last executing test programs: 4m41.859159393s ago: executing program 4 (id=648): r0 = open(0x0, 0x4c27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0xac00, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m41.770097123s ago: executing program 4 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m41.284969114s ago: executing program 4 (id=653): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f00000022c0)=@l2={{0x1000000000000009, 0x2e, 0xe, 0x2e, 0x7, 0x2e, 0x7ff}, 0x2f, 0x2cdd9858, 0x20, '/dev/nbd#\x00'}, 0x75) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) openat$cgroup_freezer_state(r3, &(0x7f0000000340), 0x2, 0x0) syz_io_uring_setup(0xc299, &(0x7f0000000280)={0x0, 0x4a24, 0x2000, 0x0, 0x240}, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x41, "43cc1505000000004786b89e6fb2be5c3f000000a69eded1892b0a25070000fc6f0000000000f7b55527f91fbe2e47932bae0000000000005947699502cf2b19fd"}}) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r7], 0x28}}, 0x802) 4m40.090982968s ago: executing program 4 (id=661): r0 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r0, 0x0, 0x0, 0x800) (fail_nth: 1) 4m39.659919458s ago: executing program 4 (id=665): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002340), 0x8501, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 4m39.350889812s ago: executing program 4 (id=668): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) (async) r2 = dup(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x4, 0xc6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000050) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x804800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x804800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) 4m24.235924455s ago: executing program 32 (id=668): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) (async) r2 = dup(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x4, 0xc6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000050) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x804800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x804800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) 30.070669061s ago: executing program 1 (id=2179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00h'], 0x2c}}, 0x4000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) 29.629582149s ago: executing program 1 (id=2181): sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x20000000) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x275a, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 28.902413839s ago: executing program 1 (id=2185): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00000800", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000) 28.619670415s ago: executing program 1 (id=2186): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000040)={'wg2\x00', @ifru_map={0x7, 0x1b, 0xb0aa, 0x8a, 0xcc, 0xd}}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0x8001]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4000001}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = epoll_create1(0x80000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000480)={0x68000005}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28.300430734s ago: executing program 1 (id=2189): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x2b1e, 0x0, 0x9000}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x18, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000422bd7000fedbdf25160000002c000380080002000300000008000100020000000800010076060000080001000400000008000300e90e0000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 28.075554905s ago: executing program 1 (id=2190): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat$mice(0xffffff9c, 0x0, 0x8c00) 10.594600198s ago: executing program 5 (id=2233): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket$inet6(0xa, 0x80000, 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000048, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept$alg(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = getpid() syz_pidfd_open(r5, 0x0) 9.486702406s ago: executing program 5 (id=2235): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x40, 0x8, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0}) 8.139415243s ago: executing program 2 (id=2239): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r0, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f00000006c0)={0xbc, 0x0, 0x4}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, r4, 0x2000) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) preadv2(r5, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/83, 0x53}], 0x2, 0x4d2c, 0x93, 0xb) ioctl$KVM_RUN(r1, 0xae80, 0x0) gettid() 7.530138661s ago: executing program 3 (id=2242): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 7.490807004s ago: executing program 5 (id=2243): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="4b067daa1aa07f324f8002b24285aa098d74230b876cc6d86b11bac53100512c5fbb68cb3704219476337276733d", 0x2e}, {&(0x7f00000002c0)="f7e6c1cf21f715aba01d88ab7011bc4dc0a8af9a9ba7550696eba98ed0a3c507e28b654696146ca777297fc6cfb2715a98e6816f67469c816294e9fe4aeafc84acfa9f13a28df51a798065f6640a8a0d9e99638abe274e2c49d295ce77509c937d55c7835a6549ddd435ed5263b00b277ff3e5eefaa63c73677a77c15874815768ec091df79d7a77b17d2884025ead2f88", 0x91}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x80, 0x7e, 0x0, '\x00', 0x5, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.475860944s ago: executing program 0 (id=2244): r0 = open(0x0, 0x4c27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0xac00, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.101346897s ago: executing program 0 (id=2245): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000007d0000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r3, 0x1, 0x70bd29, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x6b9f, 0x4c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x38}}, 0x880) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x6, 0x3a, 0x0, @local, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000019400)={r1, 0x58, &(0x7f0000019380)}, 0x10) io_uring_setup(0x5396, &(0x7f0000000000)={0x0, 0xfa5d, 0x8000, 0x1, 0x315}) r5 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1f, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0x4040800}, 0xc000) syz_io_uring_setup(0x1e4, &(0x7f0000000200)={0x0, 0x9cc2, 0x2000, 0x0, 0x218}, &(0x7f0000000180), &(0x7f0000019300)) 6.991882404s ago: executing program 5 (id=2246): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x4, 0x162, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x85, 0x63, 0x29, 0x40, 0x2b73, 0x23, 0x570d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x150, 0x1, 0x5, 0xd, 0xd0, 0x3, "", [{{0x9, 0x4, 0x49, 0x2, 0x1, 0xff, 0xab, 0xa9, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x30}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x5, 0x2, [0x3, 0x2], 0x5}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x0, "8d"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x9, 0x0, 0xda, 0xf}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0xb, "ae7210df"}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f0"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xa99d, 0x7, 0x6, 0x3}, [@obex={0x5, 0x24, 0x15, 0x88b}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0x5a97}, @mbim={0xc, 0x24, 0x1b, 0x20, 0x3, 0x9, 0x8, 0x6, 0xd4}, @mdlm={0x15, 0x24, 0x12, 0xd}]}], [{{0x9, 0x5, 0x9, 0xf8ba50c800bb56e7, 0x10, 0xa6, 0xcf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40}, @generic={0xb9, 0x9, "2ee24f1f7966e4cb8534a5713e8a91deb071ddf997ca7a7233c48bfc1b93351b3152348e71f6c7ac76aa2d058cf2c419c936f7017d46b8914cace6fdf4e096ffff8ae435517560b7d150fa950b3e61dee435cee78aac9239841aabba3925ab3e7f761ffb9ec44ae10aa2557917bce4683967e9e45eca288df8823bf0671d713f4adade92b3edb8c76043cf7ba7b1eaad1eea833066294a93eeda66dc4462491e853d148231f5e28d7443b2c1978825e08de28f90fb96e2"}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3d, 0xf, 0x9, 0x20}, 0x1c, &(0x7f0000000080)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "5031fd0d1cf084d7a77fcee318afdb89"}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x418}}, {0x44, &(0x7f0000000b00)=@string={0x44, 0x3, "c380545de2de690d2ec2e02c95e9ea553bf5f411f23bbe50d58d9eb70e76a901e9bb935a582e465007002af98e16f242b216f269bdc3fb807d24fa69ae641b9d56cc"}}, {0xbc, &(0x7f0000000b80)=@string={0xbc, 0x3, "7b167620e4a8ca4a8a9d5c6f6d113f7f9d93e27bd33817de1410f98f89ec4ef6109f6aec83abfbe1d97051471668892e3ecb0314d67e8b812b1f317c78f313ccd2a81bf6b2b21a031474ea79672b48fa8fb187f0ed28a070af4e9713814f926cd9624bb281631cb11a4ca2bfcfb75f3b0f2f0dd0573468a66ec59cd62c8d24b26aaeccb9b569fac231a9175f532e9d80aa6dea59b41e1c64f75fe2be07e5a6003e40b432faca5a6854448321c601a279b0d5f84fa10f5fdfc56a"}}, {0x42, &(0x7f0000000c40)=@string={0x42, 0x3, "e4c11e4f1d90372db2fdf19baa7bd2de2f3de20945a99f88258345f9723fdbdc518db361230474c028e4d6861703936ccce33ff4868096fe38147f3c95470eee"}}, {0xb9, &(0x7f0000000cc0)=@string={0xb9, 0x3, "dda065650e730a065602913c639449ba76c03f693262ee0dfd0cd553b1895edb2136366d7e315d14b07339a0f831fb4ccb08cf9ec24d4b6cdd00e611d55f4ab3a8e02f99cee8f6de9d7fdc734c905d3de7aa83c4b7f2fb46523c109e050c5496a390a17581135d7afd94960eeb99afeb7b178fde535d1962d7da2ca4d10afaa64edd10ac497125d75f2772c271686b2249478f32ba837f182d9c0ac3b33cefb31612a72f8949f0af97b7acfa3f0c329f176556e2af0bf0"}}, {0x72, &(0x7f0000000d80)=@string={0x72, 0x3, "a35b7f415cf555c95792e4b0e10b23052fe9b153a8a55fc07a9281832ccd2b89ba075e40886018b8df3ef4ec2d94f14750f4f8522955a6bd3500c70befaa133baffceed010912769a55c5b6d5a88e0184bec87f72f22ceb1288fc768e9346b9f6a2674754f60ab95a5275600ff38cb26"}}, {0xef, &(0x7f0000000e00)=@string={0xef, 0x3, "98df37563ac5b76cdeba89a8f95cf4dbe2fb1250d93fb42aa1fb678efa5ab3610dfccdef9ae591ad03c7588ac3b041e6b2f40d611362685892bcae32e88728ceba6eb5867aa3e6664b8ba6ae5586329776f9694fa4a430cb61086b70d51ed025da5e3ccc7bed9eca72f3456b8c5f1dd4634ba4a7a4fde64476969a743a2ddddbb782577d205d72fe2a24855c8bbfb3023416702e51cac03f4e9e9635b02bd675c59bc48ff468113d05be8eb4fca266bda268916a91f1d5b2c94dd6f6a560125ea4c40f17c2fdfcd1d39530870426f21c84befa01b9228d0d9224c311a74b90df6f71ecd418b3a1ab896da2379a"}}, {0x23, &(0x7f0000000240)=@string={0x23, 0x3, "cba2c43a433bc764a981746c1e14d7852eda9e9a96dbdc8959d98a622c8aaac0c4"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 6.908529648s ago: executing program 3 (id=2247): socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@s={0x5, @SEQ_MIDIPUTC=0xc3, 0x12, 0xb}) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) (async) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x1}, 0x1c) r5 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r5, 0x0, 0xf) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$nl_route(0x10, 0x3, 0x0) (async) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 6.127022826s ago: executing program 2 (id=2248): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x82c0, 0x183) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x20200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, 0xffffffffffffffff, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = fanotify_init(0xf00, 0x0) r3 = openat$incfs(r0, &(0x7f00000000c0)='.pending_reads\x00', 0x4141, 0x5) fanotify_mark(r2, 0x4, 0x5000101a, r3, 0x0) setitimer(0x0, 0x0, &(0x7f0000000300)) 5.783819289s ago: executing program 2 (id=2249): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="4b067daa1aa07f324f8002b24285aa098d74230b876cc6d86b11bac53100512c5fbb68cb3704219476337276733d", 0x2e}, {&(0x7f00000002c0)="f7e6c1cf21f715aba01d88ab7011bc4dc0a8af9a9ba7550696eba98ed0a3c507e28b654696146ca777297fc6cfb2715a98e6816f67469c816294e9fe4aeafc84acfa9f13a28df51a798065f6640a8a0d9e99638abe274e2c49d295ce77509c937d55c7835a6549ddd435ed5263b00b277ff3e5eefaa63c73677a77c15874815768ec091df79d7a77b17d2884025ead2f88", 0x91}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x80, 0x7e, 0x0, '\x00', 0x5, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 4.853276042s ago: executing program 5 (id=2250): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6c83, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000000c0)={0x2, 0x7, 0x10001, 0x0, 0x8, 0x7, 0x0, &(0x7f0000000040)=[{0x14, 0x101, 0x80000001}, {0xb, 0xfe, 0x91}, {0x12, 0x101, 0x42d}, {0xb, 0x1ff, 0x9}, {0x38, 0xfe}, {0x12, 0x1ff, 0x2}, {0x10, 0xfe, 0x1}]}) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904"], 0x0) 4.581574245s ago: executing program 2 (id=2251): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6"], 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0x4) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) 4.576053607s ago: executing program 3 (id=2252): openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x802) 4.433230257s ago: executing program 3 (id=2253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006"], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000) 3.025179353s ago: executing program 2 (id=2254): r0 = open(0x0, 0x4c27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0xac00, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.880215086s ago: executing program 3 (id=2255): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80) 2.444366493s ago: executing program 0 (id=2256): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000088d82, 0x0) r2 = syz_io_uring_setup(0xe7, &(0x7f0000000040)={0x0, 0x5cd0, 0x0, 0xfffffffc, 0x1bd}, &(0x7f0000002180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847b9, 0xebd0, 0xa, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x7) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x814) syz_open_dev$sndmidi(0x0, 0x8, 0x60000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x14, 0x10, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000008000000"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221f00000096231306e53f070c0000002a9001894623000000000b09007a3a33a3e2d45d"], 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800000000000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05604, &(0x7f00000012c0)={0xa}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) syz_clone(0x4a01000, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000280)="565acc048e04f39963610149cf4b5dc69c2fd037d0b583842d01735aa85d30fe22362d98e31f362bce438ac78f69eb89c18168add5f0786ebefce48e170f68b809cb7b37809319d777dfc85e84cf9b8a838cdfa451276b158417c006677d598ae40111390141f4e4c4a9e6075100078045de3a65ce1bcf92304e", 0x7a, 0x40, &(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x3}}, 0x80) 2.443482617s ago: executing program 3 (id=2257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e25, 0xffff, @loopback, 0x6}, 0x1c) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84"], 0xdd12}], 0x1}, 0x20040890) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.882699426s ago: executing program 5 (id=2258): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd8004000200ff01000004000100"], 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x4008804) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8cd62b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x800) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000440)={0x6d, "4d9bc68f2118a4e159ae59e1d2c59dd7fc423c59ad703a82cd676761d5d7d039dc4143561cdea0ec45f474f9f26540a226ded4ab4732c1174a463a62dff7fd39ff934a5bafd98c650731d98d20a9cc61857af72e5b97fa36f1430f53b17e8e7e148189a2ae152365ba4602921fbb2b1c285a471f9a31af1b6611aeb1ddde8d1a"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) 1.30649429s ago: executing program 0 (id=2259): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f000001b000)=@newtfilter={0x35e4, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @filter_kind_options=@f_route={{0xa}, {0x359c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x93}, @TCA_ROUTE4_TO={0x8, 0x2, 0x3c}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xd}}, @TCA_ROUTE4_ACT={0x3578, 0x6, [@m_skbedit={0x194, 0x1b, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x64b1, 0x7, 0x1, 0x9, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x80000001, 0x3, 0xa65, 0xc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xe}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x7, 0x4, 0x400, 0x7}}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x1f04, 0x7, 0x0, 0x0, {{0xa}, {0x1e04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x3ff, 0x5, 0x4, 0x2, 0xa3}, 0x1, 0x3, [{0x56c, 0x4, 0x1, 0x9, 0x2, 0x81}, {0xfffffff8, 0x721, 0x2, 0x3, 0x4}, {0x800, 0xb6a6, 0x0, 0xfff, 0x4, 0x1}, {0x0, 0x4, 0xffffffff, 0x2, 0x8, 0xa}, {0x800, 0xffffff01, 0x4, 0x4, 0x40, 0x5}, {0x5, 0xe0000000, 0x7fff, 0x70d, 0xffff, 0xd5}, {0x4, 0xfff, 0x0, 0x4, 0x7, 0x1}, {0x3, 0x3, 0x335, 0xbd5, 0x1}, {0xfffff801, 0x7, 0x0, 0x36, 0x1, 0x4000000}]}, [{0x5a069429, 0x0, 0x8, 0xf, 0x3, 0x9e3}, {0x8, 0x5, 0x800, 0xfffff104, 0x8}, {0x7, 0x5c, 0x5, 0xc3, 0x8, 0xe96d}, {0x4, 0xe8e, 0x9ee, 0x8, 0x462, 0x101}, {0x1, 0x6, 0xfffffff7, 0x8, 0x8, 0x800}, {0x3, 0x1, 0x8, 0x4, 0x4, 0x3}, {0x8000, 0x9235, 0x4, 0x6, 0x4, 0x2}, {0x8, 0x2, 0x3a9, 0x0, 0x0, 0x8001}, {0x4, 0x3, 0xffff, 0x0, 0x5, 0x7ff}, {0x8000, 0xf, 0xfffffffc, 0x2, 0x2, 0x2}, {0x4a0, 0x6e2ad0ab, 0x9, 0x8, 0x9, 0x20ad}, {0x10, 0x3, 0x94a5, 0x2, 0x6, 0x76}, {0xad59, 0x4, 0x2, 0xa6, 0x1, 0x7}, {0x6, 0x0, 0x0, 0xd5, 0x3, 0x100}, {0x6, 0x4, 0x100, 0x4, 0x7, 0xd}, {0x1, 0x1, 0x131, 0x14, 0x9, 0x8}, {0x1000, 0xfffffffd, 0x4, 0x3, 0x9, 0x2}, {0x1, 0x41, 0x7fff, 0xfffffff8, 0x9, 0x7fffffff}, {0x2048, 0x3, 0x1c000, 0x3ff, 0x3ff, 0x9}, {0x5, 0xff, 0x3, 0x3, 0xf, 0xc78}, {0x1, 0x8, 0x6, 0x6, 0x3ff, 0x8}, {0x7fff, 0x2, 0x4, 0x10001, 0xfffffffb, 0x9}, {0x2, 0x7, 0x1e4c, 0x48, 0x8, 0x800}, {0x1, 0x6634, 0xb, 0x61, 0x7, 0x9}, {0x9, 0x8, 0xe, 0x80000001, 0x22b, 0x9}, {0x9, 0x5, 0x2, 0x1, 0x9, 0x7}, {0xb98, 0xffffffff, 0x10000, 0x70, 0x2, 0xd}, {0x7, 0x6, 0x10000, 0x0, 0x0, 0xd8d}, {0x5, 0x9, 0x3, 0x2, 0xe, 0x1}, {0xfffffff8, 0x4, 0xfffffffa, 0x7, 0x6, 0x7a}, {0x0, 0x4, 0x4, 0xb9f, 0xde6}, {0x4, 0x7, 0xffff9b49, 0x40000000, 0x2356ea80}, {0x7, 0x1000, 0x4, 0x7, 0x9, 0x9}, {0x4, 0x7, 0x9, 0x9, 0xffffffff, 0x80000000}, {0x2, 0x2, 0x1, 0x0, 0x5, 0x7}, {0x2, 0x6, 0x7, 0x8, 0x4a8, 0xc9}, {0x10, 0x8, 0x5, 0x6, 0x5, 0x39c21591}, {0x8001, 0x3, 0xfffffff8, 0x0, 0x2, 0x80}, {0x2, 0x5, 0xfffffffa, 0x7f, 0x1, 0xcf4}, {0x4, 0x6821, 0x8, 0x8, 0x4, 0x401}, {0x7fff, 0x5, 0xc2, 0x600000, 0x2, 0xfffffffd}, {0xfffffffd, 0x7, 0x1, 0xac, 0xff, 0xc0b}, {0x7fff, 0xef28, 0x1ff, 0x2, 0xa00, 0x2}, {0xd, 0xb72, 0x2a, 0x80000000, 0x6, 0x7}, {0x4, 0x15, 0x6, 0x2, 0xd11, 0x4}, {0x3ff, 0x1000, 0x7, 0x9, 0x9, 0x6}, {0x4, 0x0, 0x6, 0x8, 0x9, 0xa6}, {0xfffffffa, 0x1000, 0x5, 0x3, 0x0, 0x5}, {0x10000, 0x8, 0x6, 0x7fff, 0x3, 0x7}, {0xffff, 0x48e5, 0x8, 0xf939, 0xff, 0x6}, {0x7, 0x689, 0x98, 0xa, 0x1bd4c48e, 0xa91}, {0x80, 0x4, 0x1, 0xa57b, 0x8, 0xa}, {0x8, 0x9, 0x40, 0x3da7, 0x2, 0x78}, {0x2, 0x4, 0x80, 0x100, 0x8, 0x5}, {0x0, 0x4, 0x2, 0xff, 0x400, 0x3}, {0x4, 0x2, 0x5c87, 0x3, 0xf, 0x4}, {0x5, 0xfffffff9, 0x4, 0x418c3fb5, 0x7, 0x401}, {0xfffffffc, 0xfffffffe, 0xda, 0x1, 0x4, 0x6d29}, {0x1, 0x1, 0x0, 0x0, 0x7, 0x8}, {0x8, 0x80000000, 0x80000000, 0x1, 0x7fffffff, 0x10001}, {0xff6, 0x3ffc000, 0xfffffff8, 0x7, 0x0, 0x5}, {0x9, 0x6, 0x9, 0xc, 0x90b2, 0x7}, {0xe8, 0x487, 0xfffffffd, 0x40, 0x7f, 0x8}, {0x2, 0x4, 0x4, 0x2, 0x7ff, 0x6}, {0xe998, 0x7, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x4, 0x1000, 0x0, 0xffff, 0xffff8f72}, {0x8, 0x8, 0x1, 0x8, 0x81, 0x1}, {0xfffffffe, 0x94e, 0x7, 0x2, 0x0, 0x2}, {0x3, 0x8, 0x9, 0xfffffff3, 0x2, 0x5}, {0x2, 0x7e98, 0xfff, 0x5, 0xe4b, 0x3}, {0x0, 0x0, 0x1, 0x0, 0xb, 0x1ff}, {0x9, 0x0, 0x80000, 0x1, 0x62f5c2e5, 0x3}, {0x2, 0x4, 0x0, 0x5, 0x7ff, 0x6}, {0x305, 0x9, 0x4, 0xf, 0x6, 0x6}, {0x9, 0x4, 0x1ff, 0x3, 0x3, 0x3}, {0x6, 0x3ff, 0xd, 0x2320a0b, 0x9}, {0x10, 0x6, 0x2, 0x7, 0x0, 0x4}, {0x7, 0x4, 0x0, 0x6, 0x915, 0xb1}, {0x7000, 0x40, 0x73, 0xd0ed, 0x4, 0x400}, {0xfffffffd, 0xab, 0x200, 0xa, 0x4, 0x3}, {0x857, 0x8, 0x5, 0x10, 0xa, 0x5}, {0x8, 0x7, 0xfffffffd, 0x1, 0x9, 0x7}, {0xce8, 0x4, 0x1, 0x7, 0x9, 0x2}, {0x1, 0x2, 0x10001, 0x4, 0xe, 0x7d11}, {0x1, 0x7fffffff, 0xffff0000, 0x800, 0x0, 0x7}, {0x0, 