last executing test programs: 5m54.527433673s ago: executing program 2 (id=1358): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000080)={0x40, 0x1, 0x8, {0x8, 0xc, "3848a9a95040"}}, &(0x7f0000000640)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "639c34e91f16a131a0428773a7631a420428775091d1037ea695d1ebb3434c4353ce61a795df5190d7984c75bc3dee79bb81e33b40d684239408afdf845a4a6946d92b490a01cdc984a3a5c2b11084cbd05df3b9c5c4e210d21a37f2c93e48362480b27996b747b9a9fdb2cfeae9946bdef5774fa1e1fd4b63b855eafb6ed296ce761bf49b1c3f3fe134e2bbfe744f86988e1e027ac675fdebbbb6d096da95e5573145c8a55f2742d2587c16aba37e180c60ec7ad5dd191d3bc359bc13e7d6809abdfe270c82784477ab796dda5acf"}}, &(0x7f0000000740)={0x0, 0xf, 0x8c, {0x5, 0xf, 0x8c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x6, 0x9}, @generic={0x5f, 0x10, 0x4, "fa258187114d43394d23457e0c3734d4d71be4ec9fd351f936207a2f858becd0e015f79ae0cebe9840b5aeceb3ee95c006dbc33591a688b9b5209fccede6c00ba89ce4088a0158af2f6a00ffccc85717695abee6a39f5ec9b573e28b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0x0, 0x40}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "81adb8b8f6b1eeaff22de8af97f28e9e"}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x3, 0x6, "8f4c6438", "0917f6d1"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x3, 0xfb, 0xf, 0x8, 0x7ff}}}, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x0, 0xe, 0x2c, "ad98f437d3fded5a9f852bfd1622200b6dba3b70333dde2f61310b2f12bc3b82d88ac5169b730b768e050c55"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x800, 0x2, [0xf000]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000ac0)={0x40, 0x9, 0x1}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "ae1c"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x19, 0x2, ';)'}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0xe}}) 5m51.498871156s ago: executing program 2 (id=1367): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="40c3dc639400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m49.652031846s ago: executing program 2 (id=1372): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000, 0x1}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = fsopen(&(0x7f00000005c0)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000600)='#\x00', &(0x7f0000000640)='./file0\x00', 0xffffffffffffff9c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=0x0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) socket$kcm(0x10, 0x2, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) eventfd2(0x0, 0x800) 5m49.493919301s ago: executing program 2 (id=1373): r0 = syz_clone(0x6000000, &(0x7f0000002600), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0xa) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(r0, 0x0, 0x0) 5m49.248414264s ago: executing program 2 (id=1376): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffff7ff9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x2, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = fsopen(&(0x7f0000000200)='pstore\x00', 0x1) fcntl$dupfd(r1, 0x406, r1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) dup2(r3, r3) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000003c0)={0x2020}, 0x2020) write$dsp(r2, &(0x7f0000000380)="8f02b1145e6308d98e553f07835f9de2b8389279a5becfcec34a3d806185be01242abe00d48cc72f5609a070748b29eb2f75f44e93bda8a5efda9fdb8d81de5c", 0x40) syz_open_dev$media(&(0x7f0000000080), 0xffffffffffffffc0, 0x0) 5m48.830094117s ago: executing program 2 (id=1377): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) ioprio_get$pid(0x2, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) getpeername(r0, &(0x7f0000000080)=@ethernet={0x0, @multicast}, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040054) 5m48.615480055s ago: executing program 32 (id=1377): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) ioprio_get$pid(0x2, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) getpeername(r0, &(0x7f0000000080)=@ethernet={0x0, @multicast}, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040054) 4m39.192071096s ago: executing program 0 (id=1758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000089c0)={0x0, 0x0, &(0x7f0000008980)={&(0x7f0000008900)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x49}, 0x24008040) 4m39.16596034s ago: executing program 0 (id=1759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x20040054) 4m39.081552764s ago: executing program 0 (id=1761): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x301) fsopen(&(0x7f00000006c0)='ocfs2_dlmfs\x00', 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m38.988844148s ago: executing program 0 (id=1762): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r6, &(0x7f0000009200)=[{{&(0x7f00000004c0)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x20004040) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') lseek(r7, 0x38, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r9, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x0) bind$rxrpc(r8, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) read$nci(r0, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) recvmsg(r10, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2000) 4m37.819331368s ago: executing program 0 (id=1771): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x301) fsopen(&(0x7f00000006c0)='ocfs2_dlmfs\x00', 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m36.964060164s ago: executing program 0 (id=1777): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="40c3dc639400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m36.455736503s ago: executing program 33 (id=1777): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="40c3dc639400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 40.223377339s ago: executing program 3 (id=3578): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="4015a2000000941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da45a9a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r1, 0x0, &(0x7f0000ef8000/0x2000)=nil, 0x2000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x20c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb1d9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x124, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0xfffffffffffffe3e, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x234}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x5, r1}) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000740)={0x40, 0x0, 0x10, "f8f2180a88df34f52522e992f5471e10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x40) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000180)=0xfffffffd, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, &(0x7f00000005c0)={0xc, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r5, {0x101}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r8, 0x0, 0xe03b, 0x9}) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x951b, 0xfffffffd, 0x3, 0x7, 0xcf, 0x7, 0x4}, 0x1c) recvmmsg$unix(r5, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000000080)="196403aa46eaec606896e0b90bbc649f9e12782ad7c7c5fe23a2e546b78280bd", 0x20}) syz_usb_ep_read(r4, 0x4, 0xed, &(0x7f0000000400)=""/237) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000002640)={&(0x7f0000002580)=[{0xfffd, 0x1c10, 0x1000, &(0x7f00000011c0)="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"}, {0x6, 0x6001, 0x71, &(0x7f00000021c0)="504b79a9d5bfe6623799c073f6ed0b2eae735df7fc2a8b0f02db25e670a4b63ab40783ef753cdb567fefd7ecedb057494b8451e2e63e376a24dfce13811eba65295010a7d11ab429d4b38aca667be9874f0548bd479915ea1df3aa392fbbdfc80feafea2a4a6aa16e9b109ec374b0db5e0"}, {0xbf1, 0x8800, 0x0, &(0x7f0000002240)}, {0x3ff, 0x400, 0x99, &(0x7f0000002280)="c17679d1653559cf2a030f607c1dbf0028d08e65032595ae68006eb7fbd22ebf3acf447a284736caa79f1412e142603677db4336434599865f2719720d2ff89296678de02a5f16ff6e05748ba611c707b720d7c742431da7e697e7ddf84c7f62beca5c01cf7423be989df3653a1289167b8b685ab9cedcfc740a3abb7a440ca339c63c7bc333b55f8184cb099e15a69644d2b2be3a8cad4b61"}, {0x81, 0x0, 0x26, &(0x7f0000002340)="7e7319bed3daae82753f631e116c1082f900df4005e05bf144b48101ddb9f5dc676d1d3ba512"}, {0x6, 0x0, 0xfb, &(0x7f0000002380)="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"}, {0x0, 0xc001, 0xa, &(0x7f0000002480)="e55b03499615e358f119"}, {0x9, 0x1410, 0x100, &(0x7f0000000780)="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"}, {0x3, 0xac00, 0x2c, &(0x7f0000002540)="fc1d3e2b6dbff203768b301a0e4f1b29e594d63319e8eb79c89b9c9d5cbdb9d585d6b4a9700cc6e211279d03"}], 0x9}) 37.068096606s ago: executing program 3 (id=3594): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=',access=', @ANYRESDEC, @ANYBLOB]) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) syz_clone(0x21002100, &(0x7f0000000100)="2d81f88bf6d8420bb9455c23d2c62f4800254742ee7d9539be430d30bfcfa34d5c151b7f7fe495ad24be124ada781749b38f91b3b75ec2dec3af40705bcd4521cb4e9f0f779b51ec055e1d5ced64ca48d82a2bf6ca0f656fab540da44c93184fcfca9d4ab05e8521833fdb7d706dab5e2965d8992b3cb184ca9cdbcde8e0ea", 0x7f, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="afb6190babd1028cdb572408b121bc0c98887498757da75d77867a40f761e8ba5d04afe024f583d1d8865864ee48165f3cfcf24cbf6fb304c0352d72c8c439b6e99bd6ff1bac28396c5cb451e95743506af464e57cf546704aa9d77927e7edc71b228bd683a7f34bbccc03078993cd64b7980a0cf784") write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0xed, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x0, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623e, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x5ab2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x21, 0x3, 0x8000, 0xfffffffd, 0x3, 0xfffffffe, 0xf9dc, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xe, 0x2, 0xfffffffe, 0x981, 0x4, 0x0, 0x402, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x6, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x1000, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xd1c, 0x7, 0x1f, 0x404, 0x4, 0x6, 0xc, 0x7, 0x9, 0xe8b, 0x6, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0x1ea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413fd, 0x2, 0x20006, 0x8a5, 0x86, 0x1, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffefff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7f]}, 0x45c) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507"], 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x30, @string={0x30, 0x3, "784089a59459972cf9dd58f41169cbc4d31fe066053744022133771a4d06c48591eca81ddcc52faaa12abfd54563"}}}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x8, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0xfffffffe, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x8000, 0x80000000, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x51, 0x4, 0x0, 0x0, 0x925, 0x0, 0x80000000, 0x2, 0x5, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000400)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 34.897342165s ago: executing program 3 (id=3606): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x2, 0xc8, 0xe, 0x2}}}, 0x9) ppoll(&(0x7f0000000100)=[{r1, 0x10014}], 0x1, 0x0, 0x0, 0x0) 32.073598678s ago: executing program 3 (id=3621): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) ppoll(&(0x7f00000001c0)=[{r1, 0x4302}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x0, 0x0, 0xf, 'X\x00\b\x00'}}) 31.059868044s ago: executing program 3 (id=3625): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ptrace$getenv(0x4201, 0x0, 0x4, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xe, 0x8, 0x83, 0x2, 0x3, 0x6, 0xa9, 0x4d, 0x1, 0x5f, 0x9, 0x5, 0xffff2d37, 0x7, 0x9, 0x5, 0x0, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x3, 0x26, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20002, 0xd678, 0x4c74, 0xfffd, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x5, 0x117, 0x1, 0x3, 0x208, 0x0, 0x18e, 0x6, 0x6, 0x9, 0x7, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x8, 0x8000012f, 0x7, 0x7, 0xf7fffff3, 0x129432f6, 0xc8, 0xf1, 0x8010, 0x2bd, 0x6c7, 0xa, 0xfffffffc, 0xfffff801, 0x0, 0x0, 0x5, 0x2f, 0x3, 0x8000, 0x2, 0xea6, 0x0, 0x7, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x382, 0x4, 0x7, 0xcd0, 0x9, 0xfffff62f, 0x5, 0xa, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x29, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x3, 0xffff], [0x4, 0x40a, 0x4, 0x7, 0xfffffffd, 0x100, 0x4, 0x5a8, 0x2000007, 0x8002, 0x0, 0x9, 0xb, 0x1ff, 0x401, 0x5, 0x0, 0x1ef, 0x5, 0x8008, 0x86, 0x13, 0x303c, 0xfffffffa, 0xb, 0x800, 0x0, 0x2, 0x5, 0x20000008, 0x9, 0x6d01, 0x6, 0x38, 0x800003, 0x203, 0x80, 0x3, 0x4, 0x2950bfaf, 0x24, 0xa2, 0x4, 0xa9, 0x5, 0x200, 0x3, 0xbf, 0x0, 0x7, 0x1, 0x12b, 0x1, 0xc921, 0x7f, 0xffffffff, 0x0, 0x200, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x1, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x2, 0x6, 0x8000, 0x9, 0xa27, 0x4, 0x6, 0x57, 0x5, 0x3, 0x6, 0x4, 0x4, 0x7fff, 0xffff, 0xa620, 0x9, 0x5, 0x1, 0xfffffff9, 0x14c, 0x60a7, 0x80000006, 0x7, 0x1, 0x8, 0x5, 0x5, 0x6, 0x2, 0x0, 0xffff, 0x8, 0x7e, 0x2, 0x9622, 0x7, 0x0, 0x6, 0x5, 0x8, 0x2, 0x5, 0x0, 0xdc15, 0xa1f, 0xf40, 0x7, 0x530e, 0x106c1b, 0xfffffffc, 0x4, 0x400005, 0x803, 0xd3, 0xffffffff, 0xa, 0xfff]}, 0x45c) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001080)={0x0, 0x800, 0x4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff08000940000000390900020073797a31000000000500010007000000140008"], 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000c80)={r5, 0x5, 0xdae4, 0x1}) write$tcp_mem(r4, &(0x7f00000000c0)={0x3, 0x2d, 0x20800006d2, 0x3a, 0x1, 0x2c}, 0x48) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1ddccc7a18382723e91ec19d655d7a4b8fca1cd07b8e4ba2b2bf757b3b310181c0cf016aa60426ef08fa78c08b6f7cb54c78b80a24c0913ad4a622efc6824f4b7056327c341ff6e9f439dc05d9c12cd22462a47c494c7be7", 0x58}, {&(0x7f0000000240)="5f947504a6917c337c4ef2732f8752aeb5138c45096c428c41679708cdf29efd65e747c63cfaafa8dbea3a7a069c986d20c3045c8d2c9ee983e5cc874a098c49fa", 0x41}], 0x2) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x400801, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0xfffffffe, 'wrr\x00', 0x2a, 0x3, 0x64}, 0x2c) 30.250447451s ago: executing program 3 (id=3630): r0 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b}, @addba_resp}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x7b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x7cc06cc1cfb9173) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) close(r7) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000080)={0x40000009}) prctl$PR_SCHED_CORE(0x45, 0x8000000000000, 0x0, 0x1, 0x0) 15.183421781s ago: executing program 34 (id=3630): r0 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b}, @addba_resp}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x7b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x7cc06cc1cfb9173) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) close(r7) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000080)={0x40000009}) prctl$PR_SCHED_CORE(0x45, 0x8000000000000, 0x0, 0x1, 0x0) 6.115908755s ago: executing program 1 (id=3800): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r1, &(0x7f00000001c0)=""/165, 0xa5, 0x6259b009) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'erspan0\x00', @random="a6c0613d00"}) 6.077048624s ago: executing program 1 (id=3802): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r2 = dup(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x41) sendmmsg$alg(r0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042086dd"], 0xfdef) 5.203494392s ago: executing program 5 (id=3811): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}]}], 0x1, 0x8010) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x5, 0x1, 0x1, {0xa, @pix={0x4, 0x5, 0x34565348, 0x0, 0x1, 0x3, 0x9, 0x1, 0x1, 0x3, 0x0, 0x1}}, 0x1}) 4.88791593s ago: executing program 5 (id=3813): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe", 0x1a}], 0x1}, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x260, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f00000010c0)={0x1, @inquiry={{0x401, 0x5}, {"fd8671", 0x6, 0x7f}}}, 0x9) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001100)="c8e093d2fb55a7d99e14f468f8463750ab861430e7d887782542b9010fa805550d2f7df64ec30300000000000098577437e000ef2f5f6432a695948ee617d7a9355295e5bea6273a4d85f965d7864b448b3f585a68c3a83b83067f1d5c69589df75333521227c56a2513cc06975e4829e9f517790349225ddeb27afc19b49483919ffff023a77d8951e352e87d068ca446985dbe04d82854482f2aab4235b733693bbe23687fa7a82db115e3ae433b2f73d93482eb1c83465b284546322a63d0d3a2f7b52a382bc89908c2850000000000000000", 0xd4) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000001040)=""/76, 0x4c}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, &(0x7f0000000040)={{}, "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"}) 4.713750347s ago: executing program 6 (id=3814): mount$bind(0x0, 0x0, 0x0, 0x891018, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0xe) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0x10b}, {&(0x7f00000001c0)="145a977ce90bcec36cee68138cdb7c53108f9e6776eb08ce8c386cebff07feba0afdcd6e04c99847b690d5148d8313f48a14b0418173a7b6a901d1903cd5d6eb2636c718aa1204b697a3dc3e564ef86e51483d2558eebe4940511e89cd585dcde0eaef40a867a51728ec9a6d403c1173b8f31dc200f444bdbdb4e9fdb458dfc97ff52c74c3c2a26081cdf2f0a2a18679c88023eb71", 0x95}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000440)={0xa0, 0xa0, 0x20, 0x320, 0x5c81, 0xff, 0x2, 0x3, {0x1, 0x1000}, {0x8000, 0x3, 0x1}, {0x31a1, 0x5, 0x1}, {0x101, 0x4, 0x1}, 0x1, 0x10, 0x1, 0x3, 0x0, 0xffffff7b, 0xb, 0x0, 0x81, 0xa, 0x2, 0x9, 0x4, 0x4, 0x1, 0x3}) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x0, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x3, 0x7}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.16850581s ago: executing program 5 (id=3816): r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000300)={0x5, 0xf, 0x9, 0x1}, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x932, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x8800) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x766632190cc87eea, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.797559113s ago: executing program 6 (id=3818): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000040)={0xaeb5, 0x9, 0x6, 0x1, 0x35, 0x0, 0x8, 0xb676}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000280)={{0xd8, 0xd4}, 'port0\x00', 0x0, 0x41800, 0x4, 0x8, 0x0, 0x7, 0xe, 0x0, 0x0, 0x6}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c8694f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1}, 0x8}], 0x1, 0x122, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) 3.726553895s ago: executing program 5 (id=3819): r0 = add_key$fscrypt_provisioning(&(0x7f00000029c0), &(0x7f0000002a00)={'syz', 0x0}, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48, 0xfffffffffffffffb) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') setuid(0xee01) keyctl$get_security(0x11, r0, &(0x7f0000000040)=""/124, 0x7c) 3.451481088s ago: executing program 4 (id=3821): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0xfff, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000100001a4745c345971df160003000000060001"], 0x1c}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000004c0)={0x24000001, 0x4, 0xf2a0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r3, &(0x7f00000003c0), 0x100000000000022d) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) 3.449906432s ago: executing program 5 (id=3822): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0x8) clock_adjtime(0x0, &(0x7f0000000900)={0x2925, 0x0, 0x0, 0x8da, 0x40, 0x0, 0x0, 0xffffffffffffff80, 0x0, 0x1, 0x0, 0x40000000, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x200000004, 0xffffffffffffffff, 0x2000800, 0x20000000000, 0x0, 0x58, 0xb, 0xbf1e}) 3.37999147s ago: executing program 6 (id=3823): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000800)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000080)={0x20, 0xfffffffffffffffe, 0x0, {0xfffffffb, 0x0, 0x1, 0x5}}, 0x20) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.311094683s ago: executing program 5 (id=3824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f00008e7000/0x3000)=nil, 0x3000, 0x100000d, 0x31, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '%:[(!