last executing test programs: 7.753887946s ago: executing program 3 (id=923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x166}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xbd}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x1) 7.272100283s ago: executing program 3 (id=926): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000240)) 6.6309978s ago: executing program 3 (id=929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x10000) sendmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000002c0)="ab47ee4d656a", 0x6}, {0x0}], 0x2}}], 0x1, 0x8000) sendfile(r0, r1, 0x0, 0x7ffff004) 6.354062005s ago: executing program 3 (id=933): socket$kcm(0xa, 0x3, 0x11) socket(0x11, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2d, {0x9, 0x0, 0x200001, 0x0, 0x0, 0x400}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x60000600) 3.770788621s ago: executing program 1 (id=945): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0xfffffc01, 0x81, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) close(r1) 3.630438754s ago: executing program 2 (id=947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xd, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1, 0x1e9, 0x400, 0x1, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.134660682s ago: executing program 4 (id=949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x166}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xbd}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x1) 2.948237712s ago: executing program 2 (id=950): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x0, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x1, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) writev(r2, &(0x7f0000002740)=[{&(0x7f0000002680)="fd", 0x1}], 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xe8e, 0x0, 0x0, 0x7}, &(0x7f0000000140)=0x18) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@host}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x1, 'vlan0\x00', {}, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.484464676s ago: executing program 1 (id=952): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x61, 0x66, 0x32, 0x63, 0x39, 0x66, 0x39, 0x65, 0x33, 0x31, 0x59, 0x35, 0x34, 0x35, 0x37, 0x31]}, &(0x7f0000000640)={0x0, "00f621330555666f8899aabbccdd04ff0011223322000000000080778899aabbccdd2acc9df0ddeeff000000000000000000000000000000000000003e00", 0x11}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x31, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x64, 0x62, 0x32, 0x65, 0x36, 0x65, 0x37, 0x62, 0x61, 0x35, 0x61, 0x34, 0x35, 0x34, 0x63, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x50}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x66, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x31, 0x30, 0x36, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='big_key\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0) 2.479648328s ago: executing program 2 (id=953): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r2}}, 0x30) 2.365627589s ago: executing program 0 (id=954): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x10000) sendmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000002c0)="ab47ee4d656a", 0x6}, {0x0}], 0x2}}], 0x1, 0x8000) sendfile(r0, r1, 0x0, 0x7ffff004) 2.125222492s ago: executing program 0 (id=955): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccefb6719c41902e10c71b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d0dd37ef6d8a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x2010a00) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) sendfile(r2, r0, 0x0, 0x1002000ff) 2.124769958s ago: executing program 2 (id=956): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000007c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040b0b19c9"], 0xe) mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.939943989s ago: executing program 3 (id=959): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x18e) truncate(&(0x7f0000000900)='./file1\x00', 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.875138742s ago: executing program 4 (id=960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xd, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1, 0x1e9, 0x400, 0x1, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.691574741s ago: executing program 1 (id=961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "fff5000000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 1.299138296s ago: executing program 1 (id=962): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0xfffffc01, 0x81, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) close(r1) 1.183815231s ago: executing program 2 (id=963): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x0, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x1, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) writev(r2, &(0x7f0000002740)=[{&(0x7f0000002680)="fd", 0x1}], 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) readv(0xffffffffffffffff, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xe8e, 0x0, 0x0, 0x7}, &(0x7f0000000140)=0x18) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@host}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x1, 'vlan0\x00', {}, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.029399643s ago: executing program 4 (id=964): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) socket(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x3, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 739.128285ms ago: executing program 4 (id=965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 680.437675ms ago: executing program 2 (id=966): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x80000045, [0x2, 0x6]}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x106, 0x1}}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) close(0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) mmap(&(0x7f000014f000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r6, 0x94eb000) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x12000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x3], [0x0, 0x1001000, 0x800001, 0x4], [0x0, 0x401, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001"], 0xbc}}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket(0x400000000010, 0x3, 0x0) 599.583659ms ago: executing program 0 (id=967): syz_emit_ethernet(0x28, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x6c, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x3d, 0x3, [{0x0, 0x12, "08009a8c5903040000527c706ca03a06"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x5, "cfa11c"}]}]}}}}}}}, 0x0) 385.521677ms ago: executing program 0 (id=968): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@s={0x5, @generic=0xd, 0x9, 0x79}) 351.380782ms ago: executing program 4 (id=969): socket$kcm(0xa, 0x3, 0x11) socket(0x11, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x60000600) 310.402175ms ago: executing program 0 (id=970): syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x8, 0x0, 0xfb, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000007c0)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 166.799817ms ago: executing program 1 (id=971): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 133.133709ms ago: executing program 0 (id=972): syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000500000000000000b3610000069078ac1414", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) unshare(0x20000400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f0000000080)=0x9, 0x200000000005, 0x6) r2 = syz_io_uring_setup(0xd04, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SOCKET={0x2d, 0x1, 0x0, 0xf, 0x8, 0x0, 0x5a69, 0x0, 0x1, {0x0, 0x0, 0x9}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = userfaultfd(0xc9c39f2120da284) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000380)='100000', 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r8, &(0x7f0000000200)='1', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r9, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x1) fchdir(r11) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000040)=ANY=[@ANYRESDEC=r8], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xfef, &(0x7f00000008c0)=""/4079, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe979}, 0x94) 0s ago: executing program 3 (id=973): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000007c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040b0b19c9"], 0xe) mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x96, priority 10 [ 200.903049][ T5732] usb 2-1: device descriptor read/64, error -71 [ 200.936876][ T7310] Set syz1 is full, maxelem 6117 reached [ 201.141933][ T5732] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 201.272683][ T5732] usb 2-1: device descriptor read/64, error -71 [ 201.392510][ T5732] usb usb2-port1: attempt power cycle [ 201.413058][ T7326] netlink: 104 bytes leftover after parsing attributes in process `syz.3.515'. [ 201.771395][ T5732] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 201.795337][ T5732] usb 2-1: device descriptor read/8, error -71 [ 202.072462][ T5732] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.239629][ T5732] usb 2-1: device descriptor read/8, error -71 [ 202.362714][ T5732] usb usb2-port1: unable to enumerate USB device [ 202.457183][ T27] tipc: Node number set to 4269801488 [ 202.620866][ T7337] loop3: detected capacity change from 0 to 1024 [ 202.675384][ T7337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.972815][ T33] audit: type=1800 audit(1789218275.423:35): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.520" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 202.973908][ T33] audit: type=1800 audit(1789218275.423:36): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.520" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 