0x3, 0xfffff450, 0x40, 0x0, 0x2}, {0xc, 0x7, 0x3, 0x7ec, 0x3, 0x8e}, {0x9e, 0x6d8c, 0x7, 0x4, 0x9, 0xa}, {0xd, 0xd79, 0x3, 0x2, 0x7fffffff, 0x9}, {0x1, 0x10000, 0x7, 0xfffffff4, 0x7e, 0x5c}, {0x401, 0xfffffff7, 0x6, 0x3, 0x300, 0x6ffd0a2d}, {0xb7, 0x7, 0x9, 0x97b, 0x1, 0x1}, {0x1, 0x8, 0x665, 0x0, 0x9, 0x101}, {0x6e5, 0x4, 0x1ec, 0x6, 0x9, 0x8}, {0x10, 0x80000000, 0x80, 0x1cba, 0x2876, 0x53}, {0xc, 0x4, 0x2, 0x2, 0x3, 0xf4a}, {0xd8a, 0x7, 0x9, 0x9, 0x3, 0x1}, {0x7fffffff, 0xffffffff, 0x7, 0x4, 0xe63b, 0xffffffff}, {0x1, 0xf, 0x0, 0x5e81, 0x6, 0x4}, {0x11e, 0xf, 0x5, 0xfffffffb, 0x7, 0x3}, {0x2edb, 0x10001, 0x1, 0x1, 0x4, 0x2}, {0x4, 0x400, 0x3, 0x7, 0x3, 0x4}, {0xfffffffc, 0x200, 0x82, 0x1ff, 0x0, 0xd}, {0xfffff557, 0x7f, 0xfffffff8, 0x5, 0xc6a8, 0x9}, {0xfffffffc, 0x8, 0x7, 0x8000, 0x17b, 0x1}, {0x5, 0x4, 0x17, 0x77, 0xfb, 0xcf}, {0x1, 0x1, 0x0, 0x40, 0x5, 0xc51d}, {0x3, 0x4, 0x10000, 0x3, 0x6, 0x3f7a}, {0x7, 0x0, 0xfffffff8, 0x6, 0x4, 0x5}, {0xfffffffa, 0x5, 0xffff2104, 0x10000, 0xe61, 0x2}, {0x5, 0x80, 0x80000001, 0x200, 0x3, 0x7}, {0x40, 0x9, 0x6, 0x0, 0x8, 0xe2c}, {0x2, 0x9, 0xb, 0x80, 0x4, 0x9}, {0x800, 0x0, 0xc, 0x0, 0x3, 0x4}, {0x7, 0x9, 0x82d, 0xa, 0x1, 0x4}, {0x5, 0x5, 0x5, 0x2, 0xde, 0x7fff}, {0x2, 0x8001, 0x5, 0x9, 0x2, 0xfffffffb}, {0x5, 0x7, 0x0, 0x7, 0x6, 0x5}, {0x6, 0xfb7d, 0xca9, 0xd1f, 0x8, 0x4}, {0x4, 0x1, 0x4, 0x282, 0x7, 0x7}, {0xffff, 0x2e0, 0xfc000000, 0x7fffffff, 0x7, 0x56bd}, {0xb, 0x0, 0x40, 0x5, 0x8, 0x2}, {0x800, 0x29, 0x800, 0x7, 0x7, 0x8}, {0x9, 0x3, 0x800, 0xbeff, 0x1, 0x8001}, {0x9, 0x9, 0x34a, 0x5, 0x9, 0xffff5baa}, {0x8, 0x7, 0x7ff, 0x3, 0x7f}, {0x0, 0x3, 0x40, 0x7, 0x8001}, {0x80000001, 0x2, 0x8000, 0x0, 0x71, 0xff}], [{0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0xf}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x24636f264f620a4b}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x17acf67ab56a0169}, {0x2, 0x1}, {0x7607a8236f42ac8e}, {0x4}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x2}, {}, {0x5}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0xc15d, 0xeb6, 0xffffffffffffffff, 0x10001, 0x4}, 0x40, 0x6, [{0x5, 0x6, 0x0, 0x4, 0x2, 0x7}, {0xad6, 0x1, 0x0, 0x6, 0x1e1, 0xa}, {0x1, 0x9, 0x9, 0xaf, 0x7, 0x2}, {0x3ff, 0xfffffffa, 0xc, 0x10001, 0x1, 0x200000}, {0x8, 0x8001, 0x717, 0x9, 0x4, 0x8000}, {0x1, 0x5, 0x40, 0x4, 0x0, 0xfcd0}, {0xb2, 0xf8, 0x3, 0x3, 0x3}]}, [{0x8, 0x0, 0x7, 0x0, 0x3782680f, 0x1}, {0x8, 0x7, 0x3ff, 0x9d, 0xcb6f, 0x4}, {0x800, 0x8, 0x40, 0x1, 0x6, 0x7fffffff}, {0x9, 0x7fffffff, 0x9, 0x0, 0x800, 0x7}, {0x4, 0x10, 0xa97, 0x3ff, 0x4, 0x4}, {0x0, 0x4, 0x0, 0xfffffffa, 0x7, 0x3fa5}, {0x74f, 0x8, 0x1, 0x990d, 0x1, 0xe}, {0x5ba, 0x4, 0x9, 0x4, 0x1, 0x400}, {0x1, 0xffff8000, 0x4, 0x8, 0x3, 0x1}, {0x1, 0xfffffff9, 0x2, 0x2, 0x1000, 0xfffffffb}, {0x6, 0x5, 0x79a1d2fd, 0x52, 0x4, 0xb92}, {0x3, 0x8, 0x4, 0x8, 0x3ff, 0x5}, {0xd9e4, 0x7, 0x17, 0xb5c, 0x8, 0x1}, {0x5, 0x5, 0x9, 0x5, 0x7fff, 0x5}, {0x5, 0x2, 0x244d, 0x40, 0x1, 0x2}, {0x20000000, 0x9, 0x6, 0x80000001, 0x3, 0xf5800000}, {0x0, 0xdb, 0x8a, 0x7, 0x7}, {0x7, 0x2, 0x8, 0x8, 0x8, 0x4}, {0x800, 0x4ac, 0x7f, 0x2, 0x3}, {0xb, 0x7, 0x10001, 0x7f, 0x3, 0x6}, {0x31b, 0x3, 0x324, 0x100, 0x8, 0xffffff21}, {0xfff, 0x5, 0x3, 0x4, 0xfffff99d, 0x9}, {0x8, 0x3, 0x3ff, 0x8c5b, 0x3, 0xe24f}, {0x10001, 0x3e6f, 0xff, 0x1, 0x6, 0x6}, {0x4, 0x8000, 0xf, 0x3, 0x5, 0x98000000}, {0x1, 0x10000, 0x4, 0x58000000, 0x40, 0xffff}, {0x80000000, 0x5, 0xe, 0x3, 0x4, 0x5}, {0x4, 0x6, 0x7, 0x2, 0x2}, {0x0, 0x1, 0xf35, 0x2, 0x8, 0xd9}, {0x80, 0x100, 0x81, 0x3, 0x6, 0x8}, {0x8, 0x0, 0x5, 0x8d, 0x6, 0x200}, {0x4, 0x7, 0x8, 0x0, 0x3, 0x5}, {0x6, 0x1, 0xb, 0x8, 0x7, 0x4}, {0x3, 0x800, 0x7, 0x100, 0x57a, 0x10001}, {0x2ee21f6e, 0x5, 0x39, 0x51cf, 0x2, 0xf}, {0x7, 0x7, 0x3, 0x40, 0x9, 0x7}, {0x5, 0x5c, 0x2, 0xc, 0x5c1eeaa7, 0x10000}, {0x7, 0x10001, 0x5, 0x3, 0x0, 0x749d}, {0x3, 0x5, 0x9, 0x6, 0x3, 0x3}, {0x1000, 0xe2, 0x3, 0x907a, 0x7, 0x6}, {0x7, 0x200, 0xd9, 0x1, 0x2, 0xffffffff}, {0x14d3, 0xf, 0x5, 0x7, 0x3, 0xbc35}, {0x9, 0x9f8, 0x6, 0x1, 0x6d2}, {0x8, 0x5, 0x4, 0x0, 0x7, 0x138}, {0x8, 0x3, 0xe, 0x5, 0xa, 0x5}, {0x6, 0x2, 0x9, 0x8, 0x3, 0x2}, {0x401, 0xfffffff8, 0x3, 0x1, 0x0, 0xa5}, {0x7, 0xb3a4, 0x5, 0x4b06b4ad, 0x2, 0x52fb58ee}, {0x8, 0x7fff, 0x21a7, 0x1, 0xd10, 0x6}, {0x9, 0x7ff, 0x8, 0x1, 0x3, 0x9}, {0x936, 0x7fffffff, 0x5, 0x0, 0xffff0fa6, 0x4}, {0xa, 0x8, 0x3, 0xb3ca, 0x100, 0xfffffffb}, {0x6, 0x401, 0x1, 0x7f, 0x7ff, 0xfff}, {0x4, 0x100, 0x3, 0x2, 0x6, 0x6}, {0x7, 0x9, 0xff, 0x4, 0x3ff, 0x7}, {0x10001, 0xffff8001, 0x5, 0x0, 0x5, 0x10000}, {0x5, 0x1, 0x22, 0x339, 0x7, 0x6b11}, {0xd94, 0x7, 0x7, 0x8b, 0x5, 0xd1c}, {0x81, 0xd3, 0x8, 0x7, 0x4f, 0xffff}, {0x0, 0x81, 0x82, 0xfffffff7, 0x2, 0xd}, {0x22ee, 0x9, 0x7fff, 0x12c, 0xd4f, 0x200}, {0x0, 0x424439e2, 0xe, 0xffffffff, 0x6, 0x10000}, {0x1, 0xffff, 0x1, 0x401, 0x7, 0x8}, {0x7fff, 0x0, 0x3, 0x9, 0xa, 0x4}, {0x4, 0x4, 0x2, 0x2ebe, 0x0, 0xe}, {0x0, 0x0, 0x7, 0x200, 0xff, 0xc}, {0x6, 0x7d, 0x5, 0x4b, 0x3, 0xaa}, {0x5, 0x4, 0x1ff, 0x8, 0xc}, {0x6, 0x4, 0x7, 0x6, 0x7, 0x8000}, {0x1, 0x552c, 0x6, 0xd13c, 0x8, 0x1}, {0x8, 0x2, 0xffffff6c, 0x6, 0x3, 0x20000000}, {0x80, 0xf6, 0x101, 0x400, 0x8, 0x5}, {0x10001, 0x10001, 0x9, 0x6, 0xf, 0xd}, {0x8, 0x51c6, 0x8, 0x8, 0x101, 0x11}, {0x2f21, 0x8, 0xa536, 0x2, 0x6, 0x2}, {0x9, 0x400, 0x7, 0x1, 0x2, 0x1}, {0x0, 0x5, 0x577f, 0x5, 0xfffffff8, 0x7}, {0x4, 0x10001, 0x9, 0x7, 0x3, 0xed8}, {0x7, 0xff, 0x3, 0x80, 0xc0f, 0x101}, {0xfffffff7, 0x0, 0x8001, 0x1, 0x9, 0x8}, {0x800, 0x1, 0x80000000, 0x9, 0x4, 0xfff}, {0xffff, 0x2, 0x39, 0x3, 0xd6, 0x4}, {0x3, 0x1, 0x0, 0x7f, 0xb11, 0xb2}, {0xfffffff9, 0x52f, 0x7, 0x2, 0x9}, {0x3, 0xc1, 0x10, 0x9, 0x0, 0x6470ce12}, {0x7fffffff, 0xa1, 0x9, 0xcf45, 0xa07, 0xffffffff}, {0x448, 0xc54, 0xffffffff, 0x29, 0xfff80000, 0xfa}, {0x8000, 0x7, 0x2, 0x8, 0x1000200, 0xb}, {0x6, 0x7, 0x2934, 0x5, 0x5, 0xab75}, {0xed8, 0xfffffffa, 0x3, 0x8001, 0x3, 0xffffffff}, {0x5, 0x80000001, 0x7fffffff, 0x3, 0x5, 0x8}, {0x7, 0x80000001, 0x227, 0x8, 0x800, 0xfffffffb}, {0x300, 0x2, 0x0, 0x7, 0xe5, 0x5}, {0x6, 0x2143, 0x0, 0x5, 0x9a, 0x3a53c0}, {0xa41c, 0x7, 0x8723, 0x1, 0x644a0e2f}, {0x101, 0x0, 0x5, 0x9, 0x1000, 0xc2f}, {0x5, 0x5, 0x5, 0x752094a2, 0xc, 0xd}, {0xc, 0x5, 0x8, 0x0, 0x0, 0x5}, {0x0, 0x10001, 0x5, 0x2, 0x6}, {0x4, 0x7ff, 0x4, 0xfffffffb, 0x2}, {0x5, 0x9, 0x10001, 0x69, 0x4367, 0x7}, {0x1bce06c, 0x2, 0x9, 0x101, 0x4, 0x5}, {0x81, 0x537, 0x2, 0x7, 0x9, 0x9}, {0x5, 0x1546, 0xe0000000, 0x7, 0x4, 0x9000}, {0x1, 0x3, 0x4, 0x20, 0xa, 0x3}, {0x2, 0x4, 0x3a, 0x4000, 0x2, 0x2}, {0x3, 0x1f, 0x2, 0x0, 0x3, 0x8}, {0x3, 0xfffffff7, 0x1, 0x7, 0xffffff81}, {0x540, 0xfffffff7, 0x6, 0x2, 0x0, 0x2}, {0xfff, 0xfffff2d3, 0x4, 0x8001, 0x1, 0x6}, {0x10001, 0x9, 0x2, 0x3, 0xa45, 0x2}, {0x6, 0xc, 0x53, 0x4, 0x91bd, 0x3}, {0x3, 0x7, 0x0, 0x2, 0x800, 0x5}, {0x800, 0x9, 0xfa, 0x4, 0x6, 0x7ff}, {0x0, 0x0, 0xfffffffd, 0x2, 0xe, 0xac85}, {0x0, 0x3, 0x9, 0x10001, 0xcf, 0x3}, {0x1, 0x4, 0x2, 0x9, 0x9, 0x1}, {0x1, 0x8, 0x7, 0x3, 0x7, 0x800}, {0xfffffffe, 0xe, 0x0, 0x0, 0x7, 0x93e}, {0x57, 0x3ff, 0xcd, 0x27dd, 0x7f, 0x7}, {0xb, 0xffffffff, 0xb, 0x3, 0x9, 0x9}, {0x2, 0x135, 0x0, 0x4, 0x6, 0xc}, {0x128f, 0x0, 0x9, 0x5, 0x8, 0x6}, {0xd, 0x10001, 0x9, 0x22e9, 0x1, 0x4}, {0x2, 0x0, 0x2, 0x58, 0x80000001}, {0x8, 0x7, 0x2, 0xffffffe6, 0x4, 0x3}, {0x3, 0x40, 0x5, 0xa19, 0x5, 0x9}, {0x8, 0x9, 0xb, 0x4, 0x1ff, 0x2}], [{0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x56d459df17e0a927, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x2, 0x941b85fa4dd245ef}, {}, {0x2}, {0x4}, {0x4}, {0x5}, {0x0, 0x24eee4b828d3f902}, {0x5}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1}, {0x4}, {0x2}, {}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x4}, {0x5}, {0x5}, {0x4, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}]}, {0xd6, 0x6, "e269b53d922931a993ac2536612e6b693b86f9f2edb58fa2912bd1d1f7bd039ea2f006cc77b986105b2c1fb56bd4b5142b598772962ea8c0783fbc7d0a60b77e50798402628b13c441525ea77007f15b72d8820c7581270ded3f60bb710d4bac9e696174217a2390d67851e7341b05cff87744f397307874002dad215f0c8979cbed22933ec9f2ea6b7a25e9f1cd5dd01132095f30c18dfe85de8e672f907a64c5464260a16def013769cb066a5c3d9e5702cfaf9518c1949e294fb113b0d61a3a6d9eb7d4c7404951a23f866de71c32f8db"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_nat={0x114, 0xf, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0xc5, 0x2, 0x8, 0x80000}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x5, 0x3, 0x1b11}, @multicast1, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdc, 0xf524, 0x3, 0x9, 0x8001}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1ff, 0x9abb92a06aa6b5a8, 0x9, 0x80}, @empty, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xb, 0x7, 0x2, 0x4}, @multicast2, @local, 0xffffffff}}]}, {0x24, 0x6, "aa93488f548cd0c8fa9fd3d5436106a43368ad3b61b8dc362573bc64ca1bdebf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x170, 0x1c, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xa1df, 0x25, 0x7, 0x3, 0x5}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x467f, 0x8fcd, 0x4, 0xfffffffd, 0x6}, @multicast2, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xf3c5, 0x0, 0x7, 0xe}, @private=0xa010101, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x5, 0x0, 0x3ff, 0x6}, @rand_addr=0x64010100, @multicast2, 0x97ac9deaa05cd195, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x4, 0x1, 0x8, 0x3}, @empty, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe3, 0x8, 0x8, 0x4}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x0, 0x7, 0x8, 0x5d}, @empty, @multicast2, 0x0, 0x1}}]}, {0x2e, 0x6, "502cbb04a194bb52306e20c387af37c36ddb191628d95390526cace8f06cb0cbd24d2a265a53515dd09f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xd0, 0x9, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xc2, 0x0, 0x2211, 0x1}}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}]}]}, {0x64, 0x6, "abe07130683b2153567ce71f8e3a8b658426838857a9523f7e7e1e606775cff98c4c1d04b507c91c66015cb20b3b18b7d066713bd78d58fdb165d01baa9c7e22871030532d0dbb0b5a8a67341bd61edf21c463d158cc537eab0d07c34d589745"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x130, 0x18, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x80, 0x8, 0x5}}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xfc, 0x4, 0xdfe0}, {0x1, 0x2, 0xd, 0x4}, {0xfff, 0x63, 0x6, 0x6c5d}, {0x0, 0x5, 0xf, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x9, 0x3ff}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x200, 0x1, 0x6, 0xe, 0xab}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x6, 0xffffffffffffffff, 0x9, 0xffffffa6}}]}, {0x7c, 0x6, "dd7dda429fda4ba69876bbdb0e79ebecfe6b365a673a890b31ced77bb291d612e0ee27172f5cb67a56efa5ff0d296eb2df1bc7d50a6e7ad9c3876e4c79e1d0a3b668d8a8f2a6c77eaad53b327d214d34ceae26066bf269596d0a6e1b0fb8d1020197cd320d69bb31e61751f16ac682daf2fe030f62441864"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x1058, 0x1f, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x1004, 0x6, "8746db4b11f853c18269330218972a89ac591872e268991034caac43b94f61eee3f8ae223ff47376e52bbe21d47ff91a2cbcd5c51a496b38ba7b255f86ae92b84e13ecfd101699a07f78d193a0183f83ffad87fa835f293c86de8514777021be2cb279e18c1b9dd0114c99137873058ddd196073b5de2f9a5a28981a197ba65e6483aea8fbffa7d065ab3d029a06f735dacb381c97ff4d263d2e42155e7185a71efae4ed612a91570754f3f6ae2c2f8c570fdd45ffb1f35fbb831d2b04ce1261c0e3474b7f972d1559cad83fefe94683b1dfdaec42ab67fad4c654a30245fd56c1bc95fc55e80885915411a3575db37693271459e0805292a8b46127baa0c7f37a1cec1ea6a55bb3366286bf0282d7b09dbad5a26e1a87e41bb4914126f7f1c60ebb420d51a37d2f9f93f31f21689456cef82e67975fd4590e5df87280042382d01921c74ca65fd9b360e08f5bace7b45be42d7746af5af6cfa82a4a1094fc2157512d3741730867e0a15e4759749f476af10307e69b3c3065e06bbc9ec353e441a2f2ea1b0d639c42ac30fd72156d5865bf43083d30be3fb8021d66706ed69c914efe4bf62e7c5b2e22e6e69211e9613c859111b6b996079744fceb53ddf890f9e8afaa8cc90c37c3a37d7c6cd5f62c3959ab1ef85da630a75ec6a5f9b150ed76315bd9ff7acfe97c23b5a9edabd8057603dd20042c7ab912bfa883779e15154d38ff4dbca5bebef67681f6831ae8d0a842e79c261a93163646e6b5dc883f8e1108e62082fa4a50f7d85bc2ec10248406503f6000fb14aa8ca45099823d89045316536724129e6357c956cfbf80a30319a97376ca36c90b9548269957f9e36efa372f3e6f9a70dd6003aa42e13a1da87b6fc30f9fda843c328de41896bb63833f181343fc5912225c23013f3b97dd80a016680c3487461d17680cb7ac05cebc6b51bc541fd7d13db78a95be7eb0f1d649184981aa206a0239b3365d56b4d01613b5661d2c538aa7533058745e596ad5aa5a5b6489bc63665f5bbd97f812345bb0e701a71d9f2e0bdbe56161acf0e62bb9af4ef2d84da00c17bf38131a7353f6005bf13e4b9683810d06b657afa62a6d242a7dfefeaf047a4214a285c5957ba9b3ef8e6733542fede00f86d69e220bf06eebf528cceaf41e174b7b5d08e967e6409c4c94490881a6fe9e48a7f635b31c2c687033e877a44618b9f1116f86731e2006c71a1b25eaff6d1c08291b2ea98128cfd99e58f77e8c91f144d139d3002c63bd7c15b31c0a23cf25ad06802a11327c6e7faba2d1b2207f549681445f1aae99c1deb4b39360f97ef8f8676393b92aa198c903037acea1e5e2d4a6537bd24927774f8af5b2884ba398fb8fd2f6fb3a0817bd4cb96984ef88bfedf737b23dab789c457772ec58a6128f5930ad666a991af3f03fd8dbdee60df94bd2cf828d777ab8fa442155a8cf2efda5cb2504d58f7b916ca7f8e29d1ac60af10a34a8372355d4d40ac80ae6c71dc0910e5bbcc2b5025f0e86c5d984d74ca7b47f88ef108222cac4f4a39bd37141cdf46909e0efdee91ebd50c0c3c19366a721bf460b4a00552bb52cd9a6369bbd99af742b58561c6108a2ee34af3c214654d1e5b15abdbb890fef5c98a3487664edb430e25d58077ca31e7c11c8c696c720be2f43092f6549d0d5a4bd40340aead6235602e86233580c38a8eb7c9ff542a5914f614702b461d0d6389e73572ea49025b5e070244db8eb86ef6579efbad888b0924a357a3b531c5ab9a5cb8be01389ff298e1532ddc1e0a979ffb80a700e1f4706357b22d6ebd7471016a9199670a3b7ca83c158d790c439a5658b57e283655bfc7ff61be845e2af99fb828af04b1e7e50639e7ee17eb0395ec62b704623da5789218f17729d04072c25f3e55fbcad0860706e1bca3270bc9d4144a7ea3179e00fdd5dd7ef39da5d08e64345cf9a1dfed16670786f2bd32ab3dbdd2178af5f1f7509a7020a0cef70d642649d1c30cd2b7008bd4b2ca67f37bc468dc15fc1e04bbc1a494499a3c9376785926ec53410c8b465f7265bcdb903bd1b62864dc3dbe793dd760683391f2754ced67c0d114bcead7e0bc82b833b6e2f301dffe920e9615e89e19d880a3400390b6f9dbee0868e31bc5c68f6a9d2c7fd8b58ec0b35aa0b4388a9c3cc9f9f955d0d5fb288680787ab99efa5c36eb4db4b8be44afe78454a0a46550a804ee04e2f57edd7fb7b7ff52df27b302300032e6802807212b03815b602a04af77ec328ab4a1fd183d67d0a04ef8c2831658d43df0803d9f358087fd7e3fde696822db5ddf2ea13d6e8d6440614b2ec5381a58256ea845e0bda8b27337a9d94ce4300def2bdc2a53f39406e7a31cb5c056a1a7535afc63be9c3e44db35f19406df66b73db571aff022cb54a559d09272db86019f82a4625d46c55cf0ec0b0f77c8782e5dd6451fd43e7734f13ec3492678bdc0e5b040af7c262e3317f073cc6523a739707d2789364d7d41a43bce2e9192b28b11102d10565df9eb5d23becc1b1c67f76853dc063d6e159000d2cebdc1cd9d74881d9ad55f52dfa57e8f29ba3079444ec79bee212ef8e9dfb2a7b6aa2c26bd5cfb3a947a8af832b1140636cb6833f5abdd4348e60869baf62a4cc357e0cd8273d27645590dfa31d83408012621309ad9e5989219a4a9710d302993bd4775abcd21b694acd973c43d2c4fc2f9b3235313f7dd97475a92958db8bd2f87e127e7c5ea41e2e08c91a91c99009483ef90972469a289526f896cc45bd227ae372deb308b51fff05307c0dc428b275f960071569003c7016bff16b27357e381f234fb235c1ba85caaca306e859baee3f9e57fcb250bfa12727908d53393d53696cd1722fde9494d854452291358c007b8ce2639036a370973975a7531bc961478e6aca3d92e7c40d27b1c9ecde83326e163b002b165856ba6741fba7d5f4bbc6274203731d96becc33d9f0fc840c18f2adf76c0fda2246068835125dcd9ccb6260560757482d20999630a6f2ea4d8f011dac6e854a8617ddf9e72ac81d3026d6d1c8e4f8293dd41f128fe11b1958a3bb2357a8ec2a09404548163170c53f2d539b36649a42fd4b8725e23f0fde2b1cf0fcd5a728a9c4efb2df462495b91c327aa4864d524e9e02887f0016a328bb0910669f9391fba032d5ed07c114d8db9fc87b068a6b54859a7cf04b199ea1d3130762232da4f38360c503ed1180192516f3a9b8cc316217fa8aeb0cdd41b2527dc060d8454d87f99396050a90772e3eb42e33edfc5bba7dc944048f44b613cbc1dece114fa7a1e3e508f49a01dcd812159afaf3495b2f214f191c4a727baf12bb0d009bda0a46952a23a307f433b866f5321ed6a97e11ac28abe527ebe498ba5d7c28e0cd8c950890f77aef31b41ed52aacdaf5f4ef5ff8dc0d0bf33e13bbb8d42d6a15b45eb70c50c4aeb08a0c9684fa6627f8275c9671b1f0c8742771d331f6b193f6f338ced05ed222d444e3db13aa28c82413ce8dfe54cf55fcca6516cb7f46835225a6db70384d208fd3193c6490816a2371aefa456dca1130da86100876d2fead460745c9fa44a64927a4719a512586df82d2c2228c29df94b7a18a62630ffd1cff6759f73df321b7519a642d36ef9f14e0fb6c86fec31313ceb82aa33815354957fd972b9489366fb77a344ceae42d8047116227ae92abfa835a96c751b4f1f6a59a1ad14877a9aa9eacb9027c27de73cab99fda6e7e69c69829c0b9e282158166e022814361218d7a07adf901ece6f31d5f745a15b7a943dc0f37514441e7da200b47b5b2434e079b1307767ffc6f6d89d2f576d9839d9eac0f18af77a75e9307027edd773a26dbd1f50d9e9457079a4e3b65ef69f502c9c72f306b14c7d437aa5d55a5db4eb67fc5e7963ca2510e684a4ee4b0904bdc01abed71e020b3d813109bb73b8bb6e043a19fc63e5c12086347880590501f27e55905cf8d8b4efb2d082b97b2d46b6f042a70bebcdc07964a6e4e065c80bcf3385b7a556e3e9d8f32a5dc9b9f5cebcbd427a793c96cb41bc0b5ab8232a785d54f0e594e47534d085b253a94c2ecb27fbd7b9d7fadbbfb6dbe2707b1155b338486ec51ff36c3dcff24c051b232717388f93ec76774e7157012dc215eebc647f165438ed26ed8d0fd369abf4359620a52aa20b5224dec3e343135502c97cecf8ec1824a26c28480974978d0671f997c8b91d265760ee2957d071118aea7885d6112bf69af6b1bbd38d527e344f6e6e4e4347de6045b17efbcc926095532b2e741f49381a06a690c66c3c6025a35743ffb670e41716b4647ab006fa60d692b542a07b475d1bcefef08fb9b1659646373f36bc834197ab554730efc9629eb8129683a69403c3e026059bbf14abe3fa9a04cc75198dee5efa9c100e19f2108696e1ca55a38b00a9b6b6162c7fa747c774dcffcf37ff49f6dd92d8a2ee85c21ebcb47365f05ffe3bdb8176c2581feee087debd620517f362662f0e01f2cd8b0f6848757b2686aa0891d5fc710744cf275fcb7a8e078dabd5205514447fce6f2eb0e05d505b77c7402de35d9cc5021740f777a2d6d3b4da3ea63f3620217aad69d024324ba931e5890f716e3e83399f208a9eadc196c63b15701b055359b3e5aad8f27c144b538499cffc9ddd46ebe087601eedd089bf71f66d97af095bb7833b912dda87727f1e813a5dbb202ee8384a3512ffcfdc2146514f78956370105c259663cbb9af9a02e418a8b1d6c513b053938a92e21007dde8f10c8a40ad6fa4f8a86a2f7b5c378fe98c8bcd19c99dbadbe49b1bd4420760c1ca3cea8eacd8bc49c9e332802c30d7fee690636b6c59a308d5bd071a71ec2dceb530386bb2cde7fabfcb5465076bfbdd3b59596bcbacb349bc159aeff4632d754a5dd147293a7f4784a4cc6012ec02e0a5b61767fdcbed3a46bcc8072856437706f9d5de17d657da893fe667e6c721080ea87b3b4b54a1c4a26fb81eb2208066e010af304461f603afa0f2d6aebda3b8155384a1479f5a064ff3a487666032488d131ff2e00068dd804c271272f5d7ba0fe23f3c0fdda11b044a3b00ded35d37e91adedcab1950ce10563ee65ac2d2f224ccdb03a7cf7eca63e9abaa19f55b71dfe53b227c284eeec7b2c3cafc26be6ebf6d38ea7650b6e8e86edb039262fbf4544c82c78a9030601e951653215dd66fc259f6abf4332ee378f09fc5d1b3dc3d3627703ccdfb11c5af6953ab2e45dc43c440ff5d07a6b8720f8c407de2e5cae6795b67736dec335a2b866b4e7b050ce43b507a50ee60f1e4147464046f6ce2d0838e58f5fdcfdaa9feba12c86716821f088dbc3dfe06c6efb936a1fb7fda3987370cba6e08c6540a0d17eaeea56c29224cdc81a675139955df1a3f0a545a82d41d29a7f46fb6be0af6ad43ffff2db0503bdaafd4f50741605523230ad75d248df9360260a6bd37814f4685e432c45c6ca9475952164a39eb6cbe17c5bc95d8531d3a2024c78d6a57cceffde70d9e8f1b7e7dc2721e5cafaefdb5834d7a7e1d1c066e769491f99c4816c2e64d82a0f426421f6ca1afc2ea65830e54e28467bf25e857cd76bc4068b54744aa4f5fd497f4d5e80e45507e5ea540325b73a2fc3edd504e919cccac9f50dc2f079cb572cf57624665310118b827e5475abd55ebd6d72115ef27399ababbc757049035375bd960e6e9b54fa0d8b056f5d494a484d5375f40e97efbd5f176bb1daba9577bb764e09078761acc00102fa807ef41d2e173702e13aad0f45b1dfa9b8a51f6573b388a249"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}]}, 0x35e4}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000037600)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x6ae) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000014000000040000000500000000000000", @ANYRES32, @ANYBLOB="000082a0c37400000000000000000000c7f57a55", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000200), &(0x7f00000002c0)=@tcp=r1}, 0x20) recvmmsg$unix(r4, &(0x7f0000005040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10040, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2", 0x22}, {0x0}, {&(0x7f0000000080)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a", 0x29}], 0x3}, 0x0) epoll_create1(0x80000) 228.870856ms ago: executing program 0 (id=2260): pselect6(0x0, 0x0, &(0x7f0000000640)={0x8, 0xffffffffffffff77, 0x8, 0x3, 0x8, 0x1, 0x8, 0x2f}, &(0x7f0000000680)={0xe, 0x2, 0x3, 0x33638e03, 0xa720, 0x6, 0xa, 0x2b0e}, &(0x7f00000006c0)={0x0, 0x989680}, &(0x7f0000000740)={&(0x7f0000000700)={[0x8000000000000001]}, 