&'}, {0x20, '-\\'}, {0x20, '-@#'}, {0x20, 'cpuacct.usage_percpu\x00'}], 0xa, "00f45328f46f6cb7d09bbb7e9bcb5211a1db82738004f20aa7b9a32631b3244d1f43a47623370faf28c74e8ccf80fcdb1dab4e953c4946bba1319cd9616d81844d95c10d8ba66d49031c26fb89ebf8628f7f994919322a5426d728107ebf369a5acbe890ab09ccdd351cd0e1ac8bd9aa7880a2fd6ccebbb126f3600d9e93bb0d8da1a430da2fa0f521e2de"}, 0xba) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2f4, r3, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8a7f180c92767f24ee3be810bc427957"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3ba75c43004d945368e1fac337132c28"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f31547db5a9065917c65372a0196d452"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4a5e394d5e92b5b3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e456e1ae29abe9ffcaa9f0809bf035b4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="465ea93538607126034245e47e4b7c3b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="193c907ed47645e7abc860f5e88c1a34c502d3db16334bcd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0d67c66c788603ada449ed9442540fc9"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d8b27f9ef373ced1f55e988488dc092aa93d7aaf3a545d89780b83b3eb32e0af"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7f3eae7c5f0a8db0b1e080c2c1d112ecb22b8e84dbcb0112"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6e3989ac0766020ad00fc5d6d2245354"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e554e82803cb0b81"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bc90b34f9ba22196543bf6f6714a712d4947785578913177"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x41c8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3d60530f6cdb59d78e001a740fb466632a339a7228fad893f2c7a6e4fb068f38"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6cbc770147e7701acd2d7a32c5e560de352f14f84707ff88"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "856d653cc51c16ae"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5be156fb1308765344db68cfd5117c6d0837421e0eb61a71"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1c809b31e9b431208b45e69b117d7032"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9ec422a5cd02fa33c3c1154c33dbdb71b5a1fdfe2c1e7ada"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b82c30594ae82ef5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4363a12c5678d2669decfcb50a4341292e2d635cfcac6154"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5ee09af90c903201"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2cb77bb52bbdf2e4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="98d29d2a90ade5e436f5c2beeada8324"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4b23b1d0148dc875"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="190b4dc96b687a336f1b6b027d68544d5e31f62d9b9ca6a1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a16ba2b027afb9d5e52bf5cb59c8c289"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d2d570da4e886d2de525d948e56ce42b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="82d72da3713d704fa09164547d3855e8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e9c02aebd6f6daac"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4800}, 0x20008011) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2f4, r3, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8a7f180c92767f24ee3be810bc427957"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3ba75c43004d945368e1fac337132c28"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f31547db5a9065917c65372a0196d452"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4a5e394d5e92b5b3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e456e1ae29abe9ffcaa9f0809bf035b4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="465ea93538607126034245e47e4b7c3b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="193c907ed47645e7abc860f5e88c1a34c502d3db16334bcd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0d67c66c788603ada449ed9442540fc9"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d8b27f9ef373ced1f55e988488dc092aa93d7aaf3a545d89780b83b3eb32e0af"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7f3eae7c5f0a8db0b1e080c2c1d112ecb22b8e84dbcb0112"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6e3989ac0766020ad00fc5d6d2245354"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e554e82803cb0b81"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bc90b34f9ba22196543bf6f6714a712d4947785578913177"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x41c8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3d60530f6cdb59d78e001a740fb466632a339a7228fad893f2c7a6e4fb068f38"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6cbc770147e7701acd2d7a32c5e560de352f14f84707ff88"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "856d653cc51c16ae"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5be156fb1308765344db68cfd5117c6d0837421e0eb61a71"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1c809b31e9b431208b45e69b117d7032"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9ec422a5cd02fa33c3c1154c33dbdb71b5a1fdfe2c1e7ada"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b82c30594ae82ef5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4363a12c5678d2669decfcb50a4341292e2d635cfcac6154"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5ee09af90c903201"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2cb77bb52bbdf2e4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="98d29d2a90ade5e436f5c2beeada8324"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4b23b1d0148dc875"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="190b4dc96b687a336f1b6b027d68544d5e31f62d9b9ca6a1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a16ba2b027afb9d5e52bf5cb59c8c289"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d2d570da4e886d2de525d948e56ce42b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="82d72da3713d704fa09164547d3855e8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e9c02aebd6f6daac"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4800}, 0x20008011) fcntl$setstatus(r2, 0x4, 0x460c0) (async) fcntl$setstatus(r2, 0x4, 0x460c0) socket$netlink(0x10, 0x3, 0x15) (async) r6 = socket$netlink(0x10, 0x3, 0x15) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x6a002, 0x0) (async) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x6a002, 0x0) write$vga_arbiter(r8, &(0x7f0000000080)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r8, &(0x7f0000001700)=@unlock_all, 0xb) (async) write$vga_arbiter(r8, &(0x7f0000001700)=@unlock_all, 0xb) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"/354], 0x14}, 0x1, 0x0, 0x0, 0x4000015}, 0x810) 3.18422273s ago: executing program 1 (id=3825): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xfffffffd, "5660359c3245d1c42317af00000000000000000000c12f000200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000340)={&(0x7f0000000280)=[{0x1, 0x0, 0x0, {0xff, 0x7fffffff, 0x3}}, {0x2, 0x1, 0x0, {0xffff, 0x4}}, {0x9, 0x0, 0x0, {0x9, 0x5}}, {0xff, 0x2, 0x0, {0x0, 0x3, 0x1}}, {0x5, 0x0, 0x0, {0x100000000, 0x5, 0x1}}, {0x1000, 0x2, 0x0, {0x6, 0x8000, 0x2}}], 0x6, 0x20, 0xff80, 0x226f}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"b4dc7ef5e84cf83ea6dc8490d96da61de5bfcd2d119905f8ccbc8cb85ba2e647", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x8b, 0x0, 0x0}) 2.964209713s ago: executing program 1 (id=3826): mount$bind(0x0, 0x0, 0x0, 0x891018, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0xe) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0x10b}, {&(0x7f00000001c0)="145a977ce90bcec36cee68138cdb7c53108f9e6776eb08ce8c386cebff07feba0afdcd6e04c99847b690d5148d8313f48a14b0418173a7b6a901d1903cd5d6eb2636c718aa1204b697a3dc3e564ef86e51483d2558eebe4940511e89cd585dcde0eaef40a867a51728ec9a6d403c1173b8f31dc200f444bdbdb4e9fdb458dfc97ff52c74c3c2a26081cdf2f0a2a18679c88023eb71", 0x95}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000440)={0xa0, 0xa0, 0x20, 0x320, 0x5c81, 0xff, 0x2, 0x3, {0x1, 0x1000}, {0x8000, 0x3, 0x1}, {0x31a1, 0x5, 0x1}, {0x101, 0x4, 0x1}, 0x1, 0x10, 0x1, 0x3, 0x0, 0xffffff7b, 0xb, 0x0, 0x81, 0xa, 0x2, 0x9, 0x4, 0x4, 0x1, 0x3}) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x0, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x3, 0x7}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.8743292s ago: executing program 4 (id=3827): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='z', 0x1}], 0x1}}], 0x2, 0x4000000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x8002, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r6, 0xee00) r7 = getegid() r8 = getgid() setgroups(0x6, &(0x7f0000000080)=[r3, 0xffffffffffffffff, r4, r6, r7, r8]) 2.751737587s ago: executing program 4 (id=3828): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x27f}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f", 0x16e}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001cc0)="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", 0x26c}], 0x1}}], 0x1, 0x60c5895) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.669354391s ago: executing program 4 (id=3829): ioctl$FE_READ_UNCORRECTED_BLOCKS(0xffffffffffffffff, 0x80046f49, &(0x7f0000000040)) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x1009b}) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb) 2.374782288s ago: executing program 4 (id=3830): r0 = add_key$fscrypt_provisioning(&(0x7f00000029c0), &(0x7f0000002a00)={'syz', 0x0}, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48, 0xfffffffffffffffb) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setuid(0xee01) keyctl$get_security(0x11, r0, &(0x7f0000000040)=""/124, 0x7c) 2.243150012s ago: executing program 4 (id=3831): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200fffe500004802800018007000100637400001c000280080001400000000208000240000000160500030000000000240001800b0001007470726f7879000014000280080002400000000e080001"], 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e00030000983a0000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.087030955s ago: executing program 1 (id=3832): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x442, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000009c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x941, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0xc1b4cbc712841b13, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x8000) 1.811951373s ago: executing program 1 (id=3833): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000280)={0x1, 0x0, [{0x10a}]}) 1.184230922s ago: executing program 6 (id=3834): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xfffffffd, "5660359c3245d1c42317af00000000000000000000c12f000200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000340)={&(0x7f0000000280)=[{0x1, 0x0, 0x0, {0xff, 0x7fffffff, 0x3}}, {0x2, 0x1, 0x0, {0xffff, 0x4}}, {0x9, 0x0, 0x0, {0x9, 0x5}}, {0xff, 0x2, 0x0, {0x0, 0x3, 0x1}}, {0x5, 0x0, 0x0, {0x100000000, 0x5, 0x1}}, {0x1000, 0x2, 0x0, {0x6, 0x8000, 0x2}}], 0x6, 0x20, 0xff80, 0x226f}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"b4dc7ef5e84cf83ea6dc8490d96da61de5bfcd2d119905f8ccbc8cb85ba2e647", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x8b, 0x0, 0x0}) 1.137701167s ago: executing program 6 (id=3835): r0 = userfaultfd(0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7e, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x1, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x2, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x2, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffd, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x3, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x5, 0x9, 0x6, 0xb, 0xa, 0x4, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x3, 0xcd, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x3c, 0x1, 0x9, 0xa, 0x5, 0x9, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x10000200, 0x80, 0x2, 0xcc52, 0x950bfad, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x8000003, 0x0, 0x7, 0xffff, 0x0, 0x200006, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x6, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x9, 0x5, 0x0, 0x537, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x1, 0x7, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x9, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10081, 0x6, 0x18, 0x0, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=3836): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x8054) kernel console output (not intermixed with test programs): 2, SerialNumber=3 [ 479.243051][T13606] usb 2-1: Product: syz [ 479.243066][T13606] usb 2-1: Manufacturer: syz [ 479.243081][T13606] usb 2-1: SerialNumber: syz [ 479.934225][T14018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.121770][T13606] usb 2-1: MBOX3: Invalid descriptor size=96. [ 480.213075][T13606] usb 2-1: MBOX3: Invalid descriptor size=96. [ 480.234305][T13606] usb 2-1: MBOX3: Invalid descriptor size=96. [ 480.263531][T13606] usb 2-1: USB disconnect, device number 6 [ 480.844849][T13606] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 480.999246][T13606] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 480.999278][T13606] usb 4-1: config 0 has no interface number 0 [ 480.999318][T13606] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.999345][T13606] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 480.999373][T13606] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 480.999412][T13606] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 480.999438][T13606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.055606][T13606] usb 4-1: config 0 descriptor?? [ 481.092923][T13606] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input70 [ 481.220429][T14067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.416554][T14039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.417318][T14039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.723196][T14080] netlink: 'syz.1.2979': attribute type 21 has an invalid length. [ 481.723228][T14080] netlink: 'syz.1.2979': attribute type 1 has an invalid length. [ 481.723240][T14080] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2979'. [ 482.062217][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 483.221297][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 483.269241][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 483.271730][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 483.274478][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 483.402530][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 483.862610][ T5616] usb 4-1: USB disconnect, device number 83 [ 484.258688][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 484.772066][T14179] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3003'. [ 485.755486][ T5612] Bluetooth: hci3: command tx timeout [ 485.987221][T14207] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3012'. [ 486.347164][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3016'. [ 486.708050][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 486.784823][ T5616] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 486.907613][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.907645][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.910299][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 486.910331][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 486.910354][ T10] usb 4-1: SerialNumber: syz [ 486.948782][ T5616] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 486.948816][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.948849][ T5616] usb 2-1: Product: syz [ 486.948864][ T5616] usb 2-1: Manufacturer: syz [ 486.948880][ T5616] usb 2-1: SerialNumber: syz [ 486.952392][T14239] tmpfs: Bad value for 'mpol' [ 487.026812][ T5616] usb 2-1: config 0 descriptor?? [ 487.226570][ T10] usb 4-1: invalid UAC_HEADER (v1) [ 487.388870][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 487.408964][ T10] usb 4-1: USB disconnect, device number 84 [ 487.451369][T13485] udevd[13485]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.454844][ T5616] usb 2-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (44) [ 487.773745][ T5616] usb 2-1: failed to fetch extended address, random address set [ 487.773778][ T5616] usb 2-1: atusb_probe: initialization failed, error = -524 [ 487.774018][ T5616] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 487.807958][T14137] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.808345][T14137] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.808689][T14137] bridge_slave_0: entered allmulticast mode [ 487.813492][T14137] bridge_slave_0: entered promiscuous mode [ 487.824817][ T5612] Bluetooth: hci3: command tx timeout [ 487.865062][T14137] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.865410][T14137] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.867010][T14137] bridge_slave_1: entered allmulticast mode [ 487.876695][T14137] bridge_slave_1: entered promiscuous mode [ 488.030129][ T1261] usb 2-1: USB disconnect, device number 7 [ 488.288215][T14259] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3022'. [ 488.303706][T14137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.320458][T14137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.433530][T14263] libceph: secret too big 289 [ 488.532870][T14137] team0: Port device team_slave_0 added [ 488.539033][T14137] team0: Port device team_slave_1 added [ 488.643108][T14137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.643143][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.643171][T14137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.651609][T14137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.651627][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.651654][T14137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.774944][ T1261] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 488.808187][T14137] hsr_slave_0: entered promiscuous mode [ 488.810602][T14137] hsr_slave_1: entered promiscuous mode [ 488.813027][T14137] debugfs: 'hsr0' already exists in 'hsr' [ 488.813068][T14137] Cannot create hsr debugfs directory [ 488.955291][ T1261] usb 4-1: Using ep0 maxpacket: 16 [ 488.959325][ T1261] usb 4-1: config 8 has an invalid interface number: 122 but max is 0 [ 488.959355][ T1261] usb 4-1: config 8 has no interface number 0 [ 488.959388][ T1261] usb 4-1: config 8 interface 122 has no altsetting 0 [ 488.980152][ T1261] usb 4-1: New USB device found, idVendor=046d, idProduct=0929, bcdDevice= 1.1d [ 488.980186][ T1261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.980208][ T1261] usb 4-1: Product: syz [ 488.980225][ T1261] usb 4-1: Manufacturer: syz [ 488.980241][ T1261] usb 4-1: SerialNumber: syz [ 489.906336][ T5612] Bluetooth: hci3: command tx timeout [ 489.946142][ T1261] gspca_main: spca561-2.14.0 probing 046d:0929 [ 489.962058][ T1261] spca561 4-1:8.122: probe with driver spca561 failed with error -22 [ 489.997997][ T1261] usb 4-1: USB disconnect, device number 85 [ 490.677709][T14137] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.106112][ T5804] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 491.223522][T14137] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.286480][ T5804] usb 2-1: device descriptor read/64, error -71 [ 491.534565][ T5804] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 491.665130][ T5804] usb 2-1: device descriptor read/64, error -71 [ 491.783669][ T5804] usb usb2-port1: attempt power cycle [ 491.985691][ T5612] Bluetooth: hci3: command tx timeout [ 492.067694][T14137] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.134823][ T5804] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 492.155854][ T5804] usb 2-1: device descriptor read/8, error -71 [ 492.395743][ T5804] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 492.434256][ T5804] usb 2-1: device descriptor read/8, error -71 [ 492.539471][ T5804] usb usb2-port1: unable to enumerate USB device [ 492.607631][T14137] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.417752][T14137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 493.472615][T14137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.473557][T14137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 493.539576][T14137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.606965][T14137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 493.682648][T14137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.684245][T14137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 493.732161][T14137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.072170][T14388] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 494.155920][T14137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.198310][T14388] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 494.198340][T14388] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 494.280679][T14137] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.298234][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.298374][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.339657][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.339801][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.270523][T14406] Bluetooth: MGMT ver 1.23 [ 495.515162][T14414] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 495.614468][T14416] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 495.614499][T14416] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 496.123316][T14137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.413133][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3057'. [ 496.559054][T11879] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.709443][T14137] veth0_vlan: entered promiscuous mode [ 496.753345][T14137] veth1_vlan: entered promiscuous mode [ 497.009559][T14137] veth0_macvtap: entered promiscuous mode [ 497.091281][T14137] veth1_macvtap: entered promiscuous mode [ 497.160104][T14137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.194453][T14137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.227963][ T111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.229108][ T111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.231288][ T111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.231333][ T111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.547330][T14478] program syz.1.3063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.927141][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.927162][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.757520][T11880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.757541][T11880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.253013][T14506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3071'. [ 500.741255][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3078'. [ 500.874806][T13606] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 500.944059][T14534] 9p: Bad value for 'rfdno' [ 500.966672][T14534] nfs: Unknown parameter '@' [ 501.004856][T13606] usb 2-1: device descriptor read/64, error -71 [ 501.265128][T13606] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 501.394830][ T5804] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 501.426167][T13606] usb 2-1: device descriptor read/64, error -71 [ 501.544801][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 501.566046][ T5804] usb 4-1: config 0 has no interfaces? [ 501.592855][T13606] usb usb2-port1: attempt power cycle [ 501.595437][ T5804] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 501.595471][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.595492][ T5804] usb 4-1: Product: syz [ 501.595507][ T5804] usb 4-1: Manufacturer: syz [ 501.595523][ T5804] usb 4-1: SerialNumber: syz [ 501.619292][ T5804] usb 4-1: config 0 descriptor?? [ 501.974812][T13606] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 501.982523][ T10] libceph: connect (1)[c::]:6789 error -101 [ 502.000253][T13606] usb 2-1: device descriptor read/8, error -71 [ 502.050470][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 502.069351][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.069450][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.122922][ T10] libceph: connect (1)[c::]:6789 error -101 [ 502.138824][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 502.153772][T14538] ceph: No mds server is up or the cluster is laggy [ 502.297071][T13606] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 502.319672][T13606] usb 2-1: device descriptor read/8, error -71 [ 502.399976][ T1261] libceph: connect (1)[c::]:6789 error -101 [ 502.400173][ T1261] libceph: mon0 (1)[c::]:6789 connect error [ 502.466360][T13606] usb usb2-port1: unable to enumerate USB device [ 502.534957][ T5616] usb 4-1: USB disconnect, device number 86 [ 502.890095][T14551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.891722][T14551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.124963][ T5616] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 503.285204][ T5616] usb 6-1: not running at top speed; connect to a high speed hub [ 503.287743][ T5616] usb 6-1: config 39 has an invalid interface number: 12 but max is 2 [ 503.287853][ T5616] usb 6-1: config 39 contains an unexpected descriptor of type 0x1, skipping [ 503.287874][ T5616] usb 6-1: config 39 has an invalid interface number: 108 but max is 2 [ 503.287896][ T5616] usb 6-1: config 39 has an invalid interface number: 102 but max is 2 [ 503.287918][ T5616] usb 6-1: config 39 contains an unexpected descriptor of type 0x1, skipping [ 503.287938][ T5616] usb 6-1: config 39 has no interface number 0 [ 503.287956][ T5616] usb 6-1: config 39 has no interface number 1 [ 503.287974][ T5616] usb 6-1: config 39 has no interface number 2 [ 503.288042][ T5616] usb 6-1: config 39 interface 12 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 503.288072][ T5616] usb 6-1: config 39 interface 12 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 503.288099][ T5616] usb 6-1: config 39 interface 12 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 503.288122][ T5616] usb 6-1: config 39 interface 12 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 503.288147][ T5616] usb 6-1: config 39 interface 12 altsetting 8 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 503.288174][ T5616] usb 6-1: config 39 interface 12 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 503.288197][ T5616] usb 6-1: config 39 interface 12 altsetting 8 has an endpoint descriptor with address 0x17, changing to 0x7 [ 503.288224][ T5616] usb 6-1: config 39 interface 12 altsetting 8 endpoint 0x7 has invalid maxpacket 9975, setting to 64 [ 503.288262][ T5616] usb 6-1: config 39 interface 12 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 503.288297][ T5616] usb 6-1: config 39 interface 12 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 503.288320][ T5616] usb 6-1: config 39 interface 12 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 503.288349][ T5616] usb 6-1: config 39 interface 12 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 503.288378][ T5616] usb 6-1: config 39 interface 12 altsetting 8 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 503.288406][ T5616] usb 6-1: config 39 interface 12 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 503.288430][ T5616] usb 6-1: config 39 interface 12 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 503.288459][ T5616] usb 6-1: config 39 interface 12 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 503.288482][ T5616] usb 6-1: config 39 interface 12 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 503.288524][ T5616] usb 6-1: config 39 interface 108 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 503.288547][ T5616] usb 6-1: config 39 interface 108 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 503.288581][ T5616] usb 6-1: config 39 interface 102 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 503.288603][ T5616] usb 6-1: config 39 interface 102 altsetting 49 has a duplicate endpoint with address 0xF, skipping [ 503.288626][ T5616] usb 6-1: config 39 interface 102 altsetting 49 has a duplicate endpoint with address 0x2, skipping [ 503.288650][ T5616] usb 6-1: config 39 interface 102 altsetting 49 has a duplicate endpoint with address 0x9, skipping [ 503.288672][ T5616] usb 6-1: config 39 interface 102 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 503.288693][ T5616] usb 6-1: config 39 interface 102 altsetting 49 endpoint 0xE has invalid maxpacket 1947, setting to 64 [ 503.288718][ T5616] usb 6-1: config 39 interface 102 altsetting 49 has a duplicate endpoint with address 0x4, skipping [ 503.288744][ T5616] usb 6-1: config 39 interface 102 altsetting 49 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 503.288773][ T5616] usb 6-1: config 39 interface 12 has no altsetting 0 [ 503.288791][ T5616] usb 6-1: config 39 interface 108 has no altsetting 0 [ 503.288809][ T5616] usb 6-1: config 39 interface 102 has no altsetting 0 [ 503.292747][ T5616] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a81, bcdDevice=6d.60 [ 503.292783][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.292805][ T5616] usb 6-1: Product: Ё [ 503.292821][ T5616] usb 6-1: Manufacturer: 䑒鿉╀⿙霏뭇쾞Ꞓ抛㭻㕟垭꛿쨌ਢ륷碔껺們埔ꞝ喯䘿㼇㥭始霽蒠颂摓寐霎鴩ख⃇㊂ꄺ첺몟婄￸륨ꯑ뒰轋✓쐁鷩轤ႌ诟೚ƨ谁쟴싇㱷⾒쇝䈬藔ﮭⴲ쌘簭黅원ྂ瑍ㄑԯ疵쮷࡛㸀ίℝ甔盯뢩鼉⦝⨶簾塶訍㒝ᚥ➐霘톭 [ 503.292854][ T5616] usb 6-1: SerialNumber: syz [ 503.335342][T14552] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 503.337298][T14552] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 503.778525][T14564] gfs2: gfs2 mount does not exist [ 503.862484][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.867774][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.210578][ T5616] usb 6-1: USB disconnect, device number 28 [ 504.839565][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3103'. [ 504.839597][T14599] block nbd0: Unsupported socket: should be TCP or UNIX. [ 505.034919][T13606] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 505.186926][T13606] usb 2-1: Using ep0 maxpacket: 8 [ 505.227328][T13606] usb 2-1: unable to get BOS descriptor or descriptor too short [ 505.231874][T13606] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 505.231908][T13606] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 505.231930][T13606] usb 2-1: Manufacturer: syz [ 505.231946][T13606] usb 2-1: SerialNumber: syz [ 505.492525][T13606] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 505.506363][T13606] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 505.513602][T13606] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 505.513663][T13606] usb 2-1: media controller created [ 505.615614][T13606] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.729779][T13606] zl10353_read_register: readreg error (reg=127, ret==0) [ 505.759523][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3110'. [ 505.778723][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3110'. [ 505.971139][T13606] usb 2-1: USB disconnect, device number 16 [ 506.161535][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3114'. [ 506.518371][ T5804] IPVS: starting estimator thread 0... [ 506.644864][T14639] IPVS: using max 8 ests per chain, 19200 per kthread [ 506.645293][ T5616] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 506.785382][ T5804] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 506.823085][ T5616] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 506.823117][ T5616] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.823139][ T5616] usb 6-1: config 0 has no interface number 0 [ 506.823188][ T5616] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 506.823279][ T5616] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 506.831575][ T5616] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 506.831609][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.831631][ T5616] usb 6-1: Product: syz [ 506.831645][ T5616] usb 6-1: Manufacturer: syz [ 506.831660][ T5616] usb 6-1: SerialNumber: syz [ 506.841177][ T5616] usb 6-1: config 0 descriptor?? [ 506.842069][T14631] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 506.956475][ T5804] usb 4-1: not running at top speed; connect to a high speed hub [ 506.957578][ T5804] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 506.957605][ T5804] usb 4-1: config 0 has no interface number 0 [ 506.957633][ T5804] usb 4-1: config 0 interface 213 has no altsetting 0 [ 506.960065][ T5804] usb 4-1: New USB device found, idVendor=0c45, idProduct=624c, bcdDevice=df.19 [ 506.960094][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.960116][ T5804] usb 4-1: Product: syz [ 506.960132][ T5804] usb 4-1: Manufacturer: syz [ 506.960148][ T5804] usb 4-1: SerialNumber: syz [ 506.996462][ T5804] usb 4-1: config 0 descriptor?? [ 507.392751][ T5804] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624c [ 507.400764][ T5804] gspca_sn9c20x: Write register 1000 failed -71 [ 507.400785][ T5804] gspca_sn9c20x: Device initialization failed [ 507.400869][ T5804] gspca_sn9c20x 4-1:0.213: probe with driver gspca_sn9c20x failed with error -71 [ 507.409637][ T5804] usb 4-1: USB disconnect, device number 87 [ 507.588239][T14643] Falling back ldisc for ttyS3. [ 507.662297][ T9345] bridge_slave_1: left allmulticast mode [ 507.662334][ T9345] bridge_slave_1: left promiscuous mode [ 507.691907][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.720966][ T5616] vmk80xx 6-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 507.771120][ T9345] bridge_slave_0: left allmulticast mode [ 507.771156][ T9345] bridge_slave_0: left promiscuous mode [ 507.784123][ T5616] vmk80xx 6-1:0.6: probe with driver vmk80xx failed with error -22 [ 507.801933][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.262663][T14697] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3130'. [ 509.262711][T14697] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3130'. [ 509.479032][ T5616] usb 6-1: USB disconnect, device number 29 [ 509.683991][ T38] audit: type=1326 audit(1779259701.707:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.5.3132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c59d1ce59 code=0x0 [ 509.760205][ T9345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.872265][ T9345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.907238][ T9345] bond0 (unregistering): Released all slaves [ 510.887538][T14741] trusted_key: encrypted_key: insufficient parameters specified [ 511.304252][T14754] netlink: 'syz.3.3143': attribute