last executing test programs: 23.910577407s ago: executing program 1 (id=390): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000fcffffffffffffff00000000000000000000000000000000ffffffffffffffff08000000000000000000000000000000000000da84669c00000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000016c0)=ANY=[@ANYBLOB="110086dd0000110000000000000060ec970000382c00fe8000000000000000000000000000aaff02001400000000000000000000000104"], 0xfdef) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 23.743351402s ago: executing program 1 (id=392): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x6c3e, 0x101100) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000040)={0x48, "acdd4c55fd683265e51369d4f93746987f0463d8909408dc0a66040353f827f6147bbc4ffaf4bcb657bff2b710aff8734fc2caede5cbf4fb60272273d1bec628494010fa4882c44d"}) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000000c0)={0x1, 0x3, 0x9, 0x7, 0x5, 0x918}) ioctl$FIOCLEX(r0, 0x5451) syz_usb_connect(0x0, 0xf6, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x34, 0xb6, 0x1d, 0x8, 0x52b, 0xd001, 0x4da1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x1, 0x1, 0xf7, 0x0, 0x9, "", [{{0x9, 0x4, 0x10, 0x0, 0x3, 0x20, 0x48, 0x6f, 0x6, [@generic={0xae, 0x30, "70e3c696fe6fbe7eea3c166b754756f8711f5e973538356586519b727b32ad2d803dd17c474c3702c53f66ae86ecd10a503a443e056170f6c706822d2e9d603e8c7cb456d3fa2d78c9e77e2915cdcb481b51122ec012a0b2d6733988fa775e5c5b9418d7b727e4ba6c8471dbf9cec60908bc0e30ad4e2eecce0d4fb4f6629b17c566b24a1a63c0111046017f192cf62d3df1b817361faf2bf733301eade42c8d045bdb7b2d7ce6171d1a2df9"}, @hid_hid={0x9, 0x21, 0xcf, 0xcf, 0x1, {0x22, 0x521}}], [{{0x9, 0x5, 0x80, 0x0, 0x200, 0xf6, 0x9, 0x5}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0xd1, 0x38, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x5, 0x4, 0x8}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0xc, 0x9, 0x5, 0x10, 0x6}, 0x13e, &(0x7f0000000240)={0x5, 0xf, 0x13e, 0x5, [@generic={0xcc, 0x10, 0x3, "7bb38340e17fae50a8883c829314547c328b2bcd62db84dec2f2f434935a7c478606ff8d1d2c9a94746eb0620feeccbd9732d87ee899c932b1088c74458f38c5e342a4d88a242e7e4aa655d1e8d9d4075c62d92c903617a5760bc0789cd5b03827d12ae5197c022d97ce9bf66b60c8cd5205c57f517b62ef49007ac6691ed51113ac156df0f1c9b0cba235bcfe588f0d23ea8d2573d630896987399d5685f887bbe500262fee4c2b27edcdcfca0d3e6921b49277148e49131c28bcf541a23d495a83fd9d46521c6975"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x5, 0xf, 0x800, [0xf, 0xffc000, 0x0, 0xffc0cf, 0x3f3f, 0x30]}, @generic={0x1f, 0x10, 0x1, "b377f75af49f22b4d02bf98ed23d01525d93491a613fbbb24a330ac2"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x40, 0xf0f, 0x8, [0x6011, 0x3f00, 0xcf, 0xffc0f0, 0xff3fcf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3b, 0x6a, 0x2}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x438}}]}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x3) r1 = syz_usb_connect(0x3, 0x28a, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0xd7, 0xb3, 0x4d, 0xff, 0x7d1, 0x3c03, 0xa232, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x278, 0x2, 0x4, 0x6, 0x80, 0x2, "", [{{0x9, 0x4, 0xdc, 0x9e, 0x4, 0x48, 0x5a, 0xf9, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "40e1"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x3, 0x9, 0x90}, {0x6, 0x24, 0x1a, 0x10, 0x9}, [@obex={0x5, 0x24, 0x15, 0x3}, @country_functional={0xc, 0x24, 0x7, 0x5, 0x800, [0x5, 0x0, 0x3]}, @acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x7}]}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x2, 0x8, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x5, 0x97, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x400}, @generic={0xe9, 0x4, "b1d4038be80d467941a829dae8f7abc43e3056933d3606d10bada5adcee71524e7304dd4014a2f10da6da4f05076bf498a8610ec1e50225256b25032fc56394bb8be90cfa35dc782c6310746a207edbb3d233a782d7daa2ecf95fd4c8aeaded69fdb3d834d7313f6b934194de11c9a42ab42877de9396edd850e7b8f91e9be99532548166b5666e5955e90277478d3c130901dfa48eea9b41d4a6f336b883cbf058db8252c66894e849117df7e3d2732b8d7cda34a0747cbf02e31a4354cc38b927befc6d6a700cd22650c660df3cc883d21a364542e92d2edf269ef03495562bdb5ba28d0c0dc"}]}}, {{0x9, 0x5, 0x41, 0x2, 0x3ff, 0x3, 0x1b, 0x4}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x3, 0x5, 0xc}}]}}, {{0x9, 0x4, 0xb7, 0x48, 0x5, 0x95, 0x9e, 0x14, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x31}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x3, 0xd5, 0x4, 0x3, 0x81}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x1, "21e817"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x6, 0x1, 'e'}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x0, 0x0, "a3ea056a"}]}, @hid_hid={0x9, 0x21, 0x1, 0x34, 0x1, {0x22, 0x61a}}], [{{0x9, 0x5, 0x7, 0x1, 0x8, 0x8, 0xfb, 0xd}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x2, 0x9, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9b, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xaf18}]}}, {{0x9, 0x5, 0x3, 0xc, 0x0, 0x1, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x8, 0xb5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x0, 0x1, 0x7, [@generic={0x55, 0x23, "8d94b2e0f1773cdcd8a8ae9ac155acd18f790406de45830f560159d65022fad3b96475fbb436c4738da89ebd894a5b73a7e9cc3bb2aa1c105d386b2c9378b8c36acd4b67fb94beafb478a3207d219421d6cfad"}, @generic={0x38, 0x0, "b99b3b64902f34034735bae4007a9100a9fb075c3c677f306ed25376cdc7ff34c0f1230a69cd57681adfd3c612dc6edfae758e6d7f8d"}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x3, 0x8, 0x0, 0xff, 0xbf}, 0x3e, &(0x7f0000000780)={0x5, 0xf, 0x3e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x81, 0x4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0xd, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x9, 0xeff}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x8000, 0xff08, 0x0, [0xffc0ff, 0x30]}]}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1c09}}]}) r2 = syz_open_dev$I2C(&(0x7f0000000840), 0x9, 0x121042) syz_usb_connect$uac3(0x5, 0xe1, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x17cc, 0xd8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x4, 0x0, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x24, 0x30, 0x39}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x3a}, [@feature_unit={0x1d, 0x24, 0x7, 0x5, 0x3, [0xe, 0x8, 0x8, 0x7, 0xb, 0xff]}, @output_terminal={0x13, 0x24, 0x3, 0x3, 0x305, 0x3, 0x2, 0xa, 0x0, 0xe, 0x6395, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x49, 0x8, 0x92, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x5, 0xf0, {0xa, 0x25, 0x25, 0x3, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x9, 0x7, 0x62}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1, 0x5, "145d58", 'P'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x2, 0x88, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x2, 0x7f, {0xa, 0x25, 0x25, 0xc, 0x2, 0xffff}}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x51, 0x6, 0x1, 0x7f, 0x40, 0x3}, 0x82, &(0x7f00000009c0)={0x5, 0xf, 0x82, 0x5, [@generic={0x5, 0x10, 0x4, "a459"}, @generic={0x4d, 0x10, 0x4, "8d7c7ab615572b496cd3f5f0a52021f0bf73cf13d0fc7acf6f33dcfd1334a6c63199932d56102d4424f8d63e1826cb45be9c7270e3735818750389a8e056eda7d187ec03f651c706aeaa"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "35337000843ee58c90cd935346b2867f"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4e1318cc6bf15bca9fde5d3a5c0d990c"}]}, 0x5, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x827}}, {0x5a, &(0x7f0000000b00)=@string={0x5a, 0x3, "a43fa1eeb2641b3b8eb4e91ebd325004a35cd6f06c06d67ff0811749471c6ffd0e9284dcf0922d0e87a782dd1f24e7af8a5ec61f453d83bc5978737795acc05b025e77a73961a373e211ebcf5e53940b95c128334c52aa0c"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x240a}}, {0xa1, &(0x7f0000000bc0)=@string={0xa1, 0x3, "7a09174f6e4b42556c02c1ca22f1957850f1e5a26f69221d4a38de1b6c6e8a12ed91fe7f3e65aadc2d721de9772070c985938252aca1231d084987619f9604f43c30f819a016751f93c5a8c42c6c03e284b76c3f801f4006653d1558e3e1a54d211824321c4383cb65b8ffb35b88b26892d8b8c3a36be79d3fc6e73c70581466d6e87af3ba128f19db2a5beaee0b57cc0ad19b21cc1d3310c9caa30e415744"}}]}) r3 = eventfd2(0x4, 0x80000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000d00)={0x0, r3}) syz_usb_control_io$uac2(r1, &(0x7f0000000e80)={0x14, &(0x7f0000000d40)={0x0, 0x7, 0xf7, {0xf7, 0xf, "cc0d16b18d3f2ec8794d925591c237f5283986f4b047a19f6066bef876bbbb1d5fa994b3e14e61d7b07188f5f2438ab4901b66743142ff2080b84c8ed44dc74d2c3015b46b0055c827e977e6762d150c5b9e674cd66d71440f8d31de81af06a68dee82d31b50871b6e0ca4cbd6cb2296fb6c244949a786fe516cca872cf3ce45b024786dd5e40d29fb22fc33ca9cce398a478cf09f5aa9a5d37c7972db62ec89bf1d3b56d11cc4fa71171e46ff6a15d103e756b412b2697310ba5016687c427e952536a913527284642fff15cbc62ce520db691f34b3e86eb3bbe164f44943f7cbee8b40cda007aab68c63b1cba667f85599e2761a"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000001180)={0x44, &(0x7f0000000ec0)={0x20, 0x14, 0xcf, "f1541e9b36398655125cd9fdb10055496db8ef8007f6dd7383dc23a4b1e297a642bd3caf657d923b0ee1c1ddfbfebd5fe542f665e68571993c389d44945629afabdf7f6bd312d084a6a4a48d4917c1b0ca86611e20d7d088ef6c8a37aa29017cd9d1b6652ad35a12deeaa227db4803dfd572b81fd5ed1a91e13dc1914b0a72a8efe6e41a7812953eafd242c2a5b4ff79988535e9c5c81b0d9f3523ba63bd4320c64446ff065eb5992ae33a439f597d6390750b5b76f784b6e77906ea79ba7695e0149dd5cdd5bbc39dd52b9be729ab"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001040)={0x20, 0x81, 0x3, "44f765"}, &(0x7f0000001080)={0x20, 0x82, 0x1, '\f'}, &(0x7f00000010c0)={0x20, 0x83, 0x2, "ca07"}, &(0x7f0000001100)={0x20, 0x84, 0x3, "cbf23a"}, &(0x7f0000001140)={0x20, 0x85, 0x3, "0ae5b3"}}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x0, 0x6b9b, 0x400, 0x0, 0x23d}, &(0x7f0000001280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56d2, 0xd809, 0x2, 0x5b}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2637, 0x40, 0x1, 0x5b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x792a, 0x8, 0x3, 0x23e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ebd, 0x80, 0x1, 0x90}}], 0x4, &(0x7f0000002500)={0x2e, 0x65, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x80}, 0x0, 0x0, '\x00', {0x1, 0xbb7, 0x0, &(0x7f0000001500)=@buf_512="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"}}, &(0x7f0000002580)) ioctl$UBLK_U_IO_FETCH_REQ(r5, 0xc0107520, &(0x7f00000035c0)={0x3, 0x21d, 0x0, &(0x7f00000025c0)=@buf_4k="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"}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x400880}, 0xc, &(0x7f0000003880)={&(0x7f0000003680)={0x1cc, 0x0, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf0, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xdea7c93c510cd640}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x10}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000003900)={{0x2, 0x3, 0x9e4, 0xfffffff7, 0x3, 0x7}, 0x229, [0x30f, 0x9, 0x4, 0x6, 0x100, 0x7, 0x6, 0x8, 0x9, 0x10001, 0xb, 0x8, 0x2, 0xd3df, 0xc, 0xc0, 0x101, 0xd68, 0x3, 0x6, 0x6, 0x6, 0x1ff, 0xfffffff5, 0x3, 0xa5, 0x6, 0x5, 0x80000001, 0x8, 0x1, 0x8, 0x7c8a, 0x2, 0x1, 0xca44, 0x8, 0xfffff788, 0x6, 0x92, 0x3, 0x10000, 0x4, 0x7fffffff, 0x7, 0x7fff, 0xef9d, 0x0, 0x2, 0xac, 0x7, 0x1, 0x9, 0x9a8, 0x10001, 0x7, 0x200, 0x2, 0xb2700000, 0x2571cb42, 0x9, 0x0, 0x6, 0x8, 0xad4, 0x8, 0x3, 0x5, 0x4, 0x10001, 0x9, 0x9, 0x3f51, 0x6, 0x5, 0x2, 0x94c, 0x9, 0x6, 0xfffffc00, 0x5a, 0x6, 0x8001, 0x3, 0x0, 0x3, 0xffff, 0xa9, 0x2, 0x1, 0x2, 0x0, 0xffffffff, 0x9, 0x1000da26, 0x5, 0x5, 0x8001, 0x3, 0x6c, 0x4, 0x3, 0x5, 0x20, 0x9, 0x2, 0x8, 0x1, 0xfffffff8, 0xfffffffa, 0x7, 0x2, 0x8, 0x9, 0x3, 0x9, 0x3, 0x1, 0xff, 0x8, 0x1, 0x6, 0xe0000000, 0x9, 0x7fff, 0x5e, 0x80000001, 0x5, 0x7fffffff, 0x4, 0xfffffeff, 0x6, 0x5, 0x5, 0x87, 0x7, 0x4, 0x1ff, 0x7, 0xc, 0xa, 0x162, 0x8, 0x7, 0x0, 0x8, 0x7fffffff, 0x2, 0xa, 0x38, 0x7ff, 0x8d1c0, 0x5, 0x0, 0x7ff, 0x7, 0x966, 0x4, 0x0, 0x303, 0xd, 0x0, 0x59, 0x3, 0x2, 0x8, 0x8, 0x3, 0x5, 0x1, 0x9, 0x401, 0xe9, 0x1, 0x4, 0x4, 0x6, 0x2cd1, 0xee, 0x6, 0x768, 0xff4b, 0x6, 0x6, 0xfffffff7, 0x1c8, 0x680000, 0x3, 0x4, 0x27, 0x8001, 0x6, 0x10001, 0x483ed912, 0x0, 0x5c, 0x6fdc1c16, 0x5, 0xca, 0x1, 0x5d8, 0x2, 0x7, 0x8, 0x8, 0xfffffff8, 0x5, 0x1, 0x1, 0x80, 0xfff, 0x0, 0x836, 0x6, 0x1, 0x7f, 0x1, 0x5, 0x9, 0x1, 0x3, 0xfffffe00, 0x5, 0x5, 0x0, 0x5, 0x9, 0x3, 0x8, 0xa9c9, 0x3a, 0x3, 0x7, 0x0, 0x7, 0x5628, 0x10, 0xe2, 0x0, 0x8001, 0x8, 0x100, 0x9, 0x1, 0x7, 0x8, 0x2, 0xd, 0x0, 0x1, 0x80, 0x3c, 0x4, 0x6b3a, 0x2, 0x2, 0xffffffff, 0x5, 0x2, 0xa6b, 0x5, 0x9, 0x40, 0x10001, 0x1, 0x7, 0x0, 0x8000, 0xffffff00, 0x0, 0x400, 0x4, 0x2, 0x2, 0x9, 0x4, 0x7, 0xfffeffff, 0x8, 0x888, 0x812, 0x57f160d9, 0x696d, 0x2, 0x8, 0x81, 0x7ff, 0x7fffffff, 0x987, 0x1, 0x8, 0x5, 0x9, 0x3e, 0x0, 0x3, 0xff, 0x7, 0x8, 0x0, 0x0, 0x7, 0x5, 0xfff, 0x9, 0x0, 0xcb, 0x2, 0x7f, 0x0, 0x4, 0x9, 0x4, 0x9, 0x1, 0x2, 0xd, 0xfffffffc, 0x7, 0x7, 0xffffffa7, 0x7ff, 0x9942, 0x3, 0x3, 0x5, 0xe61, 0x8, 0x3af, 0x9, 0x0, 0x2, 0x8, 0x5, 0x0, 0xfffffffd, 0x6e, 0x3, 0x5, 0x8, 0x9, 0x1, 0x800, 0x1, 0x8, 0x45b, 0x8, 0x9, 0xffffffff, 0x3, 0xffffffff, 0x26, 0x0, 0x1, 0xfffffe00, 0x4, 0x5, 0x10000, 0x2, 0x1f, 0x7f, 0x80000001, 0x9, 0xa, 0x2, 0x7, 0xda0, 0x0, 0x3, 0x6b0, 0x4, 0xf48, 0x3be, 0x400, 0x2, 0x82, 0x7, 0x7, 0x0, 0xa, 0x7, 0x7ff, 0x90, 0x9, 0x5, 0x88a3, 0x7f, 0x5, 0xe0000000, 0x3, 0x80000001, 0x4, 0x6, 0x0, 0x5, 0x1, 0x0, 0xe9, 0xd5, 0xffff, 0x2, 0x9, 0x200, 0xa, 0x5c, 0xa0, 0x3, 0x1ff, 0x401, 0xd, 0x240, 0x7fffffff, 0x0, 0x6, 0x3, 0x8ed, 0x40000000, 0x1, 0x5, 0xe, 0x0, 0x2, 0x8, 0xb13c, 0x6, 0x1, 0x0, 0x1, 0x61, 0xf, 0x2, 0x6d1, 0x0, 0x9, 0x0, 0x1, 0x5, 0x3, 0xca0, 0x7ff, 0x0, 0xcf, 0x6aa, 0x3, 0x4, 0x0, 0x1, 0x6, 0x0, 0xbe37, 0x0, 0x9, 0x4, 0xf0c, 0x9, 0x3, 0x100000, 0x6, 0x2, 0xffff4a57, 0x1, 0x5, 0x3, 0x9, 0x1, 0x8, 0x8000, 0x4, 0xfffffffe, 0xffffffff, 0x2, 0x115, 0x1, 0xfffffffc, 0xac, 0x8, 0x0, 0x1, 0x406f3ea9, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x3, 0x3, 0x5, 0x0, 0x1, 0x7fffffff, 0x7, 0xfffffff7, 0x6, 0x4, 0x5, 0x7, 0x9, 0x9, 0x10000, 0x8, 0x8966, 0x4, 0xd, 0x81, 0x7, 0x4, 0xffffffff, 0x2, 0x5, 0x2, 0x7fffffff, 0xff, 0x9, 0x6dc4, 0x98, 0x7fffffff, 0x6, 0x1, 0x0, 0xb, 0x6, 0xa, 0x3, 0x2, 0xb575, 0x3d3, 0x10, 0x10000, 0x1, 0x7, 0x4, 0x400, 0x94, 0x5, 0x10001, 0x1, 0x0, 0x7, 0x1, 0x1, 0x6, 0x0, 0xfffff801, 0x1, 0x64f7, 0x8, 0x2a, 0x5, 0xf1e5, 0xffff, 0x80000000, 0x3, 0x202, 0xff, 0x7, 0x1ff, 0x98a, 0x9, 0x5, 0x7, 0x80000001, 0xffffffff, 0x1, 0x100, 0x2, 0x6, 0x4, 0x4, 0x9, 0xc, 0x0, 0x5, 0x0, 0x7, 0x2, 0x2, 0x3ff, 0x705, 0x646, 0x6e, 0xfffffff7, 0x10000, 0x0, 0x3, 0x9, 0x3, 0x9, 0x2, 0x10, 0xb8e, 0x80, 0xe, 0x9, 0x1, 0x5, 0x80, 0x8, 0x5, 0x9, 0x6, 0x50b, 0x3, 0xa, 0x8, 0x7, 0x2, 0xb72, 0x3, 0xfff, 0x7, 0x7, 0xbe, 0x0, 0x0, 0x1, 0x4, 0x8000, 0x10, 0xff, 0x48, 0x70e3, 0xdc, 0x16, 0x4, 0xe4, 0x8, 0x2, 0x7, 0x7, 0x5, 0x2, 0x3, 0x5, 0xa1f5, 0xf37, 0xd, 0x0, 0x0, 0x1ec, 0x3, 0xfffffffc, 0x64, 0x8, 0x60, 0x8001, 0x7, 0x1, 0x8, 0x0, 0x1, 0x37, 0x1, 0x7f, 0x4, 0x8, 0xec, 0x2, 0x2, 0x611a, 0x2, 0x6, 0xfce4, 0x1, 0x38, 0x33, 0x5, 0x8, 0xdf5b, 0x3, 0x3, 0x2, 0x5, 0x7f, 0xc91, 0x7, 0x100, 0x2, 0x6, 0x0, 0x800, 0x101, 0x5, 0x6, 0x0, 0x4, 0x9, 0x1, 0x8, 0x1, 0xfffffe00, 0x1ff, 0x100, 0x5, 0x6, 0x96, 0x8, 0xffffffff, 0xfffffff7, 0x1, 0x1, 0xa4af, 0x6, 0xf, 0x0, 0x4, 0x4, 0x400, 0x8, 0x5, 0xfffffff8, 0xfffffffa, 0x3, 0x1, 0xff, 0x7, 0x2, 0x3, 0x6b, 0x1c, 0xb, 0x480, 0x10, 0x2, 0x9, 0x7, 0x9, 0x4a68bd57, 0x6, 0x5, 0xffffff0c, 0x40, 0x8000, 0x1, 0xfffffffd, 0xa, 0x3, 0x400, 0x7, 0x9, 0x6, 0x1, 0x7, 0x800, 0x1, 0x3, 0xda75, 0xb, 0x6, 0x9c1, 0x2, 0x5, 0x8001, 0x401, 0x2400000, 0x7, 0x4, 0x3ff, 0x7, 0x0, 0x95d, 0x401, 0x4e, 0xc6d, 0xfffffff7, 0xeb5, 0x10001, 0xd9b, 0x4, 0x1, 0x3, 0xffffffff, 0x80000000, 0x6, 0x8, 0x1, 0xfffffc00, 0x0, 0x1, 0x534c, 0xc5, 0x9, 0x4, 0x2, 0x5, 0x6, 0xdb9, 0xe, 0x9, 0x3, 0x5, 0x4, 0x14, 0xb68, 0x200, 0x3, 0x1, 0x0, 0x81, 0x0, 0x9, 0x7, 0x0, 0x6, 0x3, 0x8, 0x3b4, 0x10001, 0x6, 0x1, 0x2, 0x8, 0x4, 0x8, 0x7f, 0xffffffff, 0x4, 0x1, 0x9, 0x1, 0x3, 0x3, 0x6, 0x0, 0xc, 0x7, 0x401, 0x3, 0x42, 0x3ff, 0xf, 0x2, 0x29, 0x65b0, 0x1, 0x11e80000, 0x13f8, 0x0, 0x7fffffff, 0xa, 0xfffffffb, 0x0, 0x4, 0x5, 0x1, 0x8, 0x1, 0x5, 0x7, 0x800, 0x4, 0x0, 0xfffffffa, 0x8, 0x9, 0xffff0000, 0x80, 0x10000, 0x7, 0x3ff, 0xd, 0x8, 0x7f, 0xa19, 0xb051, 0x80000000, 0x1, 0x4, 0x3, 0x10, 0x3, 0xfffffff7, 0x7825, 0x6, 0x9, 0xff, 0x1, 0xf, 0x80000000, 0xd4, 0x9, 0xfffffffa, 0x1, 0x2, 0x9, 0x0, 0x5, 0x4, 0x671, 0x1, 0x366, 0xec50, 0x9, 0x8, 0x9, 0xcc, 0x8, 0x5, 