last executing test programs: 9m0.026467796s ago: executing program 2 (id=730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440240000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 8m59.824454079s ago: executing program 2 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000000000172a"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 8m59.761636345s ago: executing program 2 (id=733): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0xd0, 0x190, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0xffffffff, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0, 0x0, {0x100000000000000}, [@common=@unspec=@time={{0x38}, {0x2, 0x3, 0x1118c, 0x200, 0xffffff00, 0xf, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x72, 0x2}}, @common=@unspec=@connbytes={{0x38}, {[{0xd}, {0xd05}], 0x2, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 8m59.552545139s ago: executing program 2 (id=735): syz_clone3(&(0x7f00000002c0)={0xc048000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0xfffffffffffffeb3, 0x0, 0x0, 0xb}, 0x58) 8m59.485088069s ago: executing program 2 (id=736): keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000cc0), &(0x7f0000000d00)={'enc=', 'raw', ' hash=', {'sha512-avx\x00'}}, 0x0, 0x0) 8m59.320604182s ago: executing program 2 (id=738): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) 8m43.721241628s ago: executing program 32 (id=738): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) 11.359959615s ago: executing program 4 (id=2868): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000001c0)={0x79c, r0, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x9, 0x5, 0xb, 0x5, 0x3, 0xae88, 0xc350, 0x2}, 0x0, 0x0, 0x0, 0x0) 10.535789745s ago: executing program 0 (id=2873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x23b) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 9.231217929s ago: executing program 4 (id=2879): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0xfffffffffffffdd0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b770eeb2b9f6b45306eb4bf0000000000000000", @ANYRES32, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="da5a598d840af8d6ba227af71c5e7643168073679da0c30a0bcbb3ecddf2cf79b3f534e8367f016505c5a3286a327e393c81516c64f13ec6a0f75b5052cfb4f87413c973aa14491afed0d45b52841430ea41f39eb7e7c5d73a60265d2da26ed3423a5f9c764cf13296eb754ef55476601f61614b03143f17c7c36efbf829e2ad66df7b2168cf3dd5fec9a8e526983c8078d8cc5703652e74891301ab", @ANYBLOB='\x00'/25], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x44c80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000000)={0xe1, 0x0, 0x100}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x10000, 0x1}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 7.965549381s ago: executing program 0 (id=2881): openat$null(0xffffffffffffff9c, 0x0, 0x373981, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000040)=0xa, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) (rerun: 32) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) (async) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) getpid() (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x48}}, 0x4000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 7.955232574s ago: executing program 4 (id=2882): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x6d8300) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000001540)={0xc0000000, 0x9, "bc1fccd448e681382a542e9ea2fa96dc8d376751732903451bd2472430af00", 0x3, 0x7, 0x6, 0x1, 0x9, 0x4, 0x9, 0x9971a997, [0x5, 0x3, 0x80, 0x3]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) unshare(0x62040200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1ff, 0x4, 0x4, 0x9]}, &(0x7f0000000000)=0x54) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f00000001c0)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r10, 0xc01464ba, &(0x7f0000000300)={0x8, 0x0, 0x0, 0xfbfbfbfb}) recvmmsg(r2, &(0x7f0000005780)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/8, 0x1}, {&(0x7f0000001440)=""/247, 0xf7}], 0x3, &(0x7f0000001240)=""/185, 0xb9}, 0x10000}, {{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)=""/23, 0x17}, 0x800005}, {{&(0x7f0000001880)=@x25={0x9, @remote}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/182, 0xb6}, {&(0x7f0000001a40)=""/123, 0x7b}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/229, 0xe5}, {&(0x7f0000001c80)=""/120, 0x78}], 0x6, &(0x7f0000001d40)}, 0x40}, {{&(0x7f0000001d80)=@nl=@proc, 0x80, &(0x7f0000003400)=[{&(0x7f0000001e00)=""/147, 0x93}, {&(0x7f0000001ec0)=""/106, 0x6a}, {&(0x7f0000001f40)=""/208, 0xd0}, {&(0x7f0000002040)=""/226, 0xe2}, {&(0x7f0000001380)=""/188, 0xbc}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/218, 0xda}, {&(0x7f0000003300)=""/241, 0xf1}], 0x8, &(0x7f0000003440)=""/179, 0xb3}, 0x6}, {{&(0x7f0000003500)=@x25={0x9, @remote}, 0x80, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/167, 0xa7}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/38, 0x26}, {&(0x7f0000005680)=""/192, 0xc0}], 0x5}, 0x1}], 0x5, 0x40, 0x0) 6.710015165s ago: executing program 3 (id=2886): inotify_init() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x2048, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r2, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0xee01, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0xd3, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10") 6.417681526s ago: executing program 4 (id=2887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x39, 0x7ff, 0x22}, 0x2c) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r7 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setuid(0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000240)={0x7fffffffffffffff, 0x3, 0x1, 0x6}) 6.416645346s ago: executing program 0 (id=2897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x39, 0x7ff, 0x22}, 0x2c) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r7 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setuid(0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000240)={0x7fffffffffffffff, 0x3, 0x1, 0x6}) 5.504146451s ago: executing program 1 (id=2889): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000001c0)={0x79c, r0, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x9, 0x5, 0xb, 0x5, 0x3, 0xae88, 0xc350, 0x2}, 0x0, 0x0, 0x0, 0x0) 4.047182681s ago: executing program 0 (id=2890): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000077ff00202404019957c2010203010902240001000010000904430002317d55000905020200020200000905820200020000005a67d185b86c85859860026618d129de97c9dae49e4dd56ad77372d93ccbb2aa14bb633dddbccff280fd6fcb043b89fbc9a4f2ca203ec2d1f3bca08707a7d9664770d7ec4fa48ceb9fb7b4f48a76def9e2df8f4da622274685d0ef94e78f768b4b259c0900380e57ebb50e97964a814bfd7678e21d6031cef562b287e74c733d2fa9007bcdfaa10192e7770c6d82d91f0b8121ae30a8be73c885793a1343f51f6b5da2dd7dc4e32240dfef2217008ca0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) close(0xffffffffffffffff) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x181001, 0x180, 0x9}, 0x18) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000300)={0x20, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="97000000000000000000"], 0x0, 0x0}) r1 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="00150404d400000000010080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.647560561s ago: executing program 4 (id=2891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x23b) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 3.556257814s ago: executing program 3 (id=2892): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0xfffffffffffffdd0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b770eeb2b9f6b45306eb4bf0000000000000000", @ANYRES32, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="da5a598d840af8d6ba227af71c5e7643168073679da0c30a0bcbb3ecddf2cf79b3f534e8367f016505c5a3286a327e393c81516c64f13ec6a0f75b5052cfb4f87413c973aa14491afed0d45b52841430ea41f39eb7e7c5d73a60265d2da26ed3423a5f9c764cf13296eb754ef55476601f61614b03143f17c7c36efbf829e2ad66df7b2168cf3dd5fec9a8e526983c8078d8cc5703652e74891301ab", @ANYBLOB='\x00'/25], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x44c80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000000)={0xe1, 0x0, 0x100}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x10000, 0x1}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3.399831517s ago: executing program 5 (id=2893): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60a101, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000004dc0)=[{{&(0x7f0000002240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000021c0)=[{&(0x7f00000022c0)="e3b2b58d856a3c77b0506b023077849df52b7da57f8b302288d558b707148471b098e952df1e90409f7731136ce4565c6f6ca491b7c1e43f3ec275ca053bda14cfd5a8de44c4df2f29ba49d3e5b428c319b41b3ce6324d820f22d42f4586927a3765f57a42d3017f0dd5dd5be754d50985cb560621e7dad90279580179f252a2df4845f5f05985e8ea727ee0e87a7f1383632b64e71b950e", 0x98}, {&(0x7f00000000c0)="95073b03fdf1e1c1d4166806ce3605f5d54b1a411a558d3e106fda5c8c49907fbf6fb7bf9be4c7dde78b68b539eff109d325f0ae5a67e9", 0x37}], 0x2, &(0x7f0000002880)=[@rights={{0x18, 0x1, 0x1, [r4, r2, r0]}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, r4, r1, r0]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r4, r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, r0, r4, r3, r2, r1]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18}}], 0x108, 0x880}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r5, 0xfffffffffffffff5, 0x1) read$FUSE(r5, &(0x7f0000002d80)={0x2020}, 0x2020) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x101401) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0xc000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f00000002c0)={0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xfff8, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) 3.383213427s ago: executing program 1 (id=2894): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0xfd, 0x0, 0xd, 0x3a, @empty, @rand_addr=' \x01\x00', 0x7, 0x80, 0xfffffffc, 0xdc67}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.000293519s ago: executing program 1 (id=2895): openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001200)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061067000000000"]}, @subvolid=0x8}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000000000080005000000000008"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 2.912508471s ago: executing program 5 (id=2896): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x2cc}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r5, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f00000000c0)={{&(0x7f00000005c0)={'KERNEL\x00', {&(0x7f0000000380)=@adf_str={@format={'Cy', '3', 'NumConcurrentRequests\x00'}, {"8d5daefee3c71ffbe09dc5d04d7660b0f8628cc6380d71012c14b0ca4e92605f377ecd4afd39302f02a0a3dd8462ff261afaaa5ea202f5b47f5b33866cce3e7e"}}}, {&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f0000000500)=@adf_str={@format={'Dc', '2', 'RingAsymRx\x00'}, {"98ce8f3acd251183106b0be57818b2655ac31fd7b5887a25834570fbc3777f5188191d136275bd3c68c17dbbfc725b544b17ecd45f90eeccbf15adb9afff50e5"}, {&(0x7f0000000440)=@adf_hex={@normal='NumberCyInstances\x00'}}}}}}}}, 0x81}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) getdents64(r6, 0x0, 0x64) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f00000002c0)=0x2c2, 0x4) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000740)={{0x7, 0x1, 0x9, 0x10000, 'syz0\x00'}, 0x2, 0x100, 0x2, r7, 0x3, 0xb, 'syz0\x00', &(0x7f0000000700)=['}\x96^\x00', 'NumConcurrentRequests\x00', '/dev/fb0\x00'], 0x23}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0x20000000, 0x80, 0x0, 0x11}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 2.83764489s ago: executing program 1 (id=2898): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x6d8300) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000001540)={0xc0000000, 0x9, "bc1fccd448e681382a542e9ea2fa96dc8d376751732903451bd2472430af00", 0x3, 0x7, 0x6, 0x1, 0x9, 0x4, 0x9, 0x9971a997, [0x5, 0x3, 0x80, 0x3]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) unshare(0x62040200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1ff, 0x4, 0x4, 0x9]}, &(0x7f0000000000)=0x54) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f00000001c0)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r10, 0xc01464ba, &(0x7f0000000300)={0x8, 0x0, 0x0, 0xfbfbfbfb}) recvmmsg(r2, &(0x7f0000005780)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/8, 0x1}, {&(0x7f0000001440)=""/247, 0xf7}], 0x3, &(0x7f0000001240)=""/185, 0xb9}, 0x10000}, {{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)=""/23, 0x17}, 0x800005}, {{&(0x7f0000001880)=@x25={0x9, @remote}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/182, 0xb6}, {&(0x7f0000001a40)=""/123, 0x7b}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/229, 0xe5}, {&(0x7f0000001c80)=""/120, 0x78}], 0x6, &(0x7f0000001d40)}, 0x40}, {{&(0x7f0000001d80)=@nl=@proc, 0x80, &(0x7f0000003400)=[{&(0x7f0000001e00)=""/147, 0x93}, {&(0x7f0000001ec0)=""/106, 0x6a}, {&(0x7f0000001f40)=""/208, 0xd0}, {&(0x7f0000002040)=""/226, 0xe2}, {&(0x7f0000001380)=""/188, 0xbc}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/218, 0xda}, {&(0x7f0000003300)=""/241, 0xf1}], 0x8, &(0x7f0000003440)=""/179, 0xb3}, 0x6}, {{&(0x7f0000003500)=@x25={0x9, @remote}, 0x80, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/167, 0xa7}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/38, 0x26}, {&(0x7f0000005680)=""/192, 0xc0}], 0x5}, 0x1}], 0x5, 0x40, 0x0) 2.544317007s ago: executing program 3 (id=2899): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x38, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8, 0x3, 0x0, 0x1}, 0x50) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000380)={0x0, r5, r4}) recvmmsg(r2, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62a9a3f72cc9f0ba1f848360000005e120602000000000e000a0010000000de8000001294", 0x2e}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000000100)="1012e4b574070e1aae4aefff31c7eefe496e9c1ed41f24ea15cffb501af0296ae41667aab7a8", 0x26}, {&(0x7f0000000200)="db21a3889d35de11eed7a39dc7e792b8c7d0496549b5ecad3e5773f51c43c06ab78eae6e2a302f401d9f5716ed90c12ee20d71064c1107ce917a7878d3988eaa2d4adf92b404a8f6f8be198f59f3fcbde5e8de3534b2f99b351a16adce202fd5264a32d221935b6f033611fc2a748e33d5fe352862741d8a4a17060c7b1420cd6cf0cc56622d67e2095de864d3a57bcd41f3f4f40c48c0e18d58f817411db318e1196ff81128e40d1272e0a4069f4f65272cb13f59a64d4aaeae43893d3b5c983ff4f2db8cc28047e46df115a80385c696c475babb4a82d6f270352a43ceac686ead309a6accef68bc97aa28c9c859accd", 0xf1}], 0x5}, 0x20000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, r7, 0x801, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000a}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8a}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x78}]}, 0x40}, 0x1, 0x0, 0x0, 0x4811}, 0x4040801) 2.07243395s ago: executing program 3 (id=2900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x10ba02) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 1.962946397s ago: executing program 4 (id=2901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x39, 0x7ff, 0x22}, 0x2c) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r7 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setuid(0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000240)={0x7fffffffffffffff, 0x3, 0x1, 0x6}) 1.717353632s ago: executing program 3 (id=2902): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x3c, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x7, 0x4, "2afd79"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f306984969"}]}]}, 0x3c}}, 0x0) 1.570082833s ago: executing program 3 (id=2903): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r8, 0x2007ffb) close(r8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000107}]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_usb_connect(0x5, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0xab, 0x1b, 0x25, 0x10, 0x16d0, 0x10b8, 0x664d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x3, 0x40, 0x7f, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0xe4, 0x5f, 0x92, 0x9, [], [{{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x9, 0x7, 0xff}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x5, 0x26}}]}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) 733.315938ms ago: executing program 0 (id=2904): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 711.295511ms ago: executing program 5 (id=2905): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x80000002, 0x12) 517.794655ms ago: executing program 1 (id=2906): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0xfd, 0x0, 0xd, 0x3a, @empty, @rand_addr=' \x01\x00', 0x7, 0x80, 0xfffffffc, 0xdc67}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 408.285731ms ago: executing program 0 (id=2907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r2, 0x0, 0x8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x208, 0x202, 0x225, 0x208, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff], [0xff, 0xffffff00], 'veth1_vlan\x00', 'team_slave_0\x00', {0xff}}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x31, 'syz1\x00', {0x9}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0xff, 0xff000000, 0xff000000], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 'veth1\x00', 'bond_slave_1\x00', {}, {}, 