last executing test programs: 20.351875288s ago: executing program 2 (id=155): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r3, &(0x7f0000000080)=[{0x0}], 0x1, 0xffffffea, 0x6) syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402"], 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40000010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$video(0x0, 0xa7, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x84200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) (fail_nth: 1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) 14.437926698s ago: executing program 2 (id=166): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000001d00)={{}, 0x1, 0x0, 0x0, {0x0, 0xfd}}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x24040, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000600)=0x6) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x2, 0x3, 0xb0ac, 0x4580, r3, 0x6, '\x00', r4, r3, 0x0, 0x0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r5, 0x800000000000000}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000200000a0900010073797a310000000034000000030a010100000000000000000200000108000b400000000208000a40000000040900010073797a310000000004000c0014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x80) fcntl$setlease(r3, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r6, &(0x7f0000000800)="59363d1a0574aeefe0c2c1961bbeaba5311511510a94a32648fbee72b28449b7b7a637b4ee785c34f305461c4e9b44210925430631215d40ba893cf30d29dc03f4c0698f005845260561ce62a8aca3633c3636c0249c248f31835afe7d6caae669023fe22d4eec74ab9e597d7ca48b83f67d0dafe04acdd3dd8cbf789b6644d9cc15845cb7c22e92cd8a02739e21677f62c65bdf7736ad744e2cd1888dd357f5da4005a2d9d99724deb2add33a1fe802eda911bcb3fa4eb3387521cbba04a490e0bbe1c5003a90d273bb5f411bc9", 0xce, 0x20004804, &(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x32, @loopback, 0x5}, 0x80) r9 = getpid() fcntl$setownex(r8, 0xf, &(0x7f00000000c0)={0x2, r9}) r10 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f0000000040)={0xeef9, 0x0, 0x3, 0x3b, 0x4}) ioctl$sock_FIOGETOWN(r8, 0x8903, 0x0) fcntl$setown(r3, 0x8, 0x0) removexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="6f73782e2a5b26bc7a242b"]) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_usb_connect$midi(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x4712, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x4, 0xc0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x8, [], [{{0x9, 0x5, 0x4, 0x2, 0x20, 0xa1, 0x7, 0x7, {0x14, 0x25, 0x1, 0x10, "7d052802e2e66735d9c7e98e089c9a46"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 12.234792117s ago: executing program 0 (id=170): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x400000001fc, 0x181181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x10, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) 11.433668072s ago: executing program 1 (id=174): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0xd, 0x0, 0x7, 0x4}}, 0xe8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, 0x8) socket$key(0xf, 0x3, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x5, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1002, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), 0x0}, 0x20) 10.980679582s ago: executing program 0 (id=177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_pgetevents(0x0, 0x4, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000039907800"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="700000001000030500007700ffdb75bf2adf2500000000cb4803c38d9be62d65be850700afadd04d83706dd02ba82295691b80c7b39e39f3713ecb23edd84d77711792b4ccadaaa46628647daf080a5e4a0ab27ee1eadb869800ac1f45c7eee6d9a915acaa5f353e81380b6b514d40215be3be7852428da3cb63194fd8abe6e18f1c", @ANYRESDEC, @ANYRES32=r3], 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="62060000040000000109000000000000000000072800ebffdf07a201010400000000000000cf030000000000000900000000000000f9ffffffffffffff000000"], 0x40) unshare(0x100000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNDCTL_MIDI_INFO(r5, 0xc074510c, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000500), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r6, &(0x7f0000000140)=""/247, 0xf7) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000240)={0xaf4, {{0xa, 0x4e24, 0x3a4, @rand_addr=' \x01\x00'}}, {{0xa, 0x4e24, 0x7, @local, 0x7}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0x3, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000005304000825bd7000fedbdf252f913fe14d6a11ff1f5195e67abf5aacd62ffaeaf876daa78cd5c560e2f9745267c0933aa937386ff826f9324a5034d02b5247b4d088106d6cd0de889da7cb8d4d37816448ccaac1c7287cf4e9442ecc9440847ee7f21f771533fece91eaeefd5200", @ANYRES32, @ANYRES16=r4, @ANYRESOCT=r2], 0x78}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 10.665979682s ago: executing program 2 (id=179): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000380)={&(0x7f0000000280)=[{0x7, 0x44, 0x0, 0x38000}, {0x4, 0x3, 0x4, 0x6}, {0x1, 0x800, 0x3, 0xae}, {0xff, 0x4, 0x6, 0x5}, {0x6, 0x581, 0x6, 0x9}, {0x2, 0x100000000, 0x7fff, 0x7}, {0x81, 0x0, 0x696, 0x6}, {0x8, 0xc9, 0xfffffffffffffffa}], 0x8, 0x20, 0x1, 0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$netlink(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 10.514576182s ago: executing program 0 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f29f8bbbb3000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0c0f01c926640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680fadecedecefc0c66b8134266ef66ba4300ec0f0f49e4b766b83c008ed0", 0x77}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 10.513940117s ago: executing program 1 (id=182): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f", 0x10, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442da002381c1", 0x3e}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 1) 10.493017399s ago: executing program 4 (id=183): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88"], 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x0) (async) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1e8) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', 0x0, 0x2202c9c, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x4, &(0x7f0000000040)={0x40015, 0x8a, 0x1e0000}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 9.164608486s ago: executing program 2 (id=185): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r4, r4, 0x2e}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r5, 0x3e, r5}, 0x5) r6 = syz_io_uring_setup(0x3e3, &(0x7f00000020c0)={0x0, 0xe138, 0x0, 0x1200001, 0xffffffff, 0x0, 0x0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000002140)) syz_io_uring_modify_offsets$generic(r7, r8, 0x2c, 0x10000) io_uring_enter(r6, 0x24b7, 0xcb15, 0x21, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') getgroups(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000041c0)={{{@in6, @in=@local}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f00000042c0)=0xe4) syz_clone(0x0, &(0x7f0000004440)="6a1c10d21ba56b1f5bf412e89be22597ec5cc6f2c46bdca93cb7e6fd34ce0d0fd810ddb7d3afb080e9c2d24eacd6c407ef3d780f85511af4513dba67e056072f82af43066c1d17a8bffd6814db9f539ecc62c1d1e198894d18a6", 0x5a, &(0x7f00000044c0), &(0x7f0000004500), &(0x7f0000004540)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.352136236s ago: executing program 0 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r3, &(0x7f0000000140)=""/87, 0x57) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_page_scan_activity={{0x8b}, {0x7, 0x1003, 0x5}}}}, 0xb) 8.343096066s ago: executing program 4 (id=188): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f", 0x10, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442da002381c1", 0x3e}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x7, 0x9, 0x0, 0x80000000}, {0xfffd, 0x3, 0x7, 0x4}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.153534942s ago: executing program 1 (id=190): syz_open_dev$sndpcmc(&(0x7f0000000540), 0x1, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040)=0x4, 0x1) recvmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x16, 0x4, 0x0, 0x4, 0xfffe, 0x64, 0x8000, 0x1, 0x11, 0x6, @empty, @multicast1, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1, 0x7f13}, {@broadcast}, {@multicast2, 0x40000}, {@local, 0x800}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0xfd}, 0x4}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008040) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x60}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 8.017020061s ago: executing program 3 (id=191): userfaultfd(0x801) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd}, {0x5}, {0x0, 0x4}, {0x5}, 0x61, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 1) 4.650283813s ago: executing program 3 (id=192): userfaultfd(0x801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd}, {0x5}, {0x0, 0x4}, {0x5}, 0x61, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.139289974s ago: executing program 1 (id=193): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0xd, 0x0, 0x7, 0x4}}, 0xe8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, 0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x5, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1002, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), 0x0}, 0x20) 4.113196404s ago: executing program 4 (id=194): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r6 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) (rerun: 32) lseek(r6, 0x5, 0x2) (async) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250f00000008000400050000001c000180060002001d000000060001000200000008000500000000004400028006000e004e22000005000d000100000008000500050000000800080008000000060002004e23000008000500020000000800090001000080080009004a000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb300000000000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000001140)={@multicast2, @local}, 0x8) 4.111628236s ago: executing program 2 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000380)={&(0x7f0000000280)=[{0x7, 0x44, 0x0, 0x38000}, {0x4, 0x3, 0x4, 0x6}, {0x1, 0x800, 0x3, 0xae}, {0xff, 0x4, 0x6, 0x5}, {0x6, 0x581, 0x6, 0x9}, {0x2, 0x100000000, 0x7fff, 0x7}, {0x81, 0x0, 0x696, 0x6}, {0x8, 0xc9, 0xfffffffffffffffa}], 0x8, 0x20, 0x1, 0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.906230625s ago: executing program 3 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) unshare(0x22020400) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000600000000000000160800001811000030810e7a062c65d725d17688fc5ff2c190467475dfa3563b0dab9d3e3a19acf43aea1a21f580364c01356faad66eb3f039c947f749f090e984786ba6ce43dcf331c7632d714dd117cda4f5cfbecb8b2c452534df2744ec471a8808b0fa03f75269a0b512cc4209e6fbfe41d75a272ef87a4d8777234b41b27670a41692497ee66f3488410f4ccf5b536198b206d5", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000159ff01ff0f0000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, @in={0x2, 0x4000, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 3.860715705s ago: executing program 4 (id=197): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) (fail_nth: 1) 2.607137045s ago: executing program 3 (id=198): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x0, 0xfc, 0x0, 0xfd, 0x5}}, 0x1c}}, 0x0) dup2(r0, r1) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket(0x2, 0x2, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x180, 0x41009}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x15, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)=[{0x0, 0xfdb6}, {&(0x7f0000000500)="dd5c0db0c9695d91", 0x8}], 0x2}, 0x804) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[], 0x40000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000060000008000072181100008ed636c224e4576ea2bae6e771cddabf695baa944deed4ca7cd06af3958d1d6d9d3c3b6f17c5914c51484e22", @ANYRES32=r10, @ANYRES64=r4], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r12) sendmsg$ETHTOOL_MSG_FEATURES_SET(r12, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x40, r13, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r14, 0xffffffffffffffff, 0x3f00000000000000) 2.29460514s ago: executing program 1 (id=199): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000820907"], 0x18}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.610681511s ago: executing program 4 (id=200): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f000053e000/0x4000)=nil, 0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) openat$cgroup_type(r4, &(0x7f0000000340), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000700)={0x0, 0x0, r9, r10, 0x3, 0xfff, 0x2, 0x1, {0x8c7a, 0x1, 0x9, 0x69, 0xf5b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0xffff, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1.414840514s ago: executing program 2 (id=201): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000001d00)={{}, 0x1, 0x0, 0x0, {0x0, 0xfd}}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x24040, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000600)=0x6) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x2, 