last executing test programs: 10m37.605867813s ago: executing program 0 (id=1277): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffd, 0x2752789b59c001a2, 0x400, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 10m37.467903154s ago: executing program 0 (id=1279): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="21032cbd7000fcdbdf250100000008000300"], 0x1c}, 0x1, 0x0, 0x0, 0x3a63ade8639deb60}, 0x4810) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) (fail_nth: 2) 10m37.266789642s ago: executing program 0 (id=1282): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x1e1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x1ffd, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6388, 0x0, 0x20000000, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x12, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0xc0) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000201e044030400001020301090292000301062005080b00010101304b0904000000010130000a2401052e00060000001324030506030604ff0c00000003000800080011240804"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf) 10m37.040679185s ago: executing program 0 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (fail_nth: 11) 10m36.773545633s ago: executing program 0 (id=1286): setresuid(0x0, 0xee00, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000001c0)={0x7, 'vlan1\x00', {0x8}, 0x404}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4000004) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x400e03, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi1\x00', 0x2002, 0x0) ioctl$COMEDI_SETRSUBD(r1, 0x6410) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be3206e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000600e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x131301, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}, 0x1c) 10m35.526634494s ago: executing program 0 (id=1301): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x1c, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x54}}) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000000180)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)={0x40, 0x16, 0x7c, "fb539d86c8ed050a3c394ed4f40a7cd199ad5bd5c3a1193f9705b2eec8b8df3d45f63af523473b32e5ed41f3b020acac3093ab88e982a1521a314d0737c479072a6ebc91cac159223a46148383637a95c2d57a1fd622f7ed7ac6c59376d1e96325bfbd749590445caad05119723c5a26fb32976faa11cdd99b71d855"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="4018410000004d"], 0x0, 0x0}) 10m35.291380282s ago: executing program 32 (id=1301): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x1c, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x54}}) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000000180)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)={0x40, 0x16, 0x7c, "fb539d86c8ed050a3c394ed4f40a7cd199ad5bd5c3a1193f9705b2eec8b8df3d45f63af523473b32e5ed41f3b020acac3093ab88e982a1521a314d0737c479072a6ebc91cac159223a46148383637a95c2d57a1fd622f7ed7ac6c59376d1e96325bfbd749590445caad05119723c5a26fb32976faa11cdd99b71d855"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="4018410000004d"], 0x0, 0x0}) 1m6.752555712s ago: executing program 2 (id=4318): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f000000ea00)={0x0, 0x0, &(0x7f000000e9c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x80) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="f82bec40a0485204a20964e66d6ff8c44eeebb4629252788008acd00ff82941c9a1ced8c291b9acdea0a23e46e7c4b37c6bafe83501b649d6b9e05f70511b7cd2e015d74438d1462868ebd3dbff2e2a544ae", @ANYRESHEX, @ANYRES8, @ANYRES8], 0x11) r0 = syz_usb_connect$hid(0x2, 0x8d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040a71e070900000000000109022400010000e80b0904000501030002000921fd7f0001226103090581038936010a7034732d2a9fe18cacfe21475d51db1266372c8f474f94e97857bb57b7b4703239d4a870881a37b40f151ca8a93a9bd1efa7"], 0x0) syz_usb_connect(0x3, 0xaf, &(0x7f0000000200)=ANY=[@ANYBLOB="120110038a40d008d2191111d8300102030109029d0001fc0180090424030106a73d0909050900ff0307400682049016e5cac02aaef88a8d1f6a4db8bc901484a693af3f8a37fb5688e567ca5e78114728abcc81e6c57f38f07ded6548b6de62de4fbfb3c2240341b5bd580b87f7f1db2e62dd03357514911c81153f0a6dd32c5b6700abe07090df3f803af20b90b501dd71098e217b173191f8d0c8c5f60da3ebc2eff8858b3ffa40fecaf6b72700"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m4.995781433s ago: executing program 2 (id=4327): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfa}, &(0x7f0000000040)=0x8) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xfffffffd}], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r5 = memfd_secret(0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000640)) unshare(0x64000600) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x6, 0x40000006, 0x2, 0x87, 0xffffdfff, 0x40}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$RNDADDENTROPY(r7, 0x5207, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) prlimit64(0x0, 0x7, 0x0, 0x0) 1m0.169917329s ago: executing program 2 (id=4342): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x323, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1005, 0x78, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = fsopen(&(0x7f0000000400)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r2) sendmsg$unix(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)="2481", 0x2}], 0x1}, 0x2004085) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netpci0\x00', 0x0}) r4 = socket(0x25, 0x3, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000090c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@rights={{0x10}}], 0x10, 0x800}}], 0x1, 0x800) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000440)=@newtclass={0x590, 0x28, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {0xe, 0xfff2}, {0xffff, 0x5}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_atm={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_atm={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xfff, 0x8000, 0x4, 0x2, 0x200, 0x7, 0xc3, 0x9, 0x3, 0x400, 0xfffffffd, 0x5, 0x8, 0x404, 0x2, 0xc, 0x7, 0xdc, 0x7f, 0x8, 0x8, 0x6, 0x5, 0x3, 0x1ff, 0x101, 0x80, 0x7, 0x10001, 0x0, 0xe010, 0x527, 0x8, 0xfffffff7, 0x3, 0x2, 0x6, 0x4, 0xf, 0xffffffff, 0xe0000000, 0x0, 0x8ef, 0x6, 0x8, 0x3, 0xfffffe00, 0x3b, 0xffffffff, 0x1, 0x7, 0x5, 0x2, 0x0, 0x7fffffff, 0x6, 0x3518, 0x2, 0x9, 0x7fffffff, 0xb, 0x6, 0x3ff, 0xd, 0x41, 0x7, 0x4, 0xe72c, 0xfffff79f, 0x9cf, 0x200, 0xb5, 0x7f, 0xe59, 0x5, 0x7, 0x0, 0x7, 0xffffffff, 0x4, 0xbe1d, 0x8, 0x38d, 0xa2, 0x0, 0x5, 0x9, 0x64d6, 0xb, 0x13190, 0xfffffffe, 0x7fff, 0x4, 0x4, 0x1, 0xbf5, 0x3, 0x5fd, 0x0, 0x80, 0x10, 0xb, 0x5, 0x101, 0x6, 0x10, 0x9, 0x2, 0x7, 0x0, 0x8, 0x2, 0x3, 0x5, 0x12f, 0x6, 0x36e, 0x10000, 0x6, 0x8000, 0x73, 0x0, 0x9, 0x53fc1421, 0x12, 0x0, 0x101, 0x4, 0x2, 0x50, 0x2, 0x70, 0x400, 0x7, 0x2, 0x8, 0x6, 0xb8d, 0x2, 0x8, 0x4, 0x4, 0x3a50, 0x8ee1, 0x7, 0x0, 0x0, 0x8, 0x10, 0x2, 0x7, 0x6, 0xf900, 0x1, 0x36f8, 0x4, 0x6b5, 0xc, 0x2, 0x9, 0xc1c9, 0x3d, 0x4, 0x5, 0x7fff, 0x1, 0x9, 0x7, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x200, 0x5, 0x6c, 0xb, 0xff, 0x2e10000, 0x8, 0x0, 0x151, 0xfffffffa, 0xd4, 0x2, 0x3, 0x594e45b9, 0x1000, 0x3, 0x3, 0x8, 0x1, 0x0, 0x8, 0x80, 0x4, 0x2, 0x8001, 0x0, 0x0, 0x4, 0xfccc, 0x8, 0x7, 0xa69e, 0x2, 0x0, 0x8, 0x800, 0x3, 0x7, 0x9, 0x0, 0x80000001, 0x1, 0x7fffffff, 0x9, 0x0, 0x10, 0x2, 0x400, 0x1, 0x400, 0x3, 0x2, 0x7, 0xb, 0x8000, 0x5, 0x10001, 0x1, 0x1, 0x3, 0x5, 0x2, 0x5, 0x0, 0x5, 0x40, 0x3, 0xffff8000, 0x6, 0x9, 0xfffffffc, 0x80000000, 0x6, 0x8, 0x6, 0x18e36164, 0x6, 0x5, 0x7, 0x4, 0x4, 0x8000, 0x9]}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x1, 0x7, 0x6, 0x3, 0x9}}]}}, @c_atm={{0x8}, {0x7c, 0x2, [@TCA_ATM_HDR={0x41, 0x3, "9bb10cffd1271e146624905e98eb5be8dfa42f87f65b5bcaf2ed62aed2ae612ea4ef60b0de2c63062b282d75ca68aad6f6a8f3c7ec23809aabc43d1d75"}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0x23, 0x3, "896a7059cec5a7336d546bb34e55e87d3d8b4ff1eb66c8bc0a901a6c515380"}, @TCA_ATM_FD={0x8, 0x1, r5}]}}, @c_atm={{0x8}, {0x78, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xffe8}}, @TCA_ATM_HDR={0x28, 0x3, "87142bb0050328eae9626fad0f73ad1da504b0286b76f710646d80b0691af83ab6c2a156"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4ab3b4d86f278953, 0x1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0x5}}, @TCA_ATM_HDR={0x9, 0x3, "ce18ad3619"}, @TCA_ATM_HDR={0x27, 0x3, "a2c0930c7497e75876bdd3e2a75ef9b03294a0ffa93bd292ae2eddb7c1f52455162337"}]}}]}, 0x590}, 0x1, 0x0, 0x0, 0x20000810}, 0x20040010) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="0f01b20000000065260ff3f166ba2000b0fbee66b8cc008ec00f01c5b9800000c00f3235004000000f30c4a178287f040fc76edc2ef23666440f01b900180000440f2393", 0x44}], 0x1, 0x34, &(0x7f00000001c0), 0x0) dup(r7) close(0x4) 57.886957969s ago: executing program 2 (id=4346): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r1 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04040aaaeaaaaaaa101347de7ca003e76d"], 0xd) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x7, 0x2, 0xa, @dev={0xfe, 0x80, '\x00', 0x2c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x20, 0x6, 0x2}}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000480)={0x0, 0x9}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000500)={r4, 0xa3}, &(0x7f0000000600)=0x8) r5 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) ioctl$sock_ifreq(r5, 0x8917, &(0x7f0000000000)={'bond0\x00', @ifru_ivalue}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000040)) 56.772606265s ago: executing program 2 (id=4347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x24, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) 54.091978421s ago: executing program 2 (id=4352): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xb8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x4000000}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 53.823049025s ago: executing program 33 (id=4352): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xb8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x4000000}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 19.929902588s ago: executing program 3 (id=4454): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r2], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = accept4(r1, 0x0, 0x0, 0x80800) pwritev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="aaa58a1be9295dd8", 0x8}, {&(0x7f0000000100)="4b0618239f8568ba6c0d6a37925e3c", 0xf}], 0x2, 0x100, 0x6) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3}], 0x1, 0x40800) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x1}) syz_io_uring_setup(0x4e0b, &(0x7f0000000400)={0x0, 0x304f, 0x2000, 0x10000, 0x38c, 0x0, r4}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x2120) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000240)=[@nested_amd_inject_event={0x180, 0x38, {0x1, 0x7c, 0x1, 0x7, 0x1}}, @rdmsr={0x66, 0x18, {0x1fc}}, @nested_amd_invlpga={0x17d, 0x20, {0x26000, 0x9e99}}, @wr_crn={0x67, 0x20, {0x4, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x13, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xb8, 0x67beb41b, 0x16c8608b, 0x8001}}], 0xe8}) sendmsg$kcm(r0, &(0x7f0000000040), 0xc080) 19.614529268s ago: executing program 3 (id=4456): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r1 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1d) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x181141) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b160000000000000000020000081400048010000180080001006f736600040002a3f3abe437e0b12430000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x3, 0x0, 0x7, 0x0}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRESHEX=r1], 0x38}}, 0x4) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 17.136437284s ago: executing program 3 (id=4461): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x45080) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x40) 16.804866296s ago: executing program 3 (id=4463): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0xbe87, 0x4}}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, &(0x7f0000000280)) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b", 0x42}, {&(0x7f00000000c0)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf8", 0x33}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r8 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000001c0)={@private=0xa010101, 0x1}}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, 0x0, &(0x7f00000001c0)) setresuid(0x0, r9, r9) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r9, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16.640174165s ago: executing program 3 (id=4465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x900) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_']) 16.267622864s ago: executing program 4 (id=4469): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) close_range(r0, r0, 0x0) (fail_nth: 2) 15.82950306s ago: executing program 4 (id=4471): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000d, 0x10010, 0xffffffffffffffff, 0x18c43000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f00000003c0)={&(0x7f000077b000/0x3000)=nil, 0xb, 0x6}) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141100, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, 0x0) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xe, @private2}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xa0}}, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_format(r9, &(0x7f0000000040)='-1\x00', 0x3) recvmmsg(r0, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/4064, 0xfe0}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000180)=""/26, 0x1a}], 0x5}, 0x7fff}], 0x1, 0x12, 0x0) 15.7052928s ago: executing program 3 (id=4472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000001900)={&(0x7f00000014c0)={{@local, 0x4e4f}, {@local, 0x5485}, 0x400, "2ee7668f981d7d63c4423fb052f6d7d1e4f47b625168d80373ad34292aff31347deeaa6421e66c6045ba749106ca1d1108721c77ee60696e169c5979d136df9b343c05274e81c31a4b3a233c6dcccebe8a6135892ffd1a00a229f6677c85cdc3d41ac5b0d8803051771e6b4177aef33a2d5966a4c718e6ea0858eecff221d0d38596424e03949dd4c517caf6f7cfa1009f08c488909bb1febcf2c64f817bc72a53925c0d6c07ca3e20278ca47b6601a206cd0adb73af3b3f4508c4617c6f1cc8da54c37aff1eb3c33c4c8056c8e66b993755f6d7b4a523a3c8792c496c7579f0f7953397be49488a942a387ff5e1d5bee5d04d926ee25bc20f6edeb20b776905e0b753428ae4427a1edaf3267db20dcc8dbd1c63e8c262f6fa43f75f7ba01317912ce36e5dd4ca8284879e738fe789ef3c80a33d7cc4ae3584fd95deee653f5fd07142992caf3447090eddcbaad8ca67ccf418c710046ed19ea000596f4e173efe289c4c9d9836a074b7e85f314a546c0308a3e70ee2fc5f3ebdbdbebc0dfda3a73765d758db156787a53f31444b5b42e3f8f2508097e2a5e68f5b47a218f37c957881eeab7f8a550318a6923ecc175892a3df26e8165edb8c927510b4a57e7a3ea4be568a61bc2af29f7094bb99bfcb2f40973bf7157a99e3b162cd916756b18205990378793f848ca3102829bb94883796dc54653e922bc21d3aef58e923c39f848a876de056d7fe111f20e78df637dbae7549f332007b262d6e8be0d028c53666f7cc8cd455a987506fbadd7c093fcd6ff09e3b0a907f89e18a5e459bbb612d53c22715307924f2cd6b3b6d913449cb284befb9683a3953321d8ad6e094f84f3383b0e58e683313dd5153504620fb32798bedb4769ba94ea8e0125e637fd25bad6cc5cd7a434119b24fc389da1e0615c4af5337c24a2c04e01e106824e6907ee91f40d143b12ddf09cbc81470d77dddca02b0ecc6802d7ffa8023170c90ec725854b7a61868d5f9f7d4edbea8e0abd4a548856e714bc582e16f62b68c6c4461728e9acf95e93fb0aea75a9d3268f5b9468d299f2977fb7753f292a4f0e5e81a93a3495c2f7db3524fc1b655598b2990aa5ffd37a9209cdfc2729b900355d08b9e287567a6f63cc7a68437714c69601b2d3eab72b0771e22b39adc2f576c01d50007aee8839425a9c161803f1a5aa1317ae5300a70f28893d18076b3d69614001f6ad5d4fbe2581446589a3de4ac21b66b966b73478463760a3dcdf3635db22716e8e8c27ef81f31ec1b70fae852bc53feebe88a7bafc83faf903d29c839ee77575ddb036c0a533ae2abc9e9328bb38497b02f45401450cee0633b172bafd5a679179f482267f4e46759b16e6c7893f4163f629aa378a692b6b690fabc4b87e23a7da16184d9d26ac112b3ad12ce4f3d53c20f32b13ad0cf0bf54a7391affd"}, 0x418, 0x40}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x1}) 15.269090524s ago: executing program 4 (id=4474): pipe2(0x0, 0x4000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}}, 0x4004880) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.576346994s ago: executing program 4 (id=4478): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bf029ec6a558", 'team_slave_0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x228, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x1c4, 0x6, 0x0, 0x1, [@nested={0x1c0, 0xce, 0x0, 0x1, [@nested={0x1bc, 0x13e, 0x0, 0x1, [@nested={0x1b8, 0xa0, 0x0, 0x1, [@nested={0x1b4, 0x61, 0x0, 0x1, [@nested={0x1b0, 0x9d, 0x0, 0x1, [@nested={0x1a9, 0x63, 0x0, 0x1, [@nested={0x99, 0x16, 0x0, 0x1, [@generic="0a5885771e643bb4f2cf1399f9a35aa759241f4897111a3edd19eff75dae07a7d5a8aec4d35c0818e64ae6e0b002c255a038d6d5057a5a1846938cc35a2053d20919e7b90c89c3d96fc6cb3734235e166bb3227b9a6b5efa0722164bb8a588d19ddb8d2b6eb882309a9b59b69868083f6b112f53025eb7ff7c795b4961aceafd71b035e13908fb2abbe10f7b2ba21e759cd4478afd"]}, @typed={0x4, 0xa5}, @nested={0xc, 0x90, 0x0, 0x1, [@typed={0x5, 0x7e, 0x0, 0x0, @str='\x00'}]}, @nested={0x4, 0x70}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0xd4, 0xde, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @fd=r4}, @nested={0xc5, 0x132, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff7}, @nested={0x4, 0x88}, @generic="4542fc928824f1d2d44b6e5df057d682ef8e10d9fe0931af317b9c1d6589dfa6b8b000967be7cac78d9f374310efae9219ed3e4774f11e345f447f9c83332c1ec50c4ec43114110121edf2ea3e938bc1945516b43707df8bab2a7065fa1dfcce1e83d530d10ef1f19559ba546274cdb6ffac07453d0f04769b2170b6180f01abe81a2dd198fc169e57626f5477078c2744afd746770bce8e149eb42cb41e66ac68da209f47a3221166bdf1df73d4087f0e", @nested={0x4, 0x14}]}]}, @generic="67bc0ca816bfd690a5b2bc965f"]}]}]}]}]}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x4c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f00000028c0)=ANY=[@ANYBLOB="000086dd0000140000080000000060ec97000f982c00fe8000000000000000000000000000aa00000000000000000000ffff"], 0xfce) (async) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/169, 0xa9}], 0x1}, 0x10101) 10.714993979s ago: executing program 4 (id=4484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x5, 0x200, 0x48, 0x3f, 0x6, 0x8, 0x3, 0xff, 0x2, 0xd0, 0x9, 0x2, 0x4}, {0x1, 0x2, 0x7, 0xe, 0x1, 0x5, 0x9, 0x5, 0xd, 0x40, 0x3, 0x4, 0x9}, {0x81, 0x7, 0x9, 0x3f, 0x3, 0x3, 0x9, 0x7, 0x1, 0x8, 0x9, 0x4, 0x8000000000000001}], 0x1}) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_']) 7.029095543s ago: executing program 1 (id=4492): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x2000fcfd, 0x4, 0x1, 0xc, r2, 0x0, 0x0, 0xf}]) dup3(r2, r0, 0x80000) 6.279078788s ago: executing program 1 (id=4494): r0 = socket$inet(0x2, 0x2, 0x11) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sync_file_range(r1, 0x4, 0x8, 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, 0x0, 0xc8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x4425, 0xfffffffffffffff8, 0x400, 0x4, 0x2, 0x3, 0x7, 0x81}, &(0x7f0000000200)={0x6, 0x1, 0x41ae, 0xa, 0xc762, 0x6, 0xfffffffd}, &(0x7f0000000280)={0x856, 0x6, 0x100000001, 0x63acf70e, 0x31, 0x7b, 0xc34, 0x2}, &(0x7f0000000300)={r3, r4+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x1c000]}, 0x8}) r5 = socket$inet(0x2, 0x2, 0xffd) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r7, 0xa, 0x12) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x6, 0x9, &(0x7f00000003c0)={{0x16, @local, 0xdfff, 0x800002, 'nq\x00', 0x8, 0x3, 0x6}, {@private=0xa010100, 0xfffd, 0x4, 0x2000000a, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r9, 0x6, 0x9, 0x0, &(0x7f0000000040)) dup2(r7, r8) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r10, 0x89e6, &(0x7f0000000240)={0xc2, 0xfb}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100), 0x0) 4.241462295s ago: executing program 1 (id=4499): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0xa3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) sysfs$1(0x1, &(0x7f00000003c0)='/dev/dvb/adapter#/demux#\x00') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpgid(0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2, r7}) sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev2(r9, 0x0, 0x0, 0xa, 0x273e, 0x12) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) getpeername$qrtr(r4, &(0x7f0000000340), &(0x7f0000000540)=0xc) pipe2(0x0, 0x4000) r11 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r2, @ANYRES64=r4, @ANYRES32=r2, @ANYRES64=r8, @ANYRES64=r8, @ANYBLOB="3cc5f569cefd95c118a7d9b06cfe62476072a58922004ee1a6d53eca351a8ecd351f0f575a941a96241679b90d3db81aa2965234b183c7d07fd6500b09a484dac223d7ff8875c32de090fe4f9c500a1706382fed07a9b966b2ae8f32f5878bcb8b6d237776ecd0c57b2729fb2d1f2f924570", @ANYBLOB="37dcd8ea57e630418c", @ANYRES8=r10, @ANYRES32=r10], 0x6f4}, 0x1, 0x0, 0x0, 0x40021}, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000280)=0x21e) 1.055690519s ago: executing program 1 (id=4510): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x6, 0x0, 0x40, 0xa00, 0x1bdd6019, 0x110200}) 744.065151ms ago: executing program 1 (id=4513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000000)={0x80000000, 0x1, 0x0, 0x684, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a30000000000800074000000003280004800800024000ad5012080001"], 0xa4}, 0x1, 0x0, 0x0, 0x20040001}, 0x40810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x5e0, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x5b8, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6b2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x534, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f24aebc57cd4a30f0e2b00586d3a576e282224dd1c0583ec969cfe8de046ceb"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x208, 0x9, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x4}, {0x4}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_ALLOWEDIPS={0x1f0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @empty, 0x1}}]}]}]}, 0x5e0}}, 0x40094) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000340)={0x9e0, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x4e0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1291367b29eddad2d5708ba159afc1ac4ddd67d18348c5ba88257cc321e86eb9"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e73e0c89c8229bd72a0af1df806f60c90b4993b032331f8d3af52012e1c13e96"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e11ddc156203f83935ac00859e33e7ed2f5a841caabf46c272196d0be0f4bb8"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ea68f5fe90143f8e04d2f39c7b3e48fceb6a2331c107e9684ac95abba4122402"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "038fb73b8b9867bf6826b3cdd3f2ff8000fc79dcea1e0ceb1eea014a15c2318e"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6628400b9d60c7aaef6ed75b393a83e8a2f67b42a4db147bb230ccbc6846e862"}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0578d568c6440bdaae1ee3f77c92d59db386ef1c6eac20ad894e028c83c82665"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x469}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xffffffff, @remote, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private2, 0xfffffffa}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x248, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PEERS={0x474, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9fd450269aa50610a92f146710484dd4a1aa796458e1ba29a07186e2b4426e91"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @mcast1, 0x5}}]}, {0x3e0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0xb4}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x7f}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x9e0}, 0x1, 0x0, 0x0, 0xf8b542518d989ff8}, 0x4040441) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30781dfa5300c746000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x480d0}, 0x800) 743.694859ms ago: executing program 4 (id=4514): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)='b', 0x19fff, 0x8800, 0x0, 0x0) 673.478368ms ago: executing program 5 (id=4515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180040001"], 0xd4}}, 0x0) 446.071503ms ago: executing program 5 (id=4516): r0 = getpgid(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c000500000000000000000005003700fffe000008000200", @ANYRES32=r6], 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x644ad2ec32b79f57, 0x8070bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20054004}, 0x200440c4) r7 = getpgrp(r0) r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, &(0x7f0000000200)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x4, 0x0) 290.232891ms ago: executing program 5 (id=4517): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x43) mount$tmpfs(0x2000000000000000, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr']) 285.257886ms ago: executing program 1 (id=4518): openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r4], 0x30}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf25250000000800f7c0", @ANYRES32=r5, @ANYBLOB="08003500030000004400508005000200010000000800070002000000090001004344ee0be90000001100010041709a41af6e25be9405c00e540000000500090002000000050004006100000020003400b58d6454263c8e807bc924bd74f2479e61b61814d98e492a2810a42c"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x44080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) syz_usb_connect(0x1, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 226.860371ms ago: executing program 5 (id=4519): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a", 0x42}], 0x3}], 0x1, 0x20048804) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514004beb3513a7499c6f8d23e7c8879d4c040cc008000c003f000200068e01c00364683b9dad3aa21240ed9a6a818cf6c551ae60fc91b169edb1c375", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, 0x0, 0x95) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x9, 0xbde, 0xb, 0x10300}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00'}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f00000001c0)={0x13}) syz_usb_control_io$hid(r0, 0x0, 0x0) 48.835258ms ago: executing program 5 (id=4520): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x60c42, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x7, 0x700, 0x400000e, 0x10001, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xe, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102}}}}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000002880), 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) 0s ago: executing program 5 (id=4521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x161a80) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x7a) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0xc00c854}, 0x40) kernel console output (not intermixed with test programs): 0x0 [ 807.650235][ T5727] semitek 0003:1EA7:0907.0027: unknown main item tag 0x0 [ 807.650262][ T5727] semitek 0003:1EA7:0907.0027: unknown main item tag 0x0 [ 807.650289][ T5727] semitek 0003:1EA7:0907.0027: unknown main item tag 0x0 [ 807.650316][ T5727] semitek 0003:1EA7:0907.0027: unknown main item tag 0x0 [ 807.650344][ T5727] semitek 0003:1EA7:0907.0027: unknown main item tag 0x0 [ 807.652435][ T5727] semitek 0003:1EA7:0907.0027: reserved main item tag 0xd [ 807.652574][ T5727] semitek 0003:1EA7:0907.0027: unexpected long global item [ 807.653456][ T5727] semitek 0003:1EA7:0907.0027: probe with driver semitek failed with error -22 [ 807.805824][ T5727] usb 4-1: USB disconnect, device number 48 [ 807.921309][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4135'. [ 808.036186][ T5769] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 808.186042][ T5769] usb 5-1: Using ep0 maxpacket: 16 [ 808.188841][ T5769] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 808.188870][ T5769] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.188895][ T5769] usb 5-1: config 0 has no interface number 0 [ 808.191274][ T5769] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 808.191305][ T5769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.191331][ T5769] usb 5-1: Product: syz [ 808.191342][ T5769] usb 5-1: Manufacturer: syz [ 808.191354][ T5769] usb 5-1: SerialNumber: syz [ 808.217152][ T5769] usb 5-1: config 0 descriptor?? [ 808.278713][ T5769] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 808.523003][ T5727] usb 5-1: USB disconnect, device number 12 [ 808.582296][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.582400][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.954516][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4147'. [ 808.986031][T13108] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 809.156801][T13108] usb 4-1: device descriptor read/64, error -71 [ 809.396290][T13108] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 809.536149][T13108] usb 4-1: device descriptor read/64, error -71 [ 809.649993][T13108] usb usb4-port1: attempt power cycle [ 809.689971][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4156'. [ 809.901534][T17961] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4157'. [ 809.902898][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4157'. [ 810.006175][T13108] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 810.027942][T13108] usb 4-1: device descriptor read/8, error -71 [ 810.200166][ T9] Process accounting resumed [ 810.276137][T13108] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 810.307897][T13108] usb 4-1: device descriptor read/8, error -71 [ 810.309917][T17977] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4164'. [ 810.316379][ T5709] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 810.421019][T13108] usb usb4-port1: unable to enumerate USB device [ 810.476086][ T5709] usb 3-1: Using ep0 maxpacket: 8 [ 810.480713][ T5709] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 810.500568][ T5709] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 810.500600][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.500622][ T5709] usb 3-1: Product: syz [ 810.500638][ T5709] usb 3-1: Manufacturer: 蜗璲脞ꆒבּ튎㉯휪ډẗᾖ﷾㱹ï楬å¦èª’牃險楎麘ﮇꦬጳ仼Ꙡﻶӱ㿑鬮㗤䇴ੱꗭႮ챡á‡åµ«é˜¨æ‚°îƒ¡îžŽà¬­é´¶é¢íŽì¹ƒåœ î˜°í—½è”¡åˆ¥í„¢èˆ·ê¿¾ãŠˆã«ªìŒŠç¯³ä„ƒæ¤â³¸ç¤‚᱋â¹æ¤•á–ªë±—畉꽒ￎë¸á…ˆëº·ã«ªæ“žî—µè“²äª ë¸šá´ºç–¸æ³ˆ [ 810.500669][ T5709] usb 3-1: SerialNumber: syz [ 810.842212][ T5709] usb 3-1: 1:1 : bogus bTerminalLink 9 [ 810.995248][ T5709] usb 3-1: unit 6 not found! [ 810.995266][ T5709] usb 3-1: unit 7 not found! [ 811.085320][ T5709] usb 3-1: USB disconnect, device number 81 [ 811.603714][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4168'. [ 812.063198][T17994] mmap: syz.2.4170 (17994): VmData 25837568 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 812.096168][ T5727] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 812.249947][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 812.252925][ T5727] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 812.252958][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.284880][ T5727] usb 4-1: config 0 descriptor?? [ 812.305619][ T5727] gspca_main: sunplus-2.14.0 probing 041e:400b [ 812.510997][T17993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.513420][T17993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.551037][ T5727] gspca_sunplus: reg_w_riv err -71 [ 812.551215][ T5727] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 812.575272][ T5727] usb 4-1: USB disconnect, device number 53 [ 812.686129][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 812.838637][ T9] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 812.838676][ T9] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.838707][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 812.838744][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 812.838770][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.926547][ T9] usb 3-1: config 0 descriptor?? [ 813.228487][T13658] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 813.229654][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4178'. [ 813.344880][ T9] hid_parser_main: 56 callbacks suppressed [ 813.344908][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.344941][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.344969][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.344996][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.345023][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.345051][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.345077][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.345104][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.345131][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.345157][ T9] holtek_mouse 0003:04D9:A070.0028: unknown main item tag 0x0 [ 813.377357][T13658] usb 5-1: Using ep0 maxpacket: 32 [ 813.439621][ T9] holtek_mouse 0003:04D9:A070.0028: hidraw0: USB HID v9.0a Device [HID 04d9:a070] on usb-dummy_hcd.2-1/input0 [ 813.443923][T13658] usb 5-1: unable to get BOS descriptor or descriptor too short [ 813.476712][T13658] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 813.476748][T13658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.476774][T13658] usb 5-1: Product: syz [ 813.476793][T13658] usb 5-1: Manufacturer: syz [ 813.476810][T13658] usb 5-1: SerialNumber: syz [ 813.571273][ T9] usb 3-1: USB disconnect, device number 82 [ 813.621467][T18016] fido_id[18016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 813.771660][T13658] usb 5-1: unit 4 not found! [ 813.771684][T13658] usb 5-1: unit 0 not found! [ 814.111502][T13658] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 814.165702][T13658] usb 5-1: unit 4 not found! [ 814.165729][T13658] usb 5-1: unit 0 not found! [ 814.325323][T13658] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 814.357751][T13658] usb 5-1: unit 4 not found! [ 814.357768][T13658] usb 5-1: unit 0 not found! [ 814.486192][T13108] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 814.641690][T13108] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 814.641723][T13108] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 814.641746][T13108] usb 3-1: config 220 has no interface number 2 [ 814.641820][T13108] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 814.641851][T13108] usb 3-1: config 220 interface 0 has no altsetting 0 [ 814.641872][T13108] usb 3-1: config 220 interface 76 has no altsetting 0 [ 814.641892][T13108] usb 3-1: config 220 interface 1 has no altsetting 0 [ 814.689280][T13108] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 814.689314][T13108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.689337][T13108] usb 3-1: Product: syz [ 814.689353][T13108] usb 3-1: Manufacturer: syz [ 814.689368][T13108] usb 3-1: SerialNumber: syz [ 814.762653][T18038] FAULT_INJECTION: forcing a failure. [ 814.762653][T18038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.762682][T18038] CPU: 1 UID: 0 PID: 18038 Comm: syz.3.4187 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 814.762705][T18038] Tainted: [L]=SOFTLOCKUP [ 814.762711][T18038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 814.762722][T18038] Call Trace: [ 814.762728][T18038] [ 814.762735][T18038] dump_stack_lvl+0xe8/0x150 [ 814.762757][T18038] should_fail_ex+0x467/0x600 [ 814.762786][T18038] _copy_from_user+0x2d/0xb0 [ 814.762807][T18038] ___sys_sendmsg+0x1c6/0x360 [ 814.762829][T18038] ? __lock_acquire+0x683/0x2ce0 [ 814.762854][T18038] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.762881][T18038] ? kstrtouint+0x6e/0xe0 [ 814.762923][T18038] ? __fget_files+0x2a/0x420 [ 814.762940][T18038] ? __fget_files+0x3a8/0x420 [ 814.762965][T18038] __sys_sendmmsg+0x279/0x4d0 [ 814.762993][T18038] ? __pfx___sys_sendmmsg+0x10/0x10 [ 814.763026][T18038] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 814.763053][T18038] ? ksys_write+0x248/0x270 [ 814.763077][T18038] ? __pfx_ksys_write+0x10/0x10 [ 814.763103][T18038] __x64_sys_sendmmsg+0xa0/0xc0 [ 814.763126][T18038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.763143][T18038] do_syscall_64+0x174/0x580 [ 814.763165][T18038] ? trace_irq_disable+0x3b/0x140 [ 814.763187][T18038] ? clear_bhb_loop+0x40/0x90 [ 814.763207][T18038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.763224][T18038] RIP: 0033:0x7fe00211de59 [ 814.763240][T18038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.763254][T18038] RSP: 002b:00007fe000376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 814.763271][T18038] RAX: ffffffffffffffda RBX: 00007fe0023a5fa0 RCX: 00007fe00211de59 [ 814.763284][T18038] RDX: 0000000000000003 RSI: 0000200000007240 RDI: 0000000000000003 [ 814.763294][T18038] RBP: 00007fe000376090 R08: 0000000000000000 R09: 0000000000000000 [ 814.763304][T18038] R10: 000000000001c000 R11: 0000000000000246 R12: 0000000000000001 [ 814.763315][T18038] R13: 00007fe0023a6038 R14: 00007fe0023a5fa0 R15: 00007fff320ec158 [ 814.763339][T18038] [ 814.763649][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4188'. [ 815.318803][T18046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4191'. [ 815.318836][T18046] nbd: must specify a size in bytes for the device [ 815.367491][T18048] bridge0: port 3(geneve1) entered