type 29 has an invalid length. [ 511.304279][T14754] netlink: 'syz.3.3143': attribute type 3 has an invalid length. [ 511.304294][T14754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3143'. [ 511.328226][T14752] tmpfs: Bad value for 'nr_blocks' [ 511.358926][T14754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3143'. [ 511.358968][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3143'. [ 511.393794][T14758] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3144'. [ 512.759427][T14794] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3153'. [ 513.040415][T14797] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3154'. [ 513.081299][T14797] binder: 14795:14797 ioctl c00c6211 0 returned -14 [ 513.480968][T14822] evm: overlay not supported [ 513.734840][T13606] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 513.779023][T14829] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3164'. [ 513.891582][T13606] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 513.891619][T13606] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.891663][T13606] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.891689][T13606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.493175][ T9345] hsr_slave_0: left promiscuous mode [ 514.510466][T13606] usb 2-1: usb_control_msg returned -32 [ 514.510516][T13606] usbtmc 2-1:16.0: can't read capabilities [ 514.552596][ T9345] hsr_slave_1: left promiscuous mode [ 514.553685][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.553708][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.606109][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.606138][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.777943][ T9345] veth1_macvtap: left promiscuous mode [ 514.779813][ T9345] veth0_macvtap: left promiscuous mode [ 514.781618][ T9345] veth1_vlan: left promiscuous mode [ 514.781812][ T9345] veth0_vlan: left promiscuous mode [ 516.310445][ T9345] team0 (unregistering): Port device team_slave_1 removed [ 516.396659][ T9345] team0 (unregistering): Port device team_slave_0 removed [ 516.928242][T14861] openvswitch: netlink: Actions may not be safe on all matching packets [ 517.314460][T14869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.477046][ T5616] usb 2-1: USB disconnect, device number 17 [ 518.101504][ T5616] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 518.236298][ T5616] usb 2-1: device descriptor read/64, error -71 [ 518.329717][T14889] netlink: 'syz.5.3186': attribute type 6 has an invalid length. [ 518.329741][T14889] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3186'. [ 518.475309][ T5616] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 518.574884][ T5804] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 518.604794][ T5616] usb 2-1: device descriptor read/64, error -71 [ 518.705769][ T5804] usb 6-1: device descriptor read/64, error -71 [ 518.715986][ T5616] usb usb2-port1: attempt power cycle [ 518.945029][ T5804] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 519.002683][T14896] overlayfs: failed lookup in lower (newroot/221, name='file1', err=-40): overlapping layers [ 519.074878][ T5616] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 519.075098][ T5804] usb 6-1: device descriptor read/64, error -71 [ 519.084805][ T1006] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 519.095413][ T5616] usb 2-1: device descriptor read/8, error -71 [ 519.215725][ T5804] usb usb6-port1: attempt power cycle [ 519.287023][ T1006] usb 4-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 519.287061][ T1006] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.305528][ T1006] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 519.305563][ T1006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 519.305583][ T1006] usb 4-1: SerialNumber: syz [ 519.335202][ T5616] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 519.368495][ T5616] usb 2-1: device descriptor read/8, error -71 [ 519.475102][ T5616] usb usb2-port1: unable to enumerate USB device [ 519.527876][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3188'. [ 519.541614][ T1006] usb 4-1: 0:2 : does not exist [ 519.554850][ T5804] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 519.575292][ T1006] usb 4-1: USB disconnect, device number 88 [ 519.577171][ T5804] usb 6-1: device descriptor read/8, error -71 [ 519.616305][T13485] udevd[13485]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.814838][ T5804] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 519.835334][ T5804] usb 6-1: device descriptor read/8, error -71 [ 519.945183][ T5804] usb usb6-port1: unable to enumerate USB device [ 520.378309][T14907] autofs: Bad value for 'fd' [ 520.437623][T14909] openvswitch: netlink: Actions may not be safe on all matching packets [ 520.569475][T14913] fuse: Bad value for 'user_id' [ 520.569490][T14913] fuse: Bad value for 'user_id' [ 520.828568][T14923] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3200'. [ 521.402446][T14932] autofs: Bad value for 'fd' [ 521.537008][T14934] netlink: 'syz.5.3204': attribute type 1 has an invalid length. [ 521.880431][T14944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3207'. [ 522.009842][T14946] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3209'. [ 522.134835][ T1261] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 522.828746][T14955] autofs: Bad value for 'fd' [ 522.967661][ T1006] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 522.971025][ T1261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.971090][ T1261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.974273][ T1261] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.974305][ T1261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.974326][ T1261] usb 2-1: Product: syz [ 522.974342][ T1261] usb 2-1: Manufacturer: syz [ 522.974358][ T1261] usb 2-1: SerialNumber: syz [ 523.084181][ T1261] cdc_ether 2-1:1.0: slave class 0 [ 523.116125][ T1006] usb 6-1: Using ep0 maxpacket: 32 [ 523.118120][ T1006] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 523.118157][ T1006] usb 6-1: config 0 has no interface number 0 [ 523.120531][ T1006] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 523.120569][ T1006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.120591][ T1006] usb 6-1: Product: syz [ 523.120607][ T1006] usb 6-1: Manufacturer: syz [ 523.120622][ T1006] usb 6-1: SerialNumber: syz [ 523.138745][ T1006] usb 6-1: config 0 descriptor?? [ 523.163196][ T1006] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 523.307904][ T5804] usb 2-1: USB disconnect, device number 22 [ 523.493275][ T1006] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 523.519762][ T1006] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 523.585440][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 523.662453][T14961] veth0_to_team: entered allmulticast mode [ 523.678382][T14967] /dev/nullb0: Can't open blockdev [ 523.761853][T14965] fuse: Unknown parameter '00000000000000000008' [ 523.801736][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 523.802918][ T1006] usb 6-1: USB disconnect, device number 34 [ 523.916592][ T1006] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 523.968949][ T1006] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 523.972141][ T1006] quatech2 6-1:0.51: device disconnected [ 524.006100][T14970] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3218'. [ 524.612344][T14985] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3224'. [ 524.698791][T14987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 525.087525][T14997] netlink: 'syz.1.3227': attribute type 21 has an invalid length. [ 525.087551][T14997] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3227'. [ 525.087607][T14997] netlink: 'syz.1.3227': attribute type 4 has an invalid length. [ 525.087621][T14997] netlink: 'syz.1.3227': attribute type 5 has an invalid length. [ 525.087635][T14997] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3227'. [ 525.360554][T15003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3230'. [ 525.558578][T15012] block nbd0: not configured, cannot reconfigure [ 525.764786][ T5612] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 525.764809][ T5612] Bluetooth: Wrong link type (-22) [ 525.764938][ T5612] Bluetooth: hci4: link tx timeout [ 525.779020][ T5612] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 525.857486][T15021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.079831][T15031] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3240'. [ 526.155877][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3242'. [ 526.185360][ T5616] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 526.236687][T15037] vxfs: unable to read disk superblock at 1 [ 526.236831][T15037] vxfs: unable to read disk superblock at 8 [ 526.236840][T15037] vxfs: can't find superblock. [ 526.258838][T15036] pimreg: entered allmulticast mode [ 526.273416][T15034] pimreg: left allmulticast mode [ 526.348383][ T5616] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.348422][ T5616] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.348446][ T5616] usb 6-1: config 0 interface 0 has no altsetting 0 [ 526.348479][ T5616] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 526.348503][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.360649][T15037] nbd: must specify at least one socket [ 526.410655][ T5616] usb 6-1: config 0 descriptor?? [ 526.645281][T15024] binder: 15023:15024 ioctl c0306201 2000000003c0 returned -14 [ 526.653876][T15024] binder: 15023:15024 ioctl c0306201 200000000300 returned -14 [ 526.725686][ T5616] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 526.878620][ T5616] usb 2-1: unable to get BOS descriptor or descriptor too short [ 526.879863][ T5616] usb 2-1: not running at top speed; connect to a high speed hub [ 526.896123][ T5616] usb 2-1: config 9 has an invalid interface number: 82 but max is 0 [ 526.896152][ T5616] usb 2-1: config 9 has no interface number 0 [ 526.896184][ T5616] usb 2-1: config 9 interface 82 has no altsetting 0 [ 526.914215][ T5616] usb 2-1: New USB device found, idVendor=0a46, idProduct=9000, bcdDevice=12.74 [ 526.914250][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.914271][ T5616] usb 2-1: Product: syz [ 526.914286][ T5616] usb 2-1: Manufacturer: syz [ 526.914302][ T5616] usb 2-1: SerialNumber: syz [ 527.208107][T15040] loop3: detected capacity change from 0 to 7 [ 527.305177][ T9345] lo_rw_aio(loop3) starting read with raw_refcnt=0x1, refcnt=2 [ 527.306665][T15058] No control pipe specified [ 527.434016][T15040] Dev loop3: unable to read RDB block 7 [ 527.434069][T15040] loop3: unable to read partition table [ 527.434283][T15040] loop3: partition table beyond EOD, truncated [ 527.450220][T15040] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 527.479488][ T5616] dm9601 2-1:9.82: probe with driver dm9601 failed with error -22 [ 527.506096][ T5616] usb 2-1: USB disconnect, device number 23 [ 527.572079][ T9345] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 527.578078][T13297] Dev loop3: unable to read RDB block 7 [ 527.578137][T13297] loop3: unable to read partition table [ 527.604818][T13297] loop3: partition table beyond EOD, truncated [ 527.611731][ T4974] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 527.826298][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 527.905958][ T9345] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 528.000624][ T5616] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 528.176422][ T5616] usb 4-1: Using ep0 maxpacket: 16 [ 528.178595][ T5616] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 528.178624][ T5616] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 528.181233][ T5616] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 528.181265][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.181278][ T5616] usb 4-1: Product: syz [ 528.181287][ T5616] usb 4-1: Manufacturer: syz [ 528.181296][ T5616] usb 4-1: SerialNumber: syz [ 528.903731][ T5616] usb 6-1: USB disconnect, device number 35 [ 528.969624][T15071] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3254'. [ 529.436230][T15081] No control pipe specified [ 529.702396][ T1261] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 529.850051][T15087] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 529.951465][ T1261] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 529.951497][ T1261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.951517][ T1261] usb 2-1: config 0 has no interface number 0 [ 529.951560][ T1261] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 529.951583][ T1261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.961232][ T1261] usb 2-1: config 0 descriptor?? [ 530.026613][T15090] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3263'. [ 530.235432][T15092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3263'. [ 531.073346][T15098] FAULT_INJECTION: forcing a failure. [ 531.073346][T15098] name failslab, interval 1, probability 0, space 0, times 0 [ 531.073380][T15098] CPU: 0 UID: 0 PID: 15098 Comm: syz.4.3264 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 531.073404][T15098] Tainted: [L]=SOFTLOCKUP [ 531.073410][T15098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.073421][T15098] Call Trace: [ 531.073429][T15098] [ 531.073437][T15098] dump_stack_lvl+0xe8/0x150 [ 531.073465][T15098] should_fail_ex+0x46b/0x600 [ 531.073493][T15098] should_failslab+0xa8/0x100 [ 531.073517][T15098] __kmalloc_noprof+0xdf/0x7b0 [ 531.073539][T15098] ? tomoyo_encode+0x28b/0x550 [ 531.073565][T15098] tomoyo_encode+0x28b/0x550 [ 531.073591][T15098] tomoyo_mount_permission+0x3a2/0x9d0 [ 531.073614][T15098] ? stack_depot_save_flags+0x33/0x810 [ 531.073644][T15098] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 531.073666][T15098] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 531.073726][T15098] security_sb_mount+0xe4/0x320 [ 531.073752][T15098] path_mount+0xbc/0x10e0 [ 531.073771][T15098] ? user_path_at+0xd4/0x160 [ 531.073794][T15098] ? user_path_at+0xd4/0x160 [ 531.073814][T15098] __se_sys_mount+0x31d/0x420 [ 531.073836][T15098] ? __pfx___se_sys_mount+0x10/0x10 [ 531.073859][T15098] ? __x64_sys_mount+0x20/0xc0 [ 531.073877][T15098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.073896][T15098] do_syscall_64+0x15f/0xf80 [ 531.073912][T15098] ? trace_irq_disable+0x3b/0x140 [ 531.073936][T15098] ? clear_bhb_loop+0x40/0x90 [ 531.073957][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.073973][T15098] RIP: 0033:0x7f3baebbce59 [ 531.073989][T15098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.074003][T15098] RSP: 002b:00007f3bace0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 531.074022][T15098] RAX: ffffffffffffffda RBX: 00007f3baee35fa0 RCX: 00007f3baebbce59 [ 531.074034][T15098] RDX: 00002000000020c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 531.074045][T15098] RBP: 00007f3bace0e090 R08: 00002000000004c0 R09: 0000000000000000 [ 531.074056][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.074067][T15098] R13: 00007f3baee36038 R14: 00007f3baee35fa0 R15: 00007ffe578a9348 [ 531.074090][T15098] [ 532.142608][T15106] No control pipe specified [ 532.240946][ T1261] usb 2-1: USB disconnect, device number 24 [ 533.409973][T15113] fuse: Bad value for 'fd' [ 533.529140][ T5804] usb 4-1: USB disconnect, device number 89 [ 534.390086][T15126] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3274'. [ 534.919750][ T1261] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 534.964332][T15158] netlink: 'syz.1.3289': attribute type 4 has an invalid length. [ 534.964349][T15158] netlink: 'syz.1.3289': attribute type 2 has an invalid length. [ 535.052001][ T1261] usb 6-1: device descriptor read/64, error -71 [ 535.149753][ T5804] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 535.304116][ T5804] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 535.304147][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.304160][ T5804] usb 4-1: Product: syz [ 535.304168][ T5804] usb 4-1: Manufacturer: syz [ 535.304177][ T5804] usb 4-1: SerialNumber: syz [ 535.319866][ T1261] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 535.353670][ T5804] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 535.392528][ T5616] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 535.451371][ T1261] usb 6-1: device descriptor read/64, error -71 [ 535.561467][ T1261] usb usb6-port1: attempt power cycle [ 536.740592][ T5616] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 536.740758][ T5616] ath9k_htc: Failed to initialize the device [ 536.750660][ T5705] usb 4-1: USB disconnect, device number 90 [ 536.861053][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 536.903017][ T5705] usb 4-1: ath9k_htc: USB layer deinitialized [ 536.951808][ T1261] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 536.971233][ T1261] usb 6-1: device descriptor read/8, error -71 [ 537.210983][ T1261] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 537.234053][ T1261] usb 6-1: device descriptor read/8, error -71 [ 537.341175][ T1261] usb usb6-port1: unable to enumerate USB device [ 537.421545][T15165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3292'. [ 538.516781][T15209] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3309'. [ 539.411104][T15236] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3320'. [ 539.454903][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.515525][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.519628][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 539.524125][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 539.528987][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.835277][T15237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.835862][T15237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.916526][ T5616] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 540.444545][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 540.514270][T15256] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3325'. [ 540.622584][ T5760] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 540.792614][ T5760] usb 4-1: Using ep0 maxpacket: 32 [ 540.797594][ T5760] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 540.797650][ T5760] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 540.797666][ T5760] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.797682][ T5760] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 540.859136][ T5760] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 540.859167][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.859185][ T5760] usb 4-1: Product: syz [ 540.859200][ T5760] usb 4-1: Manufacturer: syz [ 540.859216][ T5760] usb 4-1: SerialNumber: syz [ 540.940345][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 541.204981][ T5760] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input72 [ 541.332833][ T5616] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 541.452908][ T5760] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 541.452924][ T5760] (id 0x00) [ 541.485094][ T5616] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 541.485129][ T5616] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 541.485154][ T5616] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 541.488765][ T5616] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 541.488798][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.488820][ T5616] usb 6-1: Product: syz [ 541.488837][ T5616] usb 6-1: Manufacturer: syz [ 541.488853][ T5616] usb 6-1: SerialNumber: syz [ 541.575089][ T5616] usb 6-1: config 0 descriptor?? [ 541.576714][T15268] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 541.576896][T15268] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 541.581041][ T5616] usb 6-1: ucan: probing device on interface #0 [ 541.616810][T15272] tmpfs: Bad value for 'mpol' [ 541.685056][ T5760] rc_core: IR keymap rc-imon-pad not found [ 541.685080][ T5760] Registered IR keymap rc-empty [ 541.685161][ T5760] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 541.685182][ T5760] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 541.739084][ T5760] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 541.764138][ T5760] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input74 [ 541.855270][ T5612] Bluetooth: hci0: command tx timeout [ 541.855828][ T5760] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:91> initialized [ 541.865739][ T5760] usb 4-1: USB disconnect, device number 91 [ 542.025546][T15268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.026328][T15268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.081705][ T5616] usb 6-1: ucan: failed to retrieve device info [ 542.081730][ T5616] usb 6-1: ucan: probe failed; try to update the device firmware [ 542.113748][ T5616] usb 6-1: USB disconnect, device number 41 [ 542.359112][T15231] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.359513][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.359805][T15231] bridge_slave_0: entered allmulticast mode [ 542.386059][T15231] bridge_slave_0: entered promiscuous mode [ 542.397207][T15231] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.397572][T15231] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.397885][T15231] bridge_slave_1: entered allmulticast mode [ 542.401354][T15231] bridge_slave_1: entered promiscuous mode [ 542.619448][T15231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.626400][T15231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.689147][T15231] team0: Port device team_slave_0 added [ 542.695079][T15231] team0: Port device team_slave_1 added [ 542.746506][T15231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.746525][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.746551][T15231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.751707][T15231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.751725][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.751752][T15231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.871971][T15282] random: crng reseeded on system resumption [ 543.257015][T15231] hsr_slave_0: entered promiscuous mode [ 543.284103][T15231] hsr_slave_1: entered promiscuous mode [ 543.289496][T15231] debugfs: 'hsr0' already exists in 'hsr' [ 543.289526][T15231] Cannot create hsr debugfs directory [ 543.510587][T15290] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3332'. [ 543.918087][ T5612] Bluetooth: hci0: command tx timeout [ 544.026100][ T1006] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 544.169454][ T1006] usb 6-1: device descriptor read/64, error -71 [ 544.353034][T15231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.414516][ T1006] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 544.544647][ T1006] usb 6-1: device descriptor read/64, error -71 [ 544.665107][ T1006] usb usb6-port1: attempt power cycle [ 544.782108][T15231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.029348][ T1006] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 545.045562][ T1006] usb 6-1: device descriptor read/8, error -71 [ 545.335890][ T1006] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 545.358540][ T1006] usb 6-1: device descriptor read/8, error -71 [ 545.420040][T15231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.477944][ T1006] usb usb6-port1: unable to enumerate USB device [ 545.579695][T15313] FAULT_INJECTION: forcing a failure. [ 545.579695][T15313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.579720][T15313] CPU: 0 UID: 0 PID: 15313 Comm: syz.3.3339 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 545.579737][T15313] Tainted: [L]=SOFTLOCKUP [ 545.579742][T15313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.579749][T15313] Call Trace: [ 545.579756][T15313] [ 545.579763][T15313] dump_stack_lvl+0xe8/0x150 [ 545.579783][T15313] should_fail_ex+0x46b/0x600 [ 545.579801][T15313] _copy_to_user+0x31/0xb0 [ 545.579821][T15313] simple_read_from_buffer+0xe1/0x170 [ 545.579839][T15313] proc_fail_nth_read+0x1be/0x230 [ 545.579856][T15313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.579872][T15313] ? rw_verify_area+0x2ac/0x4e0 [ 545.579888][T15313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.579903][T15313] vfs_read+0x212/0xa80 [ 545.579923][T15313] ? __pfx_vfs_read+0x10/0x10 [ 545.579940][T15313] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 545.579959][T15313] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.579977][T15313] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 545.579994][T15313] ? mutex_lock_nested+0x152/0x1d0 [ 545.580008][T15313] ? fdget_pos+0x252/0x320 [ 545.580026][T15313] ksys_read+0x156/0x270 [ 545.580043][T15313] ? __pfx_ksys_read+0x10/0x10 [ 545.580058][T15313] ? fput+0xa0/0xd0 [ 545.580075][T15313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.580089][T15313] do_syscall_64+0x15f/0xf80 [ 545.580100][T15313] ? trace_irq_disable+0x3b/0x140 [ 545.580117][T15313] ? clear_bhb_loop+0x40/0x90 [ 545.580132][T15313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.580144][T15313] RIP: 0033:0x7fdc3854d68e [ 545.580157][T15313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 545.580168][T15313] RSP: 002b:00007fdc367e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.580182][T15313] RAX: ffffffffffffffda RBX: 00007fdc367e66c0 RCX: 00007fdc3854d68e [ 545.580191][T15313] RDX: 000000000000000f RSI: 00007fdc367e60a0 RDI: 0000000000000004 [ 545.580199][T15313] RBP: 00007fdc367e6090 R08: 0000000000000000 R09: 0000000000000000 [ 545.580207][T15313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.580215][T15313] R13: 00007fdc38806038 R14: 00007fdc38805fa0 R15: 00007ffc0f3d6078 [ 545.580232][T15313] [ 545.804605][T15316] netlink: 'syz.3.3340': attribute type 4 has an invalid length. [ 545.847673][T15231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.997038][ T5612] Bluetooth: hci0: command tx timeout [ 546.289322][T15231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.309499][T15231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.310505][T15231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.351044][T15231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.352083][T15231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.373000][T15231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.374003][T15231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.433211][T15231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.560980][T15231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.593725][T15231] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.608000][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.608219][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.647229][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.647398][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.774414][T15324] Device name not specified. [ 546.774414][T15324] [ 546.795560][T15324] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3341'. [ 547.005013][T15324] unsupported nla_type 224 [ 547.266287][ T1006] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 547.446998][ T1006] usb 4-1: Using ep0 maxpacket: 8 [ 547.448979][ T1006] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.449030][ T1006] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 547.449054][ T1006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 547.449076][ T1006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 547.449101][ T1006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 547.449123][ T1006] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.452788][ T1006] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 547.452822][ T1006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.452852][ T1006] usb 4-1: Product: syz [ 547.452866][ T1006] usb 4-1: Manufacturer: syz [ 547.452879][ T1006] usb 4-1: SerialNumber: syz [ 547.588803][ T1006] usb 4-1: config 0 descriptor?? [ 547.589900][T15324] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 547.822174][T15341] openvswitch: netlink: Actions may not be safe on all matching packets [ 548.004963][T15231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.031854][T15347] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3345'. [ 548.078285][ T5612] Bluetooth: hci0: command tx timeout [ 548.277980][T15231] veth0_vlan: entered promiscuous mode [ 548.309427][T15231] veth1_vlan: entered promiscuous mode [ 548.534569][T15231] veth0_macvtap: entered promiscuous mode [ 548.554099][T15231] veth1_macvtap: entered promiscuous mode [ 548.705798][T15362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3349'. [ 548.804660][T15231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.861139][T15231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.911236][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.912931][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.913053][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.913106][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.137780][ T1006] rc_core: IR keymap rc-snapstream-firefly not found [ 549.137797][ T1006] Registered IR keymap rc-empty [ 549.138767][ T1006] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 549.142922][ T1006] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input75 [ 549.382832][ T1006] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input76 [ 549.794679][ T1006] usb 4-1: USB disconnect, device number 92 [ 549.794765][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 549.908722][ T4959] ati_remote 4-1:0.0: ati_remote_open: usb_submit_urb failed! [ 551.864163][T15390] netlink: zone id is out of range [ 551.864179][T15390] netlink: zone id is out of range [ 551.916456][T15389] tipc: Started in network mode [ 551.916491][T15389] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 551.929944][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.929981][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.031449][T15389] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 552.114847][T15389] tipc: Enabled bearer , priority 10 [ 552.199486][ T9344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.199506][ T9344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.525403][T15401] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 552.871317][ T38] audit: type=1326 audit(1780832608.889:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15416 comm="syz.5.3366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c59d1ce59 code=0x0 [ 553.165951][ T10] tipc: Node number set to 1 [ 553.339356][ T5705] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 553.479557][ T5804] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 553.491952][ T5705] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 553.491993][ T5705] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 553.492009][ T5705] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.492022][ T5705] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 553.492038][ T5705] usb 4-1: config 0 interface 0 has no altsetting 0 [ 553.492058][ T5705] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 553.492072][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.602119][ T5705] usb 4-1: config 0 descriptor?? [ 553.649509][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 553.668903][ T5804] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 553.668945][ T5804] usb 2-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 553.668965][ T5804] usb 2-1: Product: syz [ 553.669033][ T5804] usb 2-1: Manufacturer: syz [ 553.669049][ T5804] usb 2-1: SerialNumber: syz [ 553.723996][ T5804] usb 2-1: config 0 descriptor?? [ 553.951744][ T5804] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 554.051468][ T5705] hid_parser_main: 37 callbacks suppressed [ 554.051487][ T5705] ryos 0003:1E7D:3138.0011: unknown main item tag 0x0 [ 554.051507][ T5705] ryos 0003:1E7D:3138.0011: unknown main item tag 0x0 [ 554.051525][ T5705] ryos 0003:1E7D:3138.0011: item fetching failed at offset 4/5 [ 554.051915][ T5705] ryos 0003:1E7D:3138.0011: parse failed [ 554.051955][ T5705] ryos 0003:1E7D:3138.0011: probe with driver ryos failed with error -22 [ 554.239745][ T5597] usb 4-1: USB disconnect, device number 93 [ 554.405672][ T5612] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 554.465008][ T5804] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 554.465028][ T5804] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 554.475205][ T5804] usb 2-1: USB disconnect, device number 25 [ 554.650081][ T5804] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 554.816351][ T5804] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 554.816381][ T5804] usb 2-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 554.816393][ T5804] usb 2-1: Product: syz [ 554.816403][ T5804] usb 2-1: Manufacturer: syz [ 554.816411][ T5804] usb 2-1: SerialNumber: syz [ 554.823882][ T5804] usb 2-1: config 0 descriptor?? [ 555.073394][T15429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.074006][T15429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.097454][T15429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.098066][T15429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.141534][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3386'. [ 555.165357][ T5804] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 555.640734][ T5705] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 555.695450][T15482] input: syz1 as /devices/virtual/input/input78 [ 555.741845][T15482] deleting an unspecified loop device is not supported. [ 555.842978][ T5705] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 555.842999][ T5705] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 555.843011][ T5705] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 555.843040][ T5705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 555.843056][ T5705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 555.846532][ T5705] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 555.846555][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 555.846567][ T5705] usb 4-1: Product: syz [ 555.846576][ T5705] usb 4-1: Manufacturer: syz [ 555.936851][ T5705] cdc_wdm 4-1:1.0: skipping garbage [ 555.936866][ T5705] cdc_wdm 4-1:1.0: skipping garbage [ 555.940277][ T5705] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 555.940310][ T5705] cdc_wdm 4-1:1.0: Unknown control protocol [ 555.985275][T15490] fuse: Bad value for 'fd' [ 556.016597][ T5804] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 556.016615][ T5804] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 556.022955][ T5804] usb 2-1: USB disconnect, device number 26 [ 556.498573][T15495] netlink: 'syz.5.3396': attribute type 10 has an invalid length. [ 556.498590][T15495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3396'. [ 556.498815][T15495] dummy0: entered promiscuous mode [ 556.499201][T15495] bridge0: port 3(dummy0) entered blocking state [ 556.499375][T15495] bridge0: port 3(dummy0) entered disabled state [ 556.499625][T15495] dummy0: entered allmulticast mode [ 556.505314][T15495] bridge0: port 3(dummy0) entered blocking state [ 556.505531][T15495] bridge0: port 3(dummy0) entered forwarding state [ 556.620915][T15499] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3398'. [ 556.786991][T15499] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 556.912799][T15507] netlink: 'syz.5.3400': attribute type 16 has an invalid length. [ 556.912825][T15507] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3400'. [ 556.962279][ T5616] usb 4-1: USB disconnect, device number 94 [ 557.794440][ T5804] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 557.867248][T15518] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3404'. [ 557.869540][T15518] Invalid source name [ 557.869906][T15518] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3404'. [ 557.941796][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 557.944297][ T5804] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 557.944316][ T5804] usb 4-1: config 0 has no interface number 0 [ 557.944345][ T5804] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 557.944359][ T5804] usb 4-1: config 0 interface 89 has no altsetting 0 [ 557.946450][ T5804] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 557.946477][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.946489][ T5804] usb 