203.149556][ T7350] raw_sendmsg: syz.2.523 forgot to set AF_INET. Fix it! [ 203.565880][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.681574][ T7362] fuse: Unknown parameter '0x0000000000000007' [ 203.690457][ T7362] fuse: Unknown parameter 'use00000000000000000000' [ 203.824520][ T7367] netlink: 48 bytes leftover after parsing attributes in process `syz.3.528'. [ 205.254257][ T7383] loop1: detected capacity change from 0 to 128 [ 206.152428][ T7383] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.153089][ T7383] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.007369][ T5623] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.051273][ T5725] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 207.224772][ T5725] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 207.225888][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.259109][ T5725] usb 4-1: config 0 descriptor?? [ 207.751305][ T993] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.902447][ T993] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.903723][ T993] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.903752][ T993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.903772][ T993] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.903818][ T993] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.905643][ T993] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.905668][ T993] usb 2-1: Product: syz [ 207.905684][ T993] usb 2-1: Manufacturer: syz [ 207.946860][ T993] cdc_wdm 2-1:1.0: skipping garbage [ 207.947016][ T993] cdc_wdm 2-1:1.0: skipping garbage [ 207.966335][ T993] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 207.966402][ T993] cdc_wdm 2-1:1.0: Unknown control protocol [ 208.617415][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 209.119131][ T27] usb 2-1: USB disconnect, device number 17 [ 209.536626][ T7429] loop2: detected capacity change from 0 to 128 [ 209.758310][ T7429] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.777636][ T7429] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.423849][ T993] usb 4-1: USB disconnect, device number 14 [ 210.623755][ T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 210.904799][ T7442] loop3: detected capacity change from 0 to 4096 [ 211.391379][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 211.440968][ T7442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.440994][ T7442] EXT4-fs (loop3): Test dummy encryption mode enabled [ 211.498194][ T7442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.670918][ T5624] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.263749][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.302251][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 212.302308][ T27] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 212.322143][ T27] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 212.322185][ T27] usb 2-1: can't read configurations, error -71 [ 212.352654][ T5745] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 212.501989][ T5745] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.502963][ T5745] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 212.502989][ T5745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.503009][ T5745] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 212.503055][ T5745] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.504555][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.504580][ T5745] usb 1-1: Product: syz [ 212.504596][ T5745] usb 1-1: Manufacturer: syz [ 212.587500][ T5745] cdc_wdm 1-1:1.0: skipping garbage [ 212.587524][ T5745] cdc_wdm 1-1:1.0: skipping garbage [ 212.603453][ T5745] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 212.603476][ T5745] cdc_wdm 1-1:1.0: Unknown control protocol [ 212.711567][ T993] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 212.862532][ T993] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 212.865307][ T993] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.865384][ T993] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.865401][ T993] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 212.865433][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.974272][ T925] usb 1-1: USB disconnect, device number 16 [ 213.153424][ T993] dvb_ttusb_budget: ttusb_init_controller: error [ 213.153445][ T993] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 213.247553][ T993] DVB: Unable to find symbol stv0299_attach() [ 213.314793][ T993] DVB: Unable to find symbol tda8083_attach() [ 213.314811][ T993] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 213.408213][ T5607] usb 3-1: USB disconnect, device number 13 [ 213.724307][ T7456] Set syz1 is full, maxelem 65536 reached [ 213.852673][ T5725] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 214.084758][ T7483] loop0: detected capacity change from 0 to 4096 [ 214.116978][ T7483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.117005][ T7483] EXT4-fs (loop0): Test dummy encryption mode enabled [ 214.182864][ T7483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.903406][ T7490] netlink: 52 bytes leftover after parsing attributes in process `syz.4.571'. [ 214.950332][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 214.951255][ T5725] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 214.956285][ T5725] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 214.956422][ T5725] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 214.956495][ T5725] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.956564][ T5725] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 214.973720][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.973802][ T5725] usb 4-1: Product: syz [ 214.973842][ T5725] usb 4-1: Manufacturer: syz [ 214.973879][ T5725] usb 4-1: SerialNumber: syz [ 215.261806][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 215.497321][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 215.515589][ T5725] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input20 [ 215.520549][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.571537][ T5725] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 215.571560][ T5725] (id 0x00) [ 215.722427][ T5725] rc_core: IR keymap rc-imon-pad not found [ 215.722447][ T5725] Registered IR keymap rc-empty [ 215.722549][ T5725] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 215.722574][ T5725] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 215.774605][ T5725] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 215.784027][ T5725] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input21 [ 215.815697][ T5725] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:15> initialized [ 216.016191][ T7472] imon:send_packet: task interrupted [ 216.016380][ T7472] imon:send_packet: packet tx failed (-512) [ 216.017821][ T7472] imon:vfd_write: send packet #0 failed [ 216.018214][ T7472] imon:send_packet: packet tx failed (-32) [ 216.041711][ T7472] imon:vfd_write: send packet #0 failed [ 216.062593][ T5725] usb 4-1: USB disconnect, device number 15 [ 216.501463][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 216.663479][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 216.665290][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.665353][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.665377][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 216.665420][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.740011][ T7521] netlink: 52 bytes leftover after parsing attributes in process `syz.3.582'. [ 216.966521][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 216.966557][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 217.111512][ T7526] batman_adv: batadv0: Adding interface: dummy0 [ 217.111531][ T7526] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.111559][ T7526] batman_adv: batadv0: Interface activated: dummy0 [ 217.170893][ T7526] batadv0: mtu less than device minimum [ 217.172496][ T7526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.173935][ T7526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.175398][ T7526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.176894][ T7526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.178408][ T7526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.179839][ T7526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.181363][ T7526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.182851][ T7526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.334349][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 217.334424][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 217.334452][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 217.334479][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 217.335122][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 217.363635][ T9] DVB: Unable to find symbol stv0299_attach() [ 217.531727][ T9] DVB: Unable to find symbol tda8083_attach() [ 217.531745][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 217.539934][ T9] usb 3-1: USB disconnect, device number 14 [ 217.571771][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 217.722528][ T27] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 217.725163][ T27] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 217.725191][ T27] usb 1-1: config 0 has no interface number 0 [ 217.725232][ T27] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.730426][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.730454][ T27] usb 1-1: Product: syz [ 217.730470][ T27] usb 1-1: Manufacturer: syz [ 217.730485][ T27] usb 1-1: SerialNumber: syz [ 217.803149][ T27] usb 1-1: config 0 descriptor?? [ 217.819600][ T27] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 