0x66, 0x0, 0x1, 0x28}, 0x0, 0xdc, 0x11c, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x10000006, {0x2}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x10, "3186e66560fb2ae710c3477fa3681c6fe3393db0e7e7547eea70d220b0bc"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x32c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @private2, 0x3}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000040)={r5, 0x7}, 0x8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newtfilter={0x8b4, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x6f}, @filter_kind_options=@f_basic={{0xa}, {0x864, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffffc, 0x4, 0x8, 0x5, 0x0, 0x629, 0x4, 0x10, 0x8, 0x8, 0x9, 0x5, 0x4, 0x0, 0xae, 0x319, 0x0, 0x2, 0x9, 0x7, 0x6, 0x6, 0x6, 0x8001, 0xcb, 0x9, 0xffff, 0x1, 0x8, 0xb2, 0x10001, 0x9, 0x6, 0x0, 0xc6af, 0x0, 0x401, 0x5fe, 0x7, 0x4, 0x1, 0x7, 0x5, 0xc3d, 0x81, 0x2, 0x32, 0x6, 0x6, 0x200, 0x1000, 0xfffffb71, 0x7, 0x4, 0x0, 0x88d, 0x8001, 0x9, 0x6, 0x0, 0x0, 0xe, 0x80, 0x8000, 0x5c20d649, 0x6, 0x2, 0x3800, 0x43, 0xfffffff7, 0x7fffffff, 0x4, 0xab25, 0xffffff7f, 0x1000, 0x5, 0x5, 0x8, 0x8, 0x0, 0x2, 0x1, 0x11, 0x2, 0x0, 0x8, 0x8, 0xfffff713, 0x8, 0x4, 0x8000, 0x3ff, 0x34, 0x7, 0x9, 0xc4c1, 0x6, 0x9, 0x6, 0xed, 0x2, 0xfffffff9, 0x2c0, 0x222000, 0xffff, 0x7, 0x2, 0xa, 0x2, 0x1, 0xfffffff8, 0x7, 0x3, 0x9e, 0x12000000, 0x6, 0x4, 0x4000000, 0x7, 0x3ff, 0x1, 0x8001, 0xfffffffe, 0x7, 0xa774, 0xffffffff, 0x1ff, 0x49, 0x4, 0xf, 0x1, 0xa, 0x4, 0x1, 0x7, 0x1, 0x1da, 0x5, 0xc, 0xaf7, 0x91eb, 0x8, 0x0, 0x51, 0x186, 0x9, 0x4, 0x7, 0x8, 0x9, 0xc7d2, 0xffffffff, 0xd9, 0x3, 0x6, 0x4, 0xfffffffb, 0x4c74, 0x80000001, 0x3, 0x29, 0x8, 0x5, 0x81, 0x9, 0xc, 0x7, 0x101, 0x81, 0x7, 0x3, 0x6, 0x200, 0x0, 0x80000001, 0x1, 0xf, 0x0, 0x4, 0x6e2b, 0x8, 0xffffffff, 0x4, 0xf, 0x101, 0xfff, 0xb7, 0x3ff, 0xff4, 0x0, 0xd, 0x6, 0x5, 0x10000, 0xffff, 0x5, 0x6, 0x5, 0x89, 0x5ebb5170, 0x2, 0x11b4, 0x1, 0x5, 0xffffffc0, 0x1e6b, 0x19, 0x4, 0x7, 0xb8ff, 0x7, 0xfffffffe, 0x7, 0x8, 0x5, 0x9, 0x3, 0x1, 0x7, 0x101, 0x6, 0x2, 0xdd8, 0x6, 0x1c, 0x0, 0xdb, 0xda, 0x2, 0x4, 0xff, 0x6, 0x0, 0x401, 0x1, 0x10000, 0x3, 0x79, 0x0, 0x9, 0x4, 0xffffffff, 0x4, 0x2, 0x5, 0x0, 0x68000000, 0x4, 0xc, 0x7, 0x80000001, 0x1c94, 0x5, 0x6, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x1, 0x7fff, 0x1, 0x8, 0x7f, 0x5, 0x8c, 0x5, 0x7, 0x10000, 0x4, 0x1, 0xc, 0xbb1a, 0x40, 0xc, 0xa, 0x5, 0x4, 0x2c5, 0x4, 0x742, 0xffffffff, 0x200, 0x1, 0xffffffff, 0x7, 0x8, 0x1, 0x5, 0x2, 0xfffff200, 0x101, 0x7, 0x5, 0x10001, 0x2, 0xa, 0x1f, 0x3, 0x5a8b, 0x3, 0x6, 0x80, 0xac06, 0x6, 0xfff, 0xf, 0x1, 0xfffffffb, 0xfff, 0x9, 0x2, 0xeb, 0x2, 0xf166, 0x1000, 0xcb, 0x4, 0xffffffff, 0x0, 0x23, 0x5, 0x0, 0xe, 0x8, 0x81, 0xfffffe00, 0x1, 0x4a, 0x3, 0x316, 0x8, 0x6, 0x4, 0x85c, 0xeab, 0x200, 0x8, 0x10000, 0x2, 0x992, 0xfffffff9, 0x7, 0x8, 0x3, 0x4, 0x80000001, 0x7, 0x1, 0x8, 0x9b, 0x4, 0x6, 0x1, 0x4, 0x3, 0x3, 0x9, 0x3, 0xfffffdf7, 0x2, 0x4, 0x0, 0x9, 0x7, 0x8001, 0x100, 0x4, 0x80000000, 0x101, 0x2, 0x8, 0x2, 0x800, 0x800, 0x7fffffff, 0x4, 0x2, 0xc519, 0x2, 0x0, 0x101, 0x3, 0xfffffff9, 0x3, 0xe, 0x6, 0x180000, 0x2, 0xee, 0x3, 0x9, 0x1, 0x7441, 0x3, 0xd, 0x9, 0x7, 0x81, 0x3, 0x40, 0x4, 0x800, 0x5, 0x6, 0xffffffff, 0x8, 0x80000000, 0x3, 0x2, 0x8000, 0x2, 0x9edfca2, 0x8, 0x8684, 0x5, 0x10001, 0xffffffff, 0x1, 0x80000001, 0x5, 0x6, 0x6, 0x0, 0x6, 0xfffffff7, 0x5, 0x1ff, 0x80000000, 0x6, 0x5, 0x10001, 0x401, 0xfffffffe, 0x8, 0xa, 0x0, 0x4, 0x5, 0x7, 0x9, 0x8, 0x40000000, 0x55aa, 0x0, 0x5, 0x10, 0x3, 0x413, 0x6, 0x9, 0x6, 0x0, 0x60, 0x6, 0x9, 0x5, 0x2, 0x400, 0x0, 0x1ff, 0xac, 0x5, 0xf, 0x1, 0x1000, 0x57, 0x2, 0x2, 0xfffffffb, 0x6, 0x7ff, 0xfffff801, 0x9, 0x6ba, 0xffffffff, 0xffffffff, 0x5, 0x6, 0x7ff, 0x7, 0xd, 0x625, 0x1, 0x6, 0xfffffff8, 0x1f8e, 0x5, 0x9, 0x4, 0x0, 0x5, 0xb, 0x7, 0xffffffff, 0x7, 0x3, 0x6, 0x5, 0x2, 0xffffffff, 0x5, 0xfff, 0x5, 0x401, 0x44, 0x4, 0x100, 0x0, 0xef, 0xb, 0x5, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x1, 0x3, 0x856, 0x2, {0x2, 0x1, 0x9, 0x7, 0xffcb, 0x9}, {0x9, 0x2, 0xbc, 0x3, 0x5737, 0x7}, 0x6, 0x7, 0x6}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8b4}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 382.11905ms ago: executing program 5 (id=2908): openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001200)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061067000000000"]}, @subvolid=0x8}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 371.997021ms ago: executing program 1 (id=2909): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0xfffffffffffffdd0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b770eeb2b9f6b45306eb4bf0000000000000000", @ANYRES32, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="da5a598d840af8d6ba227af71c5e7643168073679da0c30a0bcbb3ecddf2cf79b3f534e8367f016505c5a3286a327e393c81516c64f13ec6a0f75b5052cfb4f87413c973aa14491afed0d45b52841430ea41f39eb7e7c5d73a60265d2da26ed3423a5f9c764cf13296eb754ef55476601f61614b03143f17c7c36efbf829e2ad66df7b2168cf3dd5fec9a8e526983c8078d8cc5703652e74891301ab", @ANYBLOB='\x00'/25], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x44c80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000000)={0xe1, 0x0, 0x100}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x10000, 0x1}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 153.392456ms ago: executing program 5 (id=2910): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) msgsnd(0x0, &(0x7f0000000200)=ANY=[], 0x8, 0x0) msgrcv(0x0, &(0x7f00000001c0)={0x0, ""/75}, 0x53, 0x2, 0x2000) 0s ago: executing program 5 (id=2911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x23b) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) kernel console output (not intermixed with test programs): ice batadv0 [ 702.109521][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 702.116920][ T5931] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 702.134737][ T5931] usb 6-1: config 0 has no interface number 0 [ 702.160415][ T5931] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 702.186784][ T5931] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 702.213574][T14503] veth0_vlan: entered promiscuous mode [ 702.229109][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.250008][ T5931] usb 6-1: Product: syz [ 702.254253][ T5931] usb 6-1: Manufacturer: syz [ 702.268195][T14503] veth1_vlan: entered promiscuous mode [ 702.279658][ T5931] usb 6-1: SerialNumber: syz [ 702.318870][ T5931] usb 6-1: config 0 descriptor?? [ 702.341136][T14584] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 702.393477][T14503] veth0_macvtap: entered promiscuous mode [ 702.439847][T14503] veth1_macvtap: entered promiscuous mode [ 702.507492][T14503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.551182][T14503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.580091][T14584] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 702.624617][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.645535][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.671870][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.713824][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.011984][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.049693][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.126770][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.135929][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.220149][ T5898] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58 [ 703.507732][ T5931] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 703.522927][ T5931] asix 6-1:0.188: probe with driver asix failed with error -32 [ 703.559820][ T5898] rc_core: IR keymap rc-imon-pad not found [ 703.571669][ T5898] Registered IR keymap rc-empty [ 703.582851][ T5898] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 703.602691][ T5898] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 703.623486][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 703.646314][ T5898] imon:send_packet: packet tx failed (-71) [ 703.669842][ T5898] imon 5-1:0.0: remote input dev register failed [ 703.680046][ T5898] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 703.703357][ T5898] imon 5-1:0.0: unable to initialize intf0, err 0 [ 703.709913][T14610] syz.3.2614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 703.725236][ T5898] imon:imon_probe: failed to initialize context! [ 703.737305][ T5898] imon 5-1:0.0: unable to register, err -19 [ 703.764129][ T5898] usb 5-1: USB disconnect, device number 69 [ 703.809990][T11315] Bluetooth: hci3: command tx timeout [ 704.263032][T14615] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 704.365656][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 704.623329][ T5834] usb 6-1: USB disconnect, device number 50 [ 704.709578][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 704.872363][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.889028][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.907189][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 704.923942][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 704.938090][ T10] usb 2-1: SerialNumber: syz [ 705.341596][ T10] usb 2-1: 0:2 : does not exist [ 705.383463][ T10] usb 2-1: USB disconnect, device number 49 [ 705.482713][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.649928][T14651] FAULT_INJECTION: forcing a failure. [ 706.649928][T14651] name failslab, interval 1, probability 0, space 0, times 0 [ 706.759859][T14651] CPU: 0 UID: 0 PID: 14651 Comm: syz.4.2627 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.759885][T14651] Tainted: [L]=SOFTLOCKUP [ 706.759891][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 706.759902][T14651] Call Trace: [ 706.759909][T14651] [ 706.759917][T14651] dump_stack_lvl+0xe8/0x150 [ 706.759942][T14651] should_fail_ex+0x414/0x560 [ 706.759972][T14651] should_failslab+0xa8/0x100 [ 706.759994][T14651] __kmalloc_noprof+0xdf/0x800 [ 706.760010][T14651] ? tomoyo_encode2+0x27f/0x530 [ 706.760056][T14651] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 706.760089][T14651] tomoyo_encode2+0x27f/0x530 [ 706.760125][T14651] tomoyo_check_unix_address+0x3c3/0x7b0 [ 706.760160][T14651] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 706.760189][T14651] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 706.760246][T14651] tomoyo_socket_sendmsg_permission+0x1da/0x300 [ 706.760289][T14651] security_socket_sendmsg+0x9b/0x2b0 [ 706.760326][T14651] __sock_sendmsg+0x49/0x270 [ 706.760356][T14651] ? ____sys_sendmsg+0x519/0x820 [ 706.760382][T14651] ____sys_sendmsg+0x52d/0x820 [ 706.760416][T14651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.760447][T14651] ? rcu_is_watching+0x15/0xb0 [ 706.760475][T14651] ? ___sys_sendmsg+0x22f/0x2a0 [ 706.760507][T14651] ___sys_sendmsg+0x21f/0x2a0 [ 706.760535][T14651] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.760567][T14651] ? kstrtoull+0x12f/0x1d0 [ 706.760602][T14651] ? kstrtouint+0x6e/0xe0 [ 706.760673][T14651] __sys_sendmmsg+0x28e/0x430 [ 706.760708][T14651] ? __pfx___sys_sendmmsg+0x10/0x10 [ 706.760734][T14651] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 706.760786][T14651] ? ksys_write+0x22a/0x250 [ 706.760809][T14651] ? __pfx_ksys_write+0x10/0x10 [ 706.760837][T14651] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 706.760871][T14651] __do_fast_syscall_32+0x1dc/0x560 [ 706.760897][T14651] ? lockdep_hardirqs_on+0x7b/0x110 [ 706.760918][T14651] ? do_fast_syscall_32+0x34/0x80 [ 706.760943][T14651] ? irqentry_exit+0x10f/0x660 [ 706.760969][T14651] do_fast_syscall_32+0x34/0x80 [ 706.760995][T14651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 706.761023][T14651] RIP: 0023:0xf7fd6539 [ 706.761042][T14651] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 706.761063][T14651] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 706.761089][T14651] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 706.761106][T14651] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 706.761119][T14651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 706.761133][T14651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 706.761147][T14651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.761179][T14651] [ 707.620535][ T5931] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 707.809608][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 707.817256][ T5931] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.829577][ T5931] usb 6-1: config 0 interface 0 has no altsetting 0 [ 707.840546][ T5931] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 707.849993][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.858045][ T5931] usb 6-1: Product: syz [ 707.862355][ T5931] usb 6-1: Manufacturer: syz [ 707.866962][ T5931] usb 6-1: SerialNumber: syz [ 707.884601][ T5931] usb 6-1: config 0 descriptor?? [ 708.209967][ T5834] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 708.228353][T14665] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 708.389585][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 708.400346][ T5834] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 708.415142][ T5834] usb 5-1: config 0 has no interface number 0 [ 708.428103][ T5834] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 708.457209][ T5834] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 708.469738][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.485139][ T5834] usb 5-1: Product: syz [ 708.496557][ T5834] usb 5-1: Manufacturer: syz [ 708.506250][ T5834] usb 5-1: SerialNumber: syz [ 708.527217][ T5834] usb 5-1: config 0 descriptor?? [ 708.541505][T14661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 708.729108][ T5931] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input60 [ 708.765965][T14661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 709.079591][ T5931] rc_core: IR keymap rc-imon-pad not found [ 709.085573][ T5931] Registered IR keymap rc-empty [ 709.096939][ T5931] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 709.121137][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 709.147946][ T5931] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 709.205052][ T5931] imon:send_packet: packet tx failed (-71) [ 709.258569][ T5931] imon 6-1:0.0: remote input dev register failed [ 709.276964][ T5931] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 709.453818][ T5931] imon 6-1:0.0: unable to initialize intf0, err 0 [ 709.465571][ T5931] imon:imon_probe: failed to initialize context! [ 709.470436][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 709.480148][ T5931] imon 6-1:0.0: unable to register, err -19 [ 709.493627][ T5931] usb 6-1: USB disconnect, device number 51 [ 709.672662][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 709.680142][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 709.688542][ T10] usb 4-1: config 0 has no interface number 0 [ 709.719808][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 709.761200][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 709.846018][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 709.866668][ T5834] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 709.892744][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.913592][ T10] usb 4-1: Product: syz [ 709.925938][ T5834] asix 5-1:0.188: probe with driver asix failed with error -32 [ 709.951522][ T10] usb 4-1: Manufacturer: syz [ 709.977719][ T10] usb 4-1: SerialNumber: syz [ 710.053414][ T10] usb 4-1: config 0 descriptor?? [ 710.266128][ T10] appletouch 4-1:0.85: Failed to read mode from device. [ 710.274236][ T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 710.285541][T11315] Bluetooth: hci3: hardware error 0x04 [ 710.338651][ T10] usb 4-1: USB disconnect, device number 33 [ 710.378044][T14686] bridge_slave_0: default FDB implementation only supports local addresses [ 710.939662][ T5834] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 711.039834][ T5931] usb 5-1: USB disconnect, device number 70 [ 711.101709][ T5834] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.111948][ T5834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.145293][ T5834] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 711.173429][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 711.262982][ T5834] usb 6-1: SerialNumber: syz [ 711.409610][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 711.599714][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 711.609790][ T10] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 711.619546][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 711.628017][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 711.647739][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 711.669850][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 711.687712][ T10] usb 4-1: config 0 has no interface number 0 [ 711.704828][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 711.752513][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 711.794673][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 711.813288][ T5834] usb 6-1: 0:2 : does not exist [ 711.842601][ T10] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 712.007263][ T10] usb 4-1: config 0 interface 125 has no altsetting 0 [ 712.023235][ T10] usb 4-1: config 0 interface 125 has no altsetting 2 [ 712.042007][ T10] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 712.053522][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.067039][ T10] usb 4-1: Product: syz [ 712.074890][ T10] usb 4-1: Manufacturer: syz [ 712.083894][ T10] usb 4-1: SerialNumber: syz [ 712.107721][ T10] usb 4-1: config 0 descriptor?? [ 712.133198][ T10] usb 4-1: selecting invalid altsetting 2 [ 712.151974][ T5834] usb 6-1: USB disconnect, device number 52 [ 712.231740][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.369594][T11315] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 712.544302][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 712.582862][ C0] usb 4-1: async_complete: urb error -71 [ 712.588689][ C0] usb 4-1: async_complete: urb error -71 [ 712.594573][ C0] usb 4-1: async_complete: urb error -71 [ 712.600365][ C0] usb 4-1: async_complete: urb error -71 [ 712.643783][ T10] get_1284_register: usb error -71 [ 712.653203][ T10] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 712.715256][ T10] usb 4-1: USB disconnect, device number 34 [ 712.909578][T14589] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 712.934757][T14673] syz.1.2631 (14673): drop_caches: 1 [ 713.059776][T14589] usb 6-1: device descriptor read/64, error -71 [ 713.213742][T14715] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 713.300382][T14589] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 713.439532][T14589] usb 6-1: device descriptor read/64, error -71 [ 713.550160][T14589] usb usb6-port1: attempt power cycle [ 714.370451][T14748] input: syz0 as /devices/virtual/input/input64 [ 714.459826][ T5834] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 714.712673][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.917308][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.211186][ T5834] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 715.222318][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 715.231759][ T5834] usb 5-1: SerialNumber: syz [ 715.766391][T14757] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.792463][T14757] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2654'. [ 715.881516][ T5834] usb 5-1: 0:2 : does not exist [ 715.928541][ T5834] usb 5-1: USB disconnect, device number 71 [ 716.267377][T14764] syzkaller0: entered promiscuous mode [ 716.278128][T14764] syzkaller0: entered allmulticast mode [ 716.901630][T14780] FAULT_INJECTION: forcing a failure. [ 716.901630][T14780] name failslab, interval 1, probability 0, space 0, times 0 [ 716.975362][T14780] CPU: 1 UID: 0 PID: 14780 Comm: syz.1.2661 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.975403][T14780] Tainted: [L]=SOFTLOCKUP [ 716.975418][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 716.975434][T14780] Call Trace: [ 716.975442][T14780] [ 716.975450][T14780] dump_stack_lvl+0xe8/0x150 [ 716.975476][T14780] should_fail_ex+0x414/0x560 [ 716.975505][T14780] should_failslab+0xa8/0x100 [ 716.975527][T14780] __kmalloc_cache_noprof+0x84/0x700 [ 716.975545][T14780] ? sctp_add_bind_addr+0x8c/0x370 [ 716.975572][T14780] sctp_add_bind_addr+0x8c/0x370 [ 716.975597][T14780] sctp_bind_addr_copy+0xb3/0x3c0 [ 716.975620][T14780] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 716.975643][T14780] sctp_connect_new_asoc+0x2e0/0x690 [ 716.975662][T14780] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 716.975681][T14780] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 716.975698][T14780] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 716.975713][T14780] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 716.975730][T14780] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 716.975747][T14780] ? security_sctp_bind_connect+0x7e/0x2e0 [ 716.975766][T14780] sctp_sendmsg+0x155c/0x2840 [ 716.975790][T14780] ? __pfx_sctp_sendmsg+0x10/0x10 [ 716.975804][T14780] ? aa_sk_perm+0x15f/0x920 [ 716.975824][T14780] ? aa_sk_perm+0x7ee/0x920 [ 716.975846][T14780] ? __pfx_aa_sk_perm+0x10/0x10 [ 716.975867][T14780] ? sock_rps_record_flow+0x19/0x410 [ 716.975890][T14780] ? inet_sendmsg+0x2f4/0x370 [ 716.975910][T14780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 716.975927][T14780] __sock_sendmsg+0x19c/0x270 [ 716.975954][T14780] ____sys_sendmsg+0x505/0x820 [ 716.975977][T14780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.975999][T14780] ? lockdep_hardirqs_on+0x7b/0x110 [ 716.976016][T14780] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 716.976046][T14780] ___sys_sendmsg+0x21f/0x2a0 [ 716.976067][T14780] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.976087][T14780] ? __rcu_read_unlock+0x84/0xe0 [ 716.976101][T14780] ? get_pid_task+0x20/0x1f0 [ 716.976143][T14780] ? __fget_files+0x2a/0x420 [ 716.976162][T14780] ? __fget_files+0x3a0/0x420 [ 716.976189][T14780] __sys_sendmsg+0x164/0x220 [ 716.976210][T14780] ? __pfx___sys_sendmsg+0x10/0x10 [ 716.976235][T14780] ? rcu_is_watching+0x15/0xb0 [ 716.976264][T14780] __do_fast_syscall_32+0x1dc/0x560 [ 716.976282][T14780] ? lockdep_hardirqs_on+0x7b/0x110 [ 716.976297][T14780] ? do_fast_syscall_32+0x34/0x80 [ 716.976314][T14780] ? irqentry_exit+0x10f/0x660 [ 716.976332][T14780] do_fast_syscall_32+0x34/0x80 [ 716.976350][T14780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 716.976370][T14780] RIP: 0023:0xf7f44539 [ 716.976385][T14780] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 716.976398][T14780] RSP: 002b:00000000f541555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 716.976415][T14780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 716.976496][T14780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.976509][T14780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 716.976522][T14780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 716.976535][T14780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 716.976566][T14780] [ 717.714914][T14788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 717.803805][T14793] loop2: detected capacity change from 0 to 7 [ 717.814864][T14793] Dev loop2: unable to read RDB block 7 [ 717.820662][T14793] loop2: AHDI p1 p2 p3 [ 717.830013][T14793] loop2: partition table partially beyond EOD, truncated [ 717.838281][T14793] loop2: p1 start 1601398130 is beyond EOD, truncated [ 717.845891][T14793] loop2: p2 start 1702059890 is beyond EOD, truncated [ 718.045240][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2666'. [ 718.584435][ T5203] Dev loop2: unable to read RDB block 7 [ 718.620265][ T5203] loop2: AHDI p1 p2 p3 [ 718.624721][ T5203] loop2: partition table partially beyond EOD, truncated [ 718.632874][ T5203] loop2: p1 start 1601398130 is beyond EOD, truncated [ 718.640293][ T5203] loop2: p2 start 1702059890 is beyond EOD, truncated [ 719.302993][ T5930] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 719.596113][T14589] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 719.623451][ T5930] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.642734][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.670751][ T5930] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 719.682849][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 719.693285][ T5930] usb 4-1: SerialNumber: syz [ 719.785213][T14589] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 719.796041][T14589] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.810137][T14589] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.824772][T14589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.836663][T14589] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.846284][T14589] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.857539][T14589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.889767][T14589] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.898980][T14589] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.910907][T14589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.940140][T14589] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.949147][T14589] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.026130][T14589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 720.035327][T14589] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.044550][T14589] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.057099][T14589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 720.067032][T14589] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.077662][T14589] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.091526][T14589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 720.101346][T14589] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.110566][T14589] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.121934][T14589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 720.148734][T14589] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.158009][T14589] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.172419][T14589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 720.182470][T14589] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 720.206108][ T5930] usb 4-1: 0:2 : does not exist [ 720.218094][T14589] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 720.227903][T14589] usb 2-1: Product: syz [ 720.241791][ T5930] usb 4-1: USB disconnect, device number 35 [ 720.265859][T14589] usb 2-1: Manufacturer: syz [ 720.278726][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.296801][T14589] usb 2-1: SerialNumber: syz [ 720.306712][T14589] usb 2-1: config 0 descriptor?? [ 720.327021][T14589] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 720.669390][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 720.680079][ T5930] usb 2-1: USB disconnect, device number 50 [ 720.690484][ T5930] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 721.049610][ T5930] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 721.366148][T14836] trusted_key: encrypted_key: insufficient parameters specified [ 721.392954][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2676'. [ 721.498298][ T5930] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 721.524279][ T5930] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.558335][ T5930] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.621022][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 721.642701][ T5930] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.999993][ T5930] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 722.033044][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 722.058529][ T5930] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 722.072268][T14838] FAULT_INJECTION: forcing a failure. [ 722.072268][T14838] name failslab, interval 1, probability 0, space 0, times 0 [ 722.085325][ T5930] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 722.096616][T14838] CPU: 0 UID: 0 PID: 14838 Comm: syz.4.2677 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.096652][T14838] Tainted: [L]=SOFTLOCKUP [ 722.096661][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 722.096675][T14838] Call Trace: [ 722.096684][T14838] [ 722.096695][T14838] dump_stack_lvl+0xe8/0x150 [ 722.096730][T14838] should_fail_ex+0x414/0x560 [ 722.096771][T14838] should_failslab+0xa8/0x100 [ 722.096802][T14838] __kmalloc_noprof+0xdf/0x800 [ 722.096825][T14838] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 722.096857][T14838] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 722.096888][T14838] genl_family_rcv_msg_doit+0xb8/0x300 [ 722.096918][T14838] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 722.096950][T14838] ? apparmor_capable+0x137/0x1a0 [ 722.096988][T14838] ? bpf_lsm_capable+0x9/0x20 [ 722.097027][T14838] ? security_capable+0x7e/0x2e0 [ 722.097060][T14838] genl_rcv_msg+0x60e/0x790 [ 722.097090][T14838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 722.097109][T14838] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 722.097135][T14838] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 722.097168][T14838] ? __pfx_nl80211_post_doit+0x10/0x10 [ 722.097196][T14838] ? __asan_memcpy+0x40/0x70 [ 722.097215][T14838] ? __pfx_ref_tracker_free+0x10/0x10 [ 722.097247][T14838] netlink_rcv_skb+0x208/0x470 [ 722.097277][T14838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 722.097300][T14838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 722.097326][T14838] ? genl_rcv+0x19/0x40 [ 722.097378][T14838] ? down_read+0x274/0x2e0 [ 722.097403][T14838] ? genl_rcv+0xd/0x40 [ 722.097438][T14838] genl_rcv+0x28/0x40 [ 722.097470][T14838] netlink_unicast+0x82f/0x9e0 [ 722.097506][T14838] ? __pfx_netlink_unicast+0x10/0x10 [ 722.097531][T14838] ? __alloc_skb+0x198/0x3a0 [ 722.097556][T14838] ? netlink_sendmsg+0x642/0xb30 [ 722.097583][T14838] ? skb_put+0x11b/0x210 [ 722.097616][T14838] netlink_sendmsg+0x805/0xb30 [ 722.097657][T14838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.097690][T14838] ? __import_iovec+0x5d4/0x7f0 [ 722.097715][T14838] ? aa_sock_msg_perm+0xf1/0x1b0 [ 722.097745][T14838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 722.097767][T14838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.097798][T14838] __sock_sendmsg+0x21c/0x270 [ 722.097835][T14838] ____sys_sendmsg+0x505/0x820 [ 722.097867][T14838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.097901][T14838] ? kstrtouint+0x6e/0xe0 [ 722.097942][T14838] ___sys_sendmsg+0x21f/0x2a0 [ 722.097973][T14838] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.098000][T14838] ? get_pid_task+0x20/0x1f0 [ 722.098036][T14838] ? get_pid_task+0x20/0x1f0 [ 722.098063][T14838] ? get_pid_task+0x20/0x1f0 [ 722.098126][T14838] ? __fget_files+0x2a/0x420 [ 722.098154][T14838] ? __fget_files+0x3a0/0x420 [ 722.098194][T14838] __sys_sendmsg+0x164/0x220 [ 722.098225][T14838] ? __pfx___sys_sendmsg+0x10/0x10 [ 722.098262][T14838] ? __pfx_ksys_write+0x10/0x10 [ 722.098298][T14838] __do_fast_syscall_32+0x1dc/0x560 [ 722.098324][T14838] ? lockdep_hardirqs_on+0x7b/0x110 [ 722.098346][T14838] ? do_fast_syscall_32+0x34/0x80 [ 722.098370][T14838] ? irqentry_exit+0x10f/0x660 [ 722.098398][T14838] do_fast_syscall_32+0x34/0x80 [ 722.098424][T14838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 722.098452][T14838] RIP: 0023:0xf7fd6539 [ 722.098472][T14838] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 722.098493][T14838] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 722.098517][T14838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 722.098534][T14838] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 722.098548][T14838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 722.098562][T14838] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 722.098576][T14838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 722.098610][T14838] [ 722.485651][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 722.683132][ T5930] usb 2-1: unable to read config index 3 descriptor/all [ 722.690936][ T5930] usb 2-1: can't read configurations, error -71 [ 722.840413][T14842] fuse: Bad value for 'fd' [ 722.962518][T14850] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 723.217909][T14857] syz_tun: left promiscuous mode [ 723.232881][T14857] team0: left promiscuous mode [ 723.237774][T14857] C: left promiscuous mode [ 723.243048][T14857] team_slave_1: left promiscuous mode [ 723.517133][T14857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 723.549594][ T5930] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 723.753401][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 723.830918][ T5930] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 723.853092][ T5930] usb 2-1: config 0 has no interface number 0 [ 723.885789][ T5930] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.906494][ T5930] usb 2-1: config 0 interface 85 has no altsetting 0 [ 724.053977][ T5930] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 724.069792][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.089544][ T5930] usb 2-1: Product: syz [ 724.114239][ T5930] usb 2-1: Manufacturer: syz [ 724.118874][ T5930] usb 2-1: SerialNumber: syz [ 724.170157][ T5930] usb 2-1: config 0 descriptor?? [ 724.483329][ T5930] appletouch 2-1:0.85: Failed to read mode from device. [ 724.499064][ T5930] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 724.564214][ T5921] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 725.457850][T14796] syz.4.2663 (14796) used greatest stack depth: 18496 bytes left [ 725.540678][ T5930] usb 2-1: USB disconnect, device number 52 [ 725.700759][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.713964][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.769362][ T5921] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 725.779360][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 725.787570][ T5921] usb 4-1: SerialNumber: syz [ 726.233964][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2687'. [ 726.366552][ T5921] usb 4-1: 0:2 : does not exist [ 726.394812][ T5921] usb 4-1: USB disconnect, device number 36 [ 726.448582][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.570444][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 726.570465][ T30] audit: type=1800 audit(1766827913.667:1207): pid=14882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2688" name="bus" dev="ramfs" ino=56811 res=0 errno=0 [ 726.956138][ T5921] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 727.139757][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 727.148768][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 727.168516][ T5921] usb 5-1: config 8 interface 0 altsetting 64 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 