0x8}) timer_create(0x3, &(0x7f0000000a00)={0x0, 0xe, 0x0, @thr={&(0x7f0000000840)="fc83b705ef85cd654d0e887d7b225e9b4fa9b0957952006a65ab5a5aa99b93c4372b36c1c5dc5350e95ae9a5e3c0922eee6b413dc3c07e476269035a3b7a0916bcd59ba2bef9beca9767420eda0c8597ce0d574abfdb047090e80276e1ca2e53d0640d7a19280acc1ddce8c020823eccbf9f6fc316bb44009f1ec9042f4a77b409a82e8327727cc26d0c3ac4c542412b6672e5ccdabf1348b942fbe486913ead86bfdeba6e7cf24fd9ea6b76a9b9839d90e65f67f61d9b", &(0x7f0000000900)="026580ab39892a1e2d9ff410a6dc8b049f4e33441392154a91ef4c3a20e8095e6eb17d7750ce5e4f43b7391d02985fc77834c3354689566210269fb27a4d85f9bb15ba99c9df0294a3b7f9291c38e090b3093e2573b97b7d6d355a8865fd0f86b6118faac10dea9069280b4e39485fb453ca5d5d545e2ddaf0c0e05d19f01087e90da11e72ddece9db9bddfcf39306cdd3849a6933a844cc08a375fecdfc4c089f24d0623d9ef1ab49f509b43761dc760fa67bb72a666691b9dfd68352a5c8fc0ff345a73ea1317bdaea36a576d69330b37ef715c1c05e6d8e4dbe068833bdcc9dba1790bf92518f65b6dfeb"}}, &(0x7f0000000a40)=0x0) timer_settime(r0, 0x1, &(0x7f0000000a80)={{}, {0x0, 0x3938700}}, &(0x7f0000000ac0)) timer_settime(0x0, 0x1, &(0x7f0000000d40)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000d80)) 122.382427ms ago: executing program 2 (id=2261): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, 0x0) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f00000000c0)=0x812) ioctl$SNDRV_PCM_IOCTL_RESUME(r2, 0x4147, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) write$FUSE_WRITE(r3, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x4}}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) 0s ago: executing program 0 (id=2262): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x4, 0x16b, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x85, 0x63, 0x29, 0x40, 0x2b73, 0x23, 0x570d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x159, 0x1, 0x5, 0xd, 0xd0, 0x3, "", [{{0x9, 0x4, 0x49, 0x2, 0x2, 0xff, 0xab, 0xa9, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x30}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x5, 0x2, [0x3, 0x2], 0x5}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x0, "8d"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x9, 0x0, 0xda, 0xf}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0xb, "ae7210df"}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f0"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xa99d, 0x7, 0x6, 0x3}, [@obex={0x5, 0x24, 0x15, 0x88b}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0x5a97}, @mbim={0xc, 0x24, 0x1b, 0x20, 0x3, 0x9, 0x8, 0x6, 0xd4}, @mdlm={0x15, 0x24, 0x12, 0xd}]}], [{{0x9, 0x5, 0x9, 0xf8ba50c800bb56e7, 0x10, 0xa6, 0xcf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40}, @generic={0xb9, 0x9, "2ee24f1f7966e4cb8534a5713e8a91deb071ddf997ca7a7233c48bfc1b93351b3152348e71f6c7ac76aa2d058cf2c419c936f7017d46b8914cace6fdf4e096ffff8ae435517560b7d150fa950b3e61dee435cee78aac9239841aabba3925ab3e7f761ffb9ec44ae10aa2557917bce4683967e9e45eca288df8823bf0671d713f4adade92b3edb8c76043cf7ba7b1eaad1eea833066294a93eeda66dc4462491e853d148231f5e28d7443b2c1978825e08de28f90fb96e2"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x8, 0xfd, 0x47}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3d, 0xf, 0x9, 0x20}, 0x1c, &(0x7f0000000080)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "5031fd0d1cf084d7a77fcee318afdb89"}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x418}}, {0x44, &(0x7f0000000b00)=@string={0x44, 0x3, "c380545de2de690d2ec2e02c95e9ea553bf5f411f23bbe50d58d9eb70e76a901e9bb935a582e465007002af98e16f242b216f269bdc3fb807d24fa69ae641b9d56cc"}}, {0xbc, &(0x7f0000000b80)=@string={0xbc, 0x3, "7b167620e4a8ca4a8a9d5c6f6d113f7f9d93e27bd33817de1410f98f89ec4ef6109f6aec83abfbe1d97051471668892e3ecb0314d67e8b812b1f317c78f313ccd2a81bf6b2b21a031474ea79672b48fa8fb187f0ed28a070af4e9713814f926cd9624bb281631cb11a4ca2bfcfb75f3b0f2f0dd0573468a66ec59cd62c8d24b26aaeccb9b569fac231a9175f532e9d80aa6dea59b41e1c64f75fe2be07e5a6003e40b432faca5a6854448321c601a279b0d5f84fa10f5fdfc56a"}}, {0x42, &(0x7f0000000c40)=@string={0x42, 0x3, "e4c11e4f1d90372db2fdf19baa7bd2de2f3de20945a99f88258345f9723fdbdc518db361230474c028e4d6861703936ccce33ff4868096fe38147f3c95470eee"}}, {0xb9, &(0x7f0000000cc0)=@string={0xb9, 0x3, "dda065650e730a065602913c639449ba76c03f693262ee0dfd0cd553b1895edb2136366d7e315d14b07339a0f831fb4ccb08cf9ec24d4b6cdd00e611d55f4ab3a8e02f99cee8f6de9d7fdc734c905d3de7aa83c4b7f2fb46523c109e050c5496a390a17581135d7afd94960eeb99afeb7b178fde535d1962d7da2ca4d10afaa64edd10ac497125d75f2772c271686b2249478f32ba837f182d9c0ac3b33cefb31612a72f8949f0af97b7acfa3f0c329f176556e2af0bf0"}}, {0x72, &(0x7f0000000d80)=@string={0x72, 0x3, "a35b7f415cf555c95792e4b0e10b23052fe9b153a8a55fc07a9281832ccd2b89ba075e40886018b8df3ef4ec2d94f14750f4f8522955a6bd3500c70befaa133baffceed010912769a55c5b6d5a88e0184bec87f72f22ceb1288fc768e9346b9f6a2674754f60ab95a5275600ff38cb26"}}, {0xef, &(0x7f0000000e00)=@string={0xef, 0x3, "98df37563ac5b76cdeba89a8f95cf4dbe2fb1250d93fb42aa1fb678efa5ab3610dfccdef9ae591ad03c7588ac3b041e6b2f40d611362685892bcae32e88728ceba6eb5867aa3e6664b8ba6ae5586329776f9694fa4a430cb61086b70d51ed025da5e3ccc7bed9eca72f3456b8c5f1dd4634ba4a7a4fde64476969a743a2ddddbb782577d205d72fe2a24855c8bbfb3023416702e51cac03f4e9e9635b02bd675c59bc48ff468113d05be8eb4fca266bda268916a91f1d5b2c94dd6f6a560125ea4c40f17c2fdfcd1d39530870426f21c84befa01b9228d0d9224c311a74b90df6f71ecd418b3a1ab896da2379a"}}, {0x23, &(0x7f0000000240)=@string={0x23, 0x3, "cba2c43a433bc764a981746c1e14d7852eda9e9a96dbdc8959d98a622c8aaac0c4"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) kernel console output (not intermixed with test programs): -1: Manufacturer: syz [ 466.216411][ T5912] usb 1-1: SerialNumber: syz [ 466.336754][ T809] rc_core: IR keymap rc-hauppauge not found [ 466.336795][ T809] Registered IR keymap rc-empty [ 466.336967][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.407492][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.438439][ T809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 466.442048][ T809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input30 [ 466.473585][ T5912] usb 1-1: config 0 descriptor?? [ 466.506324][ T5912] yurex 1-1:0.0: Could not submitting URB [ 466.506519][ T5912] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 466.524496][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.538556][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.539867][ T8281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.556854][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.576796][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.596906][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.598951][ T8281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.616789][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.636901][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.643527][ T8281] bond0 (unregistering): Released all slaves [ 466.656826][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.661311][ T8281] bond1 (unregistering): Released all slaves [ 466.685057][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.696775][ T809] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 466.726036][ T809] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 466.726065][ T809] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 466.806352][ T809] usb 6-1: USB disconnect, device number 34 [ 467.015849][T10597] hsr_slave_0: entered promiscuous mode [ 467.018638][T10597] hsr_slave_1: entered promiscuous mode [ 467.020850][T10597] debugfs: 'hsr0' already exists in 'hsr' [ 467.020916][T10597] Cannot create hsr debugfs directory [ 468.041384][ T31] usb 1-1: USB disconnect, device number 63 [ 468.172467][ T7035] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 468.336706][ T7035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.336764][ T7035] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 468.336789][ T7035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.417030][ T7035] usb 3-1: config 0 descriptor?? [ 468.440935][ T7035] pwc: Askey VC010 type 2 USB webcam detected. [ 468.466756][ T5884] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 468.596942][ T5969] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 468.626913][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 468.630014][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.630071][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.630103][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 468.630128][ T5884] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 468.630153][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.631894][ T5884] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 468.631924][ T5884] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 468.631946][ T5884] usb 6-1: Manufacturer: syz [ 468.646052][ T5884] usb 6-1: config 0 descriptor?? [ 468.756792][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 468.759462][ T5969] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 468.759488][ T5969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.759508][ T5969] usb 1-1: config 0 has no interface number 0 [ 468.759633][ T5969] usb 1-1: config 0 interface 101 has no altsetting 0 [ 468.762821][ T5969] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 468.762847][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 468.762866][ T5969] usb 1-1: Product: syz [ 468.762932][ T5969] usb 1-1: Manufacturer: syz [ 468.762948][ T5969] usb 1-1: SerialNumber: syz [ 468.855971][ T5969] usb 1-1: config 0 descriptor?? [ 468.865321][ T5969] hub 1-1:0.101: bad descriptor, ignoring hub [ 468.865363][ T5969] hub 1-1:0.101: probe with driver hub failed with error -5 [ 468.880316][ T7035] pwc: recv_control_msg error -32 req 02 val 2b00 [ 469.085502][ T7035] pwc: recv_control_msg error -71 req 02 val 2c00 [ 469.086119][ T7035] pwc: recv_control_msg error -71 req 04 val 1000 [ 469.102775][ T7035] pwc: recv_control_msg error -71 req 04 val 1300 [ 469.103678][ T7035] pwc: recv_control_msg error -71 req 04 val 1400 [ 469.104348][ T7035] pwc: recv_control_msg error -71 req 02 val 2000 [ 469.105799][ T7035] pwc: recv_control_msg error -71 req 02 val 2100 [ 469.106459][ T7035] pwc: recv_control_msg error -71 req 04 val 1500 [ 469.114437][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.115619][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.132683][ T7035] pwc: recv_control_msg error -71 req 02 val 2500 [ 469.136759][ T5884] rc_core: IR keymap rc-hauppauge not found [ 469.136801][ T5884] Registered IR keymap rc-empty [ 469.137168][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.156953][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.164700][ T7035] pwc: recv_control_msg error -71 req 02 val 2400 [ 469.189883][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 469.196755][ T7035] pwc: recv_control_msg error -71 req 02 val 2600 [ 469.216815][ T7035] pwc: recv_control_msg error -71 req 02 val 2900 [ 469.217374][ T7035] pwc: recv_control_msg error -71 req 02 val 2800 [ 469.218960][ T7035] pwc: recv_control_msg error -71 req 04 val 1100 [ 469.219345][ T7035] pwc: recv_control_msg error -71 req 04 val 1200 [ 469.301224][ T7035] pwc: Registered as video103. [ 469.333991][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 469.402383][ T809] usb 1-1: USB disconnect, device number 64 [ 469.441223][ T7035] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 469.470525][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.498488][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.516846][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.540735][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.556770][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.578121][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.596811][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.597752][ T7035] usb 3-1: USB disconnect, device number 61 [ 469.620303][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.641075][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.658336][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 469.732262][ T5884] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 469.732288][ T5884] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 469.788029][ T5884] usb 6-1: USB disconnect, device number 35 [ 470.032527][T10830] FAULT_INJECTION: forcing a failure. [ 470.032527][T10830] name failslab, interval 1, probability 0, space 0, times 0 [ 470.032569][T10830] CPU: 0 UID: 0 PID: 10830 Comm: syz.2.1830 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 470.032598][T10830] Tainted: [L]=SOFTLOCKUP [ 470.032606][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.032618][T10830] Call Trace: [ 470.032627][T10830] [ 470.032637][T10830] dump_stack_lvl+0xe8/0x150 [ 470.032688][T10830] should_fail_ex+0x46b/0x600 [ 470.032718][T10830] should_failslab+0xa8/0x100 [ 470.032744][T10830] kmem_cache_alloc_noprof+0x87/0x680 [ 470.032779][T10830] ? mas_alloc_nodes+0x291/0x350 [ 470.032911][T10830] mas_alloc_nodes+0x291/0x350 [ 470.032945][T10830] mas_preallocate+0x2d6/0x640 [ 470.032980][T10830] ? __pfx_mas_preallocate+0x10/0x10 [ 470.033018][T10830] ? __asan_memset+0x22/0x50 [ 470.033089][T10830] commit_merge+0x21a/0x660 [ 470.033146][T10830] ? __pfx_commit_merge+0x10/0x10 [ 470.033178][T10830] ? vma_expand+0x201/0xfa0 [ 470.033207][T10830] ? __vma_start_write+0x1b4/0x290 [ 470.033237][T10830] vma_expand+0x726/0xfa0 [ 470.033274][T10830] vma_merge_new_range+0x61e/0x7b0 [ 470.033314][T10830] vma_merge_extend+0x28f/0x310 [ 470.033344][T10830] ? __pfx_vma_merge_extend+0x10/0x10 [ 470.033386][T10830] ? rcu_is_watching+0x15/0xb0 [ 470.033414][T10830] ? percpu_counter_add_batch+0xea/0x1d0 [ 470.033489][T10830] ? __vm_enough_memory+0x11b/0x380 [ 470.033559][T10830] mremap_at+0x965/0xc50 [ 470.033637][T10830] ? __pfx_mremap_at+0x10/0x10 [ 470.033785][T10830] ? __pfx_mtree_load+0x10/0x10 [ 470.033818][T10830] ? may_expand_vm+0x1b4/0x2f0 [ 470.033867][T10830] ? check_prep_vma+0x8d5/0xb20 [ 470.033905][T10830] __se_sys_mremap+0xd73/0xfc0 [ 470.033960][T10830] ? __pfx___se_sys_mremap+0x10/0x10 [ 470.034011][T10830] ? fput+0xa0/0xd0 [ 470.034039][T10830] ? ksys_write+0x248/0x270 [ 470.034075][T10830] ? __pfx_ksys_write+0x10/0x10 [ 470.034124][T10830] ? __x64_sys_mremap+0x20/0xc0 [ 470.034158][T10830] do_syscall_64+0x14d/0xf80 [ 470.034206][T10830] ? trace_irq_disable+0x3b/0x150 [ 470.034234][T10830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.034258][T10830] ? clear_bhb_loop+0x40/0x90 [ 470.034287][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.034317][T10830] RIP: 0033:0x7f5b6d5ec799 [ 470.034339][T10830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.034360][T10830] RSP: 002b:00007f5b6b846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 470.034386][T10830] RAX: ffffffffffffffda RBX: 00007f5b6d865fa0 RCX: 00007f5b6d5ec799 [ 470.034404][T10830] RDX: 0000000000004000 RSI: 0000000000001000 RDI: 0000200000000000 [ 470.034420][T10830] RBP: 00007f5b6b846090 R08: 0000200000001000 R09: 0000000000000000 [ 470.034437][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.034451][T10830] R13: 00007f5b6d866038 R14: 00007f5b6d865fa0 R15: 00007fff5a648408 [ 470.034489][T10830] [ 470.701720][ T8281] hsr_slave_0: left promiscuous mode [ 470.991398][ T8281] hsr_slave_1: left promiscuous mode [ 470.993004][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.993108][ T8281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.068733][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.068762][ T8281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.466764][ T809] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 471.544626][ T8281] veth1_macvtap: left promiscuous mode [ 471.583826][ T8281] veth0_macvtap: left promiscuous mode [ 471.607344][ T8281] veth1_vlan: left promiscuous mode [ 471.628300][ T8281] veth0_vlan: left promiscuous mode [ 472.326714][ T5884] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 472.348769][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.348823][ T809] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 472.348848][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.393871][ T809] usb 1-1: config 0 descriptor?? [ 472.423014][ T809] pwc: Askey VC010 type 2 USB webcam detected. [ 472.476728][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 472.479342][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 472.480570][ T5884] usb 6-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 472.480624][ T5884] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 472.483663][ T5884] usb 6-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 472.483725][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.483741][ T5884] usb 6-1: Product: syz [ 472.483753][ T5884] usb 6-1: Manufacturer: syz [ 472.483764][ T5884] usb 6-1: SerialNumber: syz [ 472.780937][T10849] kAFS: unparsable volume name [ 472.815907][ T809] pwc: recv_control_msg error -32 req 02 val 2b00 [ 472.893209][ T5884] usb 6-1: unit 2 not found! [ 473.016890][ T5884] usb 6-1: can't set first interface for hiFace device. [ 473.016920][ T5884] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 473.024076][ T5884] usb 6-1: can't set first interface for hiFace device. [ 473.024103][ T5884] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 473.067686][ T809] pwc: recv_control_msg error -71 req 02 val 2c00 [ 473.068146][ T809] pwc: recv_control_msg error -71 req 04 val 1000 [ 473.068676][ T809] pwc: recv_control_msg error -71 req 04 val 1300 [ 473.069122][ T809] pwc: recv_control_msg error -71 req 04 val 1400 [ 473.072690][ T809] pwc: recv_control_msg error -71 req 02 val 2000 [ 473.073346][ T5884] usb 6-1: USB disconnect, device number 36 [ 473.096783][ T809] pwc: recv_control_msg error -71 req 02 val 2100 [ 473.113782][ T809] pwc: recv_control_msg error -71 req 04 val 1500 [ 473.126747][ T809] pwc: recv_control_msg error -71 req 02 val 2500 [ 473.136749][ T809] pwc: recv_control_msg error -71 req 02 val 2400 [ 473.143804][ T809] pwc: recv_control_msg error -71 req 02 val 2600 [ 473.144291][ T809] pwc: recv_control_msg error -71 req 02 val 2900 [ 473.144875][ T809] pwc: recv_control_msg error -71 req 02 val 2800 [ 473.145567][ T809] pwc: recv_control_msg error -71 req 04 val 1100 [ 473.146107][ T809] pwc: recv_control_msg error -71 req 04 val 1200 [ 473.197218][ T5969] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 473.230351][ T809] pwc: Registered as video103. [ 473.243888][ T809] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 473.282843][ T809] usb 1-1: USB disconnect, device number 65 [ 473.356848][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 473.360877][ T5969] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 473.360915][ T5969] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 473.360974][ T5969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 473.361002][ T5969] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x19, changing to 0x9 [ 473.361030][ T5969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x9 has invalid wMaxPacketSize 0 [ 473.361054][ T5969] usb 3-1: config 168 interface 0 altsetting 188 bulk endpoint 0x9 has invalid maxpacket 0 [ 473.361079][ T5969] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 473.361108][ T5969] usb 3-1: config 168 interface 0 has no altsetting 0 [ 473.362627][ T5969] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 473.362665][ T5969] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 473.362704][ T5969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 473.362732][ T5969] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x19, changing to 0x9 [ 473.362758][ T5969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x9 has invalid wMaxPacketSize 0 [ 473.362780][ T5969] usb 3-1: config 168 interface 0 altsetting 188 bulk endpoint 0x9 has invalid maxpacket 0 [ 473.362802][ T5969] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 473.362837][ T5969] usb 3-1: config 168 interface 0 has no altsetting 0 [ 473.364987][ T5969] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 473.365014][ T5969] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 473.365043][ T5969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 473.365063][ T5969] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x19, changing to 0x9 [ 473.365083][ T5969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x9 has invalid wMaxPacketSize 0 [ 473.365099][ T5969] usb 3-1: config 168 interface 0 altsetting 188 bulk endpoint 0x9 has invalid maxpacket 0 [ 473.365117][ T5969] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 473.365137][ T5969] usb 3-1: config 168 interface 0 has no altsetting 0 [ 473.375231][ T5969] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 473.375315][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.375373][ T5969] usb 3-1: Product: syz [ 473.375428][ T5969] usb 3-1: Manufacturer: syz [ 473.375467][ T5969] usb 3-1: SerialNumber: syz [ 473.791589][T10862] FAULT_INJECTION: forcing a failure. [ 473.791589][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 473.791631][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.5.1842 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 473.791662][T10862] Tainted: [L]=SOFTLOCKUP [ 473.791671][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.791684][T10862] Call Trace: [ 473.791694][T10862] [ 473.791704][T10862] dump_stack_lvl+0xe8/0x150 [ 473.791745][T10862] should_fail_ex+0x46b/0x600 [ 473.791780][T10862] should_failslab+0xa8/0x100 [ 473.791805][T10862] kmem_cache_alloc_noprof+0x87/0x680 [ 473.791840][T10862] ? io_submit_one+0x130/0x14c0 [ 473.791953][T10862] io_submit_one+0x130/0x14c0 [ 473.791991][T10862] ? irqentry_exit+0x59e/0x620 [ 473.792026][T10862] ? lockdep_hardirqs_on+0x7a/0x110 [ 473.792057][T10862] ? irqentry_exit+0x59e/0x620 [ 473.792087][T10862] ? trace_irq_disable+0x3b/0x150 [ 473.792121][T10862] ? __pfx_io_submit_one+0x10/0x10 [ 473.792173][T10862] ? __might_fault+0xaf/0x130 [ 473.792213][T10862] __se_sys_io_submit+0x195/0x340 [ 473.792256][T10862] ? __pfx___se_sys_io_submit+0x10/0x10 [ 473.792287][T10862] ? ksys_write+0x248/0x270 [ 473.792340][T10862] do_syscall_64+0x14d/0xf80 [ 473.792371][T10862] ? trace_irq_disable+0x3b/0x150 [ 473.792397][T10862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.792422][T10862] ? clear_bhb_loop+0x40/0x90 [ 473.792451][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.792476][T10862] RIP: 0033:0x7fe50668c799 [ 473.792498][T10862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.792520][T10862] RSP: 002b:00007fe5048e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 473.792544][T10862] RAX: ffffffffffffffda RBX: 00007fe506905fa0 RCX: 00007fe50668c799 [ 473.792561][T10862] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 00007fe507442000 [ 473.792576][T10862] RBP: 00007fe5048e6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.792591][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.792605][T10862] R13: 00007fe506906038 R14: 00007fe506905fa0 R15: 00007ffc4db6d078 [ 473.792639][T10862] [ 474.023297][T10859] sctp: [Deprecated]: syz.2.1841 (pid 10859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.023297][T10859] Use struct sctp_sack_info instead [ 474.917140][ T31] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 474.917433][ T8281] team0 (unregistering): Port device team_slave_1 removed [ 475.008468][ T8281] team0 (unregistering): Port device team_slave_0 removed [ 475.069105][ T31] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 475.069137][ T31] usb 1-1: config 0 has no interface number 0 [ 475.069252][ T31] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 475.073258][ T31] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 475.073286][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.074541][ T31] usb 1-1: Product: syz [ 475.074561][ T31] usb 1-1: Manufacturer: syz [ 475.074578][ T31] usb 1-1: SerialNumber: syz [ 475.165751][ T31] usb 1-1: config 0 descriptor?? [ 475.437220][ T7035] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 475.606885][ T7035] usb 6-1: Using ep0 maxpacket: 16 [ 475.609807][ T7035] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.609889][ T7035] usb 6-1: config 0 has no interface number 0 [ 475.609939][ T7035] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.609959][ T7035] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.609986][ T7035] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 475.610091][ T7035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.647558][ T7035] usb 6-1: config 0 descriptor?? [ 475.970487][ T31] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 475.988676][ T31] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 475.988862][ T31] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 475.989022][ T31] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 476.057673][ T31] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 476.118092][ T31] usb 1-1: USB disconnect, device number 66 [ 476.309741][ T31] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 476.323615][ T31] keyspan 1-1:0.133: device disconnected [ 476.638349][ T7035] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0008/input/input34 [ 476.641366][ T5969] adutux 3-1:168.0: interrupt endpoints not found [ 476.769572][ T5969] usb 3-1: USB disconnect, device number 62 [ 476.929330][ T7035] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0008/input/input35 [ 477.140998][ T7035] uclogic 0003:28BD:0071.0008: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1 [ 477.417114][ T7035] usb 6-1: USB disconnect, device number 37 [ 477.526850][ T5969] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 477.541214][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 477.541284][ T37] audit: type=1800 audit(1772874010.717:956): pid=10896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1853" name="bus" dev="tmpfs" ino=1502 res=0 errno=0 [ 477.682279][ T5969] usb 3-1: Using ep0 maxpacket: 16 [ 477.695246][ T5969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 477.698337][ T5969] usb 3-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 477.698609][ T5969] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 477.730165][ T5969] usb 3-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 477.730198][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.730221][ T5969] usb 3-1: Product: syz [ 477.730237][ T5969] usb 3-1: Manufacturer: syz [ 477.730253][ T5969] usb 3-1: SerialNumber: syz [ 478.057986][T10888] kAFS: unparsable volume name [ 478.267535][ T5969] usb 3-1: unit 2 not found! [ 478.429358][ T5969] usb 3-1: can't set first interface for hiFace device. [ 478.429520][ T5969] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 478.487986][ T5969] usb 3-1: can't set first interface for hiFace device. [ 478.488030][ T5969] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 478.521504][ T5969] usb 3-1: USB disconnect, device number 63 [ 478.819075][ T6361] udevd[6361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.041497][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'. [ 479.041530][T10926] openvswitch: netlink: Port 262144 exceeds max allowable 65535 [ 479.198025][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 479.952757][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1867'. [ 479.952784][T10946] openvswitch: netlink: Flow actions attr not present in new flow. [ 480.611376][ T37] audit: type=1800 audit(1772874013.797:957): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1870" name="bus" dev="tmpfs" ino=693 res=0 errno=0 [ 480.657396][T10597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.816355][T10597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.880501][T10597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.976170][T10597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.061553][T10966] FAULT_INJECTION: forcing a failure. [ 481.061553][T10966] name failslab, interval 1, probability 0, space 0, times 0 [ 481.061592][T10966] CPU: 0 UID: 0 PID: 10966 Comm: syz.0.1874 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.061624][T10966] Tainted: [L]=SOFTLOCKUP [ 481.061633][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.061647][T10966] Call Trace: [ 481.061656][T10966] [ 481.061667][T10966] dump_stack_lvl+0xe8/0x150 [ 481.061708][T10966] should_fail_ex+0x46b/0x600 [ 481.061739][T10966] should_failslab+0xa8/0x100 [ 481.061765][T10966] __kmalloc_noprof+0xdf/0x7b0 [ 481.061799][T10966] ? sock_kmalloc+0xd6/0x160 [ 481.061843][T10966] sock_kmalloc+0xd6/0x160 [ 481.061881][T10966] hash_sendmsg+0x71e/0x1110 [ 481.061944][T10966] ____sys_sendmsg+0x94c/0x9c0 [ 481.061985][T10966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.062030][T10966] ? import_iovec+0x73/0xa0 [ 481.062063][T10966] ___sys_sendmsg+0x2a5/0x360 [ 481.062104][T10966] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.062177][T10966] ? __fget_files+0x2a/0x420 [ 481.062205][T10966] ? __fget_files+0x3a6/0x420 [ 481.062253][T10966] __x64_sys_sendmsg+0x1c3/0x2a0 [ 481.062291][T10966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.062336][T10966] ? __pfx_ksys_write+0x10/0x10 [ 481.062383][T10966] do_syscall_64+0x14d/0xf80 [ 481.062414][T10966] ? trace_irq_disable+0x3b/0x150 [ 481.062442][T10966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.062467][T10966] ? clear_bhb_loop+0x40/0x90 [ 481.062496][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.062521][T10966] RIP: 0033:0x7fb02e6ec799 [ 481.062541][T10966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.062562][T10966] RSP: 002b:00007fb02c946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.062587][T10966] RAX: ffffffffffffffda RBX: 00007fb02e965fa0 RCX: 00007fb02e6ec799 [ 481.062605][T10966] RDX: 0000000000000191 RSI: 0000200000003580 RDI: 0000000000000004 [ 481.062621][T10966] RBP: 00007fb02c946090 R08: 0000000000000000 R09: 0000000000000000 [ 481.062636][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.062651][T10966] R13: 00007fb02e966038 R14: 00007fb02e965fa0 R15: 00007ffc16243898 [ 481.062688][T10966] [ 481.632596][T10597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.730898][T10597] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.770338][ T7133] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.778811][ T7133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.785327][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.785809][ T7133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.306764][ T5969] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 482.456742][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 482.459136][ T5969] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 482.459163][ T5969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.459190][ T5969] usb 3-1: config 0 has no interface number 0 [ 482.459222][ T5969] usb 3-1: config 0 interface 101 has no altsetting 0 [ 482.467636][ T5969] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 482.467661][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 482.467677][ T5969] usb 3-1: Product: syz [ 482.467692][ T5969] usb 3-1: Manufacturer: syz [ 482.467704][ T5969] usb 3-1: SerialNumber: syz [ 482.580604][ T5969] usb 3-1: config 0 descriptor?? [ 482.598958][ T5969] hub 3-1:0.101: bad descriptor, ignoring hub [ 482.599077][ T5969] hub 3-1:0.101: probe with driver hub failed with error -5 [ 483.742068][T10994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.742589][T10994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.880835][T10597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.927221][ T5179] usb 3-1: USB disconnect, device number 64 [ 484.697816][T10597] veth0_vlan: entered promiscuous mode [ 484.739128][T10597] veth1_vlan: entered promiscuous mode [ 484.804995][T10597] veth0_macvtap: entered promiscuous mode [ 484.891102][T10597] veth1_macvtap: entered promiscuous mode [ 484.968707][T10597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.002545][T10597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.050951][T10534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.051145][T10534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.051198][T10534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.051233][T10534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.239812][T11045] FAULT_INJECTION: forcing a failure. [ 485.239812][T11045] name failslab, interval 1, probability 0, space 0, times 0 [ 485.239850][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.2.1896 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 485.239881][T11045] Tainted: [L]=SOFTLOCKUP [ 485.239889][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.239903][T11045] Call Trace: [ 485.239913][T11045] [ 485.239924][T11045] dump_stack_lvl+0xe8/0x150 [ 485.239963][T11045] should_fail_ex+0x46b/0x600 [ 485.239994][T11045] should_failslab+0xa8/0x100 [ 485.240019][T11045] __kmalloc_noprof+0xdf/0x7b0 [ 485.240064][T11045] ? tomoyo_encode+0x28b/0x550 [ 485.240094][T11045] tomoyo_encode+0x28b/0x550 [ 485.240124][T11045] tomoyo_realpath_from_path+0x58d/0x5d0 [ 485.240159][T11045] ? tomoyo_path_number_perm+0x219/0x630 [ 485.240193][T11045] tomoyo_path_number_perm+0x246/0x630 [ 485.240229][T11045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 485.240264][T11045] ? __lock_acquire+0x6b5/0x2cf0 [ 485.240326][T11045] ? __fget_files+0x2a/0x420 [ 485.240359][T11045] ? __fget_files+0x2a/0x420 [ 485.240386][T11045] ? __fget_files+0x3a6/0x420 [ 485.240414][T11045] ? __fget_files+0x2a/0x420 [ 485.240447][T11045] security_file_ioctl+0xc3/0x2a0 [ 485.240485][T11045] __se_sys_ioctl+0x47/0x170 [ 485.240535][T11045] do_syscall_64+0x14d/0xf80 [ 485.240564][T11045] ? trace_irq_disable+0x3b/0x150 [ 485.240591][T11045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.240614][T11045] ? clear_bhb_loop+0x40/0x90 [ 485.240643][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.240666][T11045] RIP: 0033:0x7f5b6d5ec799 [ 485.240687][T11045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.240707][T11045] RSP: 002b:00007f5b6b846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.240730][T11045] RAX: ffffffffffffffda RBX: 00007f5b6d865fa0 RCX: 00007f5b6d5ec799 [ 485.240746][T11045] RDX: 0000200000000040 RSI: 0000000080104592 RDI: 0000000000000003 [ 485.240760][T11045] RBP: 00007f5b6b846090 R08: 0000000000000000 R09: 0000000000000000 [ 485.240773][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.240786][T11045] R13: 00007f5b6d866038 R14: 00007f5b6d865fa0 R15: 00007fff5a648408 [ 485.240820][T11045] [ 485.240841][T11045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 485.758546][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'. [ 485.758575][T11053] openvswitch: netlink: Key type 796 is out of range max 32 [ 485.855764][T11056] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1898'. [ 485.867131][T10534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.867193][T10534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.245376][ T7133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.245401][ T7133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.258122][T11069] tmpfs: Unknown parameter 'usrquota_block_hardlim' [ 487.366687][ T6005] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 487.566696][ T6005] usb 3-1: Using ep0 maxpacket: 16 [ 487.569100][ T6005] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.569151][ T6005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.569178][ T6005] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 487.569200][ T6005] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.581655][ T6005] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 487.581685][ T6005] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 487.581707][ T6005] usb 3-1: Manufacturer: syz [ 487.700657][ T6005] usb 3-1: config 0 descriptor?? [ 487.978281][T11056] netlink: set zone limit has 4 unknown bytes [ 488.283936][ T6005] rc_core: IR keymap rc-hauppauge not found [ 488.283953][ T6005] Registered IR keymap rc-empty [ 488.284343][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.307251][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.330794][ T6005] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 488.335228][T11079] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1906'. [ 488.364930][ T6005] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 488.424230][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.440647][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.457600][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.477071][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.497072][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.519065][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.537070][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.565850][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.577160][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.597098][ T6005] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 488.641548][ T6005] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 488.641577][ T6005] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 488.672622][ T6005] usb 3-1: USB disconnect, device number 65 [ 488.720151][ T37] audit: type=1800 audit(1772874021.907:958): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1910" name="bus" dev="tmpfs" ino=29 res=0 errno=0 [ 489.300501][T11105] FAULT_INJECTION: forcing a failure. [ 489.300501][T11105] name failslab, interval 1, probability 0, space 0, times 0 [ 489.300530][T11105] CPU: 1 UID: 0 PID: 11105 Comm: syz.1.1913 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 489.300553][T11105] Tainted: [L]=SOFTLOCKUP [ 489.300559][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.300569][T11105] Call Trace: [ 489.300576][T11105] [ 489.300582][T11105] dump_stack_lvl+0xe8/0x150 [ 489.300611][T11105] should_fail_ex+0x46b/0x600 [ 489.300633][T11105] should_failslab+0xa8/0x100 [ 489.300660][T11105] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 489.300685][T11105] ? __alloc_skb+0x1d0/0x7d0 [ 489.300706][T11105] ? lockdep_hardirqs_on+0x7a/0x110 [ 489.300732][T11105] __alloc_skb+0x1d0/0x7d0 [ 489.300756][T11105] netlink_sendmsg+0x5d4/0xb40 [ 489.300784][T11105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.300805][T11105] ? unwind_get_return_address+0x4d/0x90 [ 489.300826][T11105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.300857][T11105] ____sys_sendmsg+0x94c/0x9c0 [ 489.300885][T11105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.300915][T11105] ? import_iovec+0x73/0xa0 [ 489.300952][T11105] ___sys_sendmsg+0x2a5/0x360 [ 489.300979][T11105] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.301026][T11105] ? __fget_files+0x2a/0x420 [ 489.301046][T11105] ? __fget_files+0x3a6/0x420 [ 489.301072][T11105] __x64_sys_sendmsg+0x1c3/0x2a0 [ 489.301097][T11105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.301127][T11105] ? __pfx_ksys_write+0x10/0x10 [ 489.301160][T11105] do_syscall_64+0x14d/0xf80 [ 489.301181][T11105] ? trace_irq_disable+0x3b/0x150 [ 489.301199][T11105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.301216][T11105] ? clear_bhb_loop+0x40/0x90 [ 489.301235][T11105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.301250][T11105] RIP: 0033:0x7f083b49c799 [ 489.301265][T11105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.301279][T11105] RSP: 002b:00007f08396ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.301295][T11105] RAX: ffffffffffffffda RBX: 00007f083b715fa0 RCX: 00007f083b49c799 [ 489.301307][T11105] RDX: 0000000000040010 RSI: 0000200000000200 RDI: 0000000000000003 [ 489.301318][T11105] RBP: 00007f08396ee090 R08: 0000000000000000 R09: 0000000000000000 [ 489.301328][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.301337][T11105] R13: 00007f083b716038 R14: 00007f083b715fa0 R15: 00007fffdfd0fac8 [ 489.301361][T11105] [ 489.845980][T11079] netlink: set zone limit has 4 unknown bytes [ 491.058075][ T809] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 491.207301][ T5179] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 