0x1ff, 0xc9, 0x200, 0xfff, 0x5, 0x8, 0x1, 0x7a7301f1, 0x2, 0x0, 0x3, 0x3, 0x800, 0x7, 0x8000, 0x4, 0x9, 0x8, 0x80000000, 0x3, 0x271efd10, 0x7, 0x0, 0x401, 0x80000000, 0xd3, 0x10, 0x4, 0xd1f2, 0x81, 0x4, 0x0, 0x4, 0x1, 0x7, 0x9, 0xffff, 0x6, 0x2, 0x1, 0x800, 0x8000, 0x0, 0x1, 0x0, 0x8, 0x5d106ab8, 0x4, 0x8b, 0x7, 0x5, 0xb7, 0x0, 0x8, 0x9, 0x3, 0xee, 0xc, 0x9, 0x2, 0x6, 0x1, 0xc16, 0x8, 0x6, 0x7, 0x1, 0xdf5f, 0x9, 0x0, 0xd5, 0x9, 0x1000, 0x9, 0x10, 0x10001, 0x10000000, 0x10, 0x0, 0x80000000, 0x5, 0x7, 0x2, 0xc, 0x3, 0x6, 0x15156df3, 0x7, 0x6, 0x5, 0x9, 0x4, 0x1ff, 0x10000, 0x4, 0x4, 0xf, 0xffff, 0x1, 0x9, 0x6, 0x5, 0x8000, 0x3, 0x7fffffff, 0x6862, 0x81, 0x3, 0x6, 0x1, 0x80, 0x5, 0x9, 0xffff, 0xc, 0x9d0, 0x1, 0x0, 0x82, 0x12e, 0x2, 0x3, 0x9, 0x0, 0x3, 0x4]}) r6 = syz_open_dev$hiddev(&(0x7f0000004940), 0x9, 0x0) ioctl$HIDIOCGUSAGES(r6, 0xd01c4813, &(0x7f0000004980)={{0x3, 0x1, 0x6, 0x7, 0x9, 0x3}, 0x3e5, [0x7, 0x6, 0x2, 0x0, 0x100, 0x8, 0x8, 0x1f3, 0x81, 0x37dc, 0x439, 0x3, 0x8, 0x40, 0x10000, 0x6, 0x7, 0x8f, 0x9, 0x5, 0xcb38, 0x80000000, 0x8001, 0x2, 0x7fff, 0x7fff, 0x7f, 0xbc4, 0x39dd, 0xe, 0xff, 0x101, 0x1, 0x7, 0xfffffff7, 0x7, 0x3, 0x0, 0xfac5, 0xf0a, 0x0, 0x0, 0x7, 0x200, 0x9, 0x7, 0x4, 0x0, 0x10, 0x9, 0x0, 0x7, 0x6, 0x7f, 0x7, 0x9, 0x5, 0x3, 0x7, 0x8001, 0x6, 0xffff, 0x3, 0x9, 0xe, 0x9, 0x80000000, 0x6, 0x800, 0xfffffffe, 0x9, 0xf3, 0x10001, 0x8, 0x8, 0x9, 0x7, 0x3, 0xa, 0x84, 0x6, 0xb, 0x400, 0x8, 0x27e45852, 0x3, 0x917, 0xff, 0xd, 0x117, 0x1, 0xfffffff9, 0x3, 0x80, 0x5, 0x9, 0xffff7d9c, 0x8, 0x5, 0x1, 0x2, 0x75b, 0x6, 0x1, 0x8000, 0x3, 0x6, 0x4, 0x7, 0x1, 0x7ff, 0x5, 0xb, 0xe19f, 0x7, 0x6, 0x2, 0x100, 0xffffd0a3, 0x2, 0x0, 0x5, 0x200, 0x1, 0x3ff, 0x45e, 0x7111, 0x160, 0x80, 0x8, 0xa, 0x6, 0x8, 0x5bce, 0x0, 0x7fffffff, 0x100000, 0x9, 0x4, 0x7, 0x5, 0x1962, 0x7f, 0x4b, 0xf, 0x9, 0x0, 0x0, 0x3, 0x97, 0x10, 0xc, 0xfffffffc, 0x1, 0x9, 0x28, 0x401, 0xec37, 0xfffffff9, 0x4, 0x1, 0xc8, 0x8, 0x10001, 0x40, 0x200, 0x2, 0xfffffbff, 0x4, 0x3274, 0x68, 0x7ff, 0x8, 0x4, 0x2, 0x6, 0x40, 0xfffffffd, 0x2, 0x10001, 0x568, 0x7, 0x6495, 0x6, 0x2, 0x7, 0xc1a, 0x0, 0x7, 0xec, 0x0, 0xd, 0x5, 0x8, 0x1b1b, 0x7fffffff, 0x200, 0x5, 0x0, 0x10, 0x40, 0x6, 0x10, 0x100, 0x2, 0x6, 0x6, 0x72, 0x10, 0x4f3a, 0x4, 0x5, 0x2, 0x5, 0x7, 0x0, 0x8, 0x9, 0x2000000, 0xe, 0x4, 0x7, 0x3, 0x0, 0x9, 0x2, 0x40, 0x5, 0xe, 0x4, 0xdcf, 0x10000, 0x0, 0x5, 0x8, 0xe3ca, 0x10001, 0x1, 0x5, 0x0, 0xfe, 0x1, 0xa4, 0x40, 0xffff, 0x10000, 0x2, 0x181b, 0x200, 0x7fffffff, 0x7fff, 0x6, 0xffffffff, 0x9, 0x9, 0x5, 0x4, 0x7ff, 0x7, 0x1, 0x0, 0x5, 0x184b, 0x2f6b83f9, 0x7f, 0x8, 0x5, 0x2, 0x2, 0x5, 0x64, 0x3, 0x0, 0x7, 0x7, 0xc8, 0xa628, 0x9, 0x9, 0xa433, 0x8001, 0x0, 0xfffff937, 0x7, 0x4, 0x7, 0x4, 0x80000001, 0x3ff, 0x5, 0x7ff, 0x9, 0x6a1afada, 0x8, 0x1, 0x8305, 0x7, 0x5, 0x4, 0x4, 0x5, 0x8342, 0xf72, 0x7f, 0xd, 0x8, 0x7114, 0x2, 0x9, 0x1ff, 0xfff, 0xdae, 0x4c64cc51, 0x1, 0x440a, 0x5, 0x2, 0x1ff, 0x8000, 0xec9, 0x8, 0xd, 0xfffff000, 0x7, 0x2, 0x9, 0x80000000, 0x8, 0x0, 0x3, 0x6b, 0x2, 0xfb, 0x3, 0x6, 0x10000, 0xb894, 0x40, 0x3, 0x7, 0x3, 0x481, 0x10000, 0x3, 0x2, 0x0, 0x4, 0x4, 0x7, 0x8001, 0x6, 0xa0ae, 0x2, 0xfffffffa, 0x2, 0x1ff, 0x7, 0x3, 0xd49e, 0xac, 0x100, 0xbec, 0x5, 0x4, 0x8, 0x4485a6b9, 0x6, 0x2, 0x5, 0xffff, 0x7a, 0xff, 0xfff, 0x1, 0xed5, 0x0, 0x8, 0x7, 0x7fffffff, 0x7, 0xf8, 0x5, 0x2, 0x2, 0x0, 0x7, 0xfffffff7, 0x0, 0x906, 0x10, 0x5, 0x10000, 0x200, 0x9, 0xffffffff, 0x2c78, 0xf, 0xfbda, 0x6, 0x9, 0x6, 0x9324, 0x2, 0x2, 0x462, 0x9, 0x400, 0x8, 0x7, 0xadea56d, 0x5, 0x7, 0x10001, 0x7, 0xff, 0xd, 0x2703d3d6, 0x9, 0x200, 0x6, 0x0, 0xb549, 0x7, 0xc, 0x7f, 0x1ff, 0x48cbbcd0, 0xfffffffc, 0x1, 0x4, 0x10, 0xe, 0xb183, 0x8ab1, 0x0, 0x8, 0x285b, 0x8, 0x2, 0x1, 0x4, 0x7, 0xfffffffb, 0xfffffffa, 0x10001, 0x100, 0x0, 0x1, 0x8, 0x4, 0xb86, 0x1, 0x9d3a, 0xd, 0x40, 0x1, 0x0, 0xa, 0x6, 0xfe, 0x6, 0x7, 0xd9, 0x6, 0x8eb, 0x1000, 0x5, 0x8, 0x62, 0x6, 0x4, 0x52dd, 0xfffffffe, 0x8000, 0x5, 0x0, 0x6, 0xf, 0x8674, 0xc04a, 0x6, 0x8, 0x5, 0xfffffffd, 0x5, 0x2, 0x0, 0x7, 0x8000, 0x8, 0x7, 0x7fff, 0x1, 0x3, 0x3, 0x7, 0xffffffff, 0x8000, 0x9, 0x8001, 0x9, 0xfb1, 0x0, 0x1, 0x400, 0xfffffffe, 0x8001, 0xffffffff, 0x1, 0x7, 0x1ff, 0x9a, 0x30, 0x40, 0x6, 0x1, 0x3, 0x4, 0x4, 0x10000, 0x401, 0x10001, 0x9, 0x3, 0x8, 0x1, 0x100, 0x8, 0x8, 0x8, 0x73c8, 0x4, 0x5, 0x5, 0xfffffffa, 0x8, 0x1, 0x9c, 0x400, 0x9, 0x6ac, 0x9, 0xfff, 0x358, 0x0, 0x101, 0x8000, 0xffffffff, 0x7, 0x3, 0x9, 0x2, 0x8, 0x400, 0x0, 0x8, 0x1ff, 0x81, 0x4, 0x1ff, 0x1, 0x1748, 0x8001, 0x6, 0x6, 0x7, 0x81, 0x5, 0xfffffff9, 0x7, 0xdca5, 0x4, 0x2, 0x98, 0x0, 0x9, 0xf8, 0x10000, 0x2, 0x8000, 0xfffffffc, 0x1, 0x9, 0xfffffeff, 0xb, 0xfffffffa, 0x2, 0x0, 0x1, 0x7, 0x40, 0x10001, 0x398, 0xfea, 0x5, 0x3, 0x6, 0x4, 0x80, 0x80000000, 0x3, 0x8, 0x2f0f2641, 0x1, 0x3ff, 0xe, 0x2, 0x4, 0x2, 0x37, 0xa, 0x16f8fd6e, 0x6, 0x43, 0x5, 0x9, 0x3, 0xfffffffa, 0x7, 0x1ffe, 0x5, 0x1ff, 0x8, 0x2, 0xa, 0x8fb2580, 0x100, 0x6, 0x5, 0x8, 0x1, 0x11fac36d, 0x0, 0x6, 0xd8a6, 0xaf, 0xfffffc00, 0x1, 0x2, 0x4f, 0x2, 0xfff, 0x7, 0x3ff, 0xfff, 0x7, 0x40, 0x6, 0xfffffff7, 0x2, 0x401, 0x9, 0x5, 0x8, 0xde5, 0x1, 0x6, 0x3, 0x0, 0x3e7, 0x0, 0xfffffffb, 0x7, 0x5, 0x2, 0x7, 0x2, 0x7ce, 0x74, 0x5, 0x1, 0x4, 0x2, 0x76, 0x1, 0x6, 0x9, 0xffff, 0x0, 0x2, 0x9, 0x7, 0x100, 0x3, 0x7, 0xffff, 0x92b, 0x5, 0x10000, 0x5, 0xee, 0x144, 0x3, 0x0, 0x100, 0x9, 0x15e, 0x9, 0x100, 0x1, 0x8001, 0x3, 0x4, 0x8, 0x46b, 0x800, 0x1, 0xf9dc, 0x5, 0x6, 0x1762, 0x446, 0x6, 0x2, 0x7ff, 0x8, 0x3ff, 0x1000, 0x1, 0x6, 0x3, 0x8001, 0x5, 0x9, 0x6, 0x6f9, 0x2, 0x9, 0x3, 0x8, 0xaba2, 0x5, 0xc, 0x7, 0xe6, 0x8, 0x8, 0xee5d, 0x5, 0x6, 0x8, 0x0, 0x8, 0x3b77, 0x8, 0xc76ce25, 0xc, 0x579, 0x2, 0x4, 0x4b7, 0x3, 0x99, 0x3, 0x7ff80000, 0x8, 0x1ff, 0x6, 0x9, 0x3, 0x10000, 0x2, 0x0, 0x9, 0xffff7fff, 0xff, 0x7, 0x2, 0x2f, 0x6, 0x2, 0xe, 0x5, 0xc771, 0xffffffff, 0x5, 0x1ff, 0x4, 0x6, 0x1ff, 0x5, 0x6, 0xa, 0x4, 0x2, 0xd, 0x7ff, 0x7, 0x7, 0xffff, 0xa397, 0xffffffff, 0xf5, 0x5, 0x9, 0x10001, 0x2, 0x2000, 0x0, 0x7, 0x3, 0x800, 0xffffffc0, 0x8, 0x1, 0x0, 0x0, 0x10000, 0x5, 0x6c, 0x4, 0x5, 0x2, 0x0, 0x3, 0xef, 0x3d5, 0xe, 0x3, 0x1, 0x2, 0x5, 0x4, 0x2, 0x0, 0x7, 0xe, 0xfff, 0x69c279b2, 0x8000, 0x5, 0x0, 0xfffffff6, 0x8, 0xbb5, 0x10001, 0xfffffffb, 0x4, 0x3, 0x7fff, 0x6, 0xfffffff8, 0x9, 0x7, 0xfffffff8, 0xfffffff6, 0x6, 0x6, 0x5, 0x2, 0x6, 0x10000, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0x7, 0x1ff, 0x6, 0xffffffff, 0x5, 0x3, 0x8, 0x2, 0x5, 0x81, 0x2, 0x4, 0x5, 0xed, 0x8, 0x1, 0x7, 0xffff, 0x10000, 0x7, 0x8180, 0xffff7fff, 0x8, 0x7f, 0x7, 0x3, 0x5f6, 0x7, 0x2, 0xdaa, 0x3, 0x1000, 0x778f3d60, 0x2, 0x1000, 0x4, 0x6d, 0x9, 0x9, 0x0, 0x5cf0f649, 0x0, 0x3, 0x4, 0x2, 0x9, 0x7, 0x8, 0x280000, 0x4, 0x6, 0x6, 0x8, 0x2, 0xe346, 0xffff, 0x90000000, 0x6, 0x7fffffff, 0x8000, 0xb, 0x6, 0x80000001, 0x6, 0x9, 0x2, 0x7, 0x4, 0x67d7, 0x3, 0x7, 0x7, 0x52, 0x1ff, 0x9, 0x6, 0x0, 0x1, 0x63, 0x8, 0x1000, 0xe51, 0x4, 0x9, 0x5, 0x7, 0x5, 0x0, 0x31a, 0x7, 0x8000, 0x9, 0xa, 0x4, 0xfffffffa, 0x4, 0x3, 0x1, 0x1, 0x1, 0x5, 0x4b, 0x4, 0x1, 0x80, 0x7, 0x2, 0x4e, 0x0, 0x10001, 0xc, 0x7, 0x3, 0xffffffff, 0x4, 0xffff, 0x3, 0x2, 0x10000, 0x5, 0x5, 0x8, 0x8, 0x2, 0x4, 0xc, 0x8, 0xfffffffa, 0x5, 0x679b, 0x6, 0x9, 0x3, 0x3, 0x5, 0x0, 0x5, 0x2, 0x0, 0x10000, 0x7, 0x7b5, 0xfffffff8, 0x3, 0x3, 0x1, 0x2, 0x4, 0x63f4bdf7, 0x0, 0x10000, 0x3d7, 0x1ff, 0xfffffff1, 0x7, 0x2000000, 0x9, 0x5, 0x3ff, 0xffffff59, 0x5, 0xfffffc00, 0x5, 0x80000000, 0x80000001, 0x5, 0x4]}) r7 = open(&(0x7f00000059c0)='./file0\x00', 0x40, 0x2) write$tun(r7, &(0x7f0000005a00)={@val={0x0, 0x883e}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1}}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000005a80)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000005b80)=0xe8) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005bc0), 0x4c0040, 0x0) sendmsg$nl_generic(r7, &(0x7f0000007040)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007000)={&(0x7f0000005c00)={0x13e8, 0x20, 0x1, 0x70bd2c, 0x25dfdbff, {0xe}, [@typed={0x8, 0xfb, 0x0, 0x0, @fd=r0}, @nested={0x1d0, 0x47, 0x0, 0x1, [@typed={0x14, 0x13, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @nested={0x4, 0x15b}, @typed={0xa, 0xc8, 0x0, 0x0, @str='\x19}!.\'\x00'}, @nested={0x4, 0x22}, @generic="edb23f9928e3dfdf640c506a1915f080a347f92915a5e1441cd17511cbecd28a62f2bc9acfde21597e94751ab8bf5e923f126f303ecbdb38653757711528a26c7515ca4821806c7cdd968e36f0350c600b16b7118158b37dd558d2e48db276fafbd007adcc7bae9e776cb74be9fddf09192843b28a8b95eb1f673804e576ea3ecd9d7da44cb971b0c7549f8913a7d4cd4fc79094b222936253b79dc2ce72db22fc8b54bf2a40de1524f48f71050cb21df1a47a4d6c24368ebaf9c50a0cd8f23ae6d8087c5bec9f40e6cfc4ef9dd13222ed03970dcef61612fd84d0970a719ccbb59236239de527d234d534f3f70f3fbfa2a7d79ad1a3", @generic="7074d4d37d25d5b4a444417f761118d15bdd50afd5a5641a949c2d118d3553839b53329c330c7c2e7e33b7f2fc76f3aeeec2281ccd2c6987a48c7868859313f1aacbd613982c4c93d7bb247ab0d2b256d4b2294c85bcf2dd8a30fa2d89f284994844143837cf10f44dd853c5877164c7039539ded550d4bbe184bbe981d131178d30f4bc82f24ee85d1d204ff29939d31e6f7aea0518b79455c642d52bd577792359ad1b0a3c", @nested={0x4, 0x165}, @nested={0x4, 0xb1}]}, @nested={0x10c7, 0x13b, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x4, 0x13a}, @generic="6b211e2f108b513432a3954ba081b7bbbd320477a4e5873679df76a968b8b168d8d957309a8c6da9be91ab3c4511d7e1cbc267188ab33b706fd8fc1c1c4d7751ffb35b273a0561131540846b322749d41228ceb637a0556ce8ca65e7701f7a991eb1dceb402f793f1b61cf40f25cc3eb4678c3616b45d092a09e837caaa51c2359dd0d695690eab25d2928b87257ee76ee", @nested={0x4, 0x5e}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0xfecc}, @typed={0x1004, 0x8a, 0x0, 0x0, @binary="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"}, @generic="f02fe603d7b6e202456b", @typed={0xc, 0x38, 0x0, 0x0, @str='geneve0\x00'}]}, @generic="dc39cc9205742da7676361f0ceb49810c920d9a59bd168b96731df00559c77f20b2ae4ddaba45e9f6730788fc359975eccfc64995b861bae486675eacb7f236d5fb9be42662490af0dc162511acd1a43a02e23af3998e92c2acc2653acc2a2b561bba15830704d99a73213f1b2b41b0f6872797886", @typed={0x4, 0x16}, @nested={0x10, 0x15e, 0x0, 0x1, [@typed={0x4, 0x12a}, @typed={0x8, 0x2a, 0x0, 0x0, @fd=r2}]}, @typed={0x8, 0xe2, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r9}, @generic="707b0b03ccb2f695f1b8d586c8c10efd78ed7e69", @generic="067eb72796a45cc267858e6d6df252d73ea283d90b0526ef7bb3052fea73e3de682c95edfef7bacb0eb39f43aeb1ff5bbe995481226860b4e87853a9c6c018a4444fba41fd70f8f03e3f061e464eb03729cdb69cf7b85ac89aaceaf41f3ac495deb639c900000f7c64032e206767ce2d86e7a1dffbc643e048513254bbfddcb07ee401ed99539b"]}, 0x13e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x91) read$eventfd(r7, &(0x7f0000007080), 0x8) r10 = syz_usb_connect$uac2(0x1, 0xc6, &(0x7f00000070c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0x8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x4, 0xe0, 0xfa, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x1d}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffff, 0x3, 0x2f, 0x3}, [@output_terminal={0xc, 0x24, 0x3, 0x1, 0x304, 0x4, 0x4, 0x1, 0xe, 0x2a}, @sample_rate={0x9, 0x24, 0xd, 0x5, 0x0, 0x5, [0x0]}, @sample_rate={0x11, 0x24, 0xd, 0x2, 0x1, 0x5, [0x3, 0x1, 0x1, 0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x7, 0x4, 0x3, 0x1}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x6, 0x10, "b5a2"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xe2, 0x6, 0x1, {0x8, 0x25, 0x1, 0x2, 0x30, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xe, 0xae, 0x4, {0x8, 0x25, 0x1, 0x0, 0x30, 0x40, 0x5}}}}}}}}]}}, &(0x7f0000007380)={0xa, &(0x7f00000071c0)={0xa, 0x6, 0x250, 0x0, 0x4, 0x7a, 0x8, 0x4}, 0x10d, &(0x7f0000007200)={0x5, 0xf, 0x10d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "29b73798ae7d1b634f64865d8ef0f436"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x401}, @generic={0x45, 0x10, 0x2, "0ce50db0ff704f1af87a5c12b45f008c9dd52be60453e450dee13c20459970be254dc94e75c66b6196de7ae54428b9c93241c7169e8b7209959df899a25b7f553813"}, @generic={0x9e, 0x10, 0x3, "e65b54616e4365513ac36901fc9c5e29fdcee88bebcb1108462cb1dc6b0dd54c9f09adfe121664be087ced87e049c195f67cbf212855be5f1adea82e9c54402d2c555fa4d700cb208cc1a4bf5d14b61b06262b82010d6c36c2e0cf5583a3e17349a616ebc4e207d2002a675df6ae12a0f82b2d077eaaa8e1e22b894949712d6121e88bed2f3107d76f5e96b7635637b43e82eaa934b46029c153e6"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x4, 0xd11b}]}, 0x1, [{0x4, &(0x7f0000007340)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_control_io$uac2(r10, &(0x7f0000007440)={0x14, &(0x7f00000073c0)={0x40, 0x22, 0xf, {0xf, 0x22, "7b1a2856661a4026f39df77640"}}, &(0x7f0000007400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f00000076c0)={0x44, &(0x7f0000007480)={0x20, 0x9, 0x77, "a20e787e3b23a67f3fd5be9ea1d06f701b8d1fc57a6ded071cdae0fd209b1e63da0443e62124a6fc92bdbc19599be82fe1daaa4a87ab1463bf4910ec75ac2f0c07553d827c175709aae205819cfddc044235942de70050baf76889becd19487c440af2b046d4201298841a93df5e3858b0bf786af6fb47"}, &(0x7f0000007500)={0x0, 0xa, 0x1}, &(0x7f0000007540)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000007580)={0x20, 0x81, 0x2, "1c7d"}, &(0x7f00000075c0)={0x20, 0x82, 0x1, "e9"}, &(0x7f0000007600)={0x20, 0x83, 0x2, 'zw'}, &(0x7f0000007640)={0x20, 0x84, 0x3, "bc8391"}, &(0x7f0000007680)={0x20, 0x85, 0x3, "590aec"}}) r11 = inotify_init() quotactl_fd$Q_GETQUOTA(r11, 0xffffffff80000700, r8, &(0x7f0000007740)) write$tcp_congestion(r7, &(0x7f00000077c0)='vegas\x00', 0x6) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000007800)={0x9, 0x1, 0xf, 0x7fff, 0x1, 0x0, 0xfffffffffffffff9}) 22.710141477s ago: executing program 0 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000b000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22.55649882s ago: executing program 0 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000000300001300000008000300", @ANYRES32=r6, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 22.442671203s ago: executing program 0 (id=402): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004c30400ad000200000000000006040000000000f93132", 0x39}], 0x1) 22.403056732s ago: executing program 0 (id=404): r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x950b, 0x1e10, 0xce1, 0x625, 0x9, 0x3, 0x0, 0xa, 0x1, 0xd10, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000402404345500010000000109021900010100e00009040000010900000007058103"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syncfs(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) open$dir(&(0x7f0000000040)='./cgroup.cpu/test\x00', 0x400940, 0x40) r1 = openat(0xffffffffffffffff, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000380)='100000', 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "1fbabd000000000093080000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) pwrite64(0xffffffffffffffff, &(0x7f00000002c0)="58f64c501021e7a0f9e90e", 0xb, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x3ff, 0x31c, {{0x5, 0x4, 0x3, 0x2e, 0x14, 0x64, 0x0, 0xe, 0x29, 0x0, @remote, @local}}}}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) unshare(0x62040200) 22.16093031s ago: executing program 1 (id=407): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r1, 0x0, 0x1, 0x4}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='my_tracefs/events/task/task_rename/enable\x00', 0x0, 0x186) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x32, 0x17, 0x3, {0x29, 'my_tracefs/events/task/task_rename/enable'}}, 0x32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @mcast1, 0x8}, {0xa, 0x4e21, 0x200, @private1, 0x3}, r4}}, 0x48) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0xc0800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)) 22.012934462s ago: executing program 1 (id=408): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x180) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x20, 0x7ffb7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x400000000000000) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='.