727.180795][ T5921] usb 5-1: config 8 interface 0 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 727.192461][ T5921] usb 5-1: config 8 interface 0 has no altsetting 0 [ 727.211329][ T5921] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=66.4d [ 727.223002][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.231696][ T5921] usb 5-1: Product: syz [ 727.236096][ T5921] usb 5-1: Manufacturer: syz [ 727.241571][ T5921] usb 5-1: SerialNumber: syz [ 727.329782][ T5930] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 727.490712][ T5930] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 727.500608][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 727.512422][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 727.524506][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 727.533432][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 727.546677][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 727.561749][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 727.570896][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 727.588349][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 727.600931][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 727.615297][T14905] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 727.627348][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 727.640583][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 727.654455][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 727.675241][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 727.692471][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 727.703809][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 727.712431][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 727.721981][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 727.735137][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 727.756434][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 727.767024][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 727.778402][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 727.786938][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 727.796297][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 727.807796][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 727.818784][ T5930] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 727.828457][ T5930] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 727.837134][ T5930] usb 6-1: Product: syz [ 727.844074][ T5930] usb 6-1: Manufacturer: syz [ 727.848864][ T5930] usb 6-1: SerialNumber: syz [ 727.857938][ T5930] usb 6-1: config 0 descriptor?? [ 727.874761][ T5930] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 728.127003][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2696'. [ 728.194415][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 728.209637][ T5930] usb 6-1: USB disconnect, device number 56 [ 728.236506][ T5930] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 728.561747][ T5930] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 728.719652][T14589] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 728.731679][ T5930] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 728.741688][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.149979][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.177971][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 729.189935][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.208465][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.228910][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 729.239280][T14589] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 729.260789][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.270084][T14589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.279040][T14589] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.299700][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.319624][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 729.337339][T14589] usb 4-1: config 0 interface 0 has no altsetting 0 [ 729.351330][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.365965][T14589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.376677][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.399797][T14589] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.407825][ T5921] gs_usb 5-1:8.0: Required endpoints not found [ 729.430508][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 729.451101][ T5921] usb 5-1: USB disconnect, device number 72 [ 729.451299][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.469200][T14589] usb 4-1: config 0 interface 0 has no altsetting 0 [ 729.495627][T14589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.506865][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.518199][T14589] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.555717][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 729.562911][T14589] usb 4-1: config 0 interface 0 has no altsetting 0 [ 729.600440][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.610332][T14589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.619275][T14589] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.640103][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.657928][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 729.664804][T14589] usb 4-1: config 0 interface 0 has no altsetting 0 [ 729.673325][T14589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.688320][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.699919][T14589] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.711232][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.722854][T14589] usb 4-1: config 0 interface 0 has no altsetting 0 [ 729.730082][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 729.738643][ T5930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.748495][T14589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.761184][ T5930] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.774221][T14589] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.785975][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 729.792972][T14589] usb 4-1: config 0 interface 0 has no altsetting 0 [ 729.802452][T14589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.813402][T14589] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.825483][ T5930] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 729.834674][T14589] usb 4-1: config 0 interface 0 has no altsetting 0 [ 729.918033][ T5930] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 729.933084][T14589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.944783][ T5930] usb 6-1: Product: syz [ 729.949145][ T5930] usb 6-1: Manufacturer: syz [ 729.957278][T14589] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.968521][ T5930] usb 6-1: SerialNumber: syz [ 729.975735][T14589] usb 4-1: config 0 interface 0 has no altsetting 0 [ 729.984029][ T5930] usb 6-1: config 0 descriptor?? [ 729.995226][T14589] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 730.005164][T14589] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 730.018694][ T5930] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 730.057164][T14589] usb 4-1: Product: syz [ 730.061697][ T5921] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 730.069797][T14589] usb 4-1: Manufacturer: syz [ 730.078121][T14589] usb 4-1: SerialNumber: syz [ 730.101081][T14589] usb 4-1: config 0 descriptor?? [ 730.119039][T14925] trusted_key: encrypted_key: insufficient parameters specified [ 730.133166][T14925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2700'. [ 730.242956][ T5898] usb 6-1: USB disconnect, device number 57 [ 730.265582][T14589] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 730.279563][ T5921] usb 2-1: device descriptor read/64, error -71 [ 730.292831][ T5898] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 730.544301][ T5921] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 730.847282][ T5898] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 730.961836][T14930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.002899][T14930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.059748][ T5921] usb 2-1: device descriptor read/64, error -71 [ 731.104058][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.114327][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.129025][ T5898] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 731.138411][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 731.146911][ T5898] usb 6-1: SerialNumber: syz [ 731.195925][ T5921] usb usb2-port1: attempt power cycle [ 731.475722][ T5898] usb 6-1: 0:2 : does not exist [ 731.517437][ T5898] usb 6-1: USB disconnect, device number 58 [ 731.549688][ T5921] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 731.582057][ T5921] usb 2-1: device descriptor read/8, error -71 [ 731.630292][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.819528][ T5921] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 731.851031][ T5921] usb 2-1: device descriptor read/8, error -71 [ 731.959788][ T5921] usb usb2-port1: unable to enumerate USB device [ 732.124951][ T5931] usb 4-1: USB disconnect, device number 37 [ 732.152294][ T5931] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 732.290365][ T5898] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 732.339918][T14951] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 732.611650][ T5898] usb 5-1: config 0 has no interfaces? [ 732.627506][ T5898] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 732.645633][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.679534][ T5898] usb 5-1: Product: syz [ 732.687818][ T5898] usb 5-1: Manufacturer: syz [ 732.695078][ T5898] usb 5-1: SerialNumber: syz [ 732.711340][ T5898] usb 5-1: config 0 descriptor?? [ 733.035910][ T5931] usb 5-1: USB disconnect, device number 73 [ 733.083468][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 733.109898][T14955] FAULT_INJECTION: forcing a failure. [ 733.109898][T14955] name failslab, interval 1, probability 0, space 0, times 0 [ 733.167838][T14955] CPU: 0 UID: 0 PID: 14955 Comm: syz.1.2708 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.167874][T14955] Tainted: [L]=SOFTLOCKUP [ 733.167883][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 733.167900][T14955] Call Trace: [ 733.167908][T14955] [ 733.167916][T14955] dump_stack_lvl+0xe8/0x150 [ 733.167942][T14955] should_fail_ex+0x414/0x560 [ 733.167972][T14955] should_failslab+0xa8/0x100 [ 733.167993][T14955] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 733.168021][T14955] ? __alloc_skb+0x1dc/0x3a0 [ 733.168036][T14955] ? __local_bh_enable_ip+0xd0/0x130 [ 733.168054][T14955] ? __alloc_skb+0x198/0x3a0 [ 733.168071][T14955] __alloc_skb+0x1dc/0x3a0 [ 733.168096][T14955] netlink_ack+0x146/0xa50 [ 733.168114][T14955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.168128][T14955] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 733.168146][T14955] ? __pfx_nl80211_post_doit+0x10/0x10 [ 733.168175][T14955] netlink_rcv_skb+0x28c/0x470 [ 733.168196][T14955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.168211][T14955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 733.168230][T14955] ? genl_rcv+0x19/0x40 [ 733.168266][T14955] ? down_read+0x274/0x2e0 [ 733.168284][T14955] ? genl_rcv+0xd/0x40 [ 733.168309][T14955] genl_rcv+0x28/0x40 [ 733.168334][T14955] netlink_unicast+0x82f/0x9e0 [ 733.168360][T14955] ? __pfx_netlink_unicast+0x10/0x10 [ 733.168377][T14955] ? __alloc_skb+0x198/0x3a0 [ 733.168393][T14955] ? netlink_sendmsg+0x642/0xb30 [ 733.168412][T14955] ? skb_put+0x11b/0x210 [ 733.168432][T14955] netlink_sendmsg+0x805/0xb30 [ 733.168460][T14955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.168487][T14955] ? __import_iovec+0x5d4/0x7f0 [ 733.168505][T14955] ? aa_sock_msg_perm+0xf1/0x1b0 [ 733.168527][T14955] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 733.168542][T14955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.168563][T14955] __sock_sendmsg+0x21c/0x270 [ 733.168589][T14955] ____sys_sendmsg+0x505/0x820 [ 733.168612][T14955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.168635][T14955] ? kstrtouint+0x6e/0xe0 [ 733.168665][T14955] ___sys_sendmsg+0x21f/0x2a0 [ 733.168686][T14955] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.168704][T14955] ? get_pid_task+0x20/0x1f0 [ 733.168725][T14955] ? get_pid_task+0x20/0x1f0 [ 733.168743][T14955] ? get_pid_task+0x20/0x1f0 [ 733.168785][T14955] ? __fget_files+0x2a/0x420 [ 733.168804][T14955] ? __fget_files+0x3a0/0x420 [ 733.168831][T14955] __sys_sendmsg+0x164/0x220 [ 733.168851][T14955] ? __pfx___sys_sendmsg+0x10/0x10 [ 733.168899][T14955] ? __pfx_ksys_write+0x10/0x10 [ 733.168934][T14955] __do_fast_syscall_32+0x1dc/0x560 [ 733.168959][T14955] ? lockdep_hardirqs_on+0x7b/0x110 [ 733.168981][T14955] ? do_fast_syscall_32+0x34/0x80 [ 733.168998][T14955] ? irqentry_exit+0x10f/0x660 [ 733.169017][T14955] do_fast_syscall_32+0x34/0x80 [ 733.169035][T14955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 733.169054][T14955] RIP: 0023:0xf7f44539 [ 733.169068][T14955] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 733.169087][T14955] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 733.169103][T14955] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 733.169115][T14955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.169124][T14955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 733.169134][T14955] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 733.169143][T14955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 733.169165][T14955] [ 734.326125][T14978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.561271][ T5931] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 735.569598][T14589] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 735.580119][ T5931] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 735.739516][ T5931] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 735.745550][T14589] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.758735][T14589] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 735.781548][T14589] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 735.941454][T14589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 735.964305][T14589] usb 5-1: SerialNumber: syz [ 735.979522][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 735.987400][ T5931] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.045175][ T5931] usb 6-1: config 0 interface 0 has no altsetting 0 [ 736.150992][ T5931] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 736.166352][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.206709][ T5931] usb 6-1: Product: syz [ 736.215142][ T5931] usb 6-1: Manufacturer: syz [ 736.257259][ T5931] usb 6-1: SerialNumber: syz [ 736.312016][ T5931] usb 6-1: config 0 descriptor?? [ 736.471595][T14589] usb 5-1: 0:2 : does not exist [ 736.511369][T14589] usb 5-1: USB disconnect, device number 74 [ 736.588072][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.698580][ T5931] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input67 [ 736.935742][ T5930] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 737.099698][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 737.116226][ T5930] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 737.138993][ T5930] usb 2-1: config 0 has no interface number 0 [ 737.180611][ T5930] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.229646][ T5930] usb 2-1: config 0 interface 85 has no altsetting 0 [ 737.254689][ T5930] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 737.277222][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.312726][ T5930] usb 2-1: Product: syz [ 737.327478][ T5930] usb 2-1: Manufacturer: syz [ 737.350149][T15006] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 737.357721][ T5930] usb 2-1: SerialNumber: syz [ 737.374807][ T5930] usb 2-1: config 0 descriptor?? [ 737.600488][ T5930] appletouch 2-1:0.85: Failed to read mode from device. [ 737.607742][ T5930] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 737.659260][ T5930] usb 2-1: USB disconnect, device number 57 [ 737.839687][ T5931] rc_core: IR keymap rc-imon-pad not found [ 737.845647][ T5931] Registered IR keymap rc-empty [ 737.869636][ T5931] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 737.892995][ T5931] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 737.942108][ T5931] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 737.954626][T15018] FAULT_INJECTION: forcing a failure. [ 737.954626][T15018] name failslab, interval 1, probability 0, space 0, times 0 [ 737.966894][ T5931] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input68 [ 737.973864][T15018] CPU: 0 UID: 0 PID: 15018 Comm: syz.3.2724 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.973953][T15018] Tainted: [L]=SOFTLOCKUP [ 737.973976][T15018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 737.974017][T15018] Call Trace: [ 737.974040][T15018] [ 737.974071][T15018] dump_stack_lvl+0xe8/0x150 [ 737.974158][T15018] should_fail_ex+0x414/0x560 [ 737.974269][T15018] should_failslab+0xa8/0x100 [ 737.974349][T15018] __kmalloc_cache_noprof+0x84/0x700 [ 737.974420][T15018] ? tcf_chain_create+0xb0/0x310 [ 737.974507][T15018] tcf_chain_create+0xb0/0x310 [ 737.974604][T15018] __tcf_chain_get+0x111/0x3c0 [ 737.974683][T15018] tc_new_tfilter+0x753/0x15b0 [ 737.974767][T15018] ? kmem_cache_free+0x197/0x620 [ 737.974823][T15018] ? nlmon_xmit+0xb0/0x100 [ 737.974958][T15018] ? __pfx_tc_new_tfilter+0x10/0x10 [ 737.975091][T15018] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 737.975191][T15018] ? __pfx_tc_new_tfilter+0x10/0x10 [ 737.975261][T15018] rtnetlink_rcv_msg+0x7cf/0xb70 [ 737.975315][T15018] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 737.975381][T15018] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 737.975439][T15018] ? ref_tracker_free+0x63a/0x7d0 [ 737.975504][T15018] ? __asan_memcpy+0x40/0x70 [ 737.975558][T15018] ? __pfx_ref_tracker_free+0x10/0x10 [ 737.975655][T15018] netlink_rcv_skb+0x208/0x470 [ 737.975731][T15018] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 737.975805][T15018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.975906][T15018] ? netlink_deliver_tap+0x2e/0x1b0 [ 737.976010][T15018] netlink_unicast+0x82f/0x9e0 [ 737.976107][T15018] ? __pfx_netlink_unicast+0x10/0x10 [ 737.976178][T15018] ? __alloc_skb+0x198/0x3a0 [ 737.976239][T15018] ? netlink_sendmsg+0x642/0xb30 [ 737.976320][T15018] ? skb_put+0x11b/0x210 [ 737.976424][T15018] netlink_sendmsg+0x805/0xb30 [ 737.976524][T15018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.976608][T15018] ? __import_iovec+0x5d4/0x7f0 [ 737.976672][T15018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.976750][T15018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.976804][T15018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.976892][T15018] __sock_sendmsg+0x21c/0x270 [ 737.976983][T15018] ____sys_sendmsg+0x505/0x820 [ 737.977069][T15018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 737.977160][T15018] ? kstrtouint+0x6e/0xe0 [ 737.977267][T15018] ___sys_sendmsg+0x21f/0x2a0 [ 737.977344][T15018] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.977396][T15018] ? get_pid_task+0x20/0x1f0 [ 737.977452][T15018] ? get_pid_task+0x20/0x1f0 [ 737.977523][T15018] ? get_pid_task+0x20/0x1f0 [ 737.977691][T15018] ? __fget_files+0x2a/0x420 [ 737.977769][T15018] ? __fget_files+0x3a0/0x420 [ 737.977867][T15018] __sys_sendmsg+0x164/0x220 [ 737.977942][T15018] ? __pfx___sys_sendmsg+0x10/0x10 [ 737.978012][T15018] ? __pfx_ksys_write+0x10/0x10 [ 737.978101][T15018] __do_fast_syscall_32+0x1dc/0x560 [ 737.978168][T15018] ? lockdep_hardirqs_on+0x7b/0x110 [ 737.978223][T15018] ? do_fast_syscall_32+0x34/0x80 [ 737.978288][T15018] ? irqentry_exit+0x10f/0x660 [ 737.978362][T15018] do_fast_syscall_32+0x34/0x80 [ 737.978428][T15018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 737.978478][T15018] RIP: 0023:0xf7f75539 [ 737.978496][T15018] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 737.978513][T15018] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 737.978535][T15018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006040 [ 737.978551][T15018] RDX: 0000000024040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 737.978564][T15018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 737.978577][T15018] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 737.978591][T15018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 737.978629][T15018] [ 738.122005][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 738.492471][T15025] ======================================================= [ 738.492471][T15025] WARNING: The mand mount option has been deprecated and [ 738.492471][T15025] and is ignored by this kernel. Remove the mand [ 738.492471][T15025] option from the mount to silence this warning. [ 738.492471][T15025] ======================================================= [ 738.528609][ T30] audit: type=1800 audit(1766827925.617:1208): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2725" name="bus" dev="ramfs" ino=57320 res=0 errno=0 [ 738.566142][T15025] fuse: Unknown parameter 'userid' [ 738.574417][ T5931] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:59> initialized [ 738.587632][ T5931] usb 6-1: USB disconnect, device number 59 [ 738.696236][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2728'. [ 738.962220][T15037] CUSE: info not properly terminated [ 739.240255][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2727'. [ 739.536792][ T30] audit: type=1326 audit(1766827926.607:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 739.590528][ T30] audit: type=1326 audit(1766827926.607:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 739.612959][ T30] audit: type=1326 audit(1766827926.607:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 739.635794][ T30] audit: type=1326 audit(1766827926.607:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 739.680079][ T30] audit: type=1326 audit(1766827926.607:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 739.702608][ T30] audit: type=1326 audit(1766827926.617:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 739.735413][ T30] audit: type=1326 audit(1766827926.617:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 739.838697][ T30] audit: type=1326 audit(1766827926.617:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 739.931796][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2732'. [ 739.947667][ T30] audit: type=1326 audit(1766827926.617:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 740.017874][T15049] binder: 15047:15049 ioctl c0306201 80000640 returned -22 [ 740.056197][T15051] FAULT_INJECTION: forcing a failure. [ 740.056197][T15051] name failslab, interval 1, probability 0, space 0, times 0 [ 740.090408][T15051] CPU: 1 UID: 0 PID: 15051 Comm: syz.4.2733 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.090453][T15051] Tainted: [L]=SOFTLOCKUP [ 740.090463][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.090477][T15051] Call Trace: [ 740.090487][T15051] [ 740.090498][T15051] dump_stack_lvl+0xe8/0x150 [ 740.090532][T15051] should_fail_ex+0x414/0x560 [ 740.090577][T15051] should_failslab+0xa8/0x100 [ 740.090607][T15051] kmem_cache_alloc_noprof+0x88/0x710 [ 740.090640][T15051] ? apparmor_capable+0x137/0x1a0 [ 740.090674][T15051] ? skb_clone+0x212/0x3a0 [ 740.090709][T15051] skb_clone+0x212/0x3a0 [ 740.090735][T15051] ? nfnetlink_rcv+0x4ba/0x2590 [ 740.090764][T15051] nfnetlink_rcv+0x4ec/0x2590 [ 740.090801][T15051] ? lockdep_hardirqs_on+0x7b/0x110 [ 740.090824][T15051] ? __dev_queue_xmit+0x289/0x3140 [ 740.090853][T15051] ? __local_bh_enable_ip+0xd0/0x130 [ 740.090875][T15051] ? __dev_queue_xmit+0x289/0x3140 [ 740.090903][T15051] ? __dev_queue_xmit+0x1955/0x3140 [ 740.090930][T15051] ? ___sys_sendmsg+0x21f/0x2a0 [ 740.090964][T15051] ? __dev_queue_xmit+0x289/0x3140 [ 740.090999][T15051] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 740.091042][T15051] ? ref_tracker_free+0x63a/0x7d0 [ 740.091066][T15051] ? __asan_memcpy+0x40/0x70 [ 740.091085][T15051] ? __pfx_ref_tracker_free+0x10/0x10 [ 740.091124][T15051] ? skb_clone+0x246/0x3a0 [ 740.091154][T15051] ? __netlink_deliver_tap+0x807/0x850 [ 740.091183][T15051] ? netlink_deliver_tap+0x2e/0x1b0 [ 740.091229][T15051] netlink_unicast+0x82f/0x9e0 [ 740.091264][T15051] ? __pfx_netlink_unicast+0x10/0x10 [ 740.091288][T15051] ? __alloc_skb+0x198/0x3a0 [ 740.091312][T15051] ? netlink_sendmsg+0x642/0xb30 [ 740.091338][T15051] ? skb_put+0x11b/0x210 [ 740.091367][T15051] netlink_sendmsg+0x805/0xb30 [ 740.091405][T15051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.091444][T15051] ? __import_iovec+0x5d4/0x7f0 [ 740.091469][T15051] ? aa_sock_msg_perm+0xf1/0x1b0 [ 740.091500][T15051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 740.091521][T15051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.091551][T15051] __sock_sendmsg+0x21c/0x270 [ 740.091587][T15051] ____sys_sendmsg+0x505/0x820 [ 740.091620][T15051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.091652][T15051] ? kstrtouint+0x6e/0xe0 [ 740.091694][T15051] ___sys_sendmsg+0x21f/0x2a0 [ 740.091724][T15051] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.091751][T15051] ? get_pid_task+0x20/0x1f0 [ 740.091779][T15051] ? get_pid_task+0x20/0x1f0 [ 740.091805][T15051] ? get_pid_task+0x20/0x1f0 [ 740.091864][T15051] ? __fget_files+0x2a/0x420 [ 740.091891][T15051] ? __fget_files+0x3a0/0x420 [ 740.091927][T15051] __sys_sendmsg+0x164/0x220 [ 740.091956][T15051] ? __pfx___sys_sendmsg+0x10/0x10 [ 740.091993][T15051] ? __pfx_ksys_write+0x10/0x10 [ 740.092027][T15051] __do_fast_syscall_32+0x1dc/0x560 [ 740.092052][T15051] ? lockdep_hardirqs_on+0x7b/0x110 [ 740.092073][T15051] ? do_fast_syscall_32+0x34/0x80 [ 740.092098][T15051] ? irqentry_exit+0x10f/0x660 [ 740.092125][T15051] do_fast_syscall_32+0x34/0x80 [ 740.092151][T15051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.092177][T15051] RIP: 0023:0xf7fd6539 [ 740.092197][T15051] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 740.092217][T15051] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 740.092241][T15051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 740.092258][T15051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 740.092272][T15051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 740.092286][T15051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 740.092300][T15051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 740.092333][T15051] [ 741.293020][ T5930] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 741.359515][T14589] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 741.492323][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.519714][T14589] usb 6-1: Using ep0 maxpacket: 32 [ 741.525236][ T5930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 741.535709][T14589] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 741.550702][ T5930] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 741.560100][T14589] usb 6-1: config 0 has no interface number 0 [ 741.566226][T14589] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.582730][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.595285][T14589] usb 6-1: config 0 interface 85 has no altsetting 0 [ 741.603980][ T5930] usb 5-1: config 0 descriptor?? [ 741.620020][T14589] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 741.630214][T14589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.638686][ T5930] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 741.656768][T14589] usb 6-1: Product: syz [ 741.661294][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 741.667233][T14589] usb 6-1: Manufacturer: syz [ 741.672825][T14589] usb 6-1: SerialNumber: syz [ 741.758106][ T5930] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 741.776753][T14589] usb 6-1: config 0 descriptor?? [ 741.831333][T15058] dvb-usb: bulk message failed: -22 (2/0) [ 741.837174][T15058] dvb-usb: bulk message failed: -22 (4/0) [ 741.867841][ T5930] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 741.885494][ T5930] usb 5-1: media controller created [ 741.897493][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 741.923125][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 741.938242][ T5930] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 741.955785][ T5930] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input71 [ 741.998885][ T5930] dvb-usb: schedule remote query interval to 150 msecs. [ 742.014130][ T5930] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 742.074730][T14589] appletouch 6-1:0.85: Failed to read mode from device. [ 742.089945][T14589] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 742.096151][T11315] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 742.249040][T14589] usb 6-1: USB disconnect, device number 60 [ 742.264029][ T5930] dvb-usb: bulk message failed: -22 (1/0) [ 742.307415][ T5930] dvb-usb: error while querying for an remote control event. [ 742.358734][T15080] FAULT_INJECTION: forcing a failure. [ 742.358734][T15080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.430986][T15080] CPU: 0 UID: 0 PID: 15080 Comm: syz.3.2741 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.431024][T15080] Tainted: [L]=SOFTLOCKUP [ 742.431033][T15080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 742.431047][T15080] Call Trace: [ 742.431056][T15080] [ 742.431066][T15080] dump_stack_lvl+0xe8/0x150 [ 742.431101][T15080] should_fail_ex+0x414/0x560 [ 742.431141][T15080] _copy_from_user+0x2d/0xb0 [ 742.431179][T15080] get_compat_msghdr+0xad/0x4a0 [ 742.431214][T15080] ? __pfx_get_compat_msghdr+0x10/0x10 [ 742.431245][T15080] ? rcu_is_watching+0x15/0xb0 [ 742.431272][T15080] ? ___sys_recvmsg+0x1c4/0x510 [ 742.431307][T15080] ___sys_recvmsg+0x17f/0x510 [ 742.431334][T15080] ? _parse_integer_limit+0x1ae/0x1f0 [ 742.431372][T15080] ? __pfx____sys_recvmsg+0x10/0x10 [ 742.431399][T15080] ? kstrtoull+0x12f/0x1d0 [ 742.431434][T15080] ? __fget_files+0x2a/0x420 [ 742.431498][T15080] do_recvmmsg+0x36a/0x770 [ 742.431535][T15080] ? __pfx_do_recvmmsg+0x10/0x10 [ 742.431564][T15080] ? ksys_write+0x1cb/0x250 [ 742.431604][T15080] ? __fget_files+0x3a0/0x420 [ 742.431641][T15080] __sys_recvmmsg+0x19d/0x280 [ 742.431671][T15080] ? __pfx___sys_recvmmsg+0x10/0x10 [ 742.431700][T15080] ? __pfx_ksys_write+0x10/0x10 [ 742.431726][T15080] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 742.431766][T15080] __do_fast_syscall_32+0x1dc/0x560 [ 742.431791][T15080] ? lockdep_hardirqs_on+0x7b/0x110 [ 742.431812][T15080] ? do_fast_syscall_32+0x34/0x80 [ 742.431836][T15080] ? irqentry_exit+0x10f/0x660 [ 742.431862][T15080] do_fast_syscall_32+0x34/0x80 [ 742.431888][T15080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 742.431910][T15080] RIP: 0023:0xf7f75539 [ 742.431926][T15080] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 742.431942][T15080] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 742.431962][T15080] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 742.431975][T15080] RDX: 0000000000000220 RSI: 0000000000000100 RDI: 0000000000000000 [ 742.431986][T15080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 742.431997][T15080] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 742.432008][T15080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 742.432032][T15080] [ 742.701455][ T5930] dvb-usb: bulk message failed: -22 (1/0) [ 742.707459][ T5930] dvb-usb: error while querying for an remote control event. [ 742.721624][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'. [ 742.871143][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 742.876955][ T10] dvb-usb: error while querying for an remote control event. [ 743.039767][T14589] dvb-usb: bulk message failed: -22 (1/0) [ 743.047056][T14589] dvb-usb: error while querying for an remote control event. [ 743.220381][T14589] dvb-usb: bulk message failed: -22 (1/0) [ 743.228256][T14589] dvb-usb: error while querying for an remote control event. [ 743.389750][T14589] dvb-usb: bulk message failed: -22 (1/0) [ 743.397343][T14589] dvb-usb: error while querying for an remote control event. [ 743.559704][T14589] dvb-usb: bulk message failed: -22 (1/0) [ 743.610878][T14589] dvb-usb: error while querying for an remote control event. [ 743.828848][T14589] dvb-usb: bulk message failed: -22 (1/0) [ 744.047574][T14589] dvb-usb: error while querying for an remote control event. [ 744.106146][T14589] usb 5-1: USB disconnect, device number 75 [ 744.258224][T14589] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 744.995919][T15112] openvswitch: netlink: Tunnel attr 152 out of range max 16 [ 745.250830][ T5898] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 745.391690][T15119] loop8: detected capacity change from 0 to 7 [ 745.405398][ T6067] Dev loop8: unable to read RDB block 7 [ 745.409894][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 745.418154][ T5898] usb 4-1: config 1 interface 0 altsetting 247 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 745.431056][ T5898] usb 4-1: config 1 interface 0 altsetting 247 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 745.443196][ T5898] usb 4-1: config 1 interface 0 altsetting 247 endpoint 0x8F has invalid wMaxPacketSize 0 [ 745.447965][ T6067] loop8: unable to read partition table [ 745.477708][T15121] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 745.487809][ T5898] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 745.508103][ T6067] loop8: partition table beyond EOD, truncated [ 745.516424][ T5898] usb 4-1: config 1 interface 0 has no altsetting 0 [ 745.531864][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.51 [ 745.552986][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.564666][ T5898] usb 4-1: Product: syz [ 745.569260][T15119] Dev loop8: unable to read RDB block 7 [ 745.579374][ T5898] usb 4-1: Manufacturer: syz [ 745.585935][T15119] loop8: unable to read partition table [ 745.591864][ T5898] usb 4-1: SerialNumber: syz [ 745.596957][T15119] loop8: partition table beyond EOD, truncated [ 745.619741][T15119] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 745.637893][T15127] syz_tun: entered allmulticast mode [ 745.643672][T15120] Dev loop8: unable to read RDB block 7 [ 745.650012][T15120] loop8: unable to read partition table [ 745.656173][T15120] loop8: partition table beyond EOD, truncated [ 745.662849][T15120] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 745.746721][T15125] syz_tun: left allmulticast mode [ 745.865737][T15133] syzkaller1: entered promiscuous mode [ 745.872820][T15133] syzkaller1: entered allmulticast mode [ 746.069575][ T5898] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 746.119807][T14589] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 746.228145][ T5898] usb 5-1: config 1 has an invalid interface number: 128 but max is 2 [ 746.257440][ T5898] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.291604][T14589] usb 6-1: unable to get BOS descriptor or descriptor too short [ 746.299560][ T5898] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 746.308472][ T5898] usb 5-1: config 1 has no interface number 0 [ 746.319177][T14589] usb 6-1: not running at top speed; connect to a high speed hub [ 746.349061][T14589] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.362564][ T5898] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 746.379167][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 746.389282][T14589] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 746.408677][ T5898] usb 5-1: SerialNumber: syz [ 746.413459][T14589] usb 6-1: config 1 has no interface number 1 [ 746.438234][T14589] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 746.450169][ T5898] usb 5-1: 128:2 : does not exist [ 746.457163][T14589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.465800][T14589] usb 6-1: Product: syz [ 746.498445][T14589] usb 6-1: Manufacturer: syz [ 746.529740][T14589] usb 6-1: SerialNumber: syz [ 746.635078][T15131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.667541][T15131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.714945][ T5898] usb 5-1: USB disconnect, device number 76 [ 746.814444][T14589] usb 6-1: failed to enable PITCH for EP 0x82 [ 746.883068][T14589] usb 6-1: USB disconnect, device number 61 [ 747.199826][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 747.415471][T15151] syzkaller0: entered promiscuous mode [ 747.428925][T15151] syzkaller0: entered allmulticast mode [ 747.952992][T15160] FAULT_INJECTION: forcing a failure. [ 747.952992][T15160] name failslab, interval 1, probability 0, space 0, times 0 [ 747.999611][T15160] CPU: 1 UID: 0 PID: 15160 Comm: syz.5.2763 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.999649][T15160] Tainted: [L]=SOFTLOCKUP [ 747.999659][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.999674][T15160] Call Trace: [ 747.999683][T15160] [ 747.999695][T15160] dump_stack_lvl+0xe8/0x150 [ 747.999732][T15160] should_fail_ex+0x414/0x560 [ 747.999775][T15160] should_failslab+0xa8/0x100 [ 747.999807][T15160] __kmalloc_noprof+0xdf/0x800 [ 747.999831][T15160] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 747.999864][T15160] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 747.999897][T15160] genl_family_rcv_msg_doit+0xb8/0x300 [ 747.999936][T15160] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 747.999970][T15160] ? apparmor_capable+0x137/0x1a0 [ 748.000008][T15160] ? bpf_lsm_capable+0x9/0x20 [ 748.000037][T15160] ? security_capable+0x7e/0x2e0 [ 748.000072][T15160] genl_rcv_msg+0x60e/0x790 [ 748.000101][T15160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.000123][T15160] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 748.000148][T15160] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 748.000182][T15160] ? __pfx_nl80211_post_doit+0x10/0x10 [ 748.000211][T15160] ? __asan_memcpy+0x40/0x70 [ 748.000231][T15160] ? __pfx_ref_tracker_free+0x10/0x10 [ 748.000262][T15160] netlink_rcv_skb+0x208/0x470 [ 748.000295][T15160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.000319][T15160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.000345][T15160] ? genl_rcv+0x19/0x40 [ 748.000398][T15160] ? down_read+0x274/0x2e0 [ 748.000423][T15160] ? genl_rcv+0xd/0x40 [ 748.000460][T15160] genl_rcv+0x28/0x40 [ 748.000498][T15160] netlink_unicast+0x82f/0x9e0 [ 748.000550][T15160] ? __pfx_netlink_unicast+0x10/0x10 [ 748.000576][T15160] ? __alloc_skb+0x198/0x3a0 [ 748.000601][T15160] ? netlink_sendmsg+0x642/0xb30 [ 748.000628][T15160] ? skb_put+0x11b/0x210 [ 748.000658][T15160] netlink_sendmsg+0x805/0xb30 [ 748.000700][T15160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.000734][T15160] ? __import_iovec+0x5d4/0x7f0 [ 748.000759][T15160] ? aa_sock_msg_perm+0xf1/0x1b0 [ 748.000791][T15160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 748.000813][T15160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.000844][T15160] __sock_sendmsg+0x21c/0x270 [ 748.000882][T15160] ____sys_sendmsg+0x505/0x820 [ 748.000926][T15160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.000961][T15160] ? kstrtouint+0x6e/0xe0 [ 748.001004][T15160] ___sys_sendmsg+0x21f/0x2a0 [ 748.001035][T15160] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.001063][T15160] ? get_pid_task+0x20/0x1f0 [ 748.001093][T15160] ? get_pid_task+0x20/0x1f0 [ 748.001119][T15160] ? get_pid_task+0x20/0x1f0 [ 748.001182][T15160] ? __fget_files+0x2a/0x420 [ 748.001211][T15160] ? __fget_files+0x3a0/0x420 [ 748.001251][T15160] __sys_sendmsg+0x164/0x220 [ 748.001283][T15160] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.001320][T15160] ? __pfx_ksys_write+0x10/0x10 [ 748.001357][T15160] __do_fast_syscall_32+0x1dc/0x560 [ 748.001383][T15160] ? lockdep_hardirqs_on+0x7b/0x110 [ 748.001405][T15160] ? do_fast_syscall_32+0x34/0x80 [ 748.001431][T15160] ? irqentry_exit+0x10f/0x660 [ 748.001459][T15160] do_fast_syscall_32+0x34/0x80 [ 748.001486][T15160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 748.001514][T15160] RIP: 0023:0xf707d539 [ 748.001534][T15160] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 748.001555][T15160] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 748.001579][T15160] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 748.001596][T15160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 748.001609][T15160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 748.001623][T15160] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 748.001637][T15160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 748.001670][T15160] [ 748.456685][ T5931] usb 4-1: USB disconnect, device number 38 [ 748.970724][T14589] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 748.981926][T14589] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 750.868102][T15186] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2770'. [ 751.301972][T15194] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 751.349589][ T5931] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 751.509519][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 751.516904][ T5931] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 751.525473][ T5931] usb 4-1: config 0 has no interface number 0 [ 751.531805][ T5931] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.543126][ T5931] usb 4-1: config 0 interface 85 has no altsetting 0 [ 751.552465][ T5931] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 751.562129][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.570248][ T5931] usb 4-1: Product: syz [ 751.574568][ T5931] usb 4-1: Manufacturer: syz [ 751.579214][ T5931] usb 4-1: SerialNumber: syz [ 751.586442][ T5931] usb 4-1: config 0 descriptor?? [ 751.805606][ T5931] appletouch 4-1:0.85: Failed to read mode from device. [ 751.821777][ T5931] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 751.862624][ T5931] usb 4-1: USB disconnect, device number 39 [ 752.139508][T14589] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 752.279618][ T5898] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 752.359917][T14589] usb 6-1: Using ep0 maxpacket: 8 [ 752.366986][T14589] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 752.376803][T14589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.413549][T14589] pvrusb2: Hardware description: Terratec Grabster AV400 [ 752.495751][T14589] pvrusb2: ********** [ 752.499986][T14589] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 752.557273][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 752.570999][ T5898] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 752.580932][T14589] pvrusb2: Important functionality might not be entirely working. [ 752.595493][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.607647][T14589] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 752.635548][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.643870][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.647210][ T5898] usb 2-1: Product: syz [ 752.658506][ T5898] usb 2-1: Manufacturer: syz [ 752.666096][ T5898] usb 2-1: SerialNumber: syz [ 752.672350][T14589] pvrusb2: ********** [ 752.735260][ T2344] pvrusb2: Invalid write control endpoint [ 752.748648][ T5898] usb 2-1: config 0 descriptor?? [ 752.781803][ T5898] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 752.811145][ T5898] usb 2-1: Detected FT-X [ 752.868421][ T2344] pvrusb2: Invalid write control endpoint [ 752.882411][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 752.893986][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 752.902134][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 752.913529][T14589] usb 6-1: USB disconnect, device number 62 [ 752.933633][ T2344] pvrusb2: Device being rendered inoperable [ 752.948249][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 752.972851][ T5898] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 752.974251][ T5931] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 752.988051][T15206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.997617][T15206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.067490][T15206] pvrusb2: Attempted to execute control transfer when device not ok [ 753.069831][ T5931] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 753.107381][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 753.133737][ T2344] pvrusb2: Attached sub-driver cx25840 [ 753.167879][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 753.189694][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 753.354472][ T5898] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 753.363871][ T5898] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 753.393600][ T5898] usb 2-1: USB disconnect, device number 58 [ 753.413940][ T5898] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 753.424785][ T5898] ftdi_sio 2-1:0.0: device disconnected [ 753.505835][T15222] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2782'. [ 753.895320][T15231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 753.989544][ T5834] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 754.126541][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 754.126561][ T30] audit: type=1326 audit(1766827941.217:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.3.2785" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x0 [ 754.180686][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 754.187832][ T5834] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 754.198695][ T5834] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 754.207979][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.216299][ T5834] usb 5-1: Product: syz [ 754.220738][ T5834] usb 5-1: Manufacturer: syz [ 754.225464][ T5834] usb 5-1: SerialNumber: syz [ 754.241423][ T5834] usb 5-1: config 0 descriptor?? [ 754.250648][ T5834] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 754.258802][ T5834] usb 5-1: setting power ON [ 754.264076][ T5834] dvb-usb: bulk message failed: -22 (2/0) [ 754.272594][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 754.283248][ T5834] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 754.292499][ T5834] usb 5-1: media controller created [ 754.308800][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 754.328154][ T5834] usb 5-1: selecting invalid altsetting 6 [ 754.334098][ T5834] usb 5-1: digital interface selection failed (-22) [ 754.340887][ T5834] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 754.350349][ T5834] usb 5-1: setting power OFF [ 754.355379][ T5834] dvb-usb: bulk message failed: -22 (2/0) [ 754.362686][ T5834] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 754.372211][ T5834] (NULL device *): no alternate interface [ 754.398436][ T5834] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 754.959536][ T5898] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 755.111645][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.122348][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.133463][ T5898] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 755.143199][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 755.151641][ T5898] usb 2-1: SerialNumber: syz [ 755.519309][ T5898] usb 2-1: 0:2 : does not exist [ 755.539979][ T5898] usb 2-1: USB disconnect, device number 59 [ 755.586232][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 755.967587][T15263] FAULT_INJECTION: forcing a failure. [ 755.967587][T15263] name failslab, interval 1, probability 0, space 0, times 0 [ 755.986231][T15263] CPU: 0 UID: 0 PID: 15263 Comm: syz.3.2793 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.986268][T15263] Tainted: [L]=SOFTLOCKUP [ 755.986277][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.986291][T15263] Call Trace: [ 755.986301][T15263] [ 755.986311][T15263] dump_stack_lvl+0xe8/0x150 [ 755.986346][T15263] should_fail_ex+0x414/0x560 [ 755.986385][T15263] should_failslab+0xa8/0x100 [ 755.986415][T15263] __kmalloc_noprof+0xdf/0x800 [ 755.986438][T15263] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 755.986470][T15263] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 755.986502][T15263] genl_family_rcv_msg_doit+0xb8/0x300 [ 755.986532][T15263] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 755.986563][T15263] ? apparmor_capable+0x137/0x1a0 [ 755.986601][T15263] ? bpf_lsm_capable+0x9/0x20 [ 755.986628][T15263] ? security_capable+0x7e/0x2e0 [ 755.986662][T15263] genl_rcv_msg+0x60e/0x790 [ 755.986690][T15263] ? __pfx_genl_rcv_msg+0x10/0x10 [ 755.986710][T15263] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 755.986734][T15263] ? __pfx_nl80211_start_radar_detection+0x10/0x10 [ 755.986758][T15263] ? __pfx_nl80211_post_doit+0x10/0x10 [ 755.986785][T15263] ? __asan_memcpy+0x40/0x70 [ 755.986805][T15263] ? __pfx_ref_tracker_free+0x10/0x10 [ 755.986837][T15263] netlink_rcv_skb+0x208/0x470 [ 755.986867][T15263] ? __pfx_genl_rcv_msg+0x10/0x10 [ 755.986890][T15263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 755.986916][T15263] ? genl_rcv+0x19/0x40 [ 755.986966][T15263] ? down_read+0x274/0x2e0 [ 755.986991][T15263] ? genl_rcv+0xd/0x40 [ 755.987029][T15263] genl_rcv+0x28/0x40 [ 755.987062][T15263] netlink_unicast+0x82f/0x9e0 [ 755.987098][T15263] ? __pfx_netlink_unicast+0x10/0x10 [ 755.987122][T15263] ? __alloc_skb+0x198/0x3a0 [ 755.987147][T15263] ? netlink_sendmsg+0x642/0xb30 [ 755.987175][T15263] ? skb_put+0x11b/0x210 [ 755.987203][T15263] netlink_sendmsg+0x805/0xb30 [ 755.987257][T15263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.987289][T15263] ? __import_iovec+0x5d4/0x7f0 [ 755.987314][T15263] ? aa_sock_msg_perm+0xf1/0x1b0 [ 755.987344][T15263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 755.987366][T15263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.987397][T15263] __sock_sendmsg+0x21c/0x270 [ 755.987434][T15263] ____sys_sendmsg+0x505/0x820 [ 755.987469][T15263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 755.987502][T15263] ? kstrtouint+0x6e/0xe0 [ 755.987544][T15263] ___sys_sendmsg+0x21f/0x2a0 [ 755.987574][T15263] ? __pfx____sys_sendmsg+0x10/0x10 [ 755.987600][T15263] ? get_pid_task+0x20/0x1f0 [ 755.987629][T15263] ? get_pid_task+0x20/0x1f0 [ 755.987654][T15263] ? get_pid_task+0x20/0x1f0 [ 755.987714][T15263] ? __fget_files+0x2a/0x420 [ 755.987742][T15263] ? __fget_files+0x3a0/0x420 [ 755.987782][T15263] __sys_sendmsg+0x164/0x220 [ 755.987812][T15263] ? __pfx___sys_sendmsg+0x10/0x10 [ 755.987849][T15263] ? __pfx_ksys_write+0x10/0x10 [ 755.987885][T15263] __do_fast_syscall_32+0x1dc/0x560 [ 755.987910][T15263] ? lockdep_hardirqs_on+0x7b/0x110 [ 755.987932][T15263] ? do_fast_syscall_32+0x34/0x80 [ 755.987957][T15263] ? irqentry_exit+0x10f/0x660 [ 755.987985][T15263] do_fast_syscall_32+0x34/0x80 [ 755.988011][T15263] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 755.988039][T15263] RIP: 0023:0xf7f75539 [ 755.988059][T15263] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 755.988079][T15263] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 755.988104][T15263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 755.988120][T15263] RDX: 0000000000044014 RSI: 0000000000000000 RDI: 0000000000000000 [ 755.988148][T15263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 755.988162][T15263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 755.988176][T15263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 755.988217][T15263] [ 756.738260][ T5931] usb 5-1: USB disconnect, device number 77 [ 757.136826][T15277] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 757.184909][ T5898] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 757.361489][ T5898] usb 4-1: config 0 has no interfaces? [ 757.370606][ T5898] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 757.383255][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.393613][ T5898] usb 4-1: Product: syz [ 757.398239][ T5898] usb 4-1: Manufacturer: syz [ 757.403090][ T5898] usb 4-1: SerialNumber: syz [ 757.415054][ T5898] usb 4-1: config 0 descriptor?? [ 757.788798][ T5898] usb 4-1: USB disconnect, device number 40 [ 759.199499][ T5898] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 759.370922][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 759.404701][ T5898] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 759.421294][ T5898] usb 4-1: config 6 has no interface number 0 [ 759.436028][ T5898] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 759.436109][T15308] loop1: detected capacity change from 0 to 6 [ 759.446849][ T5898] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 759.515780][ T5898] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 759.563976][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.573696][ C0] buffer_io_error: 84 callbacks suppressed [ 759.573716][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.597707][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.607411][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.629476][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.639267][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.657584][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.667290][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.689561][ T5898] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 759.710479][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.720157][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.728398][T15308] ldm_validate_partition_table(): Disk read failed. [ 759.749121][ T5898] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 759.775884][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.787587][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.797287][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.806828][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.806845][ T5898] usb 4-1: Product: syz [ 759.806872][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.818628][ T5898] usb 4-1: Manufacturer: syz [ 759.863259][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.873008][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.882478][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.892209][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.900412][T15308] Dev loop1: unable to read RDB block 0 [ 759.906267][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 759.915996][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 759.951028][T15308] loop1: unable to read partition table [ 759.957074][T15308] loop1: partition table beyond EOD, truncated [ 760.010785][ T5898] usb 4-1: SerialNumber: syz [ 760.016208][T15308] loop_reread_partitions: partition scan of loop1 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 760.231719][ T5898] hso 4-1:6.2: Failed to find BULK IN ep [ 760.709851][ T5898] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 760.882683][ T5898] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.895143][ T5898] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.915617][ T5898] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 760.925152][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 760.957882][ T5898] usb 5-1: SerialNumber: syz [ 761.127925][T15331] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 761.136940][T14589] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 761.296302][T14589] usb 6-1: unable to get BOS descriptor or descriptor too short [ 761.320817][T14589] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 761.365562][T14589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 761.477111][ T5898] usb 5-1: 0:2 : does not exist [ 761.482192][T14589] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 761.519057][T14589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 761.551651][ T5898] usb 5-1: USB disconnect, device number 78 [ 761.570060][T14589] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 761.592829][T14589] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 761.611458][T14589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.750350][T14589] usb 6-1: Product: syz [ 761.754733][T14589] usb 6-1: Manufacturer: syz [ 761.759849][T14589] usb 6-1: SerialNumber: syz [ 761.774425][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.854823][T14589] usb 6-1: config 0 descriptor?? [ 761.913588][T15325] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 761.926349][T14589] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 762.162707][ T5834] usb 6-1: USB disconnect, device number 63 [ 762.374018][T14589] usb 4-1: USB disconnect, device number 41 [ 762.686088][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'. [ 763.070210][ T5898] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 763.309609][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 763.350763][ T5898] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 763.358934][ T5898] usb 2-1: config 0 has no interface number 0 [ 763.382081][ T5898] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 763.417551][ T5898] usb 2-1: config 0 interface 85 has no altsetting 0 [ 763.446551][ T5898] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 763.481480][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.513432][ T5898] usb 2-1: Product: syz [ 763.517682][ T5898] usb 2-1: Manufacturer: syz [ 763.599568][ T5898] usb 2-1: SerialNumber: syz [ 763.644622][ T5898] usb 2-1: config 0 descriptor?? [ 763.886447][ T5898] appletouch 2-1:0.85: Failed to read mode from device. [ 763.894380][ T5898] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 763.935017][ T5898] usb 2-1: USB disconnect, device number 60 [ 764.359553][ T5921] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 764.499553][ T5921] usb 5-1: device descriptor read/64, error -71 [ 764.569344][T15371] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 764.593536][T15373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2822'. [ 764.602740][T15373] FAULT_INJECTION: forcing a failure. [ 764.602740][T15373] name failslab, interval 1, probability 0, space 0, times 0 [ 764.616517][T15373] CPU: 1 UID: 0 PID: 15373 Comm: syz.1.2822 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.616543][T15373] Tainted: [L]=SOFTLOCKUP [ 764.616549][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 764.616559][T15373] Call Trace: [ 764.616580][T15373] [ 764.616597][T15373] dump_stack_lvl+0xe8/0x150 [ 764.616633][T15373] should_fail_ex+0x414/0x560 [ 764.616675][T15373] should_failslab+0xa8/0x100 [ 764.616704][T15373] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 764.616742][T15373] ? __alloc_skb+0x1dc/0x3a0 [ 764.616763][T15373] ? __local_bh_enable_ip+0xd0/0x130 [ 764.616788][T15373] ? __alloc_skb+0x198/0x3a0 [ 764.616805][T15373] __alloc_skb+0x1dc/0x3a0 [ 764.616824][T15373] netlink_ack+0x146/0xa50 [ 764.616843][T15373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 764.616856][T15373] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 764.616875][T15373] ? __pfx_nl80211_post_doit+0x10/0x10 [ 764.616903][T15373] netlink_rcv_skb+0x28c/0x470 [ 764.616923][T15373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 764.616939][T15373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 764.616957][T15373] ? genl_rcv+0x19/0x40 [ 764.616994][T15373] ? down_read+0x274/0x2e0 [ 764.617029][T15373] ? genl_rcv+0xd/0x40 [ 764.617061][T15373] genl_rcv+0x28/0x40 [ 764.617092][T15373] netlink_unicast+0x82f/0x9e0 [ 764.617129][T15373] ? __pfx_netlink_unicast+0x10/0x10 [ 764.617151][T15373] ? __alloc_skb+0x198/0x3a0 [ 764.617169][T15373] ? netlink_sendmsg+0x642/0xb30 [ 764.617188][T15373] ? skb_put+0x11b/0x210 [ 764.617216][T15373] netlink_sendmsg+0x805/0xb30 [ 764.617247][T15373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.617273][T15373] ? __import_iovec+0x5d4/0x7f0 [ 764.617290][T15373] ? aa_sock_msg_perm+0xf1/0x1b0 [ 764.617313][T15373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.617328][T15373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.617351][T15373] __sock_sendmsg+0x21c/0x270 [ 764.617377][T15373] ____sys_sendmsg+0x505/0x820 [ 764.617401][T15373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.617430][T15373] ? kstrtouint+0x6e/0xe0 [ 764.617466][T15373] ___sys_sendmsg+0x21f/0x2a0 [ 764.617490][T15373] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.617509][T15373] ? get_pid_task+0x20/0x1f0 [ 764.617529][T15373] ? get_pid_task+0x20/0x1f0 [ 764.617547][T15373] ? get_pid_task+0x20/0x1f0 [ 764.617589][T15373] ? __fget_files+0x2a/0x420 [ 764.617609][T15373] ? __fget_files+0x3a0/0x420 [ 764.617636][T15373] __sys_sendmsg+0x164/0x220 [ 764.617657][T15373] ? __pfx___sys_sendmsg+0x10/0x10 [ 764.617683][T15373] ? __pfx_ksys_write+0x10/0x10 [ 764.617707][T15373] __do_fast_syscall_32+0x1dc/0x560 [ 764.617740][T15373] ? lockdep_hardirqs_on+0x7b/0x110 [ 764.617761][T15373] ? do_fast_syscall_32+0x34/0x80 [ 764.617786][T15373] ? irqentry_exit+0x10f/0x660 [ 764.617813][T15373] do_fast_syscall_32+0x34/0x80 [ 764.617839][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 764.617865][T15373] RIP: 0023:0xf7f44539 [ 764.617880][T15373] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 764.617894][T15373] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 764.617911][T15373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 764.617922][T15373] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 764.617932][T15373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 764.617941][T15373] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 764.617951][T15373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 764.617973][T15373] [ 765.032103][ T5921] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 765.169574][ T5921] usb 5-1: device descriptor read/64, error -71 [ 765.279776][ T5921] usb usb5-port1: attempt power cycle [ 765.639515][ T5921] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 765.697447][ T5921] usb 5-1: device descriptor read/8, error -71 [ 765.939909][ T5921] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 765.970929][ T5921] usb 5-1: device descriptor read/8, error -71 [ 766.082191][ T5921] usb usb5-port1: unable to enumerate USB device [ 766.156791][ T5898] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 766.510069][ T5898] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 767.216543][T15391] fido_id[15391]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 767.331249][ T5898] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 767.473143][ T5898] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 767.839633][ T5898] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 768.011203][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.039577][ T5898] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 768.073640][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.115648][ T5898] usb 5-1: config 0 descriptor?? [ 768.545525][T15411] FAULT_INJECTION: forcing a failure. [ 768.545525][T15411] name failslab, interval 1, probability 0, space 0, times 0 [ 768.569733][ T5898] keytouch 0003:0926:3333.0041: fixing up Keytouch IEC report descriptor [ 768.732063][T15411] CPU: 0 UID: 0 PID: 15411 Comm: syz.5.2830 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.732089][T15411] Tainted: [L]=SOFTLOCKUP [ 768.732095][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 768.732105][T15411] Call Trace: [ 768.732113][T15411] [ 768.732121][T15411] dump_stack_lvl+0xe8/0x150 [ 768.732147][T15411] should_fail_ex+0x414/0x560 [ 768.732183][T15411] should_failslab+0xa8/0x100 [ 768.732204][T15411] __kmalloc_noprof+0xdf/0x800 [ 768.732220][T15411] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 768.732242][T15411] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 768.732264][T15411] genl_family_rcv_msg_doit+0xb8/0x300 [ 768.732289][T15411] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 768.732311][T15411] ? apparmor_capable+0x137/0x1a0 [ 768.732338][T15411] ? bpf_lsm_capable+0x9/0x20 [ 768.732357][T15411] ? security_capable+0x7e/0x2e0 [ 768.732380][T15411] genl_rcv_msg+0x60e/0x790 [ 768.732399][T15411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.732413][T15411] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 768.732431][T15411] ? __pfx_nl80211_new_station+0x10/0x10 [ 768.732451][T15411] ? __pfx_nl80211_post_doit+0x10/0x10 [ 768.732470][T15411] ? __asan_memcpy+0x40/0x70 [ 768.732483][T15411] ? __pfx_ref_tracker_free+0x10/0x10 [ 768.732505][T15411] netlink_rcv_skb+0x208/0x470 [ 768.732526][T15411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.732542][T15411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 768.732560][T15411] ? genl_rcv+0x19/0x40 [ 768.732597][T15411] ? down_read+0x274/0x2e0 [ 768.732614][T15411] ? genl_rcv+0xd/0x40 [ 768.732640][T15411] genl_rcv+0x28/0x40 [ 768.732663][T15411] netlink_unicast+0x82f/0x9e0 [ 768.732687][T15411] ? __pfx_netlink_unicast+0x10/0x10 [ 768.732705][T15411] ? __alloc_skb+0x198/0x3a0 [ 768.732722][T15411] ? netlink_sendmsg+0x642/0xb30 [ 768.732741][T15411] ? skb_put+0x11b/0x210 [ 768.732761][T15411] netlink_sendmsg+0x805/0xb30 [ 768.732789][T15411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.732813][T15411] ? __import_iovec+0x5d4/0x7f0 [ 768.732830][T15411] ? aa_sock_msg_perm+0xf1/0x1b0 [ 768.732852][T15411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 768.732866][T15411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.732888][T15411] __sock_sendmsg+0x21c/0x270 [ 768.732914][T15411] ____sys_sendmsg+0x505/0x820 [ 768.732938][T15411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.732961][T15411] ? kstrtouint+0x6e/0xe0 [ 768.732990][T15411] ___sys_sendmsg+0x21f/0x2a0 [ 768.733012][T15411] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.733031][T15411] ? get_pid_task+0x20/0x1f0 [ 768.733051][T15411] ? get_pid_task+0x20/0x1f0 [ 768.733070][T15411] ? get_pid_task+0x20/0x1f0 [ 768.733112][T15411] ? __fget_files+0x2a/0x420 [ 768.733131][T15411] ? __fget_files+0x3a0/0x420 [ 768.733164][T15411] __sys_sendmsg+0x164/0x220 [ 768.733186][T15411] ? __pfx___sys_sendmsg+0x10/0x10 [ 768.733211][T15411] ? __pfx_ksys_write+0x10/0x10 [ 768.733235][T15411] __do_fast_syscall_32+0x1dc/0x560 [ 768.733254][T15411] ? lockdep_hardirqs_on+0x7b/0x110 [ 768.733269][T15411] ? do_fast_syscall_32+0x34/0x80 [ 768.733286][T15411] ? irqentry_exit+0x10f/0x660 [ 768.733305][T15411] do_fast_syscall_32+0x34/0x80 [ 768.733323][T15411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 768.733343][T15411] RIP: 0023:0xf707d539 [ 768.733357][T15411] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 768.733371][T15411] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 768.733388][T15411] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 768.733399][T15411] RDX: 0000000000004814 RSI: 0000000000000000 RDI: 0000000000000000 [ 768.733409][T15411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 768.733418][T15411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 768.733428][T15411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 768.733450][T15411] [ 769.128001][ T5898] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0041/input/input74 [ 769.494807][ T5898] keytouch 0003:0926:3333.0041: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 769.581581][ T5898] usb 5-1: USB disconnect, device number 83 [ 769.861454][T15414] fido_id[15414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 770.189581][ T5930] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 770.383700][ T5930] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 770.400190][ T5930] usb 6-1: config 0 has no interface number 0 [ 770.421322][ T5930] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 770.440300][ T5930] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.471887][ T5930] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 770.481585][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.510498][ T5930] usb 6-1: config 0 descriptor?? [ 770.946142][ T5930] elan 0003:04F3:0755.0042: failed to start in urb: -90 [ 770.966798][ T5930] elan 0003:04F3:0755.0042: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input1 [ 771.006360][ T5930] elan 0003:04F3:0755.0042: Input device is not registered [ 771.067740][ T5930] elan 0003:04F3:0755.0042: probe with driver elan failed with error -119 [ 771.204740][ T5834] usb 6-1: USB disconnect, device number 64 [ 771.269007][T15434] fido_id[15434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 771.352208][T15446] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 771.903338][ T5834] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 771.913619][ T5834] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 773.963781][T15466] FAULT_INJECTION: forcing a failure. [ 773.963781][T15466] name failslab, interval 1, probability 0, space 0, times 0 [ 774.058849][T15466] CPU: 1 UID: 0 PID: 15466 Comm: syz.3.2844 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.058886][T15466] Tainted: [L]=SOFTLOCKUP [ 774.058895][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.058909][T15466] Call Trace: [ 774.058919][T15466] [ 774.058930][T15466] dump_stack_lvl+0xe8/0x150 [ 774.058965][T15466] should_fail_ex+0x414/0x560 [ 774.059007][T15466] should_failslab+0xa8/0x100 [ 774.059036][T15466] __kmalloc_noprof+0xdf/0x800 [ 774.059059][T15466] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 774.059090][T15466] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 774.059122][T15466] genl_family_rcv_msg_doit+0xb8/0x300 [ 774.059152][T15466] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 