last executing test programs: 1m7.84687215s ago: executing program 0 (id=342): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) io_uring_enter(r1, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_open_dev$sndpcmp(0x0, 0x0, 0x28002) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m6.859145802s ago: executing program 0 (id=348): r0 = socket$packet(0x11, 0x3, 0x300) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xf) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x8553}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x130}, 0x3a, 0x1) landlock_restrict_self(r3, 0xd) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000bc0)) landlock_restrict_self(r2, 0x4) socket(0x1d, 0x4, 0x1) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_create1(0x80000) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000, 0xfffffffc, 0xffffffff}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x200, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa5}, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x7) landlock_restrict_self(r3, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x91ae, 0x4, 0xfff, 0xc, 0x7fffffff, 0x100, 0xc9eb}, 0x1c) 1m5.918955534s ago: executing program 0 (id=356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0x280, 0x168, 0x3, @discrete={0x1}}) personality(0x400000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0008004500005c0000000000119078000000000000000000001b5900a43d76bfef564b8a661e48907803000000000000004b3f7633015aff9fa5e73369ed3ed4f938752184f1af202914ef0f501fd4f4fc0f232b48a86ef0222fb6367f8197376acb8f51148dba1a000000786b8be1876a0393e291d8b098035a88cd2c0e7a71dddb16ca2e812ff7df4cc92ec6b1e14220a40a39ffdd292a38d60e752ab18a927bbab514541cd304a5cad4f8b3d879df3a5e42da42c01bd26864f28bd0672c5e31adc38cdaa63227a89d03fd666cce7060793e30318e04306634348771ffb3501b1ec4d0bdbe3679b287ab278d3983f408"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000000000000000000f3ffff0014000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f000062e000/0x4000)=nil, 0x4000}, 0x1}) 1m5.45433673s ago: executing program 0 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x700, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1m5.235682203s ago: executing program 0 (id=358): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d002000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x230, 0x278, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'wg0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000003c0)={0x0, "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"}) 1m1.40307052s ago: executing program 0 (id=365): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x20010, r0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002e00090027bd700000000000040000003aacef339abe4fa497f46024d2405090790f6190d3811fc006d9220822a1a86aec7664552db212f157d83e33b2ac8570db0fc406203911ab65145f6283a22793b10a5eca53828c7eea68f94bbb610f67280aa17001e46d5d6ebe06f470e3ee2c7d24a765c6ffc07d10d7b04fae9882193c4761b407063a391b338af81f96bb4a943e9473407fc42566b67bf9dce6fb705cd86692e12c2b96e9139335"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000463000/0x4000)=nil, 0x930, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x6, 0x1, 0xfffffffffffffffe, 0xfff, 0x7fffffffffffffff, 0x8, 0xfffffffffffffff7}, 0x0, &(0x7f0000000180)={0xc3, 0x8, 0xe, 0x6, 0x81, 0x1, 0x50, 0x5}, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f00000003c0)="228267cc8b970635fefb05868f20dbc4b31d44e2c02940757d654287a94a5d5582e31e05b55646febfdc357398ce6ae47b0fc77bd51458f649a6843fb78a6518d7583ffb1913a043e457af0846a46cbb652abc13cb82e1e862c97ecb1efe03b489503392144765d6c3284a006f7f8229de52d3108f455e0a543ec687736eb23342ead5f631e8038e7a9ef21f405d0569513aa6be82a63afd36bff95199b45c4eed8eac2d2cdaed1240c206cec67cf9c0c384b7536dfa0b6f1bc50d67113b57b566d05c76b0c6d81c", &(0x7f00000004c0)="c2b035acdddc58191f2e423d78a2a39c3a279a7b99d05104dd7434c3370f89e5a7bb709e13ccb27d48a10c399001bb434271190f3d41130bbf3dae6d9f1de54d0fad4f5374fc47de0d1755a1d32428222a73d3650fadabeea4528207f475837f4d6b27530a685f2abcc3865fc633d970c843ae0a6a52dcc48160e812a9fe797cee24a76a914d5f9fccafd3fe893a2c9f1aff6ea7c65cc3dce985b5592586a57e8012e064eff70993b59bb86ac9"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x6}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 52.933248909s ago: executing program 4 (id=391): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 51.88679375s ago: executing program 4 (id=394): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) flock(r1, 0x2) flock(r1, 0x1) flock(r0, 0x5) 50.729948949s ago: executing program 4 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000340), 0x3ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f00000007c0), 0x7, r0}, 0x38) 50.224819877s ago: executing program 1 (id=403): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) 50.020328707s ago: executing program 2 (id=404): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.934025646s ago: executing program 3 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf4}}, 0x10) 49.487421068s ago: executing program 3 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266afe2e239000f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d90f20d835080000000f22d8", 0x44}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.910352252s ago: executing program 1 (id=407): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x10004000) setreuid(0xee01, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x7, 0x82c0) read$usbmon(r2, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 48.599973542s ago: executing program 2 (id=408): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0xfff}, {@any, 0x5}, 0x400, "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"}, 0x418, 0x8}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 47.969323522s ago: executing program 3 (id=409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="000004040000070021"], 0x0, 0x0, 0x0}, 0x0) 47.678189416s ago: executing program 2 (id=410): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000580)}}, 0x18) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x88}, 0x1, 0xba01}, 0x0) pselect6(0x40, &(0x7f0000000340)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180f3ff00006861736800000000140002800800074000000001080002400000000e0900010073797a300000000009"], 0x7c}}, 0x0) shutdown(r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) syz_emit_ethernet(0x107, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) 45.989260271s ago: executing program 32 (id=365): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x20010, r0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002e00090027bd700000000000040000003aacef339abe4fa497f46024d2405090790f6190d3811fc006d9220822a1a86aec7664552db212f157d83e33b2ac8570db0fc406203911ab65145f6283a22793b10a5eca53828c7eea68f94bbb610f67280aa17001e46d5d6ebe06f470e3ee2c7d24a765c6ffc07d10d7b04fae9882193c4761b407063a391b338af81f96bb4a943e9473407fc42566b67bf9dce6fb705cd86692e12c2b96e9139335"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000463000/0x4000)=nil, 0x930, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x6, 0x1, 0xfffffffffffffffe, 0xfff, 0x7fffffffffffffff, 0x8, 0xfffffffffffffff7}, 0x0, &(0x7f0000000180)={0xc3, 0x8, 0xe, 0x6, 0x81, 0x1, 0x50, 0x5}, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f00000003c0)="228267cc8b970635fefb05868f20dbc4b31d44e2c02940757d654287a94a5d5582e31e05b55646febfdc357398ce6ae47b0fc77bd51458f649a6843fb78a6518d7583ffb1913a043e457af0846a46cbb652abc13cb82e1e862c97ecb1efe03b489503392144765d6c3284a006f7f8229de52d3108f455e0a543ec687736eb23342ead5f631e8038e7a9ef21f405d0569513aa6be82a63afd36bff95199b45c4eed8eac2d2cdaed1240c206cec67cf9c0c384b7536dfa0b6f1bc50d67113b57b566d05c76b0c6d81c", &(0x7f00000004c0)="c2b035acdddc58191f2e423d78a2a39c3a279a7b99d05104dd7434c3370f89e5a7bb709e13ccb27d48a10c399001bb434271190f3d41130bbf3dae6d9f1de54d0fad4f5374fc47de0d1755a1d32428222a73d3650fadabeea4528207f475837f4d6b27530a685f2abcc3865fc633d970c843ae0a6a52dcc48160e812a9fe797cee24a76a914d5f9fccafd3fe893a2c9f1aff6ea7c65cc3dce985b5592586a57e8012e064eff70993b59bb86ac9"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x6}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 45.306605019s ago: executing program 3 (id=412): socket$netlink(0x10, 0x3, 0x9) getpid() socket$inet6(0xa, 0x3, 0x7) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 45.306319121s ago: executing program 2 (id=413): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) shutdown(r0, 0x1) 45.24331998s ago: executing program 4 (id=414): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) 44.812084166s ago: executing program 1 (id=415): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) 44.521212532s ago: executing program 2 (id=416): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4048000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x14) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0xa}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 43.38059941s ago: executing program 4 (id=417): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4ea1, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10000016}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 43.278020691s ago: executing program 1 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004000240"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 43.277578905s ago: executing program 3 (id=419): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbedc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc64e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8fffb58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a3548371507000000b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20b4e4acf5bea0484084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835acdabd60da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc957844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d0615de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c846f6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc575341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328312671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f304f65ac03cfecce67027d579e1226bd7b73827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374f000000000000000725e75c257834572026c511f57dce67153a4008f9e75e07edfd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014c4ad280944eae6f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010026bd70000000001c3b00000008000300", @ANYRES32=r1, @ANYBLOB="5200330080200900ffffffffffff080211000000"], 0x84}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) 41.530339934s ago: executing program 1 (id=420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0xac1e0001}}) 41.439425829s ago: executing program 4 (id=421): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xff, 0xff, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 41.407113164s ago: executing program 3 (id=422): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 32.929687261s ago: executing program 1 (id=423): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 27.370443655s ago: executing program 2 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x3aec, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x3ab4, 0x2, [@TCA_CGROUP_ACT={0x3ab0, 0x1, [@m_connmark={0x94, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}]}, {0x29, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1ca0, 0x5, 0x0, 0x0, {{0xa}, {0x1c74, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6, [{0x1, 0x9, 0x0, 0x0, 0x1, 0x2}, {0x3, 0xe, 0x1, 0x1, 0x7, 0x51b}]}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x0, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x5, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x9, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x1, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x10001, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x3, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x8}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x4, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x1d78, 0xb, 0x0, 0x0, {{0xa}, {0x1d4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x7, 0x456, 0x4, 0x6, 0x1}, 0xb9, 0xf3, [{0x3, 0x5, 0xd, 0x1, 0x5, 0x10}, {0x7fff, 0x4, 0x1, 0x3, 0xb, 0xf}, {0x8, 0xfffffffa, 0x8001, 0x10, 0x0, 0x7fff}, {0xbe, 0x5, 0x6, 0xfffffffa, 0x7, 0x2}, {0x1, 0x1, 0x10, 0x7fffffff, 0xfffffff7, 0x4}, {0x401, 0x7, 0x0, 0x6, 0x4, 0xc8}]}, [{0x8bc, 0x1, 0x6, 0x4, 0x100, 0xfffffffd}, {0x0, 0x68, 0xfffffff8, 0x6, 0x5, 0x4}, {0xbb05, 0x97af, 0x3, 0x2, 0x4, 0x6}, {0x6, 0x1, 0x3, 0x2c27f2d1, 0x0, 0x559a}, {0x0, 0x8, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x1000, 0x7f, 0x8, 0x3, 0x6}, {0x4, 0x2c4, 0x7ab, 0x4, 0x7}, {0xa92, 0x3, 0xb, 0x0, 0x1, 0x5}, {0x7fff, 0xe, 0xa524, 0x40, 0x5, 0x101}, {0xb, 0x8, 0xfffffff8, 0x1000, 0xd72, 0x4}, {0x9, 0x8000000, 0x0, 0x2, 0x2, 0x3ff}, {0x7, 0x3, 0x6, 0xcea, 0xff, 0x80000001}, {0x1800000, 0x9, 0x3, 0x7ff, 0x1, 0x4}, {0xfffffffd, 0xfffffffd, 0x9, 0x0, 0xd1, 0x61b}, {0xfffffff1, 0x80, 0x7, 0x1, 0x4, 0x1000}, {0xdab4, 0x3b6, 0x8000, 0x9, 0x1}, {0x2, 0x400, 0x0, 0x9, 0x7, 0x2}, {0xffffffff, 0x245, 0x63, 0x80000001, 0xc00000, 0xa}, {0xfffffffc, 0x10000, 0x80000001, 0x8, 0x8, 0x5}, {0x80000001, 0x1, 0x5e67, 0x0, 0xff, 0x9}, {0x6, 0x5, 0x1a, 0x618, 0x2, 0x1}, {0x9, 0x9, 0x5, 0x6, 0x4, 0x8}, {0x1, 0x7, 0xf, 0x1, 0x2, 0x1}, {0x9, 0xa, 0x3, 0x2, 0x6, 0x9}, {0x495f, 0xfe, 0x9bb3, 0x2, 0xfffffffa, 0x7}, {0x9, 0x10001, 0xc, 0x76, 0x6, 0x4}, {0x8c, 0x4, 0x8f29, 0x0, 0xffff8001, 0x7}, {0xfff, 0xffff, 0xc, 0xe4, 0x6, 0x7}, {0x7, 0x8, 0xffff8001, 0x100, 0x7}, {0x4, 0xbe8b, 0x4, 0x6, 0x1, 0x3}, {0x5, 0xad4, 0x2, 0x9, 0xb1a8, 0x5}, {0x9, 0x3, 0xb6e, 0xfff, 0x200, 0x9}, {0x4, 0x8000, 0x8, 0x5, 0x6}, {0x4, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x7, 0x3e, 0x6, 0x8, 0x7, 0x7}, {0x6, 0x401, 0x4, 0x9, 0x3}, {0xa, 0x40, 0x9, 0xf, 0x5, 0xf}, {0x12b8c98e, 0xfff, 0x7fffffff, 0x3, 0xe, 0x7fff}, {0x6, 0x8, 0x118, 0xe6c6, 0x6, 0x9738}, {0x3, 0x9, 0x7ff, 0x3, 0xffffffff, 0x9}, {0x8, 0x6, 0x7, 0x7, 0x2, 0x8}, {0x80000000, 0x5ce23415, 0x24, 0xfff, 0xff, 0x2}, {0x100, 0x1000, 0xca6, 0x0, 0xfffffff7, 0xa1}, {0x1, 0x8, 0x7, 0x5, 0xfffffff7, 0x3a}, {0x84c, 0x81, 0x7, 0x1, 0x1, 0x7f}, {0x9, 0x200, 0x700000, 0x1, 0x3, 0x5}, {0x6, 0x2, 0x7, 0x6, 0xfffffffb, 0x7}, {0x0, 0x6, 0xf, 0x9, 0x5, 0xd5a}, {0xfffffff7, 0x7, 0xffffff7f, 0x5, 0x8, 0x2}, {0x5, 0x8, 0x3, 0x26, 0x3, 0x400}, {0x0, 0x6, 0x6, 0x7, 0x101, 0x222}, {0x1f, 0x800, 0x3, 0xe6b, 0x0, 0xfffffff7}, {0x8, 0x4, 0x6, 0x0, 0x2, 0x5}, {0x0, 0x2, 0x2, 0x7, 0x400, 0x7}, {0x200, 0x3, 0x8000, 0x65, 0x1000, 0x40}, {0x10, 0xa, 0x4, 0x10, 0x1, 0x5}, {0x9, 0x9, 0xe95, 0x4, 0xd}, {0xe0, 0x2, 0x80000001, 0x4, 0x1a49, 0x6}, {0x2, 0x4, 0x4, 0x10, 0xfffff0ac, 0x3}, {0xbb, 0x4, 0x4, 0x1, 0x7fffffff, 0x6}, {0xffffffff, 0xffff, 0x6, 0xe4, 0x0, 0x6}, {0xfffffff9, 0x2, 0x1, 0xc, 0x8, 0x800}, {0x6, 0x4, 0x5, 0x1, 0x1, 0x4}, {0xe, 0x6, 0x1, 0x8, 0x9, 0x9}, {0x7, 0xc6, 0x3ff, 0xe7e3, 0x5, 0x9}, {0xea48, 0xfffffffd, 0x10000, 0x6, 0x3, 0x5}, {0x4, 0xffff, 0x1ff, 0x8, 0x4, 0xfffffff0}, {0xb, 0x3b3, 0x1, 0x101, 0xe11, 0x5}, {0x3, 0x4, 0x6, 0xff, 0xff, 0x7}, {0x0, 0x2, 0x8, 0x4, 0x7, 0x4}, {0x7, 0xb, 0x44df, 0x9, 0x6, 0x5d5ab339}, {0x6, 0x6, 0x40, 0x2, 0x9, 0x1ff}, {0x7, 0xffffffff, 0x4, 0x10001, 0xffffffff, 0x7}, {0x81, 0xa, 0x3, 0x8, 0xd33, 0x6}, {0x2, 0x4, 0x9ab, 0xb4, 0x5, 0xb577}, {0x0, 0xffff, 0x6, 0x7fff, 0x0, 0x5}, {0xd, 0x6, 0xaa10, 0xfffff477, 0x0, 0xff}, {0x2, 0xfffffffa, 0x4, 0x90, 0x9, 0x3e}, {0x2, 0x80000000, 0x4, 0x4, 0x90, 0x2}, {0x4, 0x1, 0x6, 0x4, 0x4, 0x7}, {0x5, 0x6, 0x4, 0xb80c, 0x5, 0x4cf1}, {0x8001, 0x4, 0x8, 0x9, 0x0, 0x6}, {0x40, 0x9, 0x18c, 0x100, 0x2, 0x9}, {0x3, 0x4, 0x9, 0x7f, 0x7, 0x179}, {0x0, 0x7, 0x2, 0x80, 0x401, 0x8}, {0x7, 0x0, 0x10001, 0xf6, 0x64f57d4f, 0x10f00000}, {0x7, 0x200, 0x200, 0x9, 0x5, 0x4512}, {0xd3, 0x0, 0x8, 0x2, 0x8, 0x101}, {0x6b0c, 0x9, 0x7, 0x3ff, 0x4}, {0x5f, 0x4, 0xffffffff, 0x0, 0x0, 0x7}, {0x4, 0x4, 0x1200000, 0x7, 0x800, 0x6}, {0x1, 0x6, 0x80, 0xef8, 0x0, 0x5}, {0x40000, 0x6, 0x1, 0x1, 0x2, 0xd09}, {0x8000, 0x9, 0xfffffffd, 0x100, 0x6, 0xfffffff7}, {0x9, 0x2, 0x9, 0x1, 0x3, 0xbe2}, {0x4, 0xa, 0x0, 0x0, 0x6, 0x6}, {0x3ff, 0x5, 0x1, 0x7000, 0x4e, 0x8}, {0xd6, 0x9, 0x10000, 0x8, 0xff, 0x2}, {0xb, 0x1, 0x1f36, 0x8ff4, 0xfff, 0x6}, {0x0, 0x516607, 0x2, 0x3, 0x3, 0xffffffff}, {0xffff4b03, 0x5, 0x10, 0x1, 0x3, 0x6}, {0x7, 0x0, 0x6, 0x8000, 0x10, 0xa}, {0x2, 0x6c, 0xffffffff, 0x2, 0x94, 0x9}, {0x3, 0x40, 0xfffffffa, 0x6, 0x0, 0xef0}, {0x8, 0x8, 0x64, 0x10, 0x49, 0x80}, {0x9, 0xc, 0x8000, 0x7, 0x3, 0x140}, {0x7, 0x7, 0xf16, 0x7ff, 0x3, 0x7}, {0x1ff, 0x9, 0x1, 0x9, 0x4e, 0xffffffff}, {0x4, 0x2, 0xffffffff, 0xe559, 0xc16, 0x4}, {0xfffff802, 0x1, 0x4, 0x1, 0x6}, {0x2, 0xf, 0x10, 0x3, 0xafae, 0x3}, {0x10000, 0x4, 0x6, 0x2, 0x6, 0xa4}, {0x0, 0x4, 0x0, 0x4, 0x1000, 0x6f17}, {0x2, 0x4, 0xd9, 0x7fffffff, 0x3, 0x805}, {0xf17, 0x4, 0x40, 0x5, 0x1, 0xff}, {0x0, 0x80000001, 0xb44f, 0xfffffffa, 0x0, 0x8a5}, {0x8000, 