blocking state [ 815.369546][T18048] bridge0: port 3(geneve1) entered disabled state [ 815.369844][T18048] geneve1: entered allmulticast mode [ 815.450055][T13108] usb 3-1: selecting invalid altsetting 0 [ 815.530540][T13108] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 815.530575][T13108] uvcvideo 3-1:220.0: No valid video chain found. [ 815.557269][T13108] usb 3-1: selecting invalid altsetting 0 [ 815.557315][T13108] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 815.590845][T13108] usb 3-1: USB disconnect, device number 83 [ 815.663514][T13658] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 815.691118][T13658] usb 5-1: USB disconnect, device number 13 [ 815.752668][T15286] udevd[15286]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 815.880935][T18048] geneve1: entered promiscuous mode [ 815.881554][T18048] bridge0: port 3(geneve1) entered blocking state [ 815.930232][T18048] bridge0: port 3(geneve1) entered forwarding state [ 815.956851][T18050] FAULT_INJECTION: forcing a failure. [ 815.956851][T18050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.956890][T18050] CPU: 1 UID: 0 PID: 18050 Comm: syz.2.4193 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 815.956919][T18050] Tainted: [L]=SOFTLOCKUP [ 815.956926][T18050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 815.956938][T18050] Call Trace: [ 815.956947][T18050] [ 815.957004][T18050] dump_stack_lvl+0xe8/0x150 [ 815.957032][T18050] should_fail_ex+0x467/0x600 [ 815.957068][T18050] _copy_from_user+0x2d/0xb0 [ 815.957094][T18050] get_user_ifreq+0x6b/0x180 [ 815.957128][T18050] br_ioctl_stub+0x172/0xd60 [ 815.957160][T18050] ? rt_mutex_slowlock+0x1f2/0x780 [ 815.957182][T18050] ? __pfx_br_ioctl_stub+0x10/0x10 [ 815.957229][T18050] ? sock_ioctl+0x4bb/0x7f0 [ 815.957266][T18050] ? mutex_lock_nested+0x168/0x1d0 [ 815.957302][T18050] ? __pfx_br_ioctl_stub+0x10/0x10 [ 815.957330][T18050] sock_ioctl+0x4e4/0x7f0 [ 815.957364][T18050] ? __pfx_sock_ioctl+0x10/0x10 [ 815.957395][T18050] ? __fget_files+0x2a/0x420 [ 815.957417][T18050] ? __fget_files+0x3a8/0x420 [ 815.957439][T18050] ? __fget_files+0x2a/0x420 [ 815.957464][T18050] ? bpf_lsm_file_ioctl+0x9/0x20 [ 815.957490][T18050] ? __pfx_sock_ioctl+0x10/0x10 [ 815.957528][T18050] __se_sys_ioctl+0xff/0x170 [ 815.957558][T18050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.957581][T18050] do_syscall_64+0x174/0x580 [ 815.957608][T18050] ? trace_irq_disable+0x3b/0x140 [ 815.957635][T18050] ? clear_bhb_loop+0x40/0x90 [ 815.957661][T18050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.957682][T18050] RIP: 0033:0x7f445237de59 [ 815.957703][T18050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.957722][T18050] RSP: 002b:00007f44505d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.957744][T18050] RAX: ffffffffffffffda RBX: 00007f4452605fa0 RCX: 00007f445237de59 [ 815.957761][T18050] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000003 [ 815.957774][T18050] RBP: 00007f44505d6090 R08: 0000000000000000 R09: 0000000000000000 [ 815.957788][T18050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.957801][T18050] R13: 00007f4452606038 R14: 00007f4452605fa0 R15: 00007ffddb6526c8 [ 815.957835][T18050] [ 816.056365][T13658] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 816.196795][T13658] usb 5-1: device descriptor read/64, error -71 [ 816.456959][T13658] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 816.586496][T13658] usb 5-1: device descriptor read/64, error -71 [ 816.699995][T13658] usb usb5-port1: attempt power cycle [ 817.016178][ T37] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 817.046132][T13658] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 817.067360][T13658] usb 5-1: device descriptor read/8, error -71 [ 817.168729][ T37] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 817.168757][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 817.168783][ T37] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 817.168800][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.174053][ T37] usb 3-1: config 0 descriptor?? [ 817.174992][T18064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 817.306190][T13658] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 817.326130][T13108] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 817.387181][T18064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.387736][T18064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.401974][T13658] usb 5-1: device descriptor read/8, error -71 [ 817.486142][T13108] usb 4-1: device descriptor read/64, error -71 [ 817.513152][T13658] usb usb5-port1: unable to enumerate USB device [ 817.628610][ T37] hid (null): report_id 0 is invalid [ 817.628629][ T37] hid (null): unknown global tag 0xe [ 817.628655][ T37] hid (null): global environment stack underflow [ 817.628701][ T37] hid (null): unknown global tag 0xc [ 817.643165][ T37] semitek 0003:1EA7:0907.0029: reserved main item tag 0xd [ 817.643295][ T37] semitek 0003:1EA7:0907.0029: unexpected long global item [ 817.644155][ T37] semitek 0003:1EA7:0907.0029: probe with driver semitek failed with error -22 [ 817.756237][T13108] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 817.830246][ T37] usb 3-1: USB disconnect, device number 84 [ 817.886171][T13658] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 817.886195][T13108] usb 4-1: device descriptor read/64, error -71 [ 817.996460][T13108] usb usb4-port1: attempt power cycle [ 818.016222][T13658] usb 5-1: device descriptor read/64, error -71 [ 818.257378][T13658] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 818.336161][T13108] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 818.361232][T13108] usb 4-1: device descriptor read/8, error -71 [ 818.387072][T13658] usb 5-1: device descriptor read/64, error -71 [ 818.497340][T13658] usb usb5-port1: attempt power cycle [ 818.596171][T13108] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 818.616761][T13108] usb 4-1: device descriptor read/8, error -71 [ 818.726597][T13108] usb usb4-port1: unable to enumerate USB device [ 818.846083][T13658] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 818.866716][T13658] usb 5-1: device descriptor read/8, error -71 [ 819.106412][T13658] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 819.128005][T13658] usb 5-1: device descriptor read/8, error -71 [ 819.261735][T13658] usb usb5-port1: unable to enumerate USB device [ 820.225132][T18110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 821.049991][T18130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4220'. [ 821.696245][ T37] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 821.920318][ T37] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 821.920350][ T37] usb 5-1: config 179 has no interface number 0 [ 821.920400][ T37] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 8 [ 821.920422][ T37] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 821.920442][ T37] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 821.920459][ T37] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 821.920481][ T37] usb 5-1: config 179 interface 65 has no altsetting 0 [ 821.920509][ T37] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 821.920527][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.974547][T18138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 822.213440][ T37] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input55 [ 822.424116][ T37] usb 5-1: USB disconnect, device number 22 [ 822.424208][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 822.729413][T18164] usb usb1: usbfs: process 18164 (syz.2.4234) did not claim interface 0 before use [ 822.729729][T18164] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 823.148734][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 823.296796][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 823.302213][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.302252][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 823.302298][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 823.302324][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.361817][ T9] usb 5-1: config 0 descriptor?? [ 823.486155][ T5734] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 823.626039][ T5734] usb 4-1: device descriptor read/64, error -71 [ 823.886118][ T5734] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 824.026119][ T5734] usb 4-1: device descriptor read/64, error -71 [ 824.074761][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 824.074891][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 824.102695][ T9] usb 5-1: USB disconnect, device number 23 [ 824.136382][ T5734] usb usb4-port1: attempt power cycle [ 824.498555][ T5734] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 824.527852][ T5734] usb 4-1: device descriptor read/8, error -71 [ 824.566168][T13658] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 824.720141][T13658] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 824.720173][T13658] usb 5-1: config 127 has no interface number 0 [ 824.720224][T13658] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 824.725662][T13658] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 824.725697][T13658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.725721][T13658] usb 5-1: Product: syz [ 824.725737][T13658] usb 5-1: Manufacturer: syz [ 824.725768][T13658] usb 5-1: SerialNumber: syz [ 824.786428][ T5734] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 824.786530][T18209] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 824.817720][ T5734] usb 4-1: device descriptor read/8, error -71 [ 824.929197][ T5734] usb usb4-port1: unable to enumerate USB device [ 825.198085][T18209] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 825.401950][T13658] asix 5-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 825.402263][T13658] asix 5-1:127.57: probe with driver asix failed with error -71 [ 825.435797][T13658] usb 5-1: USB disconnect, device number 24 [ 826.649038][T18253] netlink: 'syz.2.4263': attribute type 1 has an invalid length. [ 826.687559][T13658] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 826.848217][T13658] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.848279][T13658] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 826.848416][T13658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.961905][T13658] usb 4-1: config 0 descriptor?? [ 827.042144][T13658] pwc: Askey VC010 type 2 USB webcam detected. [ 827.298338][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4267'. [ 827.371806][T13658] pwc: recv_control_msg error -32 req 02 val 2b00 [ 827.372556][T13658] pwc: recv_control_msg error -32 req 02 val 2700 [ 827.373236][T13658] pwc: recv_control_msg error -32 req 02 val 2c00 [ 827.373930][T13658] pwc: recv_control_msg error -32 req 04 val 1000 [ 827.374579][T13658] pwc: recv_control_msg error -32 req 04 val 1300 [ 827.375265][T13658] pwc: recv_control_msg error -32 req 04 val 1400 [ 827.380790][T13658] pwc: recv_control_msg error -32 req 02 val 2000 [ 827.410412][T13658] pwc: recv_control_msg error -32 req 02 val 2100 [ 827.416295][T13658] pwc: recv_control_msg error -32 req 04 val 1500 [ 827.438032][T13658] pwc: recv_control_msg error -32 req 02 val 2500 [ 827.440293][T13658] pwc: recv_control_msg error -32 req 02 val 2400 [ 827.601861][T13658] pwc: recv_control_msg error -32 req 02 val 2600 [ 827.602562][T13658] pwc: recv_control_msg error -32 req 02 val 2900 [ 827.608452][T13658] pwc: recv_control_msg error -32 req 02 val 2800 [ 827.744161][T18264] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4262'. [ 827.840060][T13658] pwc: recv_control_msg error -71 req 04 val 1200 [ 827.959994][T13658] pwc: Registered as video103. [ 827.979416][T13658] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input56 [ 828.036778][T13658] usb 4-1: USB disconnect, device number 62 [ 828.709853][T18285] loop3: detected capacity change from 0 to 7 [ 828.711854][T18285] Dev loop3: unable to read RDB block 7 [ 828.711900][T18285] loop3: unable to read partition table [ 828.712108][T18285] loop3: partition table beyond EOD, truncated [ 828.712126][T18285] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 829.178107][ T5710] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 829.329874][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.329938][ T5710] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 829.329965][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.372762][ T5710] usb 5-1: config 0 descriptor?? [ 829.388598][ T5710] pwc: Askey VC010 type 2 USB webcam detected. [ 829.854613][T18295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4279'. [ 829.898687][ T5710] pwc: recv_control_msg error -32 req 02 val 2b00 [ 829.909182][ T5710] pwc: recv_control_msg error -32 req 02 val 2700 [ 829.922471][ T5710] pwc: recv_control_msg error -32 req 02 val 2c00 [ 829.923664][ T5710] pwc: recv_control_msg error -32 req 04 val 1000 [ 829.924570][ T5710] pwc: recv_control_msg error -32 req 04 val 1300 [ 829.931599][ T5710] pwc: recv_control_msg error -32 req 04 val 1400 [ 829.961272][ T5710] pwc: recv_control_msg error -32 req 02 val 2000 [ 829.981296][ T5710] pwc: recv_control_msg error -32 req 02 val 2100 [ 829.987252][ T5710] pwc: recv_control_msg error -32 req 04 val 1500 [ 829.990353][ T5710] pwc: recv_control_msg error -32 req 02 val 2500 [ 830.206308][ T5710] pwc: recv_control_msg error -32 req 02 val 2600 [ 830.207187][ T5710] pwc: recv_control_msg error -32 req 02 val 2900 [ 830.220569][ T5710] pwc: recv_control_msg error -32 req 02 val 2800 [ 830.221519][ T5710] pwc: recv_control_msg error -32 req 04 val 1100 [ 830.310096][ T5710] pwc: Registered as video103. [ 830.322062][ T5710] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 830.553684][ T5709] usb 5-1: USB disconnect, device number 25 [ 831.464108][T18330] FAULT_INJECTION: forcing a failure. [ 831.464108][T18330] name failslab, interval 1, probability 0, space 0, times 0 [ 831.464148][T18330] CPU: 1 UID: 0 PID: 18330 Comm: syz.2.4290 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 831.464178][T18330] Tainted: [L]=SOFTLOCKUP [ 831.464186][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.464199][T18330] Call Trace: [ 831.464207][T18330] [ 831.464218][T18330] dump_stack_lvl+0xe8/0x150 [ 831.464249][T18330] should_fail_ex+0x467/0x600 [ 831.464289][T18330] should_failslab+0xa8/0x100 [ 831.464319][T18330] __kmalloc_noprof+0xfb/0x790 [ 831.464343][T18330] ? tomoyo_encode+0x2ad/0x570 [ 831.464374][T18330] ? tomoyo_encode+0x2ad/0x570 [ 831.464415][T18330] tomoyo_encode+0x2ad/0x570 [ 831.464456][T18330] tomoyo_realpath_from_path+0x5fa/0x640 [ 831.464501][T18330] ? tomoyo_path_number_perm+0x219/0x5f0 [ 831.464530][T18330] tomoyo_path_number_perm+0x246/0x5f0 [ 831.464563][T18330] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 831.464601][T18330] ? __lock_acquire+0x683/0x2ce0 [ 831.464648][T18330] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 831.464681][T18330] ? hook_file_ioctl+0x1f3/0x600 [ 831.464711][T18330] ? lockdep_hardirqs_on+0x7a/0x110 [ 831.464760][T18330] ? __fget_files+0x2a/0x420 [ 831.464787][T18330] ? __fget_files+0x2a/0x420 [ 831.464809][T18330] ? __fget_files+0x3a8/0x420 [ 831.464832][T18330] ? __fget_files+0x2a/0x420 [ 831.464862][T18330] security_file_ioctl+0xc3/0x2a0 [ 831.464892][T18330] __se_sys_ioctl+0x47/0x170 [ 831.464924][T18330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.464949][T18330] do_syscall_64+0x174/0x580 [ 831.464978][T18330] ? trace_irq_disable+0x3b/0x140 [ 831.465007][T18330] ? clear_bhb_loop+0x40/0x90 [ 831.465035][T18330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.465057][T18330] RIP: 0033:0x7f445237de59 [ 831.465079][T18330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.465101][T18330] RSP: 002b:00007f44505d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.465125][T18330] RAX: ffffffffffffffda RBX: 00007f4452605fa0 RCX: 00007f445237de59 [ 831.465142][T18330] RDX: 00002000000000c0 RSI: 00000000c2604111 RDI: 0000000000000003 [ 831.465157][T18330] RBP: 00007f44505d6090 R08: 0000000000000000 R09: 0000000000000000 [ 831.465172][T18330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.465185][T18330] R13: 00007f4452606038 R14: 00007f4452605fa0 R15: 00007ffddb6526c8 [ 831.465221][T18330] [ 831.465385][T18330] ERROR: Out of memory at tomoyo_realpath_from_path. [ 832.174687][T17618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 832.294909][T17618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 832.313197][T17618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 832.327347][T17618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 832.332842][T17618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 833.086137][ T5710] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 833.684252][T13913] nci: nci_ntf_packet: unknown ntf opcode 0x1 [ 833.824295][T13108] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 834.026601][T13108] usb 5-1: Using ep0 maxpacket: 32 [ 834.028949][T13108] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 834.028983][T13108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.029005][T13108] usb 5-1: config 0 has no interface number 0 [ 834.029053][T13108] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 834.029081][T13108] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.029112][T13108] usb 5-1: config 0 interface 196 has no altsetting 0 [ 834.032213][T13108] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 834.032245][T13108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.032318][T13108] usb 5-1: Product: syz [ 834.032344][T13108] usb 5-1: Manufacturer: syz [ 834.032361][T13108] usb 5-1: SerialNumber: syz [ 834.044388][T13108] usb 5-1: config 0 descriptor?? [ 834.056734][T18363] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 834.523582][T13108] ipheth 5-1:0.196: Unable to find endpoints [ 834.641947][T13108] usb 5-1: USB disconnect, device number 26 [ 834.816923][ T4924] Bluetooth: hci0: command tx timeout [ 834.917337][ T5709] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 835.077553][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 835.104164][ T5709] usb 4-1: config 1 interface 0 has no altsetting 0 [ 835.117295][ T5709] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 835.117319][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.117334][ T5709] usb 4-1: Product: syz [ 835.117346][ T5709] usb 4-1: Manufacturer: syz [ 835.117358][ T5709] usb 4-1: SerialNumber: syz [ 835.464332][ T5710] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 835.500385][ T5709] usbhid 4-1:1.0: can't add hid device: -71 [ 835.500477][ T5709] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 835.508474][ T5709] usb 4-1: USB disconnect, device number 64 [ 835.608993][ T5710] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 835.609032][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.609068][ T5710] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 835.609094][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.656384][ T5710] usb 5-1: config 0 descriptor?? [ 835.657431][T18386] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 835.864565][T18386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.880276][T18386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.904736][T13913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.140824][ T5710] hid (null): report_id 0 is invalid [ 836.140849][ T5710] hid (null): unknown global tag 0xe [ 836.140888][ T5710] hid (null): global environment stack underflow [ 836.140955][ T5710] hid (null): unknown global tag 0xc [ 836.229270][ T5710] hid_parser_main: 94 callbacks suppressed [ 836.229295][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.229333][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.229362][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.229392][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.229420][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.229449][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.229478][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.229507][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.229536][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.229565][ T5710] semitek 0003:1EA7:0907.002A: unknown main item tag 0x0 [ 836.230100][ T5710] semitek 0003:1EA7:0907.002A: reserved main item tag 0xd [ 836.230221][ T5710] semitek 0003:1EA7:0907.002A: unexpected long global item [ 836.312257][ T5710] semitek 0003:1EA7:0907.002A: probe with driver semitek failed with error -22 [ 836.379153][ T5710] usb 5-1: USB disconnect, device number 27 [ 836.896089][ T4924] Bluetooth: hci0: command tx timeout [ 837.128139][T13913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.181932][T18412] binder: Bad value for 'max' [ 837.182221][T18412] binder: Bad value for 'max' [ 837.182530][T18412] binder: Bad value for 'max' [ 837.185255][T18412] binder: Bad value for 'max' [ 837.185604][T18412] binder: Bad value for 'max' [ 837.189240][T18412] binder: Bad value for 'max' [ 837.219201][T18412] binder: Bad value for 'max' [ 837.219665][T18412] binder: Bad value for 'max' [ 837.219996][T18412] binder: Bad value for 'max' [ 837.220323][T18412] binder: Bad value for 'max' [ 837.220635][T18412] binder: Bad value for 'max' [ 837.220971][T18412] binder: Bad value for 'max' [ 837.224275][T18412] binder: Bad value for 'max' [ 837.224625][T18412] binder: Bad value for 'max' [ 837.224965][T18412] binder: Bad value for 'max' [ 837.225297][T18412] binder: Bad value for 'max' [ 837.229220][T18412] binder: Bad value for 'max' [ 837.230546][T18412] binder: Bad value for 'max' [ 837.231388][T18412] binder: Bad value for 'max' [ 837.233170][T18412] binder: Bad value for 'max' [ 837.234238][T18412] binder: Bad value for 'max' [ 837.235402][T18412] binder: Bad value for 'max' [ 837.254604][T18412] binder: Bad value for 'max' [ 837.259504][T18412] binder: Bad value for 'max' [ 837.301137][T18412] binder: Bad value for 'max' [ 837.302487][T18412] binder: Bad value for 'max' [ 837.303596][T18412] binder: Bad value for 'max' [ 837.304812][T18412] binder: Bad value for 'max' [ 837.306546][T18412] binder: Bad value for 'max' [ 837.307416][T18412] binder: Bad value for 'max' [ 837.308545][T18412] binder: Bad value for 'max' [ 837.309807][T18412] binder: Bad value for 'max' [ 837.311301][T18412] binder: Bad value for 'max' [ 837.312449][T18412] binder: Bad value for 'max' [ 837.313911][T18412] binder: Bad value for 'max' [ 837.314918][T18412] binder: Bad value for 'max' [ 837.316726][T18412] binder: Bad value for 'max' [ 837.317614][T18412] binder: Bad value for 'max' [ 837.326066][T18412] binder: Bad value for 'max' [ 837.329360][T18412] binder: Bad value for 'max' [ 837.330574][T18412] binder: Bad value for 'max' [ 837.334737][T18412] binder: Bad value for 'max' [ 837.336431][T18412] binder: Bad value for 'max' [ 837.339333][T18412] binder: Bad value for 'max' [ 837.340677][T18412] binder: Bad value for 'max' [ 837.341862][T18412] binder: Bad value for 'max' [ 837.342958][T18412] binder: Bad value for 'max' [ 837.344891][T18412] binder: Bad value for 'max' [ 837.357231][T18412] binder: Bad value for 'max' [ 837.407518][T18412] binder: Bad value for 'max' [ 837.412902][T18412] binder: Bad value for 'max' [ 837.417925][T18412] binder: Bad value for 'max' [ 837.440624][T18412] binder: Bad value for 'max' [ 837.454944][T18412] binder: Bad value for 'max' [ 837.455297][T18412] binder: Bad value for 'max' [ 837.468566][T18412] binder: Bad value for 'max' [ 837.469188][T18412] binder: Bad value for 'max' [ 837.469628][T18412] binder: Bad value for 'max' [ 837.470506][T18412] binder: Bad value for 'max' [ 837.481237][T18412] binder: Bad value for 'max' [ 837.481515][T18412] binder: Bad value for 'max' [ 837.482002][T18412] binder: Bad value for 'max' [ 837.489914][T18410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.495568][T18412] binder: Bad value for 'max' [ 837.512264][T18412] binder: Bad value for 'max' [ 837.513267][T18412] binder: Bad value for 'max' [ 837.545260][T18410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.682474][ T5709] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 837.961458][ T5709] usb 5-1: unable to get BOS descriptor or descriptor too short [ 837.983575][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 838.004372][ T5709] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 838.004406][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.004427][ T5709] usb 5-1: Product: syz [ 838.004443][ T5709] usb 5-1: Manufacturer: syz [ 838.004459][ T5709] usb 5-1: SerialNumber: syz [ 838.063049][T18411] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 838.278886][T18411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.281458][T18411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.283827][T18411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.296989][T18411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.407936][T18411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.412587][T18411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.446418][T18411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.454753][T18411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.598064][ T5709] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 838.598126][ T5709] usb 5-1: MIDIStreaming interface descriptor not found [ 838.812156][T18427] tmpfs: Cannot enable quota on remount [ 838.821965][T18428] tmpfs: Unknown parameter 'np' [ 838.838071][T18429] tmpfs: Unknown parameter 'np' [ 838.862095][ T5709] usb 5-1: USB disconnect, device number 28 [ 838.967648][T17219] udevd[17219]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.976468][ T4924] Bluetooth: hci0: command tx timeout [ 839.221798][T13913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.276299][ T5727] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 839.430245][ T5727] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 839.430284][ T5727] usb 3-1: config 0 interface 0 has no altsetting 0 [ 839.430323][ T5727] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 839.430349][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.481031][ T5727] usb 3-1: config 0 descriptor?? [ 839.482092][T18432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 839.691210][T18432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.691897][T18432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.862690][T13913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.906703][ T5727] hid (null): report_id 0 is invalid [ 839.906729][ T5727] hid (null): unknown global tag 0xe [ 839.906769][ T5727] hid (null): global environment stack underflow [ 839.906834][ T5727] hid (null): unknown global tag 0xc [ 840.012007][ T5727] semitek 0003:1EA7:0907.002B: reserved main item tag 0xd [ 840.012145][ T5727] semitek 0003:1EA7:0907.002B: unexpected long global item [ 840.013009][ T5727] semitek 0003:1EA7:0907.002B: probe with driver semitek failed with error -22 [ 840.132748][ T9] usb 3-1: USB disconnect, device number 85 [ 840.249909][T18334] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.250222][T18334] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.250450][T18334] bridge_slave_0: entered allmulticast mode [ 840.254736][T18334] bridge_slave_0: entered promiscuous mode [ 840.301783][T18334] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.302151][T18334] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.302439][T18334] bridge_slave_1: entered allmulticast mode [ 840.332234][T18334] bridge_slave_1: entered promiscuous mode [ 840.430534][T18334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.471552][T18334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.525423][T18334] team0: Port device team_slave_0 added [ 840.539485][T18334] team0: Port device team_slave_1 added [ 840.718978][T18452] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 840.881536][T18334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.881556][T18334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.881589][T18334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.983635][T18334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.983652][T18334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.983680][T18334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.056118][ T4924] Bluetooth: hci0: command tx timeout [ 841.325465][T18334] hsr_slave_0: entered promiscuous mode [ 841.339107][T18334] hsr_slave_1: entered promiscuous mode [ 841.353172][T18334] debugfs: 'hsr0' already exists in 'hsr' [ 841.353198][T18334] Cannot create hsr debugfs directory [ 841.502997][T18467] FAULT_INJECTION: forcing a failure. [ 841.502997][T18467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.503036][T18467] CPU: 1 UID: 0 PID: 18467 Comm: syz.3.4328 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 841.503067][T18467] Tainted: [L]=SOFTLOCKUP [ 841.503075][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.503088][T18467] Call Trace: [ 841.503098][T18467] [ 841.503108][T18467] dump_stack_lvl+0xe8/0x150 [ 841.503146][T18467] should_fail_ex+0x467/0x600 [ 841.503185][T18467] _copy_from_user+0x2d/0xb0 [ 841.503212][T18467] kstrtouint_from_user+0xd6/0x180 [ 841.503251][T18467] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 841.503301][T18467] proc_fail_nth_write+0x8e/0x210 [ 841.503327][T18467] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 841.503362][T18467] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 841.503386][T18467] vfs_write+0x29f/0xbb0 [ 841.503423][T18467] ? __pfx_vfs_write+0x10/0x10 [ 841.503455][T18467] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 841.503482][T18467] ? lockdep_hardirqs_on+0x7a/0x110 [ 841.503510][T18467] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 841.503538][T18467] ? mutex_lock_nested+0x152/0x1d0 [ 841.503572][T18467] ? fdget_pos+0x252/0x320 [ 841.503607][T18467] ksys_write+0x156/0x270 [ 841.503639][T18467] ? __pfx_ksys_write+0x10/0x10 [ 841.503683][T18467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.503709][T18467] do_syscall_64+0x174/0x580 [ 841.503737][T18467] ? trace_irq_disable+0x3b/0x140 [ 841.503767][T18467] ? clear_bhb_loop+0x40/0x90 [ 841.503797][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.503820][T18467] RIP: 0033:0x7fe0020de68e [ 841.503840][T18467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 841.503861][T18467] RSP: 002b:00007fe000375fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 841.503885][T18467] RAX: ffffffffffffffda RBX: 00007fe0003766c0 RCX: 00007fe0020de68e [ 841.503903][T18467] RDX: 0000000000000001 RSI: 00007fe0003760a0 RDI: 0000000000000004 [ 841.503917][T18467] RBP: 00007fe000376090 R08: 0000000000000000 R09: 0000000000000000 [ 841.503932][T18467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 841.503946][T18467] R13: 00007fe0023a6038 R14: 00007fe0023a5fa0 R15: 00007fff320ec158 [ 841.503983][T18467] [ 842.400873][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 842.607434][T18484] veth0_macvtap: left promiscuous mode [ 843.310121][T13913] geneve1: left allmulticast mode [ 843.310159][T13913] geneve1: left promiscuous mode [ 843.346402][T13913] bridge0: port 3(geneve1) entered disabled state [ 843.477369][T13913] bridge_slave_1: left allmulticast mode [ 843.477398][T13913] bridge_slave_1: left promiscuous mode [ 843.477658][T13913] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.517128][ T9] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 843.597750][T13913] bridge_slave_0: left allmulticast mode [ 843.597787][T13913] bridge_slave_0: left promiscuous mode [ 843.598057][T13913] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.670667][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 843.670706][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 843.670732][ T9] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 843.670749][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.675171][ T9] usb 4-1: config 0 descriptor?? [ 843.695529][T18496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 843.962090][T18496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.967805][T18496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.195248][ T9] hid (null): report_id 0 is invalid [ 844.195267][ T9] hid (null): unknown global tag 0xe [ 844.195293][ T9] hid (null): global environment stack underflow [ 844.195339][ T9] hid (null): unknown global tag 0xc [ 844.278212][ T9] hid_parser_main: 122 callbacks suppressed [ 844.278237][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.278271][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.278298][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.278327][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.278355][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.278382][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.278445][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.278473][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.278501][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.278529][ T9] semitek 0003:1EA7:0907.002C: unknown main item tag 0x0 [ 844.279043][ T9] semitek 0003:1EA7:0907.002C: reserved main item tag 0xd [ 844.279946][ T9] semitek 0003:1EA7:0907.002C: unexpected long global item [ 844.280820][ T9] semitek 0003:1EA7:0907.002C: probe with driver semitek failed with error -22 [ 844.394524][ T5727] usb 4-1: USB disconnect, device number 65 [ 844.978797][T18503] 9p: Unknown Cache mode or invalid value f [ 844.993864][T13913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.030646][T13913] bond_slave_0: left promiscuous mode [ 845.074569][T13913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.106496][T13913] bond_slave_1: left promiscuous mode [ 845.168119][T13913] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 845.206651][T13913] batadv0: left promiscuous mode [ 845.210732][T13913] bond0 (unregistering): Released all slaves [ 845.788835][T13913] : left promiscuous mode [ 845.876170][T13108] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 846.029962][T13108] usb 3-1: config 1 interface 0 has no altsetting 0 [ 846.034650][T13108] usb 3-1: string descriptor 0 read error: -22 [ 846.034813][T13108] usb 3-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.40 [ 846.034842][T13108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.051357][ T5709] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 846.213256][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 846.219263][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.219948][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 846.220149][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 846.220212][ T5709] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 846.220411][ T5709] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 846.242836][ T5709] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 846.243086][ T5709] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 846.243129][ T5709] usb 4-1: Manufacturer: syz [ 846.323802][ T5709] usb 4-1: config 0 descriptor?? [ 846.474077][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 846.715364][T13913] tipc: Disabling bearer [ 846.782948][T13913] tipc: Left network mode [ 846.898060][ T5709] rc_core: IR keymap rc-hauppauge not found [ 846.898084][ T5709] Registered IR keymap rc-empty [ 846.898240][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 846.916578][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.053024][ T5709] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 847.080230][ T5709] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input58 [ 847.148018][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.166191][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.192159][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.214979][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.240454][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.256350][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.286203][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.306105][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.327740][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.357071][ T5709] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 847.388307][ T5709] mceusb 4-1:0.0: Registered 胰 with mce emulator interface version 1 [ 847.388376][ T5709] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 847.670125][T13108] magicmouse 0003:05AC:0323.002D: hidraw0: USB HID v10.05 Device [HID 05ac:0323] on usb-dummy_hcd.2-1/input0 [ 847.719076][ T5710] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 847.978576][ T5710] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 847.978614][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 847.978653][ T5710] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 847.978680][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.012582][ T4924] Bluetooth: unknown link type 124 [ 848.012650][ T4924] Bluetooth: hci2: connection err: -111 [ 848.031480][T13108] usb 3-1: USB disconnect, device number 86 [ 848.063466][ T5710] usb 5-1: config 0 descriptor?? [ 848.064530][T18546] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 848.391215][T18547] fido_id[18547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 848.425029][T18546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.429611][T18546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.624170][T18526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.675094][ T5710] hid (null): report_id 0 is invalid [ 848.675120][ T5710] hid (null): unknown global tag 0xe [ 848.675159][ T5710] hid (null): global environment stack underflow [ 848.675227][ T5710] hid (null): unknown global tag 0xc [ 848.870106][ T5727] usb 4-1: USB disconnect, device number 66 [ 849.160393][ T5710] semitek 0003:1EA7:0907.002E: reserved main item tag 0xd [ 849.160529][ T5710] semitek 0003:1EA7:0907.002E: unexpected long global item [ 849.161394][ T5710] semitek 0003:1EA7:0907.002E: probe with driver semitek failed with error -22 [ 849.347155][ T5710] usb 5-1: USB disconnect, device number 29 [ 850.091487][T18572] netlink: 'syz.3.4351': attribute type 29 has an invalid length. [ 850.848447][T13108] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 850.973405][T18578] netlink: 'syz.3.4351': attribute type 29 has an invalid length. [ 851.041220][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 851.110249][T13108] usb 4-1: device descriptor read/all, error -61 [ 851.278229][T13108] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 851.502538][T13108] usb 4-1: device descriptor read/64, error -71 [ 851.611058][T13108] usb usb4-port1: attempt power cycle [ 851.966180][T13108] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 851.992888][T13108] usb 4-1: device descriptor read/8, error -71 [ 852.108630][T17618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 852.148974][T17618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 852.171047][T17618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 852.207775][T17618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 852.226279][T13108] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 852.234064][T17618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 852.263927][T13108] usb 4-1: device descriptor read/8, error -71 [ 852.372565][T13108] usb usb4-port1: unable to enumerate USB device [ 852.440232][T18587] FAULT_INJECTION: forcing a failure. [ 852.440232][T18587] name failslab, interval 1, probability 0, space 0, times 0 [ 852.440267][T18587] CPU: 0 UID: 0 PID: 18587 Comm: syz.4.4354 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 852.440292][T18587] Tainted: [L]=SOFTLOCKUP [ 852.440298][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.440310][T18587] Call Trace: [ 852.440317][T18587] [ 852.440326][T18587] dump_stack_lvl+0xe8/0x150 [ 852.440350][T18587] should_fail_ex+0x467/0x600 [ 852.440382][T18587] should_failslab+0xa8/0x100 [ 852.440408][T18587] __kvmalloc_node_noprof+0x176/0x880 [ 852.440429][T18587] ? lock_acquire+0x106/0x350 [ 852.440455][T18587] ? nf_hook_entries_grow+0x287/0x740 [ 852.440482][T18587] ? nf_hook_entries_grow+0x287/0x740 [ 852.440515][T18587] nf_hook_entries_grow+0x287/0x740 [ 852.440554][T18587] __nf_register_net_hook+0x2c9/0x930 [ 852.440590][T18587] nf_register_net_hook+0xb2/0x190 [ 852.440621][T18587] nf_register_net_hooks+0x44/0x1b0 [ 852.440658][T18587] nf_ct_netns_do_get+0x3bf/0x5c0 [ 852.440681][T18587] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 852.440699][T18587] ? rcu_is_watching+0x15/0xb0 [ 852.440729][T18587] ? trace_kmalloc+0x2a/0xf0 [ 852.440745][T18587] ? __bitmap_set+0x12f/0x170 [ 852.440773][T18587] ? nf_ct_netns_get+0xe9/0x320 [ 852.440792][T18587] nft_ct_get_init+0x5bf/0x9c0 [ 852.440813][T18587] nf_tables_newrule+0x179e/0x28a0 [ 852.440847][T18587] ? __pfx_nf_tables_newrule+0x10/0x10 [ 852.440866][T18587] ? nfnl_pernet+0x23/0x240 [ 852.440887][T18587] ? nfnl_pernet+0x23/0x240 [ 852.440925][T18587] ? __nla_parse+0x40/0x60 [ 852.440948][T18587] nfnetlink_rcv+0x1291/0x28d0 [ 852.440997][T18587] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 852.441031][T18587] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 852.441059][T18587] ? ref_tracker_free+0x668/0x820 [ 852.441095][T18587] ? skb_clone+0x246/0x3a0 [ 852.441123][T18587] ? __netlink_deliver_tap+0x838/0x880 [ 852.441155][T18587] ? netlink_deliver_tap+0x2e/0x1b0 [ 852.441179][T18587] ? netlink_deliver_tap+0x2e/0x1b0 [ 852.441208][T18587] netlink_unicast+0x7f5/0x990 [ 852.441239][T18587] netlink_sendmsg+0x813/0xb40 [ 852.441271][T18587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.441299][T18587] ? aa_sock_msg_perm+0x122/0x200 [ 852.441332][T18587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.441356][T18587] sock_sendmsg_nosec+0x13a/0x180 [ 852.441377][T18587] ____sys_sendmsg+0x565/0x870 [ 852.441401][T18587] ? __might_fault+0xaf/0x130 [ 852.441428][T18587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.441460][T18587] ? import_iovec+0x73/0xa0 [ 852.441484][T18587] ___sys_sendmsg+0x2a5/0x360 [ 852.441507][T18587] ? __lock_acquire+0x683/0x2ce0 [ 852.441535][T18587] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.441595][T18587] ? __fget_files+0x2a/0x420 [ 852.441619][T18587] ? __fget_files+0x3a8/0x420 [ 852.441651][T18587] __x64_sys_sendmsg+0x1b7/0x290 [ 852.441679][T18587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.441724][T18587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.441743][T18587] do_syscall_64+0x174/0x580 [ 852.441767][T18587] ? trace_irq_disable+0x3b/0x140 [ 852.441791][T18587] ? clear_bhb_loop+0x40/0x90 [ 852.441812][T18587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.441830][T18587] RIP: 0033:0x7f8ef34ade59 [ 852.441848][T18587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.441865][T18587] RSP: 002b:00007f8ef1706028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.441884][T18587] RAX: ffffffffffffffda RBX: 00007f8ef3735fa0 RCX: 00007f8ef34ade59 [ 852.441898][T18587] RDX: 000000002000c0c2 RSI: 0000200000000000 RDI: 0000000000000003 [ 852.441920][T18587] RBP: 00007f8ef1706090 R08: 0000000000000000 R09: 0000000000000000 [ 852.441931][T18587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.441942][T18587] R13: 00007f8ef3736038 R14: 00007f8ef3735fa0 R15: 00007ffc1b597488 [ 852.441969][T18587] [ 853.997333][T18612] FAULT_INJECTION: forcing a failure. [ 853.997333][T18612] name failslab, interval 1, probability 0, space 0, times 0 [ 853.997371][T18612] CPU: 0 UID: 0 PID: 18612 Comm: syz.3.4360 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.997393][T18612] Tainted: [L]=SOFTLOCKUP [ 853.997400][T18612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 853.997410][T18612] Call Trace: [ 853.997416][T18612] [ 853.997423][T18612] dump_stack_lvl+0xe8/0x150 [ 853.997447][T18612] should_fail_ex+0x467/0x600 [ 853.997474][T18612] ? shmem_alloc_inode+0x28/0x40 [ 853.997495][T18612] should_failslab+0xa8/0x100 [ 853.997517][T18612] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 853.997536][T18612] ? shmem_alloc_inode+0x28/0x40 [ 853.997583][T18612] ? do_raw_spin_lock+0x12b/0x2f0 [ 853.997617][T18612] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 853.997636][T18612] shmem_alloc_inode+0x28/0x40 [ 853.997654][T18612] alloc_inode+0x6a/0x1b0 [ 853.997672][T18612] new_inode+0x1f/0x170 [ 853.997692][T18612] shmem_get_inode+0x3b1/0xf80 [ 853.997717][T18612] ? __pfx_shmem_get_inode+0x10/0x10 [ 853.997737][T18612] ? generic_permission+0x2bf/0x670 [ 853.997759][T18612] shmem_mknod+0x17d/0x340 [ 853.997784][T18612] vfs_create+0x2c8/0x460 [ 853.997814][T18612] filename_mknodat+0x3ec/0x670 [ 853.997841][T18612] ? __pfx_filename_mknodat+0x10/0x10 [ 853.997878][T18612] ? do_getname+0x151/0x250 [ 853.997893][T18612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.997914][T18612] __se_sys_mknodat+0x3b/0x150 [ 853.997937][T18612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.997954][T18612] do_syscall_64+0x174/0x580 [ 853.997976][T18612] ? trace_irq_disable+0x3b/0x140 [ 853.997997][T18612] ? clear_bhb_loop+0x40/0x90 [ 853.998017][T18612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.998033][T18612] RIP: 0033:0x7fe00211de59 [ 853.998048][T18612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.998062][T18612] RSP: 002b:00007fe000376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 853.998079][T18612] RAX: ffffffffffffffda RBX: 00007fe0023a5fa0 RCX: 00007fe00211de59 [ 853.998092][T18612] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 853.998103][T18612] RBP: 00007fe000376090 R08: 0000000000000000 R09: 0000000000000000 [ 853.998114][T18612] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000001 [ 853.998123][T18612] R13: 00007fe0023a6038 R14: 00007fe0023a5fa0 R15: 00007fff320ec158 [ 853.998148][T18612] [ 854.496532][ T4924] Bluetooth: hci2: command tx timeout [ 854.774627][T18620] FAULT_INJECTION: forcing a failure. [ 854.774627][T18620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.774661][T18620] CPU: 1 UID: 0 PID: 18620 Comm: syz.4.4362 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 854.774687][T18620] Tainted: [L]=SOFTLOCKUP [ 854.774695][T18620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 854.774706][T18620] Call Trace: [ 854.774713][T18620] [ 854.774721][T18620] dump_stack_lvl+0xe8/0x150 [ 854.774747][T18620] should_fail_ex+0x467/0x600 [ 854.774781][T18620] _copy_to_user+0x31/0xb0 [ 854.774807][T18620] simple_read_from_buffer+0xe1/0x170 [ 854.774835][T18620] proc_fail_nth_read+0x1be/0x230 [ 854.774859][T18620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.774881][T18620] ? rw_verify_area+0x250/0x4d0 [ 854.774907][T18620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.774926][T18620] vfs_read+0x219/0xa90 [ 854.774956][T18620] ? __pfx_vfs_read+0x10/0x10 [ 854.774980][T18620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 854.775006][T18620] ? lockdep_hardirqs_on+0x7a/0x110 [ 854.775036][T18620] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 854.775065][T18620] ? mutex_lock_nested+0x152/0x1d0 [ 854.775098][T18620] ? fdget_pos+0x252/0x320 [ 854.775132][T18620] ksys_read+0x156/0x270 [ 854.775161][T18620] ? __pfx_ksys_read+0x10/0x10 [ 854.775198][T18620] ? __pfx_v4l2_ioctl+0x10/0x10 [ 854.775240][T18620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.775264][T18620] do_syscall_64+0x174/0x580 [ 854.775290][T18620] ? trace_irq_disable+0x3b/0x140 [ 854.775319][T18620] ? clear_bhb_loop+0x40/0x90 [ 854.775347][T18620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.775370][T18620] RIP: 0033:0x7f8ef346e68e [ 854.775392][T18620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 854.775412][T18620] RSP: 002b:00007f8ef1705fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 854.775438][T18620] RAX: ffffffffffffffda RBX: 00007f8ef17066c0 RCX: 00007f8ef346e68e [ 854.775455][T18620] RDX: 000000000000000f RSI: 00007f8ef17060a0 RDI: 0000000000000004 [ 854.775469][T18620] RBP: 00007f8ef1706090 R08: 0000000000000000 R09: 0000000000000000 [ 854.775483][T18620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.775496][T18620] R13: 00007f8ef3736038 R14: 00007f8ef3735fa0 R15: 00007ffc1b597488 [ 854.775529][T18620] [ 855.429624][T18625] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4364'. [ 855.587152][T13913] hsr_slave_0: left promiscuous mode [ 855.611506][T18635] FAULT_INJECTION: forcing a failure. [ 855.611506][T18635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.611536][T18635] CPU: 1 UID: 0 PID: 18635 Comm: syz.3.4368 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 855.611559][T18635] Tainted: [L]=SOFTLOCKUP [ 855.611565][T18635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 855.611576][T18635] Call Trace: [ 855.611585][T18635] [ 855.611593][T18635] dump_stack_lvl+0xe8/0x150 [ 855.611615][T18635] should_fail_ex+0x467/0x600 [ 855.611644][T18635] _copy_from_user+0x2d/0xb0 [ 855.611665][T18635] __x64_sys_clock_adjtime+0x11e/0x340 [ 855.611683][T18635] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 855.611705][T18635] ? rt_mutex_slowunlock+0x219/0x460 [ 855.611721][T18635] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 855.611755][T18635] ? __pfx_ksys_write+0x10/0x10 [ 855.611782][T18635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.611800][T18635] do_syscall_64+0x174/0x580 [ 855.611821][T18635] ? trace_irq_disable+0x3b/0x140 [ 855.611842][T18635] ? clear_bhb_loop+0x40/0x90 [ 855.611862][T18635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.611878][T18635] RIP: 0033:0x7fe00211de59 [ 855.611893][T18635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.611907][T18635] RSP: 002b:00007fe000376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 855.611925][T18635] RAX: ffffffffffffffda RBX: 00007fe0023a5fa0 RCX: 00007fe00211de59 [ 855.611937][T18635] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 855.611948][T18635] RBP: 00007fe000376090 R08: 0000000000000000 R09: 0000000000000000 [ 855.611958][T18635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.611968][T18635] R13: 00007fe0023a6038 R14: 00007fe0023a5fa0 R15: 00007fff320ec158 [ 855.611992][T18635] [ 855.670989][T13913] hsr_slave_1: left promiscuous mode [ 855.674208][T13913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.674290][T13913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.847774][T13913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.847806][T13913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.152599][T13913] veth1_macvtap: left promiscuous mode [ 856.152681][T13913] veth0_macvtap: left promiscuous mode [ 856.152896][T13913] veth1_vlan: left promiscuous mode [ 856.153041][T13913] veth0_vlan: left promiscuous mode [ 856.336185][ T5734] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 856.538473][ T5734] usb 5-1: config 246 has an invalid interface number: 47 but max is 1 [ 856.538583][ T5734] usb 5-1: config 246 has no interface number 1 [ 856.538625][ T5734] usb 5-1: config 246 interface 0 has no altsetting 0 [ 856.538644][ T5734] usb 5-1: config 246 interface 47 has no altsetting 0 [ 856.541364][ T5734] usb 5-1: New USB device found, idVendor=413c, idProduct=8194, bcdDevice=97.a4 [ 856.541392][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.541412][ T5734] usb 5-1: Product: syz [ 856.541426][ T5734] usb 5-1: Manufacturer: syz [ 856.541441][ T5734] usb 5-1: SerialNumber: syz [ 856.582097][ T4924] Bluetooth: hci2: command tx timeout [ 856.777470][ T5734] qmi_wwan 5-1:246.0: probe with driver qmi_wwan failed with error -22 [ 856.778717][ T5734] usb 5-1: unknown number of interfaces: 2 [ 856.826879][ T5734] usb 5-1: USB disconnect, device number 30 [ 857.226824][T13913] team0 (unregistering): Port device team_slave_1 removed [ 857.286984][T13913] team0 (unregistering): Port device team_slave_0 removed [ 857.376153][ T5734] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 857.519956][ T5734] usb 4-1: device descriptor read/64, error -71 [ 857.766081][ T5734] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 857.896334][ T5734] usb 4-1: device descriptor read/64, error -71 [ 858.008465][ T5734] usb usb4-port1: attempt power cycle [ 858.440840][ T5734] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 858.541487][ T5734] usb 4-1: device descriptor read/8, error -71 [ 858.657253][ T4924] Bluetooth: hci2: command tx timeout [ 858.677893][ T5270] veth0_macvtap: entered promiscuous mode [ 858.821685][ T5734] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 858.836778][ T5734] usb 4-1: device descriptor read/8, error -71 [ 858.964603][ T5734] usb usb4-port1: unable to enumerate USB device [ 859.073517][T18668] syzkaller1: entered promiscuous mode [ 859.073536][T18668] syzkaller1: entered allmulticast mode [ 859.933563][T18673] bridge0: port 3(geneve1) entered blocking state [ 859.933873][T18673] bridge0: port 3(geneve1) entered disabled state [ 859.934373][T18673] geneve1: entered allmulticast mode [ 859.935031][T13913] IPVS: stop unused estimator thread 0... [ 859.939133][T18673] geneve1: entered promiscuous mode [ 859.984029][T18673] bridge0: port 3(geneve1) entered blocking state [ 859.984275][T18673] bridge0: port 3(geneve1) entered forwarding state [ 860.736223][ T4924] Bluetooth: hci2: command tx timeout [ 860.791002][T18696] atomic_op ffff88803adefa18 conn xmit_atomic 0000000000000000 [ 861.136278][ T5710] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 861.286026][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 861.288912][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 861.292289][ T5710] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 861.292359][ T5710] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 861.337812][ T5710] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 861.337836][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.337852][ T5710] usb 5-1: Product: syz [ 861.337864][ T5710] usb 5-1: Manufacturer: syz [ 861.337876][ T5710] usb 5-1: SerialNumber: syz [ 861.590969][T18698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.593964][T18698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.763690][T18334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 861.856469][T18334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.871093][ T5710] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 861.983422][T18334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 862.004102][ T5710] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 862.050420][ T5710] usb 5-1: USB disconnect, device number 31 [ 862.117807][T17200] udevd[17200]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.159567][T18334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.209032][T18334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 862.269095][T18334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.287912][T18716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4382'. [ 862.325564][T18334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 862.402066][T18334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.470000][T18583] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.472058][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.472401][T18583] bridge_slave_0: entered allmulticast mode [ 862.505623][T18583] bridge_slave_0: entered promiscuous mode [ 