25602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.491233][T25602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.583521][ T5952] Bluetooth: hci2: command tx timeout [ 391.740198][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 391.753390][ T24] ath9k_htc: Failed to initialize the device [ 391.836376][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 391.888140][ T6028] usb 6-1: USB disconnect, device number 28 [ 392.473858][T25622] syzkaller0: entered promiscuous mode [ 392.476036][T25622] syzkaller0: entered allmulticast mode [ 392.491941][T25622] tipc: Started in network mode [ 392.493559][T25622] tipc: Node identity 1a9a5f905f6c, cluster identity 4711 [ 392.497397][T25622] tipc: Enabled bearer , priority 0 [ 392.502929][T25621] tipc: Resetting bearer [ 392.512347][T25621] tipc: Disabling bearer [ 392.656225][T25629] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 392.658927][T25629] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 392.665201][T25629] vhci_hcd vhci_hcd.0: Device attached [ 392.682553][T25636] ubi0: attaching mtd0 [ 392.686130][T25636] ubi0: scanning is finished [ 392.838304][T25636] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 392.842156][T25636] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 392.849200][T25636] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 392.856445][T25636] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 392.863030][T25636] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 392.869062][T25636] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 392.877799][T25636] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 392.887746][T25636] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 392.899362][T25642] ubi0: detaching mtd0 [ 392.906214][T25642] ubi0: mtd0 is detached [ 392.954395][ T53] usb 46-1: SetAddress Request (2) to port 0 [ 392.957152][ T53] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 393.171120][T25631] vhci_hcd: connection reset by peer [ 393.173669][ T12] vhci_hcd: stop threads [ 393.175517][ T12] vhci_hcd: release socket [ 393.177098][ T12] vhci_hcd: disconnect device [ 393.603859][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 393.608048][T25661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2400'. [ 393.635939][ T5952] Bluetooth: hci2: command tx timeout [ 394.439279][T25673] FAULT_INJECTION: forcing a failure. [ 394.439279][T25673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.444663][T25673] CPU: 3 UID: 0 PID: 25673 Comm: syz.1.2403 Not tainted syzkaller #0 PREEMPT(full) [ 394.444689][T25673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 394.444697][T25673] Call Trace: [ 394.444701][T25673] [ 394.444706][T25673] dump_stack_lvl+0x16c/0x1f0 [ 394.444724][T25673] should_fail_ex+0x512/0x640 [ 394.444743][T25673] _copy_from_user+0x2e/0xd0 [ 394.444760][T25673] io_uring_setup+0xb4/0x20e0 [ 394.444775][T25673] ? __pfx_io_uring_setup+0x10/0x10 [ 394.444791][T25673] ? __pfx___schedule+0x10/0x10 [ 394.444803][T25673] ? __fget_files+0x20e/0x3c0 [ 394.444819][T25673] ? xfd_validate_state+0x61/0x180 [ 394.444838][T25673] __ia32_sys_io_uring_setup+0xc2/0x170 [ 394.444852][T25673] __do_fast_syscall_32+0x7c/0x300 [ 394.444867][T25673] do_fast_syscall_32+0x32/0x80 [ 394.444881][T25673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 394.444894][T25673] RIP: 0023:0xf7f34579 [ 394.444903][T25673] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 394.444913][T25673] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 394.444924][T25673] RAX: ffffffffffffffda RBX: 0000000000003c5f RCX: 0000000080000240 [ 394.444931][T25673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.444936][T25673] RBP: 0000000080000200 R08: 0000000000000000 R09: 0000000000000000 [ 394.444942][T25673] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 394.444948][T25673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 394.444966][T25673] [ 394.476090][ T6012] usb 40-1: device descriptor read/8, error -110 [ 394.719744][T25692] ubi0: attaching mtd0 [ 394.722230][T25692] ubi0: scanning is finished [ 394.873018][T25692] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 394.876244][T25692] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 394.879219][T25692] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 394.882261][T25692] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 394.885320][T25692] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 394.888081][T25692] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 394.899907][T25692] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 394.904148][T25692] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 394.908264][T25702] ubi0: background thread "ubi_bgt0d" started, PID 25702 [ 394.911568][T25694] ubi0: detaching mtd0 [ 394.915953][T25694] ubi0: mtd0 is detached [ 394.951328][ T6012] usb usb40-port1: attempt power cycle [ 395.525329][ T6012] usb usb40-port1: unable to enumerate USB device [ 395.534090][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 395.550668][T25712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2410'. [ 395.787716][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 395.787732][ T40] audit: type=1326 audit(1764575673.474:11772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 395.803695][ T40] audit: type=1326 audit(1764575673.474:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 395.811090][ T40] audit: type=1326 audit(1764575673.474:11774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 395.818149][ T40] audit: type=1326 audit(1764575673.474:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 395.825055][ T40] audit: type=1326 audit(1764575673.474:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 395.832233][ T40] audit: type=1326 audit(1764575673.474:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 395.913171][ T40] audit: type=1326 audit(1764575673.474:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 395.922534][ T40] audit: type=1326 audit(1764575673.474:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 395.932345][ T40] audit: type=1326 audit(1764575673.474:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 395.940804][ T40] audit: type=1326 audit(1764575673.474:11781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25724 comm="syz.1.2414" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 396.484500][T14214] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 396.653645][T14214] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 396.659694][T14214] usb 6-1: config 0 has no interfaces? [ 396.664940][T14214] usb 6-1: config 0 has no interfaces? [ 396.704166][T14214] usb 6-1: config 0 has no interfaces? [ 396.715366][T14214] usb 6-1: config 0 has no interfaces? [ 396.719173][T14214] usb 6-1: config 0 has no interfaces? [ 396.723019][T14214] usb 6-1: config 0 has no interfaces? [ 396.726603][T14214] usb 6-1: config 0 has no interfaces? [ 396.740270][T14214] usb 6-1: config 0 has no interfaces? [ 396.744354][T14214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.748721][T14214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.752144][T14214] usb 