4-1: Product: syz [ 557.946504][ T5804] usb 4-1: Manufacturer: syz [ 557.946513][ T5804] usb 4-1: SerialNumber: syz [ 557.976708][ T5804] usb 4-1: config 0 descriptor?? [ 558.022545][ T5804] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 558.022584][ T5804] em28xx 4-1:0.89: Video interface 89 found: [ 558.302036][ T5597] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 558.443320][ T5597] usb 6-1: device descriptor read/64, error -71 [ 558.493183][ T5612] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 558.493479][ T5612] Bluetooth: hci1: Injecting HCI hardware error event [ 558.502598][ T5621] Bluetooth: hci1: hardware error 0x00 [ 558.542194][T15536] loop7: detected capacity change from 0 to 7 [ 558.614617][ T1297] lo_rw_aio(loop7) starting read with raw_refcnt=0x1, refcnt=2 [ 558.614937][T15536] Dev loop7: unable to read RDB block 7 [ 558.615187][T15536] loop7: unable to read partition table [ 558.615466][T15536] loop7: partition table beyond EOD, truncated [ 558.615513][T15536] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 558.698098][ T5804] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 558.753453][T13531] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 558.765467][ T5597] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 558.902404][ T5597] usb 6-1: device descriptor read/64, error -71 [ 558.938133][ T1194] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 559.012855][ T5597] usb usb6-port1: attempt power cycle [ 559.190202][T15543] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3416'. [ 559.372951][ T5597] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 559.395691][ T5597] usb 6-1: device descriptor read/8, error -71 [ 559.562785][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 559.572345][ T5804] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 559.572372][ T5804] em28xx 4-1:0.89: board has no eeprom [ 559.633715][ T5597] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 559.653823][ T5804] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 559.653856][ T5804] em28xx 4-1:0.89: analog set to bulk mode. [ 559.655878][T13606] em28xx 4-1:0.89: Registering V4L2 extension [ 559.657042][ T5597] usb 6-1: device descriptor read/8, error -71 [ 559.716769][ T5804] usb 4-1: USB disconnect, device number 95 [ 559.720770][ T5804] em28xx 4-1:0.89: Disconnecting em28xx [ 559.721206][T13606] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 559.721224][T13606] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 559.721235][T13606] em28xx 4-1:0.89: No AC97 audio processor [ 559.738511][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 559.777493][ T5597] usb usb6-port1: unable to enumerate USB device [ 559.827660][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 559.827688][ T10] usb 2-1: config 0 has no interface number 0 [ 559.827730][ T10] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 559.827752][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 559.838951][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 559.838985][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.839005][ T10] usb 2-1: Product: syz [ 559.839021][ T10] usb 2-1: Manufacturer: syz [ 559.839044][ T10] usb 2-1: SerialNumber: syz [ 559.921847][T13606] usb 4-1: Decoder not found [ 559.921871][T13606] em28xx 4-1:0.89: failed to create media graph [ 559.921949][T13606] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 559.925520][ T10] usb 2-1: config 0 descriptor?? [ 560.000274][T13606] em28xx 4-1:0.89: Registering snapshot button... [ 560.059264][T13606] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input79 [ 560.149324][ T10] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 560.149793][ T10] cx231xx 2-1:0.1: Failed to read PCB config [ 560.149850][ T10] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 560.207818][T13606] em28xx 4-1:0.89: Remote control support is not available for this card. [ 560.207889][ T5804] em28xx 4-1:0.89: Closing input extension [ 560.208984][ T5804] em28xx 4-1:0.89: Deregistering snapshot button [ 560.245181][ T10] usb 2-1: USB disconnect, device number 27 [ 560.640251][ T5804] em28xx 4-1:0.89: Freeing device [ 560.723388][ T5621] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 560.783474][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 560.943435][ T5804] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 560.943465][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 560.949672][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 560.949702][ T10] usb 2-1: config 0 has no interface number 0 [ 560.949748][ T10] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 560.949771][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 560.952118][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 560.952147][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.952160][ T10] usb 2-1: Product: syz [ 560.952169][ T10] usb 2-1: Manufacturer: syz [ 560.952178][ T10] usb 2-1: SerialNumber: syz [ 561.046520][ T10] usb 2-1: config 0 descriptor?? [ 561.103502][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 561.105307][ T5804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.105330][ T5804] usb 4-1: config 0 has no interfaces? [ 561.105362][ T5804] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 561.105385][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.117906][ T5804] usb 4-1: config 0 descriptor?? [ 561.315862][ T10] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 561.316750][ T10] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 561.492943][ T5804] usb 4-1: USB disconnect, device number 96 [ 561.522784][ T10] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 561.523221][ T10] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 561.541738][ T10] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 561.542208][ T10] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 561.554453][ T10] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 561.554480][ T10] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -32 [ 561.662032][ T10] i2c i2c-2: Added multiplexed i2c bus 4 [ 561.673794][ T10] i2c i2c-2: Added multiplexed i2c bus 5 [ 561.674229][ T10] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 561.674252][ T10] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 561.731469][ T10] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 561.743971][ T10] usb 2-1: USB disconnect, device number 28 [ 562.904545][ T5804] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 563.056103][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 563.069323][ T5804] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 563.069359][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.076510][ T5804] usb 6-1: config 0 descriptor?? [ 563.311351][ T5804] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 563.312170][ T5804] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 563.312196][ T5804] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 563.508520][T15610] 9p: Bad value for 'wfdno' [ 563.513285][T15584] netlink: 'syz.5.3430': attribute type 3 has an invalid length. [ 563.570099][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.570179][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.629708][T15584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 564.944149][T15636] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 565.355840][ T5705] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 565.475853][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 565.505865][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 565.514922][ T5705] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 565.514972][ T5705] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.514999][ T5705] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.515013][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.587245][ T5705] usbtmc 2-1:16.0: bulk endpoints not found [ 565.646007][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 565.648682][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.648737][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 565.648761][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.695573][ T10] usb 4-1: config 0 descriptor?? [ 565.872211][T15648] binder: 15639:15648 ioctl 89f3 2000000004c0 returned -22 [ 565.951175][ T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 566.076540][T15650] netlink: 424 bytes leftover after parsing attributes in process `syz.4.3452'. [ 566.228264][ T1006] usb 4-1: USB disconnect, device number 97 [ 567.300661][T15668] fuse: Bad value for 'fd' [ 568.231719][ T10] usb 2-1: USB disconnect, device number 29 [ 568.718428][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 568.867644][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 568.871268][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.871304][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.871362][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 568.871407][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 568.871432][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.952116][ T10] usb 2-1: config 0 descriptor?? [ 569.432754][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.432781][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.432799][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.432817][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.432834][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.432852][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.432869][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.432886][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.433152][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.433185][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 569.434772][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 569.435132][ T10] HID 045e:07da: Invalid code 768 type 1 [ 569.435151][ T10] HID 045e:07da: Invalid code 769 type 1 [ 569.435166][ T10] HID 045e:07da: Invalid code 770 type 1 [ 569.435181][ T10] HID 045e:07da: Invalid code 771 type 1 [ 569.435195][ T10] HID 045e:07da: Invalid code 772 type 1 [ 569.435210][ T10] HID 045e:07da: Invalid code 773 type 1 [ 569.435224][ T10] HID 045e:07da: Invalid code 774 type 1 [ 569.435238][ T10] HID 045e:07da: Invalid code 775 type 1 [ 569.435253][ T10] HID 045e:07da: Invalid code 776 type 1 [ 569.620638][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0012/input/input80 [ 569.844975][ T10] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 569.879964][ T10] usb 2-1: USB disconnect, device number 30 [ 570.105349][T15705] fido_id[15705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 570.740729][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 570.918901][T13606] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 571.081508][T13606] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 571.081540][T13606] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 571.081559][T13606] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 571.081580][T13606] usb 2-1: config 220 has no interface number 2 [ 571.081647][T13606] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 571.081676][T13606] usb 2-1: config 220 interface 0 has no altsetting 0 [ 571.081695][T13606] usb 2-1: config 220 interface 76 has no altsetting 0 [ 571.081714][T13606] usb 2-1: config 220 interface 1 has no altsetting 0 [ 571.084034][T13606] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 571.084063][T13606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.084120][T13606] usb 2-1: Product: syz [ 571.084132][T13606] usb 2-1: Manufacturer: syz [ 571.084145][T13606] usb 2-1: SerialNumber: syz [ 571.494726][T15730] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3475'. [ 571.640860][ T1006] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 571.771508][ T1006] usb 4-1: device descriptor read/64, error -71 [ 572.010361][ T1006] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 572.149665][ T1006] usb 4-1: device descriptor read/64, error -71 [ 572.260916][ T1006] usb usb4-port1: attempt power cycle [ 572.620115][ T1006] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 572.656072][ T1006] usb 4-1: device descriptor read/8, error -71 [ 572.891472][ T1006] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 572.910770][ T1006] usb 4-1: device descriptor read/8, error -71 [ 573.021777][ T1006] usb usb4-port1: unable to enumerate USB device [ 573.722443][T13606] usb 2-1: selecting invalid altsetting 0 [ 573.782726][T13606] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 573.782764][T13606] uvcvideo 2-1:220.0: No valid video chain found. [ 573.813810][T13606] usb 2-1: selecting invalid altsetting 0 [ 573.813849][T13606] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 573.823886][T13606] usb 2-1: USB disconnect, device number 31 [ 574.148929][ T38] audit: type=1326 audit(1780832630.148:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15742 comm="syz.1.3481" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e3d5ece59 code=0x0 [ 574.492409][ T1006] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 574.661008][ T1006] usb 2-1: Using ep0 maxpacket: 8 [ 574.663109][ T1006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.663166][ T1006] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 574.663189][ T1006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.665315][ T1006] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 574.665349][ T1006] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 574.665368][ T1006] usb 2-1: Product: syz [ 574.665377][ T1006] usb 2-1: Manufacturer: syz [ 574.665385][ T1006] usb 2-1: SerialNumber: syz [ 574.745208][ T1006] usb 2-1: config 0 descriptor?? [ 574.861964][ T1006] rc_core: IR keymap rc-imon-rsc not found [ 574.861985][ T1006] Registered IR keymap rc-empty [ 574.898618][ T1006] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 574.912131][ T1006] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input81 [ 574.966483][T15764] zonefs (nbd5) ERROR: Not a zoned block device [ 575.491194][ T1006] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 575.641680][ T1006] usb 4-1: Using ep0 maxpacket: 8 [ 575.644924][ T1006] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 575.644954][ T1006] usb 4-1: config 0 has no interface number 0 [ 575.645105][ T1006] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 575.645131][ T1006] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 575.645154][ T1006] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 575.645179][ T1006] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 575.645200][ T1006] usb 4-1: config 0 interface 186 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 575.645326][ T1006] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.756884][ T1006] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 575.756921][ T1006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.757045][ T1006] usb 4-1: Product: syz [ 575.757062][ T1006] usb 4-1: Manufacturer: syz [ 575.757077][ T1006] usb 4-1: SerialNumber: syz [ 575.803216][ T1006] usb 4-1: config 0 descriptor?? [ 575.821298][ T1006] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 576.014432][T13606] usb 4-1: USB disconnect, device number 102 [ 576.972307][T13606] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 577.096990][T15797] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 577.096990][T15797] program syz.4.3499 not setting count and/or reply_len properly [ 577.102213][T13606] usb 4-1: device descriptor read/64, error -71 [ 577.261802][ T32] usb 2-1: USB disconnect, device number 32 [ 577.392241][T13606] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 577.431956][T15804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.552360][T13606] usb 4-1: device descriptor read/64, error -71 [ 577.662853][T13606] usb usb4-port1: attempt power cycle [ 577.742552][ T32] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 577.892506][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 577.894625][ T32] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 577.894661][ T32] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 577.894676][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.002572][T13606] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 578.024838][T13606] usb 4-1: device descriptor read/8, error -71 [ 578.103670][T15804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.105670][T15804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.107652][ T32] usb 2-1: string descriptor 0 read error: -71 [ 578.108318][ T32] hub 2-1:32.0: USB hub found [ 578.111770][ T32] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 578.286135][T13606] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 578.306721][T13606] usb 4-1: device descriptor read/8, error -71 [ 578.427551][T13606] usb usb4-port1: unable to enumerate USB device [ 578.541050][ T32] usb 2-1: USB disconnect, device number 33 [ 579.163243][ T32] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 579.293432][ T32] usb 2-1: device descriptor read/64, error -71 [ 579.582452][ T32] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 579.735467][ T32] usb 2-1: device descriptor read/64, error -71 [ 579.843826][ T32] usb usb2-port1: attempt power cycle [ 580.096638][ T1261] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 580.183799][ T32] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 580.204422][ T32] usb 2-1: device descriptor read/8, error -71 [ 580.273822][ T1261] usb 4-1: Using ep0 maxpacket: 16 [ 580.275977][ T1261] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.276006][ T1261] usb 4-1: config 0 interface 0 has no altsetting 0 [ 580.276028][ T1261] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 580.276043][ T1261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.280116][ T1261] usb 4-1: config 0 descriptor?? [ 580.443880][ T32] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 580.465057][ T32] usb 2-1: device descriptor read/8, error -71 [ 580.574576][ T32] usb usb2-port1: unable to enumerate USB device [ 580.730538][ T1261] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 