last executing test programs: 7m49.502834259s ago: executing program 2 (id=3264): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x16}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="12e01b3989"], 0x1000f) 7m48.487442988s ago: executing program 2 (id=3279): migrate_pages(0xffffffffffffffff, 0xd, 0x0, 0x0) (async) setitimer(0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) getitimer(0x1, &(0x7f0000000180)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000100)=0x7f000, 0x4) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x40000029) (async) fallocate(r3, 0x0, 0x1, 0x8ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x410102, 0x2e) (async, rerun: 32) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (rerun: 32) mlockall(0x4) chdir(&(0x7f0000000140)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0xc0049364, &(0x7f0000000180)) (async) sendfile(r3, r3, 0x0, 0x8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3007}) 7m47.839600927s ago: executing program 2 (id=3282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xe, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc090) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1b02}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) shutdown(r1, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x1b) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {0x7ffc}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x1}}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x9d, 0xf7, 0x22, 0xf92}}}}}}]}, 0x4c}}, 0x200048c0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCMBIS(r8, 0x5416, &(0x7f00000001c0)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, 0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 7m47.173308936s ago: executing program 2 (id=3288): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x103501, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x2, 0xc}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x4f4c82, 0x5c, 0x8}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(r5, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0x1000000}) r8 = socket$phonet(0x23, 0x2, 0x1) getpeername(r8, 0x0, &(0x7f0000000380)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x20) sendto$inet6(r3, &(0x7f0000000100)="e27fe684a972044eca82f9a22d458cca8a2b4f129a7c79455ca019df48e681584f7ebd834875e52e68fb84caa9992adbd220af171231ecc88a77dbe79ffec68e346fb087edb05a76fbad103a3783dd4200c91fc59b9687acacc97b4842a5aca98a8a26aaf034fd4662b89fba5c150e54a9f30f852543c6aa98b873d85d1632f1aba93219e13ab8cb147b", 0x8a, 0x4000085, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r6, &(0x7f0000000400)='./file0\x00', 0xa) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$pokeuser(0x6, r11, 0x358, 0x2) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x740443, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {r10}}, './file0\x00'}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xffffffffffffffff) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES32=r13, @ANYRESOCT=r10, @ANYRES16=0x0, @ANYRESDEC=r4, @ANYBLOB="23ef3515027281073d235a4f0cb5bed5a5e5b9d275b8a10eb1e588bf6e4d4cf9a059c12b37eb35dbd66a20d27894233b77f759dd8dcfb606cdfe3f7962e4dea26ef394a52ad879eac386741aef7bf0ae16640d560e4ee971d17fd04c259cdb45a9e3f237a33bac18add424521d5126333f629da10cb1363049dbcac5ff1a2163d5852991f92423ad6cd26d1e1a05d761b74da88ec6401598bfe527564f782ffa8743868424150f34d8a424e088f8e9445d8662c6494fb69c6dc5bcecf83106b38eefb9362906bc9aadd777f6dac79822eadc994dec13e7728cae270602acfd070e", @ANYBLOB="55059888dd7bd78c9d92f991d802a10c41b3b0128289dac0ed8fecf32bb67448ea8b74a46d17c80bf4db79b6ba81066706ae1bb4211e5d121a203161c615b293fbdcc9ae0681c6b4d6f49acc6f86e14beb490713abb9c8c5901ad541c063fc90a4ce708fe2a4566c0c39c31bc0d3c5f0b4723ef07d9a291f21d2e3ae9b77ae917a3a42663d6f49f988379ffc9b7b0aeaa443edce8ee8ed0acee471be81eba277315bb22409177fe975f356a9d86e484099ea9667ad39c55238faf88ac81060429cce39afefd397b60d5a07", @ANYRES16=r6, @ANYRESDEC=r1, @ANYRES32], 0x18, 0x4008800}, 0x40800) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x2002, 0x0) 7m47.008119988s ago: executing program 2 (id=3290): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 7m46.205755765s ago: executing program 2 (id=3295): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 7m45.888903332s ago: executing program 32 (id=3295): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 7m42.805552712s ago: executing program 0 (id=3316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xe, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc090) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1b02}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) shutdown(r1, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x1b) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {0x7ffc}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x1}}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x9d, 0xf7, 0x22, 0xf92}}}}}}]}, 0x4c}}, 0x200048c0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f00000001c0)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, 0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 7m42.357260678s ago: executing program 0 (id=3320): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667", 0xa0}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}, {&(0x7f0000000600)}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m40.779636715s ago: executing program 0 (id=3327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xe, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc090) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1b02}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) shutdown(r1, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x1b) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {0x7ffc}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x1}}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x9d, 0xf7, 0x22, 0xf92}}}}}}]}, 0x4c}}, 0x200048c0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f00000001c0)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, 0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 7m39.117926178s ago: executing program 0 (id=3332): memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x9, 0x7, 0x20, 0xfffffff7, 0xa, "a24be58a2b76e58cd90458f6f7a1ddd1bfe40a"}) dup(r0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x3, 0x0, 0x40, 0x8, 0x7, "2d390d19ddb58cefb429561829f8401044beba"}) 7m39.045189947s ago: executing program 0 (id=3333): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e20, @empty}}}, 0x84) 7m38.935031698s ago: executing program 0 (id=3334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b0150", 0x22, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) unshare(0x2040400) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) r7 = fsmount(r5, 0x1, 0x8c) fchdir(r7) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a62100001020301090224000100000000090400000203"], 0x0) splice(r3, 0x0, r2, 0x0, 0xae9, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)={0x28, 0x11, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd=r8}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4}]}]}, 0x28}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) 7m23.804305659s ago: executing program 33 (id=3334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b0150", 0x22, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) unshare(0x2040400) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) r7 = fsmount(r5, 0x1, 0x8c) fchdir(r7) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a62100001020301090224000100000000090400000203"], 0x0) splice(r3, 0x0, r2, 0x0, 0xae9, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)={0x28, 0x11, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd=r8}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4}]}]}, 0x28}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) 5.623033571s ago: executing program 3 (id=6002): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4a380, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x4) 5.380797988s ago: executing program 3 (id=6003): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109340) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x3, 0x1, 0x4, {0x4, 0x1, 0xfa8, 0x8800001}}) 5.099114715s ago: executing program 3 (id=6005): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0x8, 0x6}, @window={0x3, 0xfffe}, @mss={0x2, 0x9}, @sack_perm, @sack_perm, @window={0x3, 0x6, 0x7}, @sack_perm, @timestamp], 0x8) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 4.51534729s ago: executing program 3 (id=6009): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) 3.586180989s ago: executing program 5 (id=6014): r0 = openat$vimc1(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000200)={0x990001, 0x6, @name="2d9d3a109f3715f0ebc0e6047be55dd73097babe6ee70cffeccf74cc04ad15c8"}) 3.316666819s ago: executing program 5 (id=6017): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x1, @thr={&(0x7f0000000000)="2c52e970701b02054b714888fdc6446d78cb4614", &(0x7f00000001c0)}}, &(0x7f0000000240)) 3.064757602s ago: executing program 5 (id=6020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x34000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x40800) 2.897967487s ago: executing program 5 (id=6023): socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x24020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x9, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0xff, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x1005, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x10001, 0x5, 0x9, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000016f, 0x8004, 0x5, 0xfffffff3, 0x3, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xfff, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0x7, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0x9, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x0, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x3, 0xfffff000, 0xffff, 0x3, 0x7e, 0x2, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.667178003s ago: executing program 4 (id=6025): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa2840, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0xe21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89fd, &(0x7f0000000040)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003740), 0x0, &(0x7f0000003780)=""/26, 0x1a}, 0x2005}], 0x1, 0x40010100, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x7f, 0x0, 0x9, 0x376e7854, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000000c0)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x5ee, 0x30000, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x1, 0x6, @link_local}, 0x14) ppoll(&(0x7f0000000080)=[{r5, 0x5300}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000002c0)) syz_open_procfs$pagemap(r4, &(0x7f00000001c0)) getsockopt(r0, 0x7, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4c21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.667023995s ago: executing program 5 (id=6026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000090, 0x0, 0x58a}]}) 2.347917641s ago: executing program 1 (id=6028): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ff", 0x1b}], 0x1}, 0x0) 2.21997526s ago: executing program 5 (id=6029): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x7) syz_usb_disconnect(r0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x8043, 0x7, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}, 0x4}}, 0x10, 0x0}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x4, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') read$qrtrtun(r4, &(0x7f0000000000)=""/137, 0x89) preadv(r4, 0x0, 0x0, 0x91, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x31, 0xffffffffffffffff, 0xf983e000) unshare(0x2c020400) r5 = msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x2000, 0x0) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz0\x00', {0x2, 0xfff, 0x2, 0x1}, 0x4, [0x7fff, 0x8000, 0x7b, 0x3, 0x1, 0x5, 0x8, 0x5, 0x9, 0x80000001, 0x86, 0x0, 0x3, 0x7ff, 0x8001, 0xf, 0x9, 0x503e47c1, 0xcde, 0x5, 0x3, 0x0, 0x5, 0x0, 0x6, 0x6, 0x498c, 0x2, 0x10, 0x4, 0x0, 0xe, 0x80000001, 0x6, 0x3, 0x2, 0x9e08, 0xc3, 0x8, 0xa, 0x10, 0x4430, 0xfffffffa, 0x5, 0x8, 0x109, 0x25, 0x7, 0x8, 0x1, 0x200, 0x9, 0x0, 0x1, 0x0, 0x8, 0x9, 0xd, 0x0, 0x9, 0x1, 0xc4b2, 0x5a, 0x9], [0x8, 0x5, 0xb54, 0x7, 0x6, 0x3, 0x8, 0xb9, 0x7, 0x1, 0x7fffffff, 0x2, 0x3, 0x7f, 0x2f0, 0x3, 0x0, 0x80000000, 0x6, 0x7fff, 0x0, 0x0, 0xff7, 0x8, 0xb1, 0x4, 0xfffffef9, 0x9, 0x8, 0x7, 0x6994412a, 0x3, 0x78, 0x8001, 0x5, 0x3, 0xe45e, 0x4000000, 0x8, 0x7f, 0x2, 0x80000001, 0x9, 0x80, 0x0, 0x200, 0x5, 0x81, 0x0, 0x97, 0x8, 0x80000000, 0x8a0a, 0x80000000, 0x9, 0xfffff170, 0x6, 0x101, 0x7761, 0x100, 0xfffffff8, 0x3, 0x6, 0x8000], [0x3eda, 0x6, 0x3, 0x20dc, 0x2, 0x200, 0x4, 0x8f4ab43, 0x1, 0x9e6, 0x9, 0x6, 0x31f7, 0x1, 0x5, 0x9, 0xd0, 0xb8b0, 0xb, 0x8000, 0x3, 0x8, 0xffff, 0xf85, 0x4f, 0x3, 0x0, 0x6, 0xfffffffc, 0x7, 0xff, 0x5, 0xd, 0x8, 0xb84, 0x7, 0x8, 0x8000, 0x4e501595, 0x3, 0x50000, 0x1, 0x10000, 0x9, 0x9, 0xfff, 0x3, 0x5, 0x4, 0x5, 0xfff, 0x2, 0x2, 0x400, 0x2, 0x2, 0xfffffff9, 0x631ab3bb, 0x5, 0x5c5b, 0x503, 0x6, 0x1, 0x2], [0x9, 0x0, 0x400, 0x5, 0xffffffff, 0x0, 0x1, 0xb1e, 0x0, 0x47, 0x2, 0x1, 0xfffffffb, 0x8, 0x81, 0x7, 0x0, 0x6, 0xff000000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x0, 0x7, 0x9, 0x8, 0x0, 0x9, 0xf09, 0x5, 0x2, 0x101, 0x5, 0x9, 0x7fff, 0x0, 0x8, 0xb, 0x3, 0x0, 0x9, 0x2, 0x7, 0x10001, 0x1ff, 0x3ff, 0x6, 0x80, 0x1, 0xb, 0x1ff, 0x0, 0x0, 0x4, 0x72, 0xdb35, 0x8, 0x5, 0x8001, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc1ffb}]}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) 1.798684189s ago: executing program 1 (id=6030): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000c80)='./file0\x00') read$FUSE(r2, &(0x7f0000004e80)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x5) fchdir(r5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, r1, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x18, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1.792121255s ago: executing program 3 (id=6031): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b8010000000f01c1f30f1c03660f3804f3640f300f7931b9ba0a00000f320f8a422800000f21dac4c2ad97c166b814008ed8", 0x32}], 0x1, 0x41, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x3, 0x10003, 0x0, 0x1, 0x1, 0x3, 0x0, 0x7}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x7000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100080000, 0x0, 0x7f, 0x100000, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x80000000007, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x2, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x5b9e, 0x7], 0x60000, 0x341b82}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 1.194674594s ago: executing program 4 (id=6032): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000340)=""/151, 0x20000) 512.225882ms ago: executing program 1 (id=6033): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000440)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="dd", 0x1}], 0x1}}], 0x1, 0x2004c044) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}], 0x1c) 361.508739ms ago: executing program 4 (id=6034): r0 = syz_open_dev$midi(&(0x7f0000000140), 0x2, 0x20001) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000340)) 336.53459ms ago: executing program 1 (id=6035): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) socket(0x10, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000001600), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) close(0xffffffffffffffff) 251.017178ms ago: executing program 3 (id=6036): madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x9, 0x3) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000180)=0x4, 0x9, 0x1) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x11) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300)="c1b0ad27d26172a2282808a63b3666a169a53df2d890fb5a415426c6ff9bb87f8efb6ea14cfe80e636e7de7e2b18b78f80a1e4c84f02ecfed07902492c1d761451483d0b9c75d1bce9e4a0d1f8a9bb1a22b951653bbce82561c6ac0fc2eaeb3fcd942b78b746455913dbea328ce1088f52d7cb35aefac657784f2cdd576c15bb8db65205430d6a1cd094d749955b73eacfddece7cb849c1554eebb88d05d597b840ebac50de06d2efcc88cb3bbdaf6388332964078936c035bd3e3f56e545ba683f4523df2d6034d5086890db8e3922638a6196fe0a1a026ef632f8c6c6ac3e66228e9c15abaa010f956968240f31f97ef8da03d671ad3d48e135c880c8e096e0f39cdaf38d0203a20362c985b38cefac182d22fb4b709c8c1b5dea4eb5e6dde7af7793b120ba2eadcb892c53de7ce0ab712ef33721121fcf841fa1d35f7a2e9ff1b054adf64e6e2261e015c9a0dd0b8d8fd363ae1bd8ffc28d41b681ece5c4568cf6adf2815b618e8308dbd1c2e664c178a4504e0a362291ac5dfa1115709d42fe8bfc92f109d60c12d43fc204a8f3458b199adab770d51eacae9eeaa4cd1569f05dde2f71e2819dc64c2c62441e4cf281acc54f88741ed1329343e0dbfb356ab7fd3732a93b2a15fac46ef120745cd49b7e65421595fd81fabaee29a28bab508c95fa74d8884c4edd6bdea3c71e8d230c8e666aeaadf6f4c67846ad43a3f458123508c77df0b13c25b3414220600e35dd2d44bbd78d7902f767dfcfb6001674106a6a952f3a47e78758893cae3bfff8d053842642c3f9eb512e12ef09313b2a823e1c31dd45b236824b057992101016204d48e1d3f7f42503b20f549371f92688624089b5460b724307b569f8570c5eba6c243702370f76c0ef78d59d5aef447852c9102618a9811f8440abac9e78a7613b00ecc1b0f6dd9c477701a975fe07c95bc35237d33f7368b9be2986566f310f16a189fe0438ae0887384b10f80b2635493839b3de154c8fe5bc020164e062d77b4826df0eb2af18c8a9e5b28c3d2849bbd29628c76306cf7f4433e0d128a93f5b12a2bea9ed9b3a85e8e4896ec6ce0ea8ef4471cd9db37d91b3f45cb72c2781864c820e4e267e6a650a3687eac83d7b010c621c1c52717b98335df8e87390e5a76874bf31993e1a801f4fe8dc9222877c693fc043d38f54b9422210f2a023f496149def0a9e936c4adbce6a290113b2fb40c5e3e79a0797cd37c2e1731e0143bb5d8bfa51c226d02d567b50c63ebbc64e1d44e120e4cb0fed4347528df660736b99ea3235e83da0c167a015cb3e7a57c5e9072b2fd358cdb20127deb4f37deb2d09ef2b2795ccb52f3bab0f5abcfc37bd0932e55f92cba6e468fb3175b983ca8597327fe67fc1aa89f6d1829ea7eeeec41e3920a51ac583489abe8eb5c1c841d4969a06fde61fa56e59f8f0f64b19071d8a84853047a3d766e82cf2c651586ac3f877c8909ed056b1828fff9211e414b8b8f5cd38542132d9562abae4bf63bbd0532208199e4d2c59b1e5d9a438f026d01c40fd0b8076a9e933e65e65ff9ea0fde753edc738aa079b6695c6055ac2690d6d928e9046c446bd9d0c3e685eee30f7a718436cfa917f678cfdc2f7f72e7bbe508cc64239597f5969f4a750cf1f0f5a646018eb1c35f912cc4c888da888ae8fad773fe47c6a78a63af9b035e15eb790a7ccff2f44d70acd069499d7db8bd02bb6bf252699d8d46a8923f21ba967585be41b79e4d653ab2fba065610ca31e683a5cd5b29678f45eb2593700b361919efb0dffa1782b70d0a4a34247cbd9b240536ce6d46615ec96387e05f60375a2fb8977898cdee503b1fa20924fdec96a1930dac55dddd2eb612c383e4eff4e95f6cdf88047fe76ce9dcbf18a6f81d091f8e767be97b105dbc709d92c6f25d785b4972cafaea96bafc82cdbd4525340e37903259117b8ab63bbb9fb34cf23cdc48b59f7bd0b50ea12950e424e706a5d9ef4d69b334a5de6629b2b585d64688dcd5d4230fbe6f8043e99e9942d13973568b789a34a3ec7a70ff4b34ed4f28a1ad2eb31d8c81ce77d8b554749522c149944a08669ba48926dca4429fe817a7d91f373db7a100f74d6a062ad5e9ea20c77fb575a0c54c5eafd640ee770c844c813d9d807dd80333571840bd8b4b6eae859ddef2f6dbffcd7040691e2228f927faa8c82de451e60303267df50e973b0c6c7f0738eb8cc82b899534a41ae37ede81b72c38d57d82c59f87a8acf456229cced3bd6da6003d1f456ab5849b4dce78b05eddb6188d69cf8ac5bc16799e99021b5485d5ce080b328e7e11e4bfc083a68d9ec22007fae9b04bd167ce4b8f455ed6419501ab6ca434d6418a8f8baf09a66a51ba426f61ccc2f30acfeb988f3a1f36bface215200b3ed62a3d2d74f7b8c0c8244472cc77fbec96721c55d10ae299fb1aba8c45ac1cc882ce964250b30d81bf8a8be110b9f8af1aa644313052e00ed644dd87ca7df34a50ccc3602f7d3ab93fd6ca19d5b