6-1: Product: syz [ 396.753750][T14214] usb 6-1: Manufacturer: syz [ 396.755653][T14214] usb 6-1: SerialNumber: syz [ 396.758638][T14214] usb 6-1: config 0 descriptor?? [ 396.795139][T25740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 396.798088][T25740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 396.802336][T25740] vhci_hcd vhci_hcd.0: Device attached [ 396.806925][T25744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'. [ 396.807361][T25740] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(17) [ 396.812901][T25744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2419'. [ 396.813074][T25740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 396.813370][T25740] vhci_hcd vhci_hcd.0: Device attached [ 396.830791][T25740] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 396.833443][T25740] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 396.836443][T25740] vhci_hcd vhci_hcd.0: Device attached [ 396.842216][T25740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 396.846562][T25740] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(23) [ 396.848751][T25740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 396.851435][T25740] vhci_hcd vhci_hcd.0: Device attached [ 396.855279][T25740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(25) [ 396.857522][T25740] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 396.860113][T25740] vhci_hcd vhci_hcd.0: Device attached [ 396.863414][T25740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 396.868261][T25740] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(29) [ 396.871030][T25740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 396.875219][T25740] vhci_hcd vhci_hcd.0: Device attached [ 396.878302][T25740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 396.886781][T25760] ubi0: attaching mtd0 [ 396.889077][T25760] ubi0: scanning is finished [ 396.893069][T25758] vhci_hcd: connection closed [ 396.893461][ T62] vhci_hcd: stop threads [ 396.897351][ T62] vhci_hcd: release socket [ 396.900015][ T62] vhci_hcd: disconnect device [ 396.900886][T25750] vhci_hcd: connection closed [ 396.902133][T25754] vhci_hcd: connection closed [ 396.902753][T25745] vhci_hcd: connection closed [ 396.906149][ T62] vhci_hcd: stop threads [ 396.907128][T25752] vhci_hcd: connection closed [ 396.908222][ T62] vhci_hcd: release socket [ 396.909760][T25742] vhci_hcd: connection closed [ 396.911349][ T62] vhci_hcd: disconnect device [ 396.911723][ T62] vhci_hcd: stop threads [ 396.918294][ T62] vhci_hcd: release socket [ 396.920439][ T62] vhci_hcd: disconnect device [ 396.922209][ T62] vhci_hcd: stop threads [ 396.923577][ T62] vhci_hcd: release socket [ 396.925081][ T62] vhci_hcd: disconnect device [ 396.926846][ T62] vhci_hcd: stop threads [ 396.928239][ T62] vhci_hcd: release socket [ 396.929770][ T62] vhci_hcd: disconnect device [ 396.931700][ T62] vhci_hcd: stop threads [ 396.933148][ T62] vhci_hcd: release socket [ 396.934723][ T62] vhci_hcd: disconnect device [ 396.952888][T25766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2423'. [ 396.956711][T25766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2423'. [ 396.966287][T14214] usb 6-1: USB disconnect, device number 29 [ 396.979848][ T60] vhci_hcd: vhci_device speed not set [ 397.009914][T25760] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 397.013289][T25760] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 397.016509][T25760] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 397.019686][T25760] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 397.022528][T25760] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 397.025072][T25760] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 397.029051][T25760] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 397.033414][T25760] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 397.037503][T25769] ubi0: background thread "ubi_bgt0d" started, PID 25769 [ 397.037576][T25763] ubi0: detaching mtd0 [ 397.045342][T25763] ubi0: mtd0 is detached [ 397.613789][ T6029] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 397.775203][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2429'. [ 397.779188][T25787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2429'. [ 397.792170][ T6029] usb 6-1: Using ep0 maxpacket: 32 [ 397.795566][ T6029] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.802412][ T6029] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 397.806474][ T6029] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 397.809918][ T6029] usb 6-1: Product: syz [ 397.811447][ T6029] usb 6-1: Manufacturer: syz [ 397.813310][ T6029] usb 6-1: SerialNumber: syz [ 397.837638][ T6029] usb 6-1: config 0 descriptor?? [ 397.871315][ T29] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 397.913642][T25793] overlayfs: failed to resolve './file0': -2 [ 397.958380][T25793] Bluetooth: MGMT ver 1.23 [ 398.049767][ T53] usb 46-1: device descriptor read/8, error -110 [ 398.239085][ T6029] usb 6-1: USB disconnect, device number 30 [ 398.337138][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 398.595081][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.599476][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.603496][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 398.680961][ T53] usb usb46-port1: attempt power cycle [ 398.683797][ T29] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 398.686684][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.690350][ T29] usb 7-1: config 0 descriptor?? [ 398.775741][T25802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2435'. [ 398.779907][T25804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2435'. [ 398.911360][T25813] ubi0: attaching mtd0 [ 398.915118][T25813] ubi0: scanning is finished [ 399.050015][T25813] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 399.070105][T25813] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 399.073352][T25813] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 399.076355][T25813] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 399.079735][T25813] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 399.082699][T25813] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 399.086058][T25813] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 399.090235][T25813] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 399.095574][T25821] ubi0: background thread "ubi_bgt0d" started, PID 25821 [ 399.098793][T25819] ubi0: detaching mtd0 [ 399.107607][T25784] random: crng reseeded on system resumption [ 399.236796][T25819] ubi0: mtd0 is detached [ 399.274168][ T53] usb usb46-port1: unable to enumerate USB device [ 399.304250][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input32 [ 399.362598][ T29] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 399.370564][ T29] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 399.430542][ T53] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 399.445919][ T29] usb 7-1: USB disconnect, device number 49 [ 399.449120][ T53] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 399.463095][ T53] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 399.468170][ T53] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 399.716778][T25827] dlm: no local IP address has been set [ 399.719630][T25827] dlm: cannot start dlm midcomms -107 [ 399.841352][T25829] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 399.843909][T25829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.846997][T25829] vhci_hcd vhci_hcd.0: Device attached [ 399.851881][T25829] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 399.853975][T25829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 399.856902][T25829] vhci_hcd vhci_hcd.0: Device attached [ 399.862784][T25829] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 399.865407][T25829] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 399.868679][T25829] vhci_hcd vhci_hcd.0: Device attached [ 399.874228][T25829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 399.880879][T25829] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(23) [ 399.883539][T25829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 399.886987][T25829] vhci_hcd vhci_hcd.0: Device attached [ 399.895237][T25829] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(25) [ 399.897756][T25829] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 399.910755][T25829] vhci_hcd vhci_hcd.0: Device attached [ 399.914230][T25829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 399.918304][T25845] ceph: No source [ 399.919575][T25829] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(29) [ 399.921804][T25829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 399.924614][T25829] vhci_hcd vhci_hcd.0: Device attached [ 399.927897][T25829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 399.941932][T25846] vhci_hcd: connection closed [ 399.942129][T25842] vhci_hcd: connection closed [ 399.942315][T25834] vhci_hcd: connection closed [ 399.946673][ T80] vhci_hcd: stop threads [ 399.947094][T25830] vhci_hcd: connection closed [ 399.947206][T25840] vhci_hcd: connection closed [ 399.947372][T25832] vhci_hcd: connection closed [ 399.948238][ T80] vhci_hcd: release socket [ 399.961035][ T80] vhci_hcd: disconnect device [ 399.962747][ T80] vhci_hcd: stop threads [ 399.965022][ T80] vhci_hcd: release socket [ 399.966530][ T80] vhci_hcd: disconnect device [ 399.968278][ T80] vhci_hcd: stop threads [ 399.969747][ T80] vhci_hcd: release socket [ 399.971245][ T80] vhci_hcd: disconnect device [ 399.979879][ T80] vhci_hcd: stop threads [ 399.981385][ T80] vhci_hcd: release socket [ 399.982849][ T80] vhci_hcd: disconnect device [ 399.986393][ T80] vhci_hcd: stop threads [ 399.987857][ T80] vhci_hcd: release socket [ 399.989375][ T80] vhci_hcd: disconnect device [ 399.991184][ T80] vhci_hcd: stop threads [ 399.992572][ T80] vhci_hcd: release socket [ 399.994845][ T80] vhci_hcd: disconnect device [ 400.023357][ T60] vhci_hcd: vhci_device speed not set [ 400.098869][T25864] ubi0: attaching mtd0 [ 400.102165][T25864] ubi0: scanning is finished [ 400.212116][ T6029] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 400.230434][T25864] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 400.233022][T25864] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 400.235451][T25864] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 400.238002][T25864] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 400.240871][T25864] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 400.243739][T25864] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 400.246995][T25864] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 400.251123][T25864] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 400.255022][T25869] ubi0: background thread "ubi_bgt0d" started, PID 25869 [ 400.257333][T25867] ubi0: detaching mtd0 [ 400.262692][T25867] ubi0: mtd0 is detached [ 400.370326][ T6029] usb 5-1: Using ep0 maxpacket: 8 [ 400.373202][ T6029] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 400.375896][ T6029] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.378914][ T6029] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.380305][ T29] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 400.382162][ T6029] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.388607][ T6029] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.393435][ T6029] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 400.396348][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.540517][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 400.544250][ T29] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 400.547733][ T29] usb 7-1: config 0 has no interface number 0 [ 400.550562][ T29] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 400.555292][ T29] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 400.560121][ T29] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.564643][ T29] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 400.570079][ T29] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 400.573823][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.579262][ T29] usb 7-1: config 0 descriptor?? [ 400.585304][ T29] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 400.602333][ T6029] usb 5-1: GET_CAPABILITIES returned 0 [ 400.604182][ T6029] usbtmc 5-1:16.0: can't read capabilities [ 400.767412][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 400.794693][ T6029] usb 7-1: USB disconnect, device number 50 [ 400.802774][ T6029] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 400.807335][ T841] usb 5-1: USB disconnect, device number 50 [ 400.937746][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 400.964220][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.969803][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.975725][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 400.980993][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 400.984773][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.004314][ T10] usb 6-1: config 0 descriptor?? [ 401.396465][T25891] tipc: Enabling of bearer rejected, failed to enable media [ 401.408560][T25871] random: crng reseeded on system resumption [ 401.421763][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 401.443678][ T10] shield 0003:0955:7214.001B: Registered Thunderstrike controller [ 401.446929][ T10] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 401.518939][T25898] ubi0: attaching mtd0 [ 401.622151][T15561] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 401.626839][ T6029] usb 6-1: USB disconnect, device number 31 [ 401.631045][T15561] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 401.634459][T15561] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 401.651654][T15561] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 401.681522][ T24] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 401.812119][T25902] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 401.814186][T25902] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 401.817190][T25902] vhci_hcd vhci_hcd.0: Device attached [ 401.843405][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 