\x00') getsockname$packet(r0, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r6, &(0x7f0000000000)='3', 0x4e) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x82001, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$nci(r7, &(0x7f00000001c0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x0, 0x3, 0x9, 0x80}, 0x3) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000010000000000fedbdf2508000000", @ANYRES32=r8, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="0800198004000200"], 0x28}], 0x1}, 0x4048000) 21.621490021s ago: executing program 2 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x2000000, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "0000fffffff50000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 21.249879319s ago: executing program 2 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "00000000000000f5"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 21.067195551s ago: executing program 2 (id=414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000fcffffffffffffff00000000000000000000000000000000ffffffffffffffff08000000000000000000000000000000000000da84669c00000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000016c0)=ANY=[@ANYBLOB="110086dd0000110000000000000060ec970000382c00fe8000000000000000000000000000aaff02ff8000000000000000000000000104"], 0xfdef) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 20.792570616s ago: executing program 2 (id=415): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001780)={r1, r1}, &(0x7f00000017c0)=""/109, 0x6d, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 20.173907847s ago: executing program 3 (id=418): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed112889fffe8000000000000000000000000000aaff020000000001000000000000000001"], 0xfdef) 20.030438767s ago: executing program 0 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x5, 0x0, 0x2, 0x4}}, 0x20) 19.256868514s ago: executing program 3 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000b000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 18.991322368s ago: executing program 2 (id=421): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000240)={0x0, 0x9}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40000000, 0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x4020940d, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x24000010) 18.960823006s ago: executing program 3 (id=422): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x242) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xe8a]}) 18.714813009s ago: executing program 3 (id=423): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000000c0)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080003004000000008000500640000000c000700e803ffe40000eeff", 0x68, 0x0, 0x0, 0x0) 18.714443959s ago: executing program 1 (id=424): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0xf) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0xb) landlock_restrict_self(r1, 0x0) r2 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r2, 0x8000000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x40, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f00000000c0)=""/247, 0xf7) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f0000000100)={0x8, r5}) landlock_restrict_self(r0, 0xe) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) socket$inet6(0xa, 0x800, 0xec) landlock_restrict_self(r6, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) 18.231099135s ago: executing program 0 (id=425): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r1, 0x0, 0x1, 0x4}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='my_tracefs/events/task/task_rename/enable\x00', 0x0, 0x186) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x32, 0x17, 0x3, {0x29, 'my_tracefs/events/task/task_rename/enable'}}, 0x32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @mcast1, 0x8}, {0xa, 0x4e21, 0x200, @private1, 0x3}, r4}}, 0x48) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0xc0800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)) 17.154642s ago: executing program 3 (id=426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000330300001300000008000300", @ANYRES32=r6, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 16.115302096s ago: executing program 1 (id=427): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004fc0400ad000200000000000006040000000000f93132", 0x39}], 0x1) 15.755687532s ago: executing program 3 (id=428): r0 = mq_open(&(0x7f0000000000)='-+s$!,\'\x00', 0x800, 0x2, &(0x7f0000000080)={0x944, 0x8, 0x83}) mq_notify(r0, &(0x7f00000003c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000100)="dc05164b34cefb47c5edc40dd5f2ed35d5805e12139c5f7e04c9fd17a2d49ac1ee09f2", &(0x7f0000000300)="a070dbe5fd3d3230e8bcd7692bf019c73b69715c474518e5af716d6d2f7dcac0ada5e90e1019b72a2f2b080453d49a8b812d42b77093009f7dfdcad2a26cdc38b88880287ac027f73c0e871a4a211b0e688b6018107e0ec320d2af71332f0d0ade4345016a57d2d9acfd692c86e687e17bb02b4295103de177f748b962a22f74a0abbf43366cdefa6e9944348c3b3c42b92d81777eb86e5496e0b43feb89100ad2d581a25899d6d46e10bd7f87ba3182af9b3605693aa1949a66c28e49dc6f"}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x94}}, 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xd5a8, 0xd, 0x7, 0x800, 0x12000000}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000400)={r6, 0x7}, 0xc) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) close(0x3) 15.392405488s ago: executing program 2 (id=429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "0000fffffff50000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4040094) 2.417484507s ago: executing program 32 (id=425): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r1, 0x0, 0x1, 0x4}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='my_tracefs/events/task/task_rename/enable\x00', 0x0, 0x186) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x32, 0x17, 0x3, {0x29, 'my_tracefs/events/task/task_rename/enable'}}, 0x32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @mcast1, 0x8}, {0xa, 0x4e21, 0x200, @private1, 0x3}, r4}}, 0x48) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0xc0800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)) 393.276602ms ago: executing program 33 (id=427): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004fc0400ad000200000000000006040000000000f93132", 0x39}], 0x1) 334.03888ms ago: executing program 34 (id=429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "0000fffffff50000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4040094) 0s ago: executing program 35 (id=428): r0 = mq_open(&(0x7f0000000000)='-+s$!,\'\x00', 0x800, 0x2, &(0x7f0000000080)={0x944, 0x8, 0x83}) mq_notify(r0, &(0x7f00000003c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000100)="dc05164b34cefb47c5edc40dd5f2ed35d5805e12139c5f7e04c9fd17a2d49ac1ee09f2", &(0x7f0000000300)="a070dbe5fd3d3230e8bcd7692bf019c73b69715c474518e5af716d6d2f7dcac0ada5e90e1019b72a2f2b080453d49a8b812d42b77093009f7dfdcad2a26cdc38b88880287ac027f73c0e871a4a211b0e688b6018107e0ec320d2af71332f0d0ade4345016a57d2d9acfd692c86e687e17bb02b4295103de177f748b962a22f74a0abbf43366cdefa6e9944348c3b3c42b92d81777eb86e5496e0b43feb89100ad2d581a25899d6d46e10bd7f87ba3182af9b3605693aa1949a66c28e49dc6f"}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x94}}, 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xd5a8, 0xd, 0x7, 0x800, 0x12000000}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000400)={r6, 0x7}, 0xc) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 80.195397][ T5603] cgroup: Unknown subsys name 'net' [ 80.313635][ T5603] cgroup: Unknown subsys name 'cpuset' [ 80.317066][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.992408][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.451033][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.452772][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.454197][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.455600][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.456264][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.456923][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.457687][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.458171][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.465601][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.473449][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.481376][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.491207][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.495417][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.506782][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.513169][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.514180][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.522215][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.533459][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.564139][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.567255][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.248174][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.248501][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.254116][ T5616] bridge_slave_0: entered allmulticast mode [ 86.261616][ T5616] bridge_slave_0: entered promiscuous mode [ 86.276109][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.276217][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.276354][ T5615] bridge_slave_0: entered allmulticast mode [ 86.278158][ T5615] bridge_slave_0: entered promiscuous mode [ 86.288207][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.292112][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.292573][ T5614] bridge_slave_0: entered allmulticast mode [ 86.302336][ T5614] bridge_slave_0: entered promiscuous mode [ 86.342568][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.342680][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.342778][ T5616] bridge_slave_1: entered allmulticast mode [ 86.344286][ T5616] bridge_slave_1: entered promiscuous mode [ 86.378717][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.378825][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.378963][ T5615] bridge_slave_1: entered allmulticast mode [ 86.380982][ T5615] bridge_slave_1: entered promiscuous mode [ 86.382964][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.383061][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.383173][ T5614] bridge_slave_1: entered allmulticast mode [ 86.384562][ T5614] bridge_slave_1: entered promiscuous mode [ 86.471725][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.471818][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.471937][ T5613] bridge_slave_0: entered allmulticast mode [ 86.473564][ T5613] bridge_slave_0: entered promiscuous mode [ 86.480930][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.533385][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.533494][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.533622][ T5613] bridge_slave_1: entered allmulticast mode [ 86.535190][ T5613] bridge_slave_1: entered promiscuous mode [ 86.549491][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.564151][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.582111][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.614048][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.616670][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.620897][ T53] Bluetooth: hci0: command tx timeout [ 86.621969][ T53] Bluetooth: hci1: command tx timeout [ 86.622626][ T5621] Bluetooth: hci3: command tx timeout [ 86.693974][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.696348][ T5616] team0: Port device team_slave_0 added [ 86.698806][ T5621] Bluetooth: hci2: command tx timeout [ 86.738153][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.746869][ T5616] team0: Port device team_slave_1 added [ 86.770619][ T5615] team0: Port device team_slave_0 added [ 86.772547][ T5614] team0: Port device team_slave_0 added [ 86.774479][ T5615] team0: Port device team_slave_1 added [ 86.810372][ T5614] team0: Port device team_slave_1 added [ 86.838722][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.838747][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.838770][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.842357][ T5613] team0: Port device team_slave_0 added [ 86.907396][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.907414][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.907523][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.910171][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.910212][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.910277][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.923216][ T5613] team0: Port device team_slave_1 added [ 87.005617][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.005636][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.005663][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.077233][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.077254][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.077282][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.167478][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.167497][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.167525][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.228216][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.228540][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.228569][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.309960][ T5616] hsr_slave_0: entered promiscuous mode [ 87.311251][ T5616] hsr_slave_1: entered promiscuous mode [ 87.313400][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.313423][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.313451][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.426235][ T5615] hsr_slave_0: entered promiscuous mode [ 87.427310][ T5615] hsr_slave_1: entered promiscuous mode [ 87.428045][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 87.428140][ T5615] Cannot create hsr debugfs directory [ 87.529188][ T5613] hsr_slave_0: entered promiscuous mode [ 87.530497][ T5613] hsr_slave_1: entered promiscuous mode [ 87.531049][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 87.531069][ T5613] Cannot create hsr debugfs directory [ 87.579288][ T5614] hsr_slave_0: entered promiscuous mode [ 87.580198][ T5614] hsr_slave_1: entered promiscuous mode [ 87.580796][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 87.580824][ T5614] Cannot create hsr debugfs directory [ 88.046476][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.061614][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.062786][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.074425][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.090728][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.095725][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.118844][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.122059][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.197474][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.206905][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.207982][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.225141][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.238674][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.242367][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.243387][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.247818][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.364379][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.376600][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.377700][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.395677][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.396942][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.409127][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.413020][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.429832][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.531265][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.535198][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.536185][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.550092][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.571625][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.574688][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.577960][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.597423][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.627358][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.699814][ T5621] Bluetooth: hci3: command tx timeout [ 88.699868][ T5621] Bluetooth: hci1: command tx timeout [ 88.699894][ T5621] Bluetooth: hci0: command tx timeout [ 