0x7ff, 0x5, 0x3, 0x4, 0x600}, {0x4b, 0xad, 0x8, 0x669, 0x1ff, 0x3}, {0x2, 0xa45, 0x1000, 0x0, 0xa, 0x1}, {0x4, 0x1, 0x8, 0x2, 0xe0, 0x4}, {0x4, 0xffd, 0x5, 0x3, 0x7fffffff, 0xfffffffb}, {0x8, 0x4, 0x4, 0x6, 0x1, 0x5}, {0x6, 0x0, 0xffffdbdc, 0x2, 0x9, 0x140000}, {0x2, 0x1, 0xdc, 0x8, 0x80000000, 0x569}, {0x0, 0x8, 0xffffffff, 0xa, 0x80000001, 0xa}, {0xfffffbff, 0x10, 0x8, 0x101, 0xfffffffa, 0x8000}, {0xa9c, 0x6, 0x1ff, 0x8, 0x1d, 0x3}, {0x2, 0xfffff16c, 0x5, 0x3, 0x5, 0x7ff}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2d451479be6868cc, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xa02f5fe57b5d7768}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x7}, {0x1}, {0x3}, {0x2}, {}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x2220886d9e210a2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x1, 0x1, 0x20000000, 0xfffffffa, 0x3}, 0x9, 0x3, [{0x3, 0x3, 0x7, 0x5, 0x2, 0x3}, {0x200, 0x1, 0xc, 0x5, 0x9, 0x52e}, {0x3, 0x8382, 0x8, 0x3ff, 0x5, 0x764}, {0xa, 0x0, 0x10, 0x0, 0xfffffff3, 0xe}, {0x7f, 0xd, 0xae6c, 0x401, 0x100, 0x7}]}, [{0x9, 0x2, 0xc, 0x0, 0x7, 0x5}, {0x5, 0x40, 0x0, 0xda2, 0x8, 0x2db}, {0x10000, 0x3, 0xfff, 0x7, 0x0, 0xffffffff}, {0x1, 0x9, 0x2, 0x4a, 0x8, 0x10001}, {0x1000, 0x3, 0x1, 0x80, 0x7ff, 0xffffffff}, {0x8000, 0x81, 0xe, 0x6cdc, 0x9, 0xb5a7}, {0x2, 0x9, 0x40, 0x9, 0x2, 0xff}, {0x4, 0xfaa, 0x81, 0x400, 0xa395, 0x81}, {0x20000000, 0x0, 0x1, 0x8, 0x100, 0x2}, {0x2, 0x9, 0x5, 0x7, 0x0, 0xf33}, {0xb7a, 0x2, 0x3fe0000, 0x9, 0x2, 0x1}, {0x3, 0xff, 0x9, 0x4, 0xffff, 0x1}, {0x3, 0x4, 0xff, 0x3, 0x101, 0xfff}, {0x9, 0x2, 0x1000, 0x8001, 0x3, 0x3}, {0xc8, 0xffff8001, 0x9, 0x3, 0x1, 0x5}, {0x8, 0x8, 0x8, 0xff, 0x8001, 0x5}, {0x4, 0xffffffff, 0xda, 0x7, 0xfffffffc, 0xfffffff5}, {0x6, 0x8e91, 0xbea8, 0xfd4a, 0x0, 0xb07}, {0x3, 0x3, 0x5325, 0x9, 0x1, 0x8}, {0x2, 0xa97, 0x6, 0x0, 0x2000, 0x9}, {0x101, 0x5, 0x8d60, 0x0, 0x64, 0xb4}, {0x6, 0xda34, 0x3, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x8, 0x1ff, 0x7, 0x4}, {0xeb6, 0x4, 0x8, 0x9, 0xfffffff0, 0xfffffff9}, {0xe2d, 0x2, 0x6, 0x5, 0xa, 0x8}, {0x2, 0xbc15, 0x1, 0x2, 0x6, 0xffffffff}, {0x6, 0x6, 0x5, 0x7, 0x1000, 0x4}, {0xb, 0x9, 0x5, 0x0, 0xfffffffa, 0x8}, {0x0, 0x9, 0x7, 0x6, 0x9850, 0x7ff}, {0xffffffff, 0x7, 0xffff, 0x3}, {0x4, 0x9, 0x6c, 0xaa6, 0x62, 0xff}, {0x7ff, 0x5, 0x4, 0x7, 0x1, 0x2ee}, {0xfff, 0x4, 0x7f, 0xffffffff, 0xa26, 0x628}, {0x3, 0x81, 0x2, 0x5, 0x5}, {0x5, 0x6, 0x3, 0x8, 0xa7c, 0x5795}, {0x2, 0x72a44795, 0x6da, 0x6, 0x2, 0x3}, {0xe48, 0x1, 0x8, 0x10000, 0xe7, 0x6}, {0x7, 0x0, 0xdaac, 0xe, 0xc66, 0xe4b}, {0x8, 0xb, 0x0, 0x8, 0x2, 0x3}, {0x989, 0x4, 0x24b6, 0x6, 0x7, 0x1}, {0x93, 0x0, 0x72a, 0x8, 0x8, 0x9}, {0x6, 0x1, 0x32, 0x8, 0x3, 0x4}, {0xf, 0x3, 0x401, 0x9, 0x1}, {0x2, 0x5, 0x5, 0xf, 0x7, 0x74ee}, {0x80000001, 0x23d, 0x5, 0x10000, 0x60a9, 0x2000000}, {0x9, 0x5, 0x81, 0x2, 0x5, 0x5}, {0x5, 0x2, 0xff, 0x80000001, 0x8, 0x5}, {0x8001, 0xfffffc01, 0x1, 0x22, 0x2, 0x9}, {0x1, 0x0, 0x0, 0xfff, 0x8000, 0x5}, {0x7, 0xc, 0x80000001, 0x6, 0xfffffffc, 0x401}, {0xfffffffb, 0x1, 0x8, 0x7, 0x2437}, {0x8, 0x80, 0x1, 0xc1, 0x3, 0x1}, {0x8000, 0x7, 0x2, 0xffffffc0, 0x5, 0x9}, {0x7fff, 0x6, 0x7, 0x0, 0x100, 0x9}, {0x8001, 0xd, 0x80, 0x0, 0x172, 0x9652}, {0x6, 0x4, 0x1, 0x3, 0x680c, 0xfffffeff}, {0xff, 0x1, 0xa24, 0x9, 0x0, 0xfffff2cb}, {0x980d, 0x4, 0x4, 0x8f, 0x800007, 0x4}, {0x8, 0x100000, 0x4, 0x0, 0x7f, 0x4}, {0x6, 0x3813, 0x6, 0x9, 0xfffffffb, 0x7ff}, {0x7, 0x7, 0xfffffffa, 0x80010000, 0x7ff, 0xffff0000}, {0x8, 0x7de, 0x40, 0xff, 0x3, 0x99}, {0x101, 0x2, 0x9, 0xb4df, 0x7fff}, {0x2, 0x7, 0x5, 0x1, 0xffffffff, 0x5}, {0x6, 0x1, 0x7, 0x4, 0xdb, 0x20f9}, {0x80, 0xfffffffc, 0xc, 0x2, 0x5, 0x8000}, {0x9, 0x4, 0x4, 0x2, 0x3, 0x9}, {0x0, 0x10001, 0x200, 0x8000, 0xffffffff, 0x4}, {0x8, 0xf, 0x9, 0xf, 0xa15e, 0x3}, {0x4, 0x1, 0x8000, 0x1, 0xa715, 0x3}, {0x9, 0x8, 0x80000001, 0x1b, 0xffff, 0x3}, {0x7, 0x6, 0x3, 0x6, 0x9, 0x7}, {0x1ff, 0x8, 0x6, 0x0, 0x0, 0x9}, {0x9, 0xace2, 0x7, 0x2, 0x71e37c09, 0x73ed}, {0x3, 0x8, 0x7, 0x7, 0x2, 0x6}, {0x1, 0x4e7, 0x6, 0xaf86, 0x5, 0x198c}, {0x400, 0x80000000, 0x8, 0x5, 0xac7, 0x40}, {0x7, 0x9, 0x400, 0x2, 0xfffffff2, 0x8000}, {0x10, 0x2, 0x9de, 0xa, 0x0, 0x80000000}, {0x1, 0x5, 0x3, 0xe, 0x200, 0x2}, {0x8, 0x7fff, 0x4, 0x8, 0xb, 0xfe}, {0x7, 0x5, 0x8, 0x7f, 0xfa, 0x8}, {0x7, 0x4, 0x2, 0x0, 0x88e, 0x200}, {0x7f, 0x8, 0xd11, 0x6, 0x1, 0x1}, {0x8, 0x285895c5, 0xc, 0x5e, 0x58, 0x101}, {0x1, 0x400000, 0x10, 0x3, 0x2, 0x40}, {0x7, 0x770, 0x9, 0x8, 0xf5b, 0x401}, {0x0, 0x7c700000, 0xfffffffa, 0x7, 0x401, 0x8}, {0x3, 0x2, 0x3, 0x3, 0x10000, 0x7fff}, {0xf, 0x8, 0x2, 0x27, 0x2, 0x40}, {0x2, 0x80000001, 0x1e, 0xfffffff7, 0x0, 0x9}, {0x2, 0x7, 0xf7, 0xd, 0x8001, 0x81}, {0x100000, 0x2, 0xfff, 0x0, 0xf39, 0x2d4}, {0xc, 0x3, 0x84a, 0x5, 0xb7, 0x5ba}, {0x3a8fee8e, 0x983, 0x8, 0xc44, 0x4, 0x2}, {0x1, 0x2, 0x1ff, 0x4, 0x1, 0x80}, {0xb, 0x7, 0x3ff, 0xc, 0x6, 0x6}, {0x2, 0x200, 0x1800000, 0x7, 0xe9a1, 0x7}, {0xfffffb02, 0x0, 0x4, 0x0, 0x1, 0x1}, {0x5, 0xffff04ed, 0x7, 0x7, 0x13a, 0xc}, {0x0, 0xffffff01, 0x3, 0xb, 0x0, 0x9aa9}, {0x6, 0x4, 0x401, 0xffff8000, 0x5, 0x100}, {0x9, 0x8, 0x0, 0x42, 0x7f, 0x4}, {0x7, 0x7fff00, 0x101, 0x7ff, 0x10000, 0x9}, {0x846, 0x52e, 0x5, 0x900000, 0x0, 0x9}, {0x413e, 0x5, 0x4, 0x1, 0x1, 0x2}, {0xfffff2dd, 0x1, 0x5a, 0x4, 0x8, 0x4b92}, {0x7, 0x3, 0x2, 0x5, 0x447, 0xfffffff8}, {0x7b388a4c, 0xfffffffc, 0x3, 0xd31, 0x6, 0xc81}, {0x4, 0x77d4, 0xd14, 0x200, 0x7fffffff, 0x1}, {0x8, 0x6, 0x9, 0x1, 0x4, 0xfff}, {0xffffffff, 0x6, 0xf143928, 0x5, 0x6, 0x8}, {0x81, 0xb07, 0xa, 0x6, 0x0, 0xd}, {0x7168, 0x6, 0x5, 0x1, 0x0, 0x8001}, {0x4, 0x4, 0x8, 0x23, 0x77, 0x5}, {0x308, 0xeeb1, 0xf, 0x9, 0x1}, {0x8, 0x5, 0x4, 0x3, 0x3}, {0xfffffffb, 0x4e7d, 0x80000000, 0x9, 0x8, 0xa97e}, {0x2, 0x0, 0x7fffffff, 0x1, 0x81, 0xb80}, {0x3, 0x3, 0x1, 0xffffffff, 0x0, 0x9}, {0xb, 0xfffffff8, 0x4, 0x2, 0xa, 0x4}, {0xfffffffc, 0x7, 0x9, 0x10000, 0x2, 0x1000000}, {0x0, 0x6, 0x8, 0xab, 0x3, 0xffff}, {0x3, 0x3, 0x4, 0x0, 0x6, 0x9}, {0xf, 0x80, 0x7, 0x9, 0x40, 0x9}, {0xffff, 0x8, 0x6, 0xe, 0xffffffff, 0xfff}, {0x2, 0x1ff, 0x2, 0x10000, 0x1, 0x1}, {0x7fffffff, 0xf5, 0xffffffff, 0x7f, 0x800, 0xfd000000}], [{0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x7}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x8b4eeeead0db8b2f, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x9ebe581e91105dc7, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {0x5, 0x1}, {0x4}, {0x3}, {0x4}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1}, {0x3}, {0x2}, {0x1}, {0x4, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x3aec}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e25, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0x8, 0x81, 0x9, 0x40}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x40004) 0s ago: executing program 33 (id=422): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) kernel console output (not intermixed with test programs): SB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 105.653845][ T5838] dvb-usb: bulk message failed: -22 (3/0) [ 105.755696][ T5838] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 105.781781][ T5838] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 105.811598][ T5977] usb 2-1: Using ep0 maxpacket: 16 [ 105.818199][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.841074][ T5838] usb 4-1: media controller created [ 105.858835][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.881834][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.904038][ T5977] usb 2-1: config 0 has no interfaces? [ 105.919427][ T5977] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.938274][ T5977] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.959381][ T5977] usb 2-1: Manufacturer: syz [ 105.993745][ T5977] usb 2-1: config 0 descriptor?? [ 106.175154][ T5838] dvb-usb: bulk message failed: -22 (6/0) [ 106.215047][ T5838] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 106.285287][ T5838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 106.340980][ T5838] dvb-usb: schedule remote query interval to 150 msecs. [ 106.367103][ T5838] dvb-usb: bulk message failed: -22 (3/0) [ 106.412816][ T5838] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 106.524408][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 106.562432][ T5838] dvb-usb: error while querying for an remote control event. [ 106.832588][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 106.856648][ T5838] dvb-usb: error while querying for an remote control event. [ 106.911153][ T6160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.162703][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 107.169749][ T5838] dvb-usb: error while querying for an remote control event. [ 107.382822][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 107.415560][ T5838] dvb-usb: error while querying for an remote control event. [ 107.627076][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 107.647245][ T5977] usb 4-1: USB disconnect, device number 9 [ 107.658709][ T5838] dvb-usb: error while querying for an remote control event. [ 107.732616][ T5916] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 107.773861][ T6185] sctp: [Deprecated]: syz.0.66 (pid 6185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.773861][ T6185] Use struct sctp_sack_info instead [ 107.802398][ T6168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.991281][ T5977] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 108.014885][ T5916] usb 5-1: device descriptor read/64, error -71 [ 108.312450][ T5916] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 108.393513][ T5977] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 108.472796][ T5916] usb 5-1: device descriptor read/64, error -71 [ 108.532605][ T5977] usb 4-1: device descriptor read/64, error -71 [ 108.584966][ T5916] usb usb5-port1: attempt power cycle [ 108.772762][ T5977] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 108.932653][ T5977] usb 4-1: device descriptor read/64, error -71 [ 108.942632][ T5916] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 108.983255][ T5916] usb 5-1: device descriptor read/8, error -71 [ 109.078105][ T5977] usb usb4-port1: attempt power cycle [ 109.254050][ T5916] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 109.294660][ T5916] usb 5-1: device descriptor read/8, error -71 [ 109.424855][ T5916] usb usb5-port1: unable to enumerate USB device [ 109.432680][ T5977] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 109.482584][ T808] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 109.483206][ T5977] usb 4-1: device descriptor read/8, error -71 [ 109.654700][ T808] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 109.670847][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.699136][ T808] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 109.714103][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.727767][ T808] usb 1-1: Product: syz [ 109.735189][ T808] usb 1-1: Manufacturer: syz [ 109.745252][ T808] usb 1-1: SerialNumber: syz [ 109.752612][ T5977] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 109.769512][ T808] usb 1-1: config 0 descriptor?? [ 109.773869][ T5977] usb 4-1: device descriptor read/8, error -71 [ 109.862590][ T5916] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.884446][ T5977] usb usb4-port1: unable to enumerate USB device [ 109.966237][ T29] usb 2-1: USB disconnect, device number 5 [ 110.031045][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.044681][ T5916] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 110.055549][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.071010][ T5916] usb 3-1: config 0 descriptor?? [ 110.095779][ T5916] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 110.322163][ T808] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 110.351443][ T808] usb 1-1: USB disconnect, device number 7 [ 110.588114][ T808] usb 3-1: USB disconnect, device number 4 [ 110.794886][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 110.818128][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.76'. [ 110.895295][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.917724][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.956978][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.993091][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.234497][ T6221] capability: warning: `syz.0.79' uses deprecated v2 capabilities in a way that may be insecure [ 111.502919][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.548197][ T6224] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 111.554923][ T6224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.597655][ T6224] vhci_hcd vhci_hcd.0: Device attached [ 111.645096][ T6225] vhci_hcd: connection closed [ 111.651801][ T36] vhci_hcd vhci_hcd.1: stop threads [ 111.669041][ T36] vhci_hcd vhci_hcd.1: release socket [ 111.674867][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 111.692578][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 111.701154][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.722605][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.744502][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 111.762892][ T10] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 111.780024][ T10] usb 1-1: Product: syz [ 111.786298][ T10] usb 1-1: Manufacturer: syz [ 111.821847][ T10] hub 1-1:4.0: USB hub found [ 112.001481][ T6235] FAULT_INJECTION: forcing a failure. [ 112.001481][ T6235] name failslab, interval 1, probability 0, space 0, times 0 [ 112.019302][ T6235] CPU: 1 UID: 0 PID: 6235 Comm: syz.4.83 Not tainted syzkaller #0 PREEMPT(full) [ 112.019332][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 112.019343][ T6235] Call Trace: [ 112.019352][ T6235] [ 112.019361][ T6235] dump_stack_lvl+0xe8/0x150 [ 112.019399][ T6235] should_fail_ex+0x412/0x560 [ 112.019434][ T6235] should_failslab+0xa8/0x100 [ 112.019456][ T6235] __kmalloc_node_noprof+0xf0/0x7c0 [ 112.019470][ T6235] ? lock_acquire+0x106/0x350 [ 112.019491][ T6235] ? qdisc_alloc+0x92/0x9e0 [ 112.019523][ T6235] qdisc_alloc+0x92/0x9e0 [ 112.019556][ T6235] qdisc_create+0x12c/0xf20 [ 112.019581][ T6235] ? lockdep_rtnl_is_held+0x26/0x40 [ 112.019596][ T6235] ? qdisc_lookup+0x36d/0x6d0 [ 112.019617][ T6235] tc_modify_qdisc+0x16f0/0x2290 [ 112.019632][ T6235] ? rcu_is_watching+0x15/0xb0 [ 112.019658][ T6235] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 112.019712][ T6235] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 112.019733][ T6235] rtnetlink_rcv_msg+0x77e/0xbe0 [ 112.019757][ T6235] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 112.019772][ T6235] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.019787][ T6235] ? ref_tracker_free+0x693/0x840 [ 112.019800][ T6235] ? __pfx_ref_tracker_free+0x10/0x10 [ 112.019816][ T6235] ? __asan_memcpy+0x40/0x70 [ 112.019835][ T6235] ? __skb_clone+0x63/0x7a0 [ 112.019862][ T6235] netlink_rcv_skb+0x232/0x4b0 [ 112.019890][ T6235] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.019913][ T6235] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.019936][ T6235] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.019952][ T6235] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.019979][ T6235] netlink_unicast+0x75c/0x8e0 [ 112.020015][ T6235] netlink_sendmsg+0x813/0xb40 [ 112.020051][ T6235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.020074][ T6235] ? aa_sock_msg_perm+0xf1/0x1b0 [ 112.020088][ T6235] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.020104][ T6235] ____sys_sendmsg+0x972/0x9f0 [ 112.020126][ T6235] ? __might_fault+0xaf/0x130 [ 112.020154][ T6235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.020192][ T6235] ? import_iovec+0x73/0xa0 [ 112.020216][ T6235] ___sys_sendmsg+0x2a5/0x360 [ 112.020228][ T6235] ? __lock_acquire+0x6b5/0x2cf0 [ 112.020249][ T6235] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.020283][ T6235] ? __fget_files+0x2a/0x420 [ 112.020302][ T6235] ? __fget_files+0x3a0/0x420 [ 112.020333][ T6235] __x64_sys_sendmsg+0x1bd/0x2a0 [ 112.020356][ T6235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.020386][ T6235] ? __pfx_ksys_write+0x10/0x10 [ 112.020418][ T6235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.020437][ T6235] do_syscall_64+0x15f/0xf80 [ 112.020455][ T6235] ? trace_irq_disable+0x3b/0x140 [ 112.020481][ T6235] ? clear_bhb_loop+0x40/0x90 [ 112.020505][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.020523][ T6235] RIP: 0033:0x7f7cc419c819 [ 112.020541][ T6235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.020554][ T6235] RSP: 002b:00007f7cc505e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.020568][ T6235] RAX: ffffffffffffffda RBX: 00007f7cc4415fa0 RCX: 00007f7cc419c819 [ 112.020577][ T6235] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 112.020585][ T6235] RBP: 00007f7cc505e090 R08: 0000000000000000 R09: 0000000000000000 [ 112.020592][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.020599][ T6235] R13: 00007f7cc4416038 R14: 00007f7cc4415fa0 R15: 00007f7cc453fa48 [ 