862.527398][T18583] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.527800][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.528171][T18583] bridge_slave_1: entered allmulticast mode [ 862.532418][T18583] bridge_slave_1: entered promiscuous mode [ 862.737582][T18583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.780469][T18583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.007048][T18583] team0: Port device team_slave_0 added [ 863.013464][T18736] openvswitch: netlink: Missing valid actions attribute. [ 863.013496][T18736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.089780][T18583] team0: Port device team_slave_1 added [ 863.197697][T18583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.197717][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.197747][T18583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.280871][T18583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.280891][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.280948][T18583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.636605][T18583] hsr_slave_0: entered promiscuous mode [ 863.639117][T18583] hsr_slave_1: entered promiscuous mode [ 863.641170][T18583] debugfs: 'hsr0' already exists in 'hsr' [ 863.641199][T18583] Cannot create hsr debugfs directory [ 864.170767][T18334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.513270][T18764] fuse: Bad value for 'user_id' [ 864.513291][T18764] fuse: Bad value for 'user_id' [ 864.515303][T18334] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.658611][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.658789][T13913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.755414][T13914] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.755613][T13914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.229080][ T37] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 865.398793][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 865.402095][ T37] usb 5-1: config 8 has an invalid interface number: 202 but max is 0 [ 865.402122][ T37] usb 5-1: config 8 has no interface number 0 [ 865.402150][ T37] usb 5-1: config 8 interface 202 has no altsetting 0 [ 865.452074][ T37] usb 5-1: New USB device found, idVendor=046d, idProduct=0890, bcdDevice=ee.6e [ 865.452107][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.452129][ T37] usb 5-1: Product: syz [ 865.452146][ T37] usb 5-1: Manufacturer: syz [ 865.452161][ T37] usb 5-1: SerialNumber: syz [ 865.740409][ T37] usb 5-1: No union descriptors [ 865.764030][ T37] gspca_main: spca500-2.14.0 probing 046d:0890 [ 865.819562][ T37] usb 5-1: USB disconnect, device number 32 [ 866.223428][T18583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 866.264384][T18583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 866.277416][T18583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 866.327062][T18583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 866.342512][T18583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 866.501795][T18583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.664337][T18583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 866.764518][T18583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 867.459992][T18583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.523530][T18583] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.656075][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.656245][T13913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.773579][T18334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.785522][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.785803][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.201902][T18819] binder: 18818:18819 ioctl c018620c 200000000240 returned -22 [ 868.286184][T18334] veth0_vlan: entered promiscuous mode [ 868.358915][T18334] veth1_vlan: entered promiscuous mode [ 868.588874][T18334] veth0_macvtap: entered promiscuous mode [ 868.620827][T18334] veth1_macvtap: entered promiscuous mode [ 868.709390][T18334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.764001][T18334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.867912][ T7901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.870013][ T7901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.897546][ T5710] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 868.919219][T13913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.919925][T13913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.084493][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.084557][ T5710] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b3.49 [ 869.084584][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.184990][ T5710] usb 5-1: config 0 descriptor?? [ 869.589551][ T5710] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 869.918106][ T5710] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 869.918142][ T5710] peak_usb 5-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 870.037353][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.037460][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.371578][T18849] binder: 18847:18849 ioctl 89e1 200000000140 returned -22 [ 871.451255][ T5710] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 871.491091][ T5710] usb 5-1: USB disconnect, device number 33 [ 871.662379][T18583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.777963][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.777986][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.837651][ T5710] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 872.036054][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 872.050545][ T5710] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 872.050573][ T5710] usb 5-1: config 0 has no interface number 0 [ 872.050615][ T5710] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 872.054029][ T5710] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 872.054062][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.054084][ T5710] usb 5-1: Product: syz [ 872.054100][ T5710] usb 5-1: Manufacturer: syz [ 872.054116][ T5710] usb 5-1: SerialNumber: syz [ 872.230621][ T5710] usb 5-1: config 0 descriptor?? [ 872.231844][T18849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 872.460314][T18848] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 872.687273][ T5710] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 872.687525][ T5710] asix 5-1:0.188: probe with driver asix failed with error -61 [ 872.909382][T18848] binder: 18847:18848 ioctl 3ba0 200000000440 returned -22 [ 872.909797][T18848] binder: 18847:18848 ioctl 640f 0 returned -22 [ 872.913042][T18848] binder_alloc: 18847: binder_alloc_buf, no vma [ 872.959443][ T37] usb 5-1: USB disconnect, device number 34 [ 873.409794][T13913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.409815][T13913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.983860][T18583] veth0_vlan: entered promiscuous mode [ 874.065045][T18583] veth1_vlan: entered promiscuous mode [ 874.982259][T18875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4405'. [ 875.365038][T18583] veth0_macvtap: entered promiscuous mode [ 875.418573][T18583] veth1_macvtap: entered promiscuous mode [ 875.523176][T18583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.553663][T18887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 875.604576][T18583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.678104][T13914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.678160][T13914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.678201][T13914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.678240][T13914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.748570][T18889] netlink: 'syz.3.4410': attribute type 21 has an invalid length. [ 875.754924][T18889] netlink: 'syz.3.4410': attribute type 1 has an invalid length. [ 876.111438][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 876.346872][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 876.346910][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 876.411817][ T9] usb 5-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 876.411853][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.411884][ T9] usb 5-1: Product: syz [ 876.411900][ T9] usb 5-1: Manufacturer: syz [ 876.411917][ T9] usb 5-1: SerialNumber: syz [ 876.715233][T18891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.729866][T18891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.823877][T13914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.823900][T13914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.711962][T13878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.711985][T13878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.687618][T13658] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 879.848795][T13658] usb 4-1: Using ep0 maxpacket: 32 [ 879.850683][T13658] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 879.850710][T13658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.890216][T13658] usb 4-1: config 0 descriptor?? [ 879.913875][T13658] gspca_main: sq930x-2.14.0 probing 041e:403c [ 880.099880][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 880.159339][T18919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.164237][T18919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.203148][T13658] gspca_sq930x: reg_r 001f failed -71 [ 880.203259][T13658] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 880.222803][T13658] usb 4-1: USB disconnect, device number 75 [ 880.543749][ T9] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 880.603422][ T9] usb 5-1: USB disconnect, device number 35 [ 880.935062][T18948] FAULT_INJECTION: forcing a failure. [ 880.935062][T18948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.935103][T18948] CPU: 0 UID: 0 PID: 18948 Comm: syz.3.4424 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 880.935133][T18948] Tainted: [L]=SOFTLOCKUP [ 880.935142][T18948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 880.935156][T18948] Call Trace: [ 880.935165][T18948] [ 880.935176][T18948] dump_stack_lvl+0xe8/0x150 [ 880.935207][T18948] should_fail_ex+0x467/0x600 [ 880.935247][T18948] _copy_from_user+0x2d/0xb0 [ 880.935276][T18948] drm_ioctl+0x61c/0xba0 [ 880.935328][T18948] ? __pfx_drm_mode_gamma_get_ioctl+0x10/0x10 [ 880.935363][T18948] ? __pfx_drm_ioctl+0x10/0x10 [ 880.935407][T18948] ? __fget_files+0x2a/0x420 [ 880.935437][T18948] ? bpf_lsm_file_ioctl+0x9/0x20 [ 880.935465][T18948] ? __pfx_drm_ioctl+0x10/0x10 [ 880.935497][T18948] __se_sys_ioctl+0xff/0x170 [ 880.935527][T18948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.935553][T18948] do_syscall_64+0x174/0x580 [ 880.935581][T18948] ? trace_irq_disable+0x3b/0x140 [ 880.935609][T18948] ? clear_bhb_loop+0x40/0x90 [ 880.935636][T18948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.935658][T18948] RIP: 0033:0x7fe00211de59 [ 880.935679][T18948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.935698][T18948] RSP: 002b:00007fe000376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.935721][T18948] RAX: ffffffffffffffda RBX: 00007fe0023a5fa0 RCX: 00007fe00211de59 [ 880.935739][T18948] RDX: 0000200000000240 RSI: 00000000c02064a4 RDI: 0000000000000003 [ 880.935754][T18948] RBP: 00007fe000376090 R08: 0000000000000000 R09: 0000000000000000 [ 880.935768][T18948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.935781][T18948] R13: 00007fe0023a6038 R14: 00007fe0023a5fa0 R15: 00007fff320ec158 [ 880.935813][T18948] [ 881.161111][T17200] udevd[17200]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.605797][T18969] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4429'. [ 881.605828][T18969] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4429'. [ 881.607277][T18969] netlink: 'syz.4.4429': attribute type 5 has an invalid length. [ 881.607330][T18969] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4429'. [ 881.616373][ T5709] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 881.784300][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 881.795583][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 881.815835][ T5709] usb 4-1: config 3 has an invalid interface number: 118 but max is 0 [ 881.816080][ T5709] usb 4-1: config 3 has no interface number 0 [ 881.816122][ T5709] usb 4-1: config 3 interface 118 has no altsetting 0 [ 881.836039][ T5709] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 881.836133][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.836199][ T5709] usb 4-1: Product: syz [ 881.836241][ T5709] usb 4-1: Manufacturer: syz [ 881.836290][ T5709] usb 4-1: SerialNumber: syz [ 881.973651][T18979] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4432'. [ 882.094101][ T38] audit: type=1326 audit(1782904984.584:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18980 comm="syz.4.4433" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ef34ade59 code=0x0 [ 882.161120][T18957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.181329][T18983] FAULT_INJECTION: forcing a failure. [ 882.181329][T18983] name failslab, interval 1, probability 0, space 0, times 0 [ 882.181363][T18983] CPU: 1 UID: 0 PID: 18983 Comm: syz.1.4434 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 882.181388][T18983] Tainted: [L]=SOFTLOCKUP [ 882.181395][T18983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 882.181407][T18983] Call Trace: [ 882.181414][T18983] [ 882.181422][T18983] dump_stack_lvl+0xe8/0x150 [ 882.181449][T18983] should_fail_ex+0x467/0x600 [ 882.181480][T18983] should_failslab+0xa8/0x100 [ 882.181503][T18983] __kmalloc_cache_noprof+0xa1/0x670 [ 882.181524][T18983] ? fuse_init_fs_context+0x55/0x210 [ 882.181543][T18983] ? fuse_init_fs_context+0x55/0x210 [ 882.181566][T18983] fuse_init_fs_context+0x55/0x210 [ 882.181587][T18983] alloc_fs_context+0x9a3/0xd00 [ 882.181620][T18983] do_new_mount+0x17f/0xdc0 [ 882.181644][T18983] ? __pfx_do_new_mount+0x10/0x10 [ 882.181664][T18983] ? ns_capable+0x89/0xe0 [ 882.181693][T18983] ? path_mount+0x647/0x1040 [ 882.181713][T18983] ? user_path_at+0xd4/0x160 [ 882.181737][T18983] __se_sys_mount+0x31d/0x420 [ 882.181760][T18983] ? __pfx___se_sys_mount+0x10/0x10 [ 882.181784][T18983] ? __x64_sys_mount+0x20/0xc0 [ 882.181809][T18983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.181828][T18983] do_syscall_64+0x174/0x580 [ 882.181851][T18983] ? trace_irq_disable+0x3b/0x140 [ 882.181874][T18983] ? clear_bhb_loop+0x40/0x90 [ 882.181896][T18983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.181913][T18983] RIP: 0033:0x7fdbe9f9de59 [ 882.181930][T18983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.181945][T18983] RSP: 002b:00007fdbe81f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 882.181964][T18983] RAX: ffffffffffffffda RBX: 00007fdbea225fa0 RCX: 00007fdbe9f9de59 [ 882.181977][T18983] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 882.181989][T18983] RBP: 00007fdbe81f6090 R08: 0000200000002140 R09: 0000000000000000 [ 882.182001][T18983] R10: 0000000002000010 R11: 0000000000000246 R12: 0000000000000002 [ 882.182012][T18983] R13: 00007fdbea226038 R14: 00007fdbea225fa0 R15: 00007ffcc18f5aa8 [ 882.182038][T18983] [ 882.256195][T18957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.565226][ T5709] usb 4-1: USB disconnect, device number 76 [ 882.746364][T18992] ieee802154 phy0 wpan0: encryption failed: -22 [ 882.986112][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 883.179202][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 883.179240][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 883.179288][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 883.179315][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.206041][ T9] usb 6-1: config 0 descriptor?? [ 883.275301][T18999] kAFS: No cell specified [ 883.447539][ T9] ath6kl: Failed to submit usb control message: -71 [ 883.447597][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 883.447696][ T9] ath6kl: Unable to send get target info: -71 [ 883.465234][T19005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4438'. [ 883.465256][T19005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4438'. [ 883.465274][T19005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4438'. [ 883.530427][ T9] ath6kl: Failed to init ath6kl core: -71 [ 883.563454][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 883.746314][ T9] usb 6-1: USB disconnect, device number 2 [ 883.983392][T19009] sg_write: data in/out 694624/136 bytes for SCSI command 0x0-- guessing data in; [ 883.983392][T19009] program syz.3.4440 not setting count and/or reply_len properly [ 884.012242][T19011] FAULT_INJECTION: forcing a failure. [ 884.012242][T19011] name failslab, interval 1, probability 0, space 0, times 0 [ 884.012284][T19011] CPU: 1 UID: 0 PID: 19011 Comm: syz.1.4441 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.012316][T19011] Tainted: [L]=SOFTLOCKUP [ 884.012325][T19011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 884.012339][T19011] Call Trace: [ 884.012348][T19011] [ 884.012358][T19011] dump_stack_lvl+0xe8/0x150 [ 884.012392][T19011] should_fail_ex+0x467/0x600 [ 884.012433][T19011] should_failslab+0xa8/0x100 [ 884.012462][T19011] __kmalloc_noprof+0xfb/0x790 [ 884.012488][T19011] ? tomoyo_encode+0x2ad/0x570 [ 884.012522][T19011] ? tomoyo_encode+0x2ad/0x570 [ 884.012563][T19011] tomoyo_encode+0x2ad/0x570 [ 884.012615][T19011] tomoyo_realpath_from_path+0x5fa/0x640 [ 884.012661][T19011] ? tomoyo_path_number_perm+0x219/0x5f0 [ 884.012693][T19011] tomoyo_path_number_perm+0x246/0x5f0 [ 884.012726][T19011] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 884.012754][T19011] ? __lock_acquire+0x683/0x2ce0 [ 884.012799][T19011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 884.012828][T19011] ? hook_file_ioctl+0x1f3/0x600 [ 884.012856][T19011] ? lockdep_hardirqs_on+0x7a/0x110 [ 884.012905][T19011] ? __fget_files+0x2a/0x420 [ 884.012932][T19011] ? __fget_files+0x2a/0x420 [ 884.012956][T19011] ? __fget_files+0x3a8/0x420 [ 884.012981][T19011] ? __fget_files+0x2a/0x420 [ 884.013010][T19011] security_file_ioctl+0xc3/0x2a0 [ 884.013041][T19011] __se_sys_ioctl+0x47/0x170 [ 884.013074][T19011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.013099][T19011] do_syscall_64+0x174/0x580 [ 884.013127][T19011] ? trace_irq_disable+0x3b/0x140 [ 884.013158][T19011] ? clear_bhb_loop+0x40/0x90 [ 884.013186][T19011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.013208][T19011] RIP: 0033:0x7fdbe9f9de59 [ 884.013229][T19011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.013248][T19011] RSP: 