218.123626][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 218.138077][ T5725] usb 1-1: USB disconnect, device number 17 [ 218.177665][ T5725] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 218.595747][ T7560] input: syz1 as /devices/virtual/input/input22 [ 218.644048][ T4937] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 219.361921][ T27] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 219.452962][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.602'. [ 219.452981][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.602'. [ 219.500042][ T7582] syzkaller0: entered promiscuous mode [ 219.500060][ T7582] syzkaller0: entered allmulticast mode [ 219.513380][ T27] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 219.514983][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.515043][ T27] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 219.515086][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.812564][ T993] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 219.890947][ T7591] loop0: detected capacity change from 0 to 4096 [ 219.899999][ T7591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.900016][ T7591] EXT4-fs (loop0): Test dummy encryption mode enabled [ 219.930784][ T7591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.951096][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 219.968295][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 219.983864][ T993] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 219.985000][ T993] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 219.985026][ T993] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 219.985068][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.062475][ T993] usb 3-1: probing VID:PID(0424:012C) [ 220.078623][ T993] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 220.078671][ T993] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 220.080740][ T993] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 220.080765][ T993] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 220.080785][ T993] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 220.186419][ T27] DVB: Unable to find symbol stv0299_attach() [ 220.279057][ T27] DVB: Unable to find symbol tda8083_attach() [ 220.279074][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 220.530377][ T993] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 220.640671][ T7600] loop3: detected capacity change from 0 to 8 [ 220.880054][ T993] vub300 3-1:1.0: probe with driver vub300 failed with error -22 [ 221.565802][ T993] usb 3-1: USB disconnect, device number 15 [ 222.964176][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.043456][ T925] usb 2-1: USB disconnect, device number 20 [ 223.370434][ T7607] input: syz1 as /devices/virtual/input/input23 [ 223.435274][ T4937] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 223.511274][ T925] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 223.673264][ T925] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.674513][ T925] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.674553][ T925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.674567][ T925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.674599][ T925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.676559][ T925] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.676584][ T925] usb 2-1: Product: syz [ 223.676600][ T925] usb 2-1: Manufacturer: syz [ 223.776067][ T925] cdc_wdm 2-1:1.0: skipping garbage [ 223.776091][ T925] cdc_wdm 2-1:1.0: skipping garbage [ 223.779455][ T925] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 223.779479][ T925] cdc_wdm 2-1:1.0: Unknown control protocol [ 223.825863][ T7617] syzkaller1: entered promiscuous mode [ 223.825888][ T7617] syzkaller1: entered allmulticast mode [ 224.092318][ T925] usb 2-1: USB disconnect, device number 21 [ 224.232148][ T7626] [U]  [ 224.268247][ T7626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'. [ 224.608705][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 225.409859][ T7652] input: syz1 as /devices/virtual/input/input24 [ 225.426802][ T4937] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 225.529805][ T7642] syzkaller0: entered promiscuous mode [ 225.529832][ T7642] syzkaller0: entered allmulticast mode [ 228.906560][ T7661] batman_adv: batadv0: Adding interface: dummy0 [ 228.906580][ T7661] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.906603][ T7661] batman_adv: batadv0: Interface activated: dummy0 [ 228.907522][ T7649] syzkaller0: entered promiscuous mode [ 228.907544][ T7649] syzkaller0: entered allmulticast mode [ 228.943311][ T7657] net_ratelimit: 11 callbacks suppressed [ 228.943367][ T7657] batadv0: mtu less than device minimum [ 228.946014][ T7657] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 228.949781][ T7657] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 228.953438][ T7657] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 228.956873][ T7657] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 228.960129][ T7657] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 228.963761][ T7657] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 228.967492][ T7657] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 228.970904][ T7657] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 228.974526][ T7657] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 229.431256][ T993] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 229.469317][ T7696] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 229.469624][ T7696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 229.602638][ T993] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.604303][ T993] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.604353][ T993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.604367][ T993] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.604399][ T993] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.607070][ T993] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.607090][ T993] usb 2-1: Product: syz [ 229.607100][ T993] usb 2-1: Manufacturer: syz [ 229.702759][ T993] cdc_wdm 2-1:1.0: skipping garbage [ 229.702787][ T993] cdc_wdm 2-1:1.0: skipping garbage [ 229.710494][ T993] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 229.710545][ T993] cdc_wdm 2-1:1.0: Unknown control protocol [ 230.035982][ T993] usb 2-1: USB disconnect, device number 22 [ 230.715624][ T7713] netlink: 104 bytes leftover after parsing attributes in process `syz.0.638'. [ 231.203109][ T7731] loop0: detected capacity change from 0 to 4096 [ 231.204758][ T7731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.204773][ T7731] EXT4-fs (loop0): Test dummy encryption mode enabled [ 231.209106][ T7731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.511715][ T925] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 231.684652][ T925] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.687063][ T925] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.687092][ T925] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.687183][ T925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.687231][ T925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.690566][ T925] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.690586][ T925] usb 5-1: Product: syz [ 231.690597][ T925] usb 5-1: Manufacturer: syz [ 231.783753][ T925] cdc_wdm 5-1:1.0: skipping garbage [ 231.783779][ T925] cdc_wdm 5-1:1.0: skipping garbage [ 231.788559][ T925] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 231.788587][ T925] cdc_wdm 5-1:1.0: Unknown control protocol [ 231.987549][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.225764][ T5725] usb 5-1: USB disconnect, device number 7 [ 232.934714][ T7773] loop3: detected capacity change from 0 to 4096 [ 232.949553][ T7773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.949578][ T7773] EXT4-fs (loop3): Test dummy encryption mode enabled [ 232.979777][ T7773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.698191][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.232409][ T993] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 234.394054][ T993] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.397213][ T993] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.397245][ T993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.397276][ T993] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.397323][ T993] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.455215][ T993] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.455239][ T993] usb 4-1: Product: syz [ 234.455250][ T993] usb 4-1: Manufacturer: syz [ 234.494443][ T993] cdc_wdm 4-1:1.0: skipping garbage [ 234.494465][ T993] cdc_wdm 4-1:1.0: skipping garbage [ 234.515463][ T993] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 234.515509][ T993] cdc_wdm 4-1:1.0: Unknown control protocol [ 234.862270][ T5759] usb 4-1: USB disconnect, device number 16 [ 235.135964][ T7812] syzkaller0: entered promiscuous mode [ 235.135990][ T7812] syzkaller0: entered allmulticast mode [ 235.411594][ T7814] loop2: detected capacity change from 0 to 4096 [ 235.439673][ T993] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 235.464884][ T7814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.464951][ T7814] EXT4-fs (loop2): Test dummy encryption mode enabled [ 235.576028][ T7814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.065251][ T993] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.105950][ T993] usb 2-1: not running at top speed; connect to a high speed hub [ 236.106113][ T993] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 236.161393][ T993] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 236.169190][ T993] usb 2-1: language id specifier not provided by device, defaulting