112.020639][ T6235] [ 112.383772][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.393773][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.416284][ T10] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 112.656090][ T5977] usb 1-1: USB disconnect, device number 8 [ 112.990980][ T6245] netlink: 388 bytes leftover after parsing attributes in process `syz.1.85'. [ 113.550486][ T6264] FAULT_INJECTION: forcing a failure. [ 113.550486][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 113.613757][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.0.88 Not tainted syzkaller #0 PREEMPT(full) [ 113.613786][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 113.613794][ T6264] Call Trace: [ 113.613800][ T6264] [ 113.613806][ T6264] dump_stack_lvl+0xe8/0x150 [ 113.613831][ T6264] should_fail_ex+0x412/0x560 [ 113.613854][ T6264] should_failslab+0xa8/0x100 [ 113.613872][ T6264] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 113.613887][ T6264] ? dup_task_struct+0x52/0x840 [ 113.613909][ T6264] dup_task_struct+0x52/0x840 [ 113.613925][ T6264] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.613940][ T6264] copy_process+0x89b/0x4450 [ 113.613976][ T6264] ? __pfx_copy_process+0x10/0x10 [ 113.614003][ T6264] ? mutex_init_lockdep+0xdf/0x110 [ 113.614018][ T6264] vhost_task_create+0x1f9/0x380 [ 113.614032][ T6264] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 113.614047][ T6264] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 113.614061][ T6264] ? __pfx_vhost_task_create+0x10/0x10 [ 113.614080][ T6264] ? __pfx_vhost_task_fn+0x10/0x10 [ 113.614097][ T6264] ? __lock_acquire+0x6b5/0x2cf0 [ 113.614116][ T6264] ? kasan_save_track+0x4f/0x80 [ 113.614129][ T6264] ? kasan_save_track+0x3e/0x80 [ 113.614141][ T6264] ? kasan_save_free_info+0x46/0x50 [ 113.614151][ T6264] ? __kasan_slab_free+0x5c/0x80 [ 113.614164][ T6264] ? kfree+0x1c5/0x640 [ 113.614178][ T6264] kvm_mmu_post_init_vm+0x147/0x2d0 [ 113.614196][ T6264] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 113.614217][ T6264] ? __mutex_trylock_common+0x158/0x260 [ 113.614231][ T6264] ? look_up_lock_class+0x57/0x110 [ 113.614245][ T6264] ? register_lock_class+0x31/0x2e0 [ 113.614262][ T6264] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 113.614279][ T6264] ? __lock_acquire+0x6b5/0x2cf0 [ 113.614298][ T6264] ? __mutex_lock+0x319/0x1550 [ 113.614317][ T6264] ? kasan_quarantine_put+0xbb/0x1f0 [ 113.614338][ T6264] ? do_raw_write_lock+0x11d/0x260 [ 113.614363][ T6264] kvm_vcpu_ioctl+0xa62/0xfd0 [ 113.614381][ T6264] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 113.614393][ T6264] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 113.614420][ T6264] ? __fget_files+0x2a/0x420 [ 113.614434][ T6264] ? __fget_files+0x2a/0x420 [ 113.614445][ T6264] ? __fget_files+0x3a0/0x420 [ 113.614456][ T6264] ? __fget_files+0x2a/0x420 [ 113.614470][ T6264] ? bpf_lsm_file_ioctl+0x9/0x20 [ 113.614486][ T6264] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 113.614500][ T6264] __se_sys_ioctl+0xfc/0x170 [ 113.614517][ T6264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.614532][ T6264] do_syscall_64+0x15f/0xf80 [ 113.614545][ T6264] ? trace_irq_disable+0x3b/0x140 [ 113.614560][ T6264] ? clear_bhb_loop+0x40/0x90 [ 113.614575][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.614586][ T6264] RIP: 0033:0x7f172c39c819 [ 113.614600][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.614610][ T6264] RSP: 002b:00007f172d241028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.614624][ T6264] RAX: ffffffffffffffda RBX: 00007f172c615fa0 RCX: 00007f172c39c819 [ 113.614633][ T6264] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 113.614640][ T6264] RBP: 00007f172d241090 R08: 0000000000000000 R09: 0000000000000000 [ 113.614647][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.614654][ T6264] R13: 00007f172c616038 R14: 00007f172c615fa0 R15: 00007f172c73fa48 [ 113.614673][ T6264] [ 115.750988][ T6283] netlink: 308 bytes leftover after parsing attributes in process `syz.4.94'. [ 115.763169][ T6284] syz.1.95 uses obsolete (PF_INET,SOCK_PACKET) [ 115.831397][ T6283] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 115.865286][ T6280] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.112731][ T5977] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.289507][ T5977] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 116.299090][ T5977] usb 5-1: config 2 has no interface number 0 [ 116.305499][ T5977] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 116.317680][ T5977] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 116.337095][ T5977] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 116.352722][ T808] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 116.358982][ T5977] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 116.374634][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.392394][ T5977] usb 5-1: Product: syz [ 116.401157][ T5977] usb 5-1: Manufacturer: syz [ 116.412592][ T5977] usb 5-1: SerialNumber: syz [ 116.426669][ T6283] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 116.435138][ T6283] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 116.544615][ T808] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 116.560808][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.606745][ T808] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 116.622374][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.635611][ T808] usb 1-1: Product: syz [ 116.640995][ T808] usb 1-1: Manufacturer: syz [ 116.646013][ T808] usb 1-1: SerialNumber: syz [ 116.656670][ T808] usb 1-1: config 0 descriptor?? [ 116.747501][ T5977] usb 5-1: probing VID:PID(0424:012C) [ 116.780472][ T5977] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 116.800469][ T5977] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 116.820358][ T5977] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 116.848324][ T5977] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 116.886561][ T5977] usb 5-1: USB disconnect, device number 7 [ 117.283888][ T808] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 117.309472][ T808] usb 1-1: USB disconnect, device number 9 [ 117.509570][ T6312] FAULT_INJECTION: forcing a failure. [ 117.509570][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 117.536964][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.4.101 Not tainted syzkaller #0 PREEMPT(full) [ 117.536984][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.536991][ T6312] Call Trace: [ 117.536997][ T6312] [ 117.537002][ T6312] dump_stack_lvl+0xe8/0x150 [ 117.537027][ T6312] should_fail_ex+0x412/0x560 [ 117.537050][ T6312] should_failslab+0xa8/0x100 [ 117.537067][ T6312] __kmalloc_cache_noprof+0x88/0x660 [ 117.537081][ T6312] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 117.537101][ T6312] ? sctp_add_bind_addr+0x8c/0x370 [ 117.537128][ T6312] sctp_add_bind_addr+0x8c/0x370 [ 117.537154][ T6312] sctp_copy_local_addr_list+0x314/0x4f0 [ 117.537176][ T6312] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 117.537190][ T6312] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 117.537205][ T6312] ? sctp_v4_is_any+0x35/0x60 [ 117.537219][ T6312] ? sctp_copy_one_addr+0x93/0x360 [ 117.537234][ T6312] sctp_bind_addr_copy+0xb3/0x3c0 [ 117.537247][ T6312] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 117.537268][ T6312] sctp_connect_new_asoc+0x2ff/0x6b0 [ 117.537286][ T6312] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 117.537306][ T6312] ? __local_bh_enable_ip+0xd0/0x130 [ 117.537322][ T6312] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 117.537338][ T6312] ? security_sctp_bind_connect+0x7e/0x2c0 [ 117.537355][ T6312] sctp_sendmsg+0x1528/0x2c10 [ 117.537380][ T6312] ? __pfx_sctp_sendmsg+0x10/0x10 [ 117.537397][ T6312] ? aa_sk_perm+0x6d5/0x900 [ 117.537414][ T6312] ? __might_fault+0xaf/0x130 [ 117.537431][ T6312] ? __pfx_aa_sk_perm+0x10/0x10 [ 117.537449][ T6312] ? sock_rps_record_flow+0x19/0x350 [ 117.537461][ T6312] ? __pfx_inet_sendmsg+0x10/0x10 [ 117.537473][ T6312] ? inet_sendmsg+0x2f4/0x370 [ 117.537485][ T6312] ? __pfx_inet_sendmsg+0x10/0x10 [ 117.537497][ T6312] __sys_sendto+0x5de/0x710 [ 117.537516][ T6312] ? __pfx___sys_sendto+0x10/0x10 [ 117.537534][ T6312] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 117.537556][ T6312] ? __fget_files+0x3a0/0x420 [ 117.537574][ T6312] ? ksys_write+0x242/0x270 [ 117.537590][ T6312] ? __pfx_ksys_write+0x10/0x10 [ 117.537608][ T6312] __x64_sys_sendto+0xde/0x100 [ 117.537625][ T6312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.537639][ T6312] do_syscall_64+0x15f/0xf80 [ 117.537652][ T6312] ? trace_irq_disable+0x3b/0x140 [ 117.537668][ T6312] ? clear_bhb_loop+0x40/0x90 [ 117.537683][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.537694][ T6312] RIP: 0033:0x7f7cc419c819 [ 117.537706][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.537716][ T6312] RSP: 002b:00007f7cc505e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.537731][ T6312] RAX: ffffffffffffffda RBX: 00007f7cc4415fa0 RCX: 00007f7cc419c819 [ 117.537740][ T6312] RDX: 0000000000000009 RSI: 0000200000000000 RDI: 0000000000000003 [ 117.537747][ T6312] RBP: 00007f7cc505e090 R08: 0000200000004ff0 R09: 0000000000000010 [ 117.537755][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.537762][ T6312] R13: 00007f7cc4416038 R14: 00007f7cc4415fa0 R15: 00007f7cc453fa48 [ 117.537787][ T6312] [ 117.865105][ T6314] No such timeout policy "syz0" [ 118.224052][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 118.224071][ T30] audit: type=1326 audit(1776770981.341:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 118.309660][ T30] audit: type=1326 audit(1776770981.421:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 118.377850][ T30] audit: type=1326 audit(1776770981.421:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 118.462025][ T30] audit: type=1326 audit(1776770981.421:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 118.539128][ T30] audit: type=1326 audit(1776770981.431:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 118.611921][ T30] audit: type=1326 audit(1776770981.431:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 118.724778][ T30] audit: type=1326 audit(1776770981.461:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 118.771281][ T30] audit: type=1326 audit(1776770981.461:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 118.827133][ T30] audit: type=1326 audit(1776770981.461:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 118.919213][ T30] audit: type=1326 audit(1776770981.461:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c39c819 code=0x7ffc0000 [ 119.472355][ T6362] FAULT_INJECTION: forcing a failure. [ 119.472355][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.518350][ T6362] CPU: 1 UID: 0 PID: 6362 Comm: syz.3.118 Not tainted syzkaller #0 PREEMPT(full) [ 119.518371][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.518378][ T6362] Call Trace: [ 119.518383][ T6362] [ 119.518389][ T6362] dump_stack_lvl+0xe8/0x150 [ 119.518415][ T6362] should_fail_ex+0x412/0x560 [ 119.518442][ T6362] _copy_from_user+0x2d/0xb0 [ 119.518482][ T6362] ___sys_sendmsg+0x1c6/0x360 [ 119.518494][ T6362] ? __lock_acquire+0x6b5/0x2cf0 [ 119.518518][ T6362] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.518568][ T6362] ? __fget_files+0x2a/0x420 [ 119.518582][ T6362] ? __fget_files+0x3a0/0x420 [ 119.518599][ T6362] __x64_sys_sendmsg+0x1bd/0x2a0 [ 119.518613][ T6362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.518629][ T6362] ? __pfx_ksys_write+0x10/0x10 [ 119.518649][ T6362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.518661][ T6362] do_syscall_64+0x15f/0xf80 [ 119.518675][ T6362] ? trace_irq_disable+0x3b/0x140 [ 119.518690][ T6362] ? clear_bhb_loop+0x40/0x90 [ 119.518705][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.518716][ T6362] RIP: 0033:0x7fb2f899c819 [ 119.518729][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.518739][ T6362] RSP: 002b:00007fb2f97a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.518762][ T6362] RAX: ffffffffffffffda RBX: 00007fb2f8c15fa0 RCX: 00007fb2f899c819 [ 119.518771][ T6362] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 119.518778][ T6362] RBP: 00007fb2f97a0090 R08: 0000000000000000 R09: 0000000000000000 [ 119.518786][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.518793][ T6362] R13: 00007fb2f8c16038 R14: 00007fb2f8c15fa0 R15: 00007fb2f8d3fa48 [ 119.518810][ T6362] [ 119.539283][ T6366] IPv6: sit1: Disabled Multicast RS [ 119.772601][ T5977] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 119.936800][ T5977] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 119.961424][ T5977] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.019117][ T5977] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 120.032623][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.060994][ T5977] usb 3-1: Product: syz [ 120.075732][ T5977] usb 3-1: Manufacturer: syz [ 120.099680][ T5977] usb 3-1: SerialNumber: syz [ 120.138411][ T5977] usb 3-1: config 0 descriptor?? [ 120.660036][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 120.827886][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 120.889841][ T5977] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 120.935003][ T5977] usb 3-1: USB disconnect, device number 5 [ 121.632373][ T6403] ipvlan2: entered promiscuous mode [ 121.948533][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'. [ 122.214244][ T6417] binder: 6410:6417 ioctl c0306201 200000000640 returned -14 [ 122.892668][ T6411] binder: 6410:6411 ioctl c0306201 200000000180 returned -14 [ 123.262778][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.293285][ T5977] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 123.424611][ T29] usb 5-1: config index 0 descriptor too short (expected 65059, got 72) [ 123.440552][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 123.454726][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.470363][ T5977] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 123.481802][ T5977] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.496778][ T29] usb 5-1: Product: syz [ 123.505464][ T29] usb 5-1: Manufacturer: syz [ 123.506507][ T5977] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 123.521289][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.530763][ T29] usb 5-1: SerialNumber: syz [ 123.537110][ T5977] usb 2-1: Product: syz [ 123.544074][ T29] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 123.553846][ T5977] usb 2-1: Manufacturer: syz [ 123.574694][ T5977] usb 2-1: SerialNumber: syz [ 123.588510][ T5977] usb 2-1: config 0 descriptor?? [ 123.598347][ T808] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 123.622720][ T5893] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.783647][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 123.795480][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.808713][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.834915][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.871018][ T5893] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 123.911707][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.952789][ T5893] usb 1-1: config 0 descriptor?? [ 124.147781][ T5977] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 124.179745][ T5977] usb 2-1: USB disconnect, device number 6 [ 124.383358][ T5893] lenovo 0003:17EF:6067.0002: unknown global tag 0xc [ 124.409526][ T5893] lenovo 0003:17EF:6067.0002: item 0 4 1 12 parsing failed [ 124.433474][ T5893] lenovo 0003:17EF:6067.0002: hid_parse failed [ 124.449446][ T5893] lenovo 0003:17EF:6067.0002: probe with driver lenovo failed with error -22 [ 124.608768][ T29] usb 1-1: USB disconnect, device number 10 [ 124.734115][ T808] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 124.764391][ T808] ath9k_htc: Failed to initialize the device [ 124.831680][ T808] usb 5-1: ath9k_htc: USB layer deinitialized [ 124.868721][ T29] usb 5-1: USB disconnect, device number 8 [ 124.912654][ T5935] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.074620][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.086236][ T5935] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 125.105219][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.125743][ T5935] usb 3-1: config 0 descriptor?? [ 125.357978][ T6463] FAULT_INJECTION: forcing a failure. [ 125.357978][ T6463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.385705][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.0.148 Not tainted syzkaller #0 PREEMPT(full) [ 125.385737][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.385748][ T6463] Call Trace: [ 125.385757][ T6463] [ 125.385765][ T6463] dump_stack_lvl+0xe8/0x150 [ 125.385803][ T6463] should_fail_ex+0x412/0x560 [ 125.385839][ T6463] _copy_from_user+0x2d/0xb0 [ 125.385862][ T6463] video_usercopy+0x36f/0x1450 [ 125.385893][ T6463] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 125.385920][ T6463] ? __pfx___video_do_ioctl+0x10/0x10 [ 125.385947][ T6463] ? __pfx_video_usercopy+0x10/0x10 [ 125.385983][ T6463] ? __fget_files+0x2a/0x420 [ 125.386008][ T6463] ? __fget_files+0x2a/0x420 [ 125.386027][ T6463] ? __fget_files+0x3a0/0x420 [ 125.386050][ T6463] v4l2_ioctl+0x18d/0x1e0 [ 125.386074][ T6463] ? __pfx_v4l2_ioctl+0x10/0x10 [ 125.386103][ T6463] __se_sys_ioctl+0xfc/0x170 [ 125.386129][ T6463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.386151][ T6463] do_syscall_64+0x15f/0xf80 [ 125.386174][ T6463] ? trace_irq_disable+0x3b/0x140 [ 125.386200][ T6463] ? clear_bhb_loop+0x40/0x90 [ 125.386223][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.386243][ T6463] RIP: 0033:0x7f172c39c819 [ 125.386263][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.386279][ T6463] RSP: 002b:00007f172d241028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.386302][ T6463] RAX: ffffffffffffffda RBX: 00007f172c615fa0 RCX: 00007f172c39c819 [ 125.386317][ T6463] RDX: 00002000000001c0 RSI: 00000000c0205647 RDI: 000000000000000c [ 125.386330][ T6463] RBP: 00007f172d241090 R08: 0000000000000000 R09: 0000000000000000 [ 125.386342][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.386353][ T6463] R13: 00007f172c616038 R14: 00007f172c615fa0 R15: 00007f172c73fa48 [ 125.386394][ T6463] [ 125.972553][ T5935] usbhid 3-1:0.0: can't add hid device: -71 [ 125.984042][ T5935] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 126.010922][ T5935] usb 3-1: USB disconnect, device number 6 [ 126.683030][ T5935] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 126.779898][ T6484] FAULT_INJECTION: forcing a failure. [ 126.779898][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 126.795126][ T6484] CPU: 0 UID: 0 PID: 6484 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 126.795154][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 126.795166][ T6484] Call Trace: [ 126.795174][ T6484] [ 126.795183][ T6484] dump_stack_lvl+0xe8/0x150 [ 126.795222][ T6484] should_fail_ex+0x412/0x560 [ 126.795257][ T6484] should_failslab+0xa8/0x100 [ 126.795285][ T6484] __kmalloc_cache_noprof+0x88/0x660 [ 126.795311][ T6484] ? nft_last_init+0xaa/0x2f0 [ 126.795350][ T6484] nft_last_init+0xaa/0x2f0 [ 126.795372][ T6484] ? trace_kmalloc+0x2a/0xf0 [ 126.795396][ T6484] ? __pfx_nft_last_init+0x10/0x10 [ 126.795417][ T6484] ? __kmalloc_noprof+0x37d/0x760 [ 126.795441][ T6484] ? nf_tables_newrule+0x152c/0x28b0 [ 126.795461][ T6484] ? __kmalloc_noprof+0x1b8/0x760 [ 126.795489][ T6484] nf_tables_newrule+0x17ac/0x28b0 [ 126.795528][ T6484] ? __pfx_nf_tables_newrule+0x10/0x10 [ 126.795548][ T6484] ? nfnl_pernet+0x23/0x240 [ 126.795574][ T6484] ? nfnl_pernet+0x23/0x240 [ 126.795609][ T6484] ? __nla_parse+0x40/0x60 [ 126.795636][ T6484] nfnetlink_rcv+0x123e/0x27b0 [ 126.795699][ T6484] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 126.795742][ T6484] ? ref_tracker_free+0x693/0x840 [ 126.795793][ T6484] ? __netlink_deliver_tap+0x807/0x850 [ 126.795831][ T6484] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.795858][ T6484] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.795890][ T6484] netlink_unicast+0x75c/0x8e0 [ 126.795922][ T6484] netlink_sendmsg+0x813/0xb40 [ 126.795953][ T6484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.795978][ T6484] ? aa_sock_msg_perm+0xf1/0x1b0 [ 126.795995][ T6484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.796017][ T6484] ____sys_sendmsg+0x972/0x9f0 [ 126.796041][ T6484] ? __might_fault+0xaf/0x130 [ 126.796064][ T6484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.796096][ T6484] ? import_iovec+0x73/0xa0 [ 126.796119][ T6484] ___sys_sendmsg+0x2a5/0x360 [ 126.796133][ T6484] ? __lock_acquire+0x6b5/0x2cf0 [ 126.796161][ T6484] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.796209][ T6484] ? __fget_files+0x2a/0x420 [ 126.796225][ T6484] ? __fget_files+0x3a0/0x420 [ 126.796249][ T6484] __x64_sys_sendmsg+0x1bd/0x2a0 [ 126.796266][ T6484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.796289][ T6484] ? __pfx_ksys_write+0x10/0x10 [ 126.796316][ T6484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.796340][ T6484] do_syscall_64+0x15f/0xf80 [ 126.796359][ T6484] ? trace_irq_disable+0x3b/0x140 [ 126.796380][ T6484] ? clear_bhb_loop+0x40/0x90 [ 126.796399][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.796414][ T6484] RIP: 0033:0x7fc54899c819 [ 126.796430][ T6484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.796443][ T6484] RSP: 002b:00007fc549881028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.796462][ T6484] RAX: ffffffffffffffda RBX: 00007fc548c15fa0 RCX: 00007fc54899c819 [ 126.796473][ T6484] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 126.796483][ T6484] RBP: 00007fc549881090 R08: 0000000000000000 R09: 0000000000000000 [ 126.796492][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.796501][ T6484] R13: 00007fc548c16038 R14: 00007fc548c15fa0 R15: 00007fc548d3fa48 [ 126.796526][ T6484] [ 127.204692][ T5935] usb 1-1: not running at top speed; connect to a high speed hub [ 127.222953][ T5935] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 127.234078][ T5935] usb 1-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.247255][ T5935] usb 1-1: config 1 interface 0 has no altsetting 0 [ 127.280839][ T5977] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 127.295365][ T5935] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 127.305546][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.319074][ T5935] usb 1-1: Product: ⠉ [ 127.323659][ T5935] usb 1-1: Manufacturer: 겂㈊븫嚭鐰ヺ뼙穕誫웓ᜡ㖕圕⑕歹᳗팏蔸澰涣쬂쮃䇶锏눗↢䒚涿꒸샮ꌱ픋艉ޫ瓣椴ᢚ腛哓ヺ㗴ﶅມᇏ憡惘㖬ŭ鯧檫Ԅ튢鮫뵲瑽侫咡뢌볃緮䮸䉼腭 [ 127.346859][ T5935] usb 1-1: SerialNumber: 잳䏴췬䑥鬡窖㢦閭爉끛⬌趂䷶参ꅚ핍酑愜恒毋䝤庐⍘ﺣ吶᢬眷틊ꧠ繅竤֓졢᩠냳䑚럼ⷺ獵ᣥ躇⩶孑踶먢黁布꧜㠕㷩丼荶狲⏨릎퓠쏅麞薆訢먑駃梭裙ӥ귵繊셡键ﮄĥ趜緻ﺃ꼆饲ܨ贫ꅹ蠵﹦⋚障澎饇丮ਗ㲖髄ꋷ䪣廮Ⲝ箨 [ 127.393354][ T6477] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.448707][ T5159] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 127.454630][ T5977] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 127.469329][ T5977] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.486315][ T5977] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 127.513711][ T29] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 127.535001][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.567634][ T5977] usb 5-1: Product: syz [ 127.582140][ T5977] usb 5-1: Manufacturer: syz [ 127.602242][ T5977] usb 5-1: SerialNumber: syz [ 127.626501][ T5977] usb 5-1: config 0 descriptor?? [ 127.691611][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 127.702436][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 127.707216][ T5838] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.726775][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 127.740247][ T29] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 127.750692][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.762106][ T29] usb 4-1: Product: syz [ 127.767663][ T29] usb 4-1: Manufacturer: syz [ 127.772330][ T29] usb 4-1: SerialNumber: syz [ 127.783666][ T29] usb 4-1: config 0 descriptor?? [ 127.789614][ T6494] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 127.797680][ T6494] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 127.837439][ T29] usb 4-1: ucan: probing device on interface #0 [ 127.902819][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 127.911334][ T5838] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.920558][ T5838] usb 2-1: config 0 has no interface number 0 [ 127.936165][ T5838] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.960642][ T5838] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.988250][ T5838] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 128.001010][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.026825][ T5838] usb 2-1: config 0 descriptor?? [ 128.119607][ T29] usb 4-1: ucan: could not read protocol version, ret=0 [ 128.135687][ T29] usb 4-1: ucan: probe failed; try to update the device firmware [ 128.253419][ T5977] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 128.294174][ T5977] usb 5-1: USB disconnect, device number 9 [ 128.339398][ T5893] usb 4-1: USB disconnect, device number 14 [ 128.498700][ T5838] hid_parser_main: 28 callbacks suppressed [ 128.498725][ T5838] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 128.694977][ T5838] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 128.762707][ T5977] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 128.896225][ T5838] ft260 0003:0403:6030.0003: uart interface is not supported [ 128.919272][ T5977] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 128.935141][ T5977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.964953][ T5977] usb 3-1: config 0 has no interface number 0 [ 128.979728][ T5977] usb 3-1: config 0 interface 205 has no altsetting 0 [ 129.013026][ T5977] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 129.034479][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.052633][ T5977] usb 3-1: Product: syz [ 129.060615][ T5977] usb 3-1: Manufacturer: syz [ 129.075542][ T5977] usb 3-1: SerialNumber: syz [ 129.098931][ T5977] usb 3-1: config 0 descriptor?? [ 129.116944][ T5977] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 129.117003][ T5977] dvb-usb: bulk message failed: -22 (3/0) [ 129.124070][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.124494][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.137502][ T10] usb 2-1: USB disconnect, device number 7 [ 129.176066][ T5977] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 129.177503][ T5977] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 129.177611][ T5977] usb 3-1: media controller created [ 129.182141][ T5977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.270353][ T5977] dvb-usb: bulk message failed: -22 (6/0) [ 129.289368][ T5977] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 129.345882][ T5977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 129.378378][ T5977] dvb-usb: schedule remote query interval to 150 msecs. [ 129.385544][ T5893] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 129.397703][ T5977] dvb-usb: bulk message failed: -22 (3/0) [ 129.424562][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.434583][ T5977] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 129.486385][ T5935] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x04B8 pid 0x0202 [ 129.517035][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.525669][ T5893] usb 4-1: device descriptor read/64, error -71 [ 129.553512][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 129.589140][ T5935] usb 1-1: USB disconnect, device number 11 [ 129.611763][ T10] dvb-usb: error while querying for an remote control event. [ 129.641990][ T5935] usblp0: removed [ 129.783781][ T5893] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 129.807317][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 129.814173][ T962] dvb-usb: error while querying for an remote control event. [ 129.955119][ T5893] usb 4-1: device descriptor read/64, error -71 [ 129.982613][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 129.995536][ T5935] dvb-usb: error while querying for an remote control event. [ 130.075273][ T5893] usb usb4-port1: attempt power cycle [ 130.162589][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 130.174439][ T5935] dvb-usb: error while querying for an remote control event. [ 130.342606][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 130.348595][ T5935] dvb-usb: error while querying for an remote control event. [ 130.404781][ T808] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 130.423240][ T5893] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 130.453579][ T5893] usb 4-1: device descriptor read/8, error -71 [ 130.516349][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 130.527286][ T962] dvb-usb: error while querying for an remote control event. [ 130.574974][ T808] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 130.585666][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.601669][ T808] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 130.611015][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.620590][ T808] usb 2-1: Product: syz [ 130.625081][ T808] usb 2-1: Manufacturer: syz [ 130.629716][ T808] usb 2-1: SerialNumber: syz [ 130.639169][ T808] usb 2-1: config 0 descriptor?? [ 130.663079][ T5935] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.693337][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 130.699266][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 130.707067][ T962] dvb-usb: error while querying for an remote control event. [ 130.733901][ T5893] usb 4-1: device descriptor read/8, error -71 [ 130.752612][ T5977] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 130.812556][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 130.825592][ T5935] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 130.835144][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.847673][ T5893] usb usb4-port1: unable to enumerate USB device [ 130.854154][ T5935] usb 5-1: Product: syz [ 130.858629][ T5935] usb 5-1: Manufacturer: syz [ 130.864059][ T5935] usb 5-1: SerialNumber: syz [ 130.872618][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 130.879250][ T5935] usb 5-1: config 0 descriptor?? [ 130.888637][ T962] dvb-usb: error while querying for an remote control event. [ 130.900506][ T5935] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 130.909976][ T5977] usb 1-1: not running at top speed; connect to a high speed hub [ 130.919838][ T5977] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 130.931666][ T5977] usb 1-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.946704][ T5977] usb 1-1: config 1 interface 0 has no altsetting 0 [ 130.957121][ T5977] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 130.967144][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.975506][ T5977] usb 1-1: Product: ⠉ [ 130.979975][ T5977] usb 1-1: Manufacturer: 겂㈊븫嚭鐰ヺ뼙穕誫웓ᜡ㖕圕⑕歹᳗팏蔸澰涣쬂쮃䇶锏눗↢䒚涿꒸샮ꌱ픋艉ޫ瓣椴ᢚ腛哓ヺ㗴ﶅມᇏ憡惘㖬ŭ鯧檫Ԅ튢鮫뵲瑽侫咡뢌볃緮䮸䉼腭 [ 131.004215][ T5977] usb 1-1: SerialNumber: 잳䏴췬䑥鬡窖㢦閭爉끛⬌趂䷶参ꅚ핍酑愜恒毋䝤庐⍘ﺣ吶᢬眷틊ꧠ繅竤֓졢᩠냳䑚럼ⷺ獵ᣥ躇⩶孑踶먢黁布꧜㠕㷩丼荶狲⏨릎퓠쏅麞薆訢먑駃梭裙ӥ귵繊셡键ﮄĥ趜緻ﺃ꼆饲ܨ贫ꅹ蠵﹦⋚障澎饇丮ਗ㲖髄ꋷ䪣廮Ⲝ箨 [ 131.048911][ T6553] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 131.057890][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 131.063994][ T962] dvb-usb: error while querying for an remote control event. [ 131.147663][ T808] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 131.160818][ T808] usb 2-1: USB disconnect, device number 8 [ 131.232652][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 131.239065][ T962] dvb-usb: error while querying for an remote control event. [ 131.311431][ T5935] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 131.320064][ T5935] visor 5-1:0.0: probe with driver visor failed with error -5 [ 131.402711][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 131.410220][ T5935] dvb-usb: error while querying for an remote control event. [ 131.454713][ T5935] usb 3-1: USB disconnect, device number 7 [ 131.525058][ T6551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.529423][ T5935] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 131.571255][ T5838] usb 5-1: USB disconnect, device number 10 [ 132.012665][ T5935] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.185536][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 132.209568][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.235429][ T5935] usb 3-1: config 1 has an invalid interface number: 211 but max is 0 [ 132.254874][ T5935] usb 3-1: config 1 has no interface number 0 [ 132.265708][ T5935] usb 3-1: config 1 interface 211 has no altsetting 0 [ 132.284788][ T5935] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54 [ 132.294696][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.303923][ T5935] usb 3-1: Product: syz [ 132.309443][ T5935] usb 3-1: Manufacturer: syz [ 132.317632][ T5935] usb 3-1: SerialNumber: syz [ 132.932596][ T5838] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.968784][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.978178][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.112544][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 133.125094][ T5838] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 133.138133][ T5838] usb 5-1: config 0 has no interface number 0 [ 133.151382][ T5838] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 133.167229][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.180349][ T5838] usb 5-1: Product: syz [ 133.187562][ T5838] usb 5-1: Manufacturer: syz [ 133.198976][ T5838] usb 5-1: SerialNumber: syz [ 133.214597][ T5838] usb 5-1: config 0 descriptor?? [ 133.564765][ T5977] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x04B8 pid 0x0202 [ 133.624950][ T5977] usb 1-1: USB disconnect, device number 12 [ 133.641622][ T5838] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 133.675725][ T5977] usblp0: removed [ 133.682329][ T5838] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 