last executing test programs: 12.128534044s ago: executing program 1 (id=1924): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x5, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x81, 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0x2}}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa0028018}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='sched_switch\x00', r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, 0x0, 0x0}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r12}]}, 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r12}]}}}]}, 0x6c}}, 0x0) 11.868249592s ago: executing program 1 (id=1925): socket$inet(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r3, 0xffffffffffffffff, 0x2c}, 0x20) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r7, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x6, {"ec48ec694b96429cea4a1f5d456505d9"}, 0xffffffffffffffff, 0x7, 0x7}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) socket$key(0xf, 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) sendmsg$TIPC_NL_PEER_REMOVE(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="29bd7000fbdbdf25000000000c0004010000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$inet6(0xa, 0x800, 0x2) r8 = syz_open_dev$vim2m(&(0x7f0000007d80), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x1, "95ffe3f9794e8954195ab838d88e68b4aeba71ab0b5900000000000000000800", 0x31435641}) socket(0x29, 0x3, 0xfffffffc) 10.816428335s ago: executing program 3 (id=1926): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0x1, 0x19d) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) r8 = syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b44030", 0x7a, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r5, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000002900)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="00000014001700000000000000000000000000000000010800b28004003280d6955d5c331c9c131a3337f8ac0ab66ad8fc00e3dfbf30ff493c5d30bc24ecaaf606d8801139ea44c6ce412d4c3705f4902b39361df57a5b79299b835b0225d923737b9a7b71535cc50c93e44a44a00bb49da1a5cb8cd01930faff0000"], 0x125c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002c00010000007214c3f4482a684460b4b04f5fed8d7240d2930896b93ae514f3635fd3ab1cdb364626d0fd153f13626302af191ce8e2d514f423b2bee441c1d71f9c6d48fec569fc63856b9ef315e3bd156523e0e2757607879a0f784f5f4365b78f04d955bfbe4943517454d481d20967251763f5bdfcdd8dd7"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.714551035s ago: executing program 4 (id=1927): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x8eb, 0x0, 0x7fffffffffffffff}]}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x4, 0x0, 0x400003}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000380)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xffffffffffffff34) accept4$unix(r4, 0x0, 0x0, 0x80800) read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7) 9.455674196s ago: executing program 4 (id=1930): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 9.243264291s ago: executing program 4 (id=1931): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x5) write$binfmt_misc(r3, &(0x7f0000000400), 0x0) writev(r2, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000500)={0x1, @pix={0x4ed, 0x3, 0x59455247, 0x2, 0x0, 0x4, 0xb, 0x8000001, 0x1, 0x0, 0x0, 0x3}}) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @rand_addr=0x64010101}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r10, 0x80044801, 0x0) sendto$inet(r8, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1e0a}], 0x1, 0x2041, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000003c0)={0x0}, &(0x7f0000001a40)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000001a80)={r11, 0x72, "8adf569db58c2d0204f015c16ed65d4b40237fb6e91fbba02588897bc89d31f018c31fa449ecb588984fedb2c69d54196bc5f2018530fa9b531ae15ce52aa98afaaf6692dc5c33e008a963282f412b863de82d666c7c43c75a4ed7df1f28cdc63270768000a01a043cefe7bc83dbbc7af663"}, &(0x7f0000001b80)=0x7a) ftruncate(r8, 0x5) 8.875178082s ago: executing program 3 (id=1932): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, r2, 0xbf245000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000037000100ffffffff950000000000fa00"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r5 = openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x103000, 0x0) read$alg(r5, &(0x7f0000000180)=""/40, 0x28) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14}}, 0x50}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000440)=""/166) 8.791359474s ago: executing program 1 (id=1933): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x9, 0x14, 0x12, 0x15, 0x9, 0xc0c9, 0x2, 0x8c, 0xffffffffffffffff}) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioprio_get$uid(0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x228000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140640101000500090084000000060004404e2200000c000280080001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 7.827855982s ago: executing program 0 (id=1934): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x5) write$binfmt_misc(r3, &(0x7f0000000400)='u', 0x1) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000a40)="438a1fac9dbc1a9b30a89374502555aaec73b24e2b88566e0f36ab97ebb489c035754d0efcb257ed436c00ea5e5232fa4bebf2fbba15a23c9a943c0d6c0ac68538d5df9fb9d6c489abe2612e381a739cfa98af6867a7aecee2fc0edebacd5e6d5fc1059c366ba9639f7975e34b31c7740287465dd6400c2a02cceedd0eb9829b5391915f77fb19283047064ed71159ad074f381f0552ec6c2fef76a8e38bbcfbee12e9e7e9b93a6396a7cca57147c3dfc48bfb2784d361218a07a4bc7369b0d3831a693d3fea521bc3cfecf4d7e11f060e58f3fcff7bb362b1d4b92a197157f057ed3d08c3ac9102a4460df7bb4b9c8367abf9570870547db6ff8afbb2ab213779e0e17c87a9a6b44550a911b32aa01f27ff4d353d223d25b56b4bee1997a37dd4c869f5f1c05c3fb0ec60c0d841bcd6faa00f5812530b32125a3533b01e6d9c027b3a944aa437ef926231ff64aac1c11de390ebdde9149222c4269bf7388f8be0c1f9677ee2f8aaa8f2004b7cff3ef64bbd2306793e5f0358e0531e98a5b6e52fc80c9605dab5ace45be55c53fc6a9c7457ab38ada00b0092e2a2130bffc954691a38a7c988106269021a21676f7f4aa7683b362e3c8ffef9e26ef65635f24a0188d68a9493489296404ab859c32a483fe9b50504b1a3bb66a9ba20792c8167cca73f037189131a5c7d33846adc5aa3e9b88979bf61681f2cddc495d2ab9e14626c36c742b1f477421358ad35428db24a90afe7b329d8b19a266f06eb232e06631652e28af55ffc079fd324338f10af7b44fed7ef914cc19b008a1139dce9d513123f9e6d51320cd180ff9b44d567fd1703b007dda0896bd4e6b2889e5fea044b3d8f2da8f885443ab53976c14ce27bff930f25efd45108e05489eb0006bf736c98cc20b9d12ba37058cbb171caa001d022c4c7aba8175040206851671a81a27254f6640e722ab6e3f310db2d7f9cc3ec19829f4e7856f35e77e0d4efc6dcdf0bac0471a2d7a02f776fc5ba271da9f4d147e6adcaa0bd4b5f841d5972dc5e7ddad1492c001dd9d3026df89231d3d989b604c744565ef5430ad225171027d748b6d39f7232f9c4ffc7f98335dd958b639f5e94bb9aa3d37f7ee6cfcc16e61611ccb4ceefd106459b80861b46e70b2a3d5e5613525e3e5710d1c1c9ed958a80679db94dc2838094f107a9f8465dd65f50810d6a480fc2cfe80c5b7cb246660de0def97f38b08454cfbc7df866b23f7e11049872cd50e61d3ab086a4530e64cab744698801e54c1401f54114612cbcdcba147bf0df73c5043efea68c7bd0df67a27d0bb70f6be397a9b27120cdfc28db9e85023fd44e22044c7b0a8e0713bc0b7c84e68000824722fee55fc35dd32dbd289d2fb37eaf02dbf80fca8d5d5fde02d9bddedeeb88804da2a744e07055dc78d2d48509f6cc0c1e6cb5a5800391fa2743a4efab91cc67c15f4524f48d868f717fb0f10acdaec2f7bde136efda6bcfe08ceb76e9284ee3366abfc99f298f412e55fa81b9d2a074c1ab443ba794736972f7e49e5a85db7259b48d054534c9f02e6a2026320d23eca0c0cfcb3ecbf1fbeac2bdb8d4acfa033911fb6408b2f5d41958708ee033618935eef52b83e48ae045e128567bfdc2afe225da84aad7e31e1446fc42407792320daf0280524d3d1692f0cd53195e30a6d1d5bffe41d05137dc7ea52d1294aff54f6b9065f9be2ce62d27db1530e7ccd3673f02b5805053f6380b0f940b70d5d45003536f4bc36393a129c06a506d50dba54c51db7cff28ffe0d3fc82a589939fd18dc21096488bd67eea27cbea1769f7c20260c680ad832dbe145c278ffa09235a1fd626f9e454636f7d2bb562aca54ef16f2ca7f017f715c4b1d4d123b4c90c2e95efdc221105eebe082744aeb9f07a47c4193ccdd8684cf329fbabe2b1e3d1b56387b21c555ba138e43ec0996506e7ec67b953011b617d5e892152736f50ce83b7f8cb311f980be5e60c3f7db13aa724b67510726befb41da4383ba9da3c1abfb3e6a37140626386b1ff4905c4f827241558fbc6af239d6614fd379c2820ff8fdd303cb087375f17bb772565c31903c40ce988cbacfdaaf832c04ee380cde90e18c6a7088fb41ead7c749895f1bce9d5454467d177803f4db5a5b149c4325419a4f2dd574cde8fa25ddeb491116d2b4983ffe3dd9270667504ed669f383a6e443e0cefcd946a8eaa43fadd2811422b22407f9983cd12118b0dacdf3412ae80470139ba0550f5faee828fb2bcac3516aed5dad04d77ed7ec0938e303a7ac50ee7fd6999405fd3908f9818a73caf18a430fb887c40a2e5cd20e9d6488e4727fea5ce9da92d6ceb41094aff0a7ac2528738428197f5c160c761e068c6111d25fb5369f11ca5e5d562ab024293c0844d95cf4cb82cd73b3190cea6d8325628b098e7f3e097c6b8ab0e6024ccd2e4962c5a118a4239eea65b50b788495758c74c4ef2ba386d6c558c438c20893c4ca530b00fe89c707febadc864a9beb4102824ca99d8c596b50e8e13301a09bf0f796a0329d8a233aea884bb0e478af0494006bd97d9e8f9a109799e8d511a1e4e6b0ca2ad47f48c3f218aa299b9d7064dfde6922e75afca5de660b33b4c77fc4c84ed54cc98dcb6b92d4fd5cdeb04353c504b06a471e57018d84e6c69e75f7948a472881147c3ea47c38c92a4ecbfa7a246d273c4072182609405554a4c9f39f43396196dd2758ec02481aff3dd1b23be44ce801c271fa3a9faaf1fcf8824168001986dbf6ca5bef50e32c88ba7ad2544a45602f957ffd48133dd69750c6771975d109d00a146e1b228350a9781763f413464b0120956735987b24137c4c8c608926f700467cbaad85c09aae8c55c321688c0ef63f58b0eb1e14f337a63f3c478084f48dff1d38c46d9acf4272d52a5e73079f9e15a1453bbe5089c77856cf0b36244cac98062b4a59fb371d04da0fd9e1c551aba73eefc1bf33f381e0d526df70ae6bbd873dc8041dd26ae69e0fdc0c07fd807f8bf75340398bdf233ab9f9546a97b9489a354c202893fc371564efeb28312b7c71d36907eb15137d59fc9e7b9e471f5b343a1a54f72a69163f62cd34ba3b4de1aa78c7adeb61f70328390d8cff35a7d56f7f86d1b967970b35eb95f9146107f6a2905e51dc99ec161a44eead55c4986fd82d340776700fe534b55f5b9bf5bb56b9e4a734e9d693f54978bf00294bb9cf293a04b34ba4e13229f8ad9e42e8ec2d9f5847190adbfb5ac2a581cb7641d8f3c1c216349e2721dd9529549ec29a0363bbf899944f1e70c18f400363b148b8b84239303f91736bf25c0ddc5b8ffb0378401eecf0931e240925a8aeca3cfcc640356e46ee8c9bca3e2ddc262951cd47f939e09918fd0f056c8729f0d3a2b8301e09af323dd8854cb39bd9ce8d64c66136e729cf6cb7b27cd148b749c6abe25c0febbaa76b20854ebf1ada617e59f77a06a630dfe8caf26e2dddaf3795739f78177f75d46a82e8cec5b36b8cc291bf9feee3b6710466903e35813d7010303cf21c72d134ca9aa5b43ae204bf130a7cf0d8d1f0434d47cbc4a4bf2844a2950d8c987e12c0b98cf4d5d1c6fbb4a35d015d8c412374946e4d91e9c46b50bdb7d9b4e2e7fb4797fc3764a5d5a509dc10d6617e63cf1a396274ce82a41c32da7fcc6a0d882a13cc17afb7f8d8f33426ba0c49d94da97ed8aab596d84ed87e6582770b59f4facc62b13dcca05ef8ca17563bf305a8f64965037fc3607d6a13b6ae464b371662b506b3cc418841b18873eb424645cf5edae09e524cb51a6ae504b1b163094d02641957fedf81ab48813b9c0d9df34edb8c56af14173f9431b9e21cb5b501447e44fdbb25d8fc2db9bb4f83040f040ec2b61de6520bf98fbccfe76a5b083a143fd6a99862c7439a611898416ba963efdbe91fefbe131e3770805d6a29c83512fc453a77b0d1f4177c6d0edde2ef370135b0ac2b7407fe0ac488a3d8f4e6bcfbc8053e0c0548d7c56a64651ecfc06773465d1431e85d7efab4425fa0a936499ba7c680b9725a0347f367cec02b2323f23f5efd92bb94f16198036d6263db7313526cca7d9bf7b0c0fc76c15e6e94aab23c13d74eac889f55e0c440592f3fc4c7cf2ae79c355d6899c208e640b1b9f73fa006f415249dd0c8551549cc93fa988f0f8e7c63fa54a8c2f6b6650fc539b31829f307378bf8052a5a12be38524dc35195ba08f26952451bba5b0baf64beeef1ed9731fcc09260262e9d6df7b32208a341009e933315a7d35e4a34bddb81ef63e39c9e6c15341ffae437c48aad7b952e874709a53e6d2df898feea44d4307e75e2d5003cd5debfa35f01d09e55fa5eace5a03394ea49cb6997971a6378e3da637cdc6bce4a3aca05458aa4a200ec3348a810e7b9e6133f83b9d75cdca1821839def51e5c7e17093b9c95fccc4cb39136b2f8ebf2789d6bfd163b507ebff02ca687f6cb081f75cc1c21aa2e9b03418c95f9d4000ea3525e346fbcd516ca9da383e2089d5c6ab7f174cc9c78b2bacf4211537c2ea3dd1d76c40c7bcf46167d48320dd83931fad29371415c48dc0b1f2ebde48cb434f43c56fdf46168fa2b57f6c99b0abd78b5d9cfaf2f610951ea9bd551a6e44b0e4e48e411aea288a04e08e1678e219ee0efe83002b852fbe620d4cef1d7fcf48d4b96ef688c2fc3c21890ba60aaede62dcc6e015fa27b0b9ff9e574ecbae0903605d20c796e9e94d4ad5a092162f3969590e3c978298ef1656ba3080a4a1664ce958dd53b2ddddc004b74dc1f21c800a5dd044ab014073176a4d695048f096ccf3e723e75989b73dfbb83c4d6e76f14500a76a83075ca1445556cebe4abb602d040f74b268086b8fe6b7ac4d2e31e05e85c225d1286cf5d7e5d04394b4a62b20fb66e0fe4dc9b6c93d5deb17170510eea38ce7f0ec769ee331199909aaec845d529aba38fe802aaa770a5d16ac1bbdb60cd939237b234ba9839e02fc5e48296f2c62e6391a815b1cb1be1db8568aaf96f9c2f113936e87f2c9ad697e0e60a85993588bb26c92d52b11fd3fce8e4df34808550c1397b4a68261febe2502aa3d04f700179bbbabe2a605ee8d75273fcdd60c875f83b06cc964806b60d4a21f196c9ab38b717c25e3ccce75b16eba6e88279f2a588b962e268797bd09363563b7d3f02fb0ce3aefe4c05a7134c87e98f46429dee259d877939c9da0a20aa772af40e99c5d03fc7802d8d392fd068b117844d0b1afc80a12528b9daaeb37cf3dad7fc0b8bb606e9d39bfef0754e084068bf3026bf999c8ad967a9576715646a5c53877794cb954a27d89e233e30188179d0654ae5c7c53a16adbdf90d4bcb4ed1ba7ec32bc7f1f4975b7525dd7411ce81def1bab793302e10c86c8a5e033ef1974ed67d02f31db4f62e8599e31895b92f3c707bd8f9fc8302096dd04e91d175991438bcec4ec59ad444838e06a58d5ae82c96294fb0a92cc400050c244a7e36befb2bb9bc87a6dd8f6cd450e81d9b7bc0e276b1eb4b7f7abe445d91b64ceee8ab75ce10e21e14e936a4710a36414e413c6939ad045aaf5eaa9e45fb1bf0076879b54c24aa57842c1c5de723e33b93ae0dc084e2633e09ceb8f59930313a1a7f25e629dad0462a6e7d35742ea6bde534f470a4f0464bca0e2b5a30d58589cd11ad27fdb2553532380eb9132d1c3e0cc38ebc5dfe1fd5316f5e6d3e0b1f22ebde844a215c861c484be3051928bdd03ee954ba06a1104e5eb15205a8896f28ce747081856fbaac7fdb8ab49e4b3bdf8380007187a4fc11ca7", 0x1000}, {&(0x7f0000000140)="05767806e4e05f1a477643a089562670e51b7a94c40612b88545960af2ae0dace55eab7416d740b298137adfe13f988d3e976217e1b1a71d9b2380be92bb3f69e13e3ed7feeb8d0d4510123051677b52dd5e5e601cc5bd64d20224e6bcc2169185810a193ba35ba4477d2829dcf542a395d4e941dd29144155074c3a6a990a045658da2416c933c5c01a6a07304fa14fea224d55c89dc3573eb6fa98abba0b3e303ecd9819443ac9ff741843c661b7157b51fbd90f043d9e447097dd5d6201dd07f45af440d9a9b559851dbbc6854fa704759fb959196e76edb019d90319a64d2910e76ab25b0cbc27b7fabc12e96eaa82be75fcd22aabbf8c", 0xf9}, {&(0x7f0000000300)="15c7e6", 0x3}, {&(0x7f00000002c0)="2d1453c4906bd6d74acdfb7ec3ac409b140b592571738325d51062dc767692733a0a8450957375933341c0550a049dfd387e92c60915", 0x36}, {&(0x7f0000000240)="d635c57ffc5dbd7e2ccab71c8932d5dc6b527b78d5613de5f9cc19cdba65ddb7", 0x20}, {&(0x7f00000000c0)}, {&(0x7f00000006c0)="02f2a7db76e0ef4562c1f68e20f3db97a13a1a9538d4109d1cc5f24010a456c7e73adcc9a0ff1dae2b49cd158cede8f2bf6e7b9b329301e974acae5ce9f5cac07aae8d90396016a27ff6d1214accd7f54318eaf31ce1d2bfb1ed21b895f415cb46cfc966be2218bd93b26c0156d791aed2ec26e740445da8dc22cd56e40b264549d213d6d9544d77bcda98b0067fb75dcf4472ce", 0x94}, {&(0x7f0000000600)="7a284c4653d6c4964bc629b0c3aa8721c44b8e6c0e753174b543139d4fc0986c659a9bc671b8684ae5eb348554a047c598e71075899767f9cc5fca40c2e84bf8609b3bb69dbc8e2a397d87daef5277df058bcdeaa98422c45c59223990e2901317ce0537a12e0ae6e11e5cda70046544ef529555b73cbee2e967d84476780cfd6f356df9a08c645b509db07803a8193d189f8f153edf019e6ea5651125488f7a0035cc4855e434e4544f57", 0xab}, {&(0x7f0000000900)="9874b0979fa16ab4a68069b9a4dd89ab4bde245eab37e9232c271d5f0f9599526a63b5fa2c35024dad245e8d76d97a65d93d4dacb1279e1441ec7a528ebcffcd96d8e17117940a522ff61843a59c3b2fdad96b53cbabca92e87bb89570928f5beac5907934126058c68cfa0caed7872efb147f0e796005b5089ebe097faac889556902c1d443975ed11a41470335c1ed8f958ec7668f174c2e84c7fc951d81e45b7360be797f5f709e98cac158273653a92e8db8675c17fc88a56410bde2125538c9e369ba79479165f21630d8a3b8f3612566138436d73c89c218608f1a1f0aa5f8e3c7ba14b21837b6fb0c5582c20760db61460578e5", 0xf7}], 0x9) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000500)={0x1, @pix={0x4ed, 0x3, 0x59455247, 0x2, 0x0, 0x4, 0xb, 0x8000001, 0x1, 0x0, 0x0, 0x3}}) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @rand_addr=0x64010101}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r10, 0x80044801, &(0x7f0000000100)) sendto$inet(r8, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1e0a}], 0x1, 0x2041, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000003c0)={0x0}, &(0x7f0000001a40)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000001a80)={r11, 0x72, "8adf569db58c2d0204f015c16ed65d4b40237fb6e91fbba02588897bc89d31f018c31fa449ecb588984fedb2c69d54196bc5f2018530fa9b531ae15ce52aa98afaaf6692dc5c33e008a963282f412b863de82d666c7c43c75a4ed7df1f28cdc63270768000a01a043cefe7bc83dbbc7af663"}, &(0x7f0000001b80)=0x7a) ftruncate(r8, 0x5) 7.147322179s ago: executing program 2 (id=1936): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000", 0x8}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 6.843549651s ago: executing program 2 (id=1937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf0) 6.693894103s ago: executing program 0 (id=1938): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff00000003", 0x47}], 0x1) open$dir(0x0, 0x1, 0x19d) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b44030", 0x7a, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r5, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002c00010000007214c3f4482a684460b4b04f5fed8d7240d2930896b93ae514f3635fd3ab1cdb364626d0fd153f13626302af191ce8e2d514f423b2bee441c1d71f9c6d48fec569fc63856b9ef315e3bd156523e0e2757607879a0f784f5f4365b78f04d955bfbe4943517454d481d20967251763f5bdfcdd8dd7"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.67275944s ago: executing program 1 (id=1939): unshare(0x68040200) socket$pppl2tp(0x18, 0x1, 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x1, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000dc03000000000000", @ANYRES32, @ANYBLOB="06000000002000"/20, @ANYRES32, @ANYBLOB="0200000000000000030000000000"], 0x50) pipe2$watch_queue(0x0, 0x80) fstat(r0, &(0x7f0000004080)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000004100)={0x1, 0x1, 0xc0000000}) dup(r2) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x8850) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$sysfs(0xffffff9c, 0x0, 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x3, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, 0x1c) 6.523350619s ago: executing program 2 (id=1940): unshare(0x68040200) socket$pppl2tp(0x18, 0x1, 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x1, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000dc03000000000000", @ANYRES32, @ANYBLOB="06000000002000"/20, @ANYRES32, @ANYBLOB="0200000000000000030000000000"], 0x50) pipe2$watch_queue(0x0, 0x80) fstat(r0, &(0x7f0000004080)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000004100)={0x1, 0x1, 0xc0000000}) dup(r2) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x8850) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$sysfs(0xffffff9c, 0x0, 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x3, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, 0x1c) 5.354388423s ago: executing program 4 (id=1941): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb07000000000000000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 5.345110828s ago: executing program 3 (id=1942): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0x1, 0x19d) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) r8 = syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b44030", 