581.104948][ T32] usb 4-1: USB disconnect, device number 107 [ 581.660859][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3515'. [ 581.964727][ T32] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 582.064106][T15847] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3519'. [ 582.482235][ T38] audit: type=1326 audit(1780832638.473:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.3520" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e3d5ece59 code=0x0 [ 583.004737][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3523'. [ 583.083753][T15859] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 583.632346][T15866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3526'. [ 583.644511][T15866] netlink: 'syz.1.3526': attribute type 10 has an invalid length. [ 583.644534][T15866] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3526'. [ 584.757916][ T32] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 584.757959][ T32] usb 4-1: can't read configurations, error -71 [ 584.836245][ T1261] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 584.996208][ T1261] usb 2-1: Using ep0 maxpacket: 16 [ 584.999279][ T1261] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 584.999309][ T1261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.999328][ T1261] usb 2-1: config 0 has no interface number 0 [ 585.001432][ T1261] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 585.001462][ T1261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.001475][ T1261] usb 2-1: Product: syz [ 585.001483][ T1261] usb 2-1: Manufacturer: syz [ 585.001492][ T1261] usb 2-1: SerialNumber: syz [ 585.004372][T15883] overlayfs: failed to clone upperpath [ 585.079361][ T1261] usb 2-1: config 0 descriptor?? [ 585.100755][ T1261] uvcvideo 2-1:0.105: Found Unit with invalid ID 0 [ 585.100816][ T1261] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 585.100880][ T1261] uvcvideo 2-1:0.105: No valid video chain found. [ 585.317870][T15870] block nbd0: not configured, cannot reconfigure [ 585.342321][T13606] usb 2-1: USB disconnect, device number 38 [ 585.711909][T15900] veth0: entered promiscuous mode [ 585.730243][T15900] QAT: failed to copy from user cfg_data. [ 585.731130][T15899] veth0: left promiscuous mode [ 586.280434][ T38] audit: type=1800 audit(1780832642.261:30): pid=15920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3544" name="file1" dev="overlay" ino=674 res=0 errno=0 [ 586.773243][T15939] overlayfs: failed to clone upperpath [ 587.199327][ T38] audit: type=1800 audit(1780832643.181:31): pid=15947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3556" name="file1" dev="overlay" ino=1090 res=0 errno=0 [ 587.513752][T15951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3559'. [ 587.778896][ T10] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 587.846457][T15968] kAFS: No cell specified [ 587.851806][T15968] netlink: 1053 bytes leftover after parsing attributes in process `syz.5.3565'. [ 587.851831][T15968] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 587.932990][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 587.933891][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 587.958933][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 587.958966][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.958985][ T10] usb 4-1: Product: 㠁 [ 587.959000][ T10] usb 4-1: SerialNumber: syz [ 588.100248][T15975] netlink: 'syz.4.3568': attribute type 10 has an invalid length. [ 588.100273][T15975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3568'. [ 588.129805][T15975] team0: entered promiscuous mode [ 588.130055][T15975] team_slave_0: entered promiscuous mode [ 588.131194][T15975] team_slave_1: entered promiscuous mode [ 588.138657][T15975] team0: entered allmulticast mode [ 588.138680][T15975] team_slave_0: entered allmulticast mode [ 588.138708][T15975] team_slave_1: entered allmulticast mode [ 588.155002][ T5760] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 588.178034][T15975] bridge0: port 4(team0) entered blocking state [ 588.178372][T15975] bridge0: port 4(team0) entered disabled state [ 588.211147][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 588.280217][T15975] bridge0: port 4(team0) entered blocking state [ 588.280488][T15975] bridge0: port 4(team0) entered forwarding state [ 588.321276][ T10] usb 4-1: USB disconnect, device number 110 [ 588.360149][ T5760] usb 2-1: Using ep0 maxpacket: 8 [ 588.362760][ T5760] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 588.362797][ T5760] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 588.362831][ T5760] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.362856][ T5760] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.362900][ T5760] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.362922][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.451529][T13485] udevd[13485]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.612081][T15978] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 588.715416][T15971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.716123][T15971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.731482][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.731589][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.731680][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.731766][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.731857][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.731940][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.732026][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.732112][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.732208][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.732295][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.734041][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.734144][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.734245][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.734348][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.735763][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.735862][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.735999][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.736097][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.754555][T15982] binder: 15979:15982 ioctl c00c620f 200000001100 returned -22 [ 588.755667][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.755774][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.755862][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.755960][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.756140][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.756229][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.756315][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.756411][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.756497][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.756590][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.756677][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.756768][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.760517][T15980] binder: 15979:15980 ioctl 40086e81 200000000080 returned -22 [ 588.769071][T15984] syzkaller1: entered promiscuous mode [ 588.770462][T15984] syzkaller1: entered allmulticast mode [ 588.843243][ T5760] usb 2-1: GET_CAPABILITIES returned 0 [ 588.843295][ T5760] usbtmc 2-1:16.0: can't read capabilities [ 588.976305][T15987] Bluetooth: MGMT ver 1.23 [ 589.212017][T15987] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3571'. [ 590.084217][ T44] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 590.269358][ T10] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 590.426490][ T10] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 590.426522][ T10] usb 4-1: config 0 has no interface number 0 [ 590.446444][ T10] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 590.446478][ T10] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 590.446499][ T10] usb 4-1: Manufacturer: syz [ 590.446515][ T10] usb 4-1: SerialNumber: syz [ 590.457735][ T10] usb 4-1: config 0 descriptor?? [ 591.060808][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 591.061236][ T5612] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 591.171741][ T1261] usb 2-1: USB disconnect, device number 39 [ 591.680489][ T1261] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 591.840628][ T1261] usb 2-1: Using ep0 maxpacket: 8 [ 591.844248][ T1261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 591.844295][ T1261] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 591.844310][ T1261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.851276][ T1261] usb 2-1: config 0 descriptor?? [ 592.105077][ T1261] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 592.896014][ T1261] usb 2-1: USB disconnect, device number 40 [ 592.896100][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 593.039453][ T5760] usb 4-1: USB disconnect, device number 111 [ 593.106173][T16048] 9p: Unknown access argument 18446744073709551615: -34 [ 593.452276][ T5760] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 593.600783][ T5760] usb 4-1: Using ep0 maxpacket: 8 [ 593.607007][ T5760] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 593.607041][ T5760] usb 4-1: config 0 has no interface number 0 [ 593.609389][ T5760] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 593.609423][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.609445][ T5760] usb 4-1: Product: syz [ 593.609461][ T5760] usb 4-1: Manufacturer: syz [ 593.609476][ T5760] usb 4-1: SerialNumber: syz [ 593.646915][ T5760] usb 4-1: config 0 descriptor?? [ 593.899968][ T5760] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 593.900065][ T5760] uvcvideo 4-1:0.31: No valid video chain found. [ 594.097588][T16059] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3599'. [ 594.124795][T16048] input: syz0 as /devices/virtual/input/input82 [ 594.149184][T16048] input: syz1 as /devices/virtual/input/input83 [ 594.174397][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3600'. [ 594.693864][ T32] usb 4-1: USB disconnect, device number 112 [ 595.330646][T13485] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 596.152696][T16088] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3609'. [ 596.305392][T16097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3612'. [ 596.359839][T16100] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3613'. [ 596.397420][T16097] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 596.397444][T16097] overlayfs: failed to set xattr on upper [ 596.397449][T16097] overlayfs: ...falling back to redirect_dir=nofollow. [ 596.397454][T16097] overlayfs: ...falling back to index=off. [ 596.397459][T16097] overlayfs: ...falling back to uuid=null. [ 596.462330][ T5760] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 596.605902][T16104] vimc link validate: Sensor B:src:254x16 (0x33424752, 9, 1, 6, 8) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 596.624780][ T5760] usb 4-1: Using ep0 maxpacket: 8 [ 596.627265][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 596.627313][ T5760] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 596.627337][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.671046][ T5760] usb 4-1: config 0 descriptor?? [ 596.947736][ T5760] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 597.132264][ T10] usb 4-1: USB disconnect, device number 113 [ 597.132371][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 597.163528][ T5616] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 597.287571][T16117] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3618'. [ 597.296006][ T5616] usb 2-1: device descriptor read/64, error -71 [ 597.532899][ T5616] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 597.664543][ T5616] usb 2-1: device descriptor read/64, error -71 [ 597.773876][ T5616] usb usb2-port1: attempt power cycle [ 598.114395][ T5616] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 598.133824][ T5616] usb 2-1: device descriptor read/8, error -71 [ 598.165432][T16126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3622'. [ 598.247938][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3622'. [ 598.374704][ T5616] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 598.394036][ T5616] usb 2-1: device descriptor read/8, error -71 [ 598.503838][ T5616] usb usb2-port1: unable to enumerate USB device [ 599.065213][T16134] binder: 16133:16134 ioctl c0306201 0 returned -14 [ 599.069966][T16134] kernel profiling enabled (shift: 3) [ 599.428249][T16142] netlink: 'syz.4.3628': attribute type 2 has an invalid length. [ 600.154289][ T5616] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 600.186570][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 600.307649][ T5616] usb 2-1: Using ep0 maxpacket: 8 [ 600.329728][ T5616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.329768][ T5616] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 600.329782][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.346452][ T5616] usb 2-1: config 0 descriptor?? [ 600.541936][T16168] fuse: fd is not a fuse device [ 600.579697][ T5616] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 600.782975][ T5760] usb 2-1: USB disconnect, device number 45 [ 600.783098][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 601.070575][ T38] audit: type=1326 audit(1780832657.054:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16169 comm="syz.5.3640" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c59d1ce59 code=0x7fc00000 [ 601.070991][ T38] audit: type=1326 audit(1780832657.054:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16169 comm="syz.5.3640" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c59d1ce59 code=0x7fc00000 [ 601.616643][ T38] audit: type=1326 audit(1780832657.603:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.4.3648" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3baebbce59 code=0x0 [ 602.258754][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 602.380860][T13485] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 602.382881][T13485] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 602.498178][T16212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3655'. [ 602.499040][T16212] Unknown options in mask b7f2 [ 602.611518][T16212] befs: (nbd1): No write support. Marking filesystem read-only [ 603.000844][ T5705] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 603.156141][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 603.157011][ T5705] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 603.158169][ T5705] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.158194][ T5705] usb 2-1: config 0 has no interface number 0 [ 603.158241][ T5705] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.158265][ T5705] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.160002][ T5705] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.160028][ T5705] usb 2-1: config 0 has no interface number 0 [ 603.160073][ T5705] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.160096][ T5705] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.161230][ T5705] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.161254][ T5705] usb 2-1: config 0 has no interface number 0 [ 603.161298][ T5705] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.161321][ T5705] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.162561][ T5705] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.162585][ T5705] usb 2-1: config 0 has no interface number 0 [ 603.162631][ T5705] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.162655][ T5705] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.163860][ T5705] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.163886][ T5705] usb 2-1: config 0 has no interface number 0 [ 603.163932][ T5705] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.163955][ T5705] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.165070][ T5705] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.165094][ T5705] usb 2-1: config 0 has no interface number 0 [ 603.165140][ T5705] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.165164][ T5705] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.209651][ T5705] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.209684][ T5705] usb 2-1: config 0 has no interface number 0 [ 603.209730][ T5705] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.209752][ T5705] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.211937][ T5705] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.211964][ T5705] usb 2-1: config 0 has no interface number 0 [ 603.212007][ T5705] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.212030][ T5705] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.221609][ T5705] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 603.221651][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.221673][ T5705] usb 2-1: Product: syz [ 603.221688][ T5705] usb 2-1: Manufacturer: syz [ 603.221704][ T5705] usb 2-1: SerialNumber: syz [ 603.247409][ T5705] usb 2-1: config 0 descriptor?? [ 603.266759][ T5705] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 603.566529][ T5705] etas_es58x 2-1:0.2: could not retrieve the product info string [ 603.863539][ T5705] usb 2-1: USB disconnect, device number 46 [ 603.902005][ T5705] etas_es58x 2-1:0.2: Disconnecting syz syz [ 604.434915][ T5621] Bluetooth: hci0: unexpected event for opcode 0x100c [ 604.435492][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3666'. [ 604.435544][T16242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3666'. [ 604.469867][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3666'. [ 604.472881][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3666'. [ 604.505444][ T5621] Bluetooth: hci0: unexpected event for opcode 0x100c [ 605.197733][ T5712] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 605.230240][ T5621] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 605.230490][ T5621] Bluetooth: hci3: Injecting HCI hardware error event [ 605.371784][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 605.372920][ T5712] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 