88.716294][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.749226][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.773549][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.773676][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.778424][ T4932] Bluetooth: hci2: command tx timeout [ 88.821448][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.821523][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.850228][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.874575][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.874651][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.909785][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.909863][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.927068][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.006247][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.033461][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.066079][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.066191][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.151252][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.151366][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.153838][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.202432][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.202543][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.247054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.247169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.993595][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.127627][ T5616] veth0_vlan: entered promiscuous mode [ 90.160454][ T5616] veth1_vlan: entered promiscuous mode [ 90.209365][ T5616] veth0_macvtap: entered promiscuous mode [ 90.214996][ T5616] veth1_macvtap: entered promiscuous mode [ 90.266187][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.277285][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.316886][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.389245][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.448954][ T139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.473114][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.521571][ T5615] veth0_vlan: entered promiscuous mode [ 90.550554][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.582364][ T5615] veth1_vlan: entered promiscuous mode [ 90.630489][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.637137][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.637158][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.718016][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.743646][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.743669][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.778657][ T4932] Bluetooth: hci0: command tx timeout [ 90.778692][ T4932] Bluetooth: hci1: command tx timeout [ 90.778717][ T4932] Bluetooth: hci3: command tx timeout [ 90.820766][ T5615] veth0_macvtap: entered promiscuous mode [ 90.837064][ T5615] veth1_macvtap: entered promiscuous mode [ 90.860228][ T5621] Bluetooth: hci2: command tx timeout [ 90.862711][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.945297][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.970301][ T5614] veth0_vlan: entered promiscuous mode [ 90.988976][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.066125][ T5613] veth0_vlan: entered promiscuous mode [ 91.101667][ T5614] veth1_vlan: entered promiscuous mode [ 91.120683][ T5613] veth1_vlan: entered promiscuous mode [ 91.160865][ T5771] capability: warning: `syz.1.5' uses deprecated v2 capabilities in a way that may be insecure [ 91.162478][ T5771] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5'. [ 91.164569][ T5771] tmpfs: Unknown parameter 'qta' [ 91.255800][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.255823][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.331210][ T5614] veth0_macvtap: entered promiscuous mode [ 91.335301][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.335323][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.354675][ T5613] veth0_macvtap: entered promiscuous mode [ 91.370046][ T5614] veth1_macvtap: entered promiscuous mode [ 91.392209][ T5613] veth1_macvtap: entered promiscuous mode [ 91.411931][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.416647][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.417078][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.496462][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.543457][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.579513][ T152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.585617][ T5775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6'. [ 91.628851][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.629860][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.629907][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.629955][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.629996][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.630035][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.630074][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.630112][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.630149][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.630188][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.843220][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.843243][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.872943][ T5779] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.068486][ T1555] cfg80211: failed to load regulatory.db [ 92.069509][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.069529][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.171539][ T5784] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 92.172413][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.172435][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.374297][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.374321][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.748655][ T5791] jffs2: notice: (5791) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.863110][ T53] Bluetooth: hci0: command tx timeout [ 92.863166][ T4932] Bluetooth: hci1: command tx timeout [ 92.863205][ T5621] Bluetooth: hci3: command tx timeout [ 92.939192][ T5621] Bluetooth: hci2: command tx timeout [ 93.240754][ T5798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'. [ 93.487853][ T5808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 93.703285][ T5812] ======================================================= [ 93.703285][ T5812] WARNING: The mand mount option has been deprecated and [ 93.703285][ T5812] and is ignored by this kernel. Remove the mand [ 93.703285][ T5812] option from the mount to silence this warning. [ 93.703285][ T5812] ======================================================= [ 93.776109][ T5812] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000 [ 93.783437][ T152] IPVS: starting estimator thread 0... [ 93.908829][ T5815] IPVS: using max 33 ests per chain, 79200 per kthread [ 94.209260][ T1555] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.344734][ T5830] Zero length message leads to an empty skb [ 94.345609][ T5828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.26'. [ 94.348467][ T1555] usb 4-1: device descriptor read/64, error -71 [ 94.588744][ T1555] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.720412][ T1555] usb 4-1: device descriptor read/64, error -71 [ 94.830159][ T1555] usb usb4-port1: attempt power cycle [ 94.925588][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'. [ 95.168729][ T1555] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.190309][ T1555] usb 4-1: device descriptor read/8, error -71 [ 95.408735][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.429614][ T1555] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.449001][ T1555] usb 4-1: device descriptor read/8, error -71 [ 95.558894][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 95.559270][ T1555] usb usb4-port1: unable to enumerate USB device [ 95.562881][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.563026][ T45] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 95.565590][ T45] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 95.612135][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.612167][ T45] usb 3-1: Product: syz [ 95.612186][ T45] usb 3-1: Manufacturer: syz [ 95.612203][ T45] usb 3-1: SerialNumber: syz [ 95.912967][ T5852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.936544][ T5852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.957017][ T5868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36'. [ 95.968133][ T45] usb 3-1: Cannot retrieve CPort count: -71 [ 95.968181][ T45] usb 3-1: Cannot retrieve CPort count: -71 [ 95.968206][ T45] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 96.019748][ T45] usb 3-1: USB disconnect, device number 2 [ 97.057454][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 97.282081][ T5912] netlink: 'syz.3.47': attribute type 27 has an invalid length. [ 97.334752][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.48'. [ 98.239726][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.56'. [ 98.593207][ T5970] netlink: 'syz.0.59': attribute type 4 has an invalid length. [ 98.624725][ T5970] netlink: 'syz.0.59': attribute type 4 has an invalid length. [ 98.659021][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.794263][ T9] usb 2-1: device descriptor read/64, error -71 [ 98.887255][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 99.048318][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.198511][ T9] usb 2-1: device descriptor read/64, error -71 [ 99.320950][ T9] usb usb2-port1: attempt power cycle [ 99.645067][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 99.658365][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.679846][ T9] usb 2-1: device descriptor read/8, error -71 [ 99.829562][ T5997] overlay: ./file2 is not a directory [ 99.928404][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.959222][ T9] usb 2-1: device descriptor read/8, error -71 [ 100.070582][ T9] usb usb2-port1: unable to enumerate USB device [ 100.138801][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.271046][ T45] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.313348][ T43] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 100.316270][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.316319][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.359903][ T43] usb 4-1: config 0 descriptor?? [ 100.374870][ T43] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 100.375146][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 100.375245][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 100.430806][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 100.430902][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 100.430986][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 100.431071][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 100.431156][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 100.431242][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 100.434886][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 100.462907][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.462949][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.484026][ T43] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 100.528754][ T45] usb 1-1: config 0 descriptor?? [ 100.557417][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 100.557509][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 100.557624][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 100.557707][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 100.557789][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 100.557872][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 100.607214][ T43] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 100.675574][ T5999] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 100.675598][ T5999] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.70'. [ 100.771663][ T6014] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.75:6014 [ 100.842970][ T5621] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 101.128317][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.289530][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 101.290268][ T43] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 101.292347][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.378499][ T43] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 101.850930][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 102.054994][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 102.116605][ T6029] netlink: 'syz.1.80': attribute type 4 has an invalid length. [ 102.146451][ T6029] netlink: 25 bytes leftover after parsing attributes in process `syz.1.80'. [ 102.355257][ T6017] loop9: detected capacity change from 0 to 32767 [ 102.395120][ T6034] syzkaller1: entered promiscuous mode [ 102.395145][ T6034] syzkaller1: entered allmulticast mode [ 102.430869][ T5620] Buffer I/O error on dev loop9, logical block 4095, async page read [ 102.795991][ T5620] Buffer I/O error on dev loop9, logical block 4095, async page read [ 102.820444][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 102.820592][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 102.864237][ T45] usb 1-1: USB disconnect, device number 2 [ 103.245286][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 103.428379][ T1555] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 103.525450][ T6058] netlink: 'syz.0.91': attribute type 4 has an invalid length. [ 103.552313][ T6058] netlink: 25 bytes leftover after parsing attributes in process `syz.0.91'. [ 103.582775][ T1555] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.583456][ T1555] usb 2-1: not running at top speed; connect to a high speed hub [ 103.583490][ T1555] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 103.586913][ T1555] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 242, changing to 4 [ 103.629236][ T1555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.629265][ T1555] usb 2-1: Product: syz [ 103.629282][ T1555] usb 2-1: Manufacturer: syz [ 103.629297][ T1555] usb 2-1: SerialNumber: syz [ 103.911486][ T9] usb 3-1: USB disconnect, device number 3 [ 103.975631][ T1555] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 104.241995][ T1555] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 104.269708][ T1555] usb 2-1: selecting invalid altsetting 1 [ 104.269735][ T1555] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 104.270735][ T1555] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 104.302726][ T1555] usb 2-1: USB disconnect, device number 6 [ 104.309777][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.449845][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.479131][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 104.483155][ T43] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 104.486296][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.486327][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.486354][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 32770, setting to 1024 [ 104.512823][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.512906][ T43] usb 1-1: Product: syz [ 104.512948][ T43] usb 1-1: Manufacturer: syz [ 104.512990][ T43] usb 1-1: SerialNumber: syz [ 104.579740][ T43] usb 1-1: config 0 descriptor?? [ 104.596415][ T43] pegasus_notetaker 1-1:0.0: packet size is too small (0) [ 104.596543][ T43] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 104.598769][ T1555] usb 4-1: USB disconnect, device number 6 [ 104.693171][ T1555] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 104.727675][ T1555] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 104.737991][ T1555] keyspan 4-1:0.0: device disconnected [ 105.116385][ T6090] netlink: 'syz.3.103': attribute type 4 has an invalid length. [ 105.137732][ T6090] netlink: 25 bytes leftover after parsing attributes in process `syz.3.103'. [ 105.328652][ T1555] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.478455][ T1555] usb 3-1: Using ep0 maxpacket: 8 [ 105.479294][ T1555] usb 3-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.00 [ 105.480493][ T1555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 