0x3, 0xb0ac, 0x4580, r3, 0x6, '\x00', r4, r3, 0x0, 0x0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r5, 0x800000000000000}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000200000a0900010073797a310000000034000000030a010100000000000000000200000108000b400000000208000a40000000040900010073797a310000000004000c0014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x80) fcntl$setlease(r3, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r6, &(0x7f0000000800)="59363d1a0574aeefe0c2c1961bbeaba5311511510a94a32648fbee72b28449b7b7a637b4ee785c34f305461c4e9b44210925430631215d40ba893cf30d29dc03f4c0698f005845260561ce62a8aca3633c3636c0249c248f31835afe7d6caae669023fe22d4eec74ab9e597d7ca48b83f67d0dafe04acdd3dd8cbf789b6644d9cc15845cb7c22e92cd8a02739e21677f62c65bdf7736ad744e2cd1888dd357f5da4005a2d9d99724deb2add33a1fe802eda911bcb3fa4eb3387521cbba04a490e0bbe1c5003a90d273bb5f411bc9", 0xce, 0x20004804, &(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x32, @loopback, 0x5}, 0x80) r9 = getpid() fcntl$setownex(r8, 0xf, &(0x7f00000000c0)={0x2, r9}) r10 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f0000000040)={0xeef9, 0x0, 0x3, 0x3b, 0x4}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r3, 0x8, r11) removexattr(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6f73782e2a5b26bc7a242b"]) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_usb_connect$midi(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x4712, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x4, 0xc0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x8, [], [{{0x9, 0x5, 0x4, 0x2, 0x20, 0xa1, 0x7, 0x7, {0x14, 0x25, 0x1, 0x10, "7d052802e2e66735d9c7e98e089c9a46"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 1.392752519s ago: executing program 0 (id=202): socket$inet_udp(0x2, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800"], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000004c0)={0x24, &(0x7f0000000380)={0x40, 0x8, 0xd, {0xd, 0x30, "453e096a02a59141d5635b"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000400)={0x0, 0x22, 0x9, {[@local=@item_012={0x0, 0x2, 0x5}, @main=@item_012={0x1, 0x0, 0x8, 'r'}, @main=@item_4={0x3, 0x0, 0x8, "dad2d2fb"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff8, 0x8, 0x1, {0x22, 0x73f}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000500)={0x40, 0x1, 0xb0, "abbc13d7a44d9b6d3b203ac0e468d6cab5e03d0a1b9d78c30d983fb10c245826ceea36b6b74b0f5503cc074eafbd62aac1af708c09d692ba747f81ad5ce4b2f1eaef98f14eddf334e21262087517c18238027120bff34619d945ee71a4f77f68d5f7f14a135acb9395d37bc0ab9b471c33d87cce5d81d86f95a8068ccada93c03118be3ebe18a33d05aa2535ae464e0ac04e665f9a74315f4aaa99c2384f60b3e1ed94f4f43560cecfaee1d21d5c429f"}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x1, 0xed, "6d491d685655572ede4da2baa6bff5df9add2b91d7ad993dee8a6a69830ba43646b26272dd322e30281f41d762b450fb3b887dd5404ec0a130fdcb24ae5f3a04d481e8c02f0bfdbfd570d98334033ddf4b25d3d87802930b4e83456aaf45edf58602a4502abf4fd199466918af35a20501db9607c762c70175b102c22a60e77c3f99a9da91fc1d0e79cd246edc993ac64650e8051e9b98df080e2cfa9c4587c25d2ebc6600328b4c67f45fbb6dfb59dbaab2ffab586014808ebddb3b54b6e72ad6dc8205bbf400145f37c41cea267aff155678d0204ab5fcf630e24e0dd4d3bfc3324e238478167afe01a972e6"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x7}}) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x337, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x301, 0x3a, 0xff, @remote, @private1, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61e"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0x9, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a"}, {0x21, 0x3, "b8a3e10090cf6164000000020000000000000000000000ffff008879"}, {0x0, 0xe, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb"}, {}]}}}}}}, 0x0) 1.206123716s ago: executing program 3 (id=203): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x181000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd7000fbdbdf250d0000002c00018014000200626f6e643000000000000000000000001400020067656e65766530000000000000000000f0ec69a2d1d564cea5783e11db74965cb1d4b3303c2cedac357761d9fb7ce8d2399016e2ca7d3664eefa1e51b6ac176a9b"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x44) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2000) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000040)={0xee, 0x4, 0x401, 0x3, 0x3, 0x8001, "e5f8454b8f61b6b049c829f78858c8f8", 0x3, 0x1, 0xff, 0x2, 0x8, 0x8, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) prctl$PR_SET_SECUREBITS(0x1c, 0x30) socket(0x80000000000000a, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24040085) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="59cf000000000100000008"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539740f45f819e01177d3d458dd4992861ac00", "f4bd000000801900"}}) 1.032898851s ago: executing program 1 (id=204): syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x2, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r5, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0xfe, 0xfffffffd, @vifc_lcl_addr=@loopback, @dev={0xac, 0x14, 0x14, 0x80}}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x117, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004cf0010900650000ea069078ac1414aa6401010289076dac1414bb831361e0000002e0000002ac1414bbac1414aa01044e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="918001ff90780001080a00000fff000000041e1026027f00000000000000010000000303102208c920067fb6ab080a0000000200000006030302fe0df98924b36094b37735dfd10204d408080a0000000100000002220334697fbfe1df088b8f8749c9710b4269835873ddeb51154d700d4946d34322702fe22c96747827b8d96fa36a9c82429856646cc01464194bdcab6059141405fb411ca39af7b73ff20ba028db9bef573fb70530204c2ef0056c6b8971d5093fb35819ca4824a4c549647a9cf02a36980fa7b23e2423a5"], 0x0) recvmmsg$unix(r6, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @remote}, 0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x305bd, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000600450000280000000000019078ac1e0001ac1414bb0d00907800"/54], 0x0) 998.819831ms ago: executing program 0 (id=205): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r4, r4, 0x2e}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r5, 0x3e, r5}, 0x5) r6 = syz_io_uring_setup(0x3e3, &(0x7f00000020c0)={0x0, 0xe138, 0x0, 0x1200001, 0xffffffff, 0x0, 0x0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000002140)) syz_io_uring_modify_offsets$generic(r7, r8, 0x2c, 0x10000) io_uring_enter(r6, 0x24b7, 0xcb15, 0x21, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') getgroups(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000041c0)={{{@in6, @in=@local}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f00000042c0)=0xe4) syz_clone(0x0, &(0x7f0000004440)="6a1c10d21ba56b1f5bf412e89be22597ec5cc6f2c46bdca93cb7e6fd34ce0d0fd810ddb7d3afb080e9c2d24eacd6c407ef3d780f85511af4513dba67e056072f82af43066c1d17a8bffd6814db9f539ecc62c1d1e198894d18a6", 0x5a, &(0x7f00000044c0), &(0x7f0000004500), &(0x7f0000004540)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.419631ms ago: executing program 4 (id=206): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x57, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x89, &(0x7f0000000080)=@string={0x89, 0x3, "c626cf53dea9a305a10e721b2de29e6e4471aaef7e6f0d4b7e0ac2e61c2b976819a5fa64b82fa304dafcec3a39dfb7b2c9ef016771a2bd57ebfca7661d201b046e6f3ca2096a765433e370a23a67cb85d3ea2735ebaa0a41d334b95e57c24f1319eb39e3b7cf9c524784ce17f3e76ed6e47a868dcdfdef02377403d4c8d3b8804705c4c1b357d8"}}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(r1, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000200)) munmap(&(0x7f0000234000/0x1000)=nil, 0x1000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) 0s ago: executing program 3 (id=207): r0 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x40c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 69.686021][ T5589] cgroup: Unknown subsys name 'net' [ 69.926261][ T5589] cgroup: Unknown subsys name 'cpuset' [ 69.982306][ T5589] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.346543][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.346628][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.585523][ T5589] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.055622][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.078315][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.091188][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.100679][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.112833][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.115819][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.118965][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.120515][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.123891][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.125365][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.132445][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.134630][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.136029][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.136536][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.144197][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.144447][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.145746][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.149448][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.170360][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.173866][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.176103][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.176332][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.180335][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.180408][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.216627][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.374396][ T5622] Bluetooth: hci4: command tx timeout [ 76.374400][ T5628] Bluetooth: hci0: command tx timeout [ 76.374535][ T5622] Bluetooth: hci2: command tx timeout [ 76.374544][ T5628] Bluetooth: hci1: command tx timeout [ 76.382160][ T5611] Bluetooth: hci3: command tx timeout [ 76.516921][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.517595][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.517717][ T5608] bridge_slave_0: entered allmulticast mode [ 76.519136][ T5608] bridge_slave_0: entered promiscuous mode [ 76.579699][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.579794][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.580680][ T5608] bridge_slave_1: entered allmulticast mode [ 76.592494][ T5608] bridge_slave_1: entered promiscuous mode [ 76.613653][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.613760][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.613907][ T5604] bridge_slave_0: entered allmulticast mode [ 76.615360][ T5604] bridge_slave_0: entered promiscuous mode [ 76.673880][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.673974][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.674406][ T5604] bridge_slave_1: entered allmulticast mode [ 76.675775][ T5604] bridge_slave_1: entered promiscuous mode [ 76.676744][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.676829][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.676916][ T5605] bridge_slave_0: entered allmulticast mode [ 76.678234][ T5605] bridge_slave_0: entered promiscuous mode [ 76.756982][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.757081][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.757181][ T5605] bridge_slave_1: entered allmulticast mode [ 76.759852][ T5605] bridge_slave_1: entered promiscuous mode [ 76.775143][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.775365][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.775496][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.775640][ T5606] bridge_slave_0: entered allmulticast mode [ 76.779059][ T5606] bridge_slave_0: entered promiscuous mode [ 76.837598][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.837826][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.837931][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.838026][ T5606] bridge_slave_1: entered allmulticast mode [ 76.839585][ T5606] bridge_slave_1: entered promiscuous mode [ 76.840636][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.840731][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.840828][ T5607] bridge_slave_0: entered allmulticast mode [ 76.843201][ T5607] bridge_slave_0: entered promiscuous mode [ 76.852923][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.923236][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.923399][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.923503][ T5607] bridge_slave_1: entered allmulticast mode [ 76.925854][ T5607] bridge_slave_1: entered promiscuous mode [ 76.928581][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.930958][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.106197][ T5608] team0: Port device team_slave_0 added [ 77.109164][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.122125][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.155519][ T5608] team0: Port device team_slave_1 added [ 77.157401][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.184330][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.186091][ T5604] team0: Port device team_slave_0 added [ 77.231019][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.235402][ T5604] team0: Port device team_slave_1 added [ 77.263079][ T5605] team0: Port device team_slave_0 added [ 77.291375][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.291386][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.291399][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.305774][ T5606] team0: Port device team_slave_0 added [ 77.309004][ T5605] team0: Port device team_slave_1 added [ 77.358143][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.358158][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.358180][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.361437][ T5606] team0: Port device team_slave_1 added [ 77.406959][ T5607] team0: Port device team_slave_0 added [ 77.409110][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.409124][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.409145][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.467145][ T5607] team0: Port device team_slave_1 added [ 77.467739][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.467749][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.467763][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.499331][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.499347][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.499369][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.539415][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.539430][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.539453][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.542981][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.542994][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.543016][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.607480][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.607495][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.607518][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.610274][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.610288][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.610310][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.640080][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.640095][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.640118][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.684365][ T5608] hsr_slave_0: entered promiscuous mode [ 77.686863][ T5608] hsr_slave_1: entered promiscuous mode [ 77.775406][ T5604] hsr_slave_0: entered promiscuous mode [ 77.776622][ T5604] hsr_slave_1: entered promiscuous mode [ 77.777630][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 77.777749][ T5604] Cannot create hsr debugfs directory [ 77.835170][ T5605] hsr_slave_0: entered promiscuous mode [ 77.835864][ T5605] hsr_slave_1: entered promiscuous mode [ 77.836355][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 77.836374][ T5605] Cannot create hsr debugfs directory [ 77.887510][ T5606] hsr_slave_0: entered promiscuous mode [ 77.888219][ T5606] hsr_slave_1: entered promiscuous mode [ 77.888775][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 77.888793][ T5606] Cannot create hsr debugfs directory [ 77.940396][ T5607] hsr_slave_0: entered promiscuous mode [ 77.941135][ T5607] hsr_slave_1: entered promiscuous mode [ 77.951817][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 77.951843][ T5607] Cannot create hsr debugfs directory [ 78.452600][ T5622] Bluetooth: hci1: command tx timeout [ 78.452632][ T5622] Bluetooth: hci0: command tx timeout [ 78.452652][ T5622] Bluetooth: hci2: command tx timeout [ 78.452670][ T5622] Bluetooth: hci4: command tx timeout [ 78.452860][ T5611] Bluetooth: hci3: command tx timeout [ 78.989390][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.036496][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.041617][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.076149][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.079671][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.116993][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.138102][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.176407][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.292955][ T5604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.339033][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.343702][ T5604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.377334][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.383256][ T5604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.416477][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.437660][ T5604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.466560][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.606434][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.638783][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.650156][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.674544][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.676837][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.697010][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.725139][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.757529][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.872969][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.898985][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.904814][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.921015][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.969116][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.980961][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.004371][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.024944][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.066475][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.168769][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.205920][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.235704][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.241525][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.242996][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.250371][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.276608][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.289526][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.324568][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.335118][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.364369][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.373688][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.373889][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.447428][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.531879][ T5628] Bluetooth: hci3: command tx timeout [ 80.531908][ T5628] Bluetooth: hci4: command tx timeout [ 80.531927][ T5628] Bluetooth: hci2: command tx timeout [ 80.531945][ T5628] Bluetooth: hci0: command tx timeout [ 80.531962][ T5628] Bluetooth: hci1: command tx timeout [ 80.574794][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.611654][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.620420][ T3320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.660546][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.705592][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.705740][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.813968][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.868947][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.869469][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.874078][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.933852][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.934007][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.009513][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.038824][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.069752][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.069959][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.148111][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.148266][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.284446][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.406365][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.409281][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.490672][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.490913][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.678397][ T821] cfg80211: failed to load regulatory.db [ 81.754836][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.479306][ T5608] veth0_vlan: entered promiscuous mode [ 82.503689][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.545316][ T5608] veth1_vlan: entered promiscuous mode [ 82.616347][ T5611] Bluetooth: hci0: command tx timeout [ 82.616377][ T5611] Bluetooth: hci2: command tx timeout [ 82.616396][ T5611] Bluetooth: hci1: command tx timeout [ 82.616413][ T5611] Bluetooth: hci4: command tx timeout [ 82.616439][ T5611] Bluetooth: hci3: command tx timeout [ 82.817099][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.819618][ T5604] veth0_vlan: entered promiscuous mode [ 82.840352][ T5608] veth0_macvtap: entered promiscuous mode [ 82.893144][ T5608] veth1_macvtap: entered promiscuous mode [ 82.900510][ T5604] veth1_vlan: entered promiscuous mode [ 83.064688][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.131786][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.214122][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.215704][ T180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.250701][ T180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.264988][ T180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.267173][ T5604] veth0_macvtap: entered promiscuous mode [ 83.300501][ T180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.321619][ T5604] veth1_macvtap: entered promiscuous mode [ 83.586187][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.694806][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.751489][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.811086][ T180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.845144][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.845166][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.850444][ T180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875229][ T180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.903534][ T180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.944702][ T5606] veth0_vlan: entered promiscuous mode [ 84.009363][ T5605] veth0_vlan: entered promiscuous mode [ 84.015903][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.015925][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.086759][ T5606] veth1_vlan: entered promiscuous mode [ 84.222725][ T5605] veth1_vlan: entered promiscuous mode [ 84.382670][ T5607] veth0_vlan: entered promiscuous mode [ 84.485409][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.485426][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.486818][ T5607] veth1_vlan: entered promiscuous mode [ 84.583046][ T5606] veth0_macvtap: entered promiscuous mode [ 84.672546][ T5605] veth0_macvtap: entered promiscuous mode [ 84.677848][ T5606] veth1_macvtap: entered promiscuous mode [ 84.703365][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.703382][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.728082][ T5605] veth1_macvtap: entered promiscuous mode [ 84.836032][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.840146][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.872219][ T5607] veth0_macvtap: entered promiscuous mode [ 84.895588][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.898858][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.899793][ T5607] veth1_macvtap: entered promiscuous mode [ 84.980847][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.024967][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.043760][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.062884][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.068818][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.070479][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.086016][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.093783][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.156886][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.280946][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.629163][ T180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.714858][ T1011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.720459][ T1011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.811502][ T1011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.259898][ T3320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.259916][ T3320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.649362][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.649381][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.822722][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.822740][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.003581][ T5625] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.209475][ T5625] usb 4-1: Using ep0 maxpacket: 8 [ 87.258373][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.258390][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.261182][ T5625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.261220][ T5625] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 87.261231][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.529467][ T5625] usb 4-1: config 0 descriptor?? [ 87.667621][ T3320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.667640][ T3320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.087007][ T5625] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.243920][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.243938][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.553035][ T9] usb 4-1: USB disconnect, device number 2 [ 92.033085][ T5832] Bluetooth: MGMT ver 1.23 [ 93.330766][ T5837] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 93.781221][ T5846] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.813194][ T5628] Bluetooth: hci0: command 0x2016 tx timeout [ 93.818096][ T5844] Zero length message leads to an empty skb [ 94.019853][ T43] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.135112][ T5611] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 94.136325][ T5611] Bluetooth: hci2: command 0x0401 tx timeout [ 94.194536][ T43] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 94.194562][ T43] usb 5-1: config 0 has no interface number 0 [ 94.194602][ T43] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.194625][ T43] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.194647][ T43] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 94.199448][ T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 94.199474][ T43] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 94.199491][ T43] usb 5-1: Product: syz [ 94.199501][ T43] usb 5-1: SerialNumber: syz [ 94.229669][ T5853] netlink: 'syz.3.14': attribute type 58 has an invalid length. [ 94.229746][ T5853] netlink: 468 bytes leftover after parsing attributes in process `syz.3.14'. [ 94.231961][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.348173][ T5854] netlink: 'syz.2.13': attribute type 58 has an invalid length. [ 94.348192][ T5854] netlink: 468 bytes leftover after parsing attributes in process `syz.2.13'. [ 94.348636][ T5854] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 94.381861][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 94.396696][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.396739][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.396759][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.480365][ T43] usb 5-1: config 0 descriptor?? [ 94.489691][ T5843] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.515869][ T9] usb 2-1: config 0 descriptor?? [ 94.536567][ T43] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 94.550281][ T43] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input5 [ 94.693485][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 94.943903][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 94.957973][ T5856] bridge0: port 3(batadv1) entered blocking state [ 94.958114][ T5856] bridge0: port 3(batadv1) entered disabled state [ 94.958310][ T5856] batadv1: entered allmulticast mode [ 94.998959][ T5856] batadv1: entered promiscuous mode [ 95.025300][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 95.275236][ T1032] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 95.275630][ T1032] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 95.892190][ T5622] Bluetooth: hci0: command 0x2016 tx timeout [ 96.559289][ T5869] netlink: 'syz.2.17': attribute type 3 has an invalid length. [ 96.559311][ T5869] netlink: 244 bytes leftover after parsing attributes in process `syz.2.17'. [ 99.504517][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 99.505502][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 99.505975][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 99.506346][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 99.507290][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 99.507720][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 99.509079][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 99.510491][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 99.511354][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 99.512353][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.510681][ T9] usb 2-1: USB disconnect, device number 2 [ 100.553264][ T899] usb 5-1: USB disconnect, device number 2 [ 100.553370][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 100.956861][ T899] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 101.336196][ T5879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.21'. [ 101.451280][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 102.558912][ T5881] hsr_slave_0: left promiscuous mode [ 102.594243][ T5881] hsr_slave_1: left promiscuous mode [ 104.038928][ T821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.041847][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 105.046278][ T821] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 105.046301][ T821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.046318][ T821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.090952][ T821] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.090980][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.090995][ T821] usb 3-1: Product: syz [ 105.091007][ T821] usb 3-1: Manufacturer: syz [ 105.091019][ T821] usb 3-1: SerialNumber: syz [ 105.216880][ T821] usb 3-1: 0:2 : does not exist [ 105.333744][ T5900] FAULT_INJECTION: forcing a failure. [ 105.333744][ T5900] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.333895][ T5900] CPU: 1 UID: 0 PID: 5900 Comm: syz.4.26 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.333916][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.333936][ T5900] Call Trace: [ 105.333943][ T5900] [ 105.333951][ T5900] dump_stack_lvl+0xe8/0x150 [ 105.333983][ T5900] should_fail_ex+0x46b/0x600 [ 105.334012][ T5900] _copy_from_user+0x2d/0xb0 [ 105.334030][ T5900] ___sys_sendmsg+0x1c6/0x360 [ 105.334054][ T5900] ? __lock_acquire+0x6b5/0x2cf0 [ 105.334080][ T5900] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.334136][ T5900] ? __fget_files+0x2a/0x420 [ 105.334153][ T5900] ? __fget_files+0x3a6/0x420 [ 105.334180][ T5900] __x64_sys_sendmsg+0x1c3/0x2a0 [ 105.334207][ T5900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.334250][ T5900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.334269][ T5900] do_syscall_64+0x174/0x580 [ 105.334296][ T5900] ? clear_bhb_loop+0x40/0x90 [ 105.334317][ T5900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.334334][ T5900] RIP: 0033:0x7f81480bce59 [ 105.334364][ T5900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.334377][ T5900] RSP: 002b:00007f81462ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.334396][ T5900] RAX: ffffffffffffffda RBX: 00007f8148336090 RCX: 00007f81480bce59 [ 105.334408][ T5900] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 105.334419][ T5900] RBP: 00007f81462ed090 R08: 0000000000000000 R09: 0000000000000000 [ 105.334429][ T5900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.334439][ T5900] R13: 00007f8148336128 R14: 00007f8148336090 R15: 00007ffe20b9cee8 [ 105.334468][ T5900] [ 105.838591][ T5887] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.746559][ T5909] MTD: Couldn't look up '': -22 [ 107.746581][ T5909] : Can't lookup blockdev [ 110.695952][ T821] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 111.171737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.248951][ T5921] rpc_pipefs: Unknown parameter '' [ 111.309324][ T821] usb 3-1: USB disconnect, device number 2 [ 111.516964][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 111.593173][ T5938] netlink: 'syz.0.36': attribute type 58 has an invalid length. [ 111.593187][ T5938] netlink: 468 bytes leftover after parsing attributes in process `syz.0.36'. [ 111.672078][ T5933] vlan2: entered promiscuous mode [ 111.672097][ T5933] hsr0: entered promiscuous mode [ 111.672571][ T5933] vlan2: entered allmulticast mode [ 111.672581][ T5933] hsr0: entered allmulticast mode [ 111.672587][ T5933] hsr_slave_0: entered allmulticast mode [ 111.672598][ T5933] hsr_slave_1: entered allmulticast mode [ 111.775663][ T5936] hsr_slave_0: left promiscuous mode [ 111.803403][ T5936] hsr_slave_1: left promiscuous mode [ 113.077606][ T5947] FAULT_INJECTION: forcing a failure. [ 113.077606][ T5947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.077637][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.077656][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.077666][ T5947] Call Trace: [ 113.077672][ T5947] [ 113.077680][ T5947] dump_stack_lvl+0xe8/0x150 [ 113.077705][ T5947] should_fail_ex+0x46b/0x600 [ 113.077734][ T5947] _copy_from_user+0x2d/0xb0 [ 113.077753][ T5947] ___sys_sendmsg+0x1c6/0x360 [ 113.077777][ T5947] ? __lock_acquire+0x6b5/0x2cf0 [ 113.077803][ T5947] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.077859][ T5947] ? __fget_files+0x2a/0x420 [ 113.077876][ T5947] ? __fget_files+0x3a6/0x420 [ 113.077902][ T5947] __x64_sys_sendmsg+0x1c3/0x2a0 [ 113.077928][ T5947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.077961][ T5947] ? __pfx_ksys_write+0x10/0x10 [ 113.077988][ T5947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.078007][ T5947] do_syscall_64+0x174/0x580 [ 113.078030][ T5947] ? trace_irq_disable+0x3b/0x140 [ 113.078049][ T5947] ? clear_bhb_loop+0x40/0x90 [ 113.078070][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.078087][ T5947] RIP: 0033:0x7fd36725ce59 [ 113.078103][ T5947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.078116][ T5947] RSP: 002b:00007fd3654ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.078135][ T5947] RAX: ffffffffffffffda RBX: 00007fd3674d5fa0 RCX: 00007fd36725ce59 [ 113.078147][ T5947] RDX: 0000000004000814 RSI: 0000200000000b00 RDI: 0000000000000003 [ 113.078159][ T5947] RBP: 00007fd3654ae090 R08: 0000000000000000 R09: 0000000000000000 [ 113.078176][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.078186][ T5947] R13: 00007fd3674d6038 R14: 00007fd3674d5fa0 R15: 00007ffc9eb484b8 [ 113.078214][ T5947] [ 114.581760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.118491][ T5957] nftables ruleset with unbound chain [ 116.186064][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.341932][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 116.346539][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.346583][ T5840] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.346601][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.400318][ T5840] usb 2-1: config 0 descriptor?? [ 116.812555][ T5840] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 116.961852][ T899] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.123275][ T899] usb 3-1: Using ep0 maxpacket: 32 [ 117.161354][ T899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.399433][ T899] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 118.434766][ T5625] usb 2-1: USB disconnect, device number 3 [ 121.066447][ T899] usb 3-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 121.066466][ T899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.156942][ T899] usb 3-1: can't set config #1, error -71 [ 121.168404][ T899] usb 3-1: USB disconnect, device number 3 [ 121.622424][ T5993] netlink: 'syz.2.50': attribute type 58 has an invalid length. [ 121.622446][ T5993] netlink: 468 bytes leftover after parsing attributes in process `syz.2.50'. [ 121.749297][ T5998] FAULT_INJECTION: forcing a failure. [ 121.749297][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.749345][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.749364][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.749373][ T5998] Call Trace: [ 121.749379][ T5998] [ 121.749386][ T5998] dump_stack_lvl+0xe8/0x150 [ 121.749418][ T5998] should_fail_ex+0x46b/0x600 [ 121.749442][ T5998] _copy_from_user+0x2d/0xb0 [ 121.749460][ T5998] do_ipv6_setsockopt+0x25c/0x3150 [ 121.749478][ T5998] ? get_pid_task+0x20/0x1f0 [ 121.749503][ T5998] ? __lock_acquire+0x6b5/0x2cf0 [ 121.749523][ T5998] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 121.749544][ T5998] ? get_pid_task+0x20/0x1f0 [ 121.749562][ T5998] ? get_pid_task+0x20/0x1f0 [ 121.749592][ T5998] ? __lock_acquire+0x6b5/0x2cf0 [ 121.749617][ T5998] ? do_raw_spin_lock+0x12b/0x2f0 [ 121.749648][ T5998] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.749675][ T5998] ? __fget_files+0x2a/0x420 [ 121.749702][ T5998] ? __fget_files+0x2a/0x420 [ 121.749722][ T5998] ipv6_setsockopt+0x59/0x170 [ 121.749740][ T5998] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.749763][ T5998] do_sock_setsockopt+0x17c/0x1b0 [ 121.749790][ T5998] __x64_sys_setsockopt+0x143/0x1b0 [ 121.749815][ T5998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.749833][ T5998] do_syscall_64+0x174/0x580 [ 121.749856][ T5998] ? trace_irq_disable+0x3b/0x140 [ 121.749876][ T5998] ? clear_bhb_loop+0x40/0x90 [ 121.749897][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.749914][ T5998] RIP: 0033:0x7fd36725ce59 [ 121.749935][ T5998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.749948][ T5998] RSP: 002b:00007fd3654ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.749974][ T5998] RAX: ffffffffffffffda RBX: 00007fd3674d5fa0 RCX: 00007fd36725ce59 [ 121.749987][ T5998] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 121.749997][ T5998] RBP: 00007fd3654ae090 R08: 0000000000000088 R09: 0000000000000000 [ 121.750007][ T5998] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 121.750018][ T5998] R13: 00007fd3674d6038 R14: 00007fd3674d5fa0 R15: 00007ffc9eb484b8 [ 121.750046][ T5998] [ 122.222607][ T6000] FAULT_FLAG_ALLOW_RETRY missing 801 [ 122.222629][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: syz.2.52 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.222650][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.222661][ T6000] Call Trace: [ 122.222668][ T6000] [ 122.222675][ T6000] dump_stack_lvl+0xe8/0x150 [ 122.222701][ T6000] handle_userfault+0x152f/0x17e0 [ 122.222734][ T6000] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 122.222761][ T6000] ? __folio_put+0x2eb/0x3a0 [ 122.222784][ T6000] ? __pfx___folio_put+0x10/0x10 [ 122.222804][ T6000] ? __pfx_handle_userfault+0x10/0x10 [ 122.222838][ T6000] ? do_pte_missing+0x26ef/0x2950 [ 122.222876][ T6000] handle_mm_fault+0xd30/0x1400 [ 122.222905][ T6000] ? handle_mm_fault+0xec/0x1400 [ 122.222927][ T6000] ? __pfx_handle_mm_fault+0x10/0x10 [ 122.222949][ T6000] ? follow_page_pte+0xbe2/0xe60 [ 122.222978][ T6000] ? __pfx_follow_page_pte+0x10/0x10 [ 122.223008][ T6000] __get_user_pages+0x16d4/0x2620 [ 122.223053][ T6000] populate_vma_page_range+0x2be/0x3c0 [ 122.223074][ T6000] ? __pfx_populate_vma_page_range+0x10/0x10 [ 122.223090][ T6000] ? vma_wants_writenotify+0xba/0x340 [ 122.223116][ T6000] ? vma_set_page_prot+0xc3/0x100 [ 122.223136][ T6000] mprotect_fixup+0x9e5/0xb60 [ 122.223164][ T6000] ? __pfx_mprotect_fixup+0x10/0x10 [ 122.223214][ T6000] do_mprotect_pkey+0x8d5/0xd20 [ 122.223251][ T6000] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 122.223307][ T6000] ? rcu_is_watching+0x15/0xb0 [ 122.223340][ T6000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.223359][ T6000] __x64_sys_mprotect+0x80/0x90 [ 122.223383][ T6000] do_syscall_64+0x174/0x580 [ 122.223405][ T6000] ? trace_irq_disable+0x3b/0x140 [ 122.223433][ T6000] ? clear_bhb_loop+0x40/0x90 [ 122.223457][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.223476][ T6000] RIP: 0033:0x7faf04c3ce59 [ 122.223493][ T6000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.223507][ T6000] RSP: 002b:00007faf02e96028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 122.223527][ T6000] RAX: ffffffffffffffda RBX: 00007faf04eb5fa0 RCX: 00007faf04c3ce59 [ 122.223540][ T6000] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 122.223552][ T6000] RBP: 00007faf04cd2d6f R08: 0000000000000000 R09: 0000000000000000 [ 122.223563][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.223574][ T6000] R13: 00007faf04eb6038 R14: 00007faf04eb5fa0 R15: 00007ffeaabcf738 [ 122.223605][ T6000] [ 122.636966][ T6005] ip6tnl0: entered promiscuous mode [ 122.636981][ T6005] ip6tnl0: entered allmulticast mode [ 122.725168][ T6010] FAULT_FLAG_ALLOW_RETRY missing 801 [ 122.725191][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.4.55 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.725211][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.725221][ T6010] Call Trace: [ 122.725228][ T6010] [ 122.725235][ T6010] dump_stack_lvl+0xe8/0x150 [ 122.725262][ T6010] handle_userfault+0x152f/0x17e0 [ 122.725292][ T6010] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 122.725319][ T6010] ? __folio_put+0x2eb/0x3a0 [ 122.725340][ T6010] ? __pfx___folio_put+0x10/0x10 [ 122.725359][ T6010] ? __pfx_handle_userfault+0x10/0x10 [ 122.725390][ T6010] ? do_pte_missing+0x26ef/0x2950 [ 122.725425][ T6010] handle_mm_fault+0xd30/0x1400 [ 122.725452][ T6010] ? handle_mm_fault+0xec/0x1400 [ 122.725471][ T6010] ? __pfx_handle_mm_fault+0x10/0x10 [ 122.725491][ T6010] ? follow_page_pte+0xbe2/0xe60 [ 122.725518][ T6010] ? __pfx_follow_page_pte+0x10/0x10 [ 122.725546][ T6010] __get_user_pages+0x16d4/0x2620 [ 122.725594][ T6010] populate_vma_page_range+0x2be/0x3c0 [ 122.725615][ T6010] ? __pfx_populate_vma_page_range+0x10/0x10 [ 122.725631][ T6010] ? vma_wants_writenotify+0xba/0x340 [ 122.725658][ T6010] ? vma_set_page_prot+0xc3/0x100 [ 122.725678][ T6010] mprotect_fixup+0x9e5/0xb60 [ 122.725705][ T6010] ? __pfx_mprotect_fixup+0x10/0x10 [ 122.725751][ T6010] do_mprotect_pkey+0x8d5/0xd20 [ 122.725787][ T6010] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 122.725847][ T6010] ? rcu_is_watching+0x15/0xb0 [ 122.725876][ T6010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.725894][ T6010] __x64_sys_mprotect+0x80/0x90 [ 122.725917][ T6010] do_syscall_64+0x174/0x580 [ 122.725941][ T6010] ? trace_irq_disable+0x3b/0x140 [ 122.725961][ T6010] ? clear_bhb_loop+0x40/0x90 [ 122.725982][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.725999][ T6010] RIP: 0033:0x7f81480bce59 [ 122.726015][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.726028][ T6010] RSP: 002b:00007f814630e028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 122.726047][ T6010] RAX: ffffffffffffffda RBX: 00007f8148335fa0 RCX: 00007f81480bce59 [ 122.726059][ T6010] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 122.726071][ T6010] RBP: 00007f8148152d6f R08: 0000000000000000 R09: 0000000000000000 [ 122.726081][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.726091][ T6010] R13: 00007f8148336038 R14: 00007f8148335fa0 R15: 00007ffe20b9cee8 [ 122.726120][ T6010] [ 123.611762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.961834][ T5625] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 125.138900][ T5625] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 253, using maximum allowed: 30 [ 125.138945][ T5625] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.138969][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.138999][ T5625] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 125.139019][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.197330][ T5625] usb 3-1: config 0 descriptor?? [ 125.513722][ T6033] FAULT_INJECTION: forcing a failure. [ 125.513722][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.513777][ T6033] CPU: 0 UID: 0 PID: 6033 Comm: syz.1.61 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.513797][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.513808][ T6033] Call Trace: [ 125.513815][ T6033] [ 125.513823][ T6033] dump_stack_lvl+0xe8/0x150 [ 125.513849][ T6033] should_fail_ex+0x46b/0x600 [ 125.513879][ T6033] _copy_from_user+0x2d/0xb0 [ 125.513897][ T6033] __sys_bpf+0x229/0x950 [ 125.513921][ T6033] ? __pfx___sys_bpf+0x10/0x10 [ 125.513961][ T6033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.513984][ T6033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.514002][ T6033] __x64_sys_bpf+0x7c/0x90 [ 125.514029][ T6033] do_syscall_64+0x174/0x580 [ 125.514056][ T6033] ? clear_bhb_loop+0x40/0x90 [ 125.514077][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.514094][ T6033] RIP: 0033:0x7fd36725ce59 [ 125.514110][ T6033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.514124][ T6033] RSP: 002b:00007fd36546c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.514143][ T6033] RAX: ffffffffffffffda RBX: 00007fd3674d6180 RCX: 00007fd36725ce59 [ 125.514156][ T6033] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 125.514167][ T6033] RBP: 00007fd36546c090 R08: 0000000000000000 R09: 0000000000000000 [ 125.514178][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.514189][ T6033] R13: 00007fd3674d6218 R14: 00007fd3674d6180 R15: 00007ffc9eb484b8 [ 125.514217][ T6033] [ 126.101720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.264880][ T6032] netlink: 'syz.4.62': attribute type 58 has an invalid length. [ 126.264901][ T6032] netlink: 468 bytes leftover after parsing attributes in process `syz.4.62'. [ 128.356389][ T6042] gtp0: entered promiscuous mode [ 128.356413][ T6042] gtp0: entered allmulticast mode [ 128.874279][ T5625] usbhid 3-1:0.0: can't add hid device: -71 [ 128.933204][ T5625] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 128.961992][ T5625] usb 3-1: USB disconnect, device number 4 [ 129.761738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.571353][ T6051] FAULT_INJECTION: forcing a failure. [ 130.571353][ T6051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.571383][ T6051] CPU: 0 UID: 0 PID: 6051 Comm: syz.1.66 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.571403][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.571413][ T6051] Call Trace: [ 130.571421][ T6051] [ 130.571428][ T6051] dump_stack_lvl+0xe8/0x150 [ 130.571451][ T6051] should_fail_ex+0x46b/0x600 [ 130.571479][ T6051] _copy_to_user+0x31/0xb0 [ 130.571496][ T6051] simple_read_from_buffer+0xe1/0x170 [ 130.571523][ T6051] proc_fail_nth_read+0x1be/0x230 [ 130.571543][ T6051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.571564][ T6051] ? rw_verify_area+0x2ac/0x4e0 [ 130.571582][ T6051] ? __fget_files+0x2a/0x420 [ 130.571596][ T6051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.571613][ T6051] vfs_read+0x212/0xa80 [ 130.571636][ T6051] ? __pfx_vfs_read+0x10/0x10 [ 130.571656][ T6051] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 130.571683][ T6051] ? lockdep_hardirqs_on+0x7a/0x110 [ 130.571704][ T6051] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 130.571726][ T6051] ? mutex_lock_nested+0x152/0x1d0 [ 130.571743][ T6051] ? fdget_pos+0x252/0x320 [ 130.571766][ T6051] ksys_read+0x156/0x270 [ 130.571787][ T6051] ? __pfx_ksys_read+0x10/0x10 [ 130.571811][ T6051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.571828][ T6051] do_syscall_64+0x174/0x580 [ 130.571852][ T6051] ? clear_bhb_loop+0x40/0x90 [ 130.571872][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.571888][ T6051] RIP: 0033:0x7fd36721d68e [ 130.571903][ T6051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.571916][ T6051] RSP: 002b:00007fd36548cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.571935][ T6051] RAX: ffffffffffffffda RBX: 00007fd36548d6c0 RCX: 00007fd36721d68e [ 130.571947][ T6051] RDX: 000000000000000f RSI: 00007fd36548d0a0 RDI: 0000000000000008 [ 130.571957][ T6051] RBP: 00007fd36548d090 R08: 0000000000000000 R09: 0000000000000000 [ 130.571967][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.571977][ T6051] R13: 00007fd3674d6128 R14: 00007fd3674d6090 R15: 00007ffc9eb484b8 [ 130.572006][ T6051] [ 131.121746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.141734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.151736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.161731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.171770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.786233][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.786301][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.931827][ T5628] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 135.221846][ T5619] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.379347][ T5619] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 135.379364][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.379373][ T5619] usb 5-1: Product: syz [ 135.379380][ T5619] usb 5-1: Manufacturer: syz [ 135.379386][ T5619] usb 5-1: SerialNumber: syz [ 135.634946][ T5619] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 135.634965][ T5619] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 135.699572][ T6071] netlink: 'syz.1.75': attribute type 58 has an invalid length. [ 135.699585][ T6071] netlink: 468 bytes leftover after parsing attributes in process `syz.1.75'. [ 136.541928][ T821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.844254][ T821] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.844281][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.926580][ T821] usb 1-1: config 0 descriptor?? [ 136.994140][ T6088] FAULT_INJECTION: forcing a failure. [ 136.994140][ T6088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.994193][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.994213][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.994224][ T6088] Call Trace: [ 136.994231][ T6088] [ 136.994238][ T6088] dump_stack_lvl+0xe8/0x150 [ 136.994263][ T6088] should_fail_ex+0x46b/0x600 [ 136.994292][ T6088] _copy_from_user+0x2d/0xb0 [ 136.994310][ T6088] copy_clone_args_from_user+0x1fa/0x740 [ 136.994337][ T6088] ? trace_sched_exit_tp+0x3a/0x130 [ 136.994364][ T6088] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 