0x7a, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r5, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000002900)=ANY=[@ANYBLOB="5c1200001e00000428bd7000fbdbdf250f00000004002e8073a0e0c6d1134b0e5fbc4b42ffb173171c6dd90c73a0ec9d967c9c51dd267c6611c8548c3a4ddeb8a5e1a54afaf39db4dd154109a3eec959634d17e064e729e8da1a93d45820ea593eee10d2733dda1a43b4963892d6e62a32743d9aa34ed1f91a8d32b57abe1aabd880e239dea3d321516ed6b1b166681028093eb64097cae699d786086503767a9915451dfab816d0afe00587bff3e3a0033b1556bf1e9f56555160e9d3fd2a18b6890e16657dd0c534c1eb088c10b3f857b1adb8d7deab991d7fcb496657f87010076fa1b1db36320eeec498052646da135bf26158c72e66459b93c5cee41261694eae831bd4aefa90f4e873f595938037528ec54acad515c33aa5b5271d29ae0fd20db57f8a3b1feacdf5533f476259aeb8dec3edf2d35bcfbee27ac69587cf6e10dc61184c48f6b4820cb047a5fec39135f0045963b7fe74b7ca1917d39bec34f00031bfef8500572423b4354b0244837b368c828903f68517eb76ba6c42c422d0b95fafef4903919ba5465492ee262774c810876146aeceea855aa1bc6f2c5ae362c1e5cbf74b1c073384faf41f418182190f2dac4b7b61057088439fcc1c55bfb3ceae10eb1a4f5772bd790fedc45696fbad5941b284c499d4bf549c5c9d8c8a4141cc7068c0d9567d7b2347d7729e60ce1e1524fae8dcba3786db2ef2d09d18b0df4ec415f628f693af560baa6f996788eef781210a3a39d1c27c3e87d626caee0be2b09826b931f7f9b893a3bd1d2862f38d59a1f8b4450ba9c335d1c4a18f4412a2b7de061355b694308009af558f7de4c3be9223bf414568b9834abd4e82d8178c5cc8c20824ce35d495cda0196522db9a4325f9a138ebf4c781596200cfbd353df5a120635e245e16a70ad841bf2197862b565bcbe527e093324a9408cdbec303241624c30ff329486a16d37972c3c7a80eb3d166b0dc8ba5e44d5d2f91548d4d08c68f2ff83d035f29c9fe909259561d800a06a7810ded7c93bac64439cfda512c6204f39a4b8526bdac85a7ca4081d9965602985f5ee37f99c27188e47ec8d72cf5a9c8e242f77abfcff50bb26f6ffeed1a6b4888e066ad802360f9a87dee6bc84755cb25425dd22f37de87d383c5e98d4ab6a5847b5d51b003b4c58dc914cfc38cb0e678de11cf0a0fe51f94f09ddad11d23a2a71b847843e173fe031398b872b92218a7b53bfe4d038110dc4823e261728cfcaedaf653fd43dd73261ba165d6620fc7968c2b3c29da081adf92aa27115070de45d8eaf39d7679e91e203ae3ce220addd8966f8591f6dccaf8d11826ba228adb8e290bfce4574bc479a383b72e0e0af6896411d6a728d1d9651dd71651fe4ca71b6ef870a1eeecce4af2094666839ba14dc8617f6ab9e23a0c49573c98da31ee79f5ec4196ea07680a8b254dd0e27309cbe458d89edb43f4a2f3ab7523a757af386a859646db24b5be811e80e90869c2ba4559769b447af7f456d62f1e4c0bef9fe597f92fcdc369c9144f35524e240c23ff9fa52923a21593abdf38c9ac696a1effba3fc1daacfdd0743f61f0c7461a3656718f22b27bda87f10a1ad97cf35ce96a327985232a4cfee82ad37b882bbef3a89289f6bb6105d51aa8fb07ce1654d23f50600eed7c975ff13562061764c695da086afd4dcb086702e3f876f2e14c23414ff2d04f445fa2105e74ef7c2bafa9c3fda0ca8570b0e6553ec6dc27af43e27e2c93300929a0979b5bccb77162aacb7a859f7a7a2fabefe178359cc14f80c92e5c94cafec2aff9cf4c7b53bc9e41e2a23e57586963792cd1343400a24823e656893d25fc0ad5492f40b33bb2d74fed3ccaaf60446cb70f149e9e8aefb0ebd0a7c1ed316188b4c6cfa802922340a63b240b54a6b4748daa4beee68c54e7836b067e38679aab86935c820c2e73744bac1679790eb7e55f6d40722c7b5b0fcefa9d03f2b383ab2457755dd3612f48199f473d61b064abfdcfc3d1b81e312daf3950f9438dab80eecfe9e96c88b7b58f33e30f5a70f30d1188fdcc068029b90be119524b4c704ccf1c00ba56b2980a89025f3f9cf5526020a7c5f2c0e67b78d9899f16fbe4a7f897cb88bb1428ecee46cf0dbb556e3824083242c36c1d2850a783b66e2316f4634dcc29c54657a69f281738b4ee8aa7c8bb8111f6079edd982c6aee9e22aea32ddd1db08862420b99d288f72d3166f6d670f3204691b28859f2bee5ac6b9d4d12b6a9185a05212591feb431272ca7139c95fd1d0c40ddc311b99b2766a23ead1d7e19cf98bec8ff5eb268c3df1d14ab8f4d793fd1a5b38522adb632acbf54336ca3e08bc05c35e51dc91454139e372e7aa07a2ea57c206d1fe8fe36406c2e74cd74121ff92407423d51aed8f622662fc1139aae22b318f122d38eed23d1341df1dd85c75ebccdc643f06253a975fec84bd3c1271a94d2a6f5f4f434d8c5c0209e5e08d2996e4811396c811c290db645adcdb27384c3e23f40c1851f6ec943ead084fa68a4c98482efe5828c206c71e2fdcb4faf223b3839f3c369662a843dce066bcbdf86e583ca8d41ef688e69a71e5314325b76658af24e7b51b48b5e3a8f976d0b4eedfe031432256d438526e6ccf80298224ef6c671a65a2c10c5f12b69c295654a995ffd7b05f45bda7ebf0ba2274a4f4d04986111234408f201041a1f80d87cbaf30d588bd50fe980e10d03c1ea7cb87f294a4ce5d1ee71d6414500bfe241702231379f60135a0d0a8be621a30177bf00058679eec6a8572d115dbd11b5546f1dbb50268d3dcfe9086731881a7c5e1ef7f4da18dd953e8d66455cf9a9eca3491efa7cc31bc0943b3196892a6c1d6e22da8ab89f76c073bd7b5fb6b936347cb79be00c7a97cf74a4957adfbc51fb5881c66e25f23d8dd1ffd5d86dddbdb119cb0a06d5d443c3f522a90320d69defae31be9f6c61fca317e106637310a0b61e9cee6f9f5178381e890c09f9975f98caafcebb0a2653bcb5dbdb669b1a4a1ac42c5d69a59d6699bd93e0fe4f98f32444a75b51383c95a76fe2fafd2d62397f45fad8b046a4fae4ab3c362368fbf08f73f8c24ca595b27d93f596ec7e5a1677949412844b70dde3851f9802e9589c55e05f7c630efbb11aaf8273acca943e211a4757bfcd86d7a02f6c364a25084c5f2f9340c26fd6493bf40296c7bb64f5bd5ce9de5329bf36a7a993a0047c8a734a67d1ee9a1ae9e303beca7c9dc4fdf8e0308e1cff91fbdcc76f4cb39dc6e57a4ace2bd94ff9fd9d6b5e61c866aefcad2e801fdf833ceb362ef024a84ad63528917240e69ed87bc938b72afb6ec44075fcf780cb2ce77e9b6925330a131ab9be6d689220b152df9239be3df8d54de367e3923254973f8c16393e42fc47d77e171569744e98a2df91290324bd643c1e9f5ff0232d41d502cad796d87163a54bb54db2a0713e3b39f2763560c7945ef8935d9bc2e5c150b9c7d7ead67bbcd34b53180fb7e2094bbd16380f95e5892d521b32ba2af8db608900a675890133b86cbb8971684bf020dfa91ba9216e3b64458924dcea864e1bfaab592574e3a4cb7d4f7275dc13299f0e91241880d5e5053c6db4ba8902253a7afd3d10c95563be67ff6fa03093a27880c1851f9c5d105bd89acfbaebe62a75863a6d5566c8faefc8780b4d7814ba9b1a8075bb566a05448022cbda913a6262f43b5d74e9c08599305ee31ed20b84cb5e3f0e26a093c0cd50ed3a2503732d2ceaae06de53b7d7929edfbf6459a0798a7d1ae738131a6924953031e0737b246ce5a2874bac27dd3bda0d4d91aec39aa3d2a6e1b99c3be4744501d4eaa010118fb47110ff426ac02bbd905d0d697ef0e8a4757db2c63d16d71d6518456d2088a7b156d3cbf094352221775fd9167c3118f630708870862e95f1ec00844a1992941ac35557df45d63754d4fd1d9f362ce3cd773f4fbb6162fee1f4e40688605f997cf21644b083be3ea1914d1436ed1020eb94adbf847620f7fd891ab7f8f061284f20f1f256e68319a737c962fbae5500bfc22e6fec2e845ee586d5f52ccb3d7ad1c12a085b5be790b7ca899dc82c544c45f7fa28f086848391118e713bd19d7fa825af5ad93e59a6479bbc65fe536c2ac9550c68a7b966d33fcd60df44dcdd64c1ab0a0ce05ef09f4d26a271c61253a0361e5ab1461beb1eb0d605ce5cdaab193e3bcb14c4b0559e32b36a670b5263f022ee2f4ef717b7a492a1228f6101bd7cfeddb4bfae0d1595ef32cf8d9405c26738db5af78855d053c181678307575233e2cdc748fad32c794b3e9fa1f68855cb8790f8b51e74a3cecab26fc0026087e5aba46215ca7835ae52fa049be992ab1cafb502ab293ab1115ad34c780c114e9a21910a36c0b72e8cb387fb8303e81041d16bca1360914bc8a3cc13b3e949ca4fac18e7a35290f901ae57fcb108556b4c0bf5daaadd416024fd6c85139fed66cf498207c47e5445ec8201b1be05dd4a1d412d444bb8ea9932401655a84c29c8f26536aa7331a1a82f4b4b1ad8f3fe78f7e536666077e6a371c2180034ab297447dc94924371cbb41c7c93f5d7d9e0a609584c616ca8857da68b6cd86dda387e4d9f29cd8306cea9558352057b30da8c3b97e616c8da1832aac520134308b872a80abf26061f6690ab600f121546a1fb24d9c3866484df47717b202940b20718093d98903b1fdf9f615e28bfd93ef3482b5b29572853e05052136b3f71bb72395d738380f2405f5dd288b9ad62f43e2944ca911a7abdef4d1f78b40b459d967d2b0427c2aa5836c9a09da0e9b2ea152d97c7eb67a205b58fdbf6925e851268eee73e21398b2e9c8002b64a80bb01b00e5264f7428c3a9e4c43769db9aaaf6705993e321f9a323c0441690a795056a22988b493a596a1b5008db5214046a4317849b9103ec2bc5f765a3c4cb5c8610075b93fd6bc82caf64e462d0a0530a9775f4e2e08a73baa022bc54248d2d7c1466247a3ab91743c6da1e923e4324a580e3f4de7a1f2f727cbb87fd06892da555c58a8c664706d220b85418165dd6ff0f2ba3960a5d84a14d97d7a24e587349215f83af76de78753d783320281b821dafc6f460910e8053668763f85e3f8d3777eda7238cd7b094710b31e54ef3db4ba47710c1291da154ee968985e185601cef26204bcfddde11ffc0594530c61ec1371fbd83c2a01311b3a63e1d6fa2e4717be849e9d40cd63c6dfaddad502c28dcd4f4a30e46e2d0344682bffca7120bc93bfa8d7040945802c7e04a80e7dbd639a20f2d6a19c37f8279ab7aee5b2d2499c0f7d833f93bb1c041c8473c7c16055b6c7cfbf3c479a3bd710e3d147dec90a0df494a17c72535f2644346bdb97f01f008939c87d4e1ec215e59ced343ebd2548d00525834d026addca3c7a98d19c3d03caa4343d58a8e239d72701d5773db74f97fb1386c21180d0928009e7fc53626c10639764c4f0ed56fc2d078508fde9fb6637072d1fd8c31e68123b609926018ce927e4325ed39b6fd8bc132e66058455b56c4bcf99f65ef4965be4b987580808e6fb9f9c4c38fcc1be5e64bc13e69fdf5b9d5701935354126b8d774c156ceaba511bf7221d320dc323b135948264b7cbf79414c2fee9ebf29188a4b4d6b7bd5310ebacfec7b39eb6f61ea149f830a779c7b8b9c1083f3daeb675ae414337e5b18af7bca4791ee9b8851e3abe487d6105c51a33b67ed3d5da2353596e00897871138dd3d39c0d869b2a859e7655e847c12a12ee5c23e5bf781573520f74846257c019bf35c110beca532579c64e9afd3e7984e30bf9db1d550bdaa8e72eafe6291b2dfebc83fb57c251bad314a9cf570642f5382c5bf8e650ebb75255f73bb31ea81f17008ed6e8e3a3f2737c5de492ed49a2ccf6a6f4193d790bd6f67610eeccf1a7e40b3872107fca40bbea1e0021f20c83d48bd444f160e57534c19b4fa2a667ea9889bd88ab125a45e9e36894c353c49d267a1e76420625d2361ffebf003b8006009a002900000008001d00", @ANYRES32=r8, @ANYBLOB="f40b72021ed77df534f8dff6feac10c4957969f86be3a92cafdfa6250f100e94888aa9651d46ec604b426be3fd9fb64253280b63d35f97769355debd718bf5d2a9757c997459baa7b53a209b7358dd140715f5a3c4f977383eb33c6c66b1d6f36217978c5a1fe4aa3efde30f06034aeed1f2781c442f57c7bceae30a964813a627f7ea2443234e75e326b264aa763fe0b85c578d6b5179f00248cec21243268b9334ff41fc14eeed61d621ffc5f002e5e1320081006e80d07dd1d7c6c71da1dd0586b2c3fc7617425394fc658a3b91d0fcbe262adb3a8cee6ac46c12d0f995a05e82bcdc1b2d4ba150c6dadeedbfb63a7a050fb7639e2f3285451eacec7ed39a84a5298e70f37285255ebdba3b140b589bec32fd24222e0891e40400c48004004a8008009a0002000000", @ANYRES32=r9, @ANYBLOB="00000014001700000000000000000000000000000000010800b28004003280d6955d5c331c9c131a3337f8ac0ab66ad8fc00e3dfbf30ff493c5d30bc24ecaaf606d8801139ea44c6ce412d4c3705f4902b39361df57a5b79299b835b0225d923737b9a7b71535cc50c93e44a44a00bb49da1a5cb8cd01930faff0000"], 0x125c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002c00010000007214c3f4482a684460b4b04f5fed8d7240d2930896b93ae514f3635fd3ab1cdb364626d0fd153f13626302af191ce8e2d514f423b2bee441c1d71f9c6d48fec569fc63856b9ef315e3bd156523e0e2757607879a0f784f5f4365b78f04d955bfbe4943517454d481d20967251763f5bdfcdd8dd7"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.50407645s ago: executing program 4 (id=1943): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x1, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[], 0x50) pipe2$watch_queue(0x0, 0x80) fstat(r0, &(0x7f0000004080)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000004100)={0x1, 0x1, 0xc0000000}) dup(r2) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x2, [@remote, @loopback]}, 0x18) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x8) 4.502658642s ago: executing program 1 (id=1944): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000001640)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r1, &(0x7f0000002680)="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", 0xfff) 4.305155315s ago: executing program 2 (id=1945): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x1, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[], 0x50) pipe2$watch_queue(0x0, 0x80) fstat(r0, &(0x7f0000004080)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000004100)={0x1, 0x1, 0xc0000000}) dup(r2) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x2, [@remote, @loopback]}, 0x18) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="737099a1a2e3ada6b2"], 0x8) 3.904149265s ago: executing program 0 (id=1946): syz_emit_ethernet(0x62, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60004000002c0600fe8000041734ebbe517ee46bbd05be4c30000000000000000000000000aafc0100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000"], 0x0) 3.652187588s ago: executing program 0 (id=1947): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000", 0x8}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 3.611970117s ago: executing program 0 (id=1948): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) shmdt(r6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) capget(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14140000", @ANYRES16=r2, @ANYBLOB="010329bd7000fcdbdf2524000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xfefc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r7}, 0x68) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240), &(0x7f0000000140)=0x8) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) 3.038321136s ago: executing program 3 (id=1949): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x5) write$binfmt_misc(r3, &(0x7f0000000400)='u', 0x1) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000140)="05767806e4e05f1a477643a089562670e51b7a94c40612b88545960af2ae0dace55eab7416d740b298137adfe13f988d3e976217e1b1a71d9b2380be92bb3f69e13e3ed7feeb8d0d4510123051677b52dd5e5e601cc5bd64d20224e6bcc2169185810a193ba35ba4477d2829dcf542a395d4e941dd29144155074c3a6a990a045658da2416c933c5c01a6a07304fa14fea224d55c89dc3573eb6fa98abba0b3e303ecd9819443ac9ff741843c661b7157b51fbd90f043d9e447097dd5d6201dd07f45af440d9a9b559851dbbc6854fa704759fb959196e76edb019d90319a64d2910e76ab25b0cbc27b7fabc12e96eaa82be75fcd22aabbf8c", 0xf9}, {&(0x7f0000000300)="15c7e6", 0x3}, {&(0x7f00000002c0)="2d1453c4906bd6d74acdfb7ec3ac409b140b592571738325d51062dc767692733a0a8450957375933341c0550a049dfd387e92c60915", 0x36}, {&(0x7f0000000240)="d635c57ffc5dbd7e2ccab71c8932d5dc6b527b78d5613de5f9cc19cdba65ddb7", 0x20}, {&(0x7f00000000c0)="fe8df6389a91cc6f6a154c20a1", 0xd}, {&(0x7f00000006c0)="02f2a7db76e0ef4562c1f68e20f3db97a13a1a9538d4109d1cc5f24010a456c7e73adcc9a0ff1dae2b49cd158cede8f2bf6e7b9b329301e974acae5ce9f5cac07aae8d90396016a27ff6d1214accd7f54318eaf31ce1d2bfb1ed21b895f415cb46cfc966be2218bd93b26c0156d791aed2ec26e740445da8dc22cd56e40b264549d213d6d9544d77bcda98b0067fb75dcf4472ce", 0x94}, {&(0x7f0000000600)="7a284c4653d6c4964bc629b0c3aa8721c44b8e6c0e753174b543139d4fc0986c659a9bc671b8684ae5eb348554a047c598e71075899767f9cc5fca40c2e84bf8609b3bb69dbc8e2a397d87daef5277df058bcdeaa98422c45c59223990e2901317ce0537a12e0ae6e11e5cda70046544ef529555b73cbee2e967d84476780cfd6f356df9a08c645b509db07803a8193d189f8f153edf019e6ea5651125488f7a0035cc4855e434e4544f57", 0xab}, {&(0x7f0000000900)="9874b0979fa16ab4a68069b9a4dd89ab4bde245eab37e9232c271d5f0f9599526a63b5fa2c35024dad245e8d76d97a65d93d4dacb1279e1441ec7a528ebcffcd96d8e17117940a522ff61843a59c3b2fdad96b53cbabca92e87bb89570928f5beac5907934126058c68cfa0caed7872efb147f0e796005b5089ebe097faac889556902c1d443975ed11a41470335c1ed8f958ec7668f174c2e84c7fc951d81e45b7360be797f5f709e98cac158273653a92e8db8675c17fc88a56410bde2125538c9e369ba79479165f21630d8a3b8f3612566138436d73c89c218608f1a1f0aa5f8e3c7ba14b21837b6fb0c5582c20760db61460578e5", 0xf7}], 0x9) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000500)={0x1, @pix={0x4ed, 0x3, 0x59455247, 0x2, 0x0, 0x4, 0xb, 0x8000001, 0x1, 0x0, 0x0, 0x3}}) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @rand_addr=0x64010101}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r10, 0x80044801, &(0x7f0000000100)) sendto$inet(r8, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1e0a}], 0x1, 0x2041, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000003c0)={0x0}, &(0x7f0000001a40)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000001a80)={r11, 0x72, "8adf569db58c2d0204f015c16ed65d4b40237fb6e91fbba02588897bc89d31f018c31fa449ecb588984fedb2c69d54196bc5f2018530fa9b531ae15ce52aa98afaaf6692dc5c33e008a963282f412b863de82d666c7c43c75a4ed7df1f28cdc63270768000a01a043cefe7bc83dbbc7af663"}, &(0x7f0000001b80)=0x7a) ftruncate(r8, 0x5) 2.879239635s ago: executing program 1 (id=1950): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r2 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) keyctl$link(0x8, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, r2) socket$inet6(0xa, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={0x0, 0x190}}, 0x400c4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe6, 0x35, 0x55, 0x40, 0x5ac, 0x290, 0xdc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x2}}]}}]}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, 0x0, 0x0, &(0x7f00000a5000/0x1000)=nil, 0x1000, 0x10001}) 2.346823857s ago: executing program 3 (id=1951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000fbdbdf250b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) close(r6) write(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x7db9d000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x24040090) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r10, &(0x7f00000007c0)={0x2020}, 0x2020) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) 2.122708625s ago: executing program 4 (id=1952): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x5) write$binfmt_misc(r3, &(0x7f0000000400), 0x0) writev(r2, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000500)={0x1, @pix={0x4ed, 0x3, 0x59455247, 0x2, 0x0, 0x4, 0xb, 0x8000001, 0x1, 0x0, 0x0, 0x3}}) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @rand_addr=0x64010101}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r10, 0x80044801, 0x0) sendto$inet(r8, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1e0a}], 0x1, 0x2041, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000003c0)={0x0}, &(0x7f0000001a40)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000001a80)={r11, 0x72, "8adf569db58c2d0204f015c16ed65d4b40237fb6e91fbba02588897bc89d31f018c31fa449ecb588984fedb2c69d54196bc5f2018530fa9b531ae15ce52aa98afaaf6692dc5c33e008a963282f412b863de82d666c7c43c75a4ed7df1f28cdc63270768000a01a043cefe7bc83dbbc7af663"}, &(0x7f0000001b80)=0x7a) ftruncate(r8, 0x5) 2.015475173s ago: executing program 2 (id=1953): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb07000000000000000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.563379967s ago: executing program 2 (id=1954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x7fffffff, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8800e000a003378ba83050019020600090007000500585f840c1639257d63662c113fdebf3a3bea668ebe30d67303c15d6770d5d56a0e817c05a09560"], 0x13) prctl$PR_SCHED_CORE(0x2c, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) bind$packet(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00'}) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read$FUSE(r6, &(0x7f0000002200)={0x2020}, 0x2020) epoll_create1(0x80000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) 459.531083ms ago: executing program 0 (id=1955): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfd85) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xa, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x3, 0x1, {0xa, 0x4e20, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001380)="2b34f1ec89e062e8d6c60f2ad3405e74d8919a0d25781547edc09c19df6404607f3d600ddb1f60f141ab916a90e85bb4555edd7774f933f19a5b32", 0x3b}, {&(0x7f00000013c0)="f598c7245c4f0f6bad98f2df4e0f62c4be6f3c658faae4446e38a97f9c6f89f3e7a508aa0d37060f6b4066e25d1ae976550222d3eeb539fe286f4f10b2dd1f1ad71b428613a4fd8973905cae9a0bada846bcf9ef07dda917a3a96a85a5ca9f61a3465dc278871d173208c0055ab07f42fe544e5e8dc9cdef5713677008daebd0531e7b73d8bca7c387f46bb46b58e034432ffb9b78804f787fa0cd672f530ac1b9198b0ba22d", 0xa6}], 0x2, &(0x7f00000014c0)=[{0x94, 0x110, 0xfffffff8, "e9e8440211c0312bcc87c4c15d8df90c7e42045747374df67d513d076c2df889faf20607566a8edaa359dc9ddcf12a536bc3d0edba100e3c15a25a548a2fdec0194aaa687108706041a35ed4c9b565a755b99f7d93d62ac25f7f1960c6c310db7e578c813fc97f10513c9cc9fecc4e8e79c8c7e65e2f0af1033f7d01d8ef435ade534f9f9a70a4"}, {0xac, 0x104, 0x10000, "5a07f2547233e98cc4a4c0398c3a5fae3bf72812913f375b6f529e213ab88e2836260b136a77f4816b7fbea79faaf2977941a3bf706e41d1182c83fadbbd1ad6be7f7372dca61033f82f71847ea70acc3b925d10cc9f21ce92702c3651cb83351e53e5ae45c808d604fd27c05373f1810dd3714b007f38247434cc775a23c1a225418fad215f322d4d8d6d1f1f0621f755cb47e9ef611810cd858ebe5d6e"}, {0x54, 0x117, 0x8, "05d0193ef65e9b157619907c7017b64369fcd5b65e98d3d7dd77efbd9e5addf3d26d402e6f4e1a188a052b846f9278ba4495b7af9abce03f62484ff45351b0b1755a98d974"}], 0x194}, 0x20000012) rseq(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)="2936980a6174406ccf13844ca968e8762707688f52ef79a9489c0256feac57d7b3b32c46be762bb97cbc7417e6f55c9a98af6cbf63a385a381f43ae5d52d8a73b43bde63587df3b3e2b29969bdadc226f1a975aa2c65d4d9899c680537594e21297c5bcc9855446c460501479f5f57a4429a658612633dd908158edee5ac483f0e40409a380b9c7226dcd3b00ae799df06d2be71118d054f237f7fdcb335119b883d16f10c6b4c584a0b7078ad167ab0a9b3e5518353b1fd4756d66e4035b84bcbec3874588dd848b4cd29a4373385bade9b1aa41b5d8453dcd3d7249decb96ff6", 0xe1}, {&(0x7f0000000140)="46a90e07b7b7d16d44adac2a06e27b5bef1daf3a02fd6069c079309241c8f87d2f1c54ca3027d95d82c83be7d5657c4b34ff63fd01f087828038fd53dcf0f37335913b8775154bf8e439520637424cacebebba3e436c862b624ec6435523ad0ef356", 0x62}], 0x2, 0x1) write$UHID_INPUT(r4, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x10d00, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000a22000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/188) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) mmap$KVM_VCPU(&(0x7f0000cce000/0x2000)=nil, 0x0, 0x0, 0x80010, r6, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000130500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a57ab49"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1956): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x8eb, 