105.480527][ T1555] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.480581][ T1555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.485703][ T1555] usb 3-1: config 0 descriptor?? [ 105.608730][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.758381][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 105.760273][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 105.764108][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.764136][ T9] usb 2-1: Product: syz [ 105.764153][ T9] usb 2-1: Manufacturer: syz [ 105.764170][ T9] usb 2-1: SerialNumber: syz [ 105.799870][ T9] usb 2-1: config 0 descriptor?? [ 105.813070][ T9] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 105.921754][ T1555] input: HID 045e:0730 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:0730.0001/input/input6 [ 106.076070][ T1555] microsoft 0003:045E:0730.0001: input,hidraw0: USB HID v0.00 Joystick [HID 045e:0730] on usb-dummy_hcd.2-1/input0 [ 106.108801][ T1555] usb 3-1: USB disconnect, device number 4 [ 106.122524][ T9] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 106.271809][ T6095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.272639][ T6095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.275771][ T45] usb 2-1: USB disconnect, device number 7 [ 106.353112][ T6107] fido_id[6107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 106.466855][ T6111] FAULT_INJECTION: forcing a failure. [ 106.466855][ T6111] name failslab, interval 1, probability 0, space 0, times 1 [ 106.466894][ T6111] CPU: 0 UID: 0 PID: 6111 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(full) [ 106.466912][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.466927][ T6111] Call Trace: [ 106.466936][ T6111] [ 106.466943][ T6111] dump_stack_lvl+0xe8/0x150 [ 106.466970][ T6111] should_fail_ex+0x3eb/0x540 [ 106.466992][ T6111] should_failslab+0xa8/0x100 [ 106.467011][ T6111] __kmalloc_cache_noprof+0x9e/0x600 [ 106.467036][ T6111] ? report_access+0xd7/0x4e0 [ 106.467055][ T6111] ? report_access+0xd7/0x4e0 [ 106.467079][ T6111] report_access+0xd7/0x4e0 [ 106.467124][ T6111] ? yama_ptrace_access_check+0x7a/0xb20 [ 106.467152][ T6111] ? yama_ptrace_access_check+0x7a/0xb20 [ 106.467184][ T6111] yama_ptrace_access_check+0x8b2/0xb20 [ 106.467210][ T6111] ? yama_ptrace_access_check+0x7a/0xb20 [ 106.467245][ T6111] security_ptrace_access_check+0xd9/0x260 [ 106.467265][ T6111] ptrace_attach+0x216/0x8b0 [ 106.467291][ T6111] __se_sys_ptrace+0x1a3/0x3a0 [ 106.467313][ T6111] ? __pfx___se_sys_ptrace+0x10/0x10 [ 106.467350][ T6111] do_syscall_64+0x166/0x520 [ 106.467365][ T6111] ? trace_irq_disable+0x3b/0x140 [ 106.467388][ T6111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.467405][ T6111] ? clear_bhb_loop+0x70/0xc0 [ 106.467424][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.467440][ T6111] RIP: 0033:0x7fe51b79e159 [ 106.467459][ T6111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.467472][ T6111] RSP: 002b:00007fe51c69b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 106.467493][ T6111] RAX: ffffffffffffffda RBX: 00007fe51ba25fa0 RCX: 00007fe51b79e159 [ 106.467505][ T6111] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010 [ 106.467514][ T6111] RBP: 00007fe51b83503b R08: 0000000000000000 R09: 0000000000000000 [ 106.467523][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.467533][ T6111] R13: 00007fe51ba26038 R14: 00007fe51ba25fa0 R15: 00007fff4f3dd538 [ 106.467557][ T6111] [ 106.755562][ T6113] netlink: 'syz.3.113': attribute type 4 has an invalid length. [ 106.773421][ T6113] netlink: 25 bytes leftover after parsing attributes in process `syz.3.113'. [ 107.093209][ T9] usb 1-1: USB disconnect, device number 3 [ 107.414153][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'. [ 107.414176][ T6139] netlink: 1 bytes leftover after parsing attributes in process `syz.3.124'. [ 107.751904][ T6152] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 107.777378][ T6152] netlink: 25 bytes leftover after parsing attributes in process `syz.1.128'. [ 107.834392][ T6157] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 107.979249][ T25] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 108.130777][ T25] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 108.132869][ T25] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.132904][ T25] usb 1-1: config 0 has no interface number 0 [ 108.132958][ T25] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.132998][ T25] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.133034][ T25] usb 1-1: config 0 interface 1 has no altsetting 0 [ 108.133080][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.211256][ T25] usb 1-1: config 0 descriptor?? [ 108.627895][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.630101][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.645345][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.670202][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.670807][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.671067][ T25] usbhid 1-1:0.1: can't add hid device: -32 [ 108.671172][ T25] usbhid 1-1:0.1: probe with driver usbhid failed with error -32 [ 108.677782][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.695967][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.809888][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 108.811206][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.813427][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.813452][ T9] usb 4-1: Product: syz [ 108.813467][ T9] usb 4-1: Manufacturer: syz [ 108.813482][ T9] usb 4-1: SerialNumber: syz [ 108.821876][ T9] usb 4-1: config 0 descriptor?? [ 109.045552][ T9] usb 4-1: USB disconnect, device number 7 [ 109.263195][ T6188] netlink: 'syz.2.141': attribute type 4 has an invalid length. [ 109.277760][ T6188] netlink: 25 bytes leftover after parsing attributes in process `syz.2.141'. [ 109.356857][ T6190] type: 56 invalid [ 109.357269][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.142'. [ 110.174124][ T6218] input: syz0 as /devices/virtual/input/input7 [ 110.805656][ T43] usb 1-1: USB disconnect, device number 4 [ 110.863053][ T6238] netlink: 'syz.3.155': attribute type 4 has an invalid length. [ 110.865588][ T6238] netlink: 25 bytes leftover after parsing attributes in process `syz.3.155'. [ 111.019961][ T6243] netlink: 830 bytes leftover after parsing attributes in process `syz.0.156'. [ 112.459172][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.461351][ T25] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 112.461374][ T25] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 114.538544][ T25] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 114.538570][ T25] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 114.541021][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.618483][ T25] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 116.618483][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.618510][ T25] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 118.698582][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.698662][ T25] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 118.698683][ T25] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 119.050326][ T6372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 119.278349][ T1555] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.430949][ T1555] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 119.434210][ T1555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 119.434245][ T1555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 119.434274][ T1555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8196, setting to 1024 [ 119.437622][ T1555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.437648][ T1555] usb 4-1: Product: syz [ 119.437666][ T1555] usb 4-1: Manufacturer: syz [ 119.437683][ T1555] usb 4-1: SerialNumber: syz [ 119.493567][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.497425][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.519103][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.520965][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.524451][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.525070][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.559878][ T1555] usb 4-1: config 0 descriptor?? [ 119.565359][ T1555] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 119.566703][ T1555] usb 4-1: Detected SIO [ 119.566723][ T1555] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 119.584209][ T1555] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 119.607283][ T5348] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.749218][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.758311][ T5348] usb 3-1: Using ep0 maxpacket: 32 [ 119.759059][ T5348] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 119.763048][ T5348] usb 3-1: config 0 has no interfaces? [ 119.766635][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.766661][ T5348] usb 3-1: Product: syz [ 119.766678][ T5348] usb 3-1: Manufacturer: syz [ 119.766693][ T5348] usb 3-1: SerialNumber: syz [ 119.819799][ T5348] usb 3-1: config 0 descriptor?? [ 119.823955][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.825571][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.878852][ T43] usb 1-1: device descriptor read/64, error -71 [ 119.931407][ T1885] usb 4-1: USB disconnect, device number 8 [ 119.954824][ T1885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 119.964950][ T1885] ftdi_sio 4-1:0.0: device disconnected [ 120.034444][ T5348] usb 3-1: USB disconnect, device number 5 [ 120.129733][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.260435][ T43] usb 1-1: device descriptor read/64, error -71 [ 120.372298][ T43] usb usb1-port1: attempt power cycle [ 120.613137][ T6409] sd 0:0:1:0: PR command failed: 1026 [ 120.613213][ T6409] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 120.613303][ T6409] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 120.708406][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.729668][ T43] usb 1-1: device descriptor read/8, error -71 [ 120.966589][ T6417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.186'. [ 120.983278][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.999053][ T43] usb 1-1: device descriptor read/8, error -71 [ 121.108621][ T43] usb usb1-port1: unable to enumerate USB device [ 122.005563][ T6446] netlink: 'syz.3.193': attribute type 4 has an invalid length. [ 122.007870][ T6446] netlink: 25 bytes leftover after parsing attributes in process `syz.3.193'. [ 122.154841][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.194'. [ 122.154876][ T6450] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 122.391497][ T6454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.195'. [ 122.458601][ T4932] Bluetooth: hci4: command 0x1003 tx timeout [ 122.459542][ T5621] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 122.679629][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.199'. [ 122.857829][ T6469] netlink: 703 bytes leftover after parsing attributes in process `syz.3.201'. [ 122.954252][ T6477] FAULT_INJECTION: forcing a failure. [ 122.954252][ T6477] name failslab, interval 1, probability 0, space 0, times 0 [ 122.954296][ T6477] CPU: 1 UID: 0 PID: 6477 Comm: syz.2.204 Not tainted syzkaller #0 PREEMPT(full) [ 122.954321][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.954335][ T6477] Call Trace: [ 122.954343][ T6477] [ 122.954353][ T6477] dump_stack_lvl+0xe8/0x150 [ 122.954401][ T6477] should_fail_ex+0x3eb/0x540 [ 122.954432][ T6477] should_failslab+0xa8/0x100 [ 122.954459][ T6477] __kvmalloc_node_noprof+0x171/0x820 [ 122.954498][ T6477] ? pipapo_realloc_scratch+0xf5/0x2a0 [ 122.954525][ T6477] ? pipapo_realloc_scratch+0xf5/0x2a0 [ 122.954568][ T6477] pipapo_realloc_scratch+0xf5/0x2a0 [ 122.954600][ T6477] pipapo_maybe_clone+0x345/0xd80 [ 122.954628][ T6477] ? nft_trans_alloc+0x22/0x2a0 [ 122.954651][ T6477] ? nf_tables_newsetelem+0x298a/0x4200 [ 122.954679][ T6477] ? netlink_unicast+0x7bd/0x940 [ 122.954705][ T6477] ? ___sys_sendmsg+0x2a5/0x360 [ 122.954730][ T6477] ? do_syscall_64+0x166/0x520 [ 122.954750][ T6477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.954784][ T6477] nft_pipapo_insert+0x166/0x18a0 [ 122.954833][ T6477] ? __pfx_nft_pipapo_insert+0x10/0x10 [ 122.954860][ T6477] ? rcu_is_watching+0x16/0xb0 [ 122.954883][ T6477] ? trace_kmalloc+0x2a/0xf0 [ 122.954918][ T6477] ? __kmalloc_noprof+0x387/0x710 [ 122.954949][ T6477] ? __kmalloc_noprof+0x1a6/0x710 [ 122.954979][ T6477] ? nft_trans_alloc+0x22/0x2a0 [ 122.955001][ T6477] ? nft_trans_alloc+0x22/0x2a0 [ 122.955034][ T6477] ? nft_trans_alloc+0x40/0x2a0 [ 122.955062][ T6477] nf_tables_newsetelem+0x2aa4/0x4200 [ 122.955130][ T6477] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 122.955155][ T6477] ? lock_acquire+0x115/0x350 [ 122.955197][ T6477] ? nla_validate_array+0xfc/0x260 [ 122.955260][ T6477] ? __pfx___nla_validate_parse+0x10/0x10 [ 122.955296][ T6477] ? __pfx_nf_tables_newset+0x10/0x10 [ 122.955319][ T6477] ? nft_pernet+0x23/0x240 [ 122.955347][ T6477] ? lock_acquire+0x115/0x350 [ 122.955379][ T6477] ? nfnl_pernet+0x23/0x240 [ 122.955415][ T6477] ? __nla_parse+0x40/0x60 [ 122.955449][ T6477] nfnetlink_rcv+0x1288/0x28c0 [ 122.955510][ T6477] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 122.955559][ T6477] ? ref_tracker_free+0x689/0x830 [ 122.955612][ T6477] ? skb_clone+0x246/0x3a0 [ 122.955641][ T6477] ? __netlink_deliver_tap+0x811/0x860 [ 122.955678][ T6477] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.955705][ T6477] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.955738][ T6477] netlink_unicast+0x7bd/0x940 [ 122.955775][ T6477] netlink_sendmsg+0x7c3/0xae0 [ 122.955811][ T6477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.955850][ T6477] ? apparmor_socket_sendmsg+0x98/0x360 [ 122.955877][ T6477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.955905][ T6477] sock_sendmsg_nosec+0x13a/0x180 [ 122.955940][ T6477] ____sys_sendmsg+0x54e/0x850 [ 122.955971][ T6477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.956006][ T6477] ? import_iovec+0x73/0xa0 [ 122.956039][ T6477] ___sys_sendmsg+0x2a5/0x360 [ 122.956064][ T6477] ? __lock_acquire+0x747/0x2de0 [ 122.956099][ T6477] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.956163][ T6477] ? __fget_files+0x2a/0x420 [ 122.956191][ T6477] ? __fget_files+0x3a2/0x420 [ 122.956231][ T6477] __x64_sys_sendmsg+0x1b1/0x290 [ 122.956283][ T6477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.956332][ T6477] do_syscall_64+0x166/0x520 [ 122.956353][ T6477] ? trace_irq_disable+0x3b/0x140 [ 122.956385][ T6477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.956408][ T6477] ? clear_bhb_loop+0x70/0xc0 [ 122.956436][ T6477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.956459][ T6477] RIP: 0033:0x7fd32f19e159 [ 122.956487][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.956506][ T6477] RSP: 002b:00007fd330081028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.956542][ T6477] RAX: ffffffffffffffda RBX: 00007fd32f425fa0 RCX: 00007fd32f19e159 [ 122.956559][ T6477] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 122.956574][ T6477] RBP: 00007fd330081090 R08: 0000000000000000 R09: 0000000000000000 [ 122.956587][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.956601][ T6477] R13: 00007fd32f426038 R14: 00007fd32f425fa0 R15: 00007ffc8b09fb48 [ 122.956636][ T6477] [ 122.976578][ T6474] netlink: 'syz.1.203': attribute type 4 has an invalid length. [ 123.017898][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.035931][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.041412][ T6474] netlink: 25 bytes leftover after parsing attributes in process `syz.1.203'. [ 123.221544][ T1885] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 123.468980][ T1885] usb 1-1: Using ep0 maxpacket: 32 [ 123.469714][ T1885] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 123.475574][ T1885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 123.475614][ T1885] usb 1-1: can't read configurations, error -61 [ 123.608333][ T1885] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.769139][ T1885] usb 1-1: Using ep0 maxpacket: 32 [ 123.769858][ T1885] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 