136.994405][ T6088] __se_sys_clone3+0x142/0x360 [ 136.994428][ T6088] ? __pfx___se_sys_clone3+0x10/0x10 [ 136.994470][ T6088] ? irqentry_exit+0x218/0x8b0 [ 136.994506][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.994532][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.994551][ T6088] do_syscall_64+0x174/0x580 [ 136.994575][ T6088] ? clear_bhb_loop+0x40/0x90 [ 136.994596][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.994614][ T6088] RIP: 0033:0x7faf04c3ce59 [ 136.994630][ T6088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.994644][ T6088] RSP: 002b:00007faf02e53ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 136.994662][ T6088] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007faf04c3ce59 [ 136.994675][ T6088] RDX: 00007faf02e53f10 RSI: 0000000000000058 RDI: 00007faf02e53f10 [ 136.994686][ T6088] RBP: 00007faf02e54090 R08: 0000000000000000 R09: 0000000000000058 [ 136.994697][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.994708][ T6088] R13: 00007faf04eb6218 R14: 00007faf04eb6180 R15: 00007ffeaabcf738 [ 136.994736][ T6088] [ 137.567273][ T821] cp210x 1-1:0.0: cp210x converter detected [ 137.680130][ T5623] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 137.749465][ T821] usb 1-1: cp210x converter now attached to ttyUSB0 [ 137.831556][ T5623] usb 4-1: not running at top speed; connect to a high speed hub [ 137.841820][ T5623] usb 4-1: config 15 has an invalid interface number: 158 but max is 2 [ 137.841859][ T5623] usb 4-1: config 15 has an invalid interface number: 78 but max is 2 [ 137.841878][ T5623] usb 4-1: config 15 has an invalid interface number: 195 but max is 2 [ 137.841895][ T5623] usb 4-1: config 15 has no interface number 0 [ 137.841909][ T5623] usb 4-1: config 15 has no interface number 1 [ 137.841922][ T5623] usb 4-1: config 15 has no interface number 2 [ 137.841984][ T5623] usb 4-1: config 15 interface 158 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.842013][ T5623] usb 4-1: config 15 interface 158 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 137.842036][ T5623] usb 4-1: config 15 interface 158 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 137.842053][ T5623] usb 4-1: config 15 interface 158 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 137.842065][ T5623] usb 4-1: config 15 interface 158 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 137.842074][ T5623] usb 4-1: config 15 interface 158 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 137.842084][ T5623] usb 4-1: config 15 interface 158 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 137.842093][ T5623] usb 4-1: config 15 interface 158 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 137.842103][ T5623] usb 4-1: config 15 interface 158 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 137.842121][ T5623] usb 4-1: config 15 interface 78 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 137.842131][ T5623] usb 4-1: config 15 interface 78 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 137.842142][ T5623] usb 4-1: config 15 interface 78 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 137.842153][ T5623] usb 4-1: config 15 interface 78 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 137.842162][ T5623] usb 4-1: config 15 interface 78 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 137.842171][ T5623] usb 4-1: config 15 interface 78 altsetting 10 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 137.842183][ T5623] usb 4-1: config 15 interface 78 altsetting 10 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 137.842194][ T5623] usb 4-1: config 15 interface 78 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 137.842211][ T5623] usb 4-1: config 15 interface 195 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 137.842222][ T5623] usb 4-1: config 15 interface 195 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 137.842231][ T5623] usb 4-1: config 15 interface 195 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 137.842240][ T5623] usb 4-1: config 15 interface 158 has no altsetting 0 [ 137.842248][ T5623] usb 4-1: config 15 interface 78 has no altsetting 0 [ 137.842256][ T5623] usb 4-1: config 15 interface 195 has no altsetting 0 [ 137.848223][ T5623] usb 4-1: Dual-Role OTG device on HNP port [ 137.848533][ T5623] usb 4-1: New USB device found, idVendor=22b8, idProduct=4224, bcdDevice=ee.f8 [ 137.848552][ T5623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.848572][ T5623] usb 4-1: Product: 漇졈ꁷ떇ᛥ蚈춯禎嗋耂女떸＇存堉茌佀畃⇕측ᅮ嚓Ꮣ␳藰烀뵸序隓㼿留䥃ꏃ龗Ὄꑙᯡ쾾แ祋⿾䓽쎽휒앳㙃ʿ꒴垢솮ᇶ搁リ洌㊘ᢴ傋坙ﶰࣛ㳘쉛ᒖ茼ሃಛ擖ꤠࡺﾺ灗㕤쌯嘬怉⃇痓툼臎싶絡ꟓ铊ꭸ⹢浄 [ 137.848585][ T5623] usb 4-1: Manufacturer: ⶵὓꀼ퉍殹舫 [ 137.848592][ T5623] usb 4-1: SerialNumber: у [ 138.246037][ T821] usb 5-1: USB disconnect, device number 3 [ 138.494412][ T5623] usb 4-1: USB disconnect, device number 3 [ 139.160225][ T4932] usb 1-1: USB disconnect, device number 2 [ 139.264953][ T821] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.808167][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 140.402430][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.402478][ T821] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.402499][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.460840][ T4932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 140.466842][ T4932] cp210x 1-1:0.0: device disconnected [ 140.489241][ T821] usb 5-1: config 0 descriptor?? [ 140.742593][ T821] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 140.978170][ T6098] syz.3.82 (6098) used greatest stack depth: 19144 bytes left [ 142.615623][ T6120] netlink: 'syz.0.87': attribute type 58 has an invalid length. [ 142.615637][ T6120] netlink: 468 bytes leftover after parsing attributes in process `syz.0.87'. [ 142.995984][ T5726] usb 5-1: USB disconnect, device number 4 [ 145.447177][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 145.478200][ T6124] vlan2: entered promiscuous mode [ 145.478223][ T6124] hsr0: entered promiscuous mode [ 145.478553][ T6124] vlan2: entered allmulticast mode [ 145.478567][ T6124] hsr0: entered allmulticast mode [ 145.478577][ T6124] hsr_slave_0: entered allmulticast mode [ 145.478598][ T6124] hsr_slave_1: entered allmulticast mode [ 145.604062][ T6126] hsr_slave_0: left promiscuous mode [ 145.642075][ T6126] hsr_slave_1: left promiscuous mode [ 145.961825][ T6135] process 'syz.1.92' launched './file2' with NULL argv: empty string added [ 146.038425][ T6136] loop2: detected capacity change from 0 to 7 [ 146.044180][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.044324][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.044430][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.044531][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.044650][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.044765][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.044864][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.044934][ T6136] ldm_validate_partition_table(): Disk read failed. [ 146.044978][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.045078][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.045263][ T6136] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.045505][ T6136] Dev loop2: unable to read RDB block 0 [ 146.045781][ T6136] loop2: unable to read partition table [ 146.045990][ T6136] loop2: partition table beyond EOD, truncated [ 146.046008][ T6136] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 146.803958][ T4932] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.978274][ T4932] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 146.978301][ T4932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.978318][ T4932] usb 4-1: Product: syz [ 146.978330][ T4932] usb 4-1: Manufacturer: syz [ 146.978342][ T4932] usb 4-1: SerialNumber: syz [ 147.200596][ T6145] FAULT_INJECTION: forcing a failure. [ 147.200596][ T6145] name failslab, interval 1, probability 0, space 0, times 1 [ 147.200680][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: syz.4.95 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.200700][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.200710][ T6145] Call Trace: [ 147.200717][ T6145] [ 147.200724][ T6145] dump_stack_lvl+0xe8/0x150 [ 147.200749][ T6145] should_fail_ex+0x46b/0x600 [ 147.200775][ T6145] ? __pfx_sock_alloc_inode+0x10/0x10 [ 147.200798][ T6145] should_failslab+0xa8/0x100 [ 147.200819][ T6145] ? __pfx_sock_alloc_inode+0x10/0x10 [ 147.200835][ T6145] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 147.200853][ T6145] ? sock_alloc_inode+0x2c/0x190 [ 147.200874][ T6145] ? __pfx_sock_alloc_inode+0x10/0x10 [ 147.200891][ T6145] sock_alloc_inode+0x2c/0x190 [ 147.200908][ T6145] ? __pfx_sock_alloc_inode+0x10/0x10 [ 147.200923][ T6145] alloc_inode+0x6a/0x1b0 [ 147.200946][ T6145] do_accept+0x144/0x760 [ 147.200967][ T6145] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 147.200991][ T6145] ? __pfx_do_accept+0x10/0x10 [ 147.201030][ T6145] __sys_accept4+0x139/0x230 [ 147.201054][ T6145] ? __pfx___sys_accept4+0x10/0x10 [ 147.201075][ T6145] ? __pfx_ksys_write+0x10/0x10 [ 147.201106][ T6145] __x64_sys_accept4+0x9a/0xb0 [ 147.201134][ T6145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.201151][ T6145] do_syscall_64+0x174/0x580 [ 147.201171][ T6145] ? trace_irq_disable+0x3b/0x140 [ 147.201187][ T6145] ? clear_bhb_loop+0x40/0x90 [ 147.201203][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.201218][ T6145] RIP: 0033:0x7f81480bce59 [ 147.201232][ T6145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.201244][ T6145] RSP: 002b:00007f81462ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 147.201260][ T6145] RAX: ffffffffffffffda RBX: 00007f8148336090 RCX: 00007f81480bce59 [ 147.201269][ T6145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 147.201276][ T6145] RBP: 00007f81462ed090 R08: 0000000000000000 R09: 0000000000000000 [ 147.201283][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.201290][ T6145] R13: 00007f8148336128 R14: 00007f8148336090 R15: 00007ffe20b9cee8 [ 147.201312][ T6145] [ 147.458517][ T4932] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 147.458535][ T4932] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 148.892556][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'. [ 148.928549][ T6159] netlink: 'syz.2.99': attribute type 58 has an invalid length. [ 148.928564][ T6159] netlink: 468 bytes leftover after parsing attributes in process `syz.2.99'. [ 150.596647][ T5612] usb 4-1: USB disconnect, device number 4 [ 151.324652][ T6170] FAULT_INJECTION: forcing a failure. [ 151.324652][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 151.324683][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.324702][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.324712][ T6170] Call Trace: [ 151.324717][ T6170] [ 151.324723][ T6170] dump_stack_lvl+0xe8/0x150 [ 151.324747][ T6170] should_fail_ex+0x46b/0x600 [ 151.324775][ T6170] should_failslab+0xa8/0x100 [ 151.324797][ T6170] __kmalloc_noprof+0xdf/0x7b0 [ 151.324816][ T6170] ? kfree+0x4d/0x6c0 [ 151.324831][ T6170] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 151.324857][ T6170] tomoyo_realpath_from_path+0xe3/0x5d0 [ 151.324878][ T6170] ? tomoyo_domain+0xd7/0x130 [ 151.324903][ T6170] ? tomoyo_path_number_perm+0x219/0x630 [ 151.324928][ T6170] tomoyo_path_number_perm+0x246/0x630 [ 151.324954][ T6170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.324977][ T6170] ? __lock_acquire+0x6b5/0x2cf0 [ 151.325001][ T6170] ? do_raw_spin_lock+0x12b/0x2f0 [ 151.325045][ T6170] ? __fget_files+0x2a/0x420 [ 151.325063][ T6170] ? __fget_files+0x2a/0x420 [ 151.325078][ T6170] ? __fget_files+0x3a6/0x420 [ 151.325092][ T6170] ? __fget_files+0x2a/0x420 [ 151.325122][ T6170] security_file_ioctl+0xc3/0x2a0 [ 151.325150][ T6170] __se_sys_ioctl+0x47/0x170 [ 151.325169][ T6170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.325187][ T6170] do_syscall_64+0x174/0x580 [ 151.325209][ T6170] ? trace_irq_disable+0x3b/0x140 [ 151.325228][ T6170] ? clear_bhb_loop+0x40/0x90 [ 151.325249][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.325265][ T6170] RIP: 0033:0x7faf04c3ce59 [ 151.325281][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.325294][ T6170] RSP: 002b:00007faf02e75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.325312][ T6170] RAX: ffffffffffffffda RBX: 00007faf04eb6090 RCX: 00007faf04c3ce59 [ 151.325323][ T6170] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 151.325332][ T6170] RBP: 00007faf02e75090 R08: 0000000000000000 R09: 0000000000000000 [ 151.325342][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.325351][ T6170] R13: 00007faf04eb6128 R14: 00007faf04eb6090 R15: 00007ffeaabcf738 [ 151.325378][ T6170] [ 151.327299][ T6170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.364519][ T6179] FAULT_INJECTION: forcing a failure. [ 151.364519][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.364620][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.0.106 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.364640][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.364651][ T6179] Call Trace: [ 151.364657][ T6179] [ 151.364665][ T6179] dump_stack_lvl+0xe8/0x150 [ 151.364690][ T6179] should_fail_ex+0x46b/0x600 [ 151.364717][ T6179] _copy_from_user+0x2d/0xb0 [ 151.364735][ T6179] ___sys_sendmsg+0x1c6/0x360 [ 151.364759][ T6179] ? __lock_acquire+0x6b5/0x2cf0 [ 151.364785][ T6179] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.364838][ T6179] ? __fget_files+0x2a/0x420 [ 151.364854][ T6179] ? __fget_files+0x3a6/0x420 [ 151.364879][ T6179] __x64_sys_sendmsg+0x1c3/0x2a0 [ 151.364901][ T6179] ? irqentry_exit+0x218/0x8b0 [ 151.364924][ T6179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.364945][ T6179] ? irqentry_exit+0x218/0x8b0 [ 151.364973][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.365000][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.365018][ T6179] do_syscall_64+0x174/0x580 [ 151.365040][ T6179] ? trace_irq_disable+0x3b/0x140 [ 151.365059][ T6179] ? clear_bhb_loop+0x40/0x90 [ 151.365079][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.365103][ T6179] RIP: 0033:0x7f049a43ce59 [ 151.365119][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.365132][ T6179] RSP: 002b:00007f049868e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.365150][ T6179] RAX: ffffffffffffffda RBX: 00007f049a6b5fa0 RCX: 00007f049a43ce59 [ 151.365162][ T6179] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 151.365173][ T6179] RBP: 00007f049868e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.365183][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.365193][ T6179] R13: 00007f049a6b6038 R14: 00007f049a6b5fa0 R15: 00007ffcca804428 [ 151.365221][ T6179] [ 151.851921][ T5623] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.997713][ T6188] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 152.021850][ T5623] usb 5-1: Using ep0 maxpacket: 32 [ 152.026636][ T5623] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.028412][ T5623] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 152.042425][ T5623] usb 5-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 152.042467][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.042484][ T5623] usb 5-1: Product: syz [ 152.042496][ T5623] usb 5-1: Manufacturer: syz [ 152.042509][ T5623] usb 5-1: SerialNumber: syz [ 152.066811][ T6181] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.366092][ T5623] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.366158][ T5623] usb 5-1: MIDIStreaming interface descriptor not found [ 152.522057][ T6188] cramfs: wrong magic [ 152.602752][ T6193] netlink: 320 bytes leftover after parsing attributes in process `syz.0.108'. [ 152.602773][ T6193] netlink: 52 bytes leftover after parsing attributes in process `syz.0.108'. [ 152.774757][ T5623] usb 5-1: USB disconnect, device number 5 [ 154.265095][ T6207] FAULT_INJECTION: forcing a failure. [ 154.265095][ T6207] name failslab, interval 1, probability 0, space 0, times 0 [ 154.265149][ T6207] CPU: 0 UID: 0 PID: 6207 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.265168][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.265178][ T6207] Call Trace: [ 154.265185][ T6207] [ 154.265193][ T6207] dump_stack_lvl+0xe8/0x150 [ 154.265219][ T6207] should_fail_ex+0x46b/0x600 [ 154.265248][ T6207] should_failslab+0xa8/0x100 [ 154.265272][ T6207] __kmalloc_noprof+0xdf/0x7b0 [ 154.265290][ T6207] ? kfree+0x4d/0x6c0 [ 154.265307][ T6207] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 154.265333][ T6207] tomoyo_realpath_from_path+0xe3/0x5d0 [ 154.265351][ T6207] ? tomoyo_path_number_perm+0x219/0x630 [ 154.265384][ T6207] ? tomoyo_path_number_perm+0x219/0x630 [ 154.265408][ T6207] tomoyo_path_number_perm+0x246/0x630 [ 154.265436][ T6207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 154.265459][ T6207] ? __lock_acquire+0x6b5/0x2cf0 [ 154.265518][ T6207] ? __fget_files+0x2a/0x420 [ 154.265539][ T6207] ? __fget_files+0x2a/0x420 [ 154.265554][ T6207] ? __fget_files+0x3a6/0x420 [ 154.265570][ T6207] ? __fget_files+0x2a/0x420 [ 154.265590][ T6207] security_file_ioctl+0xc3/0x2a0 [ 154.265618][ T6207] __se_sys_ioctl+0x47/0x170 [ 154.265640][ T6207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.265659][ T6207] do_syscall_64+0x174/0x580 [ 154.265685][ T6207] ? clear_bhb_loop+0x40/0x90 [ 154.265707][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.265724][ T6207] RIP: 0033:0x7fe1deadce59 [ 154.265740][ T6207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.265754][ T6207] RSP: 002b:00007fe1dccec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.265773][ T6207] RAX: ffffffffffffffda RBX: 00007fe1ded56180 RCX: 00007fe1deadce59 [ 154.265786][ T6207] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 154.265797][ T6207] RBP: 00007fe1dccec090 R08: 0000000000000000 R09: 0000000000000000 [ 154.265808][ T6207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.265818][ T6207] R13: 00007fe1ded56218 R14: 00007fe1ded56180 R15: 00007ffed71f2dd8 [ 154.265847][ T6207] [ 154.265884][ T6207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.656578][ T6210] netlink: 'syz.4.113': attribute type 58 has an invalid length. [ 154.656601][ T6210] netlink: 468 bytes leftover after parsing attributes in process `syz.4.113'. [ 154.657218][ T6210] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 155.097492][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 155.191869][ T5619] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.259939][ T6224] mmap: syz.2.119 (6224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.357957][ T5623] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.359413][ T5619] usb 1-1: Using ep0 maxpacket: 8 [ 155.376215][ T5628] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 155.387400][ T5619] usb 1-1: config 7 has an invalid interface number: 162 but max is 1 [ 155.387425][ T5619] usb 1-1: config 7 has an invalid interface number: 23 but max is 1 [ 155.387442][ T5619] usb 1-1: config 7 has no interface number 0 [ 155.387456][ T5619] usb 1-1: config 7 has no interface number 1 [ 155.387496][ T5619] usb 1-1: config 7 interface 162 has no altsetting 0 [ 155.387512][ T5619] usb 1-1: config 7 interface 23 has no altsetting 0 [ 155.472880][ T5619] usb 1-1: New USB device found, idVendor=0b62, idProduct=0059, bcdDevice=38.9c [ 155.472906][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.472922][ T5619] usb 1-1: Product: syz [ 155.472934][ T5619] usb 1-1: Manufacturer: syz [ 155.472945][ T5619] usb 1-1: SerialNumber: syz [ 155.593861][ T5623] usb 5-1: device descriptor read/64, error -71 [ 155.782786][ T5619] usb 1-1: USB disconnect, device number 3 [ 155.824366][ T6234] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 155.881806][ T5623] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 155.956232][ T6234] cramfs: wrong magic [ 156.005438][ T6232] netlink: 320 bytes leftover after parsing attributes in process `syz.2.121'. [ 156.005457][ T6232] netlink: 52 bytes leftover after parsing attributes in process `syz.2.121'. [ 156.022076][ T5623] usb 5-1: device descriptor read/64, error -71 [ 156.132283][ T5623] usb usb5-port1: attempt power cycle [ 156.504122][ T5623] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.298741][ T5623] usb 5-1: device descriptor read/8, error -71 [ 157.436712][ T6255] netlink: 'syz.0.127': attribute type 58 has an invalid length. [ 157.436726][ T6255] netlink: 468 bytes leftover after parsing attributes in process `syz.0.127'. [ 157.437067][ T6255] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 157.475986][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.531856][ T5623] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.555689][ T5623] usb 5-1: device descriptor read/8, error -71 [ 157.621973][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 157.626245][ T5840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.627907][ T5840] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 157.630099][ T5840] usb 2-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 157.630124][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.630140][ T5840] usb 2-1: Product: syz [ 157.630147][ T5840] usb 2-1: Manufacturer: syz [ 157.630153][ T5840] usb 2-1: SerialNumber: syz [ 157.690105][ T5623] usb usb5-port1: unable to enumerate USB device [ 157.703233][ T6248] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 158.835527][ T6259] FAULT_INJECTION: forcing a failure. [ 158.835527][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.835555][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.835567][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.835573][ T6259] Call Trace: [ 158.835576][ T6259] [ 158.835581][ T6259] dump_stack_lvl+0xe8/0x150 [ 158.835597][ T6259] should_fail_ex+0x46b/0x600 [ 158.835614][ T6259] _copy_from_user+0x2d/0xb0 [ 158.835624][ T6259] ___sys_sendmsg+0x1c6/0x360 [ 158.835638][ T6259] ? __lock_acquire+0x6b5/0x2cf0 [ 158.835654][ T6259] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.835684][ T6259] ? __fget_files+0x2a/0x420 [ 158.835693][ T6259] ? __fget_files+0x3a6/0x420 [ 158.835706][ T6259] __x64_sys_sendmsg+0x1c3/0x2a0 [ 158.835722][ T6259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.835740][ T6259] ? __pfx_ksys_write+0x10/0x10 [ 158.835755][ T6259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.835766][ T6259] do_syscall_64+0x174/0x580 [ 158.835780][ T6259] ? trace_irq_disable+0x3b/0x140 [ 158.835792][ T6259] ? clear_bhb_loop+0x40/0x90 [ 158.835803][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.835812][ T6259] RIP: 0033:0x7f049a43ce59 [ 158.835822][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.835830][ T6259] RSP: 002b:00007f049868e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.835841][ T6259] RAX: ffffffffffffffda RBX: 00007f049a6b5fa0 RCX: 00007f049a43ce59 [ 158.835847][ T6259] RDX: 0000000004004010 RSI: 0000200000000700 RDI: 0000000000000005 [ 158.835853][ T6259] RBP: 00007f049868e090 R08: 0000000000000000 R09: 0000000000000000 [ 158.835859][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.835864][ T6259] R13: 00007f049a6b6038 R14: 00007f049a6b5fa0 R15: 00007ffcca804428 [ 158.835879][ T6259] [ 159.130603][ T5840] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.130656][ T5840] usb 2-1: MIDIStreaming interface descriptor not found [ 159.242658][ T5840] usb 2-1: USB disconnect, device number 4 [ 160.021349][ T6277] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 160.090627][ T6277] cramfs: wrong magic [ 160.169874][ T6279] netlink: 320 bytes leftover after parsing attributes in process `syz.1.135'. [ 160.169893][ T6279] netlink: 52 bytes leftover after parsing attributes in process `syz.1.135'. [ 160.201822][ T5619] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 160.351943][ T5619] usb 5-1: Using ep0 maxpacket: 8 [ 160.357513][ T5619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.357558][ T5619] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.357576][ T5619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.360527][ T5619] usb 5-1: config 0 descriptor?? [ 160.611096][ T6287] FAULT_INJECTION: forcing a failure. [ 160.611096][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 160.611126][ T6287] CPU: 1 UID: 0 PID: 6287 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.611145][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.611154][ T6287] Call Trace: [ 160.611162][ T6287] [ 160.611169][ T6287] dump_stack_lvl+0xe8/0x150 [ 160.611195][ T6287] should_fail_ex+0x46b/0x600 [ 160.611224][ T6287] should_failslab+0xa8/0x100 [ 160.611247][ T6287] __kmalloc_noprof+0xdf/0x7b0 [ 160.611265][ T6287] ? kfree+0x4d/0x6c0 [ 160.611282][ T6287] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 160.611307][ T6287] tomoyo_realpath_from_path+0xe3/0x5d0 [ 160.611332][ T6287] ? tomoyo_domain+0xd7/0x130 [ 160.611355][ T6287] ? tomoyo_path_number_perm+0x219/0x630 [ 160.611377][ T6287] tomoyo_path_number_perm+0x246/0x630 [ 160.611402][ T6287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.611421][ T6287] ? __lock_acquire+0x6b5/0x2cf0 [ 160.611443][ T6287] ? do_raw_spin_lock+0x12b/0x2f0 [ 160.611492][ T6287] ? __fget_files+0x2a/0x420 [ 160.611512][ T6287] ? __fget_files+0x2a/0x420 [ 160.611526][ T6287] ? __fget_files+0x3a6/0x420 [ 160.611540][ T6287] ? __fget_files+0x2a/0x420 [ 160.611560][ T6287] security_file_ioctl+0xc3/0x2a0 [ 160.611587][ T6287] __se_sys_ioctl+0x47/0x170 [ 160.611608][ T6287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.611626][ T6287] do_syscall_64+0x174/0x580 [ 160.611650][ T6287] ? trace_irq_disable+0x3b/0x140 [ 160.611669][ T6287] ? clear_bhb_loop+0x40/0x90 [ 160.611689][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.611704][ T6287] RIP: 0033:0x7fd36725ce59 [ 160.611719][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.611733][ T6287] RSP: 002b:00007fd3654ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.611750][ T6287] RAX: ffffffffffffffda RBX: 00007fd3674d5fa0 RCX: 00007fd36725ce59 [ 160.611761][ T6287] RDX: 0000200000000340 RSI: 00000000c0745645 RDI: 