134.412592][ T5893] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 134.492639][ T808] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 134.576991][ T5935] usb 3-1: USB disconnect, device number 8 [ 134.590685][ T5893] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 134.609138][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 134.618150][ T5893] usb 1-1: Product: syz [ 134.646473][ T5893] usb 1-1: config 0 descriptor?? [ 134.656925][ T5893] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 134.660139][ T808] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 134.667984][ T5893] usb 1-1: Detected FT232H [ 134.685936][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.705135][ T808] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 134.714379][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.723037][ T808] usb 2-1: Product: syz [ 134.727298][ T808] usb 2-1: Manufacturer: syz [ 134.733078][ T808] usb 2-1: SerialNumber: syz [ 134.741506][ T808] usb 2-1: config 0 descriptor?? [ 134.902427][ T6594] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 135.058866][ T5893] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 135.075792][ T5893] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 135.105436][ T5893] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.145298][ T5893] usb 1-1: USB disconnect, device number 13 [ 135.175656][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.207951][ T5893] ftdi_sio 1-1:0.0: device disconnected [ 135.308421][ T808] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 135.336238][ T808] usb 2-1: USB disconnect, device number 9 [ 135.706169][ T6598] bridge_slave_0: left allmulticast mode [ 135.713175][ T6598] bridge_slave_0: left promiscuous mode [ 135.727921][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.753119][ T5838] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 135.754504][ T6599] FAULT_INJECTION: forcing a failure. [ 135.754504][ T6599] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 135.800511][ T6599] CPU: 0 UID: 0 PID: 6599 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT(full) [ 135.800541][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.800552][ T6599] Call Trace: [ 135.800561][ T6599] [ 135.800569][ T6599] dump_stack_lvl+0xe8/0x150 [ 135.800607][ T6599] should_fail_ex+0x412/0x560 [ 135.800650][ T6599] prepare_alloc_pages+0x22a/0x650 [ 135.800685][ T6599] __alloc_frozen_pages_noprof+0x12f/0x380 [ 135.800717][ T6599] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.800758][ T6599] ? __pfx_policy_nodemask+0x10/0x10 [ 135.800790][ T6599] ? dst_release+0x72/0x1b0 [ 135.800815][ T6599] alloc_pages_mpol+0x235/0x490 [ 135.800848][ T6599] folio_alloc_mpol_noprof+0x39/0x160 [ 135.800878][ T6599] vma_alloc_folio_noprof+0xe1/0x1e0 [ 135.800908][ T6599] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 135.800948][ T6599] do_wp_page+0x118a/0x4cc0 [ 135.800975][ T6599] ? __pte_offset_map+0x29/0x240 [ 135.801007][ T6599] ? __pfx_do_wp_page+0x10/0x10 [ 135.801024][ T6599] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.801052][ T6599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 135.801089][ T6599] handle_mm_fault+0x151d/0x3170 [ 135.801126][ T6599] ? handle_mm_fault+0xee/0x3170 [ 135.801155][ T6599] ? __pfx_handle_mm_fault+0x10/0x10 [ 135.801191][ T6599] ? __lock_acquire+0x6b5/0x2cf0 [ 135.801225][ T6599] ? lock_mm_and_find_vma+0xa7/0x340 [ 135.801261][ T6599] do_user_addr_fault+0x75b/0x1340 [ 135.801309][ T6599] exc_page_fault+0x6a/0xc0 [ 135.801333][ T6599] asm_exc_page_fault+0x26/0x30 [ 135.801353][ T6599] RIP: 0010:__put_user_4+0xd/0x20 [ 135.801376][ T6599] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 135.801393][ T6599] RSP: 0018:ffffc90005edfc98 EFLAGS: 00050202 [ 135.801413][ T6599] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000008038 [ 135.801426][ T6599] RDX: 0000000000000000 RSI: ffffffff8e24d37a RDI: ffffffff8c289ce0 [ 135.801439][ T6599] RBP: ffffc90005edfeb0 R08: ffffffff82188cbf R09: ffff888034e38f78 [ 135.801453][ T6599] R10: 00000000ffffff97 R11: 0000000000000000 R12: 1ffff92000bdbf9c [ 135.801464][ T6599] R13: 0000000000040000 R14: 0000200000008000 R15: 00000000000003ff [ 135.801485][ T6599] ? __might_fault+0xaf/0x130 [ 135.801514][ T6599] __sys_sendmmsg+0x2b0/0x4e0 [ 135.801546][ T6599] ? __pfx___sys_sendmmsg+0x10/0x10 [ 135.801563][ T6599] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 135.801615][ T6599] ? ksys_write+0x242/0x270 [ 135.801642][ T6599] ? __pfx_ksys_write+0x10/0x10 [ 135.801674][ T6599] __x64_sys_sendmmsg+0xa0/0xc0 [ 135.801694][ T6599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.801715][ T6599] do_syscall_64+0x15f/0xf80 [ 135.801736][ T6599] ? trace_irq_disable+0x3b/0x140 [ 135.801762][ T6599] ? clear_bhb_loop+0x40/0x90 [ 135.801787][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.801805][ T6599] RIP: 0033:0x7f172c39c819 [ 135.801822][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.801835][ T6599] RSP: 002b:00007f172d220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 135.801850][ T6599] RAX: ffffffffffffffda RBX: 00007f172c616090 RCX: 00007f172c39c819 [ 135.801861][ T6599] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000008 [ 135.801871][ T6599] RBP: 00007f172d220090 R08: 0000000000000000 R09: 0000000000000000 [ 135.801881][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.801890][ T6599] R13: 00007f172c616128 R14: 00007f172c616090 R15: 00007f172c73fa48 [ 135.801915][ T6599] [ 135.803616][ T5838] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 136.190243][ T6598] bridge_slave_1: left allmulticast mode [ 136.200075][ T5838] usb 5-1: USB disconnect, device number 11 [ 136.215251][ T6598] bridge_slave_1: left promiscuous mode [ 136.233547][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.251685][ T6598] bond0: (slave bond_slave_0): Releasing backup interface [ 136.274661][ T6598] bond0: (slave bond_slave_1): Releasing backup interface [ 136.337012][ T6598] team0: Port device team_slave_0 removed [ 136.380260][ T6598] team0: Port device team_slave_1 removed [ 136.393381][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.403830][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.416259][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.425763][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.443145][ T6603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 136.454886][ T6598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.510129][ T6603] bridge1: entered promiscuous mode [ 136.534811][ T6603] bridge1: entered allmulticast mode [ 136.549406][ T6603] team0: Port device bridge1 added [ 136.569806][ T6604] bridge0: port 3(team0) entered blocking state [ 136.584071][ T6604] bridge0: port 3(team0) entered disabled state [ 136.614982][ T6604] team0: entered allmulticast mode [ 136.622888][ T6604] team_slave_0: entered allmulticast mode [ 136.637085][ T6604] team_slave_1: entered allmulticast mode [ 136.662115][ T6604] team0: entered promiscuous mode [ 136.667829][ T6604] team_slave_0: entered promiscuous mode [ 136.677119][ T6604] team_slave_1: entered promiscuous mode [ 136.693737][ T6604] bridge0: port 3(team0) entered blocking state [ 136.701163][ T6604] bridge0: port 3(team0) entered forwarding state [ 137.017767][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 137.028477][ T29] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 137.110107][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 137.130657][ T6619] bond1: entered promiscuous mode [ 137.135941][ T6619] bond1: entered allmulticast mode [ 137.141386][ T6619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.155842][ T6623] macsec1: entered promiscuous mode [ 137.161234][ T6623] macsec1: entered allmulticast mode [ 137.168096][ T6623] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 137.212196][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 137.224550][ T29] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 137.240011][ T29] usb 3-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.265187][ T29] usb 3-1: config 1 interface 0 has no altsetting 0 [ 137.279741][ T29] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 137.309147][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.337397][ T29] usb 3-1: Product: ⠉ [ 137.350093][ T29] usb 3-1: Manufacturer: 겂㈊븫嚭鐰ヺ뼙穕誫웓ᜡ㖕圕⑕歹᳗팏蔸澰涣쬂쮃䇶锏눗↢䒚涿꒸샮ꌱ픋艉ޫ瓣椴ᢚ腛哓ヺ㗴ﶅມᇏ憡惘㖬ŭ鯧檫Ԅ튢鮫뵲瑽侫咡뢌볃緮䮸䉼腭 [ 137.403944][ T29] usb 3-1: SerialNumber: 잳䏴췬䑥鬡窖㢦閭爉끛⬌趂䷶参ꅚ핍酑愜恒毋䝤庐⍘ﺣ吶᢬眷틊ꧠ繅竤֓졢᩠냳䑚럼ⷺ獵ᣥ躇⩶孑踶먢黁布꧜㠕㷩丼荶狲⏨릎퓠쏅麞薆訢먑駃梭裙ӥ귵繊셡键ﮄĥ趜緻ﺃ꼆饲ܨ贫ꅹ蠵﹦⋚障澎饇丮ਗ㲖髄ꋷ䪣廮Ⲝ箨 [ 137.463502][ T6611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.571858][ T6635] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.642571][ T962] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 137.814834][ T962] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 137.832024][ T962] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.872821][ T962] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 137.892193][ T962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.929911][ T962] usb 5-1: Product: syz [ 137.939274][ T962] usb 5-1: Manufacturer: syz [ 137.950255][ T962] usb 5-1: SerialNumber: syz [ 137.971159][ T962] usb 5-1: config 0 descriptor?? [ 138.581869][ T962] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 138.614747][ T962] usb 5-1: USB disconnect, device number 12 [ 139.289061][ T6644] FAULT_INJECTION: forcing a failure. [ 139.289061][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 139.302668][ T6644] CPU: 0 UID: 0 PID: 6644 Comm: syz.4.207 Not tainted syzkaller #0 PREEMPT(full) [ 139.302696][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 139.302707][ T6644] Call Trace: [ 139.302715][ T6644] [ 139.302723][ T6644] dump_stack_lvl+0xe8/0x150 [ 139.302759][ T6644] should_fail_ex+0x412/0x560 [ 139.302795][ T6644] should_failslab+0xa8/0x100 [ 139.302823][ T6644] ? skb_clone+0x212/0x3a0 [ 139.302843][ T6644] kmem_cache_alloc_noprof+0x87/0x650 [ 139.302867][ T6644] ? __netlink_lookup+0xc6/0x8b0 [ 139.302902][ T6644] skb_clone+0x212/0x3a0 [ 139.302926][ T6644] __netlink_deliver_tap+0x404/0x850 [ 139.302968][ T6644] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.302997][ T6644] netlink_deliver_tap+0x19c/0x1b0 [ 139.303026][ T6644] netlink_unicast+0x730/0x8e0 [ 139.303064][ T6644] netlink_sendmsg+0x813/0xb40 [ 139.303102][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.303135][ T6644] ? aa_sock_msg_perm+0xf1/0x1b0 [ 139.303156][ T6644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.303182][ T6644] ____sys_sendmsg+0x972/0x9f0 [ 139.303213][ T6644] ? __might_fault+0xaf/0x130 [ 139.303242][ T6644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.303282][ T6644] ? import_iovec+0x73/0xa0 [ 139.303308][ T6644] ___sys_sendmsg+0x2a5/0x360 [ 139.303326][ T6644] ? __lock_acquire+0x6b5/0x2cf0 [ 139.303360][ T6644] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.303431][ T6644] ? __fget_files+0x2a/0x420 [ 139.303451][ T6644] ? __fget_files+0x3a0/0x420 [ 139.303482][ T6644] __x64_sys_sendmsg+0x1bd/0x2a0 [ 139.303506][ T6644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.303536][ T6644] ? __pfx_ksys_write+0x10/0x10 [ 139.303570][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.303591][ T6644] do_syscall_64+0x15f/0xf80 [ 139.303613][ T6644] ? trace_irq_disable+0x3b/0x140 [ 139.303639][ T6644] ? clear_bhb_loop+0x40/0x90 [ 139.303665][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.303684][ T6644] RIP: 0033:0x7f7cc419c819 [ 139.303704][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.303719][ T6644] RSP: 002b:00007f7cc505e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.303740][ T6644] RAX: ffffffffffffffda RBX: 00007f7cc4415fa0 RCX: 00007f7cc419c819 [ 139.303755][ T6644] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 139.303767][ T6644] RBP: 00007f7cc505e090 R08: 0000000000000000 R09: 0000000000000000 [ 139.303779][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.303791][ T6644] R13: 00007f7cc4416038 R14: 00007f7cc4415fa0 R15: 00007f7cc453fa48 [ 139.303824][ T6644] [ 139.799004][ T29] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x04B8 pid 0x0202 [ 139.862069][ T29] usb 3-1: USB disconnect, device number 9 [ 139.918781][ T29] usblp0: removed [ 140.550331][ T5935] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 140.584193][ T5935] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.633840][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.814233][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 140.841532][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.860385][ T29] usb 5-1: config 0 has no interface number 0 [ 140.880456][ T29] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 140.900061][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.919919][ T29] usb 5-1: Product: syz [ 140.926146][ T29] usb 5-1: Manufacturer: syz [ 140.939297][ T29] usb 5-1: SerialNumber: syz [ 140.961589][ T29] usb 5-1: config 0 descriptor?? [ 140.992972][ T29] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 141.012017][ T29] usb 5-1: selecting invalid altsetting 1 [ 141.028493][ T29] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 141.044455][ T5935] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 141.047849][ T29] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.089844][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 141.110781][ T29] usb 5-1: media controller created [ 141.116058][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 141.163762][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.247596][ T5935] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 141.248461][ T29] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 141.295909][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.297560][ T29] zl10353_read_register: readreg error (reg=127, ret==-71) [ 141.348486][ T29] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 141.351889][ T5935] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 141.375279][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.398798][ T5935] usb 4-1: Product: syz [ 141.408778][ T5935] usb 4-1: Manufacturer: syz [ 141.419837][ T5935] usb 4-1: SerialNumber: syz [ 141.445649][ T5935] usb 4-1: config 0 descriptor?? [ 141.555447][ T29] usb 5-1: USB disconnect, device number 13 [ 141.960214][ T5935] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 142.019230][ T5935] usb 4-1: USB disconnect, device number 19 [ 142.462725][ T5893] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 142.627995][ T5893] usb 1-1: not running at top speed; connect to a high speed hub [ 142.656178][ T5893] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 142.690060][ T5893] usb 1-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.731649][ T5893] usb 1-1: config 1 interface 0 has no altsetting 0 [ 142.739714][ T5935] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 142.764135][ T5893] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 142.777325][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.800139][ T5893] usb 1-1: Product: ⠉ [ 142.810670][ T5893] usb 1-1: Manufacturer: 겂㈊븫嚭鐰ヺ뼙穕誫웓ᜡ㖕圕⑕歹᳗팏蔸澰涣쬂쮃䇶锏눗↢䒚涿꒸샮ꌱ픋艉ޫ瓣椴ᢚ腛哓ヺ㗴ﶅມᇏ憡惘㖬ŭ鯧檫Ԅ튢鮫뵲瑽侫咡뢌볃緮䮸䉼腭 [ 142.869208][ T5893] usb 1-1: SerialNumber: 잳䏴췬䑥鬡窖㢦閭爉끛⬌趂䷶参ꅚ핍酑愜恒毋䝤庐⍘ﺣ吶᢬眷틊ꧠ繅竤֓졢᩠냳䑚럼ⷺ獵ᣥ躇⩶孑踶먢黁布꧜㠕㷩丼荶狲⏨릎퓠쏅麞薆訢먑駃梭裙ӥ귵繊셡键ﮄĥ趜緻ﺃ꼆饲ܨ贫ꅹ蠵﹦⋚障澎饇丮ਗ㲖髄ꋷ䪣廮Ⲝ箨 [ 142.932563][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 142.942248][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.956658][ T5935] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 142.979943][ T6686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.000880][ T5935] usb 3-1: New USB device found, idVendor=0df6, idProduct=003d, bcdDevice=65.d5 [ 143.011967][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.042821][ T5935] usb 3-1: Product: syz [ 143.060098][ T5935] usb 3-1: SerialNumber: syz [ 143.083427][ T5935] usb 3-1: config 0 descriptor?? [ 143.282585][ T5916] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 143.372656][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.433220][ T5916] usb 4-1: device descriptor read/64, error -71 [ 143.442839][ T5935] usb 3-1: USB disconnect, device number 10 [ 143.553030][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 143.593490][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.612576][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.632528][ T29] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 143.656572][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.676706][ T29] usb 2-1: config 0 descriptor?? [ 143.692640][ T5916] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 143.843298][ T5916] usb 4-1: device descriptor read/64, error -71 [ 143.953425][ T5916] usb usb4-port1: attempt power cycle [ 144.308457][ T29] usb 2-1: string descriptor 0 read error: -71 [ 144.316530][ T5916] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 144.333299][ T29] uclogic 0003:5543:0047.0005: failed retrieving string descriptor #200: -71 [ 144.344649][ T29] uclogic 0003:5543:0047.0005: failed retrieving pen parameters: -71 [ 144.353311][ T29] uclogic 0003:5543:0047.0005: failed probing pen v2 parameters: -71 [ 144.369560][ T29] uclogic 0003:5543:0047.0005: failed probing parameters: -71 [ 144.378856][ T5916] usb 4-1: device descriptor read/8, error -71 [ 144.399600][ T29] uclogic 0003:5543:0047.0005: probe with driver uclogic failed with error -71 [ 144.432296][ T29] usb 2-1: USB disconnect, device number 10 [ 144.623649][ T5916] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 144.655255][ T5916] usb 4-1: device descriptor read/8, error -71 [ 144.774727][ T5916] usb usb4-port1: unable to enumerate USB device [ 145.045639][ T6716] ======================================================= [ 145.045639][ T6716] WARNING: The mand mount option has been deprecated and [ 145.045639][ T6716] and is ignored by this kernel. Remove the mand [ 145.045639][ T6716] option from the mount to silence this warning. [ 145.045639][ T6716] ======================================================= [ 145.270218][ T5893] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x04B8 pid 0x0202 [ 145.296655][ T5893] usb 1-1: USB disconnect, device number 14 [ 145.366816][ T5893] usblp0: removed [ 145.692650][ T29] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 145.859392][ T6725] netlink: 104 bytes leftover after parsing attributes in process `syz.4.233'. [ 145.875916][ T29] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 145.887048][ T29] usb 2-1: config 0 has no interface number 0 [ 145.902624][ T29] usb 2-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 145.926005][ T29] usb 2-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 145.950897][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.971726][ T29] usb 2-1: Product: syz [ 146.007820][ T29] usb 2-1: Manufacturer: syz [ 146.026188][ T29] usb 2-1: SerialNumber: syz [ 146.062196][ T29] usb 2-1: config 0 descriptor?? [ 146.085403][ T6721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.108887][ T6721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.181039][ T29] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.239708][ T6731] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 146.249469][ T6735] netlink: 'syz.4.238': attribute type 16 has an invalid length. [ 146.259552][ T6735] netlink: 'syz.4.238': attribute type 2 has an invalid length. [ 146.265024][ T6731] syzkaller0: linktype set to 773 [ 146.280544][ T6735] netlink: 64102 bytes leftover after parsing attributes in process `syz.4.238'. [ 146.523374][ T29] usb 2-1: USB disconnect, device number 11 [ 146.579648][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 146.618973][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.672538][ T5893] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 146.775169][ T5935] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 146.844345][ T5893] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 146.856995][ T5893] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 146.866383][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.874487][ T5893] usb 1-1: Product: syz [ 146.878665][ T5893] usb 1-1: Manufacturer: syz [ 146.883599][ T5893] usb 1-1: SerialNumber: syz [ 146.895440][ T5893] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 146.935508][ T5935] usb 3-1: not running at top speed; connect to a high speed hub [ 146.948059][ T5935] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 146.959756][ T5935] usb 3-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.974706][ T5935] usb 3-1: config 1 interface 0 has no altsetting 0 [ 146.985361][ T5935] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 146.995233][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.009188][ T5935] usb 3-1: Product: ⠉ [ 147.015071][ T5935] usb 3-1: Manufacturer: 겂㈊븫嚭鐰ヺ뼙穕誫웓ᜡ㖕圕⑕歹᳗팏蔸澰涣쬂쮃䇶锏눗↢䒚涿꒸샮ꌱ픋艉ޫ瓣椴ᢚ腛哓ヺ㗴ﶅມᇏ憡惘㖬ŭ鯧檫Ԅ튢鮫뵲瑽侫咡뢌볃緮䮸䉼腭 [ 147.041289][ T5935] usb 3-1: SerialNumber: 잳䏴췬䑥鬡窖㢦閭爉끛⬌趂䷶参ꅚ핍酑愜恒毋䝤庐⍘ﺣ吶᢬眷틊ꧠ繅竤֓졢᩠냳䑚럼ⷺ獵ᣥ躇⩶孑踶먢黁布꧜㠕㷩丼荶狲⏨릎퓠쏅麞薆訢먑駃梭裙ӥ귵繊셡键ﮄĥ趜緻ﺃ꼆饲ܨ贫ꅹ蠵﹦⋚障澎饇丮ਗ㲖髄ꋷ䪣廮Ⲝ箨 [ 147.078473][ T6745] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 147.256947][ T5907] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 147.297861][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.298458][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.304838][ T6741] loop2: detected capacity change from 0 to 7 [ 147.309494][ T6741] Dev loop2: unable to read RDB block 7 [ 147.309561][ T6741] loop2: unable to read partition table [ 147.309777][ T6741] loop2: partition table beyond EOD, truncated [ 147.309820][ T6741] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 147.320137][ T5893] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.320699][ T5893] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 147.320773][ T5893] usb 1-1: media controller created [ 147.351449][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.449947][ T5907] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 147.449983][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 147.450005][ T5907] usb 2-1: Product: syz [ 147.454944][ T5907] usb 2-1: config 0 descriptor?? [ 147.458244][ T5907] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 147.459667][ T5907] usb 2-1: Detected FT232H [ 147.557711][ T5893] usb 1-1: USB disconnect, device number 15 [ 147.865568][ T5907] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 147.880517][ T5907] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 147.907553][ T5907] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 147.923357][ T5907] usb 2-1: USB disconnect, device number 12 [ 147.936840][ T5907] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 147.950931][ T5907] ftdi_sio 2-1:0.0: device disconnected [ 148.292678][ T5893] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 148.457774][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.486314][ T5893] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 148.501188][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.516160][ T5893] usb 5-1: config 0 descriptor?? [ 148.549465][ T5893] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 148.804134][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.813691][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.832960][ T962] usb 5-1: USB disconnect, device number 14 [ 148.922606][ T5893] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 149.092660][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 149.099843][ T5893] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 149.111330][ T5893] usb 1-1: config 1 interface 0 has no altsetting 0 [ 149.120608][ T5893] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b23, bcdDevice= 0.40 [ 149.131141][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.141093][ T5893] usb 1-1: Product: syz [ 149.145367][ T5893] usb 1-1: Manufacturer: ⏞ [ 149.150022][ T5893] usb 1-1: SerialNumber: syz [ 149.363010][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.375814][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.545316][ T5935] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x04B8 pid 0x0202 [ 149.585347][ T5935] usb 3-1: USB disconnect, device number 11 [ 149.606975][ T5935] usblp0: removed [ 149.846567][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 149.862551][ T5838] IPVS: starting estimator thread 0... [ 149.952972][ T6799] IPVS: using max 25 ests per chain, 60000 per kthread [ 150.022602][ T29] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 150.132426][ T5893] usbhid 1-1:1.0: can't add hid device: -71 [ 150.171825][ T5893] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 150.199720][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.238415][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.276902][ T5893] usb 1-1: USB disconnect, device number 16 [ 150.386917][ T29] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 150.419435][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.465693][ T29] usb 2-1: config 0 descriptor?? [ 150.722758][ T962] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 150.825129][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 150.884596][ T962] usb 5-1: Using ep0 maxpacket: 32 [ 150.895574][ T962] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 150.928255][ T962] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 150.969542][ T962] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.026969][ T962] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 151.077366][ T962] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 151.096927][ T962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.131525][ T962] usb 5-1: Product: syz [ 151.146845][ T962] usb 5-1: Manufacturer: syz [ 151.162336][ T962] usb 5-1: SerialNumber: syz [ 151.243581][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 151.346214][ T962] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input9 [ 151.455639][ T962] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 151.470615][ T962] (id 0x00) [ 151.602768][ T962] rc_core: IR keymap rc-imon-pad not found [ 151.634471][ T962] Registered IR keymap rc-empty [ 151.653815][ T962] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 151.673994][ T962] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 151.686766][ T962] imon:send_packet: packet tx failed (-71) [ 151.713916][ T962] imon 5-1:155.0: remote input dev register failed [ 151.734334][ T962] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 151.862230][ T962] imon 5-1:155.0: unable to initialize intf0, err 0 [ 151.877058][ T962] imon:imon_probe: failed to initialize context! [ 151.898947][ T962] imon 5-1:155.0: unable to register, err -19 [ 151.927377][ T962] usb 5-1: USB disconnect, device number 15 [ 151.951967][ T6821] fuse: Bad value for 'fd' [ 152.315676][ T6822] ipip0: entered promiscuous mode [ 152.331205][ T6822] ipip0: entered allmulticast mode [ 152.608368][ T962] IPVS: starting estimator thread 0... [ 152.702616][ T6835] IPVS: using max 47 ests per chain, 112800 per kthread [ 152.824785][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 152.832589][ T5907] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 152.848199][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 152.865453][ T29] usb 2-1: USB disconnect, device number 13 [ 153.007395][ T5907] usb 4-1: not running at top speed; connect to a high speed hub [ 153.026204][ T5907] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 153.047118][ T5907] usb 4-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.078347][ T5907] usb 4-1: config 1 interface 0 has no altsetting 0 [ 153.106858][ T5907] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 153.187456][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.224907][ T5907] usb 4-1: Product: ⠉ [ 153.254306][ T5907] usb 4-1: Manufacturer: 겂㈊븫嚭鐰ヺ뼙穕誫웓ᜡ㖕圕⑕歹᳗팏蔸澰涣쬂쮃䇶锏눗↢䒚涿꒸샮ꌱ픋艉ޫ瓣椴ᢚ腛哓ヺ㗴ﶅມᇏ憡惘㖬ŭ鯧檫Ԅ튢鮫뵲瑽侫咡뢌볃緮䮸䉼腭 [ 153.344290][ T5907] usb 4-1: SerialNumber: 잳䏴췬䑥鬡窖㢦閭爉끛⬌趂䷶参ꅚ핍酑愜恒毋䝤庐⍘ﺣ吶᢬眷틊ꧠ繅竤֓졢᩠냳䑚럼ⷺ獵ᣥ躇⩶孑踶먢黁布꧜㠕㷩丼荶狲⏨릎퓠쏅麞薆訢먑駃梭裙ӥ귵繊셡键ﮄĥ趜緻ﺃ꼆饲ܨ贫ꅹ蠵﹦⋚障澎饇丮ਗ㲖髄ꋷ䪣廮Ⲝ箨 [ 153.500733][ T6834] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.512586][ T962] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 153.898028][ T962] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.911670][ T962] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.922306][ T962] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.948887][ T962] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 153.970672][ T962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.990908][ T962] usb 2-1: Product: syz [ 154.003092][ T962] usb 2-1: Manufacturer: syz [ 154.017230][ T962] usb 2-1: SerialNumber: syz [ 154.028699][ T6844] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 154.050165][ T962] usb 2-1: 0:1 : does not exist [ 154.056560][ T962] usb 2-1: unit 86 not found! [ 154.773873][ T6855] netlink: 'syz.0.272': attribute type 21 has an invalid length. [ 154.792019][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 155.137545][ T962] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.279350][ T6864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.274'. [ 155.391732][ T6865] binder: 6861:6865 ioctl c0306201 200000000280 returned -14 [ 155.429068][ T962] usb 3-1: Using ep0 maxpacket: 32 [ 155.511921][ T962] usb 3-1: config 0 has no interfaces? [ 155.652740][ T962] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 155.709643][ T962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.760583][ T962] usb 3-1: Product: syz [ 155.778886][ T962] usb 3-1: Manufacturer: syz [ 155.806018][ T962] usb 3-1: SerialNumber: syz [ 155.812908][ T5907] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 255 proto 1 vid 0x04B8 pid 0x0202 [ 155.979049][ T962] usb 3-1: config 0 descriptor?? [ 156.058540][ T5907] usb 4-1: USB disconnect, device number 24 [ 156.250486][ T5907] usblp0: removed [ 156.448626][ T6874] netlink: 'syz.3.277': attribute type 21 has an invalid length. [ 156.583586][ T5907] usb 2-1: USB disconnect, device number 14 [ 156.668851][ T6874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.277'. [ 156.797939][ T962] usb 3-1: USB disconnect, device number 12 [ 157.302551][ T962] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 157.402539][ T5935] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 157.477647][ T962] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 157.492565][ T962] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 157.507587][ T962] usb 3-1: Product: syz [ 157.516237][ T962] usb 3-1: SerialNumber: syz [ 157.529796][ T962] usb 3-1: config 0 descriptor?? [ 157.585809][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.622776][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.652733][ T5935] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 157.674850][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.710090][ T6893] input: syz0 as /devices/virtual/input/input11 [ 157.711793][ T5935] usb 1-1: config 0 descriptor?? [ 157.990865][ T5907] usb 3-1: USB disconnect, device number 13 [ 158.358253][ T5935] usbhid 1-1:0.0: can't add hid device: -32 [ 158.388417][ T5935] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 158.422219][ T5935] usb 1-1: USB disconnect, device number 17 [ 158.742573][ T5907] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 158.843239][ T6896] netlink: 52 bytes leftover after parsing attributes in process `syz.3.284'. [ 158.902585][ T5935] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 158.907293][ T5907] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 158.932624][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 158.952577][ T5907] usb 2-1: Product: syz [ 158.961276][ T5907] usb 2-1: config 0 descriptor?? [ 158.984705][ T5907] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 159.009251][ T5907] usb 2-1: Detected FT232H [ 159.051960][ T6906] mmap: syz.3.288 (6906): VmData 41570304 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 159.074661][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.095951][ T5935] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 238, changing to 7 [ 159.119632][ T5935] usb 3-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 159.155555][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.185394][ T5935] usb 3-1: Product: syz [ 159.189618][ T5935] usb 3-1: Manufacturer: syz [ 159.197647][ T5935] usb 3-1: SerialNumber: syz [ 159.316194][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 159.386854][ T6911] ipvlan2: entered allmulticast mode [ 159.393088][ T6911] syz_tun: entered allmulticast mode [ 159.400845][ T5907] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 159.417732][ T5907] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 159.430707][ T5907] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 159.450545][ T5907] usb 2-1: USB disconnect, device number 15 [ 159.535759][ T5907] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 159.558461][ T5907] ftdi_sio 2-1:0.0: device disconnected [ 159.594649][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 159.620545][ T6916] ipvlan2: entered allmulticast mode [ 159.630358][ T6916] syz_tun: entered allmulticast mode [ 159.725559][ T6919] netlink: 'syz.4.291': attribute type 17 has an invalid length. [ 159.733827][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 159.745302][ T5935] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.788387][ T5935] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 159.917778][ T5935] usb 3-1: USB disconnect, device number 14 [ 160.292596][ T5907] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 160.386002][ T5159] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 160.631735][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.666448][ T5907] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 160.676937][ T5907] usb 2-1: can't read configurations, error -71 [ 161.131862][ T6938] xt_CT: No such helper "snmp_trap" [ 161.488688][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 