123.771908][ T1885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 123.771946][ T1885] usb 1-1: can't read configurations, error -61 [ 123.772220][ T1885] usb usb1-port1: attempt power cycle [ 123.813966][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.973807][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 123.976945][ T45] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 123.998616][ T5348] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.007544][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.007573][ T45] usb 2-1: Product: syz [ 124.007590][ T45] usb 2-1: Manufacturer: syz [ 124.007607][ T45] usb 2-1: SerialNumber: syz [ 124.042269][ T45] usb 2-1: config 0 descriptor?? [ 124.108373][ T1885] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.130602][ T1885] usb 1-1: Using ep0 maxpacket: 32 [ 124.131333][ T1885] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 124.133240][ T1885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 124.133278][ T1885] usb 1-1: can't read configurations, error -61 [ 124.173142][ T5348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.173195][ T5348] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 124.199358][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.199389][ T5348] usb 3-1: Product: syz [ 124.199406][ T5348] usb 3-1: Manufacturer: syz [ 124.199458][ T5348] usb 3-1: SerialNumber: syz [ 124.246419][ T5348] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 124.259692][ T1885] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 124.279004][ T1885] usb 1-1: Using ep0 maxpacket: 32 [ 124.281046][ T1885] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 124.284222][ T1885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 124.284262][ T1885] usb 1-1: can't read configurations, error -61 [ 124.285221][ T1885] usb usb1-port1: unable to enumerate USB device [ 124.375086][ T5348] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 124.443997][ T5348] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 124.466216][ T45] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 124.466276][ T45] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 124.551922][ T45] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 124.564973][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.213'. [ 124.577185][ T45] usb 2-1: USB disconnect, device number 8 [ 124.664107][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.664604][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.695285][ T5348] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -22 [ 124.865965][ T5348] usb 3-1: can't set first interface for hiFace device. [ 124.866007][ T5348] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 124.896350][ T5348] usb 3-1: USB disconnect, device number 6 [ 124.961317][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.559253][ T6517] FAULT_INJECTION: forcing a failure. [ 125.559253][ T6517] name failslab, interval 1, probability 0, space 0, times 0 [ 125.559303][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz.2.217 Not tainted syzkaller #0 PREEMPT(full) [ 125.559321][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.559337][ T6517] Call Trace: [ 125.559343][ T6517] [ 125.559350][ T6517] dump_stack_lvl+0xe8/0x150 [ 125.559375][ T6517] should_fail_ex+0x3eb/0x540 [ 125.559395][ T6517] ? __alloc_skb+0x1db/0x7a0 [ 125.559409][ T6517] should_failslab+0xa8/0x100 [ 125.559428][ T6517] ? __alloc_skb+0x1db/0x7a0 [ 125.559440][ T6517] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 125.559463][ T6517] ? __alloc_skb+0x18d/0x7a0 [ 125.559477][ T6517] ? __alloc_skb+0x1db/0x7a0 [ 125.559495][ T6517] __alloc_skb+0x1db/0x7a0 [ 125.559513][ T6517] netlink_ack+0x136/0xb30 [ 125.559537][ T6517] ? __kmalloc_cache_noprof+0x148/0x600 [ 125.559559][ T6517] ? nfnetlink_rcv+0x1021/0x28c0 [ 125.559582][ T6517] nfnetlink_rcv+0x260c/0x28c0 [ 125.559622][ T6517] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 125.559651][ T6517] ? ref_tracker_free+0x689/0x830 [ 125.559687][ T6517] ? skb_clone+0x246/0x3a0 [ 125.559708][ T6517] ? __netlink_deliver_tap+0x811/0x860 [ 125.559733][ T6517] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.559752][ T6517] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.559778][ T6517] netlink_unicast+0x7bd/0x940 [ 125.559804][ T6517] netlink_sendmsg+0x7c3/0xae0 [ 125.559832][ T6517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.559858][ T6517] ? apparmor_socket_sendmsg+0x98/0x360 [ 125.559876][ T6517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.559896][ T6517] sock_sendmsg_nosec+0x13a/0x180 [ 125.559920][ T6517] ____sys_sendmsg+0x54e/0x850 [ 125.559941][ T6517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.559965][ T6517] ? import_iovec+0x73/0xa0 [ 125.559988][ T6517] ___sys_sendmsg+0x2a5/0x360 [ 125.560004][ T6517] ? __lock_acquire+0x747/0x2de0 [ 125.560031][ T6517] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.560072][ T6517] ? __fget_files+0x2a/0x420 [ 125.560092][ T6517] ? __fget_files+0x3a2/0x420 [ 125.560118][ T6517] __x64_sys_sendmsg+0x1b1/0x290 [ 125.560138][ T6517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.560170][ T6517] do_syscall_64+0x166/0x520 [ 125.560184][ T6517] ? trace_irq_disable+0x3b/0x140 [ 125.560206][ T6517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.560222][ T6517] ? clear_bhb_loop+0x70/0xc0 [ 125.560241][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.560256][ T6517] RIP: 0033:0x7fd32f19e159 [ 125.560276][ T6517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.560289][ T6517] RSP: 002b:00007fd330081028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.560306][ T6517] RAX: ffffffffffffffda RBX: 00007fd32f425fa0 RCX: 00007fd32f19e159 [ 125.560340][ T6517] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 125.560355][ T6517] RBP: 00007fd330081090 R08: 0000000000000000 R09: 0000000000000000 [ 125.560368][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.560381][ T6517] R13: 00007fd32f426038 R14: 00007fd32f425fa0 R15: 00007ffc8b09fb48 [ 125.560419][ T6517] [ 126.000567][ T6521] netlink: 'syz.2.220': attribute type 4 has an invalid length. [ 126.265360][ T6531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.311886][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 126.434753][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 126.623665][ T6546] netlink: 'syz.1.231': attribute type 4 has an invalid length. [ 126.732267][ T6554] FAULT_INJECTION: forcing a failure. [ 126.732267][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 126.732302][ T6554] CPU: 0 UID: 0 PID: 6554 Comm: syz.1.233 Not tainted syzkaller #0 PREEMPT(full) [ 126.732329][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.732344][ T6554] Call Trace: [ 126.732353][ T6554] [ 126.732364][ T6554] dump_stack_lvl+0xe8/0x150 [ 126.732401][ T6554] should_fail_ex+0x3eb/0x540 [ 126.732433][ T6554] should_failslab+0xa8/0x100 [ 126.732461][ T6554] __kvmalloc_node_noprof+0x171/0x820 [ 126.732501][ T6554] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 126.732527][ T6554] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 126.732561][ T6554] bpf_jit_binary_pack_alloc+0x10a/0x300 [ 126.732588][ T6554] ? __pfx_jit_fill_hole+0x10/0x10 [ 126.732624][ T6554] bpf_int_jit_compile+0xa11/0x17d0 [ 126.732679][ T6554] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 126.732722][ T6554] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 126.732756][ T6554] ? bpf_prepare_filter+0xd5d/0x12d0 [ 126.732791][ T6554] __bpf_prog_select_runtime+0x53e/0xbf0 [ 126.732823][ T6554] ? bpf_prog_realloc+0x172/0x210 [ 126.732849][ T6554] bpf_prepare_filter+0x10df/0x12d0 [ 126.732891][ T6554] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 126.732923][ T6554] ? kmemdup_noprof+0x55/0x70 [ 126.732957][ T6554] ? __get_filter+0x2d5/0x420 [ 126.732994][ T6554] sk_attach_filter+0x24/0x140 [ 126.733029][ T6554] sk_setsockopt+0x2635/0x2f10 [ 126.733058][ T6554] ? __pfx_sk_setsockopt+0x10/0x10 [ 126.733085][ T6554] ? aa_sk_perm+0x6ff/0x8f0 [ 126.733126][ T6554] ? aa_sock_opt_perm+0x142/0x1e0 [ 126.733158][ T6554] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 126.733198][ T6554] do_sock_setsockopt+0x11b/0x1b0 [ 126.733228][ T6554] __x64_sys_setsockopt+0x13d/0x1b0 [ 126.733259][ T6554] do_syscall_64+0x166/0x520 [ 126.733279][ T6554] ? trace_irq_disable+0x3b/0x140 [ 126.733312][ T6554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.733336][ T6554] ? clear_bhb_loop+0x70/0xc0 [ 126.733364][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.733387][ T6554] RIP: 0033:0x7fccc359e159 [ 126.733408][ T6554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.733427][ T6554] RSP: 002b:00007fccc4539028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.733452][ T6554] RAX: ffffffffffffffda RBX: 00007fccc3825fa0 RCX: 00007fccc359e159 [ 126.733469][ T6554] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000006 [ 126.733482][ T6554] RBP: 00007fccc363503b R08: 0000000000000010 R09: 0000000000000000 [ 126.733497][ T6554] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.733511][ T6554] R13: 00007fccc3826038 R14: 00007fccc3825fa0 R15: 00007ffc1a97dcc8 [ 126.733548][ T6554] [ 127.601074][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.616391][ T6571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 127.680952][ T5348] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 127.759629][ T25] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 127.760896][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.760945][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.760970][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.760996][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.761039][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.765903][ T6577] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 127.837742][ T6578] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 127.848481][ T5348] usb 1-1: Using ep0 maxpacket: 32 [ 127.850498][ T5348] usb 1-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 127.855048][ T5348] usb 1-1: config 3 has an invalid interface number: 120 but max is 0 [ 127.855075][ T5348] usb 1-1: config 3 has no interface number 0 [ 127.855108][ T5348] usb 1-1: config 3 interface 120 has no altsetting 0 [ 127.865064][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.865151][ T5348] usb 1-1: Product: syz [ 127.865200][ T5348] usb 1-1: Manufacturer: syz [ 127.865249][ T5348] usb 1-1: SerialNumber: syz [ 127.964446][ T31] audit: type=1800 audit(1789188859.527:2): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.242" name=A621 dev="tmpfs" ino=375 res=0 errno=0 [ 128.172834][ T6567] block nbd0: NBD_DISCONNECT [ 128.173188][ T6567] block nbd0: Send disconnect failed -32 [ 128.191249][ T6566] block nbd0: Disconnected due to user request. [ 128.191273][ T6566] block nbd0: shutting down sockets [ 128.223724][ T5348] usb 1-1: USB disconnect, device number 13 [ 128.576921][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.253'. [ 128.696237][ T6604] loop0: detected capacity change from 0 to 1 [ 128.718967][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.751481][ T6604] loop0: p1 [ 128.751510][ T6604] loop0: partition table partially beyond EOD, truncated [ 128.752289][ T6604] loop0: p1 start 3857954294 is beyond EOD, truncated [ 128.790962][ T6607] FAULT_INJECTION: forcing a failure. [ 128.790962][ T6607] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.790994][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.1.255 Not tainted syzkaller #0 PREEMPT(full) [ 128.791019][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.791033][ T6607] Call Trace: [ 128.791042][ T6607] [ 128.791051][ T6607] dump_stack_lvl+0xe8/0x150 [ 128.791087][ T6607] should_fail_ex+0x3eb/0x540 [ 128.791117][ T6607] _copy_to_user+0x31/0xb0 [ 128.791149][ T6607] simple_read_from_buffer+0xe1/0x170 [ 128.791184][ T6607] proc_fail_nth_read+0x1bb/0x230 [ 128.791222][ T6607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.791257][ T6607] ? rw_verify_area+0x24a/0x4c0 [ 128.791290][ T6607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.791323][ T6607] vfs_read+0x213/0xa80 [ 128.791359][ T6607] ? __pfx___mutex_lock+0x10/0x10 [ 128.791382][ T6607] ? __pfx_vfs_read+0x10/0x10 [ 128.791415][ T6607] ? __fget_files+0x2a/0x420 [ 128.791448][ T6607] ? __fget_files+0x3a2/0x420 [ 128.791476][ T6607] ? __fget_files+0x2a/0x420 [ 128.791517][ T6607] ksys_read+0x150/0x270 [ 128.791559][ T6607] ? __pfx_ksys_read+0x10/0x10 [ 128.791604][ T6607] do_syscall_64+0x166/0x520 [ 128.791625][ T6607] ? trace_irq_disable+0x3b/0x140 [ 128.791657][ T6607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.791681][ T6607] ? clear_bhb_loop+0x70/0xc0 [ 128.791709][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.791732][ T6607] RIP: 0033:0x7fccc355e98e [ 128.791752][ T6607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.791771][ T6607] RSP: 002b:00007fccc4538fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.791795][ T6607] RAX: ffffffffffffffda RBX: 00007fccc45396c0 RCX: 00007fccc355e98e [ 128.791812][ T6607] RDX: 000000000000000f RSI: 00007fccc45390a0 RDI: 0000000000000004 [ 128.791826][ T6607] RBP: 00007fccc4539090 R08: 0000000000000000 R09: 0000000000000000 [ 128.791841][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.791854][ T6607] R13: 00007fccc3826038 R14: 00007fccc3825fa0 R15: 00007ffc1a97dcc8 [ 128.791889][ T6607] [ 128.892338][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 128.902647][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 128.983008][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.983060][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.983098][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.079012][ T9] usb 3-1: config 0 descriptor?? [ 129.121333][ T6609] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 129.183576][ T4982] loop0: p1 [ 129.183604][ T4982] loop0: partition table partially beyond EOD, truncated [ 129.183798][ T4982] loop0: p1 start 3857954294 is beyond EOD, truncated [ 129.284007][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.292850][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.315106][ T9] usb 3-1: string descriptor 0 read error: -71 [ 129.342750][ T9] usb 3-1: USB disconnect, device number 7 [ 129.365186][ T4982] loop0: p1 [ 129.365218][ T4982] loop0: partition table partially beyond EOD, truncated [ 129.365632][ T4982] loop0: p1 start 3857954294 is beyond EOD, truncated [ 129.471541][ T6617] FAULT_INJECTION: forcing a failure. [ 129.471541][ T6617] name failslab, interval 1, probability 0, space 0, times 0 [ 129.471577][ T6617] CPU: 1 UID: 0 PID: 6617 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT(full) [ 129.471604][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.471617][ T6617] Call Trace: [ 129.471627][ T6617] [ 129.471638][ T6617] dump_stack_lvl+0xe8/0x150 [ 129.471675][ T6617] should_fail_ex+0x3eb/0x540 [ 129.471707][ T6617] should_failslab+0xa8/0x100 [ 129.471735][ T6617] __kmalloc_noprof+0xf9/0x710 [ 129.471770][ T6617] ? io_cache_alloc_new+0x40/0x100 [ 129.471804][ T6617] ? io_cache_alloc_new+0x40/0x100 [ 129.471845][ T6617] io_cache_alloc_new+0x40/0x100 [ 129.471882][ T6617] io_uring_alloc_async_data+0x1b6/0x2e0 [ 129.471910][ T6617] io_send_zc_prep+0x3f7/0x9e0 [ 129.471954][ T6617] io_submit_sqes+0xbde/0x2310 [ 129.472010][ T6617] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 129.472046][ T6617] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 129.472075][ T6617] ? irqentry_exit+0x218/0x910 [ 129.472111][ T6617] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 129.472145][ T6617] ? rcu_is_watching+0x16/0xb0 [ 129.472176][ T6617] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 129.472203][ T6617] do_syscall_64+0x166/0x520 [ 129.472225][ T6617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.472253][ T6617] ? clear_bhb_loop+0x70/0xc0 [ 129.472282][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.472306][ T6617] RIP: 0033:0x7f3cffb9e159 [ 129.472327][ T6617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.472347][ T6617] RSP: 002b:00007f3cfddf5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 129.472370][ T6617] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3cffb9e159 [ 129.472386][ T6617] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 129.472399][ T6617] RBP: 00000000000001bf R08: 0000000000000000 R09: 0000000000000008 [ 129.472412][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 129.472434][ T6617] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 129.472468][ T6617] [ 130.048494][ T4982] loop0: p1 [ 130.048523][ T4982] loop0: partition table partially beyond EOD, truncated [ 130.048710][ T4982] loop0: p1 start 3857954294 is beyond EOD, truncated [ 130.127995][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'. [ 130.159859][ T6634] netlink: 'syz.2.268': attribute type 4 has an invalid length. [ 130.188456][ T4982] loop0: p1 [ 130.188488][ T4982] loop0: partition table partially beyond EOD, truncated [ 130.188684][ T4982] loop0: p1 start 3857954294 is beyond EOD, truncated [ 130.271830][ T1885] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 130.359751][ T4982] loop0: p1 [ 130.359790][ T4982] loop0: partition table partially beyond EOD, truncated [ 130.360221][ T4982] loop0: p1 start 3857954294 is beyond EOD, truncated [ 130.422254][ T1885] usb 2-1: Using ep0 maxpacket: 16 [ 130.422989][ T1885] usb 2-1: New USB device found, idVendor=0c1e, idProduct=4e1c, bcdDevice= 9.56 [ 130.423032][ T1885] usb 2-1: too many configurations: 40, using maximum allowed: 8 [ 130.427345][ T1885] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 130.427382][ T1885] usb 2-1: can't read configurations, error -61 [ 130.482289][ T9] usb 4-1: USB disconnect, device number 9 [ 130.538319][ T6644] input: syz1 as /devices/virtual/input/input9 [ 130.561108][ T1885] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 130.714628][ T1885] usb 2-1: Using ep0 maxpacket: 16 [ 130.715356][ T1885] usb 2-1: New USB device found, idVendor=0c1e, idProduct=4e1c, bcdDevice= 9.56 [ 130.715397][ T1885] usb 2-1: too many configurations: 40, using maximum allowed: 8 [ 130.717228][ T1885] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 130.717264][ T1885] usb 2-1: can't read configurations, error -61 [ 130.717596][ T1885] usb usb2-port1: attempt power cycle [ 130.871986][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.279'. [ 130.955164][ T6661] netlink: 'syz.3.280': attribute type 4 has an invalid length. [ 131.105514][ T1885] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 131.127286][ T1885] usb 2-1: Using ep0 maxpacket: 16 [ 131.128020][ T1885] usb 2-1: New USB device found, idVendor=0c1e, idProduct=4e1c, bcdDevice= 9.56 [ 131.128067][ T1885] usb 2-1: too many configurations: 40, using maximum allowed: 8 [ 131.129742][ T1885] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 131.129787][ T1885] usb 2-1: can't read configurations, error -61 [ 131.254453][ T1885] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 131.283450][ T1885] usb 2-1: Using ep0 maxpacket: 16 [ 131.290156][ T1885] usb 2-1: New USB device found, idVendor=0c1e, idProduct=4e1c, bcdDevice= 9.56 [ 131.290201][ T1885] usb 2-1: too many configurations: 40, using maximum allowed: 8 [ 131.311281][ T1885] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 131.311323][ T1885] usb 2-1: can't read configurations, error -61 [ 131.311637][ T1885] usb usb2-port1: unable to enumerate USB device [ 132.398075][ T6690] rust_binder: 6689:6690 no such ref 0 [ 132.414267][ T6690] rust_binder: 6689:6690 got transaction to invalid handle 1 [ 132.414305][ T6690] rust_binder: 6689:6690 transaction call to 0:0 failed ENOENT, code 0 size 32-24 [ 132.414415][ T6689] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 132.428241][ T6694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.291'. [ 132.471074][ T6690] syz.3.290 (6690) used greatest stack depth: 17456 bytes left [ 132.471596][ T1885] rust_binder: 6689: undelivered TRANSACTION_ERROR: 29201 [ 132.571298][ T6697] netlink: 'syz.0.292': attribute type 4 has an invalid length. [ 132.855713][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.298'. [ 132.934285][ T1885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.004209][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.004292][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.101473][ T1885] usb 3-1: Using ep0 maxpacket: 16 [ 133.105866][ T1885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.105918][ T1885] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=23.17 [ 133.106973][ T1885] usb 3-1: config 164 has an invalid interface number: 153 but max is 0 [ 133.106999][ T1885] usb 3-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 133.107019][ T1885] usb 3-1: config 164 has no interface number 0 [ 133.107060][ T1885] usb 3-1: config 164 interface 153 altsetting 4 endpoint 0xA has invalid wMaxPacketSize 0 [ 133.107083][ T1885] usb 3-1: config 164 interface 153 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 133.107112][ T1885] usb 3-1: config 164 interface 153 has no altsetting 0 [ 133.124116][ T1885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.124148][ T1885] usb 3-1: Product: syz [ 133.124165][ T1885] usb 3-1: Manufacturer: syz [ 133.124181][ T1885] usb 3-1: SerialNumber: syz [ 133.203077][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.370972][ T9] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 133.376083][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.380235][ T6725] netlink: 'syz.1.304': attribute type 4 has an invalid length. [ 133.410080][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.410111][ T9] usb 1-1: Product: syz [ 133.410156][ T9] usb 1-1: Manufacturer: syz [ 133.410173][ T9] usb 1-1: SerialNumber: syz [ 133.445037][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 133.445111][ T9] usb 1-1: setting power ON [ 133.470506][ T1885] usbtest 3-1:164.153: couldn't get endpoints, -22 [ 133.470592][ T1885] usbtest 3-1:164.153: probe with driver usbtest failed with error -22 [ 133.506726][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.303'. [ 133.507067][ T1885] usb 3-1: USB disconnect, device number 8 [ 134.064021][ T1885] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 134.192740][ T1885] usb 4-1: device descriptor read/64, error -71 [ 134.306595][ T6756] netlink: 'syz.2.315': attribute type 4 has an invalid length. [ 134.380084][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'. [ 134.430632][ T1885] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 134.459071][ T6760] netlink: 'syz.2.317': attribute type 2 has an invalid length. [ 134.459096][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 134.482822][ T6760] ntfs3(nullb0): Primary boot signature is not NTFS. [ 134.483261][ T6760] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 134.490342][ T5348] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 134.570384][ T1885] usb 4-1: device descriptor read/64, error -71 [ 134.639785][ T5348] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 1.00 [ 134.644976][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.645006][ T5348] usb 2-1: Product: syz [ 134.645023][ T5348] usb 2-1: Manufacturer: syz [ 134.645039][ T5348] usb 2-1: SerialNumber: syz [ 134.688125][ T1885] usb usb4-port1: attempt power cycle [ 134.908767][ T5348] ljca 2-1:1.0: probe with driver ljca failed with error -110 [ 135.026270][ T1885] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 135.051203][ T1885] usb 4-1: device descriptor read/8, error -71 [ 135.079339][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.081162][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.286170][ T1885] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 135.286460][ T10] usb 2-1: USB disconnect, device number 13 [ 135.311371][ T1885] usb 4-1: device descriptor read/8, error -71 [ 135.423714][ T1885] usb usb4-port1: unable to enumerate USB device [ 135.463347][ T9] dvb-usb: bulk message failed: -110 (2/0) [ 135.484138][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.488195][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 135.488282][ T9] usb 1-1: media controller created [ 135.540427][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.591909][ T9] usb 1-1: selecting invalid altsetting 6 [ 135.591942][ T9] usb 1-1: digital interface selection failed (-22) [ 135.591965][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 135.617668][ T9] usb 1-1: setting power OFF [ 135.948590][ T9] dvb-usb: bulk message failed: -71 (2/0) [ 135.948616][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 135.948630][ T9] (NULL device *): no iso interface [ 136.058583][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 136.091161][ T9] usb 1-1: USB disconnect, device number 14 [ 136.185947][ T6783] netlink: 'syz.2.327': attribute type 4 has an invalid length. [ 136.308823][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 136.377186][ T45] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 136.491890][ T6793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'. [ 136.527794][ T45] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 136.528989][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.529016][ T45] usb 2-1: config 0 has no interface number 0 [ 136.529063][ T45] usb 2-1: config 0 interface 1 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.529101][ T45] usb 2-1: config 0 interface 1 altsetting 216 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.529125][ T45] usb 2-1: config 0 interface 1 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 136.529154][ T45] usb 2-1: config 0 interface 1 has no altsetting 0 [ 136.529188][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.534153][ T45] usb 2-1: config 0 descriptor?? [ 136.624906][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 136.779025][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 136.780448][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 136.780480][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 136.780508][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 136.782931][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.782956][ T9] usb 1-1: Product: syz [ 136.782972][ T9] usb 1-1: Manufacturer: syz [ 136.782988][ T9] usb 1-1: SerialNumber: syz [ 136.851587][ T9] usb 1-1: config 0 descriptor?? [ 136.852779][ T6787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 136.852946][ T6787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 136.874643][ T9] usb 1-1: ucan: probing device on interface #0 [ 136.990143][ T45] input: HID 258a:6a88 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:258A:6A88.0002/input/input10 [ 137.102570][ T45] itetech 0003:258A:6A88.0002: input,hidraw0: USB HID v80.00 Joystick [HID 258a:6a88] on usb-dummy_hcd.1-1/input1 [ 137.178609][ T45] usb 2-1: USB disconnect, device number 14 [ 137.226177][ T6802] fido_id[6802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 137.286050][ T6787] FAULT_INJECTION: forcing a failure. [ 137.286050][ T6787] name failslab, interval 1, probability 0, space 0, times 0 [ 137.286088][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.0.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.286118][ T6787] Tainted: [L]=SOFTLOCKUP [ 137.286127][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.286140][ T6787] Call Trace: [ 137.286148][ T6787] [ 137.286158][ T6787] dump_stack_lvl+0xe8/0x150 [ 137.286194][ T6787] should_fail_ex+0x3eb/0x540 [ 137.286226][ T6787] should_failslab+0xa8/0x100 [ 137.286254][ T6787] __kmalloc_noprof+0xf9/0x710 [ 137.286289][ T6787] ? tomoyo_encode+0x2ad/0x570 [ 137.286316][ T6787] ? tomoyo_encode+0x2ad/0x570 [ 137.286351][ T6787] tomoyo_encode+0x2ad/0x570 [ 137.286386][ T6787] tomoyo_realpath_from_path+0x5fa/0x640 [ 137.286427][ T6787] ? tomoyo_mkdev_perm+0x209/0x5d0 [ 137.286452][ T6787] tomoyo_mkdev_perm+0x235/0x5d0 [ 137.286477][ T6787] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 137.286545][ T6787] ? __pfx_current_check_access_path+0x10/0x10 [ 137.286575][ T6787] ? d_splice_alias+0x12/0x30 [ 137.286616][ T6787] tomoyo_path_mknod+0xfb/0x1a0 [ 137.286652][ T6787] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 137.286689][ T6787] ? __pfx_filename_create+0x10/0x10 [ 137.286729][ T6787] security_path_mknod+0x176/0x370 [ 137.286762][ T6787] filename_mknodat+0x2be/0x660 [ 137.286805][ T6787] ? __pfx_filename_mknodat+0x10/0x10 [ 137.286844][ T6787] ? do_getname+0x151/0x250 [ 137.286873][ T6787] __se_sys_mknodat+0x3b/0x150 [ 137.286911][ T6787] do_syscall_64+0x166/0x520 [ 137.286933][ T6787] ? trace_irq_disable+0x3b/0x140 [ 137.286967][ T6787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.286991][ T6787] ? clear_bhb_loop+0x70/0xc0 [ 137.287019][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.287043][ T6787] RIP: 0033:0x7f3cffb9e159 [ 137.287064][ T6787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.287083][ T6787] RSP: 002b:00007f3cfddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 137.287108][ T6787] RAX: ffffffffffffffda RBX: 00007f3cffe25fa0 RCX: 00007f3cffb9e159 [ 137.287125][ T6787] RDX: 00000000000021c0 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 137.287141][ T6787] RBP: 00007f3cffc3503b R08: 0000000000000000 R09: 0000000000000000 [ 137.287155][ T6787] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 137.287168][ T6787] R13: 00007f3cffe26038 R14: 00007f3cffe25fa0 R15: 00007ffce9eae8b8 [ 137.287204][ T6787] [ 137.287229][ T6787] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.633748][ T9] ucan 1-1:0.0 can0: registered device [ 137.793275][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.814530][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.827155][ T9] ucan 1-1:0.0 can0: firmware string:  [ 137.871792][ T6810] loop8: detected capacity change from 0 to 7 [ 137.890231][ T6810] Dev loop8: unable to read RDB block 7 [ 137.890312][ T6810] loop8: unable to read partition table [ 137.890516][ T6810] loop8: partition table beyond EOD, truncated [ 137.890556][ T6810] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 138.073705][ T6829] comedi comedi1: Minor 4 specified more than once! [ 138.779457][ T6855] netlink: 'syz.2.349': attribute type 4 has an invalid length. [ 138.961771][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.962225][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.001778][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 139.001866][ T6862] bridge_slave_1: left allmulticast mode [ 139.001889][ T6862] bridge_slave_1: left promiscuous mode [ 139.003971][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.022177][ T6863] Bluetooth: MGMT ver 1.23 [ 139.054071][ T6862] bridge_slave_0: left allmulticast mode [ 139.054099][ T6862] bridge_slave_0: left promiscuous mode [ 139.054924][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.152806][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.353'. [ 139.187871][ T5348] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.316697][ T5348] usb 4-1: device descriptor read/64, error -71 [ 139.375620][ T9] usb 1-1: USB disconnect, device number 15 [ 139.555136][ T5348] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 139.684953][ T5348] usb 4-1: device descriptor read/64, error -71 [ 139.795186][ T5348] usb usb4-port1: attempt power cycle [ 140.131545][ T5348] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 140.156068][ T5348] usb 4-1: device descriptor read/8, error -71 [ 140.400105][ T5348] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.424495][ T5348] usb 4-1: device descriptor read/8, error -71 [ 140.528565][ T5348] usb usb4-port1: unable to enumerate USB device [ 141.780044][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 141.934822][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 141.935891][ T45] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.937100][ T45] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.937133][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.937168][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.980727][ T45] usb 3-1: config 0 descriptor?? [ 142.110389][ T6948] netlink: 'syz.0.367': attribute type 9 has an invalid length. [ 142.432219][ T45] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 142.834654][ T9] usb 3-1: USB disconnect, device number 9 [ 142.859916][ T6964] netlink: 140 bytes leftover after parsing attributes in process `syz.1.372'. [ 