401.849325][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.851922][ T24] usb 7-1: Product: syz [ 401.853256][ T24] usb 7-1: Manufacturer: syz [ 401.854753][ T24] usb 7-1: SerialNumber: syz [ 401.869894][ T24] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 401.879410][ T6028] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 402.087685][ T29] usb 38-1: SetAddress Request (34) to port 0 [ 402.090363][ T29] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 402.164054][T25913] netlink: 'syz.1.2467': attribute type 10 has an invalid length. [ 402.166594][T25913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2467'. [ 402.171642][T25913] team0: Port device geneve0 added [ 402.173745][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.176590][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.179788][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.182842][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.222382][T25915] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 402.224516][T25915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 402.228262][T25915] vhci_hcd vhci_hcd.0: Device attached [ 402.232173][T25915] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 402.234912][T25915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 402.239795][T25915] vhci_hcd vhci_hcd.0: Device attached [ 402.244739][T25915] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 402.246878][T25915] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 402.249602][T25915] vhci_hcd vhci_hcd.0: Device attached [ 402.254125][T25915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.260570][T25915] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(23) [ 402.263453][T25915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 402.267119][T25915] vhci_hcd vhci_hcd.0: Device attached [ 402.272808][T25915] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(25) [ 402.275628][T25915] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 402.279132][T25915] vhci_hcd vhci_hcd.0: Device attached [ 402.282732][T25915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.288815][T25915] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(29) [ 402.291759][T25915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 402.295359][T25915] vhci_hcd vhci_hcd.0: Device attached [ 402.299360][T25915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.312160][T25927] vhci_hcd: connection closed [ 402.312572][T25922] vhci_hcd: connection closed [ 402.315660][T25916] vhci_hcd: connection closed [ 402.315749][T25918] vhci_hcd: connection closed [ 402.315776][T25920] vhci_hcd: connection closed [ 402.318064][ T1148] vhci_hcd: stop threads [ 402.323283][T25924] vhci_hcd: connection closed [ 402.324080][ T1148] vhci_hcd: release socket [ 402.324097][ T1148] vhci_hcd: disconnect device [ 402.324288][ T1148] vhci_hcd: stop threads [ 402.333272][ T1148] vhci_hcd: release socket [ 402.335154][ T1148] vhci_hcd: disconnect device [ 402.337425][ T1148] vhci_hcd: stop threads [ 402.339237][ T1148] vhci_hcd: release socket [ 402.341338][ T1148] vhci_hcd: disconnect device [ 402.343368][ T1148] vhci_hcd: stop threads [ 402.345271][ T1148] vhci_hcd: release socket [ 402.347441][ T1148] vhci_hcd: disconnect device [ 402.351663][ T1148] vhci_hcd: stop threads [ 402.353552][ T1148] vhci_hcd: release socket [ 402.355601][ T1148] vhci_hcd: disconnect device [ 402.358127][ T1148] vhci_hcd: stop threads [ 402.360029][ T1148] vhci_hcd: release socket [ 402.362909][ T1148] vhci_hcd: disconnect device [ 402.405482][ T24] vhci_hcd: vhci_device speed not set [ 402.409635][T25903] vhci_hcd: connection reset by peer [ 402.426321][ T1148] vhci_hcd: stop threads [ 402.427820][ T1148] vhci_hcd: release socket [ 402.431244][ T1148] vhci_hcd: disconnect device [ 402.643632][T25930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.647694][T25930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.865554][T25932] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 402.867806][T25932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 402.870315][T25932] vhci_hcd vhci_hcd.0: Device attached [ 402.876652][T25932] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 402.878812][T25932] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 402.881342][T25932] vhci_hcd vhci_hcd.0: Device attached [ 402.886052][T25932] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 402.888204][T25932] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 402.890718][T25932] vhci_hcd vhci_hcd.0: Device attached [ 402.894850][T25932] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.900834][T25932] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(23) [ 402.902895][T25932] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 402.905430][T25932] vhci_hcd vhci_hcd.0: Device attached [ 402.912125][ T6028] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 402.914340][ T6028] ath9k_htc: Failed to initialize the device [ 402.918302][T25932] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(25) [ 402.921133][T25932] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 402.936277][ T6028] usb 7-1: ath9k_htc: USB layer deinitialized [ 402.945664][ T841] usb 7-1: USB disconnect, device number 51 [ 402.952007][T25932] vhci_hcd vhci_hcd.0: Device attached [ 402.963898][T25932] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.968274][T25932] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(29) [ 402.970544][T25932] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 402.973340][T25932] vhci_hcd vhci_hcd.0: Device attached [ 402.976656][T25932] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.988114][T25943] vhci_hcd: connection closed [ 402.988308][T25941] vhci_hcd: connection closed [ 402.988476][T25939] vhci_hcd: connection closed [ 402.988977][T25935] vhci_hcd: connection closed [ 402.989079][T25933] vhci_hcd: connection closed [ 402.990083][ T12] vhci_hcd: stop threads [ 402.991605][T25937] vhci_hcd: connection closed [ 402.999506][ T12] vhci_hcd: release socket [ 403.005431][ T12] vhci_hcd: disconnect device [ 403.008340][ T12] vhci_hcd: stop threads [ 403.009688][ T12] vhci_hcd: release socket [ 403.011226][ T12] vhci_hcd: disconnect device [ 403.012942][ T12] vhci_hcd: stop threads [ 403.014323][ T12] vhci_hcd: release socket [ 403.015940][ T12] vhci_hcd: disconnect device [ 403.017508][ T12] vhci_hcd: stop threads [ 403.018885][ T12] vhci_hcd: release socket [ 403.020295][ T12] vhci_hcd: disconnect device [ 403.022068][ T12] vhci_hcd: stop threads [ 403.023473][ T12] vhci_hcd: release socket [ 403.025043][ T12] vhci_hcd: disconnect device [ 403.026838][ T12] vhci_hcd: stop threads [ 403.028194][ T12] vhci_hcd: release socket [ 403.029611][ T12] vhci_hcd: disconnect device [ 403.101671][ T24] vhci_hcd: vhci_device speed not set [ 403.358354][T25959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2473'. [ 403.373947][T25959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2473'. [ 403.426822][ T40] kauditd_printk_skb: 205 callbacks suppressed [ 403.426839][ T40] audit: type=1326 audit(1764575681.167:11987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.2474" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd579 