774.059182][T15466] ? apparmor_capable+0x137/0x1a0 [ 774.059220][T15466] ? bpf_lsm_capable+0x9/0x20 [ 774.059247][T15466] ? security_capable+0x7e/0x2e0 [ 774.059280][T15466] genl_rcv_msg+0x60e/0x790 [ 774.059308][T15466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.059328][T15466] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 774.059353][T15466] ? __pfx_nl80211_new_key+0x10/0x10 [ 774.059383][T15466] ? __pfx_nl80211_post_doit+0x10/0x10 [ 774.059409][T15466] ? __asan_memcpy+0x40/0x70 [ 774.059427][T15466] ? __pfx_ref_tracker_free+0x10/0x10 [ 774.059456][T15466] netlink_rcv_skb+0x208/0x470 [ 774.059484][T15466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.059506][T15466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 774.059531][T15466] ? genl_rcv+0x19/0x40 [ 774.059580][T15466] ? down_read+0x274/0x2e0 [ 774.059605][T15466] ? genl_rcv+0xd/0x40 [ 774.059641][T15466] genl_rcv+0x28/0x40 [ 774.059681][T15466] netlink_unicast+0x82f/0x9e0 [ 774.059717][T15466] ? __pfx_netlink_unicast+0x10/0x10 [ 774.059741][T15466] ? __alloc_skb+0x198/0x3a0 [ 774.059765][T15466] ? netlink_sendmsg+0x642/0xb30 [ 774.059792][T15466] ? skb_put+0x11b/0x210 [ 774.059820][T15466] netlink_sendmsg+0x805/0xb30 [ 774.059861][T15466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.059894][T15466] ? __import_iovec+0x5d4/0x7f0 [ 774.059918][T15466] ? aa_sock_msg_perm+0xf1/0x1b0 [ 774.059949][T15466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 774.059970][T15466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.060001][T15466] __sock_sendmsg+0x21c/0x270 [ 774.060039][T15466] ____sys_sendmsg+0x505/0x820 [ 774.060073][T15466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.060107][T15466] ? kstrtouint+0x6e/0xe0 [ 774.060148][T15466] ___sys_sendmsg+0x21f/0x2a0 [ 774.060179][T15466] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.060205][T15466] ? get_pid_task+0x20/0x1f0 [ 774.060234][T15466] ? get_pid_task+0x20/0x1f0 [ 774.060260][T15466] ? get_pid_task+0x20/0x1f0 [ 774.060320][T15466] ? __fget_files+0x2a/0x420 [ 774.060348][T15466] ? __fget_files+0x3a0/0x420 [ 774.060385][T15466] __sys_sendmsg+0x164/0x220 [ 774.060414][T15466] ? __pfx___sys_sendmsg+0x10/0x10 [ 774.060451][T15466] ? __pfx_ksys_write+0x10/0x10 [ 774.060487][T15466] __do_fast_syscall_32+0x1dc/0x560 [ 774.060513][T15466] ? lockdep_hardirqs_on+0x7b/0x110 [ 774.060535][T15466] ? do_fast_syscall_32+0x34/0x80 [ 774.060559][T15466] ? irqentry_exit+0x10f/0x660 [ 774.060586][T15466] do_fast_syscall_32+0x34/0x80 [ 774.060611][T15466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.060639][T15466] RIP: 0023:0xf7f75539 [ 774.060659][T15466] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 774.060686][T15466] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 774.060710][T15466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 774.060727][T15466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.060740][T15466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 774.060754][T15466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 774.060767][T15466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 774.060797][T15466] [ 775.460334][ T5898] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 775.612975][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 775.624216][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 775.680123][ T5898] usb 2-1: New USB device found, idVendor=0eef, idProduct=32c4, bcdDevice= 0.00 [ 775.717331][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.806391][ T5898] usb 2-1: config 0 descriptor?? [ 775.830319][T15484] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 776.022746][T15459] syz.4.2842 (15459): drop_caches: 1 [ 776.044662][T15484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.060109][T15484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.073169][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 776.079252][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 776.136120][ T5898] usb 2-1: USB disconnect, device number 61 [ 776.410706][T15498] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 776.590303][ T5898] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 776.739518][ T5898] usb 2-1: device descriptor read/64, error -71 [ 776.808837][T15459] syz.4.2842 (15459): drop_caches: 1 [ 776.989895][ T5898] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 777.139608][ T5898] usb 2-1: device descriptor read/64, error -71 [ 777.330516][ T5834] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 777.340103][ T5898] usb usb2-port1: attempt power cycle [ 777.346747][ T5834] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 777.990938][ T5898] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 778.010594][ T5898] usb 2-1: device descriptor read/8, error -71 [ 778.115933][T15511] fido_id[15511]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 778.262474][ T5898] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 778.519559][ T5834] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 778.589571][ T5898] usb 2-1: device not accepting address 65, error -71 [ 778.606145][ T5898] usb usb2-port1: unable to enumerate USB device [ 778.744420][ T5834] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 778.779866][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.828916][ T5834] usb 4-1: config 0 descriptor?? [ 778.848720][ T5930] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 779.030704][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 779.038122][ T5930] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 779.066966][ T5930] usb 6-1: config 0 has no interface number 0 [ 779.093666][ T5930] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 779.132015][ T5834] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 779.153005][ T5930] usb 6-1: config 0 interface 85 has no altsetting 0 [ 779.172082][ T5930] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 779.182278][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.209585][ T5930] usb 6-1: Product: syz [ 779.213974][ T5930] usb 6-1: Manufacturer: syz [ 779.218608][ T5930] usb 6-1: SerialNumber: syz [ 779.252096][ T5930] usb 6-1: config 0 descriptor?? [ 779.336283][ T5834] [drm:udl_init] *ERROR* Selecting channel failed [ 779.423373][ T5834] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 779.440397][ T5834] [drm] Initialized udl on minor 2 [ 779.465849][ T5834] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 779.492151][ T5834] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 779.520402][ T5931] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 779.529933][ T5834] usb 4-1: USB disconnect, device number 42 [ 779.536742][ T5931] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 779.556910][T11315] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 779.557039][T11315] Bluetooth: hci5: hardware error 0x04 [ 779.578958][ T5930] appletouch 6-1:0.85: Failed to read mode from device. [ 779.599693][ T5930] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 779.675266][ T5930] usb 6-1: USB disconnect, device number 65 [ 780.158892][T15519] syz.4.2857 (15519): drop_caches: 1 [ 780.241273][T15545] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 781.130828][T15548] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2867'. [ 781.271652][T15558] create_pit_timer: 2 callbacks suppressed [ 781.271672][T15558] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 781.285788][T15557] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 781.355547][T15557] kvm: pic: level sensitive irq not supported [ 781.355637][T15557] kvm: pic: non byte read [ 781.381414][T15557] kvm: pic: level sensitive irq not supported [ 781.381509][T15557] kvm: pic: non byte read [ 781.394644][T15557] kvm: pic: level sensitive irq not supported [ 781.394800][T15557] kvm: pic: non byte read [ 781.649584][T11315] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 782.421991][ T5930] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 782.437151][ T5930] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 783.456796][T15594] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 783.708590][T15589] fido_id[15589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 783.750141][T15596] syzkaller0: entered promiscuous mode [ 783.766090][T15596] syzkaller0: entered allmulticast mode [ 784.096667][ T5834] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 784.429532][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 784.465577][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 784.508715][ T5834] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 784.566572][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.602914][ T5834] usb 6-1: config 0 descriptor?? [ 784.865033][ T5834] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 785.123281][ T5930] usb 6-1: USB disconnect, device number 66 [ 785.775817][ T5930] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 785.881905][T14589] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 786.302608][T14589] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 786.316417][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.371836][ T5898] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 786.498362][ T5930] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 786.541717][ T5898] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 786.560852][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.732368][ T5930] usb 4-1: config 0 descriptor?? [ 786.759736][ T5898] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 786.807753][T15636] fido_id[15636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 787.330385][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.341159][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.351893][ T5898] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 787.368044][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 787.409822][ T5898] usb 6-1: SerialNumber: syz [ 787.418748][ T5930] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor [ 787.609650][ T5930] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0048/input/input76 [ 787.779554][ T5930] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 787.859883][ T5930] usb 4-1: USB disconnect, device number 43 [ 788.110029][ T5898] usb 6-1: 0:2 : does not exist [ 788.162188][T15642] fido_id[15642]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 788.191553][ T5898] usb 6-1: USB disconnect, device number 67 [ 788.305765][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.447460][T15648] fido_id[15648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 788.778675][T15664] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 788.916549][T15666] binder: 15665:15666 ioctl c018620c 800002c0 returned -1 [ 789.030781][T15658] syz.4.2891 (15658): drop_caches: 1 [ 789.439728][T15658] syz.4.2891 (15658): drop_caches: 1 [ 790.188223][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2900'. [ 790.623523][ T5930] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 790.634225][ T5930] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 791.271463][ T30] audit: type=1800 audit(1766827978.357:1254): pid=15698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2903" name="bus" dev="ramfs" ino=60024 res=0 errno=0 [ 792.115392][T15720] team0: Port device ip6gre0 removed [ 792.130603][ T5921] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 792.147915][T15720] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 792.170454][ T5930] skbuff: skb_under_panic: text:ffffffff8a25ea68 len:156 put:40 head:ffff888058b8a000 data:ffff888058b89fe8 tail:0x84 end:0x6c0 dev:team0 [ 792.202987][ T5930] ------------[ cut here ]------------ [ 792.208666][ T5930] kernel BUG at net/core/skbuff.c:213! [ 792.226461][ T5930] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 792.232788][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.243877][ T5930] Tainted: [L]=SOFTLOCKUP [ 792.248239][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 792.258343][ T5930] Workqueue: mld mld_ifc_work [ 792.263084][ T5930] RIP: 0010:skb_panic+0x157/0x160 [ 792.268170][ T5930] Code: c7 60 9c 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 ce 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 792.287824][ T5930] RSP: 0018:ffffc900045ff440 EFLAGS: 00010282 [ 792.293936][ T5930] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 08a6c5a384384200 [ 792.301948][ T5930] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 792.309943][ T5930] RBP: 00000000000006c0 R08: ffffc900045ff1a7 R09: 1ffff920008bfe34 [ 792.317944][ T5930] R10: dffffc0000000000 R11: fffff520008bfe35 R12: ffff8880682a8790 [ 792.325952][ T5930] R13: ffff888058b8a000 R14: ffff888058b89fe8 R15: 0000000000000084 [ 792.333960][ T5930] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 792.342919][ T5930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.349529][ T5930] CR2: 000000000c3df522 CR3: 0000000056d68000 CR4: 00000000003526f0 [ 792.357544][ T5930] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 792.365543][ T5930] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 792.373549][ T5930] Call Trace: [ 792.376859][ T5930] [ 792.379820][ T5930] ? ip6gre_header+0xc8/0x790 [ 792.384574][ T5930] ? ip6gre_header+0xc8/0x790 [ 792.389321][ T5930] skb_push+0xc3/0xe0 [ 792.393471][ T5930] ip6gre_header+0xc8/0x790 [ 792.398023][ T5930] ? __pfx_ip6gre_header+0x10/0x10 [ 792.403164][ T5930] ? neigh_connected_output+0x1ea/0x460 [ 792.408748][ T5930] ? read_seqbegin+0xac/0x180 [ 792.413452][ T5930] ? lockdep_hardirqs_on+0x7b/0x110 [ 792.418683][ T5930] ? __pfx_ip6gre_header+0x10/0x10 [ 792.423877][ T5930] neigh_connected_output+0x286/0x460 [ 792.429389][ T5930] ? ip6_output+0x126/0x550 [ 792.433943][ T5930] ip6_output+0x340/0x550 [ 792.438309][ T5930] NF_HOOK+0x9e/0x380 [ 792.442331][ T5930] ? NF_HOOK+0x101/0x380 [ 792.446605][ T5930] ? __pfx_NF_HOOK+0x10/0x10 [ 792.451227][ T5930] ? __pfx_dst_output+0x10/0x10 [ 792.456113][ T5930] ? lockdep_hardirqs_on+0x7b/0x110 [ 792.461339][ T5930] ? __local_bh_enable_ip+0xd0/0x130 [ 792.466670][ T5930] ? icmp6_dst_alloc+0x3a5/0x420 [ 792.471761][ T5930] mld_sendpack+0x8d4/0xe60 [ 792.476312][ T5930] ? mld_sendpack+0x1e7/0xe60 [ 792.481024][ T5930] ? __pfx_mld_sendpack+0x10/0x10 [ 792.486098][ T5930] mld_ifc_work+0x83e/0xd60 [ 792.490641][ T5930] ? process_scheduled_works+0x9ef/0x1770 [ 792.496392][ T5930] process_scheduled_works+0xad1/0x1770 [ 792.501980][ T5930] ? __pfx_process_scheduled_works+0x10/0x10 [ 792.507991][ T5930] ? do_raw_spin_lock+0x121/0x290 [ 792.513062][ T5930] worker_thread+0x8a0/0xda0 [ 792.517706][ T5930] ? __kthread_parkme+0x7b/0x200 [ 792.522686][ T5930] kthread+0x711/0x8a0 [ 792.526794][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 792.532024][ T5930] ? __pfx_kthread+0x10/0x10 [ 792.536677][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 792.541918][ T5930] ? __pfx_kthread+0x10/0x10 [ 792.546550][ T5930] ret_from_fork+0x510/0xa50 [ 792.551177][ T5930] ? __pfx_ret_from_fork+0x10/0x10 [ 792.556404][ T5930] ? __switch_to+0xc9e/0x1480 [ 792.561121][ T5930] ? __pfx_kthread+0x10/0x10 [ 792.565743][ T5930] ret_from_fork_asm+0x1a/0x30 [ 792.570566][ T5930] [ 792.573618][ T5930] Modules linked in: [ 792.578647][ T5930] ---[ end trace 0000000000000000 ]--- [ 792.589470][ T5930] RIP: 0010:skb_panic+0x157/0x160 [ 792.595212][ T5930] Code: c7 60 9c 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 ce 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 792.619487][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 792.660427][T15720] netlink: 2188 bytes leftover after parsing attributes in process `syz.0.2907'. [ 792.687951][ T5930] RSP: 0018:ffffc900045ff440 EFLAGS: 00010282 [ 792.692000][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 792.697175][ T5930] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 08a6c5a384384200 [ 792.711867][ T5921] usb 4-1: config 8 interface 0 altsetting 64 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 792.715228][ T5930] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 792.727234][ T5921] usb 4-1: config 8 interface 0 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 792.741948][ T5921] usb 4-1: config 8 interface 0 has no altsetting 0 [ 792.759160][ T5930] RBP: 00000000000006c0 R08: ffffc900045ff1a7 R09: 1ffff920008bfe34 [ 792.762707][ T5921] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=66.4d [ 792.776859][ T5930] R10: dffffc0000000000 R11: fffff520008bfe35 R12: ffff8880682a8790 [ 792.783457][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.786813][ T5930] R13: ffff888058b8a000 R14: ffff888058b89fe8 R15: 0000000000000084 [ 792.792966][ T5921] usb 4-1: Product: syz [ 792.792988][ T5921] usb 4-1: Manufacturer: syz [ 792.793004][ T5921] usb 4-1: SerialNumber: syz [ 792.872151][ T5930] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 792.890713][ T5930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.907808][ T5930] CR2: 0000000080063018 CR3: 000000002e25a000 CR4: 00000000003526f0 [ 792.922463][ T5930] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 792.940322][ T5930] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 792.958835][ T5930] Kernel panic - not syncing: Fatal exception [ 792.965847][ T5930] Kernel Offset: disabled [ 792.970212][ T5930] Rebooting in 86400 seconds..