491.326962][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 491.408883][ T5805] Bluetooth: hci6: command 0x0405 tx timeout [ 491.779312][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.780856][ T809] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 491.780886][ T809] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 491.780908][ T809] usb 3-1: Manufacturer: syz [ 491.837316][ T5179] usb 6-1: Using ep0 maxpacket: 16 [ 491.839951][ T5179] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.840007][ T5179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.840038][ T5179] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 491.840062][ T5179] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.844976][ T5179] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 491.845010][ T5179] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 491.845033][ T5179] usb 6-1: Manufacturer: syz [ 491.878085][ T809] usb 3-1: config 0 descriptor?? [ 492.046026][ T5179] usb 6-1: config 0 descriptor?? [ 492.437321][ T809] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 492.916848][ T5179] rc_core: IR keymap rc-hauppauge not found [ 492.916870][ T5179] Registered IR keymap rc-empty [ 492.917339][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 492.941317][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 492.958700][ T5179] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 492.962071][ T5179] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input37 [ 493.026705][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.047091][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.067122][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.087127][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.107526][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.127478][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.148900][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.169855][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.188122][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.208331][ T5179] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 493.276792][ T5179] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 493.276806][T11156] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1929'. [ 493.276852][ T5179] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 493.345398][ T5179] usb 6-1: USB disconnect, device number 38 [ 493.905977][ T5969] usb 3-1: USB disconnect, device number 66 [ 495.666769][ T5179] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 495.851716][T11156] netlink: set zone limit has 4 unknown bytes [ 496.058347][ T5969] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 496.544336][ T5969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.544365][ T5969] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 496.544479][ T5969] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 496.544505][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.669538][ T5969] usb 3-1: config 0 descriptor?? [ 497.353527][ T5969] Bluetooth: Can't get state to change to load configuration err [ 497.353544][ T5969] Bluetooth: Loading sysconfig file failed [ 497.353572][ T5969] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 497.503701][ T5969] usb 3-1: USB disconnect, device number 67 [ 498.356767][ T5884] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 498.513133][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 498.528678][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.528912][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.528943][ T5884] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 498.529440][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.533549][ T5884] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 498.533582][ T5884] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 498.533598][ T5884] usb 6-1: Manufacturer: syz [ 498.636382][ T5884] usb 6-1: config 0 descriptor?? [ 498.686733][ T5969] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 498.865990][T11209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.871450][ T5969] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 498.871511][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.947106][ T5969] usb 4-1: config 0 descriptor?? [ 498.987984][ T5969] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 499.237969][ T5884] rc_core: IR keymap rc-hauppauge not found [ 499.240686][ T5884] Registered IR keymap rc-empty [ 499.241724][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.289946][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.639287][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 499.669327][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38 [ 499.707181][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.727112][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.753824][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.767102][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.790689][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.807134][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.827355][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.846972][ T5969] gspca_cpia1: usb_control_msg 03, error -32 [ 499.847135][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.870588][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.887430][ T5884] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 499.915465][ T5884] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 499.915503][ T5884] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 499.939136][ T5884] usb 6-1: USB disconnect, device number 39 [ 500.943999][ T5969] gspca_cpia1: usb_control_msg 03, error -110 [ 500.944516][ T5969] gspca_cpia1: usb_control_msg 01, error -32 [ 500.944911][ T5969] gspca_cpia1: usb_control_msg 01, error -32 [ 500.945325][ T5969] gspca_cpia1: usb_control_msg 01, error -32 [ 500.945755][ T5969] gspca_cpia1: usb_control_msg 01, error -32 [ 500.945771][ T5969] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 501.141698][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.142069][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.306704][ T5884] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 501.458027][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 501.461961][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 501.463551][ T5884] usb 6-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 501.463632][ T5884] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 501.505035][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.505112][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.521292][ T5884] usb 6-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 501.521323][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.521344][ T5884] usb 6-1: Product: syz [ 501.521360][ T5884] usb 6-1: Manufacturer: syz [ 501.521383][ T5884] usb 6-1: SerialNumber: syz [ 501.815067][T11223] kAFS: unparsable volume name [ 501.866729][ T809] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 501.893489][T11242] FAULT_INJECTION: forcing a failure. [ 501.893489][T11242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.893529][T11242] CPU: 0 UID: 0 PID: 11242 Comm: syz.0.1963 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 501.893561][T11242] Tainted: [L]=SOFTLOCKUP [ 501.893569][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 501.893583][T11242] Call Trace: [ 501.893592][T11242] [ 501.893601][T11242] dump_stack_lvl+0xe8/0x150 [ 501.893639][T11242] should_fail_ex+0x46b/0x600 [ 501.893671][T11242] _copy_from_user+0x2d/0xb0 [ 501.893701][T11242] ___sys_sendmsg+0x1c6/0x360 [ 501.893771][T11242] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.893820][T11242] ? __fget_files+0x2a/0x420 [ 501.893840][T11242] ? __fget_files+0x3a6/0x420 [ 501.893867][T11242] __x64_sys_sendmsg+0x1c3/0x2a0 [ 501.893892][T11242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.893923][T11242] ? __pfx_ksys_write+0x10/0x10 [ 501.893954][T11242] do_syscall_64+0x14d/0xf80 [ 501.893994][T11242] ? trace_irq_disable+0x3b/0x150 [ 501.894021][T11242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.894045][T11242] ? clear_bhb_loop+0x40/0x90 [ 501.894072][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.894095][T11242] RIP: 0033:0x7fb02e6ec799 [ 501.894114][T11242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.894133][T11242] RSP: 002b:00007fb02c946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.894157][T11242] RAX: ffffffffffffffda RBX: 00007fb02e965fa0 RCX: 00007fb02e6ec799 [ 501.894193][T11242] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 501.894209][T11242] RBP: 00007fb02c946090 R08: 0000000000000000 R09: 0000000000000000 [ 501.894225][T11242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.894239][T11242] R13: 00007fb02e966038 R14: 00007fb02e965fa0 R15: 00007ffc16243898 [ 501.894275][T11242] [ 502.138227][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.138301][ T809] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 502.138329][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.194946][ T5969] usb 4-1: USB disconnect, device number 22 [ 502.227522][ T5884] usb 6-1: unit 2 not found! [ 502.249531][ T809] usb 3-1: config 0 descriptor?? [ 502.376903][ T809] pwc: Askey VC010 type 2 USB webcam detected. [ 502.469937][ T37] audit: type=1326 audit(1772874035.657:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.527482][ T37] audit: type=1326 audit(1772874035.707:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.527537][ T37] audit: type=1326 audit(1772874035.707:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.527583][ T37] audit: type=1326 audit(1772874035.707:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.527627][ T37] audit: type=1326 audit(1772874035.707:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.527670][ T37] audit: type=1326 audit(1772874035.707:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.527714][ T37] audit: type=1326 audit(1772874035.707:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.527758][ T37] audit: type=1326 audit(1772874035.707:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.527802][ T37] audit: type=1326 audit(1772874035.707:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.535874][ T37] audit: type=1326 audit(1772874035.717:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.3.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7a55c799 code=0x7ffc0000 [ 502.616906][ T7035] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 502.763704][ T809] pwc: recv_control_msg error -32 req 02 val 2b00 [ 502.770812][ T7035] usb 1-1: Using ep0 maxpacket: 16 [ 502.785480][ T7035] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.785549][ T7035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.785579][ T7035] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 502.785603][ T7035] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.824272][ T809] pwc: recv_control_msg error -32 req 02 val 2700 [ 502.835519][ T7035] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.835552][ T7035] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.835595][ T7035] usb 1-1: Manufacturer: syz [ 502.902461][ T7035] usb 1-1: config 0 descriptor?? [ 502.920050][ T5884] usb 6-1: can't set first interface for hiFace device. [ 502.920153][ T5884] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 502.954515][ T5884] usb 6-1: can't set first interface for hiFace device. [ 502.954613][ T5884] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 502.987462][ T5884] usb 6-1: USB disconnect, device number 40 [ 503.083325][ T809] pwc: recv_control_msg error -71 req 04 val 1000 [ 503.083921][ T809] pwc: recv_control_msg error -71 req 04 val 1300 [ 503.084774][ T809] pwc: recv_control_msg error -71 req 04 val 1400 [ 503.085493][ T809] pwc: recv_control_msg error -71 req 02 val 2000 [ 503.093232][ T809] pwc: recv_control_msg error -71 req 02 val 2100 [ 503.100158][ T809] pwc: recv_control_msg error -71 req 04 val 1500 [ 503.132322][ T809] pwc: recv_control_msg error -71 req 02 val 2500 [ 503.132859][ T809] pwc: recv_control_msg error -71 req 02 val 2400 [ 503.133353][ T809] pwc: recv_control_msg error -71 req 02 val 2600 [ 503.133841][ T809] pwc: recv_control_msg error -71 req 02 val 2900 [ 503.134335][ T809] pwc: recv_control_msg error -71 req 02 val 2800 [ 503.135019][ T809] pwc: recv_control_msg error -71 req 04 val 1100 [ 503.135522][ T809] pwc: recv_control_msg error -71 req 04 val 1200 [ 503.188405][ T809] pwc: Registered as video103. [ 503.192924][ T809] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 503.234441][ T809] usb 3-1: USB disconnect, device number 68 [ 503.336700][ T7035] rc_core: IR keymap rc-hauppauge not found [ 503.336725][ T7035] Registered IR keymap rc-empty [ 503.337166][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.374739][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.427601][ T7035] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 503.490910][ T7035] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 503.516106][ T6361] udevd[6361]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.590076][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.607129][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.637846][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.657159][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.663000][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1970'. [ 503.663028][T11260] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 503.679671][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.697589][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.717848][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.737361][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.757219][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.786773][ T7035] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.809500][ T7035] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 503.809519][ T7035] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 503.854575][ T7035] usb 1-1: USB disconnect, device number 68 [ 504.103336][T11272] FAULT_INJECTION: forcing a failure. [ 504.103336][T11272] name failslab, interval 1, probability 0, space 0, times 0 [ 504.103376][T11272] CPU: 0 UID: 0 PID: 11272 Comm: syz.2.1976 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.103407][T11272] Tainted: [L]=SOFTLOCKUP [ 504.103428][T11272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.103441][T11272] Call Trace: [ 504.103449][T11272] [ 504.103459][T11272] dump_stack_lvl+0xe8/0x150 [ 504.103499][T11272] should_fail_ex+0x46b/0x600 [ 504.103529][T11272] should_failslab+0xa8/0x100 [ 504.103551][T11272] kmem_cache_alloc_noprof+0x87/0x680 [ 504.103585][T11272] ? prepare_creds+0x30/0x820 [ 504.103616][T11272] prepare_creds+0x30/0x820 [ 504.103647][T11272] copy_creds+0x10e/0xa30 [ 504.103681][T11272] copy_process+0x904/0x3d00 [ 504.103729][T11272] ? get_pid_task+0x20/0x1f0 [ 504.103759][T11272] ? __pfx_copy_process+0x10/0x10 [ 504.103805][T11272] kernel_clone+0x249/0x840 [ 504.103842][T11272] ? __pfx_kernel_clone+0x10/0x10 [ 504.103874][T11272] ? __seccomp_filter+0xaf7/0x1ef0 [ 504.103925][T11272] __x64_sys_clone+0x1b6/0x230 [ 504.103964][T11272] ? __pfx___x64_sys_clone+0x10/0x10 [ 504.104016][T11272] ? __pfx_ksys_write+0x10/0x10 [ 504.104055][T11272] ? __secure_computing+0xe1/0x2a0 [ 504.104090][T11272] do_syscall_64+0x14d/0xf80 [ 504.104136][T11272] ? trace_irq_disable+0x3b/0x150 [ 504.104188][T11272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.104213][T11272] ? clear_bhb_loop+0x40/0x90 [ 504.104242][T11272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.104267][T11272] RIP: 0033:0x7f5b6d5ec799 [ 504.104290][T11272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.104310][T11272] RSP: 002b:00007f5b6b845fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 504.104340][T11272] RAX: ffffffffffffffda RBX: 00007f5b6d865fa0 RCX: 00007f5b6d5ec799 [ 504.104358][T11272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008800211 [ 504.104373][T11272] RBP: 00007f5b6b846090 R08: 0000000000000000 R09: 0000000000000000 [ 504.104389][T11272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 504.104404][T11272] R13: 00007f5b6d866038 R14: 00007f5b6d865fa0 R15: 00007fff5a648408 [ 504.104441][T11272] [ 504.938868][T11288] FAULT_INJECTION: forcing a failure. [ 504.938868][T11288] name failslab, interval 1, probability 0, space 0, times 0 [ 504.938908][T11288] CPU: 1 UID: 0 PID: 11288 Comm: syz.3.1983 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.938936][T11288] Tainted: [L]=SOFTLOCKUP [ 504.938944][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.938956][T11288] Call Trace: [ 504.938965][T11288] [ 504.938974][T11288] dump_stack_lvl+0xe8/0x150 [ 504.939012][T11288] should_fail_ex+0x46b/0x600 [ 504.939041][T11288] should_failslab+0xa8/0x100 [ 504.939065][T11288] __kmalloc_noprof+0xdf/0x7b0 [ 504.939098][T11288] ? sock_kmalloc+0xd6/0x160 [ 504.939128][T11288] ? __local_bh_enable+0x1e1/0x2f0 [ 504.939163][T11288] sock_kmalloc+0xd6/0x160 [ 504.939197][T11288] af_alg_alloc_areq+0x99/0x200 [ 504.939228][T11288] skcipher_recvmsg+0x332/0x1140 [ 504.939278][T11288] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 504.939311][T11288] ? skcipher_check_key+0x173/0x1e0 [ 504.939340][T11288] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 504.939373][T11288] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 504.939406][T11288] sock_recvmsg+0x172/0x1b0 [ 504.939434][T11288] ____sys_recvmsg+0x1f2/0x4b0 [ 504.939474][T11288] ? __pfx_____sys_recvmsg+0x10/0x10 [ 504.939521][T11288] ? import_iovec+0x73/0xa0 [ 504.939557][T11288] ___sys_recvmsg+0x215/0x590 [ 504.939593][T11288] ? __pfx____sys_recvmsg+0x10/0x10 [ 504.939649][T11288] ? __fget_files+0x3a6/0x420 [ 504.939687][T11288] __x64_sys_recvmsg+0x1c0/0x2a0 [ 504.939722][T11288] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 504.939764][T11288] ? __pfx_ksys_write+0x10/0x10 [ 504.939807][T11288] do_syscall_64+0x14d/0xf80 [ 504.939835][T11288] ? trace_irq_disable+0x3b/0x150 [ 504.939860][T11288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.939881][T11288] ? clear_bhb_loop+0x40/0x90 [ 504.939907][T11288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.939929][T11288] RIP: 0033:0x7f1e7a55c799 [ 504.939949][T11288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.939968][T11288] RSP: 002b:00007f1e787ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 504.939990][T11288] RAX: ffffffffffffffda RBX: 00007f1e7a7d5fa0 RCX: 00007f1e7a55c799 [ 504.940007][T11288] RDX: 0000000000002021 RSI: 00002000000008c0 RDI: 0000000000000004 [ 504.940021][T11288] RBP: 00007f1e787ae090 R08: 0000000000000000 R09: 0000000000000000 [ 504.940035][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.940048][T11288] R13: 00007f1e7a7d6038 R14: 00007f1e7a7d5fa0 R15: 00007ffe0080d208 [ 504.940082][T11288] [ 505.977051][ T7035] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 506.196812][ T7035] usb 6-1: Using ep0 maxpacket: 16 [ 506.199301][ T7035] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.199356][ T7035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.199385][ T7035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 506.199410][ T7035] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 506.199435][ T7035] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.200947][ T7035] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 506.200975][ T7035] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 506.200997][ T7035] usb 6-1: Manufacturer: syz [ 506.292039][ T7035] usb 6-1: config 0 descriptor?? [ 506.626733][ T5884] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 506.686835][ T7035] rc_core: IR keymap rc-hauppauge not found [ 506.686856][ T7035] Registered IR keymap rc-empty [ 506.686994][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.723382][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.738404][ T7035] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 