code=0x0 [ 403.756793][ T6029] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 403.915738][ T6029] usb 7-1: Using ep0 maxpacket: 16 [ 403.918780][ T6029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.922502][ T6029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.925751][ T6029] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 403.929791][ T6029] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 403.932776][ T6029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.937935][ T6029] usb 7-1: config 0 descriptor?? [ 404.291481][T25973] syzkaller0: entered promiscuous mode [ 404.293269][T25973] syzkaller0: entered allmulticast mode [ 404.340576][T25965] random: crng reseeded on system resumption [ 404.359746][ T6029] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 404.374505][ T6029] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 404.379558][ T6029] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 404.550959][T25983] ubi0: attaching mtd0 [ 404.554499][T25983] ubi0: scanning is finished [ 404.558137][ T10] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 404.559749][ T60] usb 7-1: USB disconnect, device number 52 [ 404.562863][ T10] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 404.562893][ T10] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 404.562918][ T10] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 404.608281][T25988] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2484'. [ 404.682530][T25983] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 404.685725][T25983] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 404.688704][T25983] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 404.693445][T25983] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 404.696221][T25983] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 404.698319][T25983] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 404.700817][T25983] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 404.703951][T25983] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 404.707097][T25990] ubi0: background thread "ubi_bgt0d" started, PID 25990 [ 404.707123][T25986] ubi0: detaching mtd0 [ 404.712012][T25986] ubi0: mtd0 is detached [ 404.769509][T25992] 9pnet_virtio: no channels available for device syz [ 405.158394][T25999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 405.239998][T26003] syzkaller0: entered promiscuous mode [ 405.241862][T26003] syzkaller0: entered allmulticast mode [ 405.665536][ T6012] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 405.723887][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 405.730217][T26021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2495'. [ 405.814832][ T6012] usb 9-1: device descriptor read/64, error -71 [ 406.033540][T15561] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 406.063443][ T6012] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 406.108377][ T5952] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 406.108425][ T5952] Bluetooth: hci2: adv larger than maximum supported [ 406.111699][ T5952] Bluetooth: hci2: Malformed LE Event: 0x0d [ 406.193765][T15561] usb 6-1: Using ep0 maxpacket: 16 [ 406.202576][ T6012] usb 9-1: device descriptor read/64, error -71 [ 406.202765][T15561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.209190][T15561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.213449][T15561] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 406.218272][T15561] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 406.221809][T15561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.230762][T15561] usb 6-1: config 0 descriptor?? [ 406.312765][ T6012] usb usb9-port1: attempt power cycle [ 406.544018][T26028] bridge0: entered allmulticast mode [ 406.546317][T26028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 406.549447][T26028] bridge_slave_1: left allmulticast mode [ 406.551696][T26028] bridge_slave_1: left promiscuous mode [ 406.553769][T26028] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.558484][T26028] bridge_slave_0: left allmulticast mode [ 406.560580][T26028] bridge_slave_0: left promiscuous mode [ 406.564388][T26028] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.577796][T26028] bridge0 (unregistering): left allmulticast mode [ 406.639082][T26024] random: crng reseeded on system resumption [ 406.649956][T15561] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 406.657948][T26032] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 406.660608][T26032] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 406.662392][ T6012] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 406.667782][T26032] vhci_hcd vhci_hcd.0: Device attached [ 406.671838][T15561] shield 0003:0955:7214.001D: Registered Thunderstrike controller [ 406.674150][T15561] shield 0003:0955:7214.001D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 406.680927][ T6012] usb 9-1: device descriptor read/8, error -71 [ 406.845688][ T9] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 406.919407][ T6012] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 406.939567][ T6012] usb 9-1: device descriptor read/8, error -71 [ 407.048914][ T6012] usb usb9-port1: unable to enumerate USB device [ 407.368355][T26033] vhci_hcd: connection reset by peer [ 407.371378][ T46] vhci_hcd: stop threads [ 407.372763][ T46] vhci_hcd: release socket [ 407.374386][ T46] vhci_hcd: disconnect device [ 407.374401][ T29] usb 38-1: device descriptor read/8, error -110 [ 407.578713][ T10] usb 6-1: USB disconnect, device number 32 [ 407.657253][ T9] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 407.660721][ T9] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 407.663953][ T9] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 407.704105][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'. [ 407.718286][T26048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2504'. [ 407.765626][ T29] usb usb38-port1: attempt power cycle [ 407.943280][T26057] ubi0: attaching mtd0 [ 407.946626][T26057] ubi0: scanning is finished [ 408.067198][T26057] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 408.070517][T26057] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 408.073918][T26057] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 408.076935][T26057] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 408.080043][T26057] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 408.083307][T26057] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 408.086733][T26057] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 408.091582][T26057] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 408.096105][T26063] ubi0: background thread "ubi_bgt0d" started, PID 26063 [ 408.099312][T26058] ubi: mtd0 is already attached to ubi0 [ 408.101654][T26061] ubi0: detaching mtd0 [ 408.105804][T26061] ubi0: mtd0 is detached [ 408.205865][T26065] ubi0: attaching mtd0 [ 408.209327][T26065] ubi0: scanning is finished [ 408.343286][ T29] usb usb38-port1: unable to enumerate USB device [ 