605.372955][ T5712] usb 2-1: can't read configurations, error -71 [ 605.706770][T16262] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 606.390701][T16268] FAULT_INJECTION: forcing a failure. [ 606.390701][T16268] name failslab, interval 1, probability 0, space 0, times 0 [ 606.390740][T16268] CPU: 1 UID: 0 PID: 16268 Comm: syz.5.3676 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 606.390769][T16268] Tainted: [L]=SOFTLOCKUP [ 606.390777][T16268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.390789][T16268] Call Trace: [ 606.390798][T16268] [ 606.390808][T16268] dump_stack_lvl+0xe8/0x150 [ 606.390838][T16268] should_fail_ex+0x46b/0x600 [ 606.390869][T16268] should_failslab+0xa8/0x100 [ 606.390900][T16268] __kmalloc_noprof+0xdf/0x7b0 [ 606.390928][T16268] ? kfree+0x4d/0x6c0 [ 606.390952][T16268] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 606.390996][T16268] tomoyo_realpath_from_path+0xe3/0x5d0 [ 606.391029][T16268] ? tomoyo_domain+0xd7/0x130 [ 606.391056][T16268] ? tomoyo_path_number_perm+0x219/0x630 [ 606.391083][T16268] tomoyo_path_number_perm+0x246/0x630 [ 606.391112][T16268] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 606.391138][T16268] ? __lock_acquire+0x6b5/0x2d10 [ 606.391163][T16268] ? do_raw_spin_lock+0x12b/0x2f0 [ 606.391222][T16268] ? __fget_files+0x2a/0x420 [ 606.391249][T16268] ? __fget_files+0x2a/0x420 [ 606.391272][T16268] ? __fget_files+0x3a6/0x420 [ 606.391295][T16268] ? __fget_files+0x2a/0x420 [ 606.391322][T16268] security_file_ioctl+0xc3/0x2a0 [ 606.391351][T16268] __se_sys_ioctl+0x47/0x170 [ 606.391380][T16268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.391403][T16268] do_syscall_64+0x15f/0xf80 [ 606.391423][T16268] ? trace_irq_disable+0x3b/0x140 [ 606.391453][T16268] ? clear_bhb_loop+0x40/0x90 [ 606.391477][T16268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.391497][T16268] RIP: 0033:0x7f6c59d1ce59 [ 606.391518][T16268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.391536][T16268] RSP: 002b:00007f6c57f4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.391558][T16268] RAX: ffffffffffffffda RBX: 00007f6c59f96090 RCX: 00007f6c59d1ce59 [ 606.391574][T16268] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 606.391589][T16268] RBP: 00007f6c57f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 606.391602][T16268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.391615][T16268] R13: 00007f6c59f96128 R14: 00007f6c59f96090 R15: 00007ffc67753d88 [ 606.391647][T16268] [ 606.391656][T16268] ERROR: Out of memory at tomoyo_realpath_from_path. [ 606.417567][ T5712] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 606.601224][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 606.617531][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 606.620805][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 606.620847][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 606.620894][ T5712] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 606.620921][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.634778][ T5712] usb 2-1: config 0 descriptor?? [ 606.868239][ T5612] Bluetooth: hci3: hardware error 0x00 [ 607.130024][ T5712] itetech 0003:06CB:73F5.0014: reserved main item tag 0xd [ 607.130112][ T5712] hid_parser_main: 5 callbacks suppressed [ 607.130128][ T5712] itetech 0003:06CB:73F5.0014: unknown main item tag 0x1 [ 607.130164][ T5712] itetech 0003:06CB:73F5.0014: unknown main item tag 0x1 [ 607.130193][ T5712] itetech 0003:06CB:73F5.0014: unknown main item tag 0x0 [ 607.130220][ T5712] itetech 0003:06CB:73F5.0014: item fetching failed at offset 41/44 [ 607.130998][ T5712] itetech 0003:06CB:73F5.0014: probe with driver itetech failed with error -22 [ 607.254582][ T5760] usb 2-1: USB disconnect, device number 48 [ 607.450487][T16289] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3684'. [ 608.118377][ T5712] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 608.268502][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 608.275178][ T5712] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 608.275213][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.275236][ T5712] usb 2-1: Product: syz [ 608.275252][ T5712] usb 2-1: Manufacturer: syz [ 608.275268][ T5712] usb 2-1: SerialNumber: syz [ 608.320685][ T5712] usb 2-1: config 0 descriptor?? [ 608.351983][T16300] netlink: 620 bytes leftover after parsing attributes in process `syz.5.3689'. [ 608.552230][T16295] 8021q: VLANs not supported on lo [ 609.012432][ T5712] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 609.030102][ T5712] usb 2-1: USB disconnect, device number 49 [ 609.159847][ T5612] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 611.299976][T16166] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 611.450014][T16166] usb 2-1: Using ep0 maxpacket: 32 [ 611.451907][T16166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.451928][T16166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.451952][T16166] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 611.451966][T16166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.455598][T16166] usb 2-1: config 0 descriptor?? [ 611.489021][T16166] hub 2-1:0.0: USB hub found [ 611.663633][T16166] hub 2-1:0.0: 1 port detected [ 612.269711][T16166] hub 2-1:0.0: activate --> -90 [ 612.704548][T16342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.705264][T16342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.729995][ T1261] usb 2-1: USB disconnect, device number 50 [ 612.982465][T16166] usb 2-1-port1: config error [ 613.275805][T16370] IPVS: length: 25 != 8 [ 613.288188][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 613.288207][T16370] nbd: illegal input index 7304192 [ 615.221450][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 615.256567][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 615.264493][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 615.276387][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 615.277178][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 616.550958][T16417] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.551218][T16417] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.551435][T16417] bridge_slave_0: entered allmulticast mode [ 616.554539][T16417] bridge_slave_0: entered promiscuous mode [ 616.564463][T16417] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.564833][T16417] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.565133][T16417] bridge_slave_1: entered allmulticast mode [ 616.568455][T16417] bridge_slave_1: entered promiscuous mode [ 616.629176][T16417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.641620][T16417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.682284][T16417] team0: Port device team_slave_0 added [ 616.689009][T16417] team0: Port device team_slave_1 added [ 616.740596][T16417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.740609][T16417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.740626][T16417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.745165][T16417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.745183][T16417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.745209][T16417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.902306][T16417] hsr_slave_0: entered promiscuous mode [ 616.909991][T16417] hsr_slave_1: entered promiscuous mode [ 616.912025][T16417] debugfs: 'hsr0' already exists in 'hsr' [ 616.912057][T16417] Cannot create hsr debugfs directory [ 617.184250][T16468] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3751'. [ 617.325465][ T5612] Bluetooth: hci2: command tx timeout [ 617.792780][T16483] sock: sock_timestamping_bind_phc: sock not bind to device [ 618.203317][T16488] fuse: fd is not a fuse device [ 618.980357][T16417] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 619.003608][T16417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 619.005764][T16417] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 619.170058][T16417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 619.171293][T16417] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 619.198746][T16417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.199830][T16417] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 619.222271][T16417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.371665][T16417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.398384][ T5612] Bluetooth: hci2: command tx timeout [ 619.445940][T16417] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.463051][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.463202][ T9344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.479595][ T9344] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.479740][ T9344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.974643][T16526] mmap: syz.4.3770 (16526): VmData 37728256 exceed data ulimit 24. Update limits or use boot option ignore_rlimit_data. [ 620.263426][T16540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3775'. [ 620.383310][T16544] netlink: 'syz.4.3776': attribute type 1 has an invalid length. [ 620.618414][T16417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.958286][T16417] veth0_vlan: entered promiscuous mode [ 620.978842][T16417] veth1_vlan: entered promiscuous mode [ 621.093271][T16565] overlayfs: failed to clone upperpath [ 621.127676][T11880] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 621.289993][T16417] veth0_macvtap: entered promiscuous mode [ 621.318906][T16572] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 621.321585][T16417] veth1_macvtap: entered promiscuous mode [ 621.413701][T16417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.455800][T16417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.475608][ T5612] Bluetooth: hci2: command tx timeout [ 621.588979][ T1297] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.589177][ T1297] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.589260][ T1297] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.589296][ T1297] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.348404][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.348423][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.571499][ T5612] Bluetooth: hci2: command tx timeout [ 623.834881][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.834902][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.148160][T16617] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3801'. [ 624.150981][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3801'. [ 624.346713][ T5705] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 624.502178][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 624.504429][ T5705] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 624.504458][ T5705] usb 2-1: config 0 has no interface number 0 [ 624.539763][ T5705] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 624.539797][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.539819][ T5705] usb 2-1: Product: syz [ 624.539835][ T5705] usb 2-1: Manufacturer: syz [ 624.539851][ T5705] usb 2-1: SerialNumber: syz [ 624.550712][ T5705] usb 2-1: config 0 descriptor?? [ 624.562769][ T5705] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 624.901191][ T5705] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 624.923388][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3809'. [ 624.923412][T16637] tc_dump_action: action bad kind [ 625.029703][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.029948][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.069214][ T5705] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 625.951784][ T5804] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 625.951931][ T5804] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 626.020637][ T5804] usb 6-1: USB disconnect, device number 50 [ 626.400902][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 626.405634][ T5760] usb 2-1: USB disconnect, device number 51 [ 626.466896][ T5760] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 626.501403][ T5760] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 626.504908][ T5760] quatech2 2-1:0.51: device disconnected [ 627.108048][ T5760] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 627.276123][ T5760] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 627.276160][ T5760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.276182][ T5760] usb 7-1: Product: syz [ 627.276198][ T5760] usb 7-1: Manufacturer: syz [ 627.276213][ T5760] usb 7-1: SerialNumber: syz [ 627.321116][ T5760] usb 7-1: config 0 descriptor?? [ 627.341541][ T5705] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 627.488181][ T5705] usb 6-1: Using ep0 maxpacket: 8 [ 627.494247][ T5705] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 627.494419][ T5705] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 627.494448][ T5705] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 627.494473][ T5705] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.494511][ T5705] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 627.494535][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.626127][ T5760] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 627.812925][ T5705] usb 6-1: GET_CAPABILITIES returned 0 [ 627.812965][ T5705] usbtmc 6-1:16.0: can't read capabilities [ 628.297693][T16676] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3824'. [ 628.424757][ T5760] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 628.496518][ T5760] usb 7-1: USB disconnect, device number 2 [ 629.217877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 629.437871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 631.257985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 733.594186][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 733.594203][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16675 [ 733.594223][ C1] rcu: (detected by 1, t=10502 jiffies, g=85657, q=820 ncpus=2) [ 733.594238][ C1] task:syz.5.3824 state:R running task stack:24824 pid:16675 tgid:16675 ppid:14137 task_flags:0x400040 flags:0x00080002 [ 733.594271][ C1] Call Trace: [ 733.594280][ C1] [ 733.594287][ C1] sched_show_task+0x4aa/0x5f0 [ 733.594311][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 733.594324][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 733.594344][ C1] ? wq_watchdog_touch+0x100/0x160 [ 733.594359][ C1] print_other_cpu_stall+0xfca/0x1380 [ 733.594381][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 733.594397][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 733.594422][ C1] rcu_sched_clock_irq+0x939/0x1050 [ 733.594439][ C1] update_process_times+0x234/0x2d0 [ 733.594453][ C1] tick_nohz_handler+0x42b/0x770 [ 733.594468][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 733.594482][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 733.594494][ C1] __hrtimer_run_queues+0x3bc/0xb10 [ 733.594517][ C1] hrtimer_interrupt+0x455/0x950 [ 733.594543][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 733.594559][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 733.594577][ C1] [ 733.594582][ C1] [ 733.594586][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 733.594600][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 733.594619][ C1] Code: f7 e8 4d 42 6a f6 f7 c3 00 02 00 00 74 05 e8 90 1d 96 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a4 cf 5c f6 65 8b 05 cd 5f 5e 07 85 c0 74 18 5b 41 5e c3 cc cc [ 733.594629][ C1] RSP: 0018:ffffc900055bfc08 EFLAGS: 00000206 [ 733.594639][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000002 [ 733.594647][ C1] RDX: 0000000000000006 RSI: ffffffff8d747b0a RDI: 0000000000000001 [ 733.594654][ C1] RBP: ffffc900055bfce0 R08: ffffffff8facd3f7 R09: 1ffffffff1f59a7e [ 733.594662][ C1] R10: dffffc0000000000 R11: fffffbfff1f59a7f R12: 1ffff92000ab7f8d [ 733.594670][ C1] R13: 0000000000000246 R14: ffffffff8e9e23e0 R15: ffffc900055bfc60 [ 733.594686][ C1] rt_spin_lock+0x17a/0x400 [ 733.594702][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 733.594718][ C1] ? rt_spin_unlock+0x160/0x200 [ 733.594733][ C1] vga_arb_release+0x1fb/0x5c0 [ 733.594749][ C1] ? __pfx_vga_arb_release+0x10/0x10 [ 733.594762][ C1] __fput+0x461/0xa70 [ 733.594788][ C1] task_work_run+0x1d9/0x270 [ 733.594802][ C1] ? __pfx_task_work_run+0x10/0x10 [ 733.594823][ C1] exit_to_user_mode_loop+0xf3/0x4d0 [ 733.594839][ C1] ? rcu_is_watching+0x15/0xb0 [ 733.594853][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.594865][ C1] do_syscall_64+0x33e/0xf80 [ 733.594877][ C1] ? clear_bhb_loop+0x40/0x90 [ 733.594890][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.594901][ C1] RIP: 0033:0x7f6c59d1ce59 [ 733.594915][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.594924][ C1] RSP: 002b:00007ffc67753ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 733.594935][ C1] RAX: 0000000000000000 RBX: 00007f6c59f97da0 RCX: 00007f6c59d1ce59 [ 733.594943][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 733.594950][ C1] RBP: 00007f6c59f97da0 R08: 0000000000000006 R09: 0000000000000000 [ 733.594957][ C1] R10: 000000000003fcc0 R11: 0000000000000246 R12: 0000000000099f28 [ 733.594964][ C1] R13: 00007f6c59f9618c R14: 00000000000993a1 R15: 00007f6c59f96180 [ 733.594980][ C1] [ 733.594985][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9690 jiffies! g85657 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 733.594998][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=39264 [ 733.595004][ C1] rcu: rcu_preempt kthread starved for 9691 jiffies! g85657 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 733.595016][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 733.595022][ C1] rcu: RCU grace-period kthread stack dump: [ 733.595026][ C1] task:rcu_preempt state:I stack:27640 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 733.595055][ C1] Call Trace: [ 733.595059][ C1] [ 733.595065][ C1] __schedule+0x16f9/0x5500 [ 733.595095][ C1] ? __pfx___schedule+0x10/0x10 [ 733.595114][ C1] ? schedule+0x90/0x360 [ 733.595131][ C1] schedule+0x164/0x360 [ 733.595147][ C1] schedule_timeout+0x158/0x2c0 [ 733.595163][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 733.595179][ C1] ? __pfx_process_timeout+0x10/0x10