142.859953][ T6964] netlink: 6 bytes leftover after parsing attributes in process `syz.1.372'. [ 142.931705][ T6965] netlink: 21 bytes leftover after parsing attributes in process `syz.1.372'. [ 142.968104][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.373'. [ 143.313593][ T6976] netlink: 'syz.3.377': attribute type 4 has an invalid length. [ 143.474598][ T6982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 143.644890][ T6988] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 143.644910][ T6988] rust_binder: Read failure Err(EFAULT) in pid:262 [ 143.660261][ T45] rust_binder: 6987: undelivered death notification, 0000000000000000 [ 143.839718][ T6994] vlan0: entered allmulticast mode [ 143.839742][ T6994] veth0_vlan: entered allmulticast mode [ 144.871859][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 144.930090][ T5348] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.020283][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 145.033572][ T45] usb 2-1: New USB device found, idVendor=052b, idProduct=d001, bcdDevice=4d.a1 [ 145.035743][ T45] usb 2-1: config 1 has an invalid interface number: 16 but max is 0 [ 145.035770][ T45] usb 2-1: config 1 has no interface number 0 [ 145.035808][ T45] usb 2-1: config 1 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.035828][ T45] usb 2-1: config 1 interface 16 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 145.035852][ T45] usb 2-1: config 1 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.041898][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.041971][ T45] usb 2-1: Product: syz [ 145.042006][ T45] usb 2-1: Manufacturer: и [ 145.042048][ T45] usb 2-1: SerialNumber: syz [ 145.082349][ T5348] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 145.104072][ T5348] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.104221][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.161789][ T5348] usb 3-1: config 0 descriptor?? [ 145.179567][ T5348] rndis_host 3-1:0.0: rndis: master #0/ffff888032548000 slave #1/0000000000000000 [ 145.365515][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.377725][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.396546][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.410278][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.447917][ T5348] usb 3-1: USB disconnect, device number 10 [ 145.496530][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.501184][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.555215][ T45] gspca_main: nw80x-2.14.0 probing 052b:d001 [ 145.555826][ T45] gspca_nw80x: reg_w err -71 [ 145.555918][ T45] nw80x 2-1:1.16: probe with driver nw80x failed with error -71 [ 145.587120][ T45] usb 2-1: USB disconnect, device number 15 [ 145.816019][ T7040] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 146.007668][ T7046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.405'. [ 146.135056][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 146.296187][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 146.296226][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 146.326856][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.326887][ T9] usb 1-1: Product: syz [ 146.326903][ T9] usb 1-1: Manufacturer: syz [ 146.326918][ T9] usb 1-1: SerialNumber: syz [ 146.363014][ T9] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 146.386114][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 146.400144][ T31] audit: type=1326 audit(1789189134.075:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.1.408" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccc359e159 code=0x7ffb0000 [ 146.434977][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 146.452776][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 146.482728][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 146.572980][ C0] usb 1-1: malformed indat packet [ 146.573258][ C0] usb 1-1: malformed indat packet [ 146.573509][ C0] usb 1-1: malformed indat packet [ 146.573779][ C0] usb 1-1: malformed indat packet [ 146.574045][ C0] usb 1-1: malformed indat packet [ 146.574298][ C0] usb 1-1: malformed indat packet [ 146.574548][ C0] usb 1-1: malformed indat packet [ 146.574815][ C0] usb 1-1: malformed indat packet [ 146.776866][ T7042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.791162][ T7042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.992297][ T7042] syzkaller1: entered promiscuous mode [ 146.992325][ T7042] syzkaller1: entered allmulticast mode [ 147.011275][ T7042] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 147.547691][ T9] usb 1-1: USB disconnect, device number 16 [ 147.588986][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 147.611878][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 147.651334][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 147.681497][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 147.683015][ T9] keyspan 1-1:1.0: device disconnected [ 147.763243][ T5348] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 147.912117][ T5348] usb 3-1: Using ep0 maxpacket: 8 [ 147.912965][ T5348] usb 3-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 147.914322][ T5348] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.914355][ T5348] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.914383][ T5348] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.914420][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.946922][ T5348] usb 3-1: config 0 descriptor?? [ 148.457769][ T5348] input: HID 046d:c211 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C211.0004/input/input11 [ 148.610874][ T5348] logitech 0003:046D:C211.0004: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c211] on usb-dummy_hcd.2-1/input0 [ 148.611575][ T5348] logitech 0003:046D:C211.0004: missing HID_OUTPUT_REPORT 0 [ 148.880664][ T5348] usb 3-1: USB disconnect, device number 11 [ 152.198422][ T7130] netlink: 'syz.1.427': attribute type 4 has an invalid length. [ 153.381274][ T45] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 153.531220][ T45] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 153.534641][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.534667][ T45] usb 4-1: Product: syz [ 153.534683][ T45] usb 4-1: Manufacturer: syz [ 153.534699][ T45] usb 4-1: SerialNumber: syz [ 153.538010][ T45] usb 4-1: config 0 descriptor?? [ 153.585831][ T45] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 155.082423][ T45] gspca_stk1135: reg_w 0xd err -110 [ 155.083536][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 155.083549][ T45] gspca_stk1135: Sensor write failed [ 155.083587][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 155.083597][ T45] gspca_stk1135: Sensor write failed [ 155.083634][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 155.083644][ T45] gspca_stk1135: Sensor read failed [ 155.083680][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 155.083690][ T45] gspca_stk1135: Sensor read failed [ 155.083697][ T45] gspca_stk1135: Detected sensor type unknown (0x0) [ 155.083744][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 155.083754][ T45] gspca_stk1135: Sensor read failed [ 155.083791][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 155.083801][ T45] gspca_stk1135: Sensor read failed [ 155.083844][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 155.083854][ T45] gspca_stk1135: Sensor write failed [ 155.083889][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 155.083899][ T45] gspca_stk1135: Sensor write failed [ 155.084044][ T45] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 166.003966][ T4932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.007902][ T4932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.008901][ T4932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.031597][ T4932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.032374][ T4932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.188610][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.198296][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.199097][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.218282][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.218990][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.276857][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.288891][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.296942][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.297869][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.298481][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.496750][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 168.507482][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 168.518480][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 168.526604][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 168.527405][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.142384][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.142447][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.397923][ T5619] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 226.402702][ T5619] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 226.403305][ T5619] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 226.404782][ T5619] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 226.405413][ T5619] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 228.757446][ T7174] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 228.760736][ T7174] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 228.785822][ T7174] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 228.796216][ T7174] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 228.806550][ T7174] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 228.806962][ T7174] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 228.807703][ T7174] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 228.808462][ T7174] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 228.817014][ T7174] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 228.825083][ T7174] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 228.833592][ T7174] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 228.842121][ T7174] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 228.849683][ T7174] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 228.850073][ T7174] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 228.894538][ T7174] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 254.408012][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 254.414678][ C0] rcu: 0-....: (1 GPs behind) idle=02d4/1/0x4000000000000000 softirq=26499/26499 fqs=5243 [ 254.424678][ C0] rcu: hardirqs softirqs csw/system [ 254.431099][ C0] rcu: number: 5268 0 0 [ 254.437513][ C0] rcu: cputime: 145 52264 95 ==> 52510(ms) [ 254.445428][ C0] rcu: (t=10502 jiffies g=27489 q=6914 ncpus=2) [ 254.451860][ C0] CPU: 0 UID: 0 PID: 164 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.462911][ C0] Tainted: [L]=SOFTLOCKUP [ 254.467354][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.477432][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 254.484240][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 254.490786][ C0] Code: f7 e8 bd eb aa f5 f7 c3 00 02 00 00 74 05 e8 10 35 d7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 00 9c f5 65 48 8b 05 dc 38 c3 07 48 85 c0 74 18 5b 41 5e c3 [ 254.510507][ C0] RSP: 0018:ffffc90000007e10 EFLAGS: 00000206 [ 254.516626][ C0] RAX: 0000000000000002 RBX: 0000000000000283 RCX: 0000000000000102 [ 254.524608][ C0] RDX: 0000000000000002 RSI: ffffffff8e59e74c RDI: 0000000000000001 [ 254.532588][ C0] RBP: ffff88805a94c538 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 254.540574][ C0] R10: dffffc0000000000 R11: fffffbfff2137670 R12: ffff8880b8428280 [ 254.548580][ C0] R13: ffffffff89efe590 R14: ffff8880b8428280 R15: 1ffff110170850da [ 254.556570][ C0] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 254.565529][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.572117][ C0] CR2: 00002000000000c0 CR3: 000000000ed48000 CR4: 00000000003526f0 [ 254.580102][ C0] Call Trace: [ 254.583401][ C0] [ 254.586253][ C0] __hrtimer_run_queues+0x2bf/0xa10 [ 254.591485][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 254.596835][ C0] handle_softirqs+0x226/0x860 [ 254.601651][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 254.606437][ C0] __irq_exit_rcu+0xcb/0x220 [ 254.611063][ C0] irq_exit_rcu+0x9/0x30 [ 254.615314][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 254.620960][ C0] [ 254.623893][ C0] [ 254.626824][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.632846][ C0] RIP: 0010:__rcu_read_unlock+0x6c/0xe0 [ 254.638405][ C0] Code: 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 43 0f b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c <41> 5d 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb eb e8 6d 00 00 [ 254.658007][ C0] RSP: 0018:ffffc90002f6f0e0 EFLAGS: 00000287 [ 254.664093][ C0] RAX: 0000000000000000 RBX: ffffc90002f6f1b8 RCX: 8000000000000001 [ 254.672082][ C0] RDX: ffffc90002f6f101 RSI: ffffffff8e82b24f RDI: ffff8880203f9f40 [ 254.680231][ C0] RBP: 1ffffffff2284101 R08: ffffc90002f6f848 R09: 0000000000000000 [ 254.688221][ C0] R10: ffffc90002f6f1f8 R11: fffff520005ede41 R12: ffffc90002f68000 [ 254.696192][ C0] R13: ffffffff817821df R14: ffff8880203fa408 R15: dffffc0000000000 [ 254.704168][ C0] ? unwind_next_frame+0x8f/0x2550 [ 254.709295][ C0] ? unwind_next_frame+0x8f/0x2550 [ 254.714433][ C0] unwind_next_frame+0x1baf/0x2550 [ 254.719551][ C0] ? allocate_slab+0x7d/0x620 [ 254.724230][ C0] ? unwind_next_frame+0x8f/0x2550 [ 254.729346][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 254.735521][ C0] arch_stack_walk+0x11b/0x150 [ 254.740291][ C0] ? refill_objects+0x2d5/0x350 [ 254.745150][ C0] stack_trace_save+0xa9/0x100 [ 254.749919][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 254.755303][ C0] save_stack+0x122/0x230 [ 254.759635][ C0] ? __pfx_save_stack+0x10/0x10 [ 254.764483][ C0] ? __lock_acquire+0x747/0x2de0 [ 254.769429][ C0] ? post_alloc_hook+0x1f9/0x250 [ 254.774369][ C0] ? get_page_from_freelist+0x2209/0x2280 [ 254.780093][ C0] ? __alloc_frozen_pages_noprof+0x217/0x5a0 [ 254.786083][ C0] ? allocate_slab+0x7d/0x620 [ 254.790780][ C0] __set_page_owner+0x8d/0x4c0 [ 254.795566][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 254.800936][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 254.807004][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 254.812220][ C0] post_alloc_hook+0x1f9/0x250 [ 254.817009][ C0] get_page_from_freelist+0x2209/0x2280 [ 254.822575][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 254.827541][ C0] ? stack_trace_save+0xa9/0x100 [ 254.832512][ C0] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 254.838330][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 254.844687][ C0] ? __refill_objects_node+0x253/0x600 [ 254.850174][ C0] allocate_slab+0x7d/0x620 [ 254.854698][ C0] refill_objects+0x2d5/0x350 [ 254.859387][ C0] __pcs_replace_empty_main+0x2c8/0x6c0 [ 254.864931][ C0] ? rcu_is_watching+0x16/0xb0 [ 254.869713][ C0] __kmalloc_node_track_caller_noprof+0x543/0x720 [ 254.876135][ C0] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 254.882734][ C0] ? nsim_dev_trap_report_work+0x25f/0xb30 [ 254.888550][ C0] ? nsim_dev_trap_report_work+0x25f/0xb30 [ 254.894370][ C0] __alloc_skb+0x2c1/0x7a0 [ 254.898820][ C0] nsim_dev_trap_report_work+0x25f/0xb30 [ 254.904471][ C0] ? process_scheduled_works+0x97a/0x1630 [ 254.910209][ C0] process_scheduled_works+0xc3d/0x1630 [ 254.915805][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 254.921815][ C0] ? assign_work+0x3cf/0x5d0 [ 254.926412][ C0] worker_thread+0xa47/0xfb0 [ 254.931020][ C0] ? __kthread_parkme+0x71/0x1f0 [ 254.935981][ C0] kthread+0x38b/0x480 [ 254.940059][ C0] ? __pfx_worker_thread+0x10/0x10 [ 254.945186][ C0] ? __pfx_kthread+0x10/0x10 [ 254.949790][ C0] ret_from_fork+0x514/0xb70 [ 254.954388][ C0] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.959521][ C0] ? __switch_to+0xc89/0x1420 [ 254.964221][ C0] ? __pfx_kthread+0x10/0x10 [ 254.968925][ C0] ret_from_fork_asm+0x1a/0x30 [ 254.973724][ C0] [ 255.469068][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.469131][ T1310] ieee802154 phy1 wpan1: encryption failed: -22