to English [ 236.198527][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.198558][ T993] usb 2-1: Product: syz [ 236.198575][ T993] usb 2-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴♧틔ヮ篊敵龓 [ 236.198595][ T993] usb 2-1: SerialNumber: syz [ 236.681147][ T7786] netlink: 192 bytes leftover after parsing attributes in process `syz.1.667'. [ 237.138805][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.162621][ T993] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 237.377269][ T993] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 237.442851][ T993] usb 2-1: USB disconnect, device number 23 [ 237.498541][ T6265] udevd[6265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.711246][ T5732] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 237.861828][ T5732] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 237.862911][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.889152][ T5732] usb 4-1: config 0 descriptor?? [ 238.222449][ T993] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.376349][ T993] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.377857][ T993] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.377883][ T993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.377904][ T993] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.377936][ T993] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.380335][ T993] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.380363][ T993] usb 2-1: Product: syz [ 238.380379][ T993] usb 2-1: Manufacturer: syz [ 238.467622][ T993] cdc_wdm 2-1:1.0: skipping garbage [ 238.467646][ T993] cdc_wdm 2-1:1.0: skipping garbage [ 238.497896][ T993] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 238.497923][ T993] cdc_wdm 2-1:1.0: Unknown control protocol [ 238.769405][ T5607] usb 2-1: USB disconnect, device number 24 [ 239.366723][ T7869] netlink: 68 bytes leftover after parsing attributes in process `syz.0.689'. [ 239.548627][ T7873] fuse: Unknown parameter 'user_id00000000000000000000' [ 240.496672][ T5732] usb 4-1: USB disconnect, device number 17 [ 240.958156][ T7894] fuse: Unknown parameter '0x0000000000000007' [ 240.971734][ T7894] fuse: Unknown parameter 'use00000000000000000000' [ 241.022826][ T5732] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 241.173472][ T5732] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.180799][ T5732] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.180822][ T5732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.180836][ T5732] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.180869][ T5732] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.208135][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.208214][ T5732] usb 4-1: Product: syz [ 241.208257][ T5732] usb 4-1: Manufacturer: syz [ 241.274601][ T5732] cdc_wdm 4-1:1.0: skipping garbage [ 241.274625][ T5732] cdc_wdm 4-1:1.0: skipping garbage [ 241.295052][ T5732] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 241.295071][ T5732] cdc_wdm 4-1:1.0: Unknown control protocol [ 241.629714][ T5732] usb 4-1: USB disconnect, device number 18 [ 242.422031][ T5607] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 242.572542][ T5607] usb 1-1: Using ep0 maxpacket: 32 [ 242.573965][ T5607] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 242.576342][ T5607] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 242.576384][ T5607] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 242.576405][ T5607] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.576424][ T5607] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 242.581813][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.581883][ T5607] usb 1-1: Product: syz [ 242.581927][ T5607] usb 1-1: Manufacturer: syz [ 242.581969][ T5607] usb 1-1: SerialNumber: syz [ 242.687468][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 242.742652][ T5607] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input25 [ 242.911607][ T5607] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 242.911630][ T5607] (id 0x00) [ 243.104171][ T5607] rc_core: IR keymap rc-imon-pad not found [ 243.104191][ T5607] Registered IR keymap rc-empty [ 243.104264][ T5607] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 243.104284][ T5607] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 243.164497][ T5607] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 243.233812][ T5607] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input26 [ 243.259642][ T5607] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:18> initialized [ 243.320455][ T7927] loop1: detected capacity change from 0 to 1024 [ 243.417869][ T7927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.448076][ T5732] usb 1-1: USB disconnect, device number 18 [ 243.802903][ T33] audit: type=1800 audit(1789218316.223:37): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.714" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 243.803142][ T33] audit: type=1800 audit(1789218316.233:38): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.714" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 244.239424][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.267610][ T5635] udevd[5635]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 244.267745][ T5635] udevd[5635]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 244.831224][ T5759] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 244.983898][ T5759] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.984883][ T5759] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.984911][ T5759] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.984931][ T5759] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.984978][ T5759] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.987254][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.988998][ T5759] usb 1-1: Product: syz [ 244.989023][ T5759] usb 1-1: Manufacturer: syz [ 245.076089][ T5759] cdc_wdm 1-1:1.0: skipping garbage [ 245.076112][ T5759] cdc_wdm 1-1:1.0: skipping garbage [ 245.079595][ T5759] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 245.079618][ T5759] cdc_wdm 1-1:1.0: Unknown control protocol [ 245.204840][ T7958] xt_nfacct: accounting object `syz' does not exist [ 245.374752][ T7959] fuse: Unknown parameter '0x0000000000000007' [ 245.390591][ T7959] fuse: Unknown parameter 'use00000000000000000000' [ 245.401158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 245.558495][ T33] audit: type=1326 audit(1789218318.003:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.2.726" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 245.558951][ T33] audit: type=1326 audit(1789218318.003:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.2.726" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 245.592179][ T33] audit: type=1326 audit(1789218318.003:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.2.726" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 245.646981][ T33] audit: type=1326 audit(1789218318.093:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.2.726" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 245.647366][ T33] audit: type=1326 audit(1789218318.093:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.2.726" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 245.650700][ T33] audit: type=1326 audit(1789218318.093:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.2.726" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 245.747581][ T33] audit: type=1326 audit(1789218318.193:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.2.726" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 245.748083][ T33] audit: type=1326 audit(1789218318.193:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.2.726" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 245.802347][ T993] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 245.969878][ T993] usb 4-1: Using ep0 maxpacket: 32 [ 245.981473][ T993] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 246.007383][ T993] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 246.007437][ T993] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 246.007467][ T993] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.007495][ T993] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 246.065227][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.065258][ T993] usb 4-1: Product: syz [ 246.065273][ T993] usb 4-1: Manufacturer: syz [ 246.065289][ T993] usb 4-1: SerialNumber: syz [ 246.103838][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 246.110933][ T993] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input27 [ 246.391239][ T993] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 246.391262][ T993] (id 0x00) [ 246.653852][ T993] rc_core: IR keymap rc-imon-pad not found [ 246.653873][ T993] Registered IR keymap rc-empty [ 246.653950][ T993] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 246.653970][ T993] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 246.701456][ T993] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 246.727650][ T993] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input28 [ 246.786809][ T993] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:19> initialized [ 248.475632][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 248.475669][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 248.475902][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 248.475928][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 248.476218][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 248.476245][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 248.476457][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 248.476479][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 