0x0, 0x7fffffffffffffff}]}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x4, 0x0, 0x400003}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000380)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xffffffffffffff34) accept4$unix(r4, 0x0, 0x0, 0x80800) read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7) kernel console output (not intermixed with test programs): , idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 582.590755][ T9960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.609190][ T9960] usb 4-1: config 0 descriptor?? [ 582.653231][ T9960] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input51 [ 583.228763][T11629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 583.775787][T11629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 583.782590][T11629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 583.789289][T11629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.802917][T11629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 583.832237][T11622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.882867][T11622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.941585][ T5838] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 585.077376][T11661] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 585.122329][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 585.160132][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.183303][ T5838] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 585.347729][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.364705][T11658] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 585.407316][ T5838] usb 3-1: config 0 descriptor?? [ 585.489801][T11658] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 585.500854][T11658] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 585.508665][T11658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 585.537246][T11658] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 585.634795][ T9960] usb 4-1: USB disconnect, device number 31 [ 585.898857][ T5838] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0054/input/input52 [ 586.043887][ T5838] creative-sb0540 0003:041E:3100.0054: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 586.352964][ T9960] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 586.417691][ T9960] hid-generic 0000:0000:0000.0055: hidraw1: HID v0.00 Device [syz1] on syz0 [ 586.976482][T11689] ip6tnl0: Caught tx_queue_len zero misconfig [ 587.078942][T11567] Bluetooth: hci1: command 0x0c1a tx timeout [ 587.379525][T11697] binder: 11691:11697 ioctl c0306201 0 returned -14 [ 587.412727][T11697] binder: 11691:11697 ioctl c0306201 0 returned -14 [ 587.558964][T11567] Bluetooth: hci4: command 0x0c1a tx timeout [ 587.559006][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 587.565097][T10055] Bluetooth: hci2: command 0x0c1a tx timeout [ 587.577175][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 587.728252][ T5838] usb 3-1: USB disconnect, device number 63 [ 587.946503][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 588.749431][ T5922] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 588.817752][T11725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'. [ 588.920584][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.943205][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.083892][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 589.125440][ T5922] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.218037][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.233111][ T5922] usb 4-1: config 0 descriptor?? [ 589.522897][ T9960] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 589.554406][ T9960] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz1] on syz0 [ 589.667902][ T5922] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 589.848716][ T5838] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 590.118967][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 590.136092][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.161060][ T5838] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 590.178026][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.216337][ T5838] usb 5-1: config 0 descriptor?? [ 590.659074][ T5838] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0058/input/input54 [ 590.790689][ T5838] creative-sb0540 0003:041E:3100.0058: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 591.174201][T11761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1446'. [ 591.896462][ T9960] usb 4-1: USB disconnect, device number 32 [ 592.382656][T11768] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 592.389987][T11768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 592.397447][T11768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 592.479579][T11768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 592.591156][T11768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 592.629083][ T5922] usb 5-1: USB disconnect, device number 57 [ 593.807954][ T5922] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 593.908027][ T5922] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 593.958775][T11567] Bluetooth: hci1: command 0x0c1a tx timeout [ 594.207527][T11791] fido_id[11791]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 594.448837][T11567] Bluetooth: hci0: command 0x0c1a tx timeout [ 594.454014][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 594.528927][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 594.598730][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 594.718826][T11806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1456'. [ 594.872401][T11812] netlink: 652 bytes leftover after parsing attributes in process `syz.4.1457'. [ 595.208642][ T5922] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 595.269237][ T5838] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 595.568669][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 595.576557][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.606993][ T5922] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 595.639630][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 595.676997][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.760416][ T5838] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 595.773037][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.774070][ T5922] usb 4-1: config 0 descriptor?? [ 595.787376][ T5838] usb 2-1: Product: syz [ 595.793940][ T5838] usb 2-1: Manufacturer: syz [ 595.802952][ T5838] usb 2-1: SerialNumber: syz [ 595.871703][ T5838] usb 2-1: config 0 descriptor?? [ 595.961533][ T5838] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 596.294779][T11829] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 596.327954][T11829] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 596.337998][T11829] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 596.353036][T11829] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.375889][T11829] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 596.416786][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.431901][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.445050][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.460911][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.539487][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.552954][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.571393][ T5947] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 596.590906][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.609447][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.610672][ T5947] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 596.653865][ T5922] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:3100.005B/input/input55 [ 596.849650][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 597.037035][T11816] team_slave_0: entered promiscuous mode [ 597.043513][T11816] team_slave_1: entered promiscuous mode [ 597.050930][T11816] macvtap1: entered promiscuous mode [ 597.062201][T11816] team0: entered promiscuous mode [ 597.085345][ T5922] creative-sb0540 0003:041E:3100.005B: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 597.147105][T11842] fido_id[11842]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 597.197578][ T5922] usb 4-1: USB disconnect, device number 33 [ 597.203816][T11816] macvtap1: entered allmulticast mode [ 597.450458][T11816] team0: entered allmulticast mode [ 597.455662][T11816] team_slave_0: entered allmulticast mode [ 597.508702][T11816] team_slave_1: entered allmulticast mode [ 597.545628][T11816] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 597.629025][T11849] fido_id[11849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 597.768191][T11844] team0: left allmulticast mode [ 597.784591][T11844] team_slave_0: left allmulticast mode [ 597.802885][T11844] team_slave_1: left allmulticast mode [ 597.809070][T11844] team0: left promiscuous mode [ 597.814776][T11844] team_slave_0: left promiscuous mode [ 597.820987][T11844] team_slave_1: left promiscuous mode [ 597.961394][ T5838] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 597.998210][ T5838] visor 2-1:0.0: probe with driver visor failed with error -71 [ 598.028690][ T5838] usb 2-1: USB disconnect, device number 47 [ 598.041273][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 598.368892][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 598.369054][T10055] Bluetooth: hci0: command 0x0c1a tx timeout [ 598.384265][T11567] Bluetooth: hci2: command 0x0c1a tx timeout [ 598.448710][T10055] Bluetooth: hci4: command 0x0c1a tx timeout [ 598.469056][ T9960] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 598.642040][ T9960] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 598.663430][ T9960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.689408][ T5911] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 598.697053][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 598.719189][ T9960] usb 4-1: config 0 descriptor?? [ 598.768964][ T9960] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input57 [ 598.891409][ T5911] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 598.899874][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 598.909054][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 598.920311][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 598.954083][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 598.961556][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 598.970805][ T24] usb 3-1: config 0 has no interface number 0 [ 598.977097][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 598.999487][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.015853][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.075792][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.091290][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.111620][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 599.130412][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.138755][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.157669][ T24] usb 3-1: Product: syz [ 599.162135][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.175056][ T24] usb 3-1: Manufacturer: syz [ 599.179954][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.191096][ T24] usb 3-1: SerialNumber: syz [ 599.247304][ T24] usb 3-1: config 0 descriptor?? [ 599.278780][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.294436][ T24] smsc75xx v1.0.0 [ 599.300328][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.312989][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.324694][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.342887][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.354566][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.394727][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.420698][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.456646][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.500544][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.549167][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.597377][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.624672][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.638430][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.655766][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.782527][T11882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 599.787615][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.796354][T11882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 599.807711][ T5911] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 599.817735][ T5911] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 599.821654][T11882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 599.833927][ T5911] usb 5-1: Product: syz [ 599.839763][T11882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 599.846088][ T5911] usb 5-1: Manufacturer: syz [ 599.852799][T11882] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 599.860578][ T5911] usb 5-1: SerialNumber: syz [ 599.872724][ T5911] usb 5-1: config 0 descriptor?? [ 599.894050][ T5911] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 599.926540][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 599.968001][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 600.096466][T11865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.116214][T11865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.144126][ T5911] usb 5-1: USB disconnect, device number 58 [ 600.152799][ T5911] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 600.236550][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 600.297796][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 600.357025][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 600.393735][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 600.423728][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 600.473206][ T24] usb 3-1: USB disconnect, device number 64 [ 600.480343][ T5838] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 600.547693][ T5838] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 601.099203][ T5922] usb 4-1: USB disconnect, device number 34 [ 601.118654][ T5838] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 601.288899][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 601.330602][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.346807][ T5838] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 601.370578][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.411972][ T5838] usb 2-1: config 0 descriptor?? [ 601.492696][T10055] Bluetooth: hci1: command 0x0c1a tx timeout [ 601.563880][T11907] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 601.668695][ T5922] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 601.890131][ T5838] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.005D/input/input58 [ 601.898843][T10055] Bluetooth: hci0: command 0x0c1a tx timeout [ 601.902368][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 601.916225][T11567] Bluetooth: hci4: command 0x0c1a tx timeout [ 601.919073][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 601.928864][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 601.942606][ T5922] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 601.954152][ T5922] usb 4-1: config 1 has no interface number 0 [ 601.961670][ T5922] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 601.979238][ T5922] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 602.008718][ T5922] usb 4-1: config 1 interface 105 has no altsetting 0 [ 602.034512][ T5922] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 602.043745][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.058825][ T5922] usb 4-1: Product: syz [ 602.063048][ T5922] usb 4-1: Manufacturer: syz [ 602.067656][ T5922] usb 4-1: SerialNumber: syz [ 602.106649][ T5838] creative-sb0540 0003:041E:3100.005D: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 602.137190][T11900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 602.194524][T11900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 602.642638][T11900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 602.654632][T11900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 602.904210][ T5922] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 602.940649][ T5922] aqc111 4-1:1.105: probe with driver aqc111 failed with error -32 [ 603.363882][T11932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1481'. [ 603.883833][ T5922] usb 2-1: USB disconnect, device number 48 [ 603.913571][T11940] FAULT_INJECTION: forcing a failure. [ 603.913571][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 603.926684][T11940] CPU: 1 UID: 0 PID: 11940 Comm: syz.2.1490 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.926718][T11940] Tainted: [L]=SOFTLOCKUP [ 603.926725][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.926737][T11940] Call Trace: [ 603.926746][T11940] [ 603.926755][T11940] dump_stack_lvl+0xe8/0x150 [ 603.926788][T11940] should_fail_ex+0x414/0x560 [ 603.926814][T11940] should_failslab+0xa8/0x100 [ 603.926842][T11940] __kmalloc_noprof+0xdf/0x800 [ 603.926863][T11940] ? nla_strdup+0x9d/0x140 [ 603.926887][T11940] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 603.926912][T11940] nla_strdup+0x9d/0x140 [ 603.926940][T11940] nf_tables_newtable+0x491/0x1890 [ 603.926962][T11940] ? nfnetlink_subsys_unregister+0x172/0x1b0 [ 603.927010][T11940] nfnetlink_rcv+0x11d9/0x2590 [ 603.927071][T11940] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 603.927115][T11940] ? ref_tracker_free+0x63a/0x7d0 [ 603.927178][T11940] ? __netlink_deliver_tap+0x807/0x850 [ 603.927208][T11940] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.927256][T11940] netlink_unicast+0x82f/0x9e0 [ 603.927292][T11940] ? __pfx_netlink_unicast+0x10/0x10 [ 603.927316][T11940] ? __alloc_skb+0x198/0x3a0 [ 603.927341][T11940] ? netlink_sendmsg+0x642/0xb30 [ 603.927368][T11940] ? skb_put+0x11b/0x210 [ 603.927397][T11940] netlink_sendmsg+0x805/0xb30 [ 603.927437][T11940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.927470][T11940] ? __import_iovec+0x5d4/0x7f0 [ 603.927495][T11940] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.927526][T11940] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.927546][T11940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.927578][T11940] __sock_sendmsg+0x21c/0x270 [ 603.927614][T11940] ____sys_sendmsg+0x505/0x820 [ 603.927648][T11940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.927682][T11940] ? kstrtouint+0x6e/0xe0 [ 603.927711][T11940] ___sys_sendmsg+0x21f/0x2a0 [ 603.927741][T11940] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.927768][T11940] ? get_pid_task+0x20/0x1f0 [ 603.927795][T11940] ? get_pid_task+0x20/0x1f0 [ 603.927819][T11940] ? get_pid_task+0x20/0x1f0 [ 603.927878][T11940] ? __fget_files+0x2a/0x420 [ 603.927903][T11940] ? __fget_files+0x3a0/0x420 [ 603.927941][T11940] __sys_sendmsg+0x164/0x220 [ 603.927971][T11940] ? __pfx___sys_sendmsg+0x10/0x10 [ 603.928007][T11940] ? __pfx_ksys_write+0x10/0x10 [ 603.928041][T11940] __do_fast_syscall_32+0x1dc/0x570 [ 603.928069][T11940] ? lockdep_hardirqs_on+0x7b/0x110 [ 603.928090][T11940] ? do_fast_syscall_32+0x34/0x80 [ 603.928113][T11940] ? irqentry_exit+0x10f/0x670 [ 603.928140][T11940] do_fast_syscall_32+0x34/0x80 [ 603.928172][T11940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 603.928199][T11940] RIP: 0023:0xf7fd7539 [ 603.928217][T11940] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 603.928237][T11940] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 603.928259][T11940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 603.928273][T11940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 603.928286][T11940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 603.928298][T11940] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 603.928311][T11940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 603.928343][T11940] [ 604.379763][T11942] FAULT_INJECTION: forcing a failure. [ 604.379763][T11942] name failslab, interval 1, probability 0, space 0, times 0 [ 604.450176][T11942] CPU: 0 UID: 0 PID: 11942 Comm: syz.0.1489 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.450202][T11942] Tainted: [L]=SOFTLOCKUP [ 604.450208][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.450217][T11942] Call Trace: [ 604.450223][T11942] [ 604.450230][T11942] dump_stack_lvl+0xe8/0x150 [ 604.450256][T11942] should_fail_ex+0x414/0x560 [ 604.450275][T11942] should_failslab+0xa8/0x100 [ 604.450296][T11942] __kmalloc_noprof+0xdf/0x800 [ 604.450311][T11942] ? nla_strdup+0x9d/0x140 [ 604.450328][T11942] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 604.450345][T11942] nla_strdup+0x9d/0x140 [ 604.450371][T11942] nf_tables_newtable+0x491/0x1890 [ 604.450386][T11942] ? nfnetlink_subsys_unregister+0x171/0x1b0 [ 604.450418][T11942] nfnetlink_rcv+0x11d9/0x2590 [ 604.450467][T11942] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 604.450497][T11942] ? ref_tracker_free+0x63a/0x7d0 [ 604.450533][T11942] ? __netlink_deliver_tap+0x807/0x850 [ 604.450554][T11942] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.450587][T11942] netlink_unicast+0x82f/0x9e0 [ 604.450611][T11942] ? __pfx_netlink_unicast+0x10/0x10 [ 604.450629][T11942] ? __alloc_skb+0x198/0x3a0 [ 604.450647][T11942] ? netlink_sendmsg+0x642/0xb30 [ 604.450667][T11942] ? skb_put+0x11b/0x210 [ 604.450687][T11942] netlink_sendmsg+0x805/0xb30 [ 604.450715][T11942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.450738][T11942] ? __import_iovec+0x5d4/0x7f0 [ 604.450755][T11942] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.450778][T11942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.450791][T11942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.450814][T11942] __sock_sendmsg+0x21c/0x270 [ 604.450840][T11942] ____sys_sendmsg+0x505/0x820 [ 604.450864][T11942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.450887][T11942] ? kstrtouint+0x6e/0xe0 [ 604.450906][T11942] ___sys_sendmsg+0x21f/0x2a0 [ 604.450928][T11942] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.450947][T11942] ? get_pid_task+0x20/0x1f0 [ 604.450966][T11942] ? get_pid_task+0x20/0x1f0 [ 604.450984][T11942] ? get_pid_task+0x20/0x1f0 [ 604.451024][T11942] ? __fget_files+0x2a/0x420 [ 604.451043][T11942] ? __fget_files+0x3a0/0x420 [ 604.451069][T11942] __sys_sendmsg+0x164/0x220 [ 604.451091][T11942] ? __pfx___sys_sendmsg+0x10/0x10 [ 604.451117][T11942] ? __pfx_ksys_write+0x10/0x10 [ 604.451140][T11942] __do_fast_syscall_32+0x1dc/0x570 [ 604.451160][T11942] ? lockdep_hardirqs_on+0x7b/0x110 [ 604.451176][T11942] ? do_fast_syscall_32+0x34/0x80 [ 604.451193][T11942] ? irqentry_exit+0x10f/0x670 [ 604.451218][T11942] do_fast_syscall_32+0x34/0x80 [ 604.451237][T11942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.451256][T11942] RIP: 0023:0xf7f45539 [ 604.451270][T11942] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 604.451283][T11942] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 604.451300][T11942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 604.451310][T11942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.451319][T11942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.451327][T11942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 604.451335][T11942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.451357][T11942] [ 604.964535][ T5838] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 604.973741][ T5838] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 605.156586][ T5911] usb 4-1: USB disconnect, device number 35 [ 605.292640][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'. [ 605.387216][T11960] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1494'. [ 605.678951][ T30] audit: type=1326 audit(1768679850.990:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1497" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d539 code=0x0 [ 605.726518][T11957] bridge14: port 1(veth5) entered blocking state [ 605.743929][T11957] bridge14: port 1(veth5) entered disabled state [ 605.844712][ T30] audit: type=1326 audit(1768679851.170:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1497" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d539 code=0x0 [ 605.867126][T11957] veth5: entered allmulticast mode [ 605.900375][T11957] veth5: entered promiscuous mode [ 606.035232][T11963] bridge14: port 2(veth0_to_bond) entered blocking state [ 606.067816][T11963] bridge14: port 2(veth0_to_bond) entered disabled state [ 606.129352][T11963] veth0_to_bond: entered allmulticast mode [ 606.174964][T11963] veth0_to_bond: entered promiscuous mode [ 606.206333][T11967] bridge14: port 3(veth7) entered blocking state [ 606.247115][T11967] bridge14: port 3(veth7) entered disabled state [ 606.355450][T11967] veth7: entered allmulticast mode [ 606.427722][T11967] veth7: entered promiscuous mode [ 606.866686][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 606.888738][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 606.920670][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 606.939526][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 606.958936][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 606.968729][ T9960] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 606.988701][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 606.999514][T11993] binder: 11992:11993 ioctl c0306201 800001c0 returned -22 [ 607.003838][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 607.039465][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 607.058350][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 607.087500][ T5911] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 607.115550][ T5911] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 607.128764][ T9960] usb 3-1: Using ep0 maxpacket: 16 [ 607.143859][ T9960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.170998][ T9960] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 607.192472][ T9960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.193507][T11995] binder: 11992:11995 ioctl c0189373 800002c0 returned -22 [ 607.232395][ T9960] usb 3-1: config 0 descriptor?? [ 607.720796][ T9960] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0060/input/input59 [ 607.863139][ T9960] creative-sb0540 0003:041E:3100.0060: input,hidraw1: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 609.969635][ T5922] usb 3-1: USB disconnect, device number 65 [ 610.179216][ T5838] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [syz1] on syz0 [ 610.629009][ T5922] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 610.658755][ T1210] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 610.792730][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 610.809010][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 610.820640][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 610.841029][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.860747][ T1210] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 610.874128][ T5922] usb 3-1: config 0 descriptor?? [ 610.891210][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.938448][ T1210] usb 2-1: config 0 descriptor?? [ 611.161083][T12044] netlink: 'syz.0.1517': attribute type 21 has an invalid length. [ 611.175450][T12044] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1517'. [ 611.187570][T12044] netlink: 'syz.0.1517': attribute type 10 has an invalid length. [ 611.269444][T12044] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.282999][T12044] bond0: (slave team0): Enslaving as an active interface with an up link [ 611.438961][T12049] fuse: Unknown parameter '0xffffffffffffffff' [ 611.538784][ T9960] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 611.592125][T12052] fuse: Unknown parameter '0xffffffffffffffff' [ 611.806433][ T9960] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 612.135491][ T9960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 612.146611][ T9960] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 612.157809][ T9960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.193567][ T9960] usb 4-1: config 0 descriptor?? [ 612.398046][T12047] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 612.738155][T12063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.756680][T12063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.939602][T12065] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1518'. [ 613.319718][T11973] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 613.508684][T11973] usb 5-1: Using ep0 maxpacket: 16 [ 613.516874][ T9960] ath6kl: Failed to submit usb control message: -110 [ 613.527776][T11973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.548722][ T9960] ath6kl: unable to send the bmi data to the device: -110 [ 613.585285][ T9960] ath6kl: Unable to send get target info: -110 [ 613.592951][T11973] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 613.625130][T11973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.660759][ T9960] ath6kl: Failed to init ath6kl core: -110 [ 613.679801][T11973] usb 5-1: config 0 descriptor?? [ 613.729932][ T9960] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 614.159147][T11973] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0062/input/input60 [ 614.287432][T11973] creative-sb0540 0003:041E:3100.0062: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 614.322970][ T1210] usbhid 2-1:0.0: can't add hid device: -71 [ 614.344406][ T1210] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 614.452311][ T1210] usb 2-1: USB disconnect, device number 49 [ 614.587431][ T5922] usbhid 3-1:0.0: can't add hid device: -71 [ 614.614994][ T5922] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 614.661655][ T5922] usb 3-1: USB disconnect, device number 66 [ 615.424632][ T5937] usb 4-1: USB disconnect, device number 36 [ 615.654584][T12084] FAULT_INJECTION: forcing a failure. [ 615.654584][T12084] name failslab, interval 1, probability 0, space 0, times 0 [ 615.730075][T12084] CPU: 0 UID: 0 PID: 12084 Comm: syz.3.1525 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.730112][T12084] Tainted: [L]=SOFTLOCKUP [ 615.730122][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.730136][T12084] Call Trace: [ 615.730146][T12084] [ 615.730156][T12084] dump_stack_lvl+0xe8/0x150 [ 615.730191][T12084] should_fail_ex+0x414/0x560 [ 615.730221][T12084] should_failslab+0xa8/0x100 [ 615.730251][T12084] kmem_cache_alloc_noprof+0x88/0x710 [ 615.730288][T12084] ? skb_clone+0x212/0x3a0 [ 615.730324][T12084] skb_clone+0x212/0x3a0 [ 615.730359][T12084] __netlink_deliver_tap+0x404/0x850 [ 615.730403][T12084] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.730436][T12084] netlink_deliver_tap+0x19c/0x1b0 [ 615.730475][T12084] netlink_sendskb+0x68/0x140 [ 615.730505][T12084] netlink_unicast+0x397/0x9e0 [ 615.730530][T12084] ? __asan_memcpy+0x40/0x70 [ 615.730559][T12084] ? __pfx_netlink_unicast+0x10/0x10 [ 615.730598][T12084] netlink_rcv_skb+0x28c/0x470 [ 615.730630][T12084] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 615.730659][T12084] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 615.730702][T12084] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.730742][T12084] netlink_unicast+0x82f/0x9e0 [ 615.730779][T12084] ? __pfx_netlink_unicast+0x10/0x10 [ 615.730806][T12084] ? __alloc_skb+0x198/0x3a0 [ 615.730831][T12084] ? netlink_sendmsg+0x642/0xb30 [ 615.730860][T12084] ? skb_put+0x11b/0x210 [ 615.730891][T12084] netlink_sendmsg+0x805/0xb30 [ 615.730933][T12084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.730967][T12084] ? __import_iovec+0x5d4/0x7f0 [ 615.730995][T12084] ? aa_sock_msg_perm+0xf1/0x1b0 [ 615.731028][T12084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.731050][T12084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.731081][T12084] __sock_sendmsg+0x21c/0x270 [ 615.731123][T12084] ____sys_sendmsg+0x505/0x820 [ 615.731149][T12084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.731186][T12084] ? kstrtouint+0x6e/0xe0 [ 615.731209][T12084] ___sys_sendmsg+0x21f/0x2a0 [ 615.731231][T12084] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.731249][T12084] ? lockdep_hardirqs_on+0x7b/0x110 [ 615.731267][T12084] ? irqentry_exit+0x5e8/0x670 [ 615.731308][T12084] ? __fget_files+0x2a/0x420 [ 615.731326][T12084] ? __fget_files+0x3a0/0x420 [ 615.731353][T12084] __sys_sendmsg+0x164/0x220 [ 615.731374][T12084] ? __pfx___sys_sendmsg+0x10/0x10 [ 615.731401][T12084] ? __pfx_ksys_write+0x10/0x10 [ 615.731425][T12084] __do_fast_syscall_32+0x1dc/0x570 [ 615.731449][T12084] ? lockdep_hardirqs_on+0x7b/0x110 [ 615.731464][T12084] ? do_fast_syscall_32+0x34/0x80 [ 615.731483][T12084] ? irqentry_exit+0x10f/0x670 [ 615.731503][T12084] do_fast_syscall_32+0x34/0x80 [ 615.731522][T12084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.731541][T12084] RIP: 0023:0xf7ff5539 [ 615.731554][T12084] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 615.731569][T12084] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 615.731585][T12084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 615.731596][T12084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 615.731605][T12084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.731614][T12084] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 615.731623][T12084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.731645][T12084] [ 616.204092][ T5937] usb 5-1: USB disconnect, device number 59 [ 616.409254][ T9960] hid_parser_main: 1 callbacks suppressed [ 616.409273][ T9960] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 616.453017][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1528'. [ 616.481694][ T9960] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 616.708811][ T5937] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 616.881685][ T5937] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 616.895820][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.946236][ T5937] usb 4-1: config 0 has no interface number 0 [ 616.964316][ T5937] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 616.995805][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.011396][ T5937] usb 4-1: Product: syz [ 617.021806][ T5937] usb 4-1: Manufacturer: syz [ 617.045172][ T5937] usb 4-1: SerialNumber: syz [ 617.069230][ T5937] usb 4-1: config 0 descriptor?? [ 617.097769][ T5937] qmi_wwan 4-1:0.207: probe with driver qmi_wwan failed with error -22 [ 617.349297][ T5937] usb 4-1: USB disconnect, device number 37 [ 617.708716][T11973] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 617.972593][T11973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 617.989032][T11973] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 618.028848][T11973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.100183][T11973] usb 5-1: config 0 descriptor?? [ 618.478755][ T5922] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 618.663901][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 618.685747][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 618.692964][T12123] fuse: Unknown parameter '0xffffffffffffffff' [ 618.758908][ T5922] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 618.785490][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.847993][ T5922] usb 4-1: config 0 descriptor?? [ 618.866931][T12119] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 619.220465][T12132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.229768][T12132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.319734][T12132] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1535'. [ 619.417026][ T9960] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 619.609281][ T9960] usb 3-1: Using ep0 maxpacket: 16 [ 619.623757][ T9960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.739483][ T9960] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 619.794762][ T9960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.838009][ T9960] usb 3-1: config 0 descriptor?? [ 619.962821][ T5922] ath6kl: Failed to submit usb control message: -110 [ 619.980600][T12139] binder: 12135:12139 ioctl c0306201 80000040 returned -22 [ 620.004383][ T5922] ath6kl: unable to send the bmi data to the device: -110 [ 620.023058][ T5922] ath6kl: Unable to send get target info: -110 [ 620.061327][ T5922] ath6kl: Failed to init ath6kl core: -110 [ 620.083893][ T5922] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 620.155118][T12141] input: syz0 as /devices/virtual/input/input61 [ 620.188351][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 620.331112][ T9960] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0064/input/input62 [ 620.453237][ T9960] creative-sb0540 0003:041E:3100.0064: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 622.100766][T11973] usbhid 5-1:0.0: can't add hid device: -71 [ 622.129695][T11973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 622.166127][T11973] usb 5-1: USB disconnect, device number 60 [ 622.247974][ T9960] usb 3-1: USB disconnect, device number 67 [ 622.454506][T11973] usb 4-1: USB disconnect, device number 38 [ 622.465152][ T5937] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 622.481706][ T5937] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 622.806794][T11973] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 622.845622][T11973] hid-generic 0000:0000:0000.0066: hidraw1: HID v0.00 Device [syz1] on syz0 [ 624.058667][T11973] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 624.168659][ T5922] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 624.244988][T11973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 624.259156][T11973] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 624.268274][T11973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.288071][T11973] usb 3-1: config 0 descriptor?? [ 624.338814][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 624.350893][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.364418][ T5922] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 624.377175][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.403479][ T5922] usb 5-1: config 0 descriptor?? [ 624.588677][ T1210] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 624.751335][ T1210] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 624.761254][ T1210] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 624.770610][ T1210] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 624.781441][ T1210] usb 2-1: config 220 has no interface number 2 [ 624.787856][ T1210] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 624.801831][ T1210] usb 2-1: config 220 interface 0 has no altsetting 0 [ 624.809486][ T1210] usb 2-1: config 220 interface 76 has no altsetting 0 [ 624.816891][ T1210] usb 2-1: config 220 interface 1 has no altsetting 0 [ 624.833461][ T5922] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0067/input/input63 [ 624.866394][ T1210] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 624.879022][T12211] fuse: Unknown parameter '0xffffffffffffffff' [ 624.904195][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.915431][ T1210] usb 2-1: Product: syz [ 624.925674][ T1210] usb 2-1: Manufacturer: syz [ 624.933314][ T1210] usb 2-1: SerialNumber: syz [ 624.941644][ T5922] creative-sb0540 0003:041E:3100.0067: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 625.253418][ T1210] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 625.306186][ T1210] uvcvideo 2-1:220.0: No valid video chain found. [ 625.322631][ T1210] usb 2-1: selecting invalid altsetting 0 [ 625.368086][ T1210] usb 2-1: selecting invalid altsetting 0 [ 625.375972][ T1210] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 625.425271][ T1210] usb 2-1: USB disconnect, device number 50 [ 626.307635][ T5922] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 626.321114][ T5922] hid-generic 0000:0000:0000.0068: hidraw1: HID v0.00 Device [syz1] on syz0 [ 626.958841][ T9960] usb 5-1: USB disconnect, device number 61 [ 627.108735][ T5922] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 627.271017][T11973] usbhid 3-1:0.0: can't add hid device: -71 [ 627.282563][T11973] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 627.319644][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 627.334292][T11973] usb 3-1: USB disconnect, device number 68 [ 627.342219][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 627.374150][ T5922] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 627.391545][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.410801][ T5922] usb 2-1: config 0 descriptor?? [ 627.419863][ T9960] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 627.435729][T12228] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 627.451630][ T9960] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz1] on syz0 [ 627.904985][T12249] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1570'. [ 628.084457][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.109097][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.385756][T12255] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1565'. [ 628.662918][ T5922] ath6kl: Failed to submit usb control message: -110 [ 628.744460][ T5922] ath6kl: unable to send the bmi data to the device: -110 [ 628.987748][ T5922] ath6kl: Unable to send get target info: -110 [ 629.063037][ T5922] ath6kl: Failed to init ath6kl core: -110 [ 629.073214][ T5922] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 629.278716][ T5922] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 629.458642][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 629.473724][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 629.488800][ T5922] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 629.512637][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.554484][ T5922] usb 4-1: config 0 descriptor?? [ 629.736030][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.742845][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.895089][ T5922] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 630.229009][ T5922] usb 4-1: USB disconnect, device number 39 [ 630.826780][ T9960] usb 2-1: USB disconnect, device number 51 [ 631.456504][ T1210] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 631.745461][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 631.766258][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.777439][ T1210] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 631.788828][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.870604][ T1210] usb 2-1: config 0 descriptor?? [ 632.048775][ T5922] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 632.320586][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 632.338412][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 632.358677][ T5922] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 632.386032][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.437351][ T5922] usb 5-1: config 0 descriptor?? [ 632.448866][ T1210] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.006A/input/input64 [ 632.467992][T12292] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 632.470334][ T5937] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 632.611195][ T1210] creative-sb0540 0003:041E:3100.006A: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 632.661403][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 632.716361][ T5937] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 632.810671][T12299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.820663][T12299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.872042][T12299] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1579'. [ 632.922168][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.965924][ T5937] usb 4-1: config 0 descriptor?? [ 633.378971][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 633.541017][T12308] fuse: Unknown parameter '0xffffffffffffffff' [ 633.560592][ T5922] ath6kl: Failed to submit usb control message: -110 [ 633.574689][ T5922] ath6kl: unable to send the bmi data to the device: -110 [ 633.583785][ T5922] ath6kl: Unable to send get target info: -110 [ 633.612591][ T5922] ath6kl: Failed to init ath6kl core: -110 [ 633.648134][ T5922] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 634.501057][ T9960] usb 2-1: USB disconnect, device number 52 [ 635.178846][T12332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1585'. [ 636.088439][ T5937] usbhid 4-1:0.0: can't add hid device: -71 [ 636.116662][ T5937] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 636.131584][ T5937] usb 4-1: USB disconnect, device number 40 [ 636.284175][ T5911] usb 5-1: USB disconnect, device number 62 [ 636.333753][ T5922] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 636.371739][ T5922] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 637.059135][ T5911] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 637.259011][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 637.401311][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 637.744551][ T5911] usb 5-1: config 6 has an invalid interface number: 4 but max is 1 [ 637.753389][ T5911] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 637.763791][ T5911] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 637.783075][ T5911] usb 5-1: config 6 has no interface number 0 [ 637.835950][ T5911] usb 5-1: config 6 interface 4 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 637.856199][ T5911] usb 5-1: config 6 interface 4 altsetting 4 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 637.869878][ T5911] usb 5-1: config 6 interface 4 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.889324][ T5911] usb 5-1: config 6 interface 4 altsetting 4 bulk endpoint 0x81 has invalid maxpacket 0 [ 637.908195][ T5911] usb 5-1: config 6 interface 4 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.937810][ T5911] usb 5-1: config 6 interface 4 has no altsetting 0 [ 637.945360][T12374] netlink: 'syz.3.1598': attribute type 4 has an invalid length. [ 637.958529][ T5911] usb 5-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 637.969941][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.989090][ T5911] usb 5-1: Product: syz [ 637.997872][ T5911] usb 5-1: Manufacturer: syz [ 638.012903][ T5911] usb 5-1: SerialNumber: syz [ 638.588710][ T5937] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 638.762340][ T5937] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 638.788617][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.832423][ T5937] usb 2-1: config 0 descriptor?? [ 638.922111][ T5911] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 638.996173][ T5937] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input65 [ 639.218278][ T5911] snd-usb-audio 5-1:6.4: probe with driver snd-usb-audio failed with error -12 [ 639.379876][ T5911] usb 5-1: USB disconnect, device number 63 [ 639.474707][T11913] udevd[11913]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.561472][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.592836][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.915711][T12397] syz_tun: entered promiscuous mode [ 640.010015][T12397] syz_tun: refused to change device tx_queue_len [ 640.029617][T12397] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 640.389369][ T5922] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 640.533591][ T5937] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 640.563676][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 640.612225][ T1210] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 640.620821][ T5937] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 640.650415][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 640.681816][ T5922] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 640.724255][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.761475][ T5922] usb 5-1: config 0 descriptor?? [ 640.782229][ T1210] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 640.802437][T12402] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 640.835213][ T1210] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 640.877815][ T1210] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 640.887412][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.916586][T12408] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 640.925977][T12408] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 640.972170][ T1210] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.198474][ T9960] usb 4-1: USB disconnect, device number 41 [ 641.238447][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 641.273384][T12408] macvlan2: entered promiscuous mode [ 641.278903][T12408] macvlan2: entered allmulticast mode [ 641.284374][T12408] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 641.287182][T12418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.300842][T12418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.579243][T12418] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1604'. [ 641.816402][ T9960] usb 2-1: USB disconnect, device number 53 [ 641.884020][ T5922] ath6kl: Failed to submit usb control message: -110 [ 641.904746][ T5922] ath6kl: unable to send the bmi data to the device: -110 [ 641.939264][ T5922] ath6kl: Unable to send get target info: -110 [ 641.958286][ T5922] ath6kl: Failed to init ath6kl core: -110 [ 641.991356][ T5922] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 642.010638][T12423] FAULT_INJECTION: forcing a failure. [ 642.010638][T12423] name failslab, interval 1, probability 0, space 0, times 0 [ 642.059292][T12423] CPU: 1 UID: 0 PID: 12423 Comm: syz.0.1610 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.059329][T12423] Tainted: [L]=SOFTLOCKUP [ 642.059338][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 642.059352][T12423] Call Trace: [ 642.059361][T12423] [ 642.059372][T12423] dump_stack_lvl+0xe8/0x150 [ 642.059406][T12423] should_fail_ex+0x414/0x560 [ 642.059435][T12423] should_failslab+0xa8/0x100 [ 642.059465][T12423] kmem_cache_alloc_noprof+0x88/0x710 [ 642.059501][T12423] ? skb_clone+0x212/0x3a0 [ 642.059538][T12423] skb_clone+0x212/0x3a0 [ 642.059571][T12423] __netlink_deliver_tap+0x404/0x850 [ 642.059614][T12423] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.059647][T12423] netlink_deliver_tap+0x19c/0x1b0 [ 642.059679][T12423] netlink_sendskb+0x68/0x140 [ 642.059709][T12423] netlink_unicast+0x397/0x9e0 [ 642.059735][T12423] ? __asan_memcpy+0x40/0x70 [ 642.059763][T12423] ? __pfx_netlink_unicast+0x10/0x10 [ 642.059805][T12423] netlink_rcv_skb+0x28c/0x470 [ 642.059837][T12423] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 642.059867][T12423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.059907][T12423] ? bpf_lsm_capable+0x9/0x20 [ 642.059934][T12423] ? security_capable+0x7e/0x2e0 [ 642.059969][T12423] nfnetlink_rcv+0x282/0x2590 [ 642.060008][T12423] ? lockdep_hardirqs_on+0x7b/0x110 [ 642.060033][T12423] ? __dev_queue_xmit+0x280/0x3100 [ 642.060071][T12423] ? __local_bh_enable_ip+0xd0/0x130 [ 642.060093][T12423] ? __dev_queue_xmit+0x280/0x3100 [ 642.060123][T12423] ? __dev_queue_xmit+0x1969/0x3100 [ 642.060153][T12423] ? ___sys_sendmsg+0x21f/0x2a0 [ 642.060193][T12423] ? __dev_queue_xmit+0x280/0x3100 [ 642.060226][T12423] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 642.060260][T12423] ? __pfx___dev_queue_xmit+0x10/0x10 [ 642.060299][T12423] ? ref_tracker_free+0x63a/0x7d0 [ 642.060321][T12423] ? __asan_memcpy+0x40/0x70 [ 642.060341][T12423] ? __pfx_ref_tracker_free+0x10/0x10 [ 642.060381][T12423] ? skb_clone+0x246/0x3a0 [ 642.060414][T12423] ? __netlink_deliver_tap+0x807/0x850 [ 642.060445][T12423] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.060482][T12423] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.060520][T12423] netlink_unicast+0x82f/0x9e0 [ 642.060556][T12423] ? __pfx_netlink_unicast+0x10/0x10 [ 642.060581][T12423] ? __alloc_skb+0x198/0x3a0 [ 642.060605][T12423] ? netlink_sendmsg+0x642/0xb30 [ 642.060633][T12423] ? skb_put+0x11b/0x210 [ 642.060664][T12423] netlink_sendmsg+0x805/0xb30 [ 642.060703][T12423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.060737][T12423] ? __import_iovec+0x5d4/0x7f0 [ 642.060762][T12423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 642.060793][T12423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.060813][T12423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.060844][T12423] __sock_sendmsg+0x21c/0x270 [ 642.060882][T12423] ____sys_sendmsg+0x505/0x820 [ 642.060916][T12423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.060951][T12423] ? kstrtouint+0x6e/0xe0 [ 642.060980][T12423] ___sys_sendmsg+0x21f/0x2a0 [ 642.061011][T12423] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.061039][T12423] ? get_pid_task+0x20/0x1f0 [ 642.061075][T12423] ? get_pid_task+0x20/0x1f0 [ 642.061100][T12423] ? get_pid_task+0x20/0x1f0 [ 642.061160][T12423] ? __fget_files+0x2a/0x420 [ 642.061188][T12423] ? __fget_files+0x3a0/0x420 [ 642.061224][T12423] __sys_sendmsg+0x164/0x220 [ 642.061255][T12423] ? __pfx___sys_sendmsg+0x10/0x10 [ 642.061294][T12423] ? __pfx_ksys_write+0x10/0x10 [ 642.061328][T12423] __do_fast_syscall_32+0x1dc/0x570 [ 642.061356][T12423] ? lockdep_hardirqs_on+0x7b/0x110 [ 642.061379][T12423] ? do_fast_syscall_32+0x34/0x80 [ 642.061405][T12423] ? irqentry_exit+0x10f/0x670 [ 642.061434][T12423] do_fast_syscall_32+0x34/0x80 [ 642.061462][T12423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 642.061489][T12423] RIP: 0023:0xf7f45539 [ 642.061509][T12423] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 642.061529][T12423] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 642.061552][T12423] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 642.061568][T12423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.061581][T12423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 642.061594][T12423] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 642.061607][T12423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 642.061639][T12423] [ 643.375208][T12435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 643.382319][T12435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 643.392424][T12435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 643.400465][T12435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 643.512709][T12435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 643.555941][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bcb9800: rx timeout, send abort [ 643.752008][T11973] usb 5-1: USB disconnect, device number 64 [ 644.064977][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bcb9800: abort rx timeout. Force session deactivation [ 644.528787][ T5922] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 644.646803][ T5911] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 644.664686][ T5911] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 644.692307][T12468] FAULT_INJECTION: forcing a failure. [ 644.692307][T12468] name failslab, interval 1, probability 0, space 0, times 0 [ 644.871241][ T5922] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 644.889070][T12468] CPU: 1 UID: 0 PID: 12468 Comm: syz.4.1621 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.889108][T12468] Tainted: [L]=SOFTLOCKUP [ 644.889117][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.889131][T12468] Call Trace: [ 644.889140][T12468] [ 644.889150][T12468] dump_stack_lvl+0xe8/0x150 [ 644.889184][T12468] should_fail_ex+0x414/0x560 [ 644.889212][T12468] should_failslab+0xa8/0x100 [ 644.889242][T12468] kmem_cache_alloc_noprof+0x88/0x710 [ 644.889278][T12468] ? skb_clone+0x212/0x3a0 [ 644.889313][T12468] skb_clone+0x212/0x3a0 [ 644.889346][T12468] __netlink_deliver_tap+0x404/0x850 [ 644.889389][T12468] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.889421][T12468] netlink_deliver_tap+0x19c/0x1b0 [ 644.889452][T12468] netlink_sendskb+0x68/0x140 [ 644.889482][T12468] netlink_unicast+0x397/0x9e0 [ 644.889507][T12468] ? __asan_memcpy+0x40/0x70 [ 644.889535][T12468] ? __pfx_netlink_unicast+0x10/0x10 [ 644.889572][T12468] netlink_rcv_skb+0x28c/0x470 [ 644.889604][T12468] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 644.889634][T12468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.889675][T12468] ? bpf_lsm_capable+0x9/0x20 [ 644.889702][T12468] ? security_capable+0x7e/0x2e0 [ 644.889736][T12468] nfnetlink_rcv+0x282/0x2590 [ 644.889775][T12468] ? lockdep_hardirqs_on+0x7b/0x110 [ 644.889799][T12468] ? __dev_queue_xmit+0x280/0x3100 [ 644.889838][T12468] ? __local_bh_enable_ip+0xd0/0x130 [ 644.889861][T12468] ? __dev_queue_xmit+0x280/0x3100 [ 644.889890][T12468] ? __dev_queue_xmit+0x1969/0x3100 [ 644.889920][T12468] ? ___sys_sendmsg+0x21f/0x2a0 [ 644.889957][T12468] ? __dev_queue_xmit+0x280/0x3100 [ 644.889988][T12468] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 644.890021][T12468] ? __pfx___dev_queue_xmit+0x10/0x10 [ 644.890058][T12468] ? ref_tracker_free+0x63a/0x7d0 [ 644.890081][T12468] ? __asan_memcpy+0x40/0x70 [ 644.890100][T12468] ? __pfx_ref_tracker_free+0x10/0x10 [ 644.890140][T12468] ? skb_clone+0x246/0x3a0 [ 644.890174][T12468] ? __netlink_deliver_tap+0x807/0x850 [ 644.890204][T12468] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.890240][T12468] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.890279][T12468] netlink_unicast+0x82f/0x9e0 [ 644.890315][T12468] ? __pfx_netlink_unicast+0x10/0x10 [ 644.890341][T12468] ? __alloc_skb+0x198/0x3a0 [ 644.890367][T12468] ? netlink_sendmsg+0x642/0xb30 [ 644.890395][T12468] ? skb_put+0x11b/0x210 [ 644.890425][T12468] netlink_sendmsg+0x805/0xb30 [ 644.890465][T12468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.890499][T12468] ? __import_iovec+0x5d4/0x7f0 [ 644.890525][T12468] ? aa_sock_msg_perm+0xf1/0x1b0 [ 644.890557][T12468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.890577][T12468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.890609][T12468] __sock_sendmsg+0x21c/0x270 [ 644.890647][T12468] ____sys_sendmsg+0x505/0x820 [ 644.890682][T12468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.890714][T12468] ? kstrtouint+0x6e/0xe0 [ 644.890743][T12468] ___sys_sendmsg+0x21f/0x2a0 [ 644.890780][T12468] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.890800][T12468] ? get_pid_task+0x20/0x1f0 [ 644.890820][T12468] ? get_pid_task+0x20/0x1f0 [ 644.890843][T12468] ? get_pid_task+0x20/0x1f0 [ 644.890884][T12468] ? __fget_files+0x2a/0x420 [ 644.890903][T12468] ? __fget_files+0x3a0/0x420 [ 644.890930][T12468] __sys_sendmsg+0x164/0x220 [ 644.890952][T12468] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.890978][T12468] ? __pfx_ksys_write+0x10/0x10 [ 644.891002][T12468] __do_fast_syscall_32+0x1dc/0x570 [ 644.891021][T12468] ? lockdep_hardirqs_on+0x7b/0x110 [ 644.891037][T12468] ? do_fast_syscall_32+0x34/0x80 [ 644.891056][T12468] ? irqentry_exit+0x10f/0x670 [ 644.891076][T12468] do_fast_syscall_32+0x34/0x80 [ 644.891096][T12468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.891115][T12468] RIP: 0023:0xf703d539 [ 644.891130][T12468] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 644.891144][T12468] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 644.891161][T12468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 644.891172][T12468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 644.891181][T12468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 644.891190][T12468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 644.891199][T12468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 644.891222][T12468] [ 645.336046][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.389932][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 645.398607][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 645.456195][T12469] fido_id[12469]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 645.478848][T11567] Bluetooth: hci2: command 0x0c1a tx timeout [ 645.485205][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 645.549629][ T5922] usb 4-1: config 0 descriptor?? [ 645.587968][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 