506.740582][ T7035] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 506.780920][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.799045][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.809888][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.810008][ T5884] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 506.810035][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.819833][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.836881][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.845389][ T5884] usb 4-1: config 0 descriptor?? [ 506.856741][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.876790][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.896787][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.911143][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 506.916747][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.936796][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 506.957023][ T7035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 507.004179][ T7035] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 507.004820][ T7035] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 507.051334][ T7035] usb 6-1: USB disconnect, device number 41 [ 507.307570][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 507.312473][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 507.522000][ T5884] pwc: recv_control_msg error -71 req 04 val 1000 [ 507.522493][ T5884] pwc: recv_control_msg error -71 req 04 val 1300 [ 507.522951][ T5884] pwc: recv_control_msg error -71 req 04 val 1400 [ 507.523414][ T5884] pwc: recv_control_msg error -71 req 02 val 2000 [ 507.534742][ T5884] pwc: recv_control_msg error -71 req 02 val 2100 [ 507.536725][ T5884] pwc: recv_control_msg error -71 req 04 val 1500 [ 507.538242][ T5884] pwc: recv_control_msg error -71 req 02 val 2500 [ 507.539380][ T5884] pwc: recv_control_msg error -71 req 02 val 2400 [ 507.539892][ T5884] pwc: recv_control_msg error -71 req 02 val 2600 [ 507.546807][ T5884] pwc: recv_control_msg error -71 req 02 val 2900 [ 507.547734][ T5884] pwc: recv_control_msg error -71 req 02 val 2800 [ 507.549083][ T5884] pwc: recv_control_msg error -71 req 04 val 1100 [ 507.549806][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 507.617631][ T5884] pwc: Registered as video103. [ 507.631992][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 507.698425][ T5884] usb 4-1: USB disconnect, device number 23 [ 508.249040][ T7035] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 508.396911][ T7035] usb 6-1: Using ep0 maxpacket: 32 [ 508.401191][ T7035] usb 6-1: unable to get BOS descriptor or descriptor too short [ 508.403004][ T7035] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 508.403031][ T7035] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 508.403052][ T7035] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 508.403073][ T7035] usb 6-1: config 128 has no interface number 0 [ 508.403119][ T7035] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 508.403146][ T7035] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.403171][ T7035] usb 6-1: config 128 interface 127 has no altsetting 0 [ 508.406201][ T7035] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 508.406228][ T7035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.406249][ T7035] usb 6-1: Product: syz [ 508.406264][ T7035] usb 6-1: Manufacturer: syz [ 508.406280][ T7035] usb 6-1: SerialNumber: syz [ 508.970906][ T7035] usb 6-1: USB disconnect, device number 42 [ 509.124933][ T6361] udevd[6361]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.287641][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 509.436680][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 509.441259][ T31] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 509.441286][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.441306][ T31] usb 1-1: config 0 has no interface number 0 [ 509.441368][ T31] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.495155][ T31] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 509.495185][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.495200][ T31] usb 1-1: Product: syz [ 509.495211][ T31] usb 1-1: Manufacturer: syz [ 509.495222][ T31] usb 1-1: SerialNumber: syz [ 509.495774][T11360] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 509.545330][ T31] usb 1-1: config 0 descriptor?? [ 509.623728][ T31] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 509.623818][ T31] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 509.894938][ T31] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 509.895369][ T31] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 510.474938][ T31] usb 1-1: USB disconnect, device number 69 [ 510.952222][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 511.126689][ T31] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 511.126723][ T31] usb 4-1: config 0 has no interface number 0 [ 511.126773][ T31] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 511.126800][ T31] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.126827][ T31] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 511.144620][ T31] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 511.144703][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.144765][ T31] usb 4-1: Product: syz [ 511.144806][ T31] usb 4-1: Manufacturer: syz [ 511.144848][ T31] usb 4-1: SerialNumber: syz [ 511.191658][ T31] usb 4-1: config 0 descriptor?? [ 511.192943][T11378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 511.243960][ T31] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 511.269954][ T31] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 511.275882][ T31] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 511.433417][ T5884] usb 4-1: USB disconnect, device number 24 [ 511.484633][ T5884] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 511.510029][ T5884] cyberjack 4-1:0.69: device disconnected [ 512.177886][T11404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2030'. [ 512.177925][T11404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2030'. [ 515.094611][T11445] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 515.269047][ T5884] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 515.433496][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 515.451196][ T5884] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 515.451228][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.451250][ T5884] usb 4-1: Product: syz [ 515.451267][ T5884] usb 4-1: Manufacturer: syz [ 515.451282][ T5884] usb 4-1: SerialNumber: syz [ 515.554607][ T5884] usb 4-1: config 0 descriptor?? [ 515.571661][ T5884] gspca_main: se401-2.14.0 probing 047d:5003 [ 516.698416][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 516.807392][ T5884] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 516.826724][ T10] usb 6-1: device descriptor read/64, error -71 [ 516.956741][ T5884] usb 4-1: device descriptor read/64, error -32 [ 517.057104][T11440] tipc: Can't bind to reserved service type 1 [ 517.080567][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 517.107921][T11440] raw-gadget.0 gadget.3: fail, usb_ep_queue returned -108 [ 517.206710][ T10] usb 6-1: device descriptor read/64, error -71 [ 517.206775][ T5884] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 517.317031][ T10] usb usb6-port1: attempt power cycle [ 517.336826][ T5884] usb 4-1: device descriptor read/64, error -32 [ 517.579988][ T5884] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 517.600873][ T5884] usb 4-1: device descriptor read/8, error -32 [ 517.656811][ T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 517.677575][ T10] usb 6-1: device descriptor read/8, error -71 [ 517.775839][T11498] netlink: 'syz.2.2068': attribute type 1 has an invalid length. [ 517.918625][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 517.941871][ T10] usb 6-1: device descriptor read/8, error -71 [ 518.047213][ T10] usb usb6-port1: unable to enumerate USB device [ 518.514927][ T5884] gspca_se401: read req failed req 0x06 error -19 [ 518.533351][ T5884] usb 4-1: USB disconnect, device number 25 [ 518.762426][T11533] FAULT_INJECTION: forcing a failure. [ 518.762426][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 518.762466][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.2.2083 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 518.762497][T11533] Tainted: [L]=SOFTLOCKUP [ 518.762507][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.762521][T11533] Call Trace: [ 518.762531][T11533] [ 518.762540][T11533] dump_stack_lvl+0xe8/0x150 [ 518.762579][T11533] should_fail_ex+0x46b/0x600 [ 518.762611][T11533] should_failslab+0xa8/0x100 [ 518.762637][T11533] __kmalloc_noprof+0xdf/0x7b0 [ 518.762673][T11533] ? tomoyo_encode+0x28b/0x550 [ 518.762703][T11533] tomoyo_encode+0x28b/0x550 [ 518.762732][T11533] tomoyo_realpath_from_path+0x58d/0x5d0 [ 518.762767][T11533] ? tomoyo_path_number_perm+0x219/0x630 [ 518.762799][T11533] tomoyo_path_number_perm+0x246/0x630 [ 518.762833][T11533] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 518.762867][T11533] ? __lock_acquire+0x6b5/0x2cf0 [ 518.762927][T11533] ? __fget_files+0x2a/0x420 [ 518.762958][T11533] ? __fget_files+0x2a/0x420 [ 518.762984][T11533] ? __fget_files+0x3a6/0x420 [ 518.763011][T11533] ? __fget_files+0x2a/0x420 [ 518.763052][T11533] security_file_ioctl+0xc3/0x2a0 [ 518.763088][T11533] __se_sys_ioctl+0x47/0x170 [ 518.763127][T11533] do_syscall_64+0x14d/0xf80 [ 518.763155][T11533] ? trace_irq_disable+0x3b/0x150 [ 518.763182][T11533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.763205][T11533] ? clear_bhb_loop+0x40/0x90 [ 518.763231][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.763255][T11533] RIP: 0033:0x7f5b6d5ec799 [ 518.763276][T11533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.763294][T11533] RSP: 002b:00007f5b6b825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.763316][T11533] RAX: ffffffffffffffda RBX: 00007f5b6d866090 RCX: 00007f5b6d5ec799 [ 518.763333][T11533] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 518.763347][T11533] RBP: 00007f5b6b825090 R08: 0000000000000000 R09: 0000000000000000 [ 518.763362][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.763375][T11533] R13: 00007f5b6d866128 R14: 00007f5b6d866090 R15: 00007fff5a648408 [ 518.763410][T11533] [ 518.763431][T11533] ERROR: Out of memory at tomoyo_realpath_from_path. [ 518.836157][T11533] kvm: emulating exchange as write [ 519.700964][T11547] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2088'. [ 520.423409][T11532] netlink: set zone limit has 4 unknown bytes [ 520.707226][ T7035] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 520.847166][ T7035] usb 3-1: device descriptor read/64, error -71 [ 521.092289][ T7035] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 521.172685][T11590] FAULT_INJECTION: forcing a failure. [ 521.172685][T11590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.172725][T11590] CPU: 0 UID: 0 PID: 11590 Comm: syz.1.2106 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 521.172753][T11590] Tainted: [L]=SOFTLOCKUP [ 521.172761][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.172773][T11590] Call Trace: [ 521.172782][T11590] [ 521.172792][T11590] dump_stack_lvl+0xe8/0x150 [ 521.172831][T11590] should_fail_ex+0x46b/0x600 [ 521.172861][T11590] _copy_from_user+0x2d/0xb0 [ 521.172891][T11590] __copy_msghdr+0x3c5/0x5b0 [ 521.172928][T11590] ___sys_sendmsg+0x213/0x360 [ 521.172966][T11590] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.173004][T11590] ? kstrtouint+0x6e/0xe0 [ 521.173051][T11590] ? __fget_files+0x2a/0x420 [ 521.173079][T11590] ? __fget_files+0x3a6/0x420 [ 521.173118][T11590] __sys_sendmmsg+0x282/0x4e0 [ 521.173162][T11590] ? __pfx___sys_sendmmsg+0x10/0x10 [ 521.173223][T11590] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 521.173265][T11590] ? ksys_write+0x248/0x270 [ 521.173301][T11590] ? __pfx_ksys_write+0x10/0x10 [ 521.173341][T11590] __x64_sys_sendmmsg+0xa0/0xc0 [ 521.173376][T11590] do_syscall_64+0x14d/0xf80 [ 521.173406][T11590] ? trace_irq_disable+0x3b/0x150 [ 521.173438][T11590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.173458][T11590] ? clear_bhb_loop+0x40/0x90 [ 521.173482][T11590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.173501][T11590] RIP: 0033:0x7f083b49c799 [ 521.173519][T11590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.173536][T11590] RSP: 002b:00007f08396ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 521.173557][T11590] RAX: ffffffffffffffda RBX: 00007f083b715fa0 RCX: 00007f083b49c799 [ 521.173571][T11590] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 521.173586][T11590] RBP: 00007f08396ee090 R08: 0000000000000000 R09: 0000000000000000 [ 521.173600][T11590] R10: 0000000024008000 R11: 0000000000000246 R12: 0000000000000001 [ 521.173615][T11590] R13: 00007f083b716038 R14: 00007f083b715fa0 R15: 00007fffdfd0fac8 [ 521.173652][T11590] [ 521.216906][ T7035] usb 3-1: device descriptor read/64, error -71 [ 521.333354][ T7035] usb usb3-port1: attempt power cycle [ 521.407310][ T5179] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 521.546738][T11592] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 521.787298][ T5179] usb 6-1: Using ep0 maxpacket: 16 [ 521.815950][ T5179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.815990][ T5179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.824048][ T5179] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 521.824123][ T5179] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 521.824198][ T5179] usb 6-1: Manufacturer: syz [ 521.859592][ T7035] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 522.535806][ T5179] usb 6-1: config 0 descriptor?? [ 522.543561][ T7035] usb 3-1: device descriptor read/8, error -71 [ 522.786759][ T7035] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 522.807398][ T7035] usb 3-1: device descriptor read/8, error -71 [ 522.918100][ T7035] usb usb3-port1: unable to enumerate USB device [ 523.059192][ T5179] usbhid 6-1:0.0: can't add hid device: -71 [ 523.059327][ T5179] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 523.091211][ T5179] usb 6-1: USB disconnect, device number 47 [ 525.527679][T11640] netlink: 'syz.2.2125': attribute type 1 has an invalid length. [ 526.166709][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 526.196682][ T5884] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 526.316917][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 526.319149][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.319178][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.325959][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 526.325988][ T10] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 526.326018][ T10] usb 6-1: Manufacturer: syz [ 526.346849][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 526.363598][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.363748][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.363828][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.363889][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 526.363950][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.371901][ T5884] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 526.371969][ T5884] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 526.372045][ T5884] usb 3-1: Manufacturer: syz [ 526.436495][ T10] usb 6-1: config 0 descriptor?? [ 526.458454][ T5884] usb 3-1: config 0 descriptor?? [ 526.786687][ T5884] rc_core: IR keymap rc-hauppauge not found [ 526.786782][ T5884] Registered IR keymap rc-empty [ 526.787172][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 526.807072][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 526.844539][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 526.888531][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input43 [ 526.892298][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 526.892388][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 526.894913][T11674] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2137'. [ 526.913441][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 526.935824][ T809] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 526.943058][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 526.971158][ T10] usb 6-1: USB disconnect, device number 48 [ 526.978888][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.010994][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.027316][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.054624][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.077919][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.109188][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.126762][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.156795][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.206274][ T5884] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 527.207474][ T5884] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 527.286513][ T5884] usb 3-1: USB disconnect, device number 73 [ 528.496798][ T36] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 528.627395][ T36] usb 3-1: device descriptor read/64, error -71 [ 528.686847][ T809] usb 1-1: device descriptor read/64, error -71 [ 528.887418][ T36] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 528.947718][ T809] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 529.056798][ T36] usb 3-1: device descriptor read/64, error -71 [ 529.116838][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 529.119475][ T809] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 529.119503][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.119524][ T809] usb 1-1: config 0 has no interface number 0 [ 529.119558][ T809] usb 1-1: config 0 interface 101 has no altsetting 0 [ 529.122751][ T809] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 529.122781][ T809] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 529.122804][ T809] usb 1-1: Product: syz [ 529.122819][ T809] usb 1-1: Manufacturer: syz [ 529.122836][ T809] usb 1-1: SerialNumber: syz [ 529.160237][ T809] usb 1-1: config 0 descriptor?? [ 529.202189][ T36] usb usb3-port1: attempt power cycle [ 529.230822][ T809] hub 1-1:0.101: bad descriptor, ignoring hub [ 529.230863][ T809] hub 1-1:0.101: probe with driver hub failed with error -5 [ 529.654716][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.682011][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.288236][ T36] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 530.310493][ T36] usb 3-1: device descriptor read/8, error -71 [ 530.437036][ T809] usb 1-1: USB disconnect, device number 71 [ 530.463469][T11723] FAULT_INJECTION: forcing a failure. [ 530.463469][T11723] name failslab, interval 1, probability 0, space 0, times 0 [ 530.463509][T11723] CPU: 1 UID: 0 PID: 11723 Comm: syz.1.2152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 530.463546][T11723] Tainted: [L]=SOFTLOCKUP [ 530.463555][T11723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.463570][T11723] Call Trace: [ 530.463578][T11723] [ 530.463589][T11723] dump_stack_lvl+0xe8/0x150 [ 530.463631][T11723] should_fail_ex+0x46b/0x600 [ 530.463663][T11723] should_failslab+0xa8/0x100 [ 530.463690][T11723] __kmalloc_noprof+0xdf/0x7b0 [ 530.463735][T11723] ? tomoyo_encode+0x28b/0x550 [ 530.463765][T11723] tomoyo_encode+0x28b/0x550 [ 530.463795][T11723] tomoyo_realpath_from_path+0x58d/0x5d0 [ 530.463831][T11723] ? tomoyo_path_number_perm+0x219/0x630 [ 530.463870][T11723] tomoyo_path_number_perm+0x246/0x630 [ 530.463907][T11723] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 530.463942][T11723] ? __lock_acquire+0x6b5/0x2cf0 [ 530.464002][T11723] ? __fget_files+0x2a/0x420 [ 530.464036][T11723] ? __fget_files+0x2a/0x420 [ 530.464064][T11723] ? __fget_files+0x3a6/0x420 [ 530.464091][T11723] ? __fget_files+0x2a/0x420 [ 530.464126][T11723] security_file_ioctl+0xc3/0x2a0 [ 530.464162][T11723] __se_sys_ioctl+0x47/0x170 [ 530.464202][T11723] do_syscall_64+0x14d/0xf80 [ 530.464232][T11723] ? trace_irq_disable+0x3b/0x150 [ 530.464260][T11723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.464285][T11723] ? clear_bhb_loop+0x40/0x90 [ 530.464314][T11723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.464338][T11723] RIP: 0033:0x7f083b49c799 [ 530.464360][T11723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.464381][T11723] RSP: 002b:00007f08396ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.464406][T11723] RAX: ffffffffffffffda RBX: 00007f083b715fa0 RCX: 00007f083b49c799 [ 530.464424][T11723] RDX: 00002000000002c0 RSI: 0000000000008914 RDI: 0000000000000005 [ 530.464440][T11723] RBP: 00007f08396ee090 R08: 0000000000000000 R09: 0000000000000000 [ 530.464455][T11723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.464469][T11723] R13: 00007f083b716038 R14: 00007f083b715fa0 R15: 00007fffdfd0fac8 [ 530.464507][T11723] [ 530.464630][T11723] ERROR: Out of memory at tomoyo_realpath_from_path. [ 530.464676][T11723] macvlan1: entered promiscuous mode [ 530.464931][T11723] macvlan1: entered allmulticast mode [ 530.464948][T11723] veth1_vlan: entered allmulticast mode [ 530.596735][ T36] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 530.638977][ T36] usb 3-1: device descriptor read/8, error -71 [ 530.747018][ T36] usb usb3-port1: unable to enumerate USB device [ 531.376709][ T7035] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 531.527344][ T7035] usb 1-1: Using ep0 maxpacket: 16 [ 531.591618][ T7035] usb 1-1: unable to get BOS descriptor or descriptor too short [ 531.699167][ T7035] usb 1-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 531.699920][ T7035] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 532.108782][ T7035] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 532.108816][ T7035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.108839][ T7035] usb 1-1: Product: syz [ 532.108855][ T7035] usb 1-1: Manufacturer: syz [ 532.108871][ T7035] usb 1-1: SerialNumber: syz [ 532.793327][T11738] kAFS: unparsable volume name [ 532.962586][ T7035] usb 1-1: unit 2 not found! [ 533.040873][ T7035] usb 1-1: can't set first interface for hiFace device. [ 533.040914][ T7035] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 533.065883][ T7035] usb 1-1: can't set first interface for hiFace device. [ 533.065924][ T7035] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 533.085990][ T7035] usb 1-1: USB disconnect, device number 72 [ 533.187783][ T6361] udevd[6361]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.196724][ T36] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 533.356781][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 533.362474][ T36] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 533.362502][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.362533][ T36] usb 3-1: config 0 has no interface number 0 [ 533.362568][ T36] usb 3-1: config 0 interface 101 has no altsetting 0 [ 533.366232][ T36] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 533.366261][ T36] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 533.366281][ T36] usb 3-1: Product: syz [ 533.366296][ T36] usb 3-1: Manufacturer: syz [ 533.366312][ T36] usb 3-1: SerialNumber: syz [ 533.446275][ T36] usb 3-1: config 0 descriptor?? [ 533.459205][ T36] hub 3-1:0.101: bad descriptor, ignoring hub [ 533.459239][ T36] hub 3-1:0.101: probe with driver hub failed with error -5 [ 535.326048][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.371560][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.407925][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 535.527064][ T36] usb 3-1: USB disconnect, device number 78 [ 535.598714][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.599317][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.599609][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.599867][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.600121][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.600402][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.600648][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.600894][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.601139][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.601411][T11782] netlink: 'syz.5.2176': attribute type 62 has an invalid length. [ 535.625170][T11787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2177'. [ 535.878076][T11791] FAULT_INJECTION: forcing a failure. [ 535.878076][T11791] name failslab, interval 1, probability 0, space 0, times 0 [ 535.878117][T11791] CPU: 1 UID: 0 PID: 11791 Comm: syz.1.2179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.878149][T11791] Tainted: [L]=SOFTLOCKUP [ 535.878158][T11791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.878174][T11791] Call Trace: [ 535.878184][T11791] [ 535.878193][T11791] dump_stack_lvl+0xe8/0x150 [ 535.878233][T11791] should_fail_ex+0x46b/0x600 [ 535.878264][T11791] should_failslab+0xa8/0x100 [ 535.878289][T11791] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 535.878326][T11791] ? __alloc_skb+0x1d0/0x7d0 [ 535.878375][T11791] ? lockdep_hardirqs_on+0x7a/0x110 [ 535.878413][T11791] __alloc_skb+0x1d0/0x7d0 [ 535.878446][T11791] netlink_sendmsg+0x5d4/0xb40 [ 535.878485][T11791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.878519][T11791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 535.878558][T11791] ____sys_sendmsg+0x94c/0x9c0 [ 535.878607][T11791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.878647][T11791] ? import_iovec+0x73/0xa0 [ 535.878696][T11791] ___sys_sendmsg+0x2a5/0x360 [ 535.878735][T11791] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.878774][T11791] ? kstrtouint+0x6e/0xe0 [ 535.878824][T11791] ? __fget_files+0x2a/0x420 [ 535.878851][T11791] ? __fget_files+0x3a6/0x420 [ 535.878889][T11791] __sys_sendmmsg+0x282/0x4e0 [ 535.878928][T11791] ? __pfx___sys_sendmmsg+0x10/0x10 [ 535.878972][T11791] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 535.879011][T11791] ? ksys_write+0x248/0x270 [ 535.879046][T11791] ? __pfx_ksys_write+0x10/0x10 [ 535.879086][T11791] __x64_sys_sendmmsg+0xa0/0xc0 [ 535.879121][T11791] do_syscall_64+0x14d/0xf80 [ 535.879163][T11791] ? trace_irq_disable+0x3b/0x150 [ 535.879206][T11791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.879229][T11791] ? clear_bhb_loop+0x40/0x90 [ 535.879257][T11791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.879279][T11791] RIP: 0033:0x7f083b49c799 [ 535.879300][T11791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.879320][T11791] RSP: 002b:00007f08396ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 535.879344][T11791] RAX: ffffffffffffffda RBX: 00007f083b715fa0 RCX: 00007f083b49c799 [ 535.879362][T11791] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 535.879385][T11791] RBP: 00007f08396ee090 R08: 0000000000000000 R09: 0000000000000000 [ 535.879400][T11791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.879414][T11791] R13: 00007f083b716038 R14: 00007f083b715fa0 R15: 00007fffdfd0fac8 [ 535.879449][T11791] [ 536.323615][T11792] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2178'. [ 537.328588][ T5113] Bluetooth: hci6: command 0x0405 tx timeout [ 537.696701][ T6005] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 537.825307][T11792] netlink: set zone limit has 4 unknown bytes [ 537.856453][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 537.864362][ T6005] usb 6-1: unable to get BOS descriptor or descriptor too short [ 537.865352][ T6005] usb 6-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 537.865409][ T6005] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 537.885154][ T6005] usb 6-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 537.885235][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.885287][ T6005] usb 6-1: Product: syz [ 537.885329][ T6005] usb 6-1: Manufacturer: syz [ 537.885386][ T6005] usb 6-1: SerialNumber: syz [ 538.172953][T11814] kAFS: unparsable volume name [ 539.702660][ T6005] usb 6-1: unit 2 not found! [ 539.938276][ T6005] usb 6-1: can't set first interface for hiFace device. [ 539.938306][ T6005] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 539.942938][ T6005] usb 6-1: can't set first interface for hiFace device. [ 539.945234][ T6005] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 539.954214][ T6005] usb 6-1: USB disconnect, device number 49 [ 540.150794][ T6361] udevd[6361]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.454369][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 540.458890][ T36] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 540.480887][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 540.482260][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 540.483923][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 540.484742][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 540.536710][ T6005] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 540.596457][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2197'. [ 540.606754][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 540.614985][ T36] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 540.615013][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.615056][ T36] usb 3-1: config 0 has no interface number 0 [ 540.615206][ T36] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 540.671917][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 540.671928][ T36] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 540.671944][T11841] openvswitch: netlink: Message has 16 unknown bytes. [ 540.671956][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.671978][ T36] usb 3-1: Product: syz [ 540.671993][ T36] usb 3-1: Manufacturer: syz [ 540.672009][ T36] usb 3-1: SerialNumber: syz [ 540.740751][ T6005] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.740814][ T6005] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 540.740840][ T6005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.813795][ T36] usb 3-1: config 0 descriptor?? [ 540.813830][ T6005] usb 4-1: config 0 descriptor?? [ 540.833791][ T6005] pwc: Askey VC010 type 2 USB webcam detected. [ 540.861992][ T36] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 540.862079][ T36] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 541.047592][ T36] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 541.072744][ T36] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 541.230634][ T6005] pwc: recv_control_msg error -32 req 02 val 2b00 [ 541.432235][ T6005] pwc: recv_control_msg error -71 req 02 val 2c00 [ 541.432707][ T6005] pwc: recv_control_msg error -71 req 04 val 1000 [ 541.433098][ T6005] pwc: recv_control_msg error -71 req 04 val 1300 [ 541.433516][ T6005] pwc: recv_control_msg error -71 req 04 val 1400 [ 541.433978][ T6005] pwc: recv_control_msg error -71 req 02 val 2000 [ 541.434448][ T6005] pwc: recv_control_msg error -71 req 02 val 2100 [ 541.434926][ T6005] pwc: recv_control_msg error -71 req 04 val 1500 [ 541.435410][ T6005] pwc: recv_control_msg error -71 req 02 val 2500 [ 541.435884][ T6005] pwc: recv_control_msg error -71 req 02 val 2400 [ 541.436354][ T6005] pwc: recv_control_msg error -71 req 02 val 2600 [ 541.437156][ T6005] pwc: recv_control_msg error -71 req 02 val 2900 [ 541.437636][ T6005] pwc: recv_control_msg error -71 req 02 val 2800 [ 541.439185][ T6005] pwc: recv_control_msg error -71 req 04 val 1100 [ 541.445967][ T6005] pwc: recv_control_msg error -71 req 04 val 1200 [ 541.466711][ T36] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 541.561947][ T6005] pwc: Registered as video103. [ 541.573401][ T6005] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 541.626687][ T6005] usb 4-1: USB disconnect, device number 26 [ 541.643928][ T36] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 541.643972][ T36] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 541.643998][ T36] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.644019][ T36] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 541.644126][ T36] usb 1-1: config 0 interface 0 has no altsetting 0 [ 541.644163][ T36] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 541.644187][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.733301][ T36] usb 1-1: config 0 descriptor?? [ 542.131262][ T6005] usb 3-1: USB disconnect, device number 79 [ 543.121562][ T36] hid-alps 0003:044E:120C.0009: item fetching failed at offset 4/8 [ 543.122352][ T36] hid-alps 0003:044E:120C.0009: parse failed [ 543.122459][ T36] hid-alps 0003:044E:120C.0009: probe with driver hid-alps failed with error -22 [ 543.182060][ T5805] Bluetooth: hci4: command tx timeout [ 543.311243][ T5884] usb 1-1: USB disconnect, device number 73 [ 543.382201][T11836] chnl_net:caif_netlink_parms(): no params data found [ 543.562316][T11836] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.562537][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.563063][T11836] bridge_slave_0: entered allmulticast mode [ 543.565939][T11836] bridge_slave_0: entered promiscuous mode [ 543.600991][T11836] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.601195][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.601426][T11836] bridge_slave_1: entered allmulticast mode [ 543.631590][T11836] bridge_slave_1: entered promiscuous mode [ 543.735330][T11836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.751023][T11836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.828683][T11865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2203'. [ 543.834680][T11836] team0: Port device team_slave_0 added [ 543.899121][T11836] team0: Port device team_slave_1 added [ 544.076796][ T6005] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 544.110148][T11836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.110167][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.110199][T11836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.127106][T11836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.127154][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.127222][T11836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.228012][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 544.230197][ T6005] usb 6-1: unable to get BOS descriptor or descriptor too short [ 544.231674][ T6005] usb 6-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 544.231743][ T6005] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 544.234088][ T6005] usb 6-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 544.234108][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.234123][ T6005] usb 6-1: Product: syz [ 544.234133][ T6005] usb 6-1: Manufacturer: syz [ 544.234144][ T6005] usb 6-1: SerialNumber: syz [ 544.481310][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'. [ 544.481348][T11879] openvswitch: netlink: Message has 16 unknown bytes. [ 544.609571][T11867] kAFS: unparsable volume name [ 544.711516][ T6005] usb 6-1: unit 2 not found! [ 544.812825][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2209'. [ 544.908960][ T6005] usb 6-1: can't set first interface for hiFace device. [ 544.909005][ T6005] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 544.919705][ T6005] usb 6-1: can't set first interface for hiFace device. [ 544.920386][ T6005] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 544.930953][T11876] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2207'. [ 545.014766][ T6005] usb 6-1: USB disconnect, device number 50 [ 545.117885][ T6361] udevd[6361]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.247400][ T5805] Bluetooth: hci4: command tx timeout [ 545.459067][T11836] hsr_slave_0: entered promiscuous mode [ 545.465082][T11836] hsr_slave_1: entered promiscuous mode [ 546.517945][T11836] debugfs: 'hsr0' already exists in 'hsr' [ 546.517976][T11836] Cannot create hsr debugfs directory [ 546.592695][T11876] netlink: set zone limit has 4 unknown bytes [ 547.066747][ T7035] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 547.219303][ T7035] usb 3-1: Using ep0 maxpacket: 32 [ 547.235730][ T7035] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 547.235761][ T7035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.235781][ T7035] usb 3-1: config 0 has no interface number 0 [ 547.235826][ T7035] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.266838][ T6005] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 547.270754][ T7035] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 547.270797][ T7035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.270820][ T7035] usb 3-1: Product: syz [ 547.270866][ T7035] usb 3-1: Manufacturer: syz [ 547.270911][ T7035] usb 3-1: SerialNumber: syz [ 547.320549][ T7035] usb 3-1: config 0 descriptor?? [ 547.327312][ T5805] Bluetooth: hci4: command tx timeout [ 547.379755][ T7035] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 547.379827][ T7035] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 547.516975][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.564038][ T7035] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 547.564623][ T7035] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 547.919930][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.168016][ T5884] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 548.204172][ T7035] usb 3-1: USB disconnect, device number 80 [ 548.263361][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.316882][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 548.322274][ T5884] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 548.322316][ T5884] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 548.322346][ T5884] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 548.322368][ T5884] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x19, changing to 0x9 [ 548.322388][ T5884] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x9 has invalid wMaxPacketSize 0 [ 548.322405][ T5884] usb 1-1: config 168 interface 0 altsetting 188 bulk endpoint 0x9 has invalid maxpacket 0 [ 548.322423][ T5884] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 548.322443][ T5884] usb 1-1: config 168 interface 0 has no altsetting 0 [ 548.325448][ T5884] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 548.325480][ T5884] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 548.325518][ T5884] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 548.325539][ T5884] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x19, changing to 0x9 [ 548.325559][ T5884] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x9 has invalid wMaxPacketSize 0 [ 548.325575][ T5884] usb 1-1: config 168 interface 0 altsetting 188 bulk endpoint 0x9 has invalid maxpacket 0 [ 548.325606][ T5884] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 548.325627][ T5884] usb 1-1: config 168 interface 0 has no altsetting 0 [ 548.334755][ T5884] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 548.334873][ T5884] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 548.334988][ T5884] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 548.335065][ T5884] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x19, changing to 0x9 [ 548.335141][ T5884] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x9 has invalid wMaxPacketSize 0 [ 548.335205][ T5884] usb 1-1: config 168 interface 0 altsetting 188 bulk endpoint 0x9 has invalid maxpacket 0 [ 548.335269][ T5884] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 548.335325][ T5884] usb 1-1: config 168 interface 0 has no altsetting 0 [ 548.392323][ T5884] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 548.392356][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.392378][ T5884] usb 1-1: Product: syz [ 548.392415][ T5884] usb 1-1: Manufacturer: syz [ 548.392482][ T5884] usb 1-1: SerialNumber: syz [ 548.848959][T11911] sctp: [Deprecated]: syz.0.2216 (pid 11911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.848959][T11911] Use struct sctp_sack_info instead [ 548.943203][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 548.943564][T11917] openvswitch: netlink: Message has 8 unknown bytes. [ 