248.476704][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 248.476727][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 248.476840][ T5607] usb 1-1: USB disconnect, device number 19 [ 248.476935][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 248.476958][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 248.476975][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 248.732262][ T993] usb 4-1: USB disconnect, device number 19 [ 248.760304][ T4937] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 249.303412][ T8013] loop2: detected capacity change from 0 to 8 [ 249.470258][ T8014] SQUASHFS error: Failed to read block 0x6de: -5 [ 249.470323][ T8014] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 249.470455][ T8014] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 250.389104][ T8024] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 250.420570][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 250.421482][ T5607] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 250.592873][ T5607] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.594122][ T5607] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.594150][ T5607] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.594170][ T5607] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.594214][ T5607] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.596057][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.596083][ T5607] usb 5-1: Product: syz [ 250.596100][ T5607] usb 5-1: Manufacturer: syz [ 250.676722][ T5607] cdc_wdm 5-1:1.0: skipping garbage [ 250.676763][ T5607] cdc_wdm 5-1:1.0: skipping garbage [ 250.679690][ T5607] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 250.679713][ T5607] cdc_wdm 5-1:1.0: Unknown control protocol [ 250.739091][ T8034] input: syz1 as /devices/virtual/input/input30 [ 250.779718][ T4937] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 250.792117][ T8037] input: syz0 as /devices/virtual/input/input31 [ 250.881443][ T925] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 251.041559][ T925] usb 4-1: Using ep0 maxpacket: 32 [ 251.042615][ T925] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 251.058364][ T925] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 251.058472][ T925] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 251.058500][ T925] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.058526][ T925] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 251.077705][ T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.077790][ T925] usb 4-1: Product: syz [ 251.077833][ T925] usb 4-1: Manufacturer: syz [ 251.077875][ T925] usb 4-1: SerialNumber: syz [ 251.162602][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 251.264685][ T925] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input32 [ 251.283362][ T5732] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 251.372565][ T925] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 251.372590][ T925] (id 0x00) [ 251.432155][ T5732] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 251.432944][ T5732] usb 1-1: config 0 has no interfaces? [ 251.436941][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.436968][ T5732] usb 1-1: Product: syz [ 251.436985][ T5732] usb 1-1: Manufacturer: syz [ 251.437029][ T5732] usb 1-1: SerialNumber: syz [ 251.472306][ T8049] netlink: 104 bytes leftover after parsing attributes in process `syz.2.758'. [ 251.493988][ T5732] usb 1-1: config 0 descriptor?? [ 251.582254][ T925] rc_core: IR keymap rc-imon-pad not found [ 251.582276][ T925] Registered IR keymap rc-empty [ 251.582355][ T925] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 251.582375][ T925] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 251.644572][ T925] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 251.677494][ T925] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input33 [ 251.694643][ T925] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:20> initialized [ 251.751237][ T5732] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 251.849110][ T925] usb 1-1: USB disconnect, device number 20 [ 251.901980][ T5732] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 251.904980][ T5732] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 251.905008][ T5732] usb 2-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 251.909187][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.909216][ T5732] usb 2-1: Product: syz [ 251.909231][ T5732] usb 2-1: Manufacturer: syz [ 251.909275][ T5732] usb 2-1: SerialNumber: syz [ 252.199759][ T5732] usb 2-1: USB disconnect, device number 25 [ 252.471737][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.762'. [ 252.713708][ T8067] input: syz1 as /devices/virtual/input/input34 [ 252.720680][ T4937] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 253.057810][ T8078] netlink: 104 bytes leftover after parsing attributes in process `syz.1.771'. [ 253.264380][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.774'. [ 253.626538][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 253.626571][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 253.626821][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 253.626843][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 253.627081][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 253.627103][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 253.627151][ T925] usb 5-1: USB disconnect, device number 8 [ 253.627331][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 253.627352][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 253.627370][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 253.644881][ T1169] IPVS: starting estimator thread 0... [ 253.700974][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 253.781309][ T8095] IPVS: using max 37 ests per chain, 88800 per kthread [ 253.845233][ T993] usb 4-1: USB disconnect, device number 20 [ 254.247803][ T8105] input: syz1 as /devices/virtual/input/input35 [ 254.270408][ T4937] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 256.001675][ T5732] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 256.162252][ T5732] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.164644][ T5732] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.164666][ T5732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.164680][ T5732] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.164712][ T5732] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.169118][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.169138][ T5732] usb 4-1: Product: syz [ 256.169148][ T5732] usb 4-1: Manufacturer: syz [ 256.215243][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.215399][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.259530][ T5732] cdc_wdm 4-1:1.0: skipping garbage [ 256.259553][ T5732] cdc_wdm 4-1:1.0: skipping garbage [ 256.272254][ T5732] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 256.272278][ T5732] cdc_wdm 4-1:1.0: Unknown control protocol [ 256.296331][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.790'. [ 256.510647][ T5725] usb 4-1: USB disconnect, device number 21 [ 256.649618][ T8148] input: syz1 as /devices/virtual/input/input36 [ 256.672218][ T4937] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 256.848389][ T8145] IPVS: set_ctl: invalid protocol: 189 172.20.20.17:19998 [ 257.086388][ T33] kauditd_printk_skb: 10 callbacks suppressed [ 257.086411][ T33] audit: type=1326 audit(1789218329.533:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 257.086540][ T33] audit: type=1326 audit(1789218329.533:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 257.151062][ T33] audit: type=1326 audit(1789218329.593:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 257.182311][ T33] audit: type=1326 audit(1789218329.623:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 257.182370][ T33] audit: type=1326 audit(1789218329.623:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 257.183972][ T33] audit: type=1326 audit(1789218329.633:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9bb639cfc7 code=0x7ffc0000 [ 257.184255][ T33] audit: type=1326 audit(1789218329.633:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 257.186309][ T33] audit: type=1326 audit(1789218329.633:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 257.186360][ T33] audit: type=1326 audit(1789218329.633:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 257.186409][ T33] audit: type=1326 audit(1789218329.633:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.798" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f9bb639e159 code=0x7ffc0000 [ 257.929584][ T8182] input: syz1 as /devices/virtual/input/input37 [ 257.956289][ T4937] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 258.082189][ T5607] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 258.243087][ T5607] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.247011][ T5607] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.247042][ T5607] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.247063][ T5607] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.247107][ T5607] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.249896][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.249924][ T5607] usb 1-1: Product: syz [ 258.249941][ T5607] usb 1-1: Manufacturer: syz [ 258.334752][ T5607] cdc_wdm 1-1:1.0: skipping garbage [ 258.334774][ T5607] cdc_wdm 1-1:1.0: skipping garbage [ 258.352256][ T5607] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 258.352278][ T5607] cdc_wdm 1-1:1.0: Unknown control protocol [ 258.508424][ T8195] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 258.508983][ T8193] loop4: detected capacity change from 0 to 1024 [ 258.544276][ T5607] usb 1-1: USB disconnect, device number 21 [ 