9a06894a8f91d3aff8a3cd52fcd3af7adcc7f9ddfce8bb74b714ffd4d2e76cfe60b44a47b1d7fb2bbf0c4a3dac47edd09888fdbe781071900a2e473b4daeb545561ae8f34b4eeaa60f44900684ac1f620a6fa54e562de40645158a5d8c36e3d9027bfc65274ffc8bfca8c03d464047485c3db1e54294406d90ed05c3b0d2d4e66d5e992b99dc3ede4be703d2f31dfdc5dc8c6ef01f43b42306f4a4825be7499afdc8ba1c02e3998329726af89e030be58ecdd20bf8b5d7e5f81878791f92fbd000aa1f9c2bd0aeaba2cecdeffb476dbedf37692d23dac191dfd2f7633d04a0826512b79bc1f8a6737b9b36baec7f5a4555fc7054458f9c7169968ebac29009778dd739e3a5b6cb2f0a6ae0fcb4f545e89a61ad993e42dfa7a283bd9f3d2eac7797c345843244320da0ccad437458512747f321158cdad67ca63d9e3eb187c2fee00d5f9e20266e103317a54293a7ba090b40174d0232bfb2ebd8576adf8c8a9f963fe12a592fe19af02d6f684dbba4a2d6d98003f60a728b1e7b524cbf248666a88d6f19c4937db31e56b4f5373f8aa16926f7ec75da8a76cc340376958175d6f23585e97bee88164cd2e2df5835474c6cf21f65754b98766ab47857d3008be18186792ecc604fc17519cec1d67c727c84299201ba77ccb7e60aa7b912fcc61b5ae4f580a90892b6e7cc3610b357ba6ac5b377cf43bab2970ee240525e12767611842d1d52fe188f125d018889e3e2092b7a39ddb57c0546bb17ec2443e1bdc5a763c9ce5f9b528ed14134694802886d4420f02ee9574f62e6bcc456028663f0b1399d86599fe0047d93a2eb162d2fa13385192bd4221e41bcc61511e43103550f958ba6dfd5e1b855b82a543e8e0766678f1cdd1214a399aeef014150baba0556212132dbf135319868b9ff93adf51eefa64be829362388e2659101a3ec85e0bb5119423b60819aba5c3b8823b5e37f469783db165ff4cd2cd7306f163c0e4ac8695747b571d7941e2bf1be981a48e71f336bbcc20ccddfae7bdc7f94ab62dfda1d552bdef955189eeadc9bd710c2a3a8c9d414c45d2b99ab8b4e92f8fcf2b83380d079b3dd3ddb0978dadf5569f70444e48f26d32ae410a88bd7201a84b4e3b44a1764ad6428a8148907e86bb0a09cfc1191eda8202d3160c8a4716de885ee80fbbbb2278fcbcbfd1c76b1d55ccbb9ed228de215f5104a9a0b4d647b1fa4bc786c68bee29f5229ab9cc3ca0729199eb7bd2ec9e9be7d833b13586882ea069e2aac144f22442244655c33759aa1e101f87836ad0cb16ddc6e36a66a8755acd52b4e446c0e974756a087a725a95ef59121d39f1c75fa136d7212c71a14ad5579be27c1dd0af8f9e4fb9b407e2bbbdee423486c4d5127fcf5107177b1e21e81f1758f4c304f40c0eb35627113be1e4dcb06d209ca06696f214ca260721c4ce7b4d82db24f024c74786c8d6ba7c73f495eab53e545c44b53a78f82d0aedfe04b798bbe125c8622eb5a2a764cae9c8d01380d464bd2dc7a1b0eb2bc431ae432ccfa81f2913af53bd714fe97d958c928534aa2f7caff6cd926daad3e6ed4c44bd3dd3e1a3fe0e12e8423a79c93d7475e29d036b2491e3ae7e50e4098c107abc4eec102808c8d643c4d4ec5707ca06a0b584bbf1bdbfda771a708002ab235fbfe91923b95fe8f4decb6ea6f1022bd98b6f7df5b457a198f2dd8031db5998c56acb30526ac7a7ef157b269259d6606a91b13bc09db05d4f1ae91a8d4fddd9038e5c03506447a483f8759945ec9700b5ed83c7097c177756773c8a250c76415ff43ff091d2015452b8803297e882a832700cb2d4c5c09c9aff61aa04f9cfc81e3d68911c7029a9ab79bdf72d2814068c828c86aadf77bd56953019ad507f5e059ff6ddb5562722acb3193baf88f571a2aa6d575c35506569720d4829f4d29d155bbe186cb72707eddaab43052871ec43dbc5018c1ce41120bc53f2cae7ebcae5bfb42dd1a4d17f782638ffa9747802cb74c61ebd2936d35ae926dae166ae2ea88effad9467bcd028d733da52576db8892c7b77fb5c97814845e3651f5bd759edd3c72704cc3035cb9e15684a0e17fa0b5704a6ac35576643d6fdbee7c7d05e9f0b0ba3e691e2a281913f2f705077277311ae7b8ae3cf287faac63c8cb0534f8610aae68bfdc2e860dafca682af8ec0d73f5d521dcbd3c8b403ef5763c46a23f307c798a550d3a14c1a9db153c8f1b273cc2bbad5a3450ebc2b391f0e44a3223864a193df9fa27ca15293e36fd461bb4ffa6ca73ae5f2d79933b53e05c59017367125aaea376a509a20c9840100af4f1119f1a8cdab0b835c9315144b22335fda48835dbd7d32ac735f71f69a3fb2c593b5c344f23661ff3729e7142b6da61645f8446e2de64cd637186a66c45efc3ab13db3a9cd0117a3adbb44deae4944a9fd466a4f69af5a959430981deed8994bdfd060da92395e23e449eef961d61e82a65a4314ceb4fe3daa08bbda05ef91d70f549fb7959441cd19ac01cf221b83d6e75c3ad224eadcc3f74b097d2d9edc2ccae58ea09ad3af5bdb3e6b3e81ec38542b927fbfcce573b2ee2f2a71b14a24c4b5a443983665be22bc25251af121920540dfcf8c1f2d57d8f721b48efb9555690fbc3bab0fe71708f3edecc8ffd615b1af7feb0e893c3a458019764d16887dc2973333fa70aac3f5400bcace8dd0c8cd8c79bb1e28e744b6fd1a9a424c5f38cfe256df3e3d252a8941a3691f57098dc8658a93889b29690eb2406586ad10df48c0a34f90a37e5ba6583450946b96fc01867f462050f419058e490e5a0720258885b247f65c4db08b41f8236305daa37f0b83fe327f73a8d65a1d49986de9d8ea076c69003df5984926d0e39d30a41e4a660ef2242f42747a944d7664169fd41d0352d4362ebc6c2519dab028d904e8ca00921c936cdb197ae9f096a53c99d643ab30492be5144bb799dbde12499198c3cfb1483a2a29083fb3fb54957b68590526ef4b5a7fde45c773cd5e414f4ee4db79ba92c7a8c2cf77d3e0847f788ea6fcf10cd208ca5d04ee496f70ea0170bc60da6edbd95b444c100fddbd2e878f934c89b82480b16df600d236299886ff71612493eaaedddfa1dbebe596c8e3b8b4cdc2d231ce7e8df0f242677e6b5c3d2815b9e65e29c80ddee5c711c861950ae60d1b882803cb6c776598936d498c3a800fd1091005638efa23dab3eecd92c8a03734dec8f078e172d000313164f613f02ee24bda86e67adbcf618137a7ec3cdecf7829a8bf2546f62235d92c14ad5b39c1536d923dd579520055b1f89ef17240b89a616caeccbaff0db4d8fa087b5b2c7cadfe4507e0d351f5b045a5e401db68a8186f78edce6be621dbc5ba76b0ff3f406161b170354ca24d128d3a8bd02b7bafc1085b3dab482eaab63f1f165bb0d2d28f70bc9eee4e1fe31d73d12224363562152df7123f1977083534f8ae502984d41c593433be1936ed3296c5153dec58811d603efa95e4d895b9c8ae96af097a644dbdd0bb0aa8d3711bb8b494f3da0fcf48ede0ced49c031ee191e056426dd86276d69640fb1013747022d5b998b4fa7256a0474d2a9e183bd733d335d7208105b1c8676419d1f0252065c7de75c55cb0d221dc8e0532112403c215933ee84e654ebe4a09b34e4c747b34232344c2d3bf83ab53ee7b85f4a3f88914fe79a4f15c4c98a3ec126591591b0e6167e2544523e9070e830d792c78c693d2e6981015dea70a83982042d67a7f5229d106851c32933597e03ca171bc27c2a61380b8e58c41dd9bb808b4b308ab5ce45ba022048e02d89ca1a329f5a9cefb861ab3cd0a05236d58113b47592b0389ca6416b92ebbb367a3a41203d0baba90e8046412b7c23bb027e7cd656cbc864e38272545f66b712fb6ab080f972cd09c92c615a04ada2e24c74c1320ac02fc9ec077e5d5ba621aab5747bee120f5aaa9cb6ca91a162f06415f152cdc79f4117e0cc6fe9bfe53e7e396d5f21ad4328caec1141baddb16a7305ba49bd427e835dc23baae24e559ed66c215662ab3d517d87daf6dc4d2b4c8a3a0c77d65a9df67e756b7b719dc262b15891ccd9545919a5c63577be273276fc39df50dd9388e09fe3bcf1366df9df85fc9b8ef26651c439b76d73c40566fa035736d598ea1d77e1051a785d1717fedae7c687307b277e195555fa6ccaea28c57e07d84f51fb5ef64df87f62c651264ac4b268d116924f0ce008b6355f9901d74d7e8f0b440f337e51cb83fefc278da96edc32fec1012eb955493d8081885ec3dbe94e927f2b490b1bec6fc4b125008153706559a38e147e54d20917ab9d6bb5edf0550f5de539c7fbef949019b339f454be50a056223ccb014bbc078f04c01c8aea18ec58befeb4143c4fe2b6d23f487ff30309ef3098a2632761876876c2073b7cd3589af3407ed921654683739551fe0cb65959181033b2d2de8482f9dfe9279a2febdba75f7523ae92cd89345494c41a3371f0d4c501f817aa751dc2e4c42597cf72baad04076cebbaa100fea0b0423eee35e32aa60831edb4c772dbe08918a9ede0450dd76430d47b3ebe097b99adaedf6b17dd649c25b77a81c0b1c1cf8447b69638be8872a9f17007f988cc5a555048a727078b5de08ad71156c0446764ef687e2f4bb6fcfe104c5dc862b5e78df61beeec1b1a026dc7283f65035cd5026624daec53c7b025953d9c0266d3e6f02f11931a088e47484230c00c3d6f3b72d095a66b1f87204e739f1b6d4716bb863b6b125e26c7c8e07596538f59b48cbd41250eca1efa85a9e185bc2d8a20787cb66be568f59ddc34a3b207a874d7aa4351da7df89a2ff1ff22bb9d69c177195686bcdc2f04724c8764696f7ef4a75a4e0dd875f07431883da3f9f9cbbc9950e57cfa7bb00b2b8ce162c807cc4d88dabdb91549d2d9a91b74ad5e518ad58c391be582423a5fb29e9aa792a2703505b578fd8c73f4f77c485916ede77a9f36be6a12391de7fdf73fdf1db6766ef38c23902be933c49ee8917858e8ee29559a2c2dec20e4a5ad650c52f97d1648f12733ef65466ce94b1268fbec2aef918c4d20886a373b6d3b5fa8b9dcca9c35033e2165803b55a34d87e012cb402ce79ae6de18a4cf57a89ad8dc698bf321a4cb0af1a4d5cdea3da832e3b44f3a47798fda07fc229ac89dde9d4f57b2f8305999400e69d2c5c8caa1bc98ccc833ccbae1682c6993f131a03466303cbc294ba22add02036f73149b2db98688d6462041be3d274d5217c7a6891694af9e2a626f8ec4d4ccb8d4946ef18904ad47a84c7a619e87e773126f61e30d5ced5232e14b6abfb4d44ad05ee999d4d54d2c751cd7c5c9cacfac6f7d47b9f97560038b0baa5e635b553a84f3cbeb04632a9abeb6740ea4ce627f60cd5e6aa71a7e2c205bc90adeb3d61bcd66f17d1296e0cd383b1fc38ad4e2cfd05d4a4ee7371f756eeaa0525bd1673f0070f9f5ae099a29e4c325015d9372ae27635d2eab686be9dd96ec2c014acd8123fea35f97d7ecb5e9bc8359b397e8c0c3b90658aa9fabdc8f9f4bd565dd6e20fc871b658fc3e5944efa972d80303d7a66dfd159e904dbfd894009291ddafdfe3a5c502755b5a3dbd89792b8e5633d6f81d23b63f599fc1f29d679f64afa697260e1e6a10ec075355b58ed9007408a379d3c890bcdbea8604e51c0520be1d8c1f10b0a91d40d7ea9ef9ca2c283153b902700635ce65c3ab69cf3107e2017d8a72160f1794136185afd57c743af49d84fb535fef777e6c6f2a18a04fce9618778c832a608861bc7dd7eab315644f998595d07c5a41bac3e7270a871257802d26f42c454c797414e0d5de88ad611c5e3a05ce76df1348e26509f52b7b125eebe5ce1ec0245bf23c153d807ec87592f37ed65c8ac086be9d169cc31adab8da3fc2e2dad0519c0a68cd6cb202c99f5ee48a65c6ac27b0d489faf3083fed64ee5b078d0092d5939fcd01b2a71dbf007367fcc56e2f62904be4097fd7c639caa8a390a59be7a6e46aae93667a26654fe461c043bfec083f065726e66b5f12d9e7013500068de45a49a87dc2d0933287e7575c9f3914071c110c9a8f492c67fc48784aea5c22d1ce26f3281d6deb14da66d69ef6ec8e9080ef0d543bc6ce58b177c01ade4232688fb252d6f3e1ceba283d1d59ae82a15b464746df9bec915f00a184469b846a19a7968d9b38e476e3aef47ae41ed8a7d4d3cf744da190747ee3266ff689428d372545f28e40713615b7f886e1f294056a95f3e50e1afa211ca3a2f4a04535646bf9f4cb709a5ecf437807072cc8b77fbed51e01bfac16c73876a5d2d4916555f7084a772847356855c69c193d8db2d37d8c1a5e6adb2169ddd3bd5b7a2cbf9418d00f174295381d51733924bfdc46017250df28679d6b378cc316c67198b57634f46d5f9c169fde3715ddbeb792fd2c1c74a7f97101d373351037c73af2643b8952665eca13f874aace302f60681e12523b6de8f5c5750d4fb480fe0cad1546af7c88426319baafceccca2b49fe96d2ff446a4867cc0ff6ef7845c93c6a6f2bbeac1e31d5d95618c990646a86b691ba387f6b31f75a69fc68e52c7efd0a1de03be8455514231e04bf7370ab6b49d931f4b581b52ca6e0b104bbd07013651d048dcc5271bce8de0f855c4d289a70b19fa616cddbe27b217116d3a52dfb590df3f932e9fee79e34b42844d4efe8a31844694ffaaf811d72b07ab4a281d75c4dd73f7fc82f9beb49e9ef70c72c31c6b7802ad77d25b405a002d63ba30c078aac97ad8cb9ac85299024c6dba7912c3844ed27097e6852a4567d332560e54bb835d2bfbc31a9bc181f8273b878349c9921c6cbd5466fdea1da224f5361c0c50c5fb4f6ccd9f15f6febea4d24265131cc991d85a5d3bf28ce78dd79a5ddff2b507c8b3d38ece81b386f428ed6cf9258657e7647dfa8a8b12ef5ce051208bf44e2d973885f72835f55458ed6cfcbcb75d998be711af59990eae176c637439b79ad8c41b1b71858a90e65aae941d92a2e9616784ad513321da97a2d1036d083c41eeacb374ca45904d6f205101b5e894cd3f0e2d7b8a737a07802a3a74eb4db792b204f69bf3278fff2538878634b84746b51a87d3364c64a860c568d82757761773b137a1f92fdb012c4f38add32dfd4cf0a6b6ccb8e7958abf0d8ab7cbe7c32919e3bf5618096af980cac33df3eae62fe9bb36eda0aac74dd81fd562113e2515c3d4aa6daec990506bf3b958888119d0b1dc215d5e5418eba9778bd53faa7e9f732ce01f3056fd5b89cafe357648592287c990fd5326df9eebb9452b69e0a94cca107d8ae2e72bca993a08c3531791762f52baef6486848d462854357cdd8788b20383b095d58a35b9ab04380629d8a10707b862bff7024b90555233f0b05848dc1c5145906e90b63b243bd7491673a55d9234a928e9bb37ed35afa3c9a4b936ac42ccb1d1dcb5abe7cc21717fa1025525d24f4eb745f1fe0b3584448e35ef9916fef74cfa511bf189591b2cabb0ff81306d13a37eb8578d183ebc7200b3e28d2c2f39e56ba76078d60192d806c972f4ad6077be01111b412587760e65105faa0d5cb2326f99687ceb7617e2d4d45b918dc581223f0909eb519856748849fac49a2bb4edf727a7b2edf6e4454f526d02ed459d7805b68142c25dfc5544ca04dc7fb3c45418eee7609712f5cdaeb3aa3c6936cdd1f1e0d1486dbe2f3ee05f6856727ebe888e797d834beafb969a90f950198b5ee0ec876172c290466118f8dee069bbdb463040ab8840b842bf2d1637b03040994ccf1b8180131c755c623e65a03c96172bd15ddf0f90dba2ac60800252c193547b0b6beb63c3542f95aa373bda1941edc0d441d6d758bac9a1d7301f51009aab487f1b2cb3935a5c8935e8f2ee2ee3e2dee90f06c6ae693f715b9480219c59abc458e6aee1a210767d26bd5c24f8a4fc6be59011417aac0eaac7ad5715c5942fe87fd341c842544f3e394bebce42c5667a511a0a363a89462aa18595ea6b51f86dd48db166c078adaf2d127b87e6ac9cb6826fb0010d869bf03f2afaee97b6a064fedf3cc0806d75060cd4c86d1014a47b9b81303d3c2716b8c0fa30193393dc1ddda76426fad6c03a41192f6c7cfaaa8e37e9e3eb3cc0c6bdaa721b66a9fab82e6c0fdf964286e4aca0d66201c0adca7c33fae61bba1be0c874f3b495f3f7857cb156ea2538e4101f89e708b4554444e95096a0a40fc78c35be82d843e2d2a3adb8d78d662cabedba523079fb6d52df3bb710d268d7cf32a6a0a88d4f80628c0ac8a447f3fc5e0d091514ca2c64680b7da00d9196adc481f61e281381f748f3b3b0d78f1c77fef19ce0b7466e14bde12a3a9bc5cb225d81fbef39cc1b3c5668e533a8a82375f6fb46dd8413c119a4366314350587685250b3799f0629e75e6a9ec79db0d589849401019fd5074a4ae910fd665c2736974f4ada686655329136e385a46c82d6929b9e01babecb45e780d444855a521ddf1c0f8dae1c1db21a72af45b82ca64939150a87af4e9b1a6d4ed11d547076a93853935f4a12cb388d7fbc5c054353d9ea5ac028dc4a2613b28014f52eda3610347babb083372240b4253071b20862355629a52e9d6342febd19d4ed645fcd1e6f6a1ad089e0a93c079eaf573890e5844d2c94e40549cae5988d5e68a7b4d7ce9f0a6d8917678cc0b9e416e88c7155eadd5a2b2d5a032dc2e409c7f587aee7d641a0c9cdff084708c0066045674e59267ee7b6e3e127fbfe1f3451f4396f568cb46856da5ea6af1bc5698e49c216a897dfd07771d5c4ffcee4ca502fd8df2b81972e5cae58b59b9c7a3368e43f2f9e7c86d68995c536a91b990c87fe90dba70b1cbd3d2396a4291c3d555561f5ec1acbca8f4922083603c94fd0f41ef5b9392ce42a5535829de651bad14cb05914f0e31e3e606728b823dfdc091a3d8d427f7aefa21bbb59f67dbaf0d05ebb5a55d50dd06fbcc5dfefb41cea425c19559d4423fb13d3174a040c3cb7ec86e4cdfaa253031c0af1328ba1570684d2aa3d534a016416a188", 0x2000, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x4, {0x200dd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x16}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a6a35a08460d1220ec4d0102030109021b00010000a000090494000108ca6d000905070310"], 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/154, 0x9a) 175.709803ms ago: executing program 4 (id=6037): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, 0x0, 0x0) 156.158658ms ago: executing program 1 (id=6038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xb0}}, 0x0) 51.214694ms ago: executing program 4 (id=6039): rseq(0xffffffffffffffff, 0x20, 0x0, 0x0) 41.105202ms ago: executing program 4 (id=6040): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') unshare(0x22020400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 0s ago: executing program 1 (id=6041): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x1f00, 0x10) kernel console output (not intermixed with test programs): ][ T5804] usb usb4-port1: unable to enumerate USB device [ 1009.761711][T12211] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1009.921925][T12211] usb 2-1: Using ep0 maxpacket: 32 [ 1009.924660][T12211] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1009.924693][T12211] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1009.924717][T12211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1009.924742][T12211] usb 2-1: config 1 has no interface number 0 [ 1009.924790][T12211] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1009.924819][T12211] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1009.924864][T12211] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1009.924890][T12211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.032609][T12211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1010.161002][T12211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1010.182454][T18493] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1010.381763][T18493] usb 6-1: Using ep0 maxpacket: 16 [ 1010.384600][T18493] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1010.384680][T18493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1010.387421][T18493] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1010.387443][T18493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.387657][T18493] usb 6-1: Product: syz [ 1010.387670][T18493] usb 6-1: Manufacturer: syz [ 1010.387681][T18493] usb 6-1: SerialNumber: syz [ 1010.475794][T18493] usb 6-1: config 0 descriptor?? [ 1010.500199][T18493] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1010.500240][T18493] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1010.622389][ T5708] usb 2-1: USB disconnect, device number 40 [ 1010.646502][ T5708] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1011.145568][T20970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.150524][T20970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.453133][T20997] FAULT_INJECTION: forcing a failure. [ 1012.453133][T20997] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.453187][T20997] CPU: 1 UID: 0 PID: 20997 Comm: syz.1.5411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1012.453217][T20997] Tainted: [L]=SOFTLOCKUP [ 1012.453224][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1012.453237][T20997] Call Trace: [ 1012.453245][T20997] [ 1012.453254][T20997] dump_stack_lvl+0xe8/0x150 [ 1012.453285][T20997] should_fail_ex+0x46b/0x600 [ 1012.453320][T20997] should_failslab+0xa8/0x100 [ 1012.453346][T20997] __kmalloc_noprof+0xdf/0x7b0 [ 1012.453367][T20997] ? kfree+0x4d/0x6c0 [ 1012.453385][T20997] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1012.453411][T20997] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1012.453435][T20997] ? tomoyo_domain+0xd7/0x130 [ 1012.453462][T20997] ? tomoyo_path_number_perm+0x219/0x630 [ 1012.453491][T20997] tomoyo_path_number_perm+0x246/0x630 [ 1012.453525][T20997] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1012.453555][T20997] ? __lock_acquire+0x6b5/0x2d10 [ 1012.453581][T20997] ? do_raw_spin_lock+0x12b/0x2f0 [ 1012.453627][T20997] ? __fget_files+0x2a/0x420 [ 1012.453658][T20997] ? __fget_files+0x2a/0x420 [ 1012.453680][T20997] ? __fget_files+0x3a6/0x420 [ 1012.453702][T20997] ? __fget_files+0x2a/0x420 [ 1012.453739][T20997] security_file_ioctl+0xc3/0x2a0 [ 1012.453772][T20997] __se_sys_ioctl+0x47/0x170 [ 1012.453803][T20997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.453827][T20997] do_syscall_64+0x174/0x580 [ 1012.453856][T20997] ? trace_irq_disable+0x3b/0x140 [ 1012.453879][T20997] ? clear_bhb_loop+0x40/0x90 [ 1012.453903][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.453924][T20997] RIP: 0033:0x7f6e5898ce59 [ 1012.453942][T20997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.453960][T20997] RSP: 002b:00007f6e56be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.453981][T20997] RAX: ffffffffffffffda RBX: 00007f6e58c05fa0 RCX: 00007f6e5898ce59 [ 1012.453995][T20997] RDX: 0000200000000a00 RSI: 0000000000003b85 RDI: 0000000000000003 [ 1012.454009][T20997] RBP: 00007f6e56be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.454023][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.454036][T20997] R13: 00007f6e58c06038 R14: 00007f6e58c05fa0 R15: 00007ffeb28fc7e8 [ 1012.454070][T20997] [ 1012.454115][T20997] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1012.541608][T20345] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1012.718315][T18493] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1012.751617][T20345] usb 5-1: Using ep0 maxpacket: 32 [ 1012.778194][T20345] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1012.778281][T20345] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1012.778345][T20345] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1012.778414][T20345] usb 5-1: config 1 has no interface number 0 [ 1012.778480][T20345] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.778549][T20345] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1012.778686][T20345] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1012.778755][T20345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.841827][T18493] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1012.869000][T18493] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1012.869025][T18493] em28xx 6-1:0.0: No AC97 audio processor [ 1012.944364][T20345] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1013.215630][T20345] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1013.563298][ T5708] usb 5-1: USB disconnect, device number 55 [ 1013.566433][ T5708] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1014.336661][ T5757] usb 6-1: USB disconnect, device number 54 [ 1014.342096][ T5757] em28xx 6-1:0.0: Disconnecting em28xx [ 1014.632944][ T5757] em28xx 6-1:0.0: Freeing device [ 1014.791803][T18493] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1014.941754][T18493] usb 5-1: Using ep0 maxpacket: 32 [ 1014.945951][T18493] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1014.950316][T18493] usb 5-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 1014.950351][T18493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.950374][T18493] usb 5-1: Product: П [ 1014.950391][T18493] usb 5-1: Manufacturer: а [ 1014.950409][T18493] usb 5-1: SerialNumber: 梂ٍ뫌䡼鸌窢庤궕俚圇絬䶴ﮝ獻ꯄﻞ⅋䢻⨺ꘕ鳬쿴鮲塯ﵢ碠똱悞꥞ᝢᦘ纎闽엠 [ 1015.232171][T18493] usb 5-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 1015.232203][T18493] usb 5-1: found format II with max.bitrate = 9, frame size=3 [ 1015.232225][T18493] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1015.560207][T18493] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1015.561677][ T5757] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1015.711736][ T5757] usb 4-1: Using ep0 maxpacket: 32 [ 1015.726882][ T5757] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1015.726916][ T5757] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1015.726940][ T5757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1015.726964][ T5757] usb 4-1: config 1 has no interface number 0 [ 1015.727023][ T5757] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1015.727055][ T5757] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1015.727104][ T5757] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1015.727132][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.830124][ T5757] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1015.849058][T21017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.891327][T21017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.027361][ T5757] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1016.229553][T18493] usb 5-1: USB disconnect, device number 56 [ 1016.446156][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.515317][T20345] usb 4-1: USB disconnect, device number 59 [ 1016.562196][T20345] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1017.024886][T21054] sctp: [Deprecated]: syz.4.5432 (pid 21054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1017.024886][T21054] Use struct sctp_sack_info instead [ 1017.162369][ T5757] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1017.261825][ T5707] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1017.323574][ T5757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1017.323615][ T5757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.323718][ T5757] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1017.323746][ T5757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.366989][ T5757] usb 6-1: config 0 descriptor?? [ 1017.421737][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 1017.424903][ T5707] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1017.424988][ T5707] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1017.428215][ T5707] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1017.428237][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.428253][ T5707] usb 5-1: Product: syz [ 1017.428264][ T5707] usb 5-1: Manufacturer: syz [ 1017.428489][ T5707] usb 5-1: SerialNumber: syz [ 1017.806632][ T5757] elan 0003:04F3:0755.002F: unknown main item tag 0x0 [ 1017.806771][ T5757] elan 0003:04F3:0755.002F: unknown main item tag 0x0 [ 1017.806808][ T5757] elan 0003:04F3:0755.002F: unknown main item tag 0x0 [ 1017.806893][ T5757] elan 0003:04F3:0755.002F: unknown main item tag 0x0 [ 1017.806922][ T5757] elan 0003:04F3:0755.002F: unknown main item tag 0x0 [ 1017.844152][ T5757] elan 0003:04F3:0755.002F: failed to start in urb: -90 [ 1018.103969][ T5757] elan 0003:04F3:0755.002F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1018.155618][ T5757] usb 6-1: USB disconnect, device number 55 [ 1018.313058][T21061] fido_id[21061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1018.649821][T21064] gfs2: path_lookup on c::: returned error -2 [ 1019.681648][T18493] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1019.831634][T18493] usb 6-1: Using ep0 maxpacket: 32 [ 1019.837822][T18493] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1019.837854][T18493] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1019.837879][T18493] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1019.837903][T18493] usb 6-1: config 1 has no interface number 0 [ 1019.837963][T18493] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1019.837995][T18493] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1019.838051][T18493] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1019.838077][T18493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.919918][T18493] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1020.129993][T18493] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1020.148783][ T5707] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input98 [ 1020.202793][ T4960] bcm5974 5-1:1.0: could not read from device [ 1020.333645][ T4960] bcm5974 5-1:1.0: could not read from device [ 1020.352844][ T5707] usb 5-1: USB disconnect, device number 57 [ 1020.580537][T18493] usb 6-1: USB disconnect, device number 56 [ 1020.612225][T18493] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1020.764248][T21092] openvswitch: netlink: Actions may not be safe on all matching packets [ 1021.441705][ T5707] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1021.591698][ T5707] usb 4-1: Using ep0 maxpacket: 32 [ 1021.595236][ T5707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1021.598013][ T5707] usb 4-1: config 4 has an invalid interface number: 33 but max is 0 [ 1021.598044][ T5707] usb 4-1: config 4 has no interface number 0 [ 1021.598079][ T5707] usb 4-1: config 4 interface 33 has no altsetting 0 [ 1021.600807][ T5707] usb 4-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=d9.eb [ 1021.600839][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.600861][ T5707] usb 4-1: Product: syz [ 1021.600883][ T5707] usb 4-1: Manufacturer: syz [ 1021.600894][ T5707] usb 4-1: SerialNumber: syz [ 1021.865155][ T5707] usb 4-1: selecting invalid altsetting 1 [ 1021.865198][ T5707] usb 4-1: Can not set alternate setting to 1, error: -22 [ 1021.865239][ T5707] synaptics_usb 4-1:4.33: probe with driver synaptics_usb failed with error -22 [ 1021.889103][ T5707] usb 4-1: USB disconnect, device number 60 [ 1022.061887][T12211] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1022.233683][T12211] usb 5-1: Using ep0 maxpacket: 16 [ 1022.238717][T12211] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1022.238821][T12211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1022.280029][T12211] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1022.280065][T12211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.280088][T12211] usb 5-1: Product: syz [ 1022.280105][T12211] usb 5-1: Manufacturer: syz [ 1022.280122][T12211] usb 5-1: SerialNumber: syz [ 1022.335139][T12211] usb 5-1: config 0 descriptor?? [ 1022.342490][T12211] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1022.342528][T12211] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1022.581227][T21114] FAULT_INJECTION: forcing a failure. [ 1022.581227][T21114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.581280][T21114] CPU: 0 UID: 0 PID: 21114 Comm: syz.3.5457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1022.581315][T21114] Tainted: [L]=SOFTLOCKUP [ 1022.581325][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1022.581341][T21114] Call Trace: [ 1022.581351][T21114] [ 1022.581362][T21114] dump_stack_lvl+0xe8/0x150 [ 1022.581394][T21114] should_fail_ex+0x46b/0x600 [ 1022.581434][T21114] _copy_from_user+0x2d/0xb0 [ 1022.581462][T21114] get_timespec64+0x96/0x1b0 [ 1022.581492][T21114] ? __pfx_get_timespec64+0x10/0x10 [ 1022.581531][T21114] __x64_sys_recvmmsg+0x14b/0x250 [ 1022.581560][T21114] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1022.581592][T21114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.581618][T21114] do_syscall_64+0x174/0x580 [ 1022.581660][T21114] ? trace_irq_disable+0x3b/0x140 [ 1022.581688][T21114] ? clear_bhb_loop+0x40/0x90 [ 1022.581717][T21114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.581742][T21114] RIP: 0033:0x7f66b737ce59 [ 1022.581764][T21114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.581785][T21114] RSP: 002b:00007f66b55ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1022.581810][T21114] RAX: ffffffffffffffda RBX: 00007f66b75f5fa0 RCX: 00007f66b737ce59 [ 1022.581828][T21114] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1022.581846][T21114] RBP: 00007f66b55ce090 R08: 0000200000003700 R09: 0000000000000000 [ 1022.581862][T21114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.581876][T21114] R13: 00007f66b75f6038 R14: 00007f66b75f5fa0 R15: 00007fffe1d28438 [ 1022.581912][T21114] [ 1022.860309][T21118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.861036][T21118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.341731][T18493] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1023.504757][T18493] usb 4-1: Using ep0 maxpacket: 32 [ 1023.507858][T18493] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1023.507890][T18493] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1023.507916][T18493] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1023.508003][T18493] usb 4-1: config 1 has no interface number 0 [ 1023.508054][T18493] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1023.508092][T18493] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1023.508236][T18493] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1023.508264][T18493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.779216][T18493] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1023.853027][T18493] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1024.198289][T12211] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1024.200087][T12211] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1024.200829][T12211] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1024.200842][T12211] em28xx 5-1:0.0: No AC97 audio processor [ 1024.260269][ T5757] usb 4-1: USB disconnect, device number 61 [ 1024.311830][ T5757] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1024.428461][T21134] FAULT_INJECTION: forcing a failure. [ 1024.428461][T21134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.428503][T21134] CPU: 1 UID: 0 PID: 21134 Comm: syz.1.5465 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1024.428535][T21134] Tainted: [L]=SOFTLOCKUP [ 1024.428544][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1024.428560][T21134] Call Trace: [ 1024.428569][T21134] [ 1024.428580][T21134] dump_stack_lvl+0xe8/0x150 [ 1024.428612][T21134] should_fail_ex+0x46b/0x600 [ 1024.428653][T21134] _copy_from_user+0x2d/0xb0 [ 1024.428685][T21134] get_timespec64+0x96/0x1b0 [ 1024.428717][T21134] ? __pfx_get_timespec64+0x10/0x10 [ 1024.428759][T21134] __x64_sys_recvmmsg+0x14b/0x250 [ 1024.428788][T21134] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1024.428820][T21134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.428845][T21134] do_syscall_64+0x174/0x580 [ 1024.428880][T21134] ? trace_irq_disable+0x3b/0x140 [ 1024.428905][T21134] ? clear_bhb_loop+0x40/0x90 [ 1024.428933][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.428953][T21134] RIP: 0033:0x7f6e5898ce59 [ 1024.428972][T21134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.428993][T21134] RSP: 002b:00007f6e56be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1024.429018][T21134] RAX: ffffffffffffffda RBX: 00007f6e58c05fa0 RCX: 00007f6e5898ce59 [ 1024.429036][T21134] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1024.429052][T21134] RBP: 00007f6e56be6090 R08: 0000200000003700 R09: 0000000000000000 [ 1024.429069][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.429083][T21134] R13: 00007f6e58c06038 R14: 00007f6e58c05fa0 R15: 00007ffeb28fc7e8 [ 1024.429119][T21134] [ 1025.357339][T21150] FAULT_INJECTION: forcing a failure. [ 1025.357339][T21150] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.357384][T21150] CPU: 1 UID: 0 PID: 21150 Comm: syz.3.5471 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1025.357416][T21150] Tainted: [L]=SOFTLOCKUP [ 1025.357425][T21150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1025.357440][T21150] Call Trace: [ 1025.357449][T21150] [ 1025.357460][T21150] dump_stack_lvl+0xe8/0x150 [ 1025.357494][T21150] should_fail_ex+0x46b/0x600 [ 1025.357533][T21150] should_failslab+0xa8/0x100 [ 1025.357565][T21150] __kmalloc_noprof+0xdf/0x7b0 [ 1025.357591][T21150] ? kfree+0x4d/0x6c0 [ 1025.357618][T21150] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1025.357652][T21150] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1025.357682][T21150] ? tomoyo_domain+0xd7/0x130 [ 1025.357715][T21150] ? tomoyo_path_number_perm+0x219/0x630 [ 1025.357753][T21150] tomoyo_path_number_perm+0x246/0x630 [ 1025.357793][T21150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1025.357827][T21150] ? __lock_acquire+0x6b5/0x2d10 [ 1025.357870][T21150] ? do_raw_spin_lock+0x12b/0x2f0 [ 1025.357928][T21150] ? __fget_files+0x2a/0x420 [ 1025.357959][T21150] ? __fget_files+0x2a/0x420 [ 1025.357985][T21150] ? __fget_files+0x3a6/0x420 [ 1025.358011][T21150] ? __fget_files+0x2a/0x420 [ 1025.358043][T21150] security_file_ioctl+0xc3/0x2a0 [ 1025.358079][T21150] __se_sys_ioctl+0x47/0x170 [ 1025.358113][T21150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.358139][T21150] do_syscall_64+0x174/0x580 [ 1025.358173][T21150] ? trace_irq_disable+0x3b/0x140 [ 1025.358199][T21150] ? clear_bhb_loop+0x40/0x90 [ 1025.358229][T21150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.358254][T21150] RIP: 0033:0x7f66b737ce59 [ 1025.358276][T21150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.358297][T21150] RSP: 002b:00007f66b55ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.358327][T21150] RAX: ffffffffffffffda RBX: 00007f66b75f6090 RCX: 00007f66b737ce59 [ 1025.358344][T21150] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1025.358360][T21150] RBP: 00007f66b55ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.358375][T21150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.358389][T21150] R13: 00007f66b75f6128 R14: 00007f66b75f6090 R15: 00007fffe1d28438 [ 1025.358426][T21150] [ 1025.358611][T21150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1026.426678][ T5757] usb 5-1: USB disconnect, device number 58 [ 1026.445754][ T5757] em28xx 5-1:0.0: Disconnecting em28xx [ 1026.475538][ T5757] em28xx 5-1:0.0: Freeing device [ 1026.981720][ T5757] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1027.131728][ T5757] usb 5-1: Using ep0 maxpacket: 32 [ 1027.149622][ T5757] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1027.149651][ T5757] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1027.149671][ T5757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1027.149692][ T5757] usb 5-1: config 1 has no interface number 0 [ 1027.149744][ T5757] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.149777][ T5757] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1027.149818][ T5757] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1027.149842][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.274440][ T5757] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1027.455153][ T5757] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1027.908134][T18493] usb 5-1: USB disconnect, device number 59 [ 1027.921752][T18493] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1028.221744][T12211] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1028.385231][T12211] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 1028.385273][T12211] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1028.388189][T12211] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1028.388233][T12211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.388250][T12211] usb 4-1: Product: 鶷ꕳ䭭ꌴ䖧☳讀忊䚺廲哩撀ߠ㚬쿡颛ꄆ웳﹥転髤꾫鶾촟邨賿럗ꈩ꟧Ᏼꀉ䇆≁엎꫒齛ⓣ [ 1028.388269][T12211] usb 4-1: Manufacturer: Љ [ 1028.388282][T12211] usb 4-1: SerialNumber: 髑뱻铨넽⮂፯⌠潟礩坪엱｀轩럖벎薆ඹꪢ볝퓃ﰂ鯆㈲䴑촹꩔䓄▞먳嵫Ꭽ㟈蕅娯獚랙ᚣ勔လ哵ӫ돿಻鿱砬׮⨥㈘⑪澟ⴖ䍗ᤂ⍗ꎠ慤⧐ᇕ퀬ጙ뀮郰낮讕෺罖‶亙䮌ള↠꩒坪虰↳㞿♿⤰沜䡇啢붌略┰픘镏᥮쭮輻䒏咬סּ羐祤걙 [ 1028.414332][T21181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1028.991427][T12211] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1028.994307][T12211] usb 4-1: MIDIStreaming interface descriptor not found [ 1029.305114][T21201] netlink: 'syz.1.5491': attribute type 3 has an invalid length. [ 1029.443963][T12211] usb 4-1: USB disconnect, device number 62 [ 1029.597678][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1029.641023][T21204] sg_write: data in/out 791042/252 bytes for SCSI command 0x0-- guessing data in; [ 1029.641023][T21204] program syz.4.5493 not setting count and/or reply_len properly [ 1030.072550][ T5694] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1030.241584][ T5694] usb 5-1: Using ep0 maxpacket: 32 [ 1030.246695][ T5694] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1030.246727][ T5694] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1030.246753][ T5694] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1030.246778][ T5694] usb 5-1: config 1 has no interface number 0 [ 1030.247121][ T5694] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1030.247155][ T5694] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1030.247204][ T5694] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1030.247231][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.367837][ T5694] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1030.372804][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803472f000: rx timeout, send abort [ 1030.630783][ T5694] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1030.872885][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803472f000: abort rx timeout. Force session deactivation [ 1030.880038][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561bf800: rx timeout, send abort [ 1031.071034][T12211] usb 5-1: USB disconnect, device number 60 [ 1031.086766][T12211] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1031.169445][T18493] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1031.251868][ T5707] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1031.321723][T18493] usb 6-1: Using ep0 maxpacket: 32 [ 1031.324244][T18493] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.324274][T18493] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1031.324322][T18493] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1031.327442][T18493] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1031.327475][T18493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.327500][T18493] usb 6-1: Product: syz [ 1031.327518][T18493] usb 6-1: Manufacturer: syz [ 1031.327532][T18493] usb 6-1: SerialNumber: syz [ 1031.380101][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561bf800: abort rx timeout. Force session deactivation [ 1031.427917][T18493] cdc_ncm 6-1:1.0: skipping garbage [ 1031.427953][T18493] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1031.428002][T18493] cdc_ncm 6-1:1.0: bind() failure [ 1031.431760][ T5707] usb 4-1: Using ep0 maxpacket: 16 [ 1031.445343][ T5707] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1031.445374][ T5707] usb 4-1: config 0 has no interface number 0 [ 1031.445425][ T5707] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1031.445453][ T5707] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1031.499855][ T5707] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1031.499890][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.499912][ T5707] usb 4-1: Product: syz [ 1031.499928][ T5707] usb 4-1: Manufacturer: syz [ 1031.499943][ T5707] usb 4-1: SerialNumber: syz [ 1031.573014][ T5707] usb 4-1: config 0 descriptor?? [ 1031.583962][ T5707] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1031.607317][ T5707] nokiaca42v2 ttyUSB0: probe with driver nokiaca42v2 failed with error -22 [ 1031.769514][ T5694] usb 6-1: USB disconnect, device number 57 [ 1031.797469][ T5757] usb 4-1: USB disconnect, device number 63 [ 1031.866584][ T5757] cypress_m8 4-1:0.35: device disconnected [ 1032.791621][T12211] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1032.971836][T12211] usb 2-1: Using ep0 maxpacket: 32 [ 1032.976038][T12211] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1032.976068][T12211] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1032.976091][T12211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1032.976117][T12211] usb 2-1: config 1 has no interface number 0 [ 1032.976150][T12211] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.976171][T12211] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1032.976202][T12211] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1032.976219][T12211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.048243][T12211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1033.202227][T12211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1033.541691][ T5756] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1033.642509][ T5757] usb 2-1: USB disconnect, device number 41 [ 1033.659710][ T5757] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1033.692527][ T5756] usb 6-1: Using ep0 maxpacket: 16 [ 1033.695086][ T5756] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.695148][ T5756] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.707471][ T5756] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1033.707508][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.707536][ T5756] usb 6-1: Product: syz [ 1033.707555][ T5756] usb 6-1: Manufacturer: syz [ 1033.707574][ T5756] usb 6-1: SerialNumber: syz [ 1033.782695][ T5756] usb 6-1: config 0 descriptor?? [ 1033.810039][ T5756] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1033.840049][ T5756] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1033.989650][ T5757] usb 6-1: USB disconnect, device number 58 [ 1033.998334][T21268] fuse: Bad value for 'fd' [ 1035.455745][T21287] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input99 [ 1036.141775][ T5757] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1036.291759][ T5757] usb 2-1: Using ep0 maxpacket: 32 [ 1036.296505][ T5757] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1036.296541][ T5757] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1036.296569][ T5757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1036.296596][ T5757] usb 2-1: config 1 has no interface number 0 [ 1036.296659][ T5757] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1036.296692][ T5757] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1036.296743][ T5757] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1036.296773][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.445113][ T5757] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1036.613781][ T5757] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1037.059012][T12211] usb 2-1: USB disconnect, device number 42 [ 1037.101656][T12211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1037.141670][ T5694] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1037.294963][ T5694] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1037.294996][ T5694] usb 5-1: config 0 has no interface number 0 [ 1037.295041][ T5694] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 1037.295062][ T5694] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1037.295082][ T5694] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid maxpacket 5706, setting to 64 [ 1037.296834][ T5694] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1037.296866][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1037.296883][ T5694] usb 5-1: Product: syz [ 1037.296894][ T5694] usb 5-1: SerialNumber: syz [ 1037.385145][ T5694] usb 5-1: config 0 descriptor?? [ 1037.387485][T21313] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1037.409444][ T5694] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1037.482136][ T5757] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1037.636908][ T5757] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1037.639126][ T5757] usb 6-1: not running at top speed; connect to a high speed hub [ 1037.641147][ T5757] usb 6-1: config 13 has an invalid interface number: 232 but max is 0 [ 1037.641177][ T5757] usb 6-1: config 13 has no interface number 0 [ 1037.641212][ T5757] usb 6-1: config 13 interface 232 has no altsetting 0 [ 1037.685737][ T5757] usb 6-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 1037.685771][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.685812][ T5757] usb 6-1: Product: syz [ 1037.685829][ T5757] usb 6-1: Manufacturer: syz [ 1037.685846][ T5757] usb 6-1: SerialNumber: syz [ 1037.879598][T21325] 9p: Bad value for 'wfdno' [ 1037.943486][T21315] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5538'. [ 1037.978187][ T5757] usb-storage 6-1:13.232: USB Mass Storage device detected [ 1038.179914][ T5757] usb 6-1: USB disconnect, device number 59 [ 1039.234196][T12211] usb 5-1: USB disconnect, device number 61 [ 1039.874837][T12211] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1040.044501][T12211] usb 2-1: Using ep0 maxpacket: 32 [ 1040.077716][T12211] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1040.077750][T12211] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1040.077774][T12211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1040.077803][T12211] usb 2-1: config 1 has no interface number 0 [ 1040.077866][T12211] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1040.077900][T12211] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1040.077949][T12211] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1040.077977][T12211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.240232][T12211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1040.343885][T12211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1040.779919][ T5757] usb 2-1: USB disconnect, device number 43 [ 1040.812926][ T5757] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1040.917528][T16524] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1040.921421][T21363] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5555'. [ 1041.731719][T12211] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1041.891719][T12211] usb 2-1: Using ep0 maxpacket: 32 [ 1041.893652][T12211] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1041.893682][T12211] usb 2-1: config 0 has no interface number 0 [ 1041.893731][T12211] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1041.893760][T12211] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1041.893786][T12211] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1041.893814][T12211] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1041.899295][T12211] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1041.899596][T12211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.899622][T12211] usb 2-1: Product: syz [ 1041.899640][T12211] usb 2-1: Manufacturer: syz [ 1041.899657][T12211] usb 2-1: SerialNumber: syz [ 1041.939899][T12211] usb 2-1: config 0 descriptor?? [ 1041.941984][T21377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1042.416554][T12211] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1042.416875][T12211] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 1042.587349][T16524] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1042.606280][T21387] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5564'. [ 1042.749506][ T5756] usb 2-1: USB disconnect, device number 44 [ 1042.897207][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1042.938916][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1042.949656][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1042.961790][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1042.962609][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1044.441768][ T5707] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1044.592491][ T5707] usb 6-1: Using ep0 maxpacket: 32 [ 1044.594992][ T5707] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1044.595023][ T5707] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1044.595048][ T5707] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1044.595072][ T5707] usb 6-1: config 1 has no interface number 0 [ 1044.595119][ T5707] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1044.595150][ T5707] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1044.595196][ T5707] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1044.595224][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.714814][ T5707] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1044.920226][ T5707] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1045.231783][T16524] Bluetooth: hci0: command tx timeout [ 1045.345605][T12211] usb 6-1: USB disconnect, device number 60 [ 1045.349314][T12211] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1045.870312][T16762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.978480][T20345] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1046.141666][T20345] usb 2-1: Using ep0 maxpacket: 8 [ 1046.147454][T20345] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1046.147496][T20345] usb 2-1: can't read configurations, error -61 [ 1046.282760][T20345] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1046.491898][T20345] usb 2-1: Using ep0 maxpacket: 8 [ 1046.496435][T20345] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1046.496479][T20345] usb 2-1: can't read configurations, error -61 [ 1046.496917][T20345] usb usb2-port1: attempt power cycle [ 1046.784686][T16762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.961765][T20345] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1046.984098][T20345] usb 2-1: Using ep0 maxpacket: 8 [ 1046.987517][T20345] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1046.987559][T20345] usb 2-1: can't read configurations, error -61 [ 1047.121652][T20345] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1047.150018][T20345] usb 2-1: Using ep0 maxpacket: 8 [ 1047.157757][T20345] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1047.157801][T20345] usb 2-1: can't read configurations, error -61 [ 1047.158495][T20345] usb usb2-port1: unable to enumerate USB device [ 1047.321875][T16524] Bluetooth: hci0: command tx timeout [ 1047.549243][T16762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.715984][T21388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.716445][T21388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.717639][T21388] bridge_slave_0: entered allmulticast mode [ 1047.729805][T21388] bridge_slave_0: entered promiscuous mode [ 1047.784739][T21388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.785191][T21388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.785582][T21388] bridge_slave_1: entered allmulticast mode [ 1047.818195][T21388] bridge_slave_1: entered promiscuous mode [ 1048.260202][T16762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.271978][T20345] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1048.363325][T21388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.414336][T21388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.440459][T20345] usb 6-1: Using ep0 maxpacket: 32 [ 1048.444162][T20345] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1048.444257][T20345] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1048.444378][T20345] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1048.444442][T20345] usb 6-1: config 1 has no interface number 0 [ 1048.444760][T20345] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1048.444823][T20345] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1048.444942][T20345] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1048.445014][T20345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.514133][T20345] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1048.669886][T21388] team0: Port device team_slave_0 added [ 1048.682606][T21388] team0: Port device team_slave_1 added [ 1048.766982][T21388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.767002][T21388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.767035][T21388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.805519][T21388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.805538][T21388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.805564][T21388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.834085][T20345] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1049.022867][T21451] FAULT_INJECTION: forcing a failure. [ 1049.022867][T21451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.022900][T21451] CPU: 0 UID: 0 PID: 21451 Comm: syz.1.5582 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1049.022924][T21451] Tainted: [L]=SOFTLOCKUP [ 1049.022931][T21451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1049.022946][T21451] Call Trace: [ 1049.022952][T21451] [ 1049.022959][T21451] dump_stack_lvl+0xe8/0x150 [ 1049.022984][T21451] should_fail_ex+0x46b/0x600 [ 1049.023013][T21451] _copy_from_user+0x2d/0xb0 [ 1049.023033][T21451] ___sys_recvmsg+0x175/0x590 [ 1049.023049][T21451] ? get_pid_task+0x20/0x1f0 [ 1049.023069][T21451] ? get_pid_task+0x20/0x1f0 [ 1049.023089][T21451] ? __pfx____sys_recvmsg+0x10/0x10 [ 1049.023109][T21451] ? __fget_files+0x2a/0x420 [ 1049.023140][T21451] ? __fget_files+0x3a6/0x420 [ 1049.023167][T21451] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1049.023185][T21451] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1049.023209][T21451] ? __pfx_ksys_write+0x10/0x10 [ 1049.023245][T21451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.023263][T21451] do_syscall_64+0x174/0x580 [ 1049.023289][T21451] ? trace_irq_disable+0x3b/0x140 [ 1049.023308][T21451] ? clear_bhb_loop+0x40/0x90 [ 1049.023328][T21451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.023376][T21451] RIP: 0033:0x7f6e5898ce59 [ 1049.023401][T21451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.023415][T21451] RSP: 002b:00007f6e56be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1049.023432][T21451] RAX: ffffffffffffffda RBX: 00007f6e58c05fa0 RCX: 00007f6e5898ce59 [ 1049.023444][T21451] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1049.023455][T21451] RBP: 00007f6e56be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.023466][T21451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.023475][T21451] R13: 00007f6e58c06038 R14: 00007f6e58c05fa0 R15: 00007ffeb28fc7e8 [ 1049.023500][T21451] [ 1049.355088][ T5694] usb 6-1: USB disconnect, device number 61 [ 1049.365877][ T5694] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1049.394491][T16524] Bluetooth: hci0: command tx timeout [ 1049.629703][T21388] hsr_slave_0: entered promiscuous mode [ 1049.640753][T21388] hsr_slave_1: entered promiscuous mode [ 1049.652269][T21388] debugfs: 'hsr0' already exists in 'hsr' [ 1049.652300][T21388] Cannot create hsr debugfs directory [ 1051.464618][T12211] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1051.471891][T16524] Bluetooth: hci0: command tx timeout [ 1051.624228][T12211] usb 2-1: Using ep0 maxpacket: 32 [ 1051.628380][T12211] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1051.628422][T12211] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1051.628447][T12211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1051.628473][T12211] usb 2-1: config 1 has no interface number 0 [ 1051.628523][T12211] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1051.628554][T12211] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1051.628600][T12211] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1051.628628][T12211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.764463][T16762] bridge_slave_1: left allmulticast mode [ 1051.814789][T16762] bridge_slave_1: left promiscuous mode [ 1051.815096][T16762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.841849][T12211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1051.970499][T12211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1052.007072][T16762] bridge_slave_0: left allmulticast mode [ 1052.007109][T16762] bridge_slave_0: left promiscuous mode [ 1052.025139][T16762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.409285][ T5707] usb 2-1: USB disconnect, device number 49 [ 1052.422812][ T5707] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1053.714934][T16762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.792460][T16762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.824493][T16762] bond0 (unregistering): Released all slaves [ 1053.893228][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1054.565554][T21528] FAULT_INJECTION: forcing a failure. [ 1054.565554][T21528] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.565595][T21528] CPU: 0 UID: 0 PID: 21528 Comm: syz.1.5607 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1054.565627][T21528] Tainted: [L]=SOFTLOCKUP [ 1054.565636][T21528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1054.565651][T21528] Call Trace: [ 1054.565661][T21528] [ 1054.565672][T21528] dump_stack_lvl+0xe8/0x150 [ 1054.565706][T21528] should_fail_ex+0x46b/0x600 [ 1054.565748][T21528] should_failslab+0xa8/0x100 [ 1054.565781][T21528] __kmalloc_noprof+0xdf/0x7b0 [ 1054.565811][T21528] ? kernfs_fop_write_iter+0x159/0x540 [ 1054.565851][T21528] kernfs_fop_write_iter+0x159/0x540 [ 1054.565894][T21528] vfs_write+0x629/0xba0 [ 1054.565937][T21528] ? __pfx_vfs_write+0x10/0x10 [ 1054.565973][T21528] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1054.566009][T21528] ? lockdep_hardirqs_on+0x7a/0x110 [ 1054.566047][T21528] ? mutex_lock_nested+0x152/0x1d0 [ 1054.566074][T21528] ? fdget_pos+0x252/0x320 [ 1054.566112][T21528] ksys_write+0x156/0x270 [ 1054.566149][T21528] ? __pfx_ksys_write+0x10/0x10 [ 1054.566190][T21528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.566217][T21528] do_syscall_64+0x174/0x580 [ 1054.566255][T21528] ? trace_irq_disable+0x3b/0x140 [ 1054.566289][T21528] ? clear_bhb_loop+0x40/0x90 [ 1054.566320][T21528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.566344][T21528] RIP: 0033:0x7f6e5898ce59 [ 1054.566367][T21528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.566388][T21528] RSP: 002b:00007f6e56be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.566412][T21528] RAX: ffffffffffffffda RBX: 00007f6e58c05fa0 RCX: 00007f6e5898ce59 [ 1054.566429][T21528] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 1054.566444][T21528] RBP: 00007f6e56be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.566460][T21528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.566475][T21528] R13: 00007f6e58c06038 