548.952985][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.992988][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 549.032913][ T5884] adutux 1-1:168.0: interrupt endpoints not found [ 549.131775][ T5884] usb 1-1: USB disconnect, device number 74 [ 549.593104][ T5805] Bluetooth: hci4: command tx timeout [ 550.556727][ T5884] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 550.643738][T11935] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2224'. [ 550.759114][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.759135][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 550.759171][ T5884] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 550.759188][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.844152][ T5884] usb 4-1: config 0 descriptor?? [ 550.946064][ T12] bridge_slave_1: left allmulticast mode [ 550.946086][ T12] bridge_slave_1: left promiscuous mode [ 550.946322][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.960752][T11905] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 551.106053][ T12] bridge_slave_0: left allmulticast mode [ 551.106086][ T12] bridge_slave_0: left promiscuous mode [ 551.106511][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.108366][ T5884] Bluetooth: Can't get state to change to load ram patch err [ 551.108385][ T5884] Bluetooth: Loading patch file failed [ 551.108425][ T5884] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 551.142337][T11905] usb 6-1: Using ep0 maxpacket: 16 [ 552.923084][T11905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.923144][T11905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 552.923184][T11905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 552.923206][T11905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 552.923230][T11905] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.926775][T11905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 552.926806][T11905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 552.926827][T11905] usb 6-1: Manufacturer: syz [ 553.074865][ T5884] usb 4-1: USB disconnect, device number 28 [ 553.127072][T11905] usb 6-1: config 0 descriptor?? [ 553.606683][T11905] rc_core: IR keymap rc-hauppauge not found [ 553.606706][T11905] Registered IR keymap rc-empty [ 553.606960][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.626957][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.649321][T11905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 553.654415][T11905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input45 [ 553.700772][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.717248][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.736818][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.767388][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.790012][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.806798][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.830765][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.846886][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.866843][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.887821][T11905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 553.932729][T11905] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 553.932749][T11905] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 553.977709][ T5179] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 554.062093][T11905] usb 6-1: USB disconnect, device number 51 [ 554.127042][ T5179] usb 4-1: Using ep0 maxpacket: 16 [ 554.129247][ T5179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.129277][ T5179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.134970][ T5179] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 554.134999][ T5179] usb 4-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 554.135020][ T5179] usb 4-1: Manufacturer: syz [ 554.218921][ T5179] usb 4-1: config 0 descriptor?? [ 554.267411][T11935] netlink: set zone limit has 4 unknown bytes [ 554.708920][ T5179] usbhid 4-1:0.0: can't add hid device: -71 [ 554.709046][ T5179] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 554.759809][ T5179] usb 4-1: USB disconnect, device number 29 [ 554.794786][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2230'. [ 554.794816][T11961] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 556.689150][ T36] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 556.726428][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.766742][T11905] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 556.809417][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.849939][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.849971][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 556.850027][ T36] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 556.850054][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.878744][ T36] usb 4-1: config 0 descriptor?? [ 556.879977][ T12] bond0 (unregistering): Released all slaves [ 556.929932][T11905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.929961][T11905] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 556.930120][T11905] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 556.930147][T11905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.012256][T11905] usb 6-1: config 0 descriptor?? [ 557.082130][ T12] bond1 (unregistering): Released all slaves [ 557.321212][ T36] Bluetooth: Can't get state to change to load configuration err [ 557.321234][ T36] Bluetooth: Loading sysconfig file failed [ 557.321275][ T36] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 557.372551][ T36] usb 4-1: USB disconnect, device number 30 [ 557.454849][T11905] Bluetooth: Can't get state to change to load configuration err [ 557.454880][T11905] Bluetooth: Loading sysconfig file failed [ 557.454920][T11905] ath3k 6-1:0.0: probe with driver ath3k failed with error -16 [ 557.509563][T11905] usb 6-1: USB disconnect, device number 52 [ 558.097985][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 558.098027][T11995] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 559.044159][T12010] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2245'. [ 559.236695][ T36] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 559.397723][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 559.400272][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.400328][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.400359][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 559.400383][ T36] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 559.400408][ T36] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.401753][ T36] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 559.401780][ T36] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 559.401801][ T36] usb 6-1: Manufacturer: syz [ 559.461476][ T36] usb 6-1: config 0 descriptor?? [ 559.733225][T12010] netlink: set zone limit has 4 unknown bytes [ 559.916806][ T36] rc_core: IR keymap rc-hauppauge not found [ 559.916828][ T36] Registered IR keymap rc-empty [ 559.916973][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 559.936736][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 559.958284][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 559.962123][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input46 [ 560.115743][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.128481][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.156915][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.186780][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.216802][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.256788][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.286767][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.316821][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.337741][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.369040][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 560.387728][ T36] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 560.387751][ T36] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 560.424700][ T36] usb 6-1: USB disconnect, device number 53 [ 560.557808][T12023] FAULT_INJECTION: forcing a failure. [ 560.557808][T12023] name failslab, interval 1, probability 0, space 0, times 0 [ 560.557835][T12023] CPU: 0 UID: 0 PID: 12023 Comm: syz.2.2249 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.557856][T12023] Tainted: [L]=SOFTLOCKUP [ 560.557862][T12023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.557872][T12023] Call Trace: [ 560.557878][T12023] [ 560.557884][T12023] dump_stack_lvl+0xe8/0x150 [ 560.557911][T12023] should_fail_ex+0x46b/0x600 [ 560.557931][T12023] should_failslab+0xa8/0x100 [ 560.557948][T12023] __kmalloc_noprof+0xdf/0x7b0 [ 560.557971][T12023] ? tomoyo_encode+0x28b/0x550 [ 560.557990][T12023] tomoyo_encode+0x28b/0x550 [ 560.558008][T12023] tomoyo_realpath_from_path+0x58d/0x5d0 [ 560.558031][T12023] ? tomoyo_path_number_perm+0x219/0x630 [ 560.558052][T12023] tomoyo_path_number_perm+0x246/0x630 [ 560.558075][T12023] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 560.558098][T12023] ? __lock_acquire+0x6b5/0x2cf0 [ 560.558136][T12023] ? __fget_files+0x2a/0x420 [ 560.558158][T12023] ? __fget_files+0x2a/0x420 [ 560.558175][T12023] ? __fget_files+0x3a6/0x420 [ 560.558192][T12023] ? __fget_files+0x2a/0x420 [ 560.558213][T12023] security_file_ioctl+0xc3/0x2a0 [ 560.558237][T12023] __se_sys_ioctl+0x47/0x170 [ 560.558262][T12023] do_syscall_64+0x14d/0xf80 [ 560.558283][T12023] ? trace_irq_disable+0x3b/0x150 [ 560.558300][T12023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.558316][T12023] ? clear_bhb_loop+0x40/0x90 [ 560.558334][T12023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.558349][T12023] RIP: 0033:0x7f5b6d5ec799 [ 560.558380][T12023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.558394][T12023] RSP: 002b:00007f5b6b846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.558411][T12023] RAX: ffffffffffffffda RBX: 00007f5b6d865fa0 RCX: 00007f5b6d5ec799 [ 560.558423][T12023] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 560.558433][T12023] RBP: 00007f5b6b846090 R08: 0000000000000000 R09: 0000000000000000 [ 560.558443][T12023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.558453][T12023] R13: 00007f5b6d866038 R14: 00007f5b6d865fa0 R15: 00007fff5a648408 [ 560.558477][T12023] [ 560.558492][T12023] ERROR: Out of memory at tomoyo_realpath_from_path. [ 561.159513][ T12] hsr_slave_0: left promiscuous mode [ 561.203378][ T12] hsr_slave_1: left promiscuous mode [ 561.204405][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.204431][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.289064][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.289085][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.391173][ T12] veth1_macvtap: left promiscuous mode [ 561.391249][ T12] veth0_macvtap: left promiscuous mode [ 561.391352][ T12] veth1_vlan: left allmulticast mode [ 561.391618][ T12] veth1_vlan: left promiscuous mode [ 561.391749][ T12] veth0_vlan: left promiscuous mode [ 562.824468][ T36] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 562.885957][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2253'. [ 562.885991][T12036] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 562.944055][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.944150][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.988632][ T36] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 562.988666][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.018369][ T36] usb 6-1: config 0 descriptor?? [ 563.022418][ T36] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 563.024392][ T36] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 563.265031][ T5912] usb 6-1: USB disconnect, device number 54 [ 563.270653][ T5912] ftdi_sio 6-1:0.0: device disconnected [ 563.328376][T12038] overlayfs: missing 'lowerdir' [ 563.806712][ T5912] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 564.326252][ T12] team_slave_1 (unregistering): left promiscuous mode [ 564.326281][ T12] team_slave_1 (unregistering): left allmulticast mode [ 564.337227][T11905] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 564.352103][ T12] team0 (unregistering): Port device team_slave_1 removed [ 564.391747][ T12] team_slave_0 (unregistering): left promiscuous mode [ 564.391779][ T12] team_slave_0 (unregistering): left allmulticast mode [ 564.429560][ T12] team0 (unregistering): Port device team_slave_0 removed [ 564.506823][T11905] usb 6-1: Using ep0 maxpacket: 8 [ 564.535981][T11905] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 564.536015][T11905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.536039][T11905] usb 6-1: Product: syz [ 564.536054][T11905] usb 6-1: Manufacturer: syz [ 564.536070][T11905] usb 6-1: SerialNumber: syz [ 564.589772][T11905] usb 6-1: config 0 descriptor?? [ 564.635253][T11905] gspca_main: se401-2.14.0 probing 047d:5003 [ 565.776715][T11905] usb 6-1: reset high-speed USB device number 55 using dummy_hcd [ 565.936705][T11905] usb 6-1: device descriptor read/64, error -32 [ 566.070046][T11905] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 566.070229][T11905] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 566.070256][T11905] CPU: 0 UID: 0 PID: 11905 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 566.070288][T11905] Tainted: [L]=SOFTLOCKUP [ 566.070297][T11905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 566.070320][T11905] Workqueue: usb_hub_wq hub_event [ 566.070430][T11905] RIP: 0010:usb_gadget_udc_reset+0x27/0x60 [ 566.070513][T11905] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 6e 5c c0 fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 cb 74 26 fb 4d 8b 1e 48 89 df 2e e8 [ 566.070534][T11905] RSP: 0018:ffffc9000dd464c8 EFLAGS: 00010202 [ 566.070554][T11905] RAX: 0000000000000008 RBX: ffff888029ec8c40 RCX: dffffc0000000000 [ 566.070572][T11905] RDX: ffffc9001b403000 RSI: 0000000000016d7a RDI: 0000000000016d7b [ 566.070589][T11905] RBP: ffff88802a506b6c R08: ffffffff8f6a4eb7 R09: 1ffffffff1ed49d6 [ 566.070606][T11905] R10: dffffc0000000000 R11: fffffbfff1ed49d7 R12: ffff888029ec8c40 [ 566.070624][T11905] R13: 1ffff11005494ea1 R14: 0000000000000040 R15: 1ffff110053d9187 [ 566.070640][T11905] FS: 0000000000000000(0000) GS:ffff88812633d000(0000) knlGS:0000000000000000 [ 566.070659][T11905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.070675][T11905] CR2: 000000110c2dc32f CR3: 000000003b462000 CR4: 00000000003526f0 [ 566.070695][T11905] Call Trace: [ 566.070704][T11905] [ 566.070714][T11905] set_link_state+0x80b/0x1220 [ 566.070770][T11905] dummy_hub_control+0xa09/0x1a00 [ 566.070795][T11905] ? usb_hcd_submit_urb+0x786/0x1b50 [ 566.070822][T11905] usb_hcd_submit_urb+0xdbe/0x1b50 [ 566.070852][T11905] usb_start_wait_urb+0x12b/0x510 [ 566.070912][T11905] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 566.070954][T11905] usb_control_msg+0x232/0x3e0 [ 566.070988][T11905] hub_port_reset+0x3c7/0x1820 [ 566.071033][T11905] hub_port_init+0x299/0x28c0 [ 566.071073][T11905] ? usb_enable_endpoint+0x104/0x1b0 [ 566.071108][T11905] usb_reset_and_verify_device+0x105d/0x1af0 [ 566.071151][T11905] ? __pfx_usb_reset_and_verify_device+0x10/0x10 [ 566.071185][T11905] ? lockdep_hardirqs_on+0x7a/0x110 [ 566.071214][T11905] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 566.071245][T11905] ? mutex_lock_nested+0x152/0x1d0 [ 566.071266][T11905] ? usb_reset_device+0x548/0xb40 [ 566.071306][T11905] usb_reset_device+0x551/0xb40 [ 566.071344][T11905] sd_config+0x27f/0x15b0 [ 566.071423][T11905] ? snprintf+0xe8/0x140 [ 566.071445][T11905] ? snprintf+0xe8/0x140 [ 566.071466][T11905] ? __pfx_sd_config+0x10/0x10 [ 566.071496][T11905] ? __pfx_snprintf+0x10/0x10 [ 566.071519][T11905] ? __rt_spin_lock_init+0x3e/0x50 [ 566.071550][T11905] ? __init_waitqueue_head+0xae/0x160 [ 566.071591][T11905] gspca_dev_probe2+0x81e/0x1450 [ 566.071618][T11905] ? gspca_dev_probe+0x18e/0x250 [ 566.071693][T11905] usb_probe_interface+0x668/0xc90 [ 566.071723][T11905] ? __pfx_usb_probe_interface+0x10/0x10 [ 566.071744][T11905] really_probe+0x267/0xaf0 [ 566.071836][T11905] __driver_probe_device+0x18c/0x320 [ 566.071862][T11905] driver_probe_device+0x4f/0x240 [ 566.071887][T11905] __device_attach_driver+0x2d4/0x4c0 [ 566.071912][T11905] bus_for_each_drv+0x25b/0x2f0 [ 566.071963][T11905] ? __pfx___device_attach_driver+0x10/0x10 [ 566.071987][T11905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 566.072015][T11905] ? rt_spin_unlock+0x160/0x200 [ 566.072059][T11905] __device_attach+0x2c8/0x450 [ 566.072082][T11905] ? __pfx___device_attach+0x10/0x10 [ 566.072105][T11905] ? rt_spin_unlock+0x160/0x200 [ 566.072132][T11905] device_initial_probe+0xa1/0xd0 [ 566.072156][T11905] bus_probe_device+0x12d/0x220 [ 566.072183][T11905] ? device_add+0x726/0xb80 [ 566.072218][T11905] device_add+0x7b6/0xb80 [ 566.072254][T11905] usb_set_configuration+0x1a87/0x2110 [ 566.072312][T11905] usb_generic_driver_probe+0x8d/0x150 [ 566.072399][T11905] usb_probe_device+0x1c4/0x3b0 [ 566.072425][T11905] ? __pfx_usb_probe_device+0x10/0x10 [ 566.072446][T11905] really_probe+0x267/0xaf0 [ 566.072473][T11905] __driver_probe_device+0x18c/0x320 [ 566.072499][T11905] driver_probe_device+0x4f/0x240 [ 566.072524][T11905] __device_attach_driver+0x2d4/0x4c0 [ 566.072552][T11905] bus_for_each_drv+0x25b/0x2f0 [ 566.072582][T11905] ? __pfx___device_attach_driver+0x10/0x10 [ 566.072607][T11905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 566.072636][T11905] ? rt_spin_unlock+0x160/0x200 [ 566.072662][T11905] __device_attach+0x2c8/0x450 [ 566.072686][T11905] ? __pfx___device_attach+0x10/0x10 [ 566.072707][T11905] ? rt_spin_unlock+0x160/0x200 [ 566.072734][T11905] device_initial_probe+0xa1/0xd0 [ 566.072757][T11905] bus_probe_device+0x12d/0x220 [ 566.072785][T11905] ? device_add+0x726/0xb80 [ 566.072818][T11905] device_add+0x7b6/0xb80 [ 566.072854][T11905] usb_new_device+0x9f8/0x16e0 [ 566.072890][T11905] ? __pfx_usb_new_device+0x10/0x10 [ 566.072925][T11905] hub_event+0x2a49/0x4f60 [ 566.072984][T11905] ? __pfx_hub_event+0x10/0x10 [ 566.073023][T11905] ? process_scheduled_works+0xa25/0x1830 [ 566.073053][T11905] ? process_scheduled_works+0xa25/0x1830 [ 566.073084][T11905] process_scheduled_works+0xb02/0x1830 [ 566.073130][T11905] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.073165][T11905] ? assign_work+0x3d5/0x5e0 [ 566.073197][T11905] worker_thread+0xa50/0xfc0 [ 566.073243][T11905] kthread+0x388/0x470 [ 566.073266][T11905] ? __pfx_worker_thread+0x10/0x10 [ 566.073296][T11905] ? __pfx_kthread+0x10/0x10 [ 566.073326][T11905] ret_from_fork+0x51e/0xb90 [ 566.073360][T11905] ? __pfx_ret_from_fork+0x10/0x10 [ 566.073389][T11905] ? __switch_to+0xc7d/0x1450 [ 566.073440][T11905] ? __pfx_kthread+0x10/0x10 [ 566.073463][T11905] ret_from_fork_asm+0x1a/0x30 [ 566.073494][T11905] [ 566.073507][T11905] Modules linked in: [ 566.073534][T11905] ---[ end trace 0000000000000000 ]--- [ 566.073555][T11905] RIP: 0010:usb_gadget_udc_reset+0x27/0x60 [ 566.073584][T11905] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 6e 5c c0 fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 cb 74 26 fb 4d 8b 1e 48 89 df 2e e8 [ 566.073604][T11905] RSP: 0018:ffffc9000dd464c8 EFLAGS: 00010202 [ 566.073623][T11905] RAX: 0000000000000008 RBX: ffff888029ec8c40 RCX: dffffc0000000000 [ 566.073640][T11905] RDX: ffffc9001b403000 RSI: 0000000000016d7a RDI: 0000000000016d7b [ 566.073655][T11905] RBP: ffff88802a506b6c R08: ffffffff8f6a4eb7 R09: 1ffffffff1ed49d6 [ 566.073673][T11905] R10: dffffc0000000000 R11: fffffbfff1ed49d7 R12: ffff888029ec8c40 [ 566.073691][T11905] R13: 1ffff11005494ea1 R14: 0000000000000040 R15: 1ffff110053d9187 [ 566.073707][T11905] FS: 0000000000000000(0000) GS:ffff88812633d000(0000) knlGS:0000000000000000 [ 566.073727][T11905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.073742][T11905] CR2: 000000110c2dc32f CR3: 000000003b462000 CR4: 00000000003526f0 [ 566.073776][T11905] Kernel panic - not syncing: Fatal exception [ 566.074387][T11905] Kernel Offset: disabled