645.601208][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input66 [ 645.799246][T12472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1622'. [ 645.991572][T12473] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1623'. [ 646.098320][T12462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.107614][T12462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.240322][T12473] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1623'. [ 646.250803][T12473] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1623'. [ 647.098721][ T5911] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 647.283255][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 647.341520][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 647.446624][ T5911] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 647.506815][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.587308][ T5911] usb 5-1: config 0 descriptor?? [ 647.620413][T12492] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 648.183255][T12510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.192633][T12510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.285902][T11973] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 648.541661][T11973] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 648.686167][T12510] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1627'. [ 648.848964][ T5911] ath6kl: Failed to submit usb control message: -110 [ 648.884106][ T5911] ath6kl: unable to send the bmi data to the device: -110 [ 648.943048][ T5911] ath6kl: Unable to send get target info: -110 [ 648.996435][ T5911] ath6kl: Failed to init ath6kl core: -110 [ 649.037068][T11973] usb 4-1: USB disconnect, device number 42 [ 649.071064][ T5911] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 649.110467][T12513] fido_id[12513]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 649.528610][T12527] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 649.727458][T12529] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 649.771686][T12529] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 649.827125][T12529] bond2: (slave ip6gre1): making interface the new active one [ 649.837290][T12529] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 649.889185][T12527] bond2: option fail_over_mac: unable to set because the bond device has slaves [ 649.960358][T11973] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 650.005581][T11973] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 650.178258][T12529] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1634'. [ 650.939031][T12529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.961223][T12529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.974326][T12529] bond0 (unregistering): Released all slaves [ 651.134486][ T5911] usb 5-1: USB disconnect, device number 65 [ 651.517422][ T5911] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 651.536466][ T5911] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz1] on syz0 [ 651.617119][T12563] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1647'. [ 652.692466][ T24] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 652.764620][ T24] hid-generic 0000:0000:0000.0071: hidraw0: HID v0.00 Device [syz1] on syz0 [ 652.898675][ T5911] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 653.116032][ T5911] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 653.195111][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.220061][ T5911] usb 3-1: config 0 descriptor?? [ 653.343089][ T5911] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input67 [ 653.620350][T12584] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1652'. [ 653.902176][T12594] input: syz0 as /devices/virtual/input/input68 [ 654.344062][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.353678][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.702380][T12604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1658'. [ 655.859371][T12628] FAULT_INJECTION: forcing a failure. [ 655.859371][T12628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.886175][T12628] CPU: 1 UID: 0 PID: 12628 Comm: syz.1.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.886218][T12628] Tainted: [L]=SOFTLOCKUP [ 655.886225][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.886239][T12628] Call Trace: [ 655.886246][T12628] [ 655.886253][T12628] dump_stack_lvl+0xe8/0x150 [ 655.886278][T12628] should_fail_ex+0x414/0x560 [ 655.886298][T12628] _copy_from_user+0x2d/0xb0 [ 655.886323][T12628] video_usercopy+0x349/0x13f0 [ 655.886347][T12628] ? __pfx___video_do_ioctl+0x10/0x10 [ 655.886364][T12628] ? __pfx_video_usercopy+0x10/0x10 [ 655.886392][T12628] ? __fget_files+0x2a/0x420 [ 655.886414][T12628] v4l2_ioctl+0x18d/0x1e0 [ 655.886435][T12628] v4l2_compat_ioctl32+0x1d7/0x290 [ 655.886471][T12628] __ia32_compat_sys_ioctl+0x543/0x840 [ 655.886489][T12628] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 655.886505][T12628] ? __fget_files+0x3a0/0x420 [ 655.886529][T12628] ? fput+0xa0/0xd0 [ 655.886550][T12628] ? ksys_write+0x22a/0x250 [ 655.886566][T12628] ? __pfx_ksys_write+0x10/0x10 [ 655.886589][T12628] __do_fast_syscall_32+0x1dc/0x570 [ 655.886610][T12628] ? lockdep_hardirqs_on+0x7b/0x110 [ 655.886626][T12628] ? do_fast_syscall_32+0x34/0x80 [ 655.886645][T12628] ? irqentry_exit+0x10f/0x670 [ 655.886664][T12628] do_fast_syscall_32+0x34/0x80 [ 655.886684][T12628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.886703][T12628] RIP: 0023:0xf701d539 [ 655.886720][T12628] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 655.886735][T12628] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 655.886752][T12628] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c050561a [ 655.886763][T12628] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.886773][T12628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.886782][T12628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 655.886791][T12628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.886812][T12628] [ 656.240774][ T24] usb 3-1: USB disconnect, device number 69 [ 657.007251][ T9960] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 657.084499][ T9960] hid-generic 0000:0000:0000.0072: hidraw0: HID v0.00 Device [syz1] on syz0 [ 657.719850][ T5838] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 657.880803][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 657.903607][ T5838] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 657.922943][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.945905][ T5838] usb 5-1: config 0 descriptor?? [ 657.955385][T12655] FAULT_INJECTION: forcing a failure. [ 657.955385][T12655] name failslab, interval 1, probability 0, space 0, times 0 [ 657.972849][T12656] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 657.998596][T12655] CPU: 0 UID: 0 PID: 12655 Comm: syz.3.1670 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.998636][T12655] Tainted: [L]=SOFTLOCKUP [ 657.998644][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 657.998658][T12655] Call Trace: [ 657.998667][T12655] [ 657.998677][T12655] dump_stack_lvl+0xe8/0x150 [ 657.998711][T12655] should_fail_ex+0x414/0x560 [ 657.998738][T12655] should_failslab+0xa8/0x100 [ 657.998768][T12655] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 657.998801][T12655] ? __alloc_skb+0x198/0x3a0 [ 657.998825][T12655] ? __alloc_skb+0x1dc/0x3a0 [ 657.998847][T12655] ? __local_bh_enable_ip+0xd0/0x130 [ 657.998871][T12655] ? __alloc_skb+0x198/0x3a0 [ 657.998896][T12655] __alloc_skb+0x1dc/0x3a0 [ 657.998926][T12655] netlink_sendmsg+0x5c6/0xb30 [ 657.998967][T12655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.999036][T12655] ? __import_iovec+0x5d4/0x7f0 [ 657.999063][T12655] ? aa_sock_msg_perm+0xf1/0x1b0 [ 657.999095][T12655] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.999116][T12655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.999145][T12655] __sock_sendmsg+0x21c/0x270 [ 657.999183][T12655] ____sys_sendmsg+0x505/0x820 [ 657.999216][T12655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.999250][T12655] ? kstrtouint+0x6e/0xe0 [ 657.999278][T12655] ___sys_sendmsg+0x21f/0x2a0 [ 657.999307][T12655] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.999334][T12655] ? get_pid_task+0x20/0x1f0 [ 657.999360][T12655] ? get_pid_task+0x20/0x1f0 [ 657.999384][T12655] ? get_pid_task+0x20/0x1f0 [ 657.999438][T12655] ? __fget_files+0x2a/0x420 [ 657.999466][T12655] ? __fget_files+0x3a0/0x420 [ 657.999503][T12655] __sys_sendmsg+0x164/0x220 [ 657.999534][T12655] ? __pfx___sys_sendmsg+0x10/0x10 [ 657.999570][T12655] ? __pfx_ksys_write+0x10/0x10 [ 657.999603][T12655] __do_fast_syscall_32+0x1dc/0x570 [ 657.999631][T12655] ? lockdep_hardirqs_on+0x7b/0x110 [ 657.999654][T12655] ? do_fast_syscall_32+0x34/0x80 [ 657.999681][T12655] ? irqentry_exit+0x10f/0x670 [ 657.999709][T12655] do_fast_syscall_32+0x34/0x80 [ 657.999738][T12655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 657.999765][T12655] RIP: 0023:0xf7ff5539 [ 657.999784][T12655] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 657.999806][T12655] RSP: 002b:00000000f54c555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 657.999831][T12655] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 657.999847][T12655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 657.999861][T12655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 657.999875][T12655] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 657.999888][T12655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 657.999920][T12655] [ 658.344353][ T9960] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 658.389438][ T9960] hid-generic 0000:0000:0000.0073: hidraw0: HID v0.00 Device [syz1] on syz0 [ 658.777356][T12670] fuse: Unknown parameter '0xffffffffffffffff' [ 659.697341][T12683] loop8: detected capacity change from 0 to 7 [ 659.709358][T11534] Dev loop8: unable to read RDB block 7 [ 659.721511][T11534] loop8: AHDI p1 p2 p3 [ 659.726307][T11534] loop8: partition table partially beyond EOD, truncated [ 659.734617][T11534] loop8: p1 start 1601398130 is beyond EOD, truncated [ 659.742996][T11534] loop8: p2 start 1702059890 is beyond EOD, truncated [ 659.772179][T12683] Dev loop8: unable to read RDB block 7 [ 659.788266][T12683] loop8: AHDI p1 p2 p3 [ 659.793520][T12683] loop8: partition table partially beyond EOD, truncated [ 659.841021][T12683] loop8: p1 start 1601398130 is beyond EOD, truncated [ 659.853877][T12683] loop8: p2 start 1702059890 is beyond EOD, truncated [ 659.872719][T12684] Dev loop8: unable to read RDB block 7 [ 659.883580][T12684] loop8: AHDI p1 p2 p3 [ 659.888172][T12684] loop8: partition table partially beyond EOD, truncated [ 659.901130][T12684] loop8: p1 start 1601398130 is beyond EOD, truncated [ 659.909973][T12684] loop8: p2 start 1702059890 is beyond EOD, truncated [ 660.603177][ T1210] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 660.630410][ T1210] hid-generic 0000:0000:0000.0074: hidraw0: HID v0.00 Device [syz1] on syz0 [ 661.256335][T12705] fido_id[12705]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 661.467411][ T5838] usbhid 5-1:0.0: can't add hid device: -71 [ 661.492359][ T5838] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 661.525135][ T5838] usb 5-1: USB disconnect, device number 66 [ 661.659140][T12713] x_tables: duplicate underflow at hook 2 [ 661.668453][T12713] F2FS-fs: Conflicting test_dummy_encryption options [ 661.959239][T12722] openvswitch: netlink: Key type 31 is not supported [ 661.976304][ T9960] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 662.022417][ T9960] hid-generic 0000:0000:0000.0075: hidraw0: HID v0.00 Device [syz1] on syz0 [ 662.689149][T12725] fido_id[12725]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 663.192760][ T5838] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 663.212024][ T5838] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz1] on syz0 [ 663.628771][ T9960] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 663.837121][ T9960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 663.850359][ T9960] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 663.891173][ T9960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.962469][ T9960] usb 2-1: config 0 descriptor?? [ 664.135788][ T5911] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 664.153659][ T5911] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz1] on syz0 [ 664.721798][T12782] fuse: Unknown parameter '0xffffffffffffffff' [ 665.301180][T12788] netlink: 'syz.4.1708': attribute type 4 has an invalid length. [ 665.403039][T12794] netlink: 'syz.4.1708': attribute type 4 has an invalid length. [ 666.145981][ T5838] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 666.171548][ T5838] hid-generic 0000:0000:0000.0078: hidraw0: HID v0.00 Device [syz1] on syz0 [ 666.575012][T12807] fido_id[12807]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 666.766392][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1717'. [ 667.334579][ T5911] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 667.494719][ T5911] hid-generic 0000:0000:0000.0079: hidraw0: HID v0.00 Device [syz1] on syz0 [ 667.993887][ T9960] usbhid 2-1:0.0: can't add hid device: -71 [ 668.018683][ T9960] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 668.090950][ T9960] usb 2-1: USB disconnect, device number 54 [ 668.106018][T12828] fido_id[12828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 668.741111][T12840] mmap: syz.3.1723 (12840) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 669.536424][ T1210] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 669.575071][ T1210] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 669.970634][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1734'. [ 670.056929][T12872] fuse: Invalid uid '00000000000000000005' [ 670.586561][T12866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 670.595659][T12866] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 670.605372][T12866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 670.639012][T12866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 670.649880][T12866] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 670.931713][ T1210] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 671.096331][ T1210] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.118133][ T1210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 671.127011][ T1210] usb 5-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 671.156616][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.210115][ T1210] usb 5-1: config 0 descriptor?? [ 671.364745][T12891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1735'. [ 671.375758][T12891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1735'. [ 671.632583][ T1210] usb 5-1: string descriptor 0 read error: -71 [ 671.691305][ T1210] usbhid 5-1:0.0: can't add hid device: -71 [ 671.698765][ T1210] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 671.772657][ T1210] usb 5-1: USB disconnect, device number 67 [ 672.044865][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 672.090250][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 672.551866][ T9960] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 672.598984][ T9960] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 672.616904][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 672.627718][ T9960] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 672.638699][ T9960] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 672.647163][ T9960] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 672.654714][ T9960] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 672.662239][ T9960] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 672.669916][ T9960] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 672.677356][ T9960] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 672.688744][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 672.688777][T11567] Bluetooth: hci2: command 0x0c1a tx timeout [ 672.702828][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 672.739206][ T9960] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 673.811809][T12920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 673.818938][T12920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 673.825139][T12920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 673.851813][T12920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 673.862898][T12920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 674.377567][ T1210] hid-generic 0000:0000:0000.007C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 674.778093][T12943] fido_id[12943]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 675.658680][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 675.878713][T11567] Bluetooth: hci3: command 0x0c1a tx timeout [ 675.884802][T11567] Bluetooth: hci2: command 0x0c1a tx timeout [ 675.885355][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 675.892399][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 676.738689][ T1210] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 676.901686][ T1210] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 676.914852][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.961444][ T1210] usb 5-1: config 0 descriptor?? [ 676.986758][ T1210] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input69 [ 677.098654][ T5838] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 677.316899][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 677.381358][ T5838] usb 2-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 677.403647][ T5838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.520471][ T5838] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.549723][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.563909][ T5838] usb 2-1: Product: syz [ 677.575489][ T5838] usb 2-1: Manufacturer: syz [ 677.587673][ T5838] usb 2-1: SerialNumber: syz [ 677.771238][T12964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.783190][T12964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.903515][ T5838] usb 2-1: 0:2 : does not exist [ 677.932643][ T5838] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 678.155642][ T5838] usb 2-1: USB disconnect, device number 55 [ 678.285488][T11534] udevd[11534]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.001324][T12987] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1760'. [ 680.324397][ T9960] usb 5-1: USB disconnect, device number 68 [ 680.736379][ T5838] hid_parser_main: 2 callbacks suppressed [ 680.736399][ T5838] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 680.820068][ T5838] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 680.938687][ T1210] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 681.104458][ T1210] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 681.181875][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.212696][ T1210] usb 4-1: config 0 descriptor?? [ 681.272957][ T1210] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input70 [ 681.573142][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.584470][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.094733][ T5919] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 682.115232][ T5919] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 682.137313][ T5919] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 682.164209][ T5919] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 682.190266][ T5919] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 682.209651][ T5919] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 682.224126][ T5919] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 682.330611][ T5919] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 682.377024][ T5919] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 682.439930][ T5919] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 683.451248][T13029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 683.458341][T13029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 