R14: 00007f6e58c05fa0 R15: 00007ffeb28fc7e8 [ 1054.566512][T21528] [ 1054.699418][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.699528][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.034625][ T5804] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1055.202304][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 1055.204408][ T5804] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1055.204439][ T5804] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1055.204464][ T5804] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1055.204487][ T5804] usb 2-1: config 1 has no interface number 0 [ 1055.204532][ T5804] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1055.204552][ T5804] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1055.204584][ T5804] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1055.204602][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.316408][ T5804] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1055.495729][ T5804] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1055.655683][ T5756] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1055.843762][ T5756] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 1055.843791][ T5756] usb 5-1: config 255 has no interface number 0 [ 1055.843820][ T5756] usb 5-1: config 255 interface 97 has no altsetting 0 [ 1055.854695][ T5756] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1055.854731][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.854756][ T5756] usb 5-1: Product: syz [ 1055.854773][ T5756] usb 5-1: Manufacturer: syz [ 1055.854790][ T5756] usb 5-1: SerialNumber: syz [ 1055.975140][T20345] usb 2-1: USB disconnect, device number 50 [ 1055.977582][T20345] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1056.300732][ T5756] rndis_host 5-1:255.97: ACM capabilities 01, not really RNDIS? [ 1056.809440][ T5756] usb 5-1: USB disconnect, device number 62 [ 1057.193119][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1058.171805][T16762] hsr_slave_0: left promiscuous mode [ 1058.192340][T20345] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1058.221696][T16762] hsr_slave_1: left promiscuous mode [ 1058.222738][T16762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.222779][T16762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.262921][T16762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.262944][T16762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.362799][T20345] usb 5-1: Using ep0 maxpacket: 16 [ 1058.365503][T20345] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1058.365542][T20345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1058.368800][T20345] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1058.368835][T20345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.368851][T20345] usb 5-1: Product: syz [ 1058.368862][T20345] usb 5-1: Manufacturer: syz [ 1058.368874][T20345] usb 5-1: SerialNumber: syz [ 1058.427224][T20345] usb 5-1: config 0 descriptor?? [ 1058.457108][T20345] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1058.457142][T20345] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1058.488373][T16762] veth1_macvtap: left promiscuous mode [ 1058.491005][T16762] veth0_macvtap: left promiscuous mode [ 1058.505003][T16762] veth1_vlan: left promiscuous mode [ 1058.508950][T16762] veth0_vlan: left promiscuous mode [ 1058.790332][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5622'. [ 1058.903658][ T5757] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1059.061716][ T5757] usb 2-1: Using ep0 maxpacket: 32 [ 1059.063786][ T5757] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1059.063814][ T5757] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1059.063834][ T5757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1059.063855][ T5757] usb 2-1: config 1 has no interface number 0 [ 1059.063905][ T5757] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1059.063930][ T5757] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1059.063967][ T5757] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1059.063988][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.175573][ T5757] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1059.214725][T20345] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1059.216777][T20345] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1059.217231][T20345] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1059.217270][T20345] em28xx 5-1:0.0: No AC97 audio processor [ 1059.373013][ T5757] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1059.373270][T20345] usb 5-1: USB disconnect, device number 63 [ 1059.420141][T20345] em28xx 5-1:0.0: Disconnecting em28xx [ 1059.434042][T20345] em28xx 5-1:0.0: Freeing device [ 1059.965046][T20345] usb 2-1: USB disconnect, device number 51 [ 1059.968378][T20345] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1060.392576][T16762] team0 (unregistering): Port device team_slave_1 removed [ 1060.452601][T16762] team0 (unregistering): Port device team_slave_0 removed [ 1060.774395][T21585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5622'. [ 1061.951697][T16524] Bluetooth: hci5: command 0x0406 tx timeout [ 1062.968121][T14409] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1063.114624][T14409] usb 5-1: Using ep0 maxpacket: 32 [ 1063.116921][T14409] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1063.116949][T14409] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1063.116972][T14409] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1063.116995][T14409] usb 5-1: config 1 has no interface number 0 [ 1063.117041][T14409] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1063.117071][T14409] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1063.117119][T14409] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1063.117141][T14409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.258176][T14409] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1063.531049][T14409] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1064.009217][ T5694] usb 5-1: USB disconnect, device number 64 [ 1064.028979][ T5694] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1065.406416][T21388] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1065.528952][T21388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1065.533658][T21388] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1065.751392][T21388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1065.760929][T21388] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1065.813299][T21388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1065.816050][T21388] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1065.959857][T21388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1066.483956][T21388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.522131][ T5694] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1066.556219][T21388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.617868][T16737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.618058][T16737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.648681][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.649081][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.682207][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 1066.688480][ T5694] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1066.688512][ T5694] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1066.688536][ T5694] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1066.688562][ T5694] usb 2-1: config 1 has no interface number 0 [ 1066.688595][ T5694] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1066.688616][ T5694] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1066.688648][ T5694] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1066.688666][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.895591][ T5694] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1066.958459][ T5694] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1067.467900][ T5708] usb 2-1: USB disconnect, device number 52 [ 1067.471155][ T5708] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1068.656369][T21388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.811207][T21388] veth0_vlan: entered promiscuous mode [ 1068.918225][T21388] veth1_vlan: entered promiscuous mode [ 1068.939510][T21730] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5657'. [ 1068.949307][T21730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1069.138557][T21388] veth0_macvtap: entered promiscuous mode [ 1069.223106][T21388] veth1_macvtap: entered promiscuous mode [ 1069.287698][T21388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.379863][T21388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.450269][T16757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.467449][T16762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.469865][T16762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.525958][T16762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.561688][ T5756] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1069.634340][ T5608] Bluetooth: hci4: command 0x0405 tx timeout [ 1069.736485][ T5756] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1069.736536][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1069.736564][ T5756] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1069.736607][ T5756] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1069.736631][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.771713][ T5708] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1069.817721][ T5756] usb 5-1: config 0 descriptor?? [ 1069.820324][T21737] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1069.922776][ T5708] usb 6-1: Using ep0 maxpacket: 32 [ 1069.942068][ T5708] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1069.942103][ T5708] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1069.942339][ T5708] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1069.942366][ T5708] usb 6-1: config 1 has no interface number 0 [ 1069.942415][ T5708] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1069.942506][ T5708] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1069.942551][ T5708] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1069.942575][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.105687][ T5756] usbhid 5-1:0.0: can't add hid device: -71 [ 1070.105808][ T5756] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1070.173563][ T5756] usb 5-1: USB disconnect, device number 65 [ 1070.182849][ T5708] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1070.205789][ T5708] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1070.717500][ T5756] usb 6-1: USB disconnect, device number 62 [ 1070.746301][ T5756] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1071.306885][T17631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.307018][T17631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.723871][T17570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.723894][T17570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.002187][T21780] FAULT_INJECTION: forcing a failure. [ 1073.002187][T21780] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.002218][T21780] CPU: 0 UID: 0 PID: 21780 Comm: syz.4.5674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1073.002241][T21780] Tainted: [L]=SOFTLOCKUP [ 1073.002247][T21780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1073.002258][T21780] Call Trace: [ 1073.002265][T21780] [ 1073.002272][T21780] dump_stack_lvl+0xe8/0x150 [ 1073.002297][T21780] should_fail_ex+0x46b/0x600 [ 1073.002326][T21780] should_failslab+0xa8/0x100 [ 1073.002350][T21780] __kmalloc_noprof+0xdf/0x7b0 [ 1073.002371][T21780] ? sock_kmalloc+0xd6/0x160 [ 1073.002387][T21780] ? __local_bh_enable+0x1e1/0x2f0 [ 1073.002417][T21780] sock_kmalloc+0xd6/0x160 [ 1073.002436][T21780] af_alg_alloc_areq+0x99/0x200 [ 1073.002460][T21780] skcipher_recvmsg+0x321/0x1140 [ 1073.002488][T21780] ? __local_bh_enable+0x1e1/0x2f0 [ 1073.002520][T21780] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1073.002546][T21780] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 1073.002572][T21780] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 1073.002597][T21780] sock_recvmsg_nosec+0x130/0x170 [ 1073.002620][T21780] __sys_recvfrom+0x298/0x420 [ 1073.002648][T21780] ? __pfx___sys_recvfrom+0x10/0x10 [ 1073.002696][T21780] ? ksys_write+0x248/0x270 [ 1073.002720][T21780] ? __pfx_ksys_write+0x10/0x10 [ 1073.002747][T21780] __x64_sys_recvfrom+0xde/0x100 [ 1073.002772][T21780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.002791][T21780] do_syscall_64+0x174/0x580 [ 1073.002817][T21780] ? trace_irq_disable+0x3b/0x140 [ 1073.002858][T21780] ? clear_bhb_loop+0x40/0x90 [ 1073.002895][T21780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.002921][T21780] RIP: 0033:0x7fdb0392ce59 [ 1073.002943][T21780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.002965][T21780] RSP: 002b:00007fdb01b86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1073.002989][T21780] RAX: ffffffffffffffda RBX: 00007fdb03ba5fa0 RCX: 00007fdb0392ce59 [ 1073.003006][T21780] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000004 [ 1073.003026][T21780] RBP: 00007fdb01b86090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 1073.003038][T21780] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1073.003047][T21780] R13: 00007fdb03ba6038 R14: 00007fdb03ba5fa0 R15: 00007ffd30b2cb08 [ 1073.003072][T21780] [ 1073.057325][ T5756] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1073.201693][ T5756] usb 4-1: Using ep0 maxpacket: 32 [ 1073.205721][ T5756] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1073.205748][ T5756] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1073.205770][ T5756] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1073.205790][ T5756] usb 4-1: config 1 has no interface number 0 [ 1073.205828][ T5756] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1073.205853][ T5756] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1073.205892][ T5756] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1073.205914][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.247166][ T5756] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1073.450377][ T5756] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1073.945868][ T5756] usb 4-1: USB disconnect, device number 64 [ 1073.963551][ T5756] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1075.731720][ T5708] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1075.881601][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 1075.884249][ T5708] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1075.884335][ T5708] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1075.884361][ T5708] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1075.884385][ T5708] usb 2-1: config 1 has no interface number 0 [ 1075.884432][ T5708] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.884463][ T5708] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1075.884510][ T5708] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1075.884538][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.012226][ T5708] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1076.123665][T21839] openvswitch: netlink: Actions may not be safe on all matching packets [ 1076.157186][ T5708] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1076.237830][T21842] FAULT_INJECTION: forcing a failure. [ 1076.237830][T21842] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.237866][T21842] CPU: 1 UID: 0 PID: 21842 Comm: syz.3.5696 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1076.237894][T21842] Tainted: [L]=SOFTLOCKUP [ 1076.237901][T21842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1076.237917][T21842] Call Trace: [ 1076.237925][T21842] [ 1076.237935][T21842] dump_stack_lvl+0xe8/0x150 [ 1076.237964][T21842] should_fail_ex+0x46b/0x600 [ 1076.237998][T21842] should_failslab+0xa8/0x100 [ 1076.238024][T21842] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1076.238048][T21842] ? __alloc_skb+0x1d0/0x7d0 [ 1076.238074][T21842] ? lockdep_hardirqs_on+0x7a/0x110 [ 1076.238109][T21842] __alloc_skb+0x1d0/0x7d0 [ 1076.238168][T21842] netlink_sendmsg+0x5d4/0xb40 [ 1076.238206][T21842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.238226][T21842] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1076.238253][T21842] ? aa_sock_msg_perm+0x122/0x200 [ 1076.238273][T21842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.238290][T21842] sock_sendmsg_nosec+0x13a/0x180 [ 1076.238314][T21842] ____sys_sendmsg+0x55c/0x870 [ 1076.238346][T21842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1076.238381][T21842] ? import_iovec+0x73/0xa0 [ 1076.238404][T21842] ___sys_sendmsg+0x2a5/0x360 [ 1076.238431][T21842] ? __lock_acquire+0x6b5/0x2d10 [ 1076.238456][T21842] ? __pfx____sys_sendmsg+0x10/0x10 [ 1076.238510][T21842] ? __fget_files+0x2a/0x420 [ 1076.238530][T21842] ? __fget_files+0x3a6/0x420 [ 1076.238559][T21842] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1076.238589][T21842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1076.238624][T21842] ? __pfx_ksys_write+0x10/0x10 [ 1076.238655][T21842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.238675][T21842] do_syscall_64+0x174/0x580 [ 1076.238705][T21842] ? trace_irq_disable+0x3b/0x140 [ 1076.238726][T21842] ? clear_bhb_loop+0x40/0x90 [ 1076.238748][T21842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.238766][T21842] RIP: 0033:0x7f63abefce59 [ 1076.238784][T21842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.238801][T21842] RSP: 002b:00007f63aa14e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.238821][T21842] RAX: ffffffffffffffda RBX: 00007f63ac175fa0 RCX: 00007f63abefce59 [ 1076.238835][T21842] RDX: 0000000000004044 RSI: 0000200000000780 RDI: 0000000000000003 [ 1076.238847][T21842] RBP: 00007f63aa14e090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.238858][T21842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.238870][T21842] R13: 00007f63ac176038 R14: 00007f63ac175fa0 R15: 00007ffcef63a168 [ 1076.238896][T21842] [ 1076.692919][T18493] usb 2-1: USB disconnect, device number 53 [ 1076.716614][T18493] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1078.553162][ T5676] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1078.588962][T21890] netlink: 'syz.4.5715': attribute type 2 has an invalid length. [ 1078.588987][T21890] netlink: 'syz.4.5715': attribute type 1 has an invalid length. [ 1078.721654][ T5676] usb 6-1: Using ep0 maxpacket: 32 [ 1078.724020][ T5676] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1078.724052][ T5676] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1078.724076][ T5676] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1078.724100][ T5676] usb 6-1: config 1 has no interface number 0 [ 1078.724148][ T5676] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1078.724177][ T5676] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1078.724228][ T5676] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1078.724254][ T5676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.852320][ T5676] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1078.960578][ T5676] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1079.501780][T14409] usb 6-1: USB disconnect, device number 63 [ 1079.505043][T14409] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1080.201763][ T5676] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1080.371637][ T5676] usb 2-1: Using ep0 maxpacket: 16 [ 1080.374986][ T5676] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.375025][ T5676] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1080.375062][ T5676] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1080.375090][ T5676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.406477][ T5676] usb 2-1: config 0 descriptor?? [ 1080.831345][ T5676] mcp2221 0003:04D8:00DD.0030: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1081.264030][ T5676] usb 2-1: USB disconnect, device number 54 [ 1081.930591][T21948] misc userio: Invalid payload size [ 1082.007826][T21949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5739'. [ 1083.452469][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5756'. [ 1085.298753][T22034] FAULT_INJECTION: forcing a failure. [ 1085.298753][T22034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.298796][T22034] CPU: 1 UID: 0 PID: 22034 Comm: syz.4.5772 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1085.298828][T22034] Tainted: [L]=SOFTLOCKUP [ 1085.298837][T22034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1085.298852][T22034] Call Trace: [ 1085.298862][T22034] [ 1085.298872][T22034] dump_stack_lvl+0xe8/0x150 [ 1085.298907][T22034] should_fail_ex+0x46b/0x600 [ 1085.298947][T22034] strncpy_from_user+0x36/0x2b0 [ 1085.298988][T22034] do_getname+0x77/0x250 [ 1085.299015][T22034] __se_sys_renameat2+0x34/0x2c0 [ 1085.299042][T22034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.299067][T22034] do_syscall_64+0x174/0x580 [ 1085.299101][T22034] ? trace_irq_disable+0x3b/0x140 [ 1085.299127][T22034] ? clear_bhb_loop+0x40/0x90 [ 1085.299156][T22034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.299179][T22034] RIP: 0033:0x7fdb0392ce59 [ 1085.299200][T22034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.299220][T22034] RSP: 002b:00007fdb01b86028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1085.299245][T22034] RAX: ffffffffffffffda RBX: 00007fdb03ba5fa0 RCX: 00007fdb0392ce59 [ 1085.299263][T22034] RDX: 0000000000000004 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1085.299280][T22034] RBP: 00007fdb01b86090 R08: 0000000000000002 R09: 0000000000000000 [ 1085.299295][T22034] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1085.299311][T22034] R13: 00007fdb03ba6038 R14: 00007fdb03ba5fa0 R15: 00007ffd30b2cb08 [ 1085.299346][T22034] [ 1085.551698][ T5757] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1085.714064][ T5757] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1085.714105][ T5757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.714131][ T5757] usb 4-1: config 0 has no interface number 0 [ 1085.714166][ T5757] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1085.714187][ T5757] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1085.714204][ T5757] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.720335][ T5757] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1085.720368][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.720395][ T5757] usb 4-1: Product: syz [ 1085.720407][ T5757] usb 4-1: Manufacturer: syz [ 1085.720418][ T5757] usb 4-1: SerialNumber: syz [ 1085.727859][ T5708] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1085.739308][ T5757] usb 4-1: config 0 descriptor?? [ 1085.889036][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 1085.913765][ T5708] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1085.913788][ T5708] usb 2-1: config 0 has no interface number 0 [ 1085.913923][ T5708] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1085.913956][ T5708] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1085.936079][ T5708] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1085.936103][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.936119][ T5708] usb 2-1: Product: syz [ 1085.936130][ T5708] usb 2-1: Manufacturer: syz [ 1085.936141][ T5708] usb 2-1: SerialNumber: syz [ 1085.988530][ T5708] usb 2-1: config 0 descriptor?? [ 1086.486669][T22050] FAULT_INJECTION: forcing a failure. [ 1086.486669][T22050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.486710][T22050] CPU: 0 UID: 0 PID: 22050 Comm: syz.4.5779 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1086.486741][T22050] Tainted: [L]=SOFTLOCKUP [ 1086.486751][T22050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1086.486767][T22050] Call Trace: [ 1086.486777][T22050] [ 1086.486788][T22050] dump_stack_lvl+0xe8/0x150 [ 1086.486821][T22050] should_fail_ex+0x46b/0x600 [ 1086.486860][T22050] _copy_from_user+0x2d/0xb0 [ 1086.486888][T22050] get_sg_io_hdr+0xf6/0x850 [ 1086.486921][T22050] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1086.486955][T22050] ? __pfx_get_sg_io_hdr+0x10/0x10 [ 1086.486979][T22050] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1086.487017][T22050] ? rt_write_unlock+0x190/0x230 [ 1086.487050][T22050] ? sg_add_request+0x526/0x580 [ 1086.487077][T22050] sg_new_write+0x180/0x890 [ 1086.487108][T22050] ? __pfx_sg_new_write+0x10/0x10 [ 1086.487169][T22050] sg_write+0x484/0xf00 [ 1086.487214][T22050] ? __pfx_sg_write+0x10/0x10 [ 1086.487253][T22050] ? __pfx_aa_file_perm+0x10/0x10 [ 1086.487318][T22050] ? rw_verify_area+0x25b/0x4e0 [ 1086.487349][T22050] ? __pfx_sg_write+0x10/0x10 [ 1086.487384][T22050] vfs_write+0x2a3/0xba0 [ 1086.487426][T22050] ? __pfx_vfs_write+0x10/0x10 [ 1086.487461][T22050] ? __fget_files+0x2a/0x420 [ 1086.487491][T22050] ? __fget_files+0x2a/0x420 [ 1086.487517][T22050] ? __fget_files+0x3a6/0x420 [ 1086.487560][T22050] ? __fget_files+0x2a/0x420 [ 1086.487599][T22050] ksys_write+0x156/0x270 [ 1086.487635][T22050] ? __pfx_ksys_write+0x10/0x10 [ 1086.487677][T22050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.487708][T22050] do_syscall_64+0x174/0x580 [ 1086.487742][T22050] ? trace_irq_disable+0x3b/0x140 [ 1086.487770][T22050] ? clear_bhb_loop+0x40/0x90 [ 1086.487800][T22050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.487823][T22050] RIP: 0033:0x7fdb0392ce59 [ 1086.487845][T22050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.487880][T22050] RSP: 002b:00007fdb01b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1086.487905][T22050] RAX: ffffffffffffffda RBX: 00007fdb03ba5fa0 RCX: 00007fdb0392ce59 [ 1086.487924][T22050] RDX: 00000000000000a2 RSI: 0000200000000400 RDI: 0000000000000004 [ 1086.487941][T22050] RBP: 00007fdb01b86090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.487956][T22050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.487970][T22050] R13: 00007fdb03ba6038 R14: 00007fdb03ba5fa0 R15: 00007ffd30b2cb08 [ 1086.488004][T22050] [ 1086.783551][ T5708] appletouch 2-1:0.85: Geyser mode initialized. [ 1086.819577][ T5708] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input113 [ 1087.039295][T21753] usb 2-1: USB disconnect, device number 55 [ 1087.190156][T21753] appletouch 2-1:0.85: input: appletouch disconnected [ 1087.231779][T18493] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1087.362675][T18493] usb 6-1: device descriptor read/64, error -71 [ 1087.385600][T22060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.386869][T22060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.601731][T18493] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1087.611697][ T5756] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1087.741616][ T5756] usb 5-1: device descriptor read/64, error -71 [ 1087.741800][T18493] usb 6-1: device descriptor read/64, error -71 [ 1087.852011][T18493] usb usb6-port1: attempt power cycle [ 1087.983340][ T5756] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1088.111931][ T5756] usb 5-1: device descriptor read/64, error -71 [ 1088.222461][ T5756] usb usb5-port1: attempt power cycle [ 1088.223972][T18493] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1088.244009][T18493] usb 6-1: device descriptor read/8, error -71 [ 1088.286582][T21753] usb 4-1: USB disconnect, device number 65 [ 1088.494527][T18493] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1088.522763][T18493] usb 6-1: device descriptor read/8, error -71 [ 1088.561682][ T5756] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1088.576406][T22070] netlink: 'syz.1.5786': attribute type 13 has an invalid length. [ 1088.599422][ T5756] usb 5-1: device descriptor read/8, error -71 [ 1088.632037][T18493] usb usb6-port1: unable to enumerate USB device [ 1088.831918][ T5756] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1088.854070][ T5756] usb 5-1: device descriptor read/8, error -71 [ 1088.913062][T18493] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1088.962896][ T5756] usb usb5-port1: unable to enumerate USB device [ 1089.061661][T18493] usb 4-1: Using ep0 maxpacket: 8 [ 1089.063772][T18493] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1089.063829][T18493] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.063850][T18493] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1089.063869][T18493] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1089.063896][T18493] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.063928][T18493] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1089.063946][T18493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.358957][T18493] usb 4-1: GET_CAPABILITIES returned 0 [ 1089.358994][T18493] usbtmc 4-1:16.0: can't read capabilities [ 1089.566740][ T5708] usb 4-1: USB disconnect, device number 66 [ 1090.751830][ T60] Bluetooth: hci3: command 0x1003 tx timeout [ 1090.809026][ T5608] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1091.976617][T22116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1092.012700][T22118] FAULT_INJECTION: forcing a failure. [ 1092.012700][T22118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.012740][T22118] CPU: 1 UID: 0 PID: 22118 Comm: syz.4.5804 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1092.012772][T22118] Tainted: [L]=SOFTLOCKUP [ 1092.012781][T22118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1092.012796][T22118] Call Trace: [ 1092.012806][T22118] [ 1092.012816][T22118] dump_stack_lvl+0xe8/0x150 [ 1092.012851][T22118] should_fail_ex+0x46b/0x600 [ 1092.012891][T22118] _copy_to_user+0x31/0xb0 [ 1092.012922][T22118] simple_read_from_buffer+0xe1/0x170 [ 1092.012956][T22118] proc_fail_nth_read+0x1be/0x230 [ 1092.012987][T22118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1092.013016][T22118] ? rw_verify_area+0x2ac/0x4e0 [ 1092.013048][T22118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1092.013077][T22118] vfs_read+0x212/0xa80 [ 1092.013116][T22118] ? __pfx_vfs_read+0x10/0x10 [ 1092.013151][T22118] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1092.013187][T22118] ? lockdep_hardirqs_on+0x7a/0x110 [ 1092.013220][T22118] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1092.013254][T22118] ? mutex_lock_nested+0x152/0x1d0 [ 1092.013280][T22118] ? fdget_pos+0x252/0x320 [ 1092.013322][T22118] ksys_read+0x156/0x270 [ 1092.013358][T22118] ? __pfx_ksys_read+0x10/0x10 [ 1092.013399][T22118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.013426][T22118] do_syscall_64+0x174/0x580 [ 1092.013461][T22118] ? trace_irq_disable+0x3b/0x140 [ 1092.013488][T22118] ? clear_bhb_loop+0x40/0x90 [ 1092.013517][T22118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.013541][T22118] RIP: 0033:0x7fdb038ed68e [ 1092.013563][T22118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1092.013583][T22118] RSP: 002b:00007fdb01b85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1092.013608][T22118] RAX: ffffffffffffffda RBX: 00007fdb01b866c0 RCX: 00007fdb038ed68e [ 1092.013634][T22118] RDX: 000000000000000f RSI: 00007fdb01b860a0 RDI: 0000000000000003 [ 1092.013649][T22118] RBP: 00007fdb01b86090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.013664][T22118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.013678][T22118] R13: 00007fdb03ba6038 R14: 00007fdb03ba5fa0 R15: 00007ffd30b2cb08 [ 1092.013714][T22118] [ 1092.425900][T22121] netlink: 'syz.4.5805': attribute type 13 has an invalid length. [ 1092.584730][T16737] Bluetooth: hci3: Frame reassembly failed (-84) [ 1094.147457][T22150] FAULT_INJECTION: forcing a failure. [ 1094.147457][T22150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.147488][T22150] CPU: 0 UID: 0 PID: 22150 Comm: syz.1.5815 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.147511][T22150] Tainted: [L]=SOFTLOCKUP [ 1094.147517][T22150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1094.147528][T22150] Call Trace: [ 1094.147535][T22150] [ 1094.147543][T22150] dump_stack_lvl+0xe8/0x150 [ 1094.147567][T22150] should_fail_ex+0x46b/0x600 [ 1094.147603][T22150] _copy_to_user+0x31/0xb0 [ 1094.147624][T22150] simple_read_from_buffer+0xe1/0x170 [ 1094.147649][T22150] proc_fail_nth_read+0x1be/0x230 [ 1094.147671][T22150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1094.147694][T22150] ? rw_verify_area+0x2ac/0x4e0 [ 1094.147717][T22150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1094.147738][T22150] vfs_read+0x212/0xa80 [ 1094.147766][T22150] ? __pfx_vfs_read+0x10/0x10 [ 1094.147791][T22150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1094.147817][T22150] ? lockdep_hardirqs_on+0x7a/0x110 [ 1094.147841][T22150] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1094.147866][T22150] ? mutex_lock_nested+0x152/0x1d0 [ 1094.147885][T22150] ? fdget_pos+0x252/0x320 [ 1094.147911][T22150] ksys_read+0x156/0x270 [ 1094.147961][T22150] ? __fget_files+0x3a6/0x420 [ 1094.147991][T22150] ? __pfx_ksys_read+0x10/0x10 [ 1094.148033][T22150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.148058][T22150] do_syscall_64+0x174/0x580 [ 1094.148093][T22150] ? trace_irq_disable+0x3b/0x140 [ 1094.148120][T22150] ? clear_bhb_loop+0x40/0x90 [ 1094.148150][T22150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.148174][T22150] RIP: 0033:0x7f6e5894d68e [ 1094.148201][T22150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1094.148216][T22150] RSP: 002b:00007f6e56be5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1094.148233][T22150] RAX: ffffffffffffffda RBX: 00007f6e56be66c0 RCX: 00007f6e5894d68e [ 1094.148245][T22150] RDX: 000000000000000f RSI: 00007f6e56be60a0 RDI: 0000000000000004 [ 1094.148255][T22150] RBP: 00007f6e56be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.148265][T22150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.148276][T22150] R13: 00007f6e58c06038 R14: 00007f6e58c05fa0 R15: 00007ffeb28fc7e8 [ 1094.148300][T22150] [ 1094.519249][T22154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5817'. [ 1094.594679][ T5608] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1095.398251][T22177] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5826'. [ 1095.436051][T22179] FAULT_INJECTION: forcing a failure. [ 1095.436051][T22179] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.436093][T22179] CPU: 1 UID: 0 PID: 22179 Comm: syz.5.5827 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1095.436124][T22179] Tainted: [L]=SOFTLOCKUP [ 1095.436133][T22179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1095.436148][T22179] Call Trace: [ 1095.436157][T22179] [ 1095.436168][T22179] dump_stack_lvl+0xe8/0x150 [ 1095.436202][T22179] should_fail_ex+0x46b/0x600 [ 1095.436241][T22179] should_failslab+0xa8/0x100 [ 1095.436273][T22179] kmem_cache_alloc_noprof+0x87/0x680 [ 1095.436299][T22179] ? lockdep_hardirqs_on+0x7a/0x110 [ 1095.436331][T22179] ? do_getname+0x2e/0x250 [ 1095.436361][T22179] do_getname+0x2e/0x250 [ 1095.436383][T22179] ? getname_flags+0x11/0x20 [ 1095.436409][T22179] do_sys_openat2+0xcc/0x200 [ 1095.436438][T22179] ? __pfx_do_sys_openat2+0x10/0x10 [ 1095.436465][T22179] ? ksys_write+0x248/0x270 [ 1095.436506][T22179] ? __pfx_ksys_write+0x10/0x10 [ 1095.436540][T22179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.436566][T22179] __x64_sys_creat+0x8f/0xc0 [ 1095.436598][T22179] do_syscall_64+0x174/0x580 [ 1095.436631][T22179] ? trace_irq_disable+0x3b/0x140 [ 1095.436657][T22179] ? clear_bhb_loop+0x40/0x90 [ 1095.436686][T22179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.436710][T22179] RIP: 0033:0x7f888c4bce59 [ 1095.436731][T22179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.436752][T22179] RSP: 002b:00007f888a70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1095.436802][T22179] RAX: ffffffffffffffda RBX: 00007f888c735fa0 RCX: 00007f888c4bce59 [ 1095.436819][T22179] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000010280 [ 1095.436842][T22179] RBP: 00007f888a70e090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.436856][T22179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.436870][T22179] R13: 00007f888c736038 R14: 00007f888c735fa0 R15: 00007fffc4ee1e08 [ 1095.436908][T22179] [ 1096.534326][T21753] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1096.684394][T21753] usb 6-1: Using ep0 maxpacket: 8 [ 1096.686686][T21753] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1096.686737][T21753] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1096.686759][T21753] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1096.686783][T21753] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.686806][T21753] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.686854][T21753] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1096.686877][T21753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.786752][T22209] FAULT_INJECTION: forcing a failure. [ 1096.786752][T22209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.786794][T22209] CPU: 1 UID: 0 PID: 22209 Comm: syz.4.5837 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1096.786826][T22209] Tainted: [L]=SOFTLOCKUP [ 1096.786835][T22209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1096.786851][T22209] Call Trace: [ 1096.786860][T22209] [ 1096.786870][T22209] dump_stack_lvl+0xe8/0x150 [ 1096.786904][T22209] should_fail_ex+0x46b/0x600 [ 1096.786945][T22209] strncpy_from_user+0x36/0x2b0 [ 1096.786984][T22209] do_getname+0x77/0x250 [ 1096.787012][T22209] do_sys_openat2+0xcc/0x200 [ 1096.787046][T22209] ? __pfx_do_sys_openat2+0x10/0x10 [ 1096.787076][T22209] ? ksys_write+0x248/0x270 [ 1096.787111][T22209] ? __pfx_ksys_write+0x10/0x10 [ 1096.787148][T22209] __x64_sys_openat+0x138/0x170 [ 1096.787179][T22209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.787205][T22209] do_syscall_64+0x174/0x580 [ 1096.787240][T22209] ? trace_irq_disable+0x3b/0x140 [ 1096.787267][T22209] ? clear_bhb_loop+0x40/0x90 [ 1096.787296][T22209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.787321][T22209] RIP: 0033:0x7fdb0392ce59 [ 1096.787350][T22209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.787372][T22209] RSP: 002b:00007fdb01b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1096.787398][T22209] RAX: ffffffffffffffda RBX: 00007fdb03ba5fa0 RCX: 00007fdb0392ce59 [ 1096.787416][T22209] RDX: 0000000000080002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1096.787433][T22209] RBP: 00007fdb01b86090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.787449][T22209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.787464][T22209] R13: 00007fdb03ba6038 R14: 00007fdb03ba5fa0 R15: 00007ffd30b2cb08 [ 1096.787501][T22209] [ 1097.023357][T21753] usb 6-1: GET_CAPABILITIES returned 0 [ 1097.023392][T21753] usbtmc 6-1:16.0: can't read capabilities [ 1097.227086][T14409] usb 6-1: USB disconnect, device number 68 [ 