162.364290][ T6963] FAULT_INJECTION: forcing a failure. [ 162.364290][ T6963] name failslab, interval 1, probability 0, space 0, times 0 [ 162.414220][ T6963] CPU: 1 UID: 0 PID: 6963 Comm: syz.4.304 Not tainted syzkaller #0 PREEMPT(full) [ 162.414253][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.414265][ T6963] Call Trace: [ 162.414274][ T6963] [ 162.414283][ T6963] dump_stack_lvl+0xe8/0x150 [ 162.414322][ T6963] should_fail_ex+0x412/0x560 [ 162.414364][ T6963] should_failslab+0xa8/0x100 [ 162.414393][ T6963] __kmalloc_noprof+0xe8/0x760 [ 162.414418][ T6963] ? snd_pcm_hw_refine+0x9b1/0x1710 [ 162.414446][ T6963] snd_pcm_hw_refine+0x9b1/0x1710 [ 162.414484][ T6963] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 162.414524][ T6963] ? snd_pcm_hw_param_near+0x365/0x4d0 [ 162.414553][ T6963] ? __lock_acquire+0x6b5/0x2cf0 [ 162.414602][ T6963] snd_pcm_hw_param_first+0x3bf/0xb40 [ 162.414632][ T6963] ? trace_hw_mask_param+0x8a/0x200 [ 162.414655][ T6963] ? snd_pcm_hw_params+0x5d0/0x1ce0 [ 162.414680][ T6963] snd_pcm_hw_params+0x56f/0x1ce0 [ 162.414710][ T6963] ? do_raw_spin_unlock+0xf5/0x210 [ 162.414743][ T6963] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 162.414771][ T6963] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.414796][ T6963] ? _raw_spin_unlock_irq+0x2e/0x50 [ 162.414816][ T6963] ? snd_pcm_drop+0x4a4/0x5c0 [ 162.414841][ T6963] snd_pcm_oss_change_params_locked+0x201f/0x3e00 [ 162.414902][ T6963] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 162.414928][ T6963] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 162.414961][ T6963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.415000][ T6963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.415037][ T6963] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 162.415072][ T6963] snd_pcm_oss_set_rate+0x1bc/0x4e0 [ 162.415105][ T6963] snd_pcm_oss_ioctl+0xc2e/0xdf0 [ 162.415132][ T6963] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 162.415158][ T6963] __se_sys_ioctl+0xfc/0x170 [ 162.415184][ T6963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.415207][ T6963] do_syscall_64+0x15f/0xf80 [ 162.415230][ T6963] ? trace_irq_disable+0x3b/0x140 [ 162.415255][ T6963] ? clear_bhb_loop+0x40/0x90 [ 162.415281][ T6963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.415302][ T6963] RIP: 0033:0x7f7cc419c819 [ 162.415322][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.415340][ T6963] RSP: 002b:00007f7cc505e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.415364][ T6963] RAX: ffffffffffffffda RBX: 00007f7cc4415fa0 RCX: 00007f7cc419c819 [ 162.415379][ T6963] RDX: 0000200000000100 RSI: 00000000c0045002 RDI: 0000000000000003 [ 162.415393][ T6963] RBP: 00007f7cc505e090 R08: 0000000000000000 R09: 0000000000000000 [ 162.415405][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.415417][ T6963] R13: 00007f7cc4416038 R14: 00007f7cc4415fa0 R15: 00007f7cc453fa48 [ 162.415450][ T6963] [ 163.398685][ T6971] tipc: Started in network mode [ 163.570691][ T5838] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 163.620985][ T6971] tipc: Node identity f6fdc3165c03, cluster identity 4711 [ 163.742574][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 163.751369][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 163.768009][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.788603][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 163.814191][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 36, changing to 9 [ 163.839738][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 1032, setting to 1024 [ 163.868697][ T5838] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 163.885010][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.902581][ T5838] usb 5-1: Product: syz [ 163.914497][ T5838] usb 5-1: Manufacturer: syz [ 163.925876][ T5838] usb 5-1: SerialNumber: syz [ 163.945512][ T6971] tipc: Enabled bearer , priority 0 [ 163.958739][ T5838] usb 5-1: config 0 descriptor?? [ 163.964850][ T6969] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 163.998824][ T5838] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 164.094692][ T6976] syzkaller0: entered promiscuous mode [ 164.125562][ T5193] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 164.147327][ T6976] syzkaller0: entered allmulticast mode [ 164.203500][ T5193] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 164.346061][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 164.358223][ T6979] tipc: Resetting bearer [ 164.377219][ T6966] tipc: Resetting bearer [ 164.385621][ T5193] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 164.417080][ T5193] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 164.438982][ T6966] tipc: Disabling bearer [ 164.456929][ T5956] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 164.488933][ T6983] FAULT_INJECTION: forcing a failure. [ 164.488933][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.504634][ T6983] CPU: 0 UID: 0 PID: 6983 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(full) [ 164.504655][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.504662][ T6983] Call Trace: [ 164.504667][ T6983] [ 164.504673][ T6983] dump_stack_lvl+0xe8/0x150 [ 164.504697][ T6983] should_fail_ex+0x412/0x560 [ 164.504719][ T6983] _copy_from_user+0x2d/0xb0 [ 164.504733][ T6983] snd_seq_oss_write+0x371/0x8f0 [ 164.504749][ T6983] ? get_pid_task+0x20/0x1f0 [ 164.504769][ T6983] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 164.504786][ T6983] ? apparmor_file_permission+0x1f4/0x300 [ 164.504804][ T6983] ? security_file_permission+0x75/0x260 [ 164.504822][ T6983] odev_write+0x5a/0x80 [ 164.504834][ T6983] ? __pfx_odev_write+0x10/0x10 [ 164.504847][ T6983] vfs_write+0x29a/0xb90 [ 164.504867][ T6983] ? __pfx_vfs_write+0x10/0x10 [ 164.504883][ T6983] ? __fget_files+0x2a/0x420 [ 164.504906][ T6983] ? __fget_files+0x2a/0x420 [ 164.504923][ T6983] ? __fget_files+0x3a0/0x420 [ 164.504942][ T6983] ? __fget_files+0x2a/0x420 [ 164.504970][ T6983] ksys_write+0x150/0x270 [ 164.504995][ T6983] ? __pfx_ksys_write+0x10/0x10 [ 164.505027][ T6983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.505058][ T6983] do_syscall_64+0x15f/0xf80 [ 164.505082][ T6983] ? trace_irq_disable+0x3b/0x140 [ 164.505108][ T6983] ? clear_bhb_loop+0x40/0x90 [ 164.505133][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.505152][ T6983] RIP: 0033:0x7fb2f899c819 [ 164.505172][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.505190][ T6983] RSP: 002b:00007fb2f97a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.505213][ T6983] RAX: ffffffffffffffda RBX: 00007fb2f8c15fa0 RCX: 00007fb2f899c819 [ 164.505228][ T6983] RDX: 000000000000022b RSI: 0000200000000080 RDI: 0000000000000003 [ 164.505241][ T6983] RBP: 00007fb2f97a0090 R08: 0000000000000000 R09: 0000000000000000 [ 164.505254][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.505266][ T6983] R13: 00007fb2f8c16038 R14: 00007fb2f8c15fa0 R15: 00007fb2f8d3fa48 [ 164.505298][ T6983] [ 164.969464][ T5193] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 165.028980][ T5193] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 165.117378][ T5193] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 165.222637][ T5935] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 165.384712][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 165.404262][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 165.431738][ T5935] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 165.454022][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.479078][ T5935] usb 4-1: config 0 descriptor?? [ 165.564033][ T29] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 165.703478][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.739618][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.753198][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 165.782625][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.800903][ T5935] ath6kl: Failed to submit usb control message: -71 [ 165.815195][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.822313][ T5935] ath6kl: unable to send the bmi data to the device: -71 [ 165.844015][ T5935] ath6kl: Unable to send get target info: -71 [ 165.861342][ T29] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 165.867401][ T5935] ath6kl: Failed to init ath6kl core: -71 [ 165.893578][ T5935] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 165.899012][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.928776][ T5935] usb 4-1: USB disconnect, device number 25 [ 165.946508][ T29] usb 2-1: Product: syz [ 165.967130][ T29] usb 2-1: Manufacturer: syz [ 165.981926][ T29] usb 2-1: SerialNumber: syz [ 166.030773][ T29] usb 2-1: config 0 descriptor?? [ 166.202803][ T5935] usb 5-1: USB disconnect, device number 16 [ 166.266535][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.364662][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.415856][ T5838] usb 2-1: USB disconnect, device number 18 [ 166.584008][ T29] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.774264][ T29] usb 3-1: config 0 has no interfaces? [ 166.788563][ T29] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 166.810457][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.840343][ T29] usb 3-1: config 0 descriptor?? [ 166.932598][ T5838] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 167.093057][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 167.113020][ T5838] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 167.137190][ T5838] usb 4-1: config 0 has no interface number 0 [ 167.149266][ T6998] kvm: kvm [6997]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 167.177225][ T5838] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.177473][ T6998] kvm: kvm [6997]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 167.212707][ T962] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 167.220552][ T5838] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.304008][ T5893] usb 3-1: USB disconnect, device number 15 [ 167.320594][ T5838] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 167.397927][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.451068][ T962] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 167.460133][ T962] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.473100][ T962] usb 1-1: config 0 has no interface number 0 [ 167.494966][ T5838] usb 4-1: config 0 descriptor?? [ 167.495048][ T962] usb 1-1: config 0 interface 205 has no altsetting 0 [ 167.528797][ T962] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 167.542569][ T962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.551704][ T962] usb 1-1: Product: syz [ 167.556844][ T962] usb 1-1: Manufacturer: syz [ 167.561626][ T962] usb 1-1: SerialNumber: syz [ 167.579497][ T962] usb 1-1: config 0 descriptor?? [ 167.589985][ T962] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 167.604019][ T962] dvb-usb: bulk message failed: -22 (3/0) [ 167.636857][ T962] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 167.648281][ T962] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 167.660848][ T962] usb 1-1: media controller created [ 167.669616][ T962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.751701][ T962] dvb-usb: bulk message failed: -22 (6/0) [ 167.760151][ T962] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 167.806975][ T962] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 167.834052][ T962] dvb-usb: schedule remote query interval to 150 msecs. [ 167.844673][ T962] dvb-usb: bulk message failed: -22 (3/0) [ 167.862643][ T962] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 167.948297][ T5838] usbhid 4-1:0.4: can't add hid device: -71 [ 167.962662][ T5838] usbhid 4-1:0.4: probe with driver usbhid failed with error -71 [ 168.012943][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 168.018957][ T962] dvb-usb: error while querying for an remote control event. [ 168.029453][ T5838] usb 4-1: USB disconnect, device number 26 [ 168.182554][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 168.188656][ T962] dvb-usb: error while querying for an remote control event. [ 168.203958][ T7027] x_tables: duplicate underflow at hook 4 [ 168.382694][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 168.388784][ T5935] dvb-usb: error while querying for an remote control event. [ 168.572757][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 168.584879][ T5935] dvb-usb: error while querying for an remote control event. [ 168.612633][ T962] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 168.762558][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 168.773486][ T5935] dvb-usb: error while querying for an remote control event. [ 168.783194][ T962] usb 5-1: Using ep0 maxpacket: 16 [ 168.801721][ T962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.836766][ T962] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 168.865632][ T962] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.877210][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.904698][ T962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.938730][ T962] usb 5-1: config 0 descriptor?? [ 168.972560][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 168.983847][ T962] dvb-usb: error while querying for an remote control event. [ 169.167450][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 169.184119][ T962] dvb-usb: error while querying for an remote control event. [ 169.204472][ T962] usb 5-1: USB disconnect, device number 17 [ 169.353095][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 169.362353][ T5935] dvb-usb: error while querying for an remote control event. [ 169.380605][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.522602][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 169.535008][ T5935] dvb-usb: error while querying for an remote control event. [ 169.712948][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 169.726672][ T5935] dvb-usb: error while querying for an remote control event. [ 169.922913][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 169.958245][ T962] dvb-usb: error while querying for an remote control event. [ 170.047267][ T7048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.102635][ T5935] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 170.152840][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 170.178338][ T962] dvb-usb: error while querying for an remote control event. [ 170.262548][ T5935] usb 3-1: device descriptor read/64, error -71 [ 170.332690][ T962] dvb-usb: bulk message failed: -22 (1/0) [ 170.368040][ T962] dvb-usb: error while querying for an remote control event. [ 170.494672][ T5893] usb 1-1: USB disconnect, device number 18 [ 170.515944][ T5935] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 170.571838][ T5893] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 170.600405][ T7062] random: crng reseeded on system resumption [ 170.649020][ T7063] ptrace attach of "./syz-executor exec"[5856] was attempted by " ./file0    N$   /sys/kernel/debug/binder/stats 8    \x09   cgroup.controllers [ 170.682570][ T5935] usb 3-1: device descriptor read/64, error -71 [ 170.858008][ T7064] ipvlan2: entered promiscuous mode [ 170.952792][ T5935] usb usb3-port1: attempt power cycle [ 171.302603][ T5935] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 171.351856][ T5935] usb 3-1: device descriptor read/8, error -71 [ 171.424691][ T7077] netlink: zone id is out of range [ 171.652587][ T5935] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 171.798665][ T5935] usb 3-1: device descriptor read/8, error -71 [ 171.922940][ T5935] usb usb3-port1: unable to enumerate USB device [ 173.735411][ T7106] bridge_slave_0: left allmulticast mode [ 173.741299][ T7106] bridge_slave_0: left promiscuous mode [ 173.750968][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.907600][ T7106] bridge_slave_1: left allmulticast mode [ 173.939224][ T7106] bridge_slave_1: left promiscuous mode [ 173.971754][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.998135][ T7106] bond0: (slave bond_slave_0): Releasing backup interface [ 174.037831][ T7106] bond0: (slave bond_slave_1): Releasing backup interface [ 174.114602][ T7106] team0: Port device team_slave_0 removed [ 174.203275][ T7106] team0: Port device team_slave_1 removed [ 174.227462][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.292321][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.340208][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.359396][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.380929][ T7106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.501903][ T7123] syzkaller0: entered promiscuous mode [ 174.514301][ T7123] syzkaller0: entered allmulticast mode [ 174.592541][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.773843][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 174.800557][ T29] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.824596][ T29] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.834974][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 174.866110][ T29] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 174.892705][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.922818][ T29] usb 5-1: config 0 descriptor?? [ 175.046177][ T7135] trusted_key: encrypted_key: insufficient parameters specified [ 175.411640][ T29] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 175.440581][ T29] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 175.469802][ T29] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 175.501451][ T29] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 175.570936][ T29] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 175.588125][ T7122] netlink: 'syz.4.352': attribute type 10 has an invalid length. [ 175.664278][ T7143] netlink: 'syz.4.352': attribute type 10 has an invalid length. [ 176.815807][ T5916] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 178.718915][ T7122] team0: Port device dummy0 added [ 178.728547][ T7143] team0: Port device dummy0 removed [ 178.738155][ T7143] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.362639][ T808] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 179.428936][ T7171] tap0: tun_chr_ioctl cmd 1074025677 [ 179.434985][ T7171] tap0: linktype set to 0 [ 179.442791][ T5838] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 179.512574][ T808] usb 3-1: device descriptor read/64, error -71 [ 179.586047][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'. [ 179.605565][ T5838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.616166][ T5838] usb 2-1: not running at top speed; connect to a high speed hub [ 179.624599][ T7175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.633032][ T7175] IPv6: NLM_F_CREATE should be set when creating new route [ 179.641356][ T5916] usb 5-1: device descriptor read/64, error -71 [ 179.650343][ T5838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.661371][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'. [ 179.670395][ T5838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.688437][ T5838] usb 2-1: string descriptor 0 read error: -22 [ 179.696683][ T5838] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.709860][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.738201][ T5838] usb 2-1: 0:2 : does not exist [ 179.772753][ T808] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 179.882565][ T5916] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 179.902650][ T808] usb 3-1: device descriptor read/64, error -71 [ 179.916789][ T5916] usb 5-1: device reset changed ep0 maxpacket size! [ 179.935393][ T7179] FAULT_INJECTION: forcing a failure. [ 179.935393][ T7179] name failslab, interval 1, probability 0, space 0, times 0 [ 179.964749][ T29] usb 5-1: USB disconnect, device number 18 [ 179.971972][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT(full) [ 179.971999][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.972012][ T7179] Call Trace: [ 179.972022][ T7179] [ 179.972036][ T7179] dump_stack_lvl+0xe8/0x150 [ 179.972073][ T7179] should_fail_ex+0x412/0x560 [ 179.972108][ T7179] should_failslab+0xa8/0x100 [ 179.972134][ T7179] ? anon_vma_fork+0x14d/0x570 [ 179.972155][ T7179] kmem_cache_alloc_noprof+0x87/0x650 [ 179.972176][ T7179] ? anon_vma_fork+0x83/0x570 [ 179.972205][ T7179] anon_vma_fork+0x14d/0x570 [ 179.972237][ T7179] dup_mmap+0x991/0x1d90 [ 179.972282][ T7179] ? __pfx_dup_mmap+0x10/0x10 [ 179.972318][ T7179] ? copy_mm+0x130/0x4a0 [ 179.972347][ T7179] ? copy_mm+0x130/0x4a0 [ 179.972392][ T7179] copy_mm+0x13b/0x4a0 [ 179.972424][ T7179] copy_process+0x1f1c/0x4450 [ 179.972452][ T7179] ? _parse_integer_limit+0x1ae/0x1f0 [ 179.972497][ T7179] ? copy_process+0xd87/0x4450 [ 179.972536][ T7179] ? __pfx_copy_process+0x10/0x10 [ 179.972566][ T7179] ? get_pid_task+0x20/0x1f0 [ 179.972585][ T7179] ? get_pid_task+0x20/0x1f0 [ 179.972614][ T7179] kernel_clone+0x284/0x8f0 [ 179.972640][ T7179] ? __pfx_kernel_clone+0x10/0x10 [ 179.972669][ T7179] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 179.972701][ T7179] __x64_sys_clone+0x1b6/0x230 [ 179.972725][ T7179] ? __pfx___x64_sys_clone+0x10/0x10 [ 179.972773][ T7179] ? __pfx_ksys_write+0x10/0x10 [ 179.972807][ T7179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.972829][ T7179] do_syscall_64+0x15f/0xf80 [ 179.972850][ T7179] ? trace_irq_disable+0x3b/0x140 [ 179.972876][ T7179] ? clear_bhb_loop+0x40/0x90 [ 179.972900][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.972919][ T7179] RIP: 0033:0x7fb2f899c819 [ 179.972938][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.972955][ T7179] RSP: 002b:00007fb2f977efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 179.972978][ T7179] RAX: ffffffffffffffda RBX: 00007fb2f8c16090 RCX: 00007fb2f899c819 [ 179.972992][ T7179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 179.973003][ T7179] RBP: 00007fb2f977f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.973016][ T7179] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 179.973029][ T7179] R13: 00007fb2f8c16128 R14: 00007fb2f8c16090 R15: 00007fb2f8d3fa48 [ 179.973060][ T7179] [ 180.495846][ T808] usb usb3-port1: attempt power cycle [ 180.722692][ T29] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 180.852573][ T808] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 180.873269][ T808] usb 3-1: device descriptor read/8, error -71 [ 180.887310][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.898331][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.908393][ T29] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.918985][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.929834][ T29] usb 5-1: config 0 descriptor?? [ 181.114042][ T808] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 181.157514][ T808] usb 3-1: device descriptor read/8, error -71 [ 181.165423][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 181.188513][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.276735][ T29] usb 5-1: USB disconnect, device number 19 [ 181.301705][ T808] usb usb3-port1: unable to enumerate USB device [ 184.897254][ T808] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 184.983033][ T5838] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 185.032619][ T5838] usb 2-1: Warning! Unlikely big volume step count (=3552), linear volume or wrong cval->res? [ 185.062719][ T29] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 185.082065][ T5838] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 5648/9200/1 [ 185.091431][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 185.126104][ T808] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 185.157259][ T5838] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 185.185048][ T808] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 185.225719][ T5838] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 185.236715][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.278992][ T808] usb 3-1: Product: syz [ 185.301186][ T808] usb 3-1: Manufacturer: syz [ 185.332149][ T808] usb 3-1: SerialNumber: syz [ 185.384266][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.424383][ T808] r8152-cfgselector 3-1: Unknown version 0x0000 [ 185.474629][ T5838] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 185.486092][ T808] r8152-cfgselector 3-1: config 0 descriptor?? [ 185.492346][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.538586][ T29] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 185.571537][ T7229] vlan2: entered promiscuous mode [ 185.590365][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.614728][ T7229] bridge0: entered promiscuous mode [ 185.666223][ T29] usb 5-1: config 0 descriptor?? [ 185.785374][ T5838] usb 2-1: USB disconnect, device number 19 [ 185.968538][ T7231] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 186.029496][ T5916] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 186.145595][ T29] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.170149][ T29] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.201822][ T29] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.234362][ T29] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.265863][ T29] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.292854][ T29] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.305852][ T29] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.349361][ T29] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 186.447795][ T29] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 186.733092][ T7237] kvm_intel: kvm [7236]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1d7 [ 187.061314][ T7221] cp2112 0003:10C4:EA90.0007: Error starting transaction: -38 [ 187.105037][ T29] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 187.157839][ T29] usb 5-1: USB disconnect, device number 20 [ 187.856908][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.390'. [ 188.341105][ T7254] fuse: Unknown parameter 'fd0x00000000000000060000000{l040r_id' [ 190.979332][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 193.242857][ T5916] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 193.453965][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 193.495086][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.529353][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.557226][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 193.577009][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.601737][ T5916] usb 4-1: config 0 descriptor?? [ 193.631661][ T5916] hub 4-1:0.0: USB hub found [ 194.052297][ T5916] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 194.362122][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 194.404636][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 194.535302][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544434][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.585848][ T5916] usb 4-1: USB disconnect, device number 27 [ 197.841613][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.152092][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.179090][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.355394][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.386041][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.475313][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 198.475333][ T30] audit: type=1326 audit(1776771061.571:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc54899c819 code=0x0 [ 198.808119][ T7332] loop2: detected capacity change from 0 to 7 [ 198.974889][ T7332] loop2: [ 198.996361][ T7332] loop2: partition table partially beyond EOD, truncated [ 199.040522][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.419'. [ 199.350382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 199.902387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 200.111884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 202.718429][ T5159] Bluetooth: hci5: command tx timeout [ 203.882508][ C1] sched: DL replenish lagged too much [ 206.258515][ T5846] Bluetooth: hci5: command tx timeout [ 208.504257][ T50] Bluetooth: hci5: command tx timeout [ 208.971177][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 208.988644][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 209.006044][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 209.043017][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 209.059931][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 211.703901][ T5852] Bluetooth: hci5: command tx timeout [ 258.694785][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.705396][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.931788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 291.202442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 291.301493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 291.363251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 291.401610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 291.581697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 291.641150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 301.072459][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 301.079460][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7172/1:b..l [ 301.087880][ C1] rcu: (detected by 1, t=10502 jiffies, g=30425, q=223010 ncpus=2) [ 301.095984][ C1] task:syz.0.365 state:R running task stack:24568 pid:7172 tgid:7167 ppid:5855 task_flags:0x40044c flags:0x00080002 [ 301.110496][ C1] Call Trace: [ 301.113811][ C1] [ 301.116772][ C1] __schedule+0x17b4/0x5680 [ 301.121324][ C1] ? unwind_next_frame+0xa6/0x2550 [ 301.126469][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 301.131797][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.137895][ C1] ? __pfx___schedule+0x10/0x10 [ 301.142781][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 301.148288][ C1] preempt_schedule_irq+0x4d/0xa0 [ 301.153347][ C1] irqentry_exit+0x14f/0x730 [ 301.157989][ C1] ? trace_irq_disable+0x3b/0x140 [ 301.163054][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.169064][ C1] RIP: 0010:percpu_ref_get_many+0xa7/0x140 [ 301.174921][ C1] Code: bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 b4 f3 f6 ff 49 8b 07 a8 03 75 62 65 4c 01 30 14 42 7e 09 85 c0 74 3a e8 6b db 70 ff 84 c0 75 31 e8 02 42 7e [ 301.194560][ C1] RSP: 0018:ffffc9000200ee00 EFLAGS: 00000202 [ 301.200667][ C1] RAX: 0000607edaa764a8 RBX: ffffffff823a17e9 RCX: 0000000080000001 [ 301.208661][ C1] RDX: 00000000cdac3f13 RSI: ffffffff8c289cc0 RDI: ffffffff8c289c80 [ 301.216668][ C1] RBP: ffff8880372b63b0 R08: ffffffff823a17e9 R09: ffffffff8e95cce0 [ 301.224669][ C1] R10: dffffc0000000000 R11: fffff94000234b61 R12: dffffc0000000000 [ 301.232665][ C1] R13: ffffea00011a5b08 R14: 0000000000000001 R15: ffff8880372b6380 [ 301.240758][ C1] ? percpu_ref_get_many+0x19/0x140 [ 301.246009][ C1] ? percpu_ref_get_many+0x19/0x140 [ 301.251261][ C1] uncharge_folio+0x1ac/0x4b0 [ 301.255981][ C1] __mem_cgroup_uncharge_folios+0xfd/0x1d0 [ 301.261821][ C1] ? __pfx_lru_gen_del_folio+0x10/0x10 [ 301.267321][ C1] ? __pfx___mem_cgroup_uncharge_folios+0x10/0x10 [ 301.273863][ C1] ? folios_put_refs+0x9a7/0xb40 [ 301.278925][ C1] folios_put_refs+0x9f7/0xb40 [ 301.283735][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 301.289062][ C1] ? free_swap_cache+0x109/0x300 [ 301.294031][ C1] free_pages_and_swap_cache+0x2b9/0x490 [ 301.299696][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 301.305990][ C1] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 301.311399][ C1] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 301.316801][ C1] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 301.322227][ C1] ? __zap_vma_range+0x3d98/0x4b40 [ 301.327381][ C1] tlb_flush_mmu+0x6d3/0xa30 [ 301.332001][ C1] ? __zap_vma_range+0x3d98/0x4b40 [ 301.337143][ C1] ? __zap_vma_range+0x3d98/0x4b40 [ 301.342316][ C1] __zap_vma_range+0x3dc3/0x4b40 [ 301.347339][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 301.352667][ C1] ? mas_find+0xb0e/0xd30 [ 301.357112][ C1] ? unmap_vmas+0x1bd/0x530 [ 301.361659][ C1] unmap_vmas+0x379/0x530 [ 301.366113][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 301.371022][ C1] exit_mmap+0x280/0x9e0 [ 301.375306][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 301.380107][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 301.385258][ C1] ? __pfx_exit_aio+0x10/0x10 [ 301.389964][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 301.395208][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 301.400453][ C1] __mmput+0x118/0x430 [ 301.404559][ C1] exit_mm+0x18e/0x250 [ 301.408657][ C1] do_exit+0x6a2/0x22c0 [ 301.412849][ C1] ? __pfx_do_exit+0x10/0x10 [ 301.417473][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.422535][ C1] do_group_exit+0x21b/0x2d0 [ 301.427151][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.432387][ C1] get_signal+0x1284/0x1330 [ 301.436949][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 301.442546][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 301.448748][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.454842][ C1] exit_to_user_mode_loop+0x86/0x480 [ 301.460158][ C1] ? rcu_is_watching+0x15/0xb0 [ 301.464961][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.471058][ C1] do_syscall_64+0x33e/0xf80 [ 301.475677][ C1] ? trace_irq_disable+0x3b/0x140 [ 301.480733][ C1] ? clear_bhb_loop+0x40/0x90 [ 301.485441][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.491445][ C1] RIP: 0033:0x7f172c39c819 [ 301.495891][ C1] RSP: 002b:00007f172d1ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 301.504424][ C1] RAX: fffffffffffffe00 RBX: 00007f172c616188 RCX: 00007f172c39c819 [ 301.512415][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f172c616188 [ 301.520411][ C1] RBP: 00007f172c616180 R08: 0000000000000000 R09: 0000000000000000 [ 301.528405][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.536401][ C1] R13: 00007f172c616218 R14: 00007f172c73f960 R15: 00007f172c73fa48 [ 301.544415][ C1]