408.348130][T26065] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 408.352340][T26065] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 408.372122][T26065] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 408.375236][T26065] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 408.378082][T26065] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 408.381102][T26065] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 408.384582][T26065] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 408.388509][T26065] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 408.392563][T26066] ubi0: detaching mtd0 [ 408.393143][T26068] ubi0: background thread "ubi_bgt0d" started, PID 26068 [ 408.410451][T26066] ubi0: mtd0 is detached [ 408.750161][ T29] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 408.786014][T26077] : renamed from bridge_slave_0 (while UP) [ 408.891290][ T841] libceph: connect (1)[c::]:6789 error -101 [ 408.896173][ T841] libceph: mon0 (1)[c::]:6789 connect error [ 408.919405][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 408.923630][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.928388][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.932717][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 408.939125][ T29] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 408.943915][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.951312][ T29] usb 7-1: config 0 descriptor?? [ 408.980232][T26082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'. [ 408.991938][T26082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2513'. [ 409.130037][T26085] : renamed from bridge_slave_0 [ 409.148745][ T841] libceph: connect (1)[c::]:6789 error -101 [ 409.151445][ T841] libceph: mon0 (1)[c::]:6789 connect error [ 409.188424][T26086] FAULT_INJECTION: forcing a failure. [ 409.188424][T26086] name failslab, interval 1, probability 0, space 0, times 0 [ 409.193835][T26086] CPU: 2 UID: 0 PID: 26086 Comm: syz.1.2514 Not tainted syzkaller #0 PREEMPT(full) [ 409.193865][T26086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 409.193876][T26086] Call Trace: [ 409.193884][T26086] [ 409.193892][T26086] dump_stack_lvl+0x16c/0x1f0 [ 409.193919][T26086] should_fail_ex+0x512/0x640 [ 409.193945][T26086] ? __kmalloc_cache_noprof+0x5f/0x780 [ 409.193964][T26086] should_failslab+0xc2/0x120 [ 409.193989][T26086] __kmalloc_cache_noprof+0x72/0x780 [ 409.194005][T26086] ? rcu_is_watching+0x12/0xc0 [ 409.194023][T26086] ? ceph_get_tree+0x18a/0x1ed0 [ 409.194044][T26086] ? ceph_get_tree+0x18a/0x1ed0 [ 409.194059][T26086] ceph_get_tree+0x18a/0x1ed0 [ 409.194076][T26086] ? security_capable+0x7e/0x260 [ 409.194102][T26086] vfs_get_tree+0x8e/0x340 [ 409.194129][T26086] vfs_cmd_create+0xd7/0x2a0 [ 409.194155][T26086] __do_sys_fsconfig+0x7b8/0xbe0 [ 409.194181][T26086] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 409.194211][T26086] ? rcu_is_watching+0x12/0xc0 [ 409.194235][T26086] __do_fast_syscall_32+0x7c/0x300 [ 409.194261][T26086] do_fast_syscall_32+0x32/0x80 [ 409.194284][T26086] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 409.194306][T26086] RIP: 0023:0xf7f34579 [ 409.194322][T26086] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 409.194339][T26086] RSP: 002b:00000000f540555c EFLAGS: 00000296 ORIG_RAX: 00000000000001af [ 409.194357][T26086] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000006 [ 409.194369][T26086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.194381][T26086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.194390][T26086] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 409.194401][T26086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.194427][T26086] [ 409.361060][T26072] random: crng reseeded on system resumption [ 409.391946][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 409.415993][ T29] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 409.423385][ T29] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 409.597685][ T6012] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 409.601942][ T6012] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 409.602062][ T6028] usb 7-1: USB disconnect, device number 53 [ 409.613799][T26090] bridge0: port 3(erspan0) entered blocking state [ 409.618590][T26090] bridge0: port 3(erspan0) entered disabled state [ 409.621597][T26090] erspan0: entered allmulticast mode [ 409.625617][T26090] erspan0: entered promiscuous mode [ 409.631347][T26090] bridge0: port 3(erspan0) entered blocking state [ 409.634145][T26090] bridge0: port 3(erspan0) entered forwarding state [ 409.650618][T26090] erspan0: left allmulticast mode [ 409.652733][T26090] erspan0: left promiscuous mode [ 409.654903][T26090] bridge0: port 3(erspan0) entered disabled state [ 409.661530][ T6012] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 409.666765][ T6012] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 409.674967][T26078] ceph: No mds server is up or the cluster is laggy [ 409.966843][ T841] libceph: connect (1)[c::]:6789 error -101 [ 409.969148][ T841] libceph: mon0 (1)[c::]:6789 connect error [ 410.356805][T26105] ubi0: attaching mtd0 [ 410.359881][T26105] ubi0: scanning is finished [ 410.562560][T26105] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 410.565057][T26105] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 410.567380][T26105] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 410.569590][T26105] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 410.572227][T26105] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 410.591368][T26105] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 410.594042][T26105] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 410.597180][T26105] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 410.600489][T26109] ubi0: background thread "ubi_bgt0d" started, PID 26109 [ 410.957615][T26118] ntfs3(nullb0): Primary boot signature is not NTFS. [ 410.961904][T26118] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 411.139530][T26121] syzkaller0: entered promiscuous mode [ 411.143808][T26121] syzkaller0: entered allmulticast mode [ 411.157043][T26119] binder: BINDER_SET_CONTEXT_MGR already set [ 411.159132][T26119] binder: 26116:26119 ioctl 4018620d 80000040 returned -16 [ 411.172680][T26125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'. [ 411.191441][T26125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2523'. [ 411.560037][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 411.708097][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 411.715242][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.720980][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.734858][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 411.751522][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 411.755148][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.768064][ T10] usb 5-1: config 0 descriptor?? [ 412.136506][T26142] netlink: 'syz.4.2530': attribute type 4 has an invalid length. [ 412.180847][T26135] random: crng reseeded on system resumption [ 412.192466][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input37 [ 412.221119][ T10] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 412.223657][ T10] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 412.318263][T26152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 412.338083][T26153] ubi: mtd0 is already attached to ubi0 [ 412.389508][ T6029] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 412.389566][ T24] usb 5-1: USB disconnect, device number 51 [ 412.393532][ T6029] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 412.399852][ T6029] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 412.403406][ T6029] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 412.915690][T26161] syzkaller0: entered promiscuous mode [ 412.917466][T26161] syzkaller0: entered allmulticast mode [ 413.059622][T26174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 413.062022][T26174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 413.066075][T26174] vhci_hcd vhci_hcd.0: Device attached [ 413.071132][T26174] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 413.073138][T26174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 413.076740][T26179] ubi: mtd0 is already attached to ubi0 [ 413.077595][T26174] vhci_hcd vhci_hcd.0: Device attached [ 413.085585][T26174] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 413.088150][T26174] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 413.091475][T26174] vhci_hcd vhci_hcd.0: Device attached [ 413.095593][T26174] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 413.098794][T26179] ubi0: detaching mtd0 [ 413.099870][T26174] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(23) [ 413.102698][T26174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 413.104795][T26179] ubi0: mtd0 is detached [ 413.105879][T26174] vhci_hcd vhci_hcd.0: Device attached [ 413.115053][T26174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(25) [ 413.117785][T26174] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 413.120992][T26174] vhci_hcd vhci_hcd.0: Device attached [ 413.124987][T26174] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 413.130215][T26174] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(29) [ 413.132986][T26174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 413.136390][T26174] vhci_hcd vhci_hcd.0: Device attached [ 413.140752][T26174] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 413.160431][T26187] vhci_hcd: connection closed [ 413.161472][T26183] vhci_hcd: connection closed [ 413.162846][T26185] vhci_hcd: connection closed [ 413.163656][T26177] vhci_hcd: connection closed [ 413.165423][T26181] vhci_hcd: connection closed [ 413.168403][T26175] vhci_hcd: connection closed [ 413.177813][ T1148] vhci_hcd: stop threads [ 413.184779][ T1148] vhci_hcd: release socket [ 413.187705][ T1148] vhci_hcd: disconnect device [ 413.191575][ T1148] vhci_hcd: stop threads [ 413.195020][ T1148] vhci_hcd: release socket [ 413.196676][ T1148] vhci_hcd: disconnect device [ 413.199394][ T1148] vhci_hcd: stop threads [ 413.202114][ T1148] vhci_hcd: release socket [ 413.206208][ T1148] vhci_hcd: disconnect device [ 413.209611][ T1148] vhci_hcd: stop threads [ 413.212713][ T1148] vhci_hcd: release socket [ 413.217063][ T1148] vhci_hcd: disconnect device [ 413.219068][ T1148] vhci_hcd: stop threads [ 413.220657][ T1148] vhci_hcd: release socket [ 413.223280][ T1148] vhci_hcd: disconnect device [ 413.227948][ T1148] vhci_hcd: stop threads [ 413.229613][ T1148] vhci_hcd: release socket [ 413.231385][ T1148] vhci_hcd: disconnect device [ 413.242635][ T24] vhci_hcd: vhci_device speed not set [ 413.730980][ T6029] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 413.809658][T26205] ubi0: attaching mtd0 [ 413.817627][T26205] ubi0: scanning is finished [ 413.912177][ T6029] usb 7-1: Using ep0 maxpacket: 16 [ 414.728514][ T6029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.733314][ T6029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.737523][ T6029] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 414.743527][ T6029] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 414.747464][ T6029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.752693][ T6029] usb 7-1: config 0 descriptor?? [ 414.755252][T26205] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 414.822822][T26218] ubi0: attaching mtd0 [ 414.826024][T26218] ubi0: scanning is finished [ 414.978085][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'. [ 415.078223][T26218] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 415.080604][T26218] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 415.082946][T26218] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 415.085072][T26218] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 415.087682][T26218] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 415.089831][T26218] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 415.092636][T26218] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3174437086 [ 415.095952][T26218] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 415.099888][T26235] ubi0: background thread "ubi_bgt0d" started, PID 26235 [ 415.161570][T26201] random: crng reseeded on system resumption [ 415.181359][ T6029] input: HID 0955:7214 Haptics as /devices/virtual/input/input38 [ 415.192247][ T6029] shield 0003:0955:7214.0020: Registered Thunderstrike controller [ 415.206540][ T6029] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 415.226893][T26230] netlink: 'syz.4.2552': attribute type 11 has an invalid length. [ 415.375273][ T9] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 415.376163][ T24] usb 7-1: USB disconnect, device number 54 [ 415.379819][ T9] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 415.387841][ T9] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 415.387923][ T24] ------------[ cut here ]------------ [ 415.392271][ T9] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 415.394002][ T24] workqueue: work disable count underflowed [ 415.394086][ T24] WARNING: CPU: 2 PID: 24 at kernel/workqueue.c:4355 enable_work+0x2f8/0x340 [ 415.402544][ T24] Modules linked in: [ 415.403389][T26242] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 415.404166][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 415.406869][T26242] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 415.410370][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.410381][ T24] Workqueue: usb_hub_wq hub_event [ 415.414546][T26242] vhci_hcd vhci_hcd.0: Device attached [ 415.416992][ T24] [ 415.416998][ T24] RIP: 0010:enable_work+0x2f8/0x340 [ 415.417013][ T24] Code: 89 ee e8 ab 95 38 00 45 84 ed 0f 85 29 fe ff ff e8 bd 9a 38 00 c6 05 b5 0d e7 0e 01 90 48 c7 c7 20 29 8c 8b e8 c9 1d f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 87 48 a0 00 e9 aa fe ff ff [ 415.417024][ T24] RSP: 0018:ffffc9000051f3b0 EFLAGS: 00010086 [ 415.417033][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adc48 [ 415.417040][ T24] RDX: ffff88801bf62480 RSI: ffffffff817adc55 RDI: 0000000000000001 [ 415.417047][ T24] RBP: ffff88802aa12738 R08: 0000000000000001 R09: 0000000000000000 [ 415.417053][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000a3e77 [ 415.417060][ T24] R13: 0000000000000000 R14: ffff88802aa12698 R15: ffff88802aa12730 [ 415.417067][ T24] FS: 0000000000000000(0000) GS:ffff888097a0d000(0000) knlGS:0000000000000000 [ 415.417089][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.448405][ T24] CR2: 000000002e51eff8 CR3: 00000000731fa000 CR4: 0000000000352ef0 [ 415.450919][ T24] Call Trace: [ 415.451979][ T24] [ 415.452929][ T24] ? __pfx_enable_work+0x10/0x10 [ 415.454529][ T24] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 415.456426][ T24] __cancel_work_sync+0xe7/0x130 [ 415.457969][ T24] thermal_zone_device_unregister+0x28e/0x4d0 [ 415.459858][ T24] ? __pfx_shield_remove+0x10/0x10 [ 415.461475][ T24] power_supply_unregister+0x10a/0x150 [ 415.463226][ T24] shield_remove+0x75/0x130 [ 415.464660][ T24] ? __pfx_shield_remove+0x10/0x10 [ 415.466256][ T24] hid_device_remove+0xd1/0x260 [ 415.467858][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 415.469551][ T24] device_remove+0xcb/0x170 [ 415.470979][ T24] device_release_driver_internal+0x44b/0x620 [ 415.472865][ T24] bus_remove_device+0x22f/0x420 [ 415.474418][ T24] device_del+0x396/0x9f0 [ 415.475817][ T24] ? __pfx_device_del+0x10/0x10 [ 415.477371][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 415.479013][ T24] hid_destroy_device+0x19c/0x240 [ 415.480634][ T24] usbhid_disconnect+0xa0/0xe0 [ 415.482138][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 415.483798][ T24] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 415.485575][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 415.487419][ T24] device_remove+0x125/0x170 [ 415.488918][ T24] device_release_driver_internal+0x44b/0x620 [ 415.490868][ T24] bus_remove_device+0x22f/0x420 [ 415.492452][ T24] device_del+0x396/0x9f0 [ 415.493864][ T24] ? __pfx_device_del+0x10/0x10 [ 415.495469][ T24] ? kobject_put+0x210/0x5a0 [ 415.496967][ T24] usb_disable_device+0x355/0x7d0 [ 415.498595][ T24] usb_disconnect+0x2e1/0x9c0 [ 415.500139][ T24] hub_event+0x1c81/0x4fe0 [ 415.501579][ T24] ? __lock_acquire+0xb8a/0x1c90 [ 415.503230][ T24] ? __pfx_hub_event+0x10/0x10 [ 415.504789][ T24] ? devm_arch_phys_ac_add_release+0x50/0x50 [ 415.506766][ T24] ? rcu_is_watching+0x12/0xc0 [ 415.508331][ T24] process_one_work+0x9cf/0x1b70 [ 415.509946][ T24] ? __pfx_process_one_work+0x10/0x10 [ 415.511703][ T24] ? assign_work+0x1a0/0x250 [ 415.513215][ T24] worker_thread+0x6c8/0xf10 [ 415.514731][ T24] ? __pfx_worker_thread+0x10/0x10 [ 415.516352][ T24] kthread+0x3c5/0x780 [ 415.517676][ T24] ? __pfx_kthread+0x10/0x10 [ 415.519203][ T24] ? rcu_is_watching+0x12/0xc0 [ 415.520751][ T24] ? __pfx_kthread+0x10/0x10 [ 415.522237][ T24] ret_from_fork+0x675/0x7d0 [ 415.523757][ T24] ? __pfx_kthread+0x10/0x10 [ 415.525274][ T24] ret_from_fork_asm+0x1a/0x30 [ 415.526745][ T24] [ 415.527691][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 415.530010][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 415.532890][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.536168][ T24] Workqueue: usb_hub_wq hub_event [ 415.537749][ T24] Call Trace: [ 415.538845][ T24] [ 415.539790][ T24] dump_stack_lvl+0x3d/0x1f0 [ 415.541226][ T24] vpanic+0x640/0x6f0 [ 415.542464][ T24] ? enable_work+0x2f8/0x340 [ 415.543969][ T24] panic+0xca/0xd0 [ 415.545172][ T24] ? __pfx_panic+0x10/0x10 [ 415.546607][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 415.548186][ T24] check_panic_on_warn+0xab/0xb0 [ 415.549719][ T24] __warn+0xf6/0x3c0 [ 415.550973][ T24] ? __pfx_vprintk_emit+0x10/0x10 [ 415.552586][ T24] ? enable_work+0x2f8/0x340 [ 415.554026][ T24] report_bug+0x3c3/0x580 [ 415.555393][ T24] ? enable_work+0x2f8/0x340 [ 415.556852][ T24] handle_bug+0x184/0x210 [ 415.558254][ T24] exc_invalid_op+0x17/0x50 [ 415.559706][ T24] asm_exc_invalid_op+0x1a/0x20 [ 415.561216][ T24] RIP: 0010:enable_work+0x2f8/0x340 [ 415.562844][ T24] Code: 89 ee e8 ab 95 38 00 45 84 ed 0f 85 29 fe ff ff e8 bd 9a 38 00 c6 05 b5 0d e7 0e 01 90 48 c7 c7 20 29 8c 8b e8 c9 1d f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 87 48 a0 00 e9 aa fe ff ff [ 415.568755][ T24] RSP: 0018:ffffc9000051f3b0 EFLAGS: 00010086 [ 415.570665][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adc48 [ 415.573112][ T24] RDX: ffff88801bf62480 RSI: ffffffff817adc55 RDI: 0000000000000001 [ 415.575592][ T24] RBP: ffff88802aa12738 R08: 0000000000000001 R09: 0000000000000000 [ 415.578093][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000a3e77 [ 415.580553][ T24] R13: 0000000000000000 R14: ffff88802aa12698 R15: ffff88802aa12730 [ 415.583030][ T24] ? __warn_printk+0x198/0x350 [ 415.584590][ T24] ? __warn_printk+0x1a5/0x350 [ 415.586125][ T24] ? __pfx_enable_work+0x10/0x10 [ 415.587753][ T24] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 415.589618][ T24] __cancel_work_sync+0xe7/0x130 [ 415.591214][ T24] thermal_zone_device_unregister+0x28e/0x4d0 [ 415.593186][ T24] ? __pfx_shield_remove+0x10/0x10 [ 415.594859][ T24] power_supply_unregister+0x10a/0x150 [ 415.596600][ T24] shield_remove+0x75/0x130 [ 415.598060][ T24] ? __pfx_shield_remove+0x10/0x10 [ 415.599706][ T24] hid_device_remove+0xd1/0x260 [ 415.601270][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 415.603048][ T24] device_remove+0xcb/0x170 [ 415.604522][ T24] device_release_driver_internal+0x44b/0x620 [ 415.606475][ T24] bus_remove_device+0x22f/0x420 [ 415.608121][ T24] device_del+0x396/0x9f0 [ 415.609498][ T24] ? __pfx_device_del+0x10/0x10 [ 415.611112][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 415.612723][ T24] hid_destroy_device+0x19c/0x240 [ 415.614328][ T24] usbhid_disconnect+0xa0/0xe0 [ 415.615879][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 415.617558][ T24] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 415.619336][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 415.621128][ T24] device_remove+0x125/0x170 [ 415.622614][ T24] device_release_driver_internal+0x44b/0x620 [ 415.624567][ T24] bus_remove_device+0x22f/0x420 [ 415.626124][ T24] device_del+0x396/0x9f0 [ 415.627526][ T24] ? __pfx_device_del+0x10/0x10 [ 415.629096][ T24] ? kobject_put+0x210/0x5a0 [ 415.630620][ T24] usb_disable_device+0x355/0x7d0 [ 415.632233][ T24] usb_disconnect+0x2e1/0x9c0 [ 415.633752][ T24] hub_event+0x1c81/0x4fe0 [ 415.635159][ T24] ? __lock_acquire+0xb8a/0x1c90 [ 415.636736][ T24] ? __pfx_hub_event+0x10/0x10 [ 415.638256][ T24] ? devm_arch_phys_ac_add_release+0x50/0x50 [ 415.640181][ T24] ? rcu_is_watching+0x12/0xc0 [ 415.641703][ T24] process_one_work+0x9cf/0x1b70 [ 415.643302][ T24] ? __pfx_process_one_work+0x10/0x10 [ 415.645038][ T24] ? assign_work+0x1a0/0x250 [ 415.646556][ T24] worker_thread+0x6c8/0xf10 [ 415.648042][ T24] ? __pfx_worker_thread+0x10/0x10 [ 415.649663][ T24] kthread+0x3c5/0x780 [ 415.650973][ T24] ? __pfx_kthread+0x10/0x10 [ 415.652424][ T24] ? rcu_is_watching+0x12/0xc0 [ 415.653947][ T24] ? __pfx_kthread+0x10/0x10 [ 415.655456][ T24] ret_from_fork+0x675/0x7d0 [ 415.656995][ T24] ? __pfx_kthread+0x10/0x10 [ 415.658491][ T24] ret_from_fork_asm+0x1a/0x30 [ 415.660040][ T24] [ 415.661687][ T24] Kernel Offset: disabled [ 415.663075][ T24] Rebooting in 86400 seconds..