1098.314329][T22239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5847'. [ 1098.741857][T22245] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1099.291753][T14409] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1099.441600][T14409] usb 4-1: Using ep0 maxpacket: 8 [ 1099.444408][T14409] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1099.444471][T14409] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1099.444497][T14409] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1099.444526][T14409] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1099.444554][T14409] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.444600][T14409] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1099.444627][T14409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.659910][T22265] FAULT_INJECTION: forcing a failure. [ 1099.659910][T22265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.660021][T22265] CPU: 1 UID: 0 PID: 22265 Comm: syz.5.5857 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1099.660055][T22265] Tainted: [L]=SOFTLOCKUP [ 1099.660064][T22265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1099.660079][T22265] Call Trace: [ 1099.660097][T22265] [ 1099.660108][T22265] dump_stack_lvl+0xe8/0x150 [ 1099.660146][T22265] should_fail_ex+0x46b/0x600 [ 1099.660187][T22265] _copy_from_user+0x2d/0xb0 [ 1099.660215][T22265] __copy_msghdr+0x3c5/0x5b0 [ 1099.660258][T22265] ___sys_sendmsg+0x213/0x360 [ 1099.660294][T22265] ? __lock_acquire+0x6b5/0x2d10 [ 1099.660327][T22265] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.660401][T22265] ? __fget_files+0x2a/0x420 [ 1099.660431][T22265] ? __fget_files+0x3a6/0x420 [ 1099.660470][T22265] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1099.660509][T22265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.660555][T22265] ? __pfx_ksys_write+0x10/0x10 [ 1099.660597][T22265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.660624][T22265] do_syscall_64+0x174/0x580 [ 1099.660659][T22265] ? trace_irq_disable+0x3b/0x140 [ 1099.660684][T22265] ? clear_bhb_loop+0x40/0x90 [ 1099.660712][T22265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.660736][T22265] RIP: 0033:0x7f888c4bce59 [ 1099.660758][T22265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.660779][T22265] RSP: 002b:00007f888a70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.660804][T22265] RAX: ffffffffffffffda RBX: 00007f888c735fa0 RCX: 00007f888c4bce59 [ 1099.660823][T22265] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1099.660839][T22265] RBP: 00007f888a70e090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.660855][T22265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.660869][T22265] R13: 00007f888c736038 R14: 00007f888c735fa0 R15: 00007fffc4ee1e08 [ 1099.660904][T22265] [ 1099.697613][T14409] usb 4-1: GET_CAPABILITIES returned 0 [ 1099.697666][T14409] usbtmc 4-1:16.0: can't read capabilities [ 1099.938653][T21753] usb 4-1: USB disconnect, device number 67 [ 1100.044392][T22269] FAULT_INJECTION: forcing a failure. [ 1100.044392][T22269] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.044433][T22269] CPU: 0 UID: 0 PID: 22269 Comm: syz.5.5858 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1100.044466][T22269] Tainted: [L]=SOFTLOCKUP [ 1100.044476][T22269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1100.044491][T22269] Call Trace: [ 1100.044500][T22269] [ 1100.044511][T22269] dump_stack_lvl+0xe8/0x150 [ 1100.044545][T22269] should_fail_ex+0x46b/0x600 [ 1100.044587][T22269] should_failslab+0xa8/0x100 [ 1100.044620][T22269] __kmalloc_noprof+0xdf/0x7b0 [ 1100.044649][T22269] ? tomoyo_encode+0x28b/0x550 [ 1100.044683][T22269] tomoyo_encode+0x28b/0x550 [ 1100.044717][T22269] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1100.044763][T22269] ? tomoyo_path_number_perm+0x219/0x630 [ 1100.044803][T22269] tomoyo_path_number_perm+0x246/0x630 [ 1100.044844][T22269] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1100.044880][T22269] ? __lock_acquire+0x6b5/0x2d10 [ 1100.044911][T22269] ? do_raw_spin_lock+0x12b/0x2f0 [ 1100.044976][T22269] ? __fget_files+0x2a/0x420 [ 1100.045008][T22269] ? __fget_files+0x2a/0x420 [ 1100.045034][T22269] ? __fget_files+0x3a6/0x420 [ 1100.045062][T22269] ? __fget_files+0x2a/0x420 [ 1100.045094][T22269] security_file_ioctl+0xc3/0x2a0 [ 1100.045132][T22269] __se_sys_ioctl+0x47/0x170 [ 1100.045167][T22269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.045194][T22269] do_syscall_64+0x174/0x580 [ 1100.045229][T22269] ? trace_irq_disable+0x3b/0x140 [ 1100.045256][T22269] ? clear_bhb_loop+0x40/0x90 [ 1100.045286][T22269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.045310][T22269] RIP: 0033:0x7f888c4bce59 [ 1100.045333][T22269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.045353][T22269] RSP: 002b:00007f888a70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.045377][T22269] RAX: ffffffffffffffda RBX: 00007f888c735fa0 RCX: 00007f888c4bce59 [ 1100.045395][T22269] RDX: 00002000000000c0 RSI: 0000000040505412 RDI: 0000000000000003 [ 1100.045411][T22269] RBP: 00007f888a70e090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.045426][T22269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.045441][T22269] R13: 00007f888c736038 R14: 00007f888c735fa0 R15: 00007fffc4ee1e08 [ 1100.045478][T22269] [ 1100.072815][T22269] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1100.567391][T22273] netlink: 'syz.4.5862': attribute type 13 has an invalid length. [ 1100.772000][T22277] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5863'. [ 1101.812981][ T5694] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1101.962671][ T5694] usb 6-1: Using ep0 maxpacket: 32 [ 1101.980743][ T5694] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 108, changing to 7 [ 1102.000191][ T5694] usb 6-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 1102.000228][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.000253][ T5694] usb 6-1: Product: syz [ 1102.000270][ T5694] usb 6-1: Manufacturer: syz [ 1102.000288][ T5694] usb 6-1: SerialNumber: syz [ 1102.201724][T18493] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1102.303200][ T5694] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1102.329858][ T5694] usb 6-1: USB disconnect, device number 69 [ 1102.362462][T18493] usb 2-1: Using ep0 maxpacket: 8 [ 1102.388117][T18493] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1102.388190][T18493] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1102.388215][T18493] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1102.388245][T18493] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1102.388271][T18493] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.388328][T18493] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1102.388355][T18493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.702254][T18493] usb 2-1: GET_CAPABILITIES returned 0 [ 1102.702306][T18493] usbtmc 2-1:16.0: can't read capabilities [ 1102.913106][ T5608] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1102.919555][T18493] usb 2-1: USB disconnect, device number 56 [ 1104.124198][T22325] comedi comedi0: 8255: I/O base address not correctly aligned [ 1104.671684][T14409] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1104.821712][T14409] usb 6-1: Using ep0 maxpacket: 32 [ 1104.827529][T14409] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1104.827562][T14409] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1104.827586][T14409] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1104.827610][T14409] usb 6-1: config 1 has no interface number 0 [ 1104.827659][T14409] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1104.827689][T14409] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1104.827735][T14409] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1104.827762][T14409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.904169][T14409] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1105.063804][T14409] snd_usb_pod 6-1:1.1: set_interface failed [ 1105.064116][T14409] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1105.065633][T14409] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1105.138528][T14409] usb 6-1: USB disconnect, device number 70 [ 1105.230311][T22337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1107.066394][T22365] netlink: 'syz.5.5897': attribute type 13 has an invalid length. [ 1107.631944][ T5708] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1107.791805][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 1107.799572][ T5708] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1107.799605][ T5708] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1107.799629][ T5708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1107.799654][ T5708] usb 5-1: config 1 has no interface number 0 [ 1107.799703][ T5708] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1107.799734][ T5708] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1107.799780][ T5708] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1107.799823][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.886105][T14409] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1107.909514][ T5708] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1108.031974][T14409] usb 4-1: Using ep0 maxpacket: 8 [ 1108.036473][T14409] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1108.036603][T14409] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1108.036631][T14409] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1108.036659][T14409] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1108.036742][T14409] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1108.036789][T14409] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1108.036816][T14409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.127240][ T5708] snd_usb_pod 5-1:1.1: set_interface failed [ 1108.127522][ T5708] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1108.127727][ T5708] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1108.170410][ T5708] usb 5-1: USB disconnect, device number 70 [ 1108.371051][T14409] usb 4-1: usb_control_msg returned -71 [ 1108.371113][T14409] usbtmc 4-1:16.0: can't read capabilities [ 1108.402831][T14409] usb 4-1: USB disconnect, device number 68 [ 1109.311816][ T5608] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1111.179190][T22412] netlink: 'syz.3.5916': attribute type 13 has an invalid length. [ 1111.201746][ T5694] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1111.362101][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 1111.365230][ T5694] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1111.365293][ T5694] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1111.365319][ T5694] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1111.365346][ T5694] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1111.365373][ T5694] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1111.365418][ T5694] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1111.365444][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.595893][ T5694] usb 2-1: usb_control_msg returned -71 [ 1111.595929][ T5694] usbtmc 2-1:16.0: can't read capabilities [ 1111.674405][ T5694] usb 2-1: USB disconnect, device number 57 [ 1113.392082][ T5608] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1114.161607][T14409] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1114.311729][T14409] usb 2-1: Using ep0 maxpacket: 8 [ 1114.315781][T14409] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1114.315843][T14409] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1114.315868][T14409] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1114.315895][T14409] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1114.315924][T14409] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1114.315970][T14409] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1114.315997][T14409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.551372][T14409] usb 2-1: usb_control_msg returned -71 [ 1114.551428][T14409] usbtmc 2-1:16.0: can't read capabilities [ 1114.590245][T14409] usb 2-1: USB disconnect, device number 58 [ 1116.117638][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.117800][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.243916][T22470] netlink: 'syz.5.5940': attribute type 13 has an invalid length. [ 1117.821770][ T5757] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1117.971797][ T5757] usb 5-1: Using ep0 maxpacket: 32 [ 1117.977665][ T5757] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1117.977700][ T5757] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1117.977724][ T5757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1117.977747][ T5757] usb 5-1: config 1 has no interface number 0 [ 1117.977814][ T5757] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1117.977860][ T5757] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1117.977909][ T5757] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1117.977936][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.058466][ T5757] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1118.209709][ T5757] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1118.351772][ T5608] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1118.466373][ T5757] usb 5-1: USB disconnect, device number 71 [ 1118.472494][ T5757] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1120.156581][T22516] netlink: 'syz.4.5958': attribute type 13 has an invalid length. [ 1120.355578][T16757] Bluetooth: hci3: Frame reassembly failed (-84) [ 1120.951735][T14409] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1121.101718][T14409] usb 6-1: Using ep0 maxpacket: 32 [ 1121.104195][T14409] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1121.104224][T14409] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1121.104251][T14409] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1121.104275][T14409] usb 6-1: config 1 has no interface number 0 [ 1121.104324][T14409] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1121.104354][T14409] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1121.104710][T14409] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1121.104741][T14409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.179805][T14409] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1121.368461][T14409] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1121.579347][ T5694] usb 6-1: USB disconnect, device number 71 [ 1121.594319][ T5694] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1122.351785][ T60] Bluetooth: hci3: command 0x1003 tx timeout [ 1122.403011][ T5608] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1123.167087][T22549] FAULT_INJECTION: forcing a failure. [ 1123.167087][T22549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.167129][T22549] CPU: 0 UID: 0 PID: 22549 Comm: syz.4.5970 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1123.167161][T22549] Tainted: [L]=SOFTLOCKUP [ 1123.167170][T22549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1123.167185][T22549] Call Trace: [ 1123.167194][T22549] [ 1123.167205][T22549] dump_stack_lvl+0xe8/0x150 [ 1123.167238][T22549] should_fail_ex+0x46b/0x600 [ 1123.167278][T22549] _copy_from_iter+0x1d3/0x1670 [ 1123.167327][T22549] ? __pfx__copy_from_iter+0x10/0x10 [ 1123.167350][T22549] ? trace_kmalloc+0x2a/0xf0 [ 1123.167383][T22549] ? rcu_is_watching+0x15/0xb0 [ 1123.167426][T22549] file_tty_write+0x4c9/0xa10 [ 1123.167471][T22549] vfs_write+0x629/0xba0 [ 1123.167513][T22549] ? __pfx_vfs_write+0x10/0x10 [ 1123.167558][T22549] ? __fget_files+0x2a/0x420 [ 1123.167599][T22549] ksys_write+0x156/0x270 [ 1123.167635][T22549] ? __pfx_ksys_write+0x10/0x10 [ 1123.167677][T22549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.167703][T22549] do_syscall_64+0x174/0x580 [ 1123.167739][T22549] ? trace_irq_disable+0x3b/0x140 [ 1123.167766][T22549] ? clear_bhb_loop+0x40/0x90 [ 1123.167796][T22549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.167819][T22549] RIP: 0033:0x7fdb0392ce59 [ 1123.167841][T22549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.167862][T22549] RSP: 002b:00007fdb01b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1123.167887][T22549] RAX: ffffffffffffffda RBX: 00007fdb03ba5fa0 RCX: 00007fdb0392ce59 [ 1123.167905][T22549] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000003 [ 1123.167920][T22549] RBP: 00007fdb01b86090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.167936][T22549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.167950][T22549] R13: 00007fdb03ba6038 R14: 00007fdb03ba5fa0 R15: 00007ffd30b2cb08 [ 1123.167987][T22549] [ 1123.850907][T22562] netlink: 'syz.1.5975': attribute type 13 has an invalid length. [ 1124.001806][T18493] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1124.161738][T18493] usb 5-1: Using ep0 maxpacket: 32 [ 1124.164048][T18493] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1124.164080][T18493] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1124.164102][T18493] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1124.164125][T18493] usb 5-1: config 1 has no interface number 0 [ 1124.164167][T18493] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1124.164188][T18493] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1124.164218][T18493] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1124.164261][T18493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.186882][ T5694] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1124.225261][T18493] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1124.371681][ T5694] usb 6-1: Using ep0 maxpacket: 8 [ 1124.374539][ T5694] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1124.374660][ T5694] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1124.374688][ T5694] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1124.374792][ T5694] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1124.374821][ T5694] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.374870][ T5694] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1124.374949][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.455506][T18493] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1124.643413][ T5694] usb 6-1: GET_CAPABILITIES returned 0 [ 1124.643468][ T5694] usbtmc 6-1:16.0: can't read capabilities [ 1124.711972][T18493] usb 5-1: USB disconnect, device number 72 [ 1124.743366][T18493] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1124.848174][ T5756] usb 6-1: USB disconnect, device number 72 [ 1125.068674][T22573] sg_write: data in/out 808464396/120 bytes for SCSI command 0x0-- guessing data in; [ 1125.068674][T22573] program syz.1.5980 not setting count and/or reply_len properly [ 1125.630076][T22586] netlink: 'syz.4.5985': attribute type 13 has an invalid length. [ 1126.291619][ T5756] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1126.442146][ T5756] usb 2-1: Using ep0 maxpacket: 32 [ 1126.445932][ T5756] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1126.445963][ T5756] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1126.445987][ T5756] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1126.446052][ T5756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1126.446077][ T5756] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1126.446106][ T5756] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1126.446624][ T5756] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1126.446655][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.548739][ T5756] usb 2-1: config 0 descriptor?? [ 1126.759502][ T5756] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1126.780807][ T5756] usb 2-1: USB disconnect, device number 59 [ 1126.795730][ T5756] usblp0: removed [ 1126.843501][ T5708] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1126.981828][T14409] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1127.008082][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1127.008119][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1127.008148][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1127.008173][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1127.008220][ T5708] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1127.008246][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.080943][ T5708] usb 4-1: config 0 descriptor?? [ 1127.165754][T14409] usb 6-1: Using ep0 maxpacket: 8 [ 1127.169750][T14409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1127.169805][T14409] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1127.169890][T14409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.212924][T14409] usb 6-1: config 0 descriptor?? [ 1127.291799][ T5756] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1127.421885][ T5756] usb 2-1: device descriptor read/64, error -71 [ 1127.448846][T14409] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1127.495480][ T5708] usbhid 4-1:0.0: can't add hid device: -71 [ 1127.495627][ T5708] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1127.517487][ T5708] usb 4-1: USB disconnect, device number 69 [ 1127.663031][ T5756] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1127.813696][ T5756] usb 2-1: device descriptor read/64, error -71 [ 1127.923953][ T5756] usb usb2-port1: attempt power cycle [ 1128.262366][ T5756] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1128.284877][ T5756] usb 2-1: device descriptor read/8, error -71 [ 1128.425898][T22618] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[18785] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[22618] [ 1128.521645][ T5756] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1128.542746][ T5756] usb 2-1: device descriptor read/8, error -71 [ 1128.652331][ T5756] usb usb2-port1: unable to enumerate USB device [ 1129.346259][T22629] sctp: [Deprecated]: syz.1.6001 (pid 22629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1129.346259][T22629] Use struct sctp_sack_info instead [ 1129.787294][T22634] usb usb8: usbfs: process 22634 (syz.1.6004) did not claim interface 0 before use [ 1129.988179][T14409] usb 6-1: USB disconnect, device number 73 [ 1131.856788][T22671] usb usb8: usbfs: process 22671 (syz.4.6021) did not claim interface 0 before use [ 1132.025077][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6022'. [ 1132.971698][T14409] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1133.121679][T14409] usb 6-1: Using ep0 maxpacket: 8 [ 1133.143107][T14409] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1133.143157][T14409] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1133.143210][T14409] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1133.143245][T14409] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1133.143278][T14409] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1133.143320][T14409] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1133.143802][T14409] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1133.143831][T14409] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1133.148766][T14409] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1133.148816][T14409] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1133.148863][T14409] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1133.148888][T14409] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1133.148912][T14409] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1133.148935][T14409] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1133.148959][T14409] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1133.148983][T14409] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1133.168645][T14409] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1133.168679][T14409] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1133.168709][T14409] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1133.168731][T14409] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1133.168751][T14409] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1133.168771][T14409] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1133.168792][T14409] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1133.168812][T14409] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1133.285110][T14409] usb 6-1: string descriptor 0 read error: -22 [ 1133.285216][T14409] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1133.285235][T14409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.470490][T14409] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1133.622940][T22695] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1133.725471][T21753] usb 6-1: USB disconnect, device number 74 [ 1134.079792][T22704] input: syz0 as /devices/virtual/input/input130 [ 1134.147967][ T38] audit: type=1326 audit(1780413422.486:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22690 comm="syz.5.6029" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c4bce59 code=0x7ffc0000 [ 1134.148032][ T38] audit: type=1326 audit(1780413422.486:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22690 comm="syz.5.6029" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c4bce59 code=0x7ffc0000 [ 1134.148075][ T38] audit: type=1326 audit(1780413422.486:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22690 comm="syz.5.6029" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f888c4bce59 code=0x7ffc0000 [ 1134.148116][ T38] audit: type=1326 audit(1780413422.486:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22690 comm="syz.5.6029" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c4bce59 code=0x7ffc0000 [ 1134.148158][ T38] audit: type=1326 audit(1780413422.486:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22690 comm="syz.5.6029" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c4bce59 code=0x7ffc0000 [ 1134.879745][T22725] [ 1134.879784][T22725] ====================================================== [ 1134.879803][T22725] WARNING: possible circular locking dependency detected [ 1134.879877][T22725] syzkaller #0 Tainted: G L [ 1134.879898][T22725] ------------------------------------------------------ [ 1134.879939][T22725] syz.1.6041/22725 is trying to acquire lock: [ 1134.879960][T22725] ffffffff8e958b58 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 1134.880056][T22725] [ 1134.880056][T22725] but task is already holding lock: [ 1134.880066][T22725] ffffffff8e075558 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 1134.880129][T22725] [ 1134.880129][T22725] which lock already depends on the new lock. [ 1134.880129][T22725] [ 1134.880138][T22725] [ 1134.880138][T22725] the existing dependency chain (in reverse order) is: [ 1134.880148][T22725] [ 1134.880148][T22725] -> #7 (system_transition_mutex){+.+.}-{4:4}: [ 1134.880231][T22725] mutex_lock_nested+0x5a/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1134.880258][T22725] lock_system_sleep+0x49/0x70 [ 1134.880283][T22725] disk_store+0xa7/0x500 [ 1134.880314][T22725] kernfs_fop_write_iter+0x3b0/0x540 [ 1134.880347][T22725] vfs_write+0x629/0xba0 [ 1134.880376][T22725] ksys_write+0x156/0x270 [ 1134.880405][T22725] do_syscall_64+0x174/0x580 [ 1134.880441][T22725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.880464][T22725] [ 1134.880464][T22725] -> #6 (&of->mutex){+.+.}-{4:4}: [ 1134.880496][T22725] mutex_lock_nested+0x5a/0x1d0 [ 1134.880520][T22725] kernfs_seq_start+0x5c/0x420 [ 1134.880553][T22725] seq_read_iter+0x3f8/0xe20 [ 1134.880587][T22725] vfs_read+0x58b/0xa80 [ 1134.880615][T22725] ksys_read+0x156/0x270 [ 1134.880652][T22725] do_syscall_64+0x174/0x580 [ 1134.880687][T22725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.880710][T22725] [ 1134.880710][T22725] -> #5 (&p->lock){+.+.}-{4:4}: [ 1134.880741][T22725] mutex_lock_nested+0x5a/0x1d0 [ 1134.880767][T22725] seq_read_iter+0xb8/0xe20 [ 1134.880801][T22725] lo_rw_aio+0xc80/0xf00 [ 1134.880832][T22725] loop_process_work+0x92a/0x11b0 [ 1134.880863][T22725] process_one_work+0x98b/0x1630 [ 1134.880896][T22725] worker_thread+0xb49/0x1140 [ 1134.880928][T22725] kthread+0x388/0x470 [ 1134.880951][T22725] ret_from_fork+0x514/0xb70 [ 1134.880977][T22725] ret_from_fork_asm+0x1a/0x30 [ 1134.881005][T22725] [ 1134.881005][T22725] -> #4 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1134.881037][T22725] process_one_work+0x8d7/0x1630 [ 1134.881066][T22725] worker_thread+0xb49/0x1140 [ 1134.881099][T22725] kthread+0x388/0x470 [ 1134.881119][T22725] ret_from_fork+0x514/0xb70 [ 1134.881143][T22725] ret_from_fork_asm+0x1a/0x30 [ 1134.881170][T22725] [ 1134.881170][T22725] -> #3 ((wq_completion)loop9){+.+.}-{0:0}: [ 1134.881201][T22725] touch_wq_lockdep_map+0xcb/0x180 [ 1134.881222][T22725] __flush_workqueue+0x14b/0x14f0 [ 1134.881241][T22725] drain_workqueue+0xd3/0x390 [ 1134.881260][T22725] lo_release+0x287/0x8f0 [ 1134.881287][T22725] bdev_release+0x541/0x660 [ 1134.881318][T22725] blkdev_release+0x15/0x20 [ 1134.881336][T22725] __fput+0x461/0xa70 [ 1134.881364][T22725] fput_close_sync+0x11f/0x240 [ 1134.881382][T22725] __x64_sys_close+0x7e/0x110 [ 1134.881399][T22725] do_syscall_64+0x174/0x580 [ 1134.881423][T22725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.881468][T22725] [ 1134.881468][T22725] -> #2 (&disk->open_mutex#4){+.+.}-{4:4}: [ 1134.881502][T22725] mutex_lock_nested+0x5a/0x1d0 [ 1134.881525][T22725] __del_gendisk+0x127/0x980 [ 1134.881547][T22725] del_gendisk+0xe7/0x160 [ 1134.881568][T22725] loop_remove+0x42/0xc0 [ 1134.881597][T22725] loop_control_ioctl+0x4ba/0x5b0 [ 1134.881634][T22725] __se_sys_ioctl+0xff/0x170 [ 1134.881657][T22725] do_syscall_64+0x174/0x580 [ 1134.881680][T22725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.881696][T22725] [ 1134.881696][T22725] -> #1 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1134.881718][T22725] down_read+0x97/0x200 [ 1134.881731][T22725] add_disk_fwnode+0xe7/0x480 [ 1134.881747][T22725] loop_add+0x86e/0xb50 [ 1134.881767][T22725] blk_request_module+0x27d/0x2a0 [ 1134.881784][T22725] blkdev_get_no_open+0x3f/0xe0 [ 1134.881807][T22725] blkdev_open+0x1f5/0x620 [ 1134.881820][T22725] do_dentry_open+0x83d/0x13e0 [ 1134.881836][T22725] vfs_open+0x3b/0x350 [ 1134.881850][T22725] path_openat+0x2eea/0x3960 [ 1134.881872][T22725] do_file_open+0x23e/0x4a0 [ 1134.881892][T22725] do_sys_openat2+0x115/0x200 [ 1134.881909][T22725] __x64_sys_creat+0x8f/0xc0 [ 1134.881926][T22725] do_syscall_64+0x174/0x580 [ 1134.881949][T22725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.881965][T22725] [ 1134.881965][T22725] -> #0 (major_names_lock){+.+.}-{4:4}: [ 1134.881986][T22725] __lock_acquire+0x15a5/0x2d10 [ 1134.882004][T22725] lock_acquire+0x106/0x350 [ 1134.882021][T22725] mutex_lock_nested+0x5a/0x1d0 [ 1134.882037][T22725] blk_request_module+0x35/0x2a0 [ 1134.882054][T22725] blkdev_get_no_open+0x3f/0xe0 [ 1134.882076][T22725] bdev_file_open_by_dev+0xa0/0x240 [ 1134.882100][T22725] swsusp_check+0x56/0x490 [ 1134.882116][T22725] software_resume+0x51/0x4c0 [ 1134.882142][T22725] resume_store+0x333/0x4f0 [ 1134.882155][T22725] kernfs_fop_write_iter+0x3b0/0x540 [ 1134.882178][T22725] vfs_write+0x629/0xba0 [ 1134.882198][T22725] ksys_write+0x156/0x270 [ 1134.882218][T22725] do_syscall_64+0x174/0x580 [ 1134.882241][T22725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.882257][T22725] [ 1134.882257][T22725] other info that might help us debug this: [ 1134.882257][T22725] [ 1134.882263][T22725] Chain exists of: [ 1134.882263][T22725] major_names_lock --> &of->mutex --> system_transition_mutex [ 1134.882263][T22725] [ 1134.882335][T22725] Possible unsafe locking scenario: [ 1134.882335][T22725] [ 1134.882360][T22725] CPU0 CPU1 [ 1134.882388][T22725] ---- ---- [ 1134.882398][T22725] lock(system_transition_mutex); [ 1134.882410][T22725] lock(&of->mutex); [ 1134.882422][T22725] lock(system_transition_mutex); [ 1134.882435][T22725] lock(major_names_lock); [ 1134.882445][T22725] [ 1134.882445][T22725] *** DEADLOCK *** [ 1134.882445][T22725] [ 1134.882451][T22725] 5 locks held by syz.1.6041/22725: [ 1134.882461][T22725] #0: ffff8880364e9328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1134.882520][T22725] #1: ffff888035ca0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1134.882566][T22725] #2: ffff88803781e478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1134.882610][T22725] #3: ffff88801f681008 (kn->active#75){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1134.882664][T22725] #4: ffffffff8e075558 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 1134.882709][T22725] [ 1134.882709][T22725] stack backtrace: [ 1134.882723][T22725] CPU: 0 UID: 0 PID: 22725 Comm: syz.1.6041 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1134.882746][T22725] Tainted: [L]=SOFTLOCKUP [ 1134.882752][T22725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1134.882764][T22725] Call Trace: [ 1134.882771][T22725] [ 1134.882778][T22725] dump_stack_lvl+0xe8/0x150 [ 1134.882798][T22725] print_circular_bug+0x2e1/0x300 [ 1134.882823][T22725] check_noncircular+0x12e/0x150 [ 1134.882848][T22725] __lock_acquire+0x15a5/0x2d10 [ 1134.882869][T22725] ? __lock_acquire+0x6b5/0x2d10 [ 1134.882894][T22725] ? blk_request_module+0x35/0x2a0 [ 1134.882911][T22725] lock_acquire+0x106/0x350 [ 1134.882929][T22725] ? blk_request_module+0x35/0x2a0 [ 1134.882949][T22725] ? blk_request_module+0x35/0x2a0 [ 1134.882969][T22725] ? blk_request_module+0x35/0x2a0 [ 1134.882986][T22725] mutex_lock_nested+0x5a/0x1d0 [ 1134.883004][T22725] ? blk_request_module+0x35/0x2a0 [ 1134.883024][T22725] blk_request_module+0x35/0x2a0 [ 1134.883043][T22725] blkdev_get_no_open+0x3f/0xe0 [ 1134.883068][T22725] bdev_file_open_by_dev+0xa0/0x240 [ 1134.883095][T22725] swsusp_check+0x56/0x490 [ 1134.883114][T22725] software_resume+0x51/0x4c0 [ 1134.883142][T22725] resume_store+0x333/0x4f0 [ 1134.883155][T22725] ? sysfs_file_kobj+0x1a/0x230 [ 1134.883170][T22725] ? __pfx_resume_store+0x10/0x10 [ 1134.883197][T22725] ? sysfs_file_kobj+0x1a/0x230 [ 1134.883213][T22725] ? sysfs_file_kobj+0x1e4/0x230 [ 1134.883228][T22725] ? sysfs_kf_write+0x166/0x260 [ 1134.883245][T22725] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1134.883260][T22725] kernfs_fop_write_iter+0x3b0/0x540 [ 1134.883286][T22725] vfs_write+0x629/0xba0 [ 1134.883311][T22725] ? __pfx_vfs_write+0x10/0x10 [ 1134.883334][T22725] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1134.883358][T22725] ? lockdep_hardirqs_on+0x7a/0x110 [ 1134.883383][T22725] ? mutex_lock_nested+0x152/0x1d0 [ 1134.883401][T22725] ? fdget_pos+0x252/0x320 [ 1134.883423][T22725] ksys_write+0x156/0x270 [ 1134.883446][T22725] ? __pfx_ksys_write+0x10/0x10 [ 1134.883471][T22725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.883488][T22725] do_syscall_64+0x174/0x580 [ 1134.883512][T22725] ? trace_irq_disable+0x3b/0x140 [ 1134.883530][T22725] ? clear_bhb_loop+0x40/0x90 [ 1134.883548][T22725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.883565][T22725] RIP: 0033:0x7f6e5898ce59 [ 1134.883580][T22725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.883595][T22725] RSP: 002b:00007f6e56be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1134.883612][T22725] RAX: ffffffffffffffda RBX: 00007f6e58c05fa0 RCX: 00007f6e5898ce59 [ 1134.883631][T22725] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1134.883642][T22725] RBP: 00007f6e58a22d6f R08: 0000000000000000 R09: 0000000000000000 [ 1134.883653][T22725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.883663][T22725] R13: 00007f6e58c06038 R14: 00007f6e58c05fa0 R15: 00007ffeb28fc7e8 [ 1134.883682][T22725] [ 1135.035187][ T5694] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1135.216758][ T5694] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 1135.216854][ T5694] usb 4-1: config 0 has no interface number 0 [ 1135.216969][ T5694] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1135.268987][ T5694] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 1135.269086][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.269166][ T5694] usb 4-1: Product: syz [ 1135.269209][ T5694] usb 4-1: Manufacturer: syz [ 1135.269253][ T5694] usb 4-1: SerialNumber: syz [ 1135.367546][ T5694] usb 4-1: config 0 descriptor?? [ 1135.515064][ T5694] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 1135.615811][ T5694] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1135.784780][ T5694] usb 4-1: USB disconnect, device number 70 [ 1135.789722][T22725] PM: Image not found (code -6) [ 1135.948452][ T5694] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1135.977096][ T5694] kobil_sct 4-1:0.148: device disconnected [ 1137.953875][T17597] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.173138][T17597] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.383054][T17597] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.613486][T17597] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.963105][T17597] bridge_slave_1: left allmulticast mode [ 1138.963137][T17597] bridge_slave_1: left promiscuous mode [ 1138.963380][T17597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.122345][T17597] bridge_slave_0: left allmulticast mode [ 1139.122376][T17597] bridge_slave_0: left promiscuous mode [ 1139.122578][T17597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.772139][T17597] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.852189][T17597] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.874656][T17597] .` (unregistering): Released all slaves [ 1139.913537][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1140.494176][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1140.985252][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1141.241798][T17597] hsr_slave_0: left promiscuous mode [ 1141.281588][T17597] hsr_slave_1: left promiscuous mode [ 1141.282414][T17597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.282438][T17597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.322642][T17597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.322671][T17597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.402037][T17597] veth1_macvtap: left promiscuous mode [ 1141.402085][T17597] veth0_macvtap: left promiscuous mode [ 1141.402211][T17597] veth1_vlan: left promiscuous mode [ 1141.402284][T17597] veth0_vlan: left promiscuous mode [ 1141.972274][T17597] team0 (unregistering): Port device team_slave_1 removed [ 1142.013019][T17597] team0 (unregistering): Port device team_slave_0 removed [ 1142.102700][T17597] team0 (unregistering): Port device dummy0 removed [ 1142.144106][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1143.613568][T17597] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.823319][T17597] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.033990][T17597] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.252900][T17597] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.664466][T17597] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.770141][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5