258.573506][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.811'. [ 258.591545][ T8193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.535498][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.562040][ T5732] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 259.713006][ T5732] usb 3-1: Using ep0 maxpacket: 8 [ 259.715994][ T5732] usb 3-1: unable to get BOS descriptor or descriptor too short [ 259.716049][ T5732] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 259.717253][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 259.717286][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 259.717310][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 259.717337][ T5732] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 259.717363][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 259.717386][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 259.717409][ T5732] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 259.720288][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.720314][ T5732] usb 3-1: Product: syz [ 259.720330][ T5732] usb 3-1: Manufacturer: syz [ 259.720345][ T5732] usb 3-1: SerialNumber: syz [ 259.721214][ T8218] input: syz1 as /devices/virtual/input/input38 [ 259.854877][ T5732] usb 3-1: config 0 descriptor?? [ 259.855930][ T8195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.860533][ T5732] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.906009][ T4937] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 260.236561][ T5732] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 260.348703][ T7474] udevd[7474]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.414733][ T993] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 260.563544][ T993] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.566447][ T993] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 260.566477][ T993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.566498][ T993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 260.566546][ T993] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.570414][ T993] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.570440][ T993] usb 5-1: Product: syz [ 260.570457][ T993] usb 5-1: Manufacturer: syz [ 260.632546][ T993] cdc_wdm 5-1:1.0: skipping garbage [ 260.632611][ T993] cdc_wdm 5-1:1.0: skipping garbage [ 260.655243][ T27] usb 3-1: USB disconnect, device number 16 [ 260.680347][ T993] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 260.680373][ T993] cdc_wdm 5-1:1.0: Unknown control protocol [ 260.751230][ T5725] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 260.832225][ T993] usb 5-1: USB disconnect, device number 9 [ 260.902486][ T5725] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 260.903688][ T5725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.903742][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.910870][ T5725] usb 1-1: config 0 descriptor?? [ 260.960886][ T5725] pwc: Askey VC010 type 2 USB webcam detected. [ 261.139733][ T8254] input: syz1 as /devices/virtual/input/input39 [ 261.168016][ T4937] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 261.259194][ T8259] loop2: detected capacity change from 0 to 512 [ 261.289167][ T8259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 261.289318][ T8259] System zones: 1-12 [ 261.330939][ T5725] pwc: recv_control_msg error -32 req 02 val 2b00 [ 261.348620][ T8259] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.835: missing EA_INODE flag [ 261.348847][ T8259] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 261.351198][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 261.351221][ C1] EXT4-fs (loop2): initial error at time 1789218333: ext4_xattr_inode_iget:437: inode 12 [ 261.351254][ C1] EXT4-fs (loop2): last error at time 1789218333: ext4_xattr_inode_iget:437: inode 12 [ 261.388992][ T8259] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.835: error while reading EA inode 12 err=-117 [ 261.393464][ T8259] loop2: lost filesystem error report for type 5 error -117 [ 261.417434][ T8259] EXT4-fs (loop2): 1 orphan inode deleted [ 261.418304][ T5725] pwc: recv_control_msg error -32 req 02 val 2700 [ 261.440215][ T5725] pwc: recv_control_msg error -32 req 02 val 2c00 [ 261.449264][ T8236] xt_nfacct: accounting object `syz0' does not exist [ 261.458590][ T8259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.838815][ T5725] pwc: recv_control_msg error -71 req 04 val 1000 [ 263.839279][ T5725] pwc: recv_control_msg error -71 req 04 val 1300 [ 263.839740][ T5725] pwc: recv_control_msg error -71 req 04 val 1400 [ 263.840176][ T5725] pwc: recv_control_msg error -71 req 02 val 2000 [ 263.840606][ T5725] pwc: recv_control_msg error -71 req 02 val 2100 [ 263.841336][ T5725] pwc: recv_control_msg error -71 req 04 val 1500 [ 264.617002][ T5725] pwc: recv_control_msg error -71 req 02 val 2500 [ 264.625464][ T5725] pwc: recv_control_msg error -71 req 02 val 2400 [ 264.632343][ T5725] pwc: recv_control_msg error -71 req 02 val 2600 [ 264.640699][ T5725] pwc: recv_control_msg error -71 req 02 val 2900 [ 264.650884][ T5725] pwc: recv_control_msg error -71 req 02 val 2800 [ 264.663567][ T5725] pwc: recv_control_msg error -71 req 04 val 1100 [ 264.667795][ T5725] pwc: recv_control_msg error -71 req 04 val 1200 [ 264.722360][ T5725] pwc: Registered as video103. [ 264.742762][ T5725] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 264.790317][ T5725] usb 1-1: USB disconnect, device number 22 [ 265.359175][ T8292] input: syz1 as /devices/virtual/input/input41 [ 265.403562][ T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 265.431587][ T4937] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 265.464764][ T5635] udevd[5635]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 265.557423][ T27] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.561541][ T27] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.561571][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.561591][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.561636][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.606325][ T27] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.606407][ T27] usb 5-1: Product: syz [ 265.606459][ T27] usb 5-1: Manufacturer: syz [ 265.654435][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 265.654460][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 265.676018][ T27] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 265.676042][ T27] cdc_wdm 5-1:1.0: Unknown control protocol [ 265.826172][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.849'. [ 265.974985][ T5725] usb 5-1: USB disconnect, device number 10 [ 266.097998][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.493290][ T5725] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.629751][ T8330] input: syz1 as /devices/virtual/input/input42 [ 266.643700][ T5725] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 266.645046][ T5725] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 266.662731][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.662806][ T5725] usb 5-1: Product: syz [ 266.662848][ T5725] usb 5-1: Manufacturer: syz [ 266.662891][ T5725] usb 5-1: SerialNumber: syz [ 266.714395][ T4937] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 266.719872][ T5725] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 266.719922][ T5725] dvb-usb: bulk message failed: -22 (3/0) [ 266.758270][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.768831][ T5725] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 266.768890][ T5725] usb 5-1: media controller created [ 266.860999][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.134393][ T5725] DVB: Unable to find symbol mt352_attach() [ 267.134412][ T5725] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 267.137916][ T5725] dvb-usb: bulk message failed: -22 (3/0) [ 267.179949][ T8347] syzkaller0: entered promiscuous mode [ 267.179973][ T8347] syzkaller0: entered allmulticast mode [ 267.185801][ T5725] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 267.230001][ T5725] usb 5-1: USB disconnect, device number 11 [ 267.233873][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.864'. [ 267.369959][ T5725] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 267.458694][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.868'. [ 267.609407][ T8362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.868'. [ 267.609464][ T8362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.868'. [ 267.788168][ T8370] input: syz1 as /devices/virtual/input/input43 [ 267.852365][ T4937] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 267.889773][ T8362] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 268.180468][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 268.180489][ T33] audit: type=1326 audit(1789218340.623:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.4.876" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2079e159 code=0x7ffc0000 [ 268.180543][ T33] audit: type=1326 audit(1789218340.623:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.4.876" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2079e159 code=0x7ffc0000 [ 268.247348][ T33] audit: type=1326 audit(1789218340.693:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.4.876" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde2079e159 code=0x7ffc0000 [ 268.247477][ T33] audit: type=1326 audit(1789218340.693:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.4.876" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2079e159 code=0x7ffc0000 [ 268.247657][ T33] audit: type=1326 audit(1789218340.693:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.4.876" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2079e159 code=0x7ffc0000 [ 268.249556][ T33] audit: type=1326 audit(1789218340.693:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.4.876" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fde2079e159 code=0x7ffc0000 [ 268.249611][ T33] audit: type=1326 audit(1789218340.693:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.4.876" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2079e159 code=0x7ffc0000 [ 268.249658][ T33] audit: type=1326 audit(1789218340.693:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.4.876" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2079e159 code=0x7ffc0000 [ 268.650870][ T8386] syzkaller0: entered promiscuous mode [ 268.650897][ T8386] syzkaller0: entered allmulticast mode [ 268.853045][ T993] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 269.003594][ T993] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 269.004554][ T993] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 269.009348][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.009376][ T993] usb 3-1: Product: syz [ 269.009393][ T993] usb 3-1: Manufacturer: syz [ 269.009409][ T993] usb 3-1: SerialNumber: syz [ 269.077618][ T993] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 269.077667][ T993] dvb-usb: bulk message failed: -22 (3/0) [ 269.102742][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.103738][ T993] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 269.103793][ T993] usb 3-1: media controller created [ 269.152521][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.263130][ T993] DVB: Unable to find symbol mt352_attach() [ 269.263149][ T993] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 269.265616][ T993] dvb-usb: bulk message failed: -22 (3/0) [ 269.286181][ T993] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 269.310902][ T993] usb 3-1: USB disconnect, device number 17 [ 269.365525][ T8409] input: syz1 as /devices/virtual/input/input44 [ 269.393873][ T993] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 269.430452][ T4937] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 270.309940][ T8441] input: syz1 as /devices/virtual/input/input46 [ 270.328405][ T4937] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 270.527892][ T8451] macvtap1: entered allmulticast mode [ 270.528117][ T8451] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 270.528460][ T8451] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 270.530911][ T8451] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 270.592084][ T8451] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 270.834344][ T5759] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 271.617606][ T8475] syzkaller1: entered promiscuous mode [ 271.617631][ T8475] syzkaller1: entered allmulticast mode [ 271.769401][ T8477] input: syz1 as /devices/virtual/input/input47 [ 271.792534][ T4937] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 273.020631][ T8507] syzkaller0: entered promiscuous mode [ 273.020657][ T8507] syzkaller0: entered allmulticast mode [ 273.041292][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.921'. [ 273.494291][ T8515] syzkaller1: entered promiscuous mode [ 273.494318][ T8515] syzkaller1: entered allmulticast mode [ 273.576213][ T8519] input: syz1 as /devices/virtual/input/input48 [ 273.609403][ T4937] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 273.679968][ T8518] fuse: Unknown parameter '0x0000000000000007' [ 273.927943][ T33] audit: type=1326 audit(1789218346.373:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 273.928223][ T33] audit: type=1326 audit(1789218346.373:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 274.003037][ T33] audit: type=1326 audit(1789218346.453:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 274.005511][ T33] audit: type=1326 audit(1789218346.453:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 274.005771][ T33] audit: type=1326 audit(1789218346.453:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 274.008732][ T33] audit: type=1326 audit(1789218346.453:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 274.010915][ T33] audit: type=1326 audit(1789218346.453:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 274.115581][ T33] audit: type=1326 audit(1789218346.483:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 274.115633][ T33] audit: type=1326 audit(1789218346.543:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 274.122279][ T33] audit: type=1326 audit(1789218346.543:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60399e159 code=0x7ffc0000 [ 275.139040][ T8544] syzkaller0: entered promiscuous mode [ 275.139065][ T8544] syzkaller0: entered allmulticast mode [ 275.370476][ T8546] syzkaller1: entered promiscuous mode [ 275.370503][ T8546] syzkaller1: entered allmulticast mode [ 275.679096][ T8548] input: syz1 as /devices/virtual/input/input49 [ 275.702516][ T4937] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 275.866154][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888068fda000: rx timeout, send abort [ 276.366738][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888068fda000: abort rx timeout. Force session deactivation [ 276.628187][ T8554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.668905][ T8554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.385890][ T1158] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.385947][ T1158] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.385987][ T1158] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.386027][ T1158] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.587108][ T8596] netlink: 104 bytes leftover after parsing attributes in process `syz.0.948'. [ 277.657547][ T8589] syzkaller0: entered promiscuous mode [ 277.657574][ T8589] syzkaller0: entered allmulticast mode [ 277.865805][ T8580] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 278.015251][ T8580] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.019323][ T8580] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.019352][ T8580] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.019373][ T8580] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.019418][ T8580] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.023006][ T8580] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.023084][ T8580] usb 2-1: Product: syz [ 278.023127][ T8580] usb 2-1: Manufacturer: syz [ 278.113785][ T8580] cdc_wdm 2-1:1.0: skipping garbage [ 278.113842][ T8580] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 278.214752][ T8604] input: syz1 as /devices/virtual/input/input50 [ 278.360906][ T45] usb 2-1: USB disconnect, device number 26 [ 278.424212][ T7931] udevd[7931]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 278.506945][ T8601] syzkaller1: entered promiscuous mode [ 278.506982][ T8601] syzkaller1: entered allmulticast mode [ 279.136397][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 279.302886][ T33] kauditd_printk_skb: 9 callbacks suppressed [ 279.302903][ T33] audit: type=1804 audit(1789218351.753:98): pid=8628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.959" name="/newroot/187/file1" dev="tmpfs" ino=973 res=1 errno=0 [ 279.583706][ T8632] syzkaller0: entered promiscuous mode [ 279.583730][ T8632] syzkaller0: entered allmulticast mode [ 280.083691][ T8640] input: syz1 as /devices/virtual/input/input51 [ 280.202240][ T45] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 280.365210][ T45] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.384630][ T45] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.384661][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.384682][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.384729][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.445661][ T45] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.445692][ T45] usb 2-1: Product: syz [ 280.445709][ T45] usb 2-1: Manufacturer: syz [ 280.469988][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 280.470018][ T45] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 280.760519][ T45] usb 2-1: USB disconnect, device number 27 [ 281.087227][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 281.090522][ T8660] ------------[ cut here ]------------ [ 281.090539][ T8660] !chanctx_conf [ 281.090558][ T8660] WARNING: net/mac80211/tx.c:6520 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#1: syz.1.971/8660 [ 281.119914][ T8660] Modules linked in: [ 281.125270][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.1.971 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.136178][ T8660] Tainted: [L]=SOFTLOCKUP [ 281.140579][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.150776][ T8660] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 281.156872][ T8660] Code: ca 3f f6 e9 b1 fe ff ff e8 75 2a 64 f6 90 0f 0b 90 e9 e2 fe ff ff e8 67 2a 64 f6 90 0f 0b 90 e9 2a fe ff ff e8 59 2a 64 f6 90 <0f> 0b 90 e8 20 ac fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 281.176694][ T8660] RSP: 0018:ffffc900034bee38 EFLAGS: 00010283 [ 281.182856][ T8660] RAX: ffffffff8b640227 RBX: ffffffff8b63fe9f RCX: 0000000000080000 [ 281.190897][ T8660] RDX: ffffc90004711000 RSI: 0000000000000685 RDI: 0000000000000686 [ 281.199009][ T8660] RBP: 00000000ffffffff R08: ffffffff8b63fe9f R09: 0000000000000000 [ 281.207085][ T8660] R10: dffffc0000000000 R11: ffffed100cf2634e R12: ffff888067e58ec0 [ 281.215170][ T8660] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 281.223246][ T8660] FS: 00007f9a97bf66c0(0000) GS:ffff888124db7000(0000) knlGS:0000000000000000 [ 281.232284][ T8660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.238942][ T8660] CR2: 0000200000001080 CR3: 000000007a602000 CR4: 00000000003526f0 [ 281.247022][ T8660] Call Trace: [ 281.250357][ T8660] [ 281.253367][ T8660] mesh_plink_frame_tx+0x73d/0xc30 [ 281.258527][ T8660] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 281.264275][ T8660] mesh_plink_deactivate+0x18b/0x2f0 [ 281.269707][ T8660] mesh_sta_cleanup+0x42/0x150 [ 281.274578][ T8660] cleanup_single_sta+0x3ff/0x660 [ 281.279677][ T8660] sta_info_insert_rcu+0x131a/0x2780 [ 281.285094][ T8660] ? sta_apply_parameters+0x1320/0x1b50 [ 281.290704][ T8660] sta_info_insert+0x16/0xc0 [ 281.295401][ T8660] ieee80211_add_station+0x4bf/0x700 [ 281.300740][ T8660] rdev_add_station+0xfc/0x290 [ 281.305614][ T8660] nl80211_new_station+0x1b4e/0x1fd0 [ 281.310995][ T8660] ? trace_contention_end+0x3d/0x140 [ 281.316438][ T8660] ? __pfx_nl80211_new_station+0x10/0x10 [ 281.322171][ T8660] ? __rtnl_unlock+0xc3/0xe0 [ 281.326853][ T8660] ? nl80211_pre_doit+0x53d/0x890 [ 281.332021][ T8660] genl_family_rcv_msg_doit+0x233/0x340 [ 281.337658][ T8660] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 281.343871][ T8660] ? bpf_lsm_capable+0x9/0x20 [ 281.348608][ T8660] ? security_capable+0x7e/0x2c0 [ 281.353686][ T8660] genl_rcv_msg+0x614/0x7a0 [ 281.358256][ T8660] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.363386][ T8660] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 281.368818][ T8660] ? __pfx_nl80211_new_station+0x10/0x10 [ 281.374563][ T8660] ? __pfx_nl80211_post_doit+0x10/0x10 [ 281.380107][ T8660] ? __asan_memcpy+0x40/0x70 [ 281.384836][ T8660] ? __skb_clone+0x5c/0x6c0 [ 281.389406][ T8660] netlink_rcv_skb+0x226/0x4a0 [ 281.394313][ T8660] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.399399][ T8660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.405014][ T8660] ? down_read+0x2b9/0x320 [ 281.409499][ T8660] genl_rcv+0x28/0x40 [ 281.413591][ T8660] netlink_unicast+0x7bd/0x940 [ 281.418420][ T8660] netlink_sendmsg+0x7c3/0xae0 [ 281.423302][ T8660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.428660][ T8660] ? apparmor_socket_sendmsg+0x98/0x360 [ 281.434363][ T8660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.439729][ T8660] sock_sendmsg_nosec+0x13a/0x180 [ 281.444886][ T8660] ____sys_sendmsg+0x54e/0x850 [ 281.449719][ T8660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.455125][ T8660] ? import_iovec+0x73/0xa0 [ 281.459691][ T8660] ___sys_sendmsg+0x2a5/0x360 [ 281.464475][ T8660] ? __lock_acquire+0x747/0x2de0 [ 281.469485][ T8660] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.474811][ T8660] ? futex_wait+0x2a2/0x390 [ 281.479402][ T8660] ? __fget_files+0x2a/0x420 [ 281.484126][ T8660] ? __fget_files+0x3a2/0x420 [ 281.488880][ T8660] __x64_sys_sendmsg+0x1b1/0x290 [ 281.493935][ T8660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.499479][ T8660] do_syscall_64+0x166/0x520 [ 281.504198][ T8660] ? trace_irq_disable+0x3b/0x140 [ 281.509278][ T8660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.515447][ T8660] ? clear_bhb_loop+0x70/0xc0 [ 281.520188][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.526197][ T8660] RIP: 0033:0x7f9a9999e159 [ 281.530676][ T8660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.551441][ T8660] RSP: 002b:00007f9a97bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.559921][ T8660] RAX: ffffffffffffffda RBX: 00007f9a99c25fa0 RCX: 00007f9a9999e159 [ 281.568021][ T8660] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 281.576110][ T8660] RBP: 00007f9a99a3503b R08: 0000000000000000 R09: 0000000000000000 [ 281.585236][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.593334][ T8660] R13: 00007f9a99c26038 R14: 00007f9a99c25fa0 R15: 00007ffcb0f787d8 [ 281.601433][ T8660] [ 281.604839][ T8660] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 281.612165][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.1.971 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.623013][ T8660] Tainted: [L]=SOFTLOCKUP [ 281.627418][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.637514][ T8660] Call Trace: [ 281.640837][ T8660] [ 281.643801][ T8660] vpanic+0x56d/0xa70 [ 281.647842][ T8660] ? __pfx__printk+0x10/0x10 [ 281.652480][ T8660] ? __pfx_vpanic+0x10/0x10 [ 281.657037][ T8660] ? is_bpf_text_address+0x292/0x2b0 [ 281.662388][ T8660] ? is_bpf_text_address+0x26/0x2b0 [ 281.667653][ T8660] panic+0xc5/0xd0 [ 281.671429][ T8660] ? __pfx_panic+0x10/0x10 [ 281.675917][ T8660] __warn+0x315/0x4c0 [ 281.679974][ T8660] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 281.685441][ T8660] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 281.690861][ T8660] __report_bug+0x276/0x570 [ 281.695418][ T8660] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 281.700838][ T8660] ? __pfx___report_bug+0x10/0x10 [ 281.705905][ T8660] ? __lock_acquire+0x747/0x2de0 [ 281.710907][ T8660] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 281.716352][ T8660] report_bug+0x16b/0x220 [ 281.720728][ T8660] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 281.726146][ T8660] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 281.731568][ T8660] handle_bug+0x9c/0x200 [ 281.735862][ T8660] exc_invalid_op+0x1a/0x50 [ 281.740416][ T8660] asm_exc_invalid_op+0x1a/0x20 [ 281.745307][ T8660] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 281.751332][ T8660] Code: ca 3f f6 e9 b1 fe ff ff e8 75 2a 64 f6 90 0f 0b 90 e9 e2 fe ff ff e8 67 2a 64 f6 90 0f 0b 90 e9 2a fe ff ff e8 59 2a 64 f6 90 <0f> 0b 90 e8 20 ac fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 281.771072][ T8660] RSP: 0018:ffffc900034bee38 EFLAGS: 00010283 [ 281.777185][ T8660] RAX: ffffffff8b640227 RBX: ffffffff8b63fe9f RCX: 0000000000080000 [ 281.785205][ T8660] RDX: ffffc90004711000 RSI: 0000000000000685 RDI: 0000000000000686 [ 281.793220][ T8660] RBP: 00000000ffffffff R08: ffffffff8b63fe9f R09: 0000000000000000 [ 281.801238][ T8660] R10: dffffc0000000000 R11: ffffed100cf2634e R12: ffff888067e58ec0 [ 281.809265][ T8660] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 281.817288][ T8660] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 281.822636][ T8660] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 281.828012][ T8660] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 281.833467][ T8660] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 281.838894][ T8660] mesh_plink_frame_tx+0x73d/0xc30 [ 281.844073][ T8660] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 281.849769][ T8660] mesh_plink_deactivate+0x18b/0x2f0 [ 281.855110][ T8660] mesh_sta_cleanup+0x42/0x150 [ 281.859934][ T8660] cleanup_single_sta+0x3ff/0x660 [ 281.865024][ T8660] sta_info_insert_rcu+0x131a/0x2780 [ 281.870383][ T8660] ? sta_apply_parameters+0x1320/0x1b50 [ 281.876010][ T8660] sta_info_insert+0x16/0xc0 [ 281.880692][ T8660] ieee80211_add_station+0x4bf/0x700 [ 281.886069][ T8660] rdev_add_station+0xfc/0x290 [ 281.890884][ T8660] nl80211_new_station+0x1b4e/0x1fd0 [ 281.896228][ T8660] ? trace_contention_end+0x3d/0x140 [ 281.901581][ T8660] ? __pfx_nl80211_new_station+0x10/0x10 [ 281.907701][ T8660] ? __rtnl_unlock+0xc3/0xe0 [ 281.912385][ T8660] ? nl80211_pre_doit+0x53d/0x890 [ 281.917472][ T8660] genl_family_rcv_msg_doit+0x233/0x340 [ 281.923090][ T8660] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 281.929259][ T8660] ? bpf_lsm_capable+0x9/0x20 [ 281.933990][ T8660] ? security_capable+0x7e/0x2c0 [ 281.939003][ T8660] genl_rcv_msg+0x614/0x7a0 [ 281.943563][ T8660] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.948653][ T8660] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 281.954081][ T8660] ? __pfx_nl80211_new_station+0x10/0x10 [ 281.959767][ T8660] ? __pfx_nl80211_post_doit+0x10/0x10 [ 281.965283][ T8660] ? __asan_memcpy+0x40/0x70 [ 281.969922][ T8660] ? __skb_clone+0x5c/0x6c0 [ 281.974484][ T8660] netlink_rcv_skb+0x226/0x4a0 [ 281.979302][ T8660] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.986106][ T8660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.991472][ T8660] ? down_read+0x2b9/0x320 [ 281.995942][ T8660] genl_rcv+0x28/0x40 [ 281.999998][ T8660] netlink_unicast+0x7bd/0x940 [ 282.004824][ T8660] netlink_sendmsg+0x7c3/0xae0 [ 282.009650][ T8660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.014999][ T8660] ? apparmor_socket_sendmsg+0x98/0x360 [ 282.020608][ T8660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.025942][ T8660] sock_sendmsg_nosec+0x13a/0x180 [ 282.031025][ T8660] ____sys_sendmsg+0x54e/0x850 [ 282.035853][ T8660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.041201][ T8660] ? import_iovec+0x73/0xa0 [ 282.045759][ T8660] ___sys_sendmsg+0x2a5/0x360 [ 282.050490][ T8660] ? __lock_acquire+0x747/0x2de0 [ 282.055507][ T8660] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.060767][ T8660] ? futex_wait+0x2a2/0x390 [ 282.065355][ T8660] ? __fget_files+0x2a/0x420 [ 282.069993][ T8660] ? __fget_files+0x3a2/0x420 [ 282.074725][ T8660] __x64_sys_sendmsg+0x1b1/0x290 [ 282.079753][ T8660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.085275][ T8660] do_syscall_64+0x166/0x520 [ 282.089913][ T8660] ? trace_irq_disable+0x3b/0x140 [ 282.094984][ T8660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.101098][ T8660] ? clear_bhb_loop+0x70/0xc0 [ 282.105828][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.111765][ T8660] RIP: 0033:0x7f9a9999e159 [ 282.116219][ T8660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.135871][ T8660] RSP: 002b:00007f9a97bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.144353][ T8660] RAX: ffffffffffffffda RBX: 00007f9a99c25fa0 RCX: 00007f9a9999e159 [ 282.152373][ T8660] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 282.160390][ T8660] RBP: 00007f9a99a3503b R08: 0000000000000000 R09: 0000000000000000 [ 282.168407][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.176425][ T8660] R13: 00007f9a99c26038 R14: 00007f9a99c25fa0 R15: 00007ffcb0f787d8 [ 282.184509][ T8660] [ 282.187747][ T8660] Kernel Offset: disabled [ 282.192091][ T8660] Rebooting in 86400 seconds..