683.465668][T13029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 683.515264][T13029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 683.712153][T13029] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 683.740082][ T5838] usb 4-1: USB disconnect, device number 43 [ 684.786828][T13039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 684.809729][T13039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 684.834148][T13039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 684.846607][T13039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 684.868628][T13039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 686.756034][T13063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 686.813597][T13063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 686.820408][T13063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 686.826565][T13063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 686.894913][T13063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 687.210496][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 687.259777][T13075] netlink: 'syz.3.1777': attribute type 5 has an invalid length. [ 687.738343][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 687.857836][T13085] netlink: 'syz.4.1779': attribute type 4 has an invalid length. [ 687.865877][T13085] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1779'. [ 687.968008][T13085] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1779'. [ 688.839604][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 688.968698][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 688.969314][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 688.988002][T11567] Bluetooth: hci2: command 0x0c1a tx timeout [ 689.809063][T13107] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 689.816726][T13107] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 689.823861][T13107] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 689.862843][T13107] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 689.909781][T13107] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 690.587179][ T5838] hid_parser_main: 1 callbacks suppressed [ 690.587204][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 690.638720][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 690.759236][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 690.798782][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 690.843560][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 690.871509][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 690.901925][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 690.929128][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 690.977150][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 690.990182][ T5838] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 691.030209][ T5838] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 691.177405][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.184036][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.681173][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 692.011298][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 692.011305][T10055] Bluetooth: hci2: command 0x0c1a tx timeout [ 692.023554][T11567] Bluetooth: hci0: command 0x0c1a tx timeout [ 692.033828][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 692.895475][ T5838] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 693.311022][T13147] netlink: 'syz.4.1792': attribute type 4 has an invalid length. [ 693.330826][T13147] netlink: 'syz.4.1792': attribute type 4 has an invalid length. [ 694.598264][T13156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 694.605781][T13156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 694.628773][T13156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 694.635192][T13156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 694.645166][T13156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 696.118716][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 696.716658][T11567] Bluetooth: hci4: command 0x0c1a tx timeout [ 696.716668][T10055] Bluetooth: hci0: command 0x0c1a tx timeout [ 696.732609][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 696.733934][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 697.178723][ T5838] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 697.362926][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 697.380852][ T5838] usb 5-1: unable to get BOS descriptor or descriptor too short [ 697.402918][ T5838] usb 5-1: config 6 has an invalid interface number: 4 but max is 1 [ 697.452509][ T5838] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 697.488242][ T5838] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 697.585195][ T5838] usb 5-1: config 6 has no interface number 0 [ 697.619076][ T5838] usb 5-1: config 6 interface 4 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 697.654845][ T5838] usb 5-1: config 6 interface 4 altsetting 4 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 697.712088][ T5838] usb 5-1: config 6 interface 4 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.761286][ T5838] usb 5-1: config 6 interface 4 altsetting 4 bulk endpoint 0x81 has invalid maxpacket 0 [ 697.812657][ T5838] usb 5-1: config 6 interface 4 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.869040][ T5838] usb 5-1: config 6 interface 4 has no altsetting 0 [ 697.964139][ T5838] usb 5-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 698.008665][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.051571][ T5838] usb 5-1: Product: syz [ 698.066283][ T5838] usb 5-1: Manufacturer: syz [ 698.076336][ T5838] usb 5-1: SerialNumber: syz [ 698.442966][T13221] netlink: 'syz.3.1805': attribute type 4 has an invalid length. [ 698.477406][T13221] netlink: 'syz.3.1805': attribute type 4 has an invalid length. [ 698.619894][ T5838] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 698.653252][ T5922] hid_parser_main: 1 callbacks suppressed [ 698.653275][ T5922] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 698.685062][ T5922] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 698.699891][ T5922] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 698.712831][ T5838] snd-usb-audio 5-1:6.4: probe with driver snd-usb-audio failed with error -12 [ 698.723999][ T5922] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 698.734051][ T5922] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 698.744784][ T5838] usb 5-1: USB disconnect, device number 69 [ 698.755167][ T5922] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 698.787049][ T5922] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 698.807827][ T5922] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 698.816819][ T1210] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 698.838269][ T1210] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 698.860519][ T5922] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 698.891952][ T5922] hid-generic 0000:0000:0000.0081: hidraw1: HID v0.00 Device [syz1] on syz0 [ 698.963399][T13236] udevd[13236]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.556172][T13259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 700.570927][T13259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 700.579324][T13259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 700.585680][T13259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 700.604323][T13259] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 701.300948][T13275] x_tables: duplicate underflow at hook 2 [ 701.314912][T13275] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 701.521666][T13272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 701.583442][T13288] netlink: 'syz.4.1818': attribute type 4 has an invalid length. [ 701.660131][T13272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 701.738181][T13288] netlink: 'syz.4.1818': attribute type 4 has an invalid length. [ 701.783872][T13272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 701.790415][T13272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 701.797652][T13272] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 703.558751][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 703.737951][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 703.737975][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 703.798703][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 703.798709][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 703.824937][T11973] hid_parser_main: 1 callbacks suppressed [ 703.824955][T11973] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 703.895550][T11973] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz1] on syz0 [ 704.103997][T13319] fido_id[13319]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 704.765521][T13333] FAULT_INJECTION: forcing a failure. [ 704.765521][T13333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.841219][T13333] CPU: 0 UID: 0 PID: 13333 Comm: syz.2.1826 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.841255][T13333] Tainted: [L]=SOFTLOCKUP [ 704.841265][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 704.841280][T13333] Call Trace: [ 704.841289][T13333] [ 704.841299][T13333] dump_stack_lvl+0xe8/0x150 [ 704.841333][T13333] should_fail_ex+0x414/0x560 [ 704.841360][T13333] _copy_from_user+0x2d/0xb0 [ 704.841399][T13333] get_compat_msghdr+0xad/0x4a0 [ 704.841437][T13333] ? __pfx_get_compat_msghdr+0x10/0x10 [ 704.841471][T13333] ? kstrtouint+0x6e/0xe0 [ 704.841499][T13333] ___sys_sendmsg+0x193/0x2a0 [ 704.841531][T13333] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.841559][T13333] ? get_pid_task+0x20/0x1f0 [ 704.841587][T13333] ? get_pid_task+0x20/0x1f0 [ 704.841618][T13333] ? get_pid_task+0x20/0x1f0 [ 704.841675][T13333] ? __fget_files+0x2a/0x420 [ 704.841702][T13333] ? __fget_files+0x3a0/0x420 [ 704.841741][T13333] __sys_sendmsg+0x164/0x220 [ 704.841771][T13333] ? __pfx___sys_sendmsg+0x10/0x10 [ 704.841809][T13333] ? __pfx_ksys_write+0x10/0x10 [ 704.841843][T13333] __do_fast_syscall_32+0x1dc/0x570 [ 704.841871][T13333] ? lockdep_hardirqs_on+0x7b/0x110 [ 704.841895][T13333] ? do_fast_syscall_32+0x34/0x80 [ 704.841922][T13333] ? irqentry_exit+0x10f/0x670 [ 704.841950][T13333] do_fast_syscall_32+0x34/0x80 [ 704.841978][T13333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.842006][T13333] RIP: 0023:0xf7fd7539 [ 704.842025][T13333] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 704.842046][T13333] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 704.842069][T13333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 704.842085][T13333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.842098][T13333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.842111][T13333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 704.842124][T13333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.842184][T13333] [ 705.499155][T13329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 705.509290][T13329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 705.578995][T13329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 705.589121][T13329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 705.634331][T13329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 705.803703][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 705.837576][T13350] netlink: 'syz.4.1831': attribute type 5 has an invalid length. [ 706.014456][ T9960] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 706.048381][ T9960] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 706.102754][ T9960] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 706.111341][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 706.149356][ T9960] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 706.184243][ T9960] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 706.219076][ T9960] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 706.253263][ T9960] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 706.436327][ T9960] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 706.489870][ T9960] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 706.556973][ T9960] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz1] on syz0 [ 706.916425][T13365] fido_id[13365]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 707.478661][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 707.569379][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 707.728615][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 707.734791][T11567] Bluetooth: hci4: command 0x0c1a tx timeout [ 707.744911][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 708.449070][ T9960] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 708.882461][T13386] fido_id[13386]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 708.944333][T13388] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1837'. [ 709.201419][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'. [ 709.238753][ T1210] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 709.448664][ T1210] usb 5-1: Using ep0 maxpacket: 8 [ 709.456018][ T1210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 710.427578][ T1210] usb 5-1: config 4 interface 0 has no altsetting 0 [ 710.469582][ T1210] usb 5-1: string descriptor 0 read error: -22 [ 710.476043][ T1210] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 710.502950][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.521120][T13404] tap0: tun_chr_ioctl cmd 1074025677 [ 710.546060][T13404] tap0: linktype set to 6 [ 710.567385][ T1210] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 710.624380][ T1210] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 710.658781][ T1210] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 710.677681][ T1210] usb 5-1: media controller created [ 710.743735][ T1210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 711.061866][ T5919] usb 5-1: USB disconnect, device number 70 [ 711.189521][ T5911] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 711.349911][ T5919] hid_parser_main: 2 callbacks suppressed [ 711.349930][ T5919] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 711.378886][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 711.392928][ T5919] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 711.466155][ T5911] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 711.479724][ T5911] usb 2-1: config 0 has no interface number 0 [ 711.514979][ T5911] usb 2-1: config 0 interface 184 has no altsetting 0 [ 711.545036][ T5911] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 711.652208][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.685459][ T5911] usb 2-1: Product: syz [ 711.699291][ T5911] usb 2-1: Manufacturer: syz [ 711.726727][ T5911] usb 2-1: SerialNumber: syz [ 711.764029][ T5911] usb 2-1: config 0 descriptor?? [ 711.883356][ T5911] smsc75xx v1.0.0 [ 712.203983][ T5919] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 712.462920][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 712.501085][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 712.518281][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 712.547161][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 712.557094][ T5919] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 712.581545][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 712.595812][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.622200][ T5911] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 712.636228][ T5919] usb 5-1: config 0 descriptor?? [ 712.654059][T13430] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 713.002712][T13441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.023817][T13441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.889022][ T5919] ath6kl: Failed to submit usb control message: -110 [ 714.150330][ T5919] ath6kl: unable to send the bmi data to the device: -110 [ 714.162152][ T5919] ath6kl: Unable to send get target info: -110 [ 714.166266][ T5919] ath6kl: Failed to init ath6kl core: -110 [ 714.167564][ T5919] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 714.251368][T13458] netlink: 'syz.1.1843': attribute type 9 has an invalid length. [ 715.887649][ T5838] usb 2-1: USB disconnect, device number 56 [ 716.875359][ T5911] usb 5-1: USB disconnect, device number 71 [ 717.200056][ T5911] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 717.361769][ T5911] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz1] on syz0 [ 717.521452][T13496] fido_id[13496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 718.307262][T13507] netlink: 'syz.2.1863': attribute type 9 has an invalid length. [ 720.505206][T13532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1871'. [ 720.728646][ T5911] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 720.906684][ T5911] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 720.929819][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.951981][ T5911] usb 5-1: Product: syz [ 720.965495][ T5911] usb 5-1: Manufacturer: syz [ 720.984412][ T5911] usb 5-1: SerialNumber: syz [ 721.042345][ T5911] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 721.193606][ T5919] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 721.712083][ T5922] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 721.753698][ T5922] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 721.825717][T13555] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1877'. [ 722.341576][ T5919] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 722.364828][ T5919] ath9k_htc: Failed to initialize the device [ 722.455822][ T5919] usb 5-1: ath9k_htc: USB layer deinitialized [ 722.794342][T13558] tap0: tun_chr_ioctl cmd 1074025677 [ 722.802308][T13558] tap0: linktype set to 6 [ 722.926502][T13558] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 722.951620][ T5838] usb 5-1: USB disconnect, device number 72 [ 723.036349][T13558] netlink: 'syz.1.1878': attribute type 2 has an invalid length. [ 724.138713][ T5838] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 724.426354][ T5838] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 724.451672][T13592] kAFS: unable to lookup cell 'ÿ' [ 724.479741][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.512775][ T5838] usb 5-1: config 0 descriptor?? [ 724.522501][T13596] kAFS: unable to lookup cell '(,c¾Ì' [ 724.635011][ T5838] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input71 [ 724.859155][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.868350][ T5922] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 724.883972][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.060646][ T5922] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 725.112116][ T5922] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 725.124348][ T5922] usb 4-1: can't read configurations, error -61 [ 725.308067][ T5922] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 725.490429][ T5922] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 725.503036][ T5922] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 725.514080][ T5922] usb 4-1: can't read configurations, error -61 [ 725.524597][ T5922] usb usb4-port1: attempt power cycle [ 725.816450][T13599] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 725.929341][T13599] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 726.037847][T13599] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 726.059050][T13599] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 726.078688][ T5922] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 726.134618][ T5922] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 726.156640][ T5922] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 726.166136][T13599] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 726.175563][ T5922] usb 4-1: can't read configurations, error -61 [ 726.308856][ T5922] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 726.387275][ T5922] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 726.483425][ T5922] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 726.493938][ T5922] usb 4-1: can't read configurations, error -61 [ 726.508808][ T5922] usb usb4-port1: unable to enumerate USB device [ 726.782747][ T5922] usb 5-1: USB disconnect, device number 73 [ 727.186108][ T5922] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 727.221201][ T5922] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 727.318666][T11567] Bluetooth: hci1: command 0x0c1a tx timeout [ 727.826374][T13628] netlink: 'syz.3.1894': attribute type 9 has an invalid length. [ 727.837772][T13620] fido_id[13620]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 727.960286][T11567] Bluetooth: hci0: command 0x0c1a tx timeout [ 727.978966][ T5922] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 728.221964][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 728.260031][T11567] Bluetooth: hci3: command 0x0c1a tx timeout [ 728.266171][T11567] Bluetooth: hci2: command 0x0c1a tx timeout [ 728.272353][T11567] Bluetooth: hci4: command 0x0c1a tx timeout [ 728.299830][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.331903][T13632] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1895'. [ 728.359705][ T5922] usb 2-1: config 0 descriptor?? [ 728.405588][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input72 [ 728.667613][T13636] netlink: 'syz.4.1896': attribute type 4 has an invalid length. [ 728.884390][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.904977][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.955938][T13637] netlink: 'syz.4.1896': attribute type 4 has an invalid length. [ 730.966128][ T5838] usb 2-1: USB disconnect, device number 57 [ 731.009272][ T5922] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 731.053885][T13662] FAULT_INJECTION: forcing a failure. [ 731.053885][T13662] name failslab, interval 1, probability 0, space 0, times 0 [ 731.115578][T13662] CPU: 0 UID: 0 PID: 13662 Comm: syz.0.1903 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.115614][T13662] Tainted: [L]=SOFTLOCKUP [ 731.115623][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.115637][T13662] Call Trace: [ 731.115646][T13662] [ 731.115658][T13662] dump_stack_lvl+0xe8/0x150 [ 731.115692][T13662] should_fail_ex+0x414/0x560 [ 731.115727][T13662] should_failslab+0xa8/0x100 [ 731.115750][T13662] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 731.115777][T13662] ? __alloc_skb+0x1dc/0x3a0 [ 731.115794][T13662] ? __local_bh_enable_ip+0xd0/0x130 [ 731.115812][T13662] ? __alloc_skb+0x198/0x3a0 [ 731.115829][T13662] __alloc_skb+0x1dc/0x3a0 [ 731.115881][T13662] netlink_ack+0x146/0xa50 [ 731.115909][T13662] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.115930][T13662] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 731.115959][T13662] ? __pfx_nl80211_post_doit+0x10/0x10 [ 731.115986][T13662] ? __asan_memcpy+0x40/0x70 [ 731.116012][T13662] ? __pfx_ref_tracker_free+0x10/0x10 [ 731.116044][T13662] netlink_rcv_skb+0x28c/0x470 [ 731.116074][T13662] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.116098][T13662] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.116126][T13662] ? genl_rcv+0x19/0x40 [ 731.116165][T13662] ? down_read+0x274/0x2e0 [ 731.116191][T13662] ? genl_rcv+0xd/0x40 [ 731.116213][T13662] genl_rcv+0x28/0x40 [ 731.116233][T13662] netlink_unicast+0x82f/0x9e0 [ 731.116267][T13662] ? __pfx_netlink_unicast+0x10/0x10 [ 731.116292][T13662] ? __alloc_skb+0x198/0x3a0 [ 731.116317][T13662] ? netlink_sendmsg+0x642/0xb30 [ 731.116345][T13662] ? skb_put+0x11b/0x210 [ 731.116375][T13662] netlink_sendmsg+0x805/0xb30 [ 731.116417][T13662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.116451][T13662] ? __import_iovec+0x5d4/0x7f0 [ 731.116474][T13662] ? aa_sock_msg_perm+0xf1/0x1b0 [ 731.116507][T13662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 731.116526][T13662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.116559][T13662] __sock_sendmsg+0x21c/0x270 [ 731.116595][T13662] ____sys_sendmsg+0x505/0x820 [ 731.116630][T13662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.116664][T13662] ? kstrtouint+0x6e/0xe0 [ 731.116692][T13662] ___sys_sendmsg+0x21f/0x2a0 [ 731.116723][T13662] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.116751][T13662] ? get_pid_task+0x20/0x1f0 [ 731.116778][T13662] ? get_pid_task+0x20/0x1f0 [ 731.116803][T13662] ? get_pid_task+0x20/0x1f0 [ 731.116869][T13662] ? __fget_files+0x2a/0x420 [ 731.116897][T13662] ? __fget_files+0x3a0/0x420 [ 731.116935][T13662] __sys_sendmsg+0x164/0x220 [ 731.116967][T13662] ? __pfx___sys_sendmsg+0x10/0x10 [ 731.117012][T13662] ? __pfx_ksys_write+0x10/0x10 [ 731.117047][T13662] __do_fast_syscall_32+0x1dc/0x570 [ 731.117074][T13662] ? lockdep_hardirqs_on+0x7b/0x110 [ 731.117095][T13662] ? do_fast_syscall_32+0x34/0x80 [ 731.117122][T13662] ? irqentry_exit+0x10f/0x670 [ 731.117152][T13662] do_fast_syscall_32+0x34/0x80 [ 731.117180][T13662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 731.117208][T13662] RIP: 0023:0xf7f45539 [ 731.117229][T13662] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 731.117249][T13662] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 731.117273][T13662] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 731.117289][T13662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 731.117302][T13662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 731.117315][T13662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 731.117327][T13662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 731.117357][T13662] [ 731.631260][ T5922] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 731.641035][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.652152][ T5922] usb 5-1: config 0 descriptor?? [ 731.691859][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input73 [ 732.088446][ T5937] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 732.126626][ T5937] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 732.267139][T13656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.276565][T13656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.312352][T13687] netlink: 'syz.1.1909': attribute type 4 has an invalid length. [ 733.035081][ T5922] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 733.131555][T13700] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1911'. [ 733.175047][ T5922] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 734.404610][ T5937] usb 5-1: USB disconnect, device number 74 [ 734.568649][ T5922] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 734.731602][ T5922] usb 4-1: no configurations [ 734.736409][ T5922] usb 4-1: can't read configurations, error -22 [ 734.894591][ T5922] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 735.120147][ T5922] usb 4-1: no configurations [ 735.126249][ T5922] usb 4-1: can't read configurations, error -22 [ 735.140909][ T5922] usb usb4-port1: attempt power cycle [ 735.178673][ T5838] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 735.347505][ T5838] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 735.366062][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.393745][ T5838] usb 3-1: config 0 descriptor?? [ 735.430893][ T5838] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input74 [ 735.489000][ T5922] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 735.532594][ T5922] usb 4-1: no configurations [ 735.548369][ T5922] usb 4-1: can't read configurations, error -22 [ 735.720374][ T5922] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 735.750804][ T5922] usb 4-1: no configurations [ 735.755481][ T5922] usb 4-1: can't read configurations, error -22 [ 735.762046][ T5922] usb usb4-port1: unable to enumerate USB device [ 736.116501][T13719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.126039][T13719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.338673][ T5922] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 736.528880][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 736.556358][ T5922] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 736.579171][ T5922] usb 5-1: config 179 has no interface number 0 [ 736.585561][ T5922] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 736.623411][ T5922] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 736.635256][ T5922] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 736.878253][ T5922] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 736.938451][ T5922] usb 5-1: config 179 interface 65 has no altsetting 0 [ 736.968731][ T5922] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 736.977855][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.122501][ T5922] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 737.149119][ T5922] hid-generic 0000:0000:0000.008C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 737.600983][T13741] fido_id[13741]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 738.205875][ T5922] usb 3-1: USB disconnect, device number 70 [ 739.659597][ T5937] usb 5-1: USB disconnect, device number 75 [ 739.890655][T13759] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 739.908992][T13759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 739.917123][T13759] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 739.924125][T13759] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 739.931153][T13759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 740.136642][T13768] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1926'. [ 740.179805][T13768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1926'. [ 741.135218][T13780] netlink: 'syz.4.1930': attribute type 4 has an invalid length. [ 741.977166][T10055] Bluetooth: hci0: command 0x0c1a tx timeout [ 741.983325][T11567] Bluetooth: hci4: command 0x0c1a tx timeout [ 741.989443][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 741.995557][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 742.176243][T13785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 742.182921][T13785] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 742.193101][T13785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 742.253302][T13785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 742.263880][T13785] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 742.274676][T13802] netlink: 'syz.1.1933': attribute type 9 has an invalid length. [ 742.538698][ T5919] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 742.708645][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 742.722828][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.750452][ T5919] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 742.785122][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.812621][ T5919] usb 4-1: config 0 descriptor?? [ 742.991277][ T5937] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 743.009390][ T5937] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 743.289206][ T5919] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:3100.008E/input/input75 [ 743.381305][T13808] fido_id[13808]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 743.426207][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 743.433907][ T5919] creative-sb0540 0003:041E:3100.008E: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 744.227753][T10055] Bluetooth: hci0: command 0x0c1a tx timeout [ 744.233962][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 744.278746][T10055] Bluetooth: hci3: command 0x0c1a tx timeout [ 744.285101][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 745.137645][ T5922] usb 4-1: USB disconnect, device number 52 [ 745.605438][T13840] netlink: 'syz.4.1941': attribute type 4 has an invalid length. [ 745.667505][T13842] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1942'. [ 745.710341][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1942'. [ 747.674620][ T24] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 747.693552][ T24] hid-generic 0000:0000:0000.008F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 748.051212][T13873] fido_id[13873]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 748.609187][ T5919] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 748.632505][ T5919] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on syz0 [ 748.663371][T13883] netlink: 'syz.2.1953': attribute type 4 has an invalid length. [ 749.762851][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 750.080340][ T5838] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 750.511187][ T5838] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 750.535114][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.598219][ T5838] usb 2-1: config 0 descriptor?? [ 750.655482][ T5838] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input76 [ 750.854278][T13894] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN PTI [ 750.866215][T13894] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 750.874655][T13894] CPU: 0 UID: 0 PID: 13894 Comm: syz.2.1954 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.885606][T13894] Tainted: [L]=SOFTLOCKUP [ 750.889937][T13894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.900112][T13894] RIP: 0010:skb_segment+0x2ace/0x3f90 [ 750.905769][T13894] Code: 00 00 00 8b 6c 24 58 81 7c 24 14 ff ff 00 00 0f 85 12 e1 ff ff e8 32 63 8e f8 48 8b 44 24 20 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 14 09 00 00 8b 1b e9 17 e1 ff ff e8 09 [ 750.925426][T13894] RSP: 0018:ffffc9001b6b6470 EFLAGS: 00010202 [ 750.931529][T13894] RAX: 000000000000000e RBX: 0000000000000070 RCX: 0000000000080000 [ 750.939858][T13894] RDX: ffffc9000debb000 RSI: 0000000000008c32 RDI: 0000000000008c33 [ 750.947838][T13894] RBP: 0000000000000004 R08: ffff888034890000 R09: 0000000000000002 [ 750.955829][T13894] R10: 000000000000a888 R11: 0000000000000002 R12: ffff88802ef128e0 [ 750.963897][T13894] R13: 00000000fffffff8 R14: 0000000000000000 R15: dffffc0000000000 [ 750.971876][T13894] FS: 0000000000000000(0000) GS:ffff888125e1b000(0063) knlGS:00000000f54a5b40 [ 750.980902][T13894] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 750.987498][T13894] CR2: 000000000c39015d CR3: 000000003b01e000 CR4: 00000000003526f0 [ 750.995496][T13894] Call Trace: [ 750.998796][T13894] [ 751.001752][T13894] ? __skb_flow_dissect+0x22d5/0x68b0 [ 751.007138][T13894] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 751.012533][T13894] tcp_gso_segment+0x423/0x1a40 [ 751.017392][T13894] ? __pfx_tcp_wfree+0x10/0x10 [ 751.022166][T13894] ipv6_gso_segment+0xb78/0x21a0 [ 751.027124][T13894] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 751.032503][T13894] ? __pfx_skb_network_protocol+0x10/0x10 [ 751.038237][T13894] ? timerqueue_add+0x1d0/0x200 [ 751.043107][T13894] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 751.048515][T13894] skb_mac_gso_segment+0x31f/0x640 [ 751.053667][T13894] ? skb_mac_gso_segment+0x17e/0x640 [ 751.058975][T13894] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 751.064630][T13894] __skb_gso_segment+0x376/0x540 [ 751.069596][T13894] validate_xmit_skb+0xa13/0x1440 [ 751.074641][T13894] validate_xmit_skb_list+0x84/0x120 [ 751.079951][T13894] sch_direct_xmit+0xd3/0x4b0 [ 751.084638][T13894] ? __pfx_sch_direct_xmit+0x10/0x10 [ 751.089930][T13894] ? __asan_memset+0x22/0x50 [ 751.094572][T13894] __qdisc_run+0xa88/0x1510 [ 751.099103][T13894] qdisc_run+0xc7/0x300 [ 751.103298][T13894] __dev_queue_xmit+0x187e/0x3100 [ 751.108392][T13894] ? __dev_queue_xmit+0x280/0x3100 [ 751.113533][T13894] ? __pfx___dev_queue_xmit+0x10/0x10 [ 751.118939][T13894] ? ip6_output+0x340/0x550 [ 751.123458][T13894] ? ip6_output+0x340/0x550 [ 751.127978][T13894] ? ip6_finish_output2+0xe7e/0x1360 [ 751.133285][T13894] ? ip6_output+0x126/0x550 [ 751.137804][T13894] ip6_output+0x340/0x550 [ 751.142160][T13894] ip6_xmit+0x11b5/0x1970 [ 751.146507][T13894] ? ip6_xmit+0x291/0x1970 [ 751.150936][T13894] ? __pfx_ip6_xmit+0x10/0x10 [ 751.155629][T13894] ? inet6_csk_xmit+0x1d4/0x780 [ 751.160523][T13894] ? inet6_csk_xmit+0x1d4/0x780 [ 751.165407][T13894] inet6_csk_xmit+0x4db/0x780 [ 751.170126][T13894] ? inet6_csk_xmit+0x1d4/0x780 [ 751.175006][T13894] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 751.180224][T13894] ? tcp_established_options+0x471/0x9b0 [ 751.185935][T13894] ? csum_ipv6_magic+0x1ea/0x2f0 [ 751.190900][T13894] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 751.196282][T13894] __tcp_transmit_skb+0x2092/0x3aa0 [ 751.201603][T13894] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 751.207174][T13894] ? tcp_small_queue_check+0x1c1/0x3b0 [ 751.212677][T13894] tcp_write_xmit+0x16e8/0x6980 [ 751.217551][T13894] __tcp_push_pending_frames+0x97/0x380 [ 751.223105][T13894] tcp_rcv_established+0xfe6/0x2580 [ 751.228320][T13894] ? __pfx_tcp_rcv_established+0x10/0x10 [ 751.233962][T13894] ? ip6_dst_check+0x5e3/0x7e0 [ 751.238737][T13894] ? __pfx_ip6_dst_check+0x10/0x10 [ 751.243855][T13894] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 751.248560][T13894] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 751.253698][T13894] __release_sock+0x1b8/0x3a0 [ 751.258393][T13894] __sk_flush_backlog+0x36/0xc0 [ 751.263255][T13894] tcp_sendmsg_locked+0x412f/0x5520 [ 751.268528][T13894] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 751.274310][T13894] ? preempt_schedule_common+0x83/0xd0 [ 751.279783][T13894] ? tcp_sendmsg+0x21/0x50 [ 751.284312][T13894] ? preempt_schedule_thunk+0x16/0x30 [ 751.289695][T13894] tcp_sendmsg+0x2f/0x50 [ 751.294000][T13894] __sock_sendmsg+0xe5/0x270 [ 751.298616][T13894] __sys_sendto+0x3bd/0x520 [ 751.303263][T13894] ? __pfx___sys_sendto+0x10/0x10 [ 751.308373][T13894] ? do_futex+0x333/0x420 [ 751.312775][T13894] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 751.318612][T13894] ? rcu_is_watching+0x15/0xb0 [ 751.323401][T13894] __ia32_sys_sendto+0xdd/0x100 [ 751.328285][T13894] __do_fast_syscall_32+0x1dc/0x570 [ 751.333498][T13894] ? lockdep_hardirqs_on+0x7b/0x110 [ 751.338705][T13894] ? do_fast_syscall_32+0x34/0x80 [ 751.343741][T13894] ? irqentry_exit+0x10f/0x670 [ 751.348536][T13894] do_fast_syscall_32+0x34/0x80 [ 751.353420][T13894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 751.359855][T13894] RIP: 0023:0xf7fd7539 [ 751.363934][T13894] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 751.383548][T13894] RSP: 002b:00000000f54a555c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 751.391972][T13894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 751.399957][T13894] RDX: 00000000ffffff1d RSI: 0000000000000850 RDI: 0000000000000000 [ 751.407941][T13894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 751.415945][T13894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 751.423923][T13894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 751.431912][T13894] [ 751.434943][T13894] Modules linked in: [ 751.439044][T13894] ---[ end trace 0000000000000000 ]--- [ 751.444500][T13894] RIP: 0010:skb_segment+0x2ace/0x3f90 [ 751.449937][T13894] Code: 00 00 00 8b 6c 24 58 81 7c 24 14 ff ff 00 00 0f 85 12 e1 ff ff e8 32 63 8e f8 48 8b 44 24 20 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 14 09 00 00 8b 1b e9 17 e1 ff ff e8 09 [ 751.469662][T13894] RSP: 0018:ffffc9001b6b6470 EFLAGS: 00010202 [ 751.475748][T13894] RAX: 000000000000000e RBX: 0000000000000070 RCX: 0000000000080000 [ 751.483814][T13894] RDX: ffffc9000debb000 RSI: 0000000000008c32 RDI: 0000000000008c33 [ 751.491850][T13894] RBP: 0000000000000004 R08: ffff888034890000 R09: 0000000000000002 [ 751.499877][T13894] R10: 000000000000a888 R11: 0000000000000002 R12: ffff88802ef128e0 [ 751.507873][T13894] R13: 00000000fffffff8 R14: 0000000000000000 R15: dffffc0000000000 [ 751.515888][T13894] FS: 0000000000000000(0000) GS:ffff888125e1b000(0063) knlGS:00000000f54a5b40 [ 751.524852][T13894] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 751.531461][T13894] CR2: 000000000c39015d CR3: 000000003b01e000 CR4: 00000000003526f0 [ 751.539492][T13894] Kernel panic - not syncing: Fatal exception in interrupt [ 751.547303][T13894] Kernel Offset: disabled [ 751.551632][T13894] Rebooting in 86400 seconds..