002b:00007fdbe81f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.013272][T19011] RAX: ffffffffffffffda RBX: 00007fdbea225fa0 RCX: 00007fdbe9f9de59 [ 884.013290][T19011] RDX: 0000200000000180 RSI: 000000008008af26 RDI: 0000000000000003 [ 884.013304][T19011] RBP: 00007fdbe81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 884.013318][T19011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.013332][T19011] R13: 00007fdbea226038 R14: 00007fdbea225fa0 R15: 00007ffcc18f5aa8 [ 884.013364][T19011] [ 884.041277][T19011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 884.931214][T19028] FAULT_INJECTION: forcing a failure. [ 884.931214][T19028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.931253][T19028] CPU: 1 UID: 0 PID: 19028 Comm: syz.1.4448 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.931278][T19028] Tainted: [L]=SOFTLOCKUP [ 884.931284][T19028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 884.931295][T19028] Call Trace: [ 884.931302][T19028] [ 884.931311][T19028] dump_stack_lvl+0xe8/0x150 [ 884.931338][T19028] should_fail_ex+0x467/0x600 [ 884.931371][T19028] _copy_to_iter+0x1e4/0x1810 [ 884.931402][T19028] ? __pfx__copy_to_iter+0x10/0x10 [ 884.931431][T19028] ? __pfx_woken_wake_function+0x10/0x10 [ 884.931459][T19028] ? ldsem_down_read+0x12/0x40 [ 884.931488][T19028] tty_read+0x2f1/0x6e0 [ 884.931521][T19028] ? __pfx_tty_read+0x10/0x10 [ 884.931555][T19028] ? bpf_lsm_file_permission+0x9/0x20 [ 884.931577][T19028] ? security_file_permission+0x75/0x260 [ 884.931608][T19028] vfs_read+0x59e/0xa90 [ 884.931639][T19028] ? __pfx_vfs_read+0x10/0x10 [ 884.931669][T19028] ? __fget_files+0x2a/0x420 [ 884.931696][T19028] ksys_read+0x156/0x270 [ 884.931721][T19028] ? __pfx_ksys_read+0x10/0x10 [ 884.931750][T19028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.931770][T19028] do_syscall_64+0x174/0x580 [ 884.931793][T19028] ? trace_irq_disable+0x3b/0x140 [ 884.931816][T19028] ? clear_bhb_loop+0x40/0x90 [ 884.931838][T19028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.931863][T19028] RIP: 0033:0x7fdbe9f9de59 [ 884.931881][T19028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.931897][T19028] RSP: 002b:00007fdbe81d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 884.931917][T19028] RAX: ffffffffffffffda RBX: 00007fdbea226090 RCX: 00007fdbe9f9de59 [ 884.931931][T19028] RDX: 0000000000002020 RSI: 0000200000003f80 RDI: 0000000000000003 [ 884.931942][T19028] RBP: 00007fdbe81d5090 R08: 0000000000000000 R09: 0000000000000000 [ 884.931953][T19028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.931963][T19028] R13: 00007fdbea226128 R14: 00007fdbea226090 R15: 00007ffcc18f5aa8 [ 884.931990][T19028] [ 885.330472][T19036] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 885.330504][T19036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 885.358297][T19036] vhci_hcd vhci_hcd.0: Device attached [ 885.570862][ T5710] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 885.636206][ T5710] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 885.766185][T19037] usbip_core: unknown command [ 885.766201][T19037] vhci_hcd: unknown pdu 0 [ 885.766214][T19037] usbip_core: unknown command [ 885.841146][ T6674] vhci_hcd vhci_hcd.4: stop threads [ 885.841168][ T6674] vhci_hcd vhci_hcd.4: release socket [ 885.842209][ T6674] vhci_hcd vhci_hcd.4: disconnect device [ 885.971804][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4454'. [ 886.201688][T19055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4456'. [ 887.636075][ T5709] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 887.800460][ T5709] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 887.800500][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.800536][ T5709] usb 6-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 887.800561][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.805578][ T5709] usb 6-1: config 0 descriptor?? [ 887.849288][T19067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 888.056117][T19067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.057369][T19067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.262157][ T5709] hid (null): report_id 0 is invalid [ 888.262176][ T5709] hid (null): unknown global tag 0xe [ 888.262202][ T5709] hid (null): global environment stack underflow [ 888.262248][ T5709] hid (null): unknown global tag 0xc [ 888.262805][ T5709] hid (null): global environment stack underflow [ 888.293344][ T5709] hid_parser_main: 4139 callbacks suppressed [ 888.293413][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.293505][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.293573][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.293649][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.293721][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.293795][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.293875][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.293949][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.294022][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.294104][ T5709] semitek 0003:1EA7:0907.002F: unknown main item tag 0x0 [ 888.295259][ T5709] semitek 0003:1EA7:0907.002F: reserved main item tag 0xd [ 888.295602][ T5709] semitek 0003:1EA7:0907.002F: unexpected long global item [ 888.308500][T19036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 888.314776][ T5709] semitek 0003:1EA7:0907.002F: probe with driver semitek failed with error -22 [ 888.621061][ T5709] usb 6-1: USB disconnect, device number 3 [ 888.780908][T19070] syzkaller1: entered promiscuous mode [ 888.780935][T19070] syzkaller1: entered allmulticast mode [ 889.062324][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 889.537718][T19097] FAULT_INJECTION: forcing a failure. [ 889.537718][T19097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.537760][T19097] CPU: 1 UID: 0 PID: 19097 Comm: syz.4.4469 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 889.537791][T19097] Tainted: [L]=SOFTLOCKUP [ 889.537800][T19097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 889.537813][T19097] Call Trace: [ 889.537822][T19097] [ 889.537833][T19097] dump_stack_lvl+0xe8/0x150 [ 889.537864][T19097] should_fail_ex+0x467/0x600 [ 889.537907][T19097] _copy_to_user+0x31/0xb0 [ 889.537946][T19097] simple_read_from_buffer+0xe1/0x170 [ 889.537979][T19097] proc_fail_nth_read+0x1be/0x230 [ 889.538008][T19097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 889.538038][T19097] ? rw_verify_area+0x250/0x4d0 [ 889.538071][T19097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 889.538095][T19097] vfs_read+0x219/0xa90 [ 889.538134][T19097] ? __pfx_vfs_read+0x10/0x10 [ 889.538165][T19097] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 889.538195][T19097] ? lockdep_hardirqs_on+0x7a/0x110 [ 889.538224][T19097] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 889.538257][T19097] ? mutex_lock_nested+0x152/0x1d0 [ 889.538291][T19097] ? fdget_pos+0x252/0x320 [ 889.538325][T19097] ksys_read+0x156/0x270 [ 889.538358][T19097] ? __pfx_ksys_read+0x10/0x10 [ 889.538397][T19097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.538422][T19097] do_syscall_64+0x174/0x580 [ 889.538450][T19097] ? trace_irq_disable+0x3b/0x140 [ 889.538479][T19097] ? clear_bhb_loop+0x40/0x90 [ 889.538508][T19097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.538531][T19097] RIP: 0033:0x7f8ef346e68e [ 889.538553][T19097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 889.538573][T19097] RSP: 002b:00007f8ef1705fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 889.538596][T19097] RAX: ffffffffffffffda RBX: 00007f8ef17066c0 RCX: 00007f8ef346e68e [ 889.538614][T19097] RDX: 000000000000000f RSI: 00007f8ef17060a0 RDI: 0000000000000004 [ 889.538628][T19097] RBP: 00007f8ef1706090 R08: 0000000000000000 R09: 0000000000000000 [ 889.538641][T19097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.538654][T19097] R13: 00007f8ef3736038 R14: 00007f8ef3735fa0 R15: 00007ffc1b597488 [ 889.538689][T19097] [ 889.716326][T13658] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 889.876025][T13658] usb 2-1: Using ep0 maxpacket: 8 [ 889.891994][T13658] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 889.892025][T13658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.892048][T13658] usb 2-1: Product: syz [ 889.892063][T13658] usb 2-1: Manufacturer: syz [ 889.892079][T13658] usb 2-1: SerialNumber: syz [ 889.951948][T13658] usb 2-1: config 0 descriptor?? [ 889.974423][T13658] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 889.986732][T13658] dvb-usb: bulk message failed: -22 (2/0) [ 890.010367][T13658] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 890.011231][T13658] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 890.011290][T13658] usb 2-1: media controller created [ 890.051697][T13658] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 890.180221][T19107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.180873][T19107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.277774][T19110] binder: 19109:19110 ioctl c018620c 200000000380 returned -22 [ 890.371547][T13658] cxusb: set interface failed [ 890.371570][T13658] dvb-usb: bulk message failed: -22 (1/0) [ 890.597465][T13658] DVB: Unable to find symbol mt352_attach() [ 890.597483][T13658] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 890.854451][T17618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 890.882503][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 890.948948][T13658] rc_core: IR keymap rc-dvico-portable not found [ 890.948975][T13658] Registered IR keymap rc-empty [ 890.956303][ T5684] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 890.971371][ T5710] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 891.002009][T13658] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 891.005310][T13658] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input60 [ 891.016828][T17618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 891.030166][T17618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 891.047813][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 891.051447][T13658] dvb-usb: schedule remote query interval to 100 msecs. [ 891.051470][T13658] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 891.080910][T13658] usb 2-1: USB disconnect, device number 49 [ 891.083701][ T9] usb 6-1: config 253 has an invalid interface number: 252 but max is 0 [ 891.083732][ T9] usb 6-1: config 253 has no interface number 0 [ 891.083785][ T9] usb 6-1: config 253 interface 252 altsetting 42 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 891.083807][ T9] usb 6-1: config 253 interface 252 has no altsetting 0 [ 891.132299][ T9] usb 6-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=c9.6a [ 891.132323][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.132338][ T9] usb 6-1: Product: syz [ 891.132349][ T9] usb 6-1: Manufacturer: syz [ 891.132360][ T9] usb 6-1: SerialNumber: syz [ 891.238146][ T5684] usb 5-1: Using ep0 maxpacket: 16 [ 891.243734][ T5684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.243777][ T5684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.243802][ T5684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 891.243849][ T5684] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 891.243875][ T5684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.279729][T17618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 891.285366][T17618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 891.803480][ T9] em28xx 6-1:253.252: New device syz syz @ 480 Mbps (2013:8461, interface 252, class 252) [ 891.803525][ T9] em28xx 6-1:253.252: Video interface 252 found: [ 891.803547][ T9] em28xx 6-1:253.252: DVB interface 252 found: [ 891.842825][ T5684] usb 5-1: config 0 descriptor?? [ 892.052980][ T9] em28xx 6-1:253.252: unknown em28xx chip ID (0) [ 892.081765][T13658] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 892.516064][T13658] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 892.614428][ T5684] waterforce 0003:1044:7A4D.0030: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.4-1/input0 [ 892.668066][T13658] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 892.668102][T13658] usb 2-1: config 0 interface 0 has no altsetting 0 [ 892.668146][T13658] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 892.668171][T13658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.694069][ T5684] waterforce 0003:1044:7A4D.0030: fw version request failed with -38 [ 892.733530][T13658] usb 2-1: config 0 descriptor?? [ 892.734606][T19121] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 892.898226][ T5684] usb 5-1: USB disconnect, device number 36 [ 892.921350][ T9] em28xx 6-1:253.252: reading from i2c device at 0xa0 failed (error=-5) [ 892.921452][ T9] em28xx 6-1:253.252: board has no eeprom [ 892.961565][T19121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.962237][T19121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.155787][ T9] em28xx 6-1:253.252: Identified as PCTV DVB-S2 Stick (461e v2) (card=104) [ 893.157241][ T9] em28xx 6-1:253.252: Currently, V4L2 is not supported on this model [ 893.157264][ T9] em28xx 6-1:253.252: dvb set to bulk mode. [ 893.159608][ T5709] em28xx 6-1:253.252: Binding DVB extension [ 893.193582][T13658] hid (null): report_id 0 is invalid [ 893.193607][T13658] hid (null): unknown global tag 0xe [ 893.193647][T13658] hid (null): global environment stack underflow [ 893.193713][T13658] hid (null): unknown global tag 0xc [ 893.194481][T13658] hid (null): global environment stack underflow [ 893.266393][T13658] semitek 0003:1EA7:0907.0031: reserved main item tag 0xd [ 893.266530][T13658] semitek 0003:1EA7:0907.0031: unexpected long global item [ 893.267437][T13658] semitek 0003:1EA7:0907.0031: probe with driver semitek failed with error -22 [ 893.280384][ T9] usb 6-1: USB disconnect, device number 4 [ 893.336138][ T9] em28xx 6-1:253.252: Disconnecting em28xx [ 893.384307][ T5709] em28xx 6-1:253.252: no endpoint for DVB mode and transfer type 1 [ 893.384337][ T5709] em28xx 6-1:253.252: failed to pre-allocate USB transfer buffers for DVB. [ 893.384460][ T5709] em28xx 6-1:253.252: Registering input extension [ 893.460044][ T5684] usb 2-1: USB disconnect, device number 50 [ 893.536513][ T9] em28xx 6-1:253.252: Closing input extension [ 893.788149][ T4924] Bluetooth: hci3: command tx timeout [ 894.406995][T19147] netlink: 'syz.1.4482': attribute type 12 has an invalid length. [ 894.407023][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4482'. [ 894.540594][T13907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.752915][ T9] em28xx 6-1:253.252: Freeing device [ 895.610096][T13907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.856079][ T4924] Bluetooth: hci3: command tx timeout [ 896.350281][T19167] FAULT_INJECTION: forcing a failure. [ 896.350281][T19167] name failslab, interval 1, probability 0, space 0, times 0 [ 896.350318][T19167] CPU: 0 UID: 0 PID: 19167 Comm: syz.1.4487 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 896.350350][T19167] Tainted: [L]=SOFTLOCKUP [ 896.350357][T19167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.350370][T19167] Call Trace: [ 896.350378][T19167] [ 896.350387][T19167] dump_stack_lvl+0xe8/0x150 [ 896.350415][T19167] should_fail_ex+0x467/0x600 [ 896.350449][T19167] should_failslab+0xa8/0x100 [ 896.350476][T19167] kmem_cache_alloc_node_noprof+0xac/0x660 [ 896.350498][T19167] ? __alloc_skb+0x1d7/0x7a0 [ 896.350520][T19167] ? __alloc_skb+0x1d7/0x7a0 [ 896.350548][T19167] __alloc_skb+0x1d7/0x7a0 [ 896.350574][T19167] netlink_sendmsg+0x5d4/0xb40 [ 896.350611][T19167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.350642][T19167] ? aa_sock_msg_perm+0x122/0x200 [ 896.350676][T19167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.350704][T19167] sock_sendmsg_nosec+0x13a/0x180 [ 896.350728][T19167] ____sys_sendmsg+0x565/0x870 [ 896.350756][T19167] ? __might_fault+0xaf/0x130 [ 896.350785][T19167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 896.350820][T19167] ? import_iovec+0x73/0xa0 [ 896.350847][T19167] ___sys_sendmsg+0x2a5/0x360 [ 896.350873][T19167] ? __lock_acquire+0x683/0x2ce0 [ 896.350904][T19167] ? __pfx____sys_sendmsg+0x10/0x10 [ 896.350961][T19167] ? __fget_files+0x2a/0x420 [ 896.350982][T19167] ? __fget_files+0x3a8/0x420 [ 896.351013][T19167] __x64_sys_sendmsg+0x1b7/0x290 [ 896.351050][T19167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 896.351104][T19167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.351132][T19167] do_syscall_64+0x174/0x580 [ 896.351163][T19167] ? trace_irq_disable+0x3b/0x140 [ 896.351195][T19167] ? clear_bhb_loop+0x40/0x90 [ 896.351238][T19167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.351265][T19167] RIP: 0033:0x7fdbe9f9de59 [ 896.351289][T19167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.351312][T19167] RSP: 002b:00007fdbe81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.351339][T19167] RAX: ffffffffffffffda RBX: 00007fdbea225fa0 RCX: 00007fdbe9f9de59 [ 896.351359][T19167] RDX: 0000000020000880 RSI: 0000200000000180 RDI: 0000000000000003 [ 896.351376][T19167] RBP: 00007fdbe81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 896.351392][T19167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.351408][T19167] R13: 00007fdbea226038 R14: 00007fdbea225fa0 R15: 00007ffcc18f5aa8 [ 896.351447][T19167] [ 896.397123][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 896.596168][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 896.608994][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 896.609096][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 896.650894][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 896.650978][ T9] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 896.651046][ T9] usb 6-1: Product: syz [ 896.651087][ T9] usb 6-1: Manufacturer: syz [ 896.651129][ T9] usb 6-1: SerialNumber: syz [ 896.758622][ T9] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input62 [ 896.762183][T13907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.975244][T13658] usb 6-1: USB disconnect, device number 5 [ 896.975416][ C0] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 897.112779][T13658] appletouch 6-1:1.0: input: appletouch disconnected [ 897.146024][ T5710] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 897.338968][T13907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.359230][ T5710] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 897.359268][ T5710] usb 2-1: config 0 interface 0 has no altsetting 0 [ 897.359305][ T5710] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 897.359330][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.429481][ T5710] usb 2-1: config 0 descriptor?? [ 897.430890][T19172] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 897.649414][T19172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.669782][T19172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.880757][ T5710] hid (null): report_id 0 is invalid [ 897.880784][ T5710] hid (null): unknown global tag 0xe [ 897.880824][ T5710] hid (null): global environment stack underflow [ 897.880890][ T5710] hid (null): unknown global tag 0xc [ 897.881769][ T5710] hid (null): global environment stack underflow [ 897.936123][ T4924] Bluetooth: hci3: command tx timeout [ 898.116649][ T5710] hid_parser_main: 160 callbacks suppressed [ 898.116677][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.116709][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.116737][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.116766][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.116794][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.132642][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.132677][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.132707][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.132737][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.132766][ T5710] semitek 0003:1EA7:0907.0032: unknown main item tag 0x0 [ 898.133289][ T5710] semitek 0003:1EA7:0907.0032: reserved main item tag 0xd [ 898.133409][ T5710] semitek 0003:1EA7:0907.0032: unexpected long global item [ 898.134740][ T5710] semitek 0003:1EA7:0907.0032: probe with driver semitek failed with error -22 [ 898.263115][ T5710] usb 2-1: USB disconnect, device number 51 [ 898.336674][T19118] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.353319][T19118] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.353695][T19118] bridge_slave_0: entered allmulticast mode [ 898.451888][T19118] bridge_slave_0: entered promiscuous mode [ 898.478692][T19118] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.479818][T19118] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.483652][T19118] bridge_slave_1: entered allmulticast mode [ 898.510490][T19118] bridge_slave_1: entered promiscuous mode [ 898.588982][T19118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.595586][T19118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.291277][T19118] team0: Port device team_slave_0 added [ 899.499362][T19189] loop8: detected capacity change from 0 to 8 [ 899.664513][T19118] team0: Port device team_slave_1 added [ 899.680556][T19189] Dev loop8: unable to read RDB block 8 [ 899.680603][T19189] loop8: unable to read partition table [ 899.680960][T19189] loop8: partition table beyond EOD, truncated [ 899.680997][T19189] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 900.016943][ T4924] Bluetooth: hci3: command tx timeout [ 900.160259][ T5710] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 900.170982][T19118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.171034][T19118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.173080][T19118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.311314][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 900.318236][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.318306][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 900.318333][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 900.319871][ T5710] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 900.319900][ T5710] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 900.319930][ T5710] usb 2-1: Manufacturer: syz [ 900.529152][ T5710] usb 2-1: config 0 descriptor?? [ 900.703392][T19118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.703411][T19118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.703444][T19118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.911888][ T5769] usb 2-1: USB disconnect, device number 52 [ 901.358992][T13907] bridge_slave_1: left allmulticast mode [ 901.359032][T13907] bridge_slave_1: left promiscuous mode [ 901.363094][T13907] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.522259][T13907] bridge_slave_0: left allmulticast mode [ 901.522299][T13907] bridge_slave_0: left promiscuous mode [ 901.522612][T13907] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.096385][ T5710] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 902.226409][ T5710] usb 2-1: device descriptor read/64, error -71 [ 902.568035][ T5710] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 902.696136][ T5710] usb 2-1: device descriptor read/64, error -71 [ 902.806544][ T5710] usb usb2-port1: attempt power cycle [ 903.186082][ T5710] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 903.207130][ T5710] usb 2-1: device descriptor read/8, error -71 [ 903.327786][T13907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.387087][T13907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.429970][T13907] bond0 (unregistering): Released all slaves [ 903.446121][ T5710] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 903.470429][ T5710] usb 2-1: device descriptor read/8, error -71 [ 903.638251][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 903.640964][ T5710] usb usb2-port1: unable to enumerate USB device [ 903.713342][T19118] hsr_slave_0: entered promiscuous mode [ 903.724823][T19118] hsr_slave_1: entered promiscuous mode [ 903.747555][T19118] debugfs: 'hsr0' already exists in 'hsr' [ 903.747586][T19118] Cannot create hsr debugfs directory [ 904.098054][T19260] FAULT_INJECTION: forcing a failure. [ 904.098054][T19260] name failslab, interval 1, probability 0, space 0, times 0 [ 904.098096][T19260] CPU: 1 UID: 0 PID: 19260 Comm: syz.5.4509 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 904.098133][T19260] Tainted: [L]=SOFTLOCKUP [ 904.098141][T19260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 904.098156][T19260] Call Trace: [ 904.098165][T19260] [ 904.098175][T19260] dump_stack_lvl+0xe8/0x150 [ 904.098203][T19260] should_fail_ex+0x467/0x600 [ 904.098243][T19260] should_failslab+0xa8/0x100 [ 904.098273][T19260] __kmalloc_noprof+0xfb/0x790 [ 904.098298][T19260] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 904.098334][T19260] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 904.098368][T19260] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 904.098403][T19260] genl_family_rcv_msg_doit+0xda/0x340 [ 904.098436][T19260] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 904.098470][T19260] ? apparmor_capable+0x126/0x170 [ 904.098496][T19260] ? bpf_lsm_capable+0x9/0x20 [ 904.098524][T19260] ? security_capable+0x7e/0x2c0 [ 904.098562][T19260] genl_rcv_msg+0x614/0x7a0 [ 904.098600][T19260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 904.098622][T19260] ? ref_tracker_free+0x668/0x820 [ 904.098642][T19260] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 904.098674][T19260] ? ____sys_sendmsg+0x565/0x870 [ 904.098702][T19260] ? ___sys_sendmsg+0x2a5/0x360 [ 904.098728][T19260] ? __x64_sys_sendmsg+0x1b7/0x290 [ 904.098757][T19260] ? do_syscall_64+0x174/0x580 [ 904.098785][T19260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.098819][T19260] netlink_rcv_skb+0x226/0x4a0 [ 904.098851][T19260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 904.098877][T19260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 904.098923][T19260] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.098962][T19260] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.098998][T19260] genl_rcv+0x28/0x40 [ 904.099019][T19260] netlink_unicast+0x7f5/0x990 [ 904.099059][T19260] netlink_sendmsg+0x813/0xb40 [ 904.099102][T19260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.099139][T19260] ? aa_sock_msg_perm+0x122/0x200 [ 904.099177][T19260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.099207][T19260] sock_sendmsg_nosec+0x13a/0x180 [ 904.099233][T19260] ____sys_sendmsg+0x565/0x870 [ 904.099263][T19260] ? __might_fault+0xaf/0x130 [ 904.099294][T19260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 904.099336][T19260] ? import_iovec+0x73/0xa0 [ 904.099366][T19260] ___sys_sendmsg+0x2a5/0x360 [ 904.099396][T19260] ? __lock_acquire+0x683/0x2ce0 [ 904.099432][T19260] ? __pfx____sys_sendmsg+0x10/0x10 [ 904.099499][T19260] ? __fget_files+0x2a/0x420 [ 904.099523][T19260] ? __fget_files+0x3a8/0x420 [ 904.099557][T19260] __x64_sys_sendmsg+0x1b7/0x290 [ 904.099598][T19260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 904.099650][T19260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.099675][T19260] do_syscall_64+0x174/0x580 [ 904.099702][T19260] ? trace_irq_disable+0x3b/0x140 [ 904.099731][T19260] ? clear_bhb_loop+0x40/0x90 [ 904.099760][T19260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.099782][T19260] RIP: 0033:0x7f15ab43de59 [ 904.099805][T19260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.099824][T19260] RSP: 002b:00007f15a9696028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.099848][T19260] RAX: ffffffffffffffda RBX: 00007f15ab6c5fa0 RCX: 00007f15ab43de59 [ 904.099865][T19260] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 904.099879][T19260] RBP: 00007f15a9696090 R08: 0000000000000000 R09: 0000000000000000 [ 904.099893][T19260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.099907][T19260] R13: 00007f15ab6c6038 R14: 00007f15ab6c5fa0 R15: 00007fff396116b8 [ 904.099944][T19260] [ 905.050068][T19269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4513'. [ 905.171615][T19269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4513'. [ 905.816276][ T5684] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 905.932053][T13907] ------------[ cut here ]------------ [ 905.932068][T13907] Have pending ack frames! [ 905.932084][T13907] WARNING: net/mac80211/main.c:1749 at ieee80211_free_ack_frame+0x14/0x40, CPU#0: kworker/u8:48/13907 [ 905.932134][T13907] Modules linked in: [ 905.932156][T13907] CPU: 0 UID: 0 PID: 13907 Comm: kworker/u8:48 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 905.932186][T13907] Tainted: [L]=SOFTLOCKUP [ 905.932195][T13907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 905.932209][T13907] Workqueue: netns cleanup_net [ 905.932260][T13907] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40 [ 905.932289][T13907] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 13 28 22 f7 48 8d 3d 5c 85 1b 05 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 28 e1 65 fe 31 c0 [ 905.932309][T13907] RSP: 0018:ffffc900080d76d0 EFLAGS: 00010293 [ 905.932329][T13907] RAX: ffffffff8aa310dd RBX: ffff88802b922a00 RCX: ffff88803a5a8000 [ 905.932347][T13907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fbe9640 [ 905.932360][T13907] RBP: ffffc900080d77d8 R08: 0000000000000000 R09: 0000000000000000 [ 905.932375][T13907] R10: ffffc900080d7740 R11: ffffffff8aa310d0 R12: ffffc900080d7740 [ 905.932391][T13907] R13: ffff888057e54df0 R14: 1ffff9200101aee4 R15: 0000000000000001 [ 905.932408][T13907] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 905.932426][T13907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.932441][T13907] CR2: 00007f15ab6c7dac CR3: 000000005e582000 CR4: 00000000003526f0 [ 905.932462][T13907] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 905.932477][T13907] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 905.932493][T13907] Call Trace: [ 905.932502][T13907] [ 905.932512][T13907] idr_for_each+0x1c9/0x2a0 [ 905.932547][T13907] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 905.932577][T13907] ? __pfx_idr_for_each+0x10/0x10 [ 905.932610][T13907] ? kfree+0x1c5/0x6c0 [ 905.932631][T13907] ? kobject_put+0x267/0x550 [ 905.932670][T13907] ieee80211_free_hw+0x38/0x3c0 [ 905.932702][T13907] mac80211_hwsim_del_radio+0x2f3/0x4a0 [ 905.932730][T13907] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 905.932756][T13907] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 905.932789][T13907] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.932823][T13907] hwsim_exit_net+0xea6/0xf70 [ 905.932847][T13907] ? hwsim_exit_net+0xc2/0xf70 [ 905.932875][T13907] ? __pfx_hwsim_exit_net+0x10/0x10 [ 905.932902][T13907] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 905.932951][T13907] ops_undo_list+0x43d/0x8d0 [ 905.932984][T13907] ? __pfx_ops_undo_list+0x10/0x10 [ 905.933008][T13907] ? rt_spin_unlock+0x157/0x200 [ 905.933034][T13907] ? idr_destroy+0x21b/0x2a0 [ 905.933062][T13907] ? rt_spin_unlock+0x163/0x200 [ 905.933088][T13907] cleanup_net+0x575/0x810 [ 905.933116][T13907] ? __pfx_cleanup_net+0x10/0x10 [ 905.933149][T13907] ? process_one_work+0x8cd/0x12b0 [ 905.933181][T13907] ? rcu_is_watching+0x15/0xb0 [ 905.933215][T13907] ? process_one_work+0x8cd/0x12b0 [ 905.933248][T13907] ? process_one_work+0x8cd/0x12b0 [ 905.933281][T13907] process_one_work+0x93a/0x12b0 [ 905.933338][T13907] ? __pfx_process_one_work+0x10/0x10 [ 905.933369][T13907] ? do_raw_spin_lock+0x12b/0x2f0 [ 905.933402][T13907] ? assign_work+0x3cf/0x5d0 [ 905.933442][T13907] worker_thread+0xb05/0x10d0 [ 905.933535][T13907] kthread+0x388/0x470 [ 905.933566][T13907] ? __pfx_worker_thread+0x10/0x10 [ 905.933599][T13907] ? __pfx_kthread+0x10/0x10 [ 905.933628][T13907] ret_from_fork+0x514/0xb70 [ 905.933661][T13907] ? __pfx_ret_from_fork+0x10/0x10 [ 905.933690][T13907] ? __switch_to+0xc89/0x1420 [ 905.933716][T13907] ? __pfx_kthread+0x10/0x10 [ 905.933745][T13907] ret_from_fork_asm+0x1a/0x30 [ 905.933791][T13907] [ 905.933813][T13907] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 905.933834][T13907] CPU: 0 UID: 0 PID: 13907 Comm: kworker/u8:48 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 905.933866][T13907] Tainted: [L]=SOFTLOCKUP [ 905.933874][T13907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 905.933890][T13907] Workqueue: netns cleanup_net [ 905.933924][T13907] Call Trace: [ 905.933934][T13907] [ 905.933943][T13907] vpanic+0x56c/0xa60 [ 905.933977][T13907] ? __pfx__printk+0x10/0x10 [ 905.934001][T13907] ? __pfx_vpanic+0x10/0x10 [ 905.934032][T13907] ? is_bpf_text_address+0x292/0x2b0 [ 905.934064][T13907] ? is_bpf_text_address+0x26/0x2b0 [ 905.934107][T13907] panic+0xc5/0xd0 [ 905.934139][T13907] ? __pfx_panic+0x10/0x10 [ 905.934182][T13907] ? ret_from_fork_asm+0x1a/0x30 [ 905.934215][T13907] __warn+0x315/0x4c0 [ 905.934246][T13907] ? ieee80211_free_ack_frame+0x14/0x40 [ 905.934277][T13907] ? ieee80211_free_ack_frame+0x14/0x40 [ 905.934307][T13907] __report_bug+0x331/0x530 [ 905.934338][T13907] ? __pfx_stack_trace_save+0x10/0x10 [ 905.934370][T13907] ? ieee80211_free_ack_frame+0x14/0x40 [ 905.934400][T13907] ? __pfx___report_bug+0x10/0x10 [ 905.934435][T13907] ? mac80211_hwsim_del_radio+0x2dc/0x4a0 [ 905.934457][T13907] ? hwsim_exit_net+0xea6/0xf70 [ 905.934479][T13907] ? ops_undo_list+0x43d/0x8d0 [ 905.934504][T13907] ? cleanup_net+0x575/0x810 [ 905.934529][T13907] ? process_one_work+0x93a/0x12b0 [ 905.934565][T13907] ? worker_thread+0xb05/0x10d0 [ 905.934598][T13907] ? kthread+0x388/0x470 [ 905.934621][T13907] ? ret_from_fork_asm+0x1a/0x30 [ 905.934654][T13907] report_bug_entry+0x19a/0x290 [ 905.934684][T13907] ? ieee80211_free_ack_frame+0x14/0x40 [ 905.934715][T13907] ? ieee80211_free_ack_frame+0x19/0x40 [ 905.934742][T13907] handle_bug+0xce/0x200 [ 905.934775][T13907] exc_invalid_op+0x1a/0x50 [ 905.934808][T13907] asm_exc_invalid_op+0x1a/0x20 [ 905.934831][T13907] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40 [ 905.934860][T13907] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 13 28 22 f7 48 8d 3d 5c 85 1b 05 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 28 e1 65 fe 31 c0 [ 905.934880][T13907] RSP: 0018:ffffc900080d76d0 EFLAGS: 00010293 [ 905.934899][T13907] RAX: ffffffff8aa310dd RBX: ffff88802b922a00 RCX: ffff88803a5a8000 [ 905.934924][T13907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fbe9640 [ 905.934940][T13907] RBP: ffffc900080d77d8 R08: 0000000000000000 R09: 0000000000000000 [ 905.934956][T13907] R10: ffffc900080d7740 R11: ffffffff8aa310d0 R12: ffffc900080d7740 [ 905.934973][T13907] R13: ffff888057e54df0 R14: 1ffff9200101aee4 R15: 0000000000000001 [ 905.934995][T13907] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 905.935027][T13907] ? ieee80211_free_ack_frame+0xd/0x40 [ 905.935063][T13907] idr_for_each+0x1c9/0x2a0 [ 905.935104][T13907] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 905.935140][T13907] ? __pfx_idr_for_each+0x10/0x10 [ 905.935175][T13907] ? kfree+0x1c5/0x6c0 [ 905.935195][T13907] ? kobject_put+0x267/0x550 [ 905.935235][T13907] ieee80211_free_hw+0x38/0x3c0 [ 905.935267][T13907] mac80211_hwsim_del_radio+0x2f3/0x4a0 [ 905.935312][T13907] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 905.935338][T13907] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 905.935379][T13907] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.935414][T13907] hwsim_exit_net+0xea6/0xf70 [ 905.935555][T13907] ? hwsim_exit_net+0xc2/0xf70 [ 905.935583][T13907] ? __pfx_hwsim_exit_net+0x10/0x10 [ 905.935613][T13907] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 905.935652][T13907] ops_undo_list+0x43d/0x8d0 [ 905.935686][T13907] ? __pfx_ops_undo_list+0x10/0x10 [ 905.935712][T13907] ? rt_spin_unlock+0x157/0x200 [ 905.935738][T13907] ? idr_destroy+0x21b/0x2a0 [ 905.935765][T13907] ? rt_spin_unlock+0x163/0x200 [ 905.935792][T13907] cleanup_net+0x575/0x810 [ 905.935823][T13907] ? __pfx_cleanup_net+0x10/0x10 [ 905.935859][T13907] ? process_one_work+0x8cd/0x12b0 [ 905.935889][T13907] ? rcu_is_watching+0x15/0xb0 [ 905.935925][T13907] ? process_one_work+0x8cd/0x12b0 [ 905.935959][T13907] ? process_one_work+0x8cd/0x12b0 [ 905.935993][T13907] process_one_work+0x93a/0x12b0 [ 905.936046][T13907] ? __pfx_process_one_work+0x10/0x10 [ 905.936078][T13907] ? do_raw_spin_lock+0x12b/0x2f0 [ 905.936112][T13907] ? assign_work+0x3cf/0x5d0 [ 905.936152][T13907] worker_thread+0xb05/0x10d0 [ 905.936213][T13907] kthread+0x388/0x470 [ 905.936242][T13907] ? __pfx_worker_thread+0x10/0x10 [ 905.936314][T13907] ? __pfx_kthread+0x10/0x10 [ 905.936344][T13907] ret_from_fork+0x514/0xb70 [ 905.936376][T13907] ? __pfx_ret_from_fork+0x10/0x10 [ 905.936406][T13907] ? __switch_to+0xc89/0x1420 [ 905.936433][T13907] ? __pfx_kthread+0x10/0x10 [ 905.936463][T13907] ret_from_fork_asm+0x1a/0x30 [ 905.936511][T13907] [ 905.937206][T13907] Kernel Offset: disabled