0000000000000003 [ 160.611772][ T6287] RBP: 00007fd3654ae090 R08: 0000000000000000 R09: 0000000000000000 [ 160.611781][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.611791][ T6287] R13: 00007fd3674d6038 R14: 00007fd3674d5fa0 R15: 00007ffc9eb484b8 [ 160.611820][ T6287] [ 160.622578][ T6287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.871523][ T5619] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 161.667241][ T5619] usb 5-1: USB disconnect, device number 10 [ 162.279419][ T6292] capability: warning: `syz.3.140' uses deprecated v2 capabilities in a way that may be insecure [ 162.622571][ T6294] netlink: 56 bytes leftover after parsing attributes in process `syz.3.140'. [ 163.761944][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.946529][ T43] usb 1-1: device descriptor read/64, error -71 [ 164.991889][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.132235][ T43] usb 1-1: device descriptor read/64, error -71 [ 165.242418][ T43] usb usb1-port1: attempt power cycle [ 165.651891][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 165.672686][ T43] usb 1-1: device descriptor read/8, error -71 [ 165.872384][ T821] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.911981][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.932896][ T43] usb 1-1: device descriptor read/8, error -71 [ 166.031926][ T821] usb 3-1: Using ep0 maxpacket: 32 [ 166.034968][ T821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.036305][ T821] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 166.038530][ T821] usb 3-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 166.038555][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.038572][ T821] usb 3-1: Product: syz [ 166.038584][ T821] usb 3-1: Manufacturer: syz [ 166.038595][ T821] usb 3-1: SerialNumber: syz [ 166.059031][ T43] usb usb1-port1: unable to enumerate USB device [ 166.108324][ T6310] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 166.421363][ T821] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.421394][ T821] usb 3-1: MIDIStreaming interface descriptor not found [ 167.552694][ T821] usb 3-1: USB disconnect, device number 5 [ 167.748418][ T6330] Bluetooth: MGMT ver 1.23 [ 167.899578][ T6218] udevd[6218]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.951922][ T5612] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 168.102401][ T5612] usb 2-1: Using ep0 maxpacket: 8 [ 168.123773][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.123818][ T5612] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.123837][ T5612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.144122][ T6344] FAULT_INJECTION: forcing a failure. [ 168.144122][ T6344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.144152][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.3.158 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.144172][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.144183][ T6344] Call Trace: [ 168.144189][ T6344] [ 168.144196][ T6344] dump_stack_lvl+0xe8/0x150 [ 168.144221][ T6344] should_fail_ex+0x46b/0x600 [ 168.144249][ T6344] _copy_from_user+0x2d/0xb0 [ 168.144267][ T6344] ___sys_sendmsg+0x1c6/0x360 [ 168.144291][ T6344] ? __lock_acquire+0x6b5/0x2cf0 [ 168.144316][ T6344] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.144369][ T6344] ? __fget_files+0x2a/0x420 [ 168.144385][ T6344] ? __fget_files+0x3a6/0x420 [ 168.144408][ T6344] __x64_sys_sendmsg+0x1c3/0x2a0 [ 168.144432][ T6344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.144463][ T6344] ? __pfx_ksys_write+0x10/0x10 [ 168.144491][ T6344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.144509][ T6344] do_syscall_64+0x174/0x580 [ 168.144577][ T6344] ? trace_irq_disable+0x3b/0x140 [ 168.144597][ T6344] ? clear_bhb_loop+0x40/0x90 [ 168.144617][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.144634][ T6344] RIP: 0033:0x7fe1deadce59 [ 168.144650][ T6344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.144663][ T6344] RSP: 002b:00007fe1dcd2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.144685][ T6344] RAX: ffffffffffffffda RBX: 00007fe1ded55fa0 RCX: 00007fe1deadce59 [ 168.144698][ T6344] RDX: 00000000000080c0 RSI: 0000200000000240 RDI: 0000000000000003 [ 168.144709][ T6344] RBP: 00007fe1dcd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 168.144719][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.144729][ T6344] R13: 00007fe1ded56038 R14: 00007fe1ded55fa0 R15: 00007ffed71f2dd8 [ 168.144756][ T6344] [ 168.360499][ T5612] usb 2-1: config 0 descriptor?? [ 168.392128][ T821] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.564802][ T821] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.564827][ T821] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 168.564843][ T821] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.564861][ T821] usb 3-1: config 1 has no interface number 1 [ 168.565112][ T821] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 168.565136][ T821] usb 3-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 168.642229][ T821] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.642256][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.642273][ T821] usb 3-1: Product: syz [ 168.642284][ T821] usb 3-1: Manufacturer: syz [ 168.642296][ T821] usb 3-1: SerialNumber: syz [ 168.696440][ T5612] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 169.170317][ T6353] FAULT_INJECTION: forcing a failure. [ 169.170317][ T6353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.170363][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.170383][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.170392][ T6353] Call Trace: [ 169.170400][ T6353] [ 169.170408][ T6353] dump_stack_lvl+0xe8/0x150 [ 169.170433][ T6353] should_fail_ex+0x46b/0x600 [ 169.170461][ T6353] _copy_from_user+0x2d/0xb0 [ 169.170490][ T6353] __sys_connect+0x156/0x450 [ 169.170516][ T6353] ? __pfx___sys_connect+0x10/0x10 [ 169.170549][ T6353] ? __pfx_ksys_write+0x10/0x10 [ 169.170573][ T6353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.170592][ T6353] __x64_sys_connect+0x7a/0x90 [ 169.170615][ T6353] do_syscall_64+0x174/0x580 [ 169.170641][ T6353] ? clear_bhb_loop+0x40/0x90 [ 169.170662][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.170679][ T6353] RIP: 0033:0x7faf04c3ce59 [ 169.170696][ T6353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.170710][ T6353] RSP: 002b:00007faf02e75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 169.170728][ T6353] RAX: ffffffffffffffda RBX: 00007faf04eb6090 RCX: 00007faf04c3ce59 [ 169.170741][ T6353] RDX: 000000000000000c RSI: 0000200000000040 RDI: 0000000000000008 [ 169.170751][ T6353] RBP: 00007faf02e75090 R08: 0000000000000000 R09: 0000000000000000 [ 169.170762][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.170772][ T6353] R13: 00007faf04eb6128 R14: 00007faf04eb6090 R15: 00007ffeaabcf738 [ 169.170800][ T6353] [ 173.231496][ T821] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.231530][ T821] usb 3-1: MIDIStreaming interface descriptor not found [ 173.238255][ T5612] usb 2-1: USB disconnect, device number 5 [ 173.591437][ T821] usb 3-1: USB disconnect, device number 6 [ 174.500400][ T6368] FAULT_INJECTION: forcing a failure. [ 174.500400][ T6368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.500453][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.0.165 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.500474][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.500484][ T6368] Call Trace: [ 174.500491][ T6368] [ 174.500498][ T6368] dump_stack_lvl+0xe8/0x150 [ 174.500516][ T6368] should_fail_ex+0x46b/0x600 [ 174.500533][ T6368] _copy_from_user+0x2d/0xb0 [ 174.500544][ T6368] __sys_sendto+0x2bc/0x710 [ 174.500560][ T6368] ? __pfx___sys_sendto+0x10/0x10 [ 174.500587][ T6368] ? ksys_write+0x248/0x270 [ 174.500600][ T6368] ? __pfx_ksys_write+0x10/0x10 [ 174.500614][ T6368] __x64_sys_sendto+0xde/0x100 [ 174.500627][ T6368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.500637][ T6368] do_syscall_64+0x174/0x580 [ 174.500653][ T6368] ? clear_bhb_loop+0x40/0x90 [ 174.500665][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.500674][ T6368] RIP: 0033:0x7f049a43ce59 [ 174.500684][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.500692][ T6368] RSP: 002b:00007f049866d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 174.500703][ T6368] RAX: ffffffffffffffda RBX: 00007f049a6b6090 RCX: 00007f049a43ce59 [ 174.500709][ T6368] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 174.500715][ T6368] RBP: 00007f049866d090 R08: 0000200000000100 R09: 000000000000001c [ 174.500721][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.500727][ T6368] R13: 00007f049a6b6128 R14: 00007f049a6b6090 R15: 00007ffcca804428 [ 174.500742][ T6368] [ 175.281811][ T5619] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.579443][ T5619] usb 5-1: no configurations [ 175.579461][ T5619] usb 5-1: can't read configurations, error -22 [ 175.712160][ T5619] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.863188][ T5619] usb 5-1: no configurations [ 175.863205][ T5619] usb 5-1: can't read configurations, error -22 [ 175.863733][ T5619] usb usb5-port1: attempt power cycle [ 175.898982][ T6220] udevd[6220]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.945568][ T5628] Bluetooth: hci3: ACL packet for unknown connection handle 10 [ 176.171880][ T821] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.261965][ T5619] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 176.283463][ T5619] usb 5-1: no configurations [ 176.283480][ T5619] usb 5-1: can't read configurations, error -22 [ 176.322040][ T821] usb 3-1: Using ep0 maxpacket: 32 [ 176.324379][ T821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.326375][ T821] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 176.330794][ T821] usb 3-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 176.330817][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.330835][ T821] usb 3-1: Product: syz [ 176.330847][ T821] usb 3-1: Manufacturer: syz [ 176.330859][ T821] usb 3-1: SerialNumber: syz [ 176.391447][ T6371] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 176.412358][ T5619] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.433747][ T5619] usb 5-1: no configurations [ 176.433764][ T5619] usb 5-1: can't read configurations, error -22 [ 176.434108][ T5619] usb usb5-port1: unable to enumerate USB device [ 176.608101][ T821] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.608133][ T821] usb 3-1: MIDIStreaming interface descriptor not found [ 176.729203][ T821] usb 3-1: USB disconnect, device number 7 [ 176.887813][ T6396] syz.4.176 uses obsolete (PF_INET,SOCK_PACKET) [ 177.035833][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.722306][ T5623] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.878358][ T5623] usb 3-1: Using ep0 maxpacket: 8 [ 179.880679][ T5623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.880724][ T5623] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.880736][ T5623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.901505][ T6440] tipc: Started in network mode [ 179.901536][ T6440] tipc: Node identity ac141441, cluster identity 4711 [ 179.954727][ T5628] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 179.958414][ T5623] usb 3-1: config 0 descriptor?? [ 180.165660][ T6440] tipc: Enabled bearer , priority 10 [ 180.309801][ T5623] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 181.175871][ T5623] tipc: Node number set to 2886997057 [ 181.383843][ T5612] usb 3-1: USB disconnect, device number 8 [ 182.863702][ T6457] FAULT_INJECTION: forcing a failure. [ 182.863702][ T6457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.863733][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: syz.3.191 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.863753][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.863776][ T6457] Call Trace: [ 182.863783][ T6457] [ 182.863791][ T6457] dump_stack_lvl+0xe8/0x150 [ 182.863816][ T6457] should_fail_ex+0x46b/0x600 [ 182.863845][ T6457] _copy_to_user+0x31/0xb0 [ 182.863864][ T6457] simple_read_from_buffer+0xe1/0x170 [ 182.863898][ T6457] proc_fail_nth_read+0x1be/0x230 [ 182.863919][ T6457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.863940][ T6457] ? rw_verify_area+0x2ac/0x4e0 [ 182.863959][ T6457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.863978][ T6457] vfs_read+0x212/0xa80 [ 182.864006][ T6457] ? __pfx_vfs_read+0x10/0x10 [ 182.864028][ T6457] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 182.864053][ T6457] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.864077][ T6457] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 182.864100][ T6457] ? mutex_lock_nested+0x152/0x1d0 [ 182.864119][ T6457] ? fdget_pos+0x252/0x320 [ 182.864144][ T6457] ksys_read+0x156/0x270 [ 182.864166][ T6457] ? __pfx_ksys_read+0x10/0x10 [ 182.864194][ T6457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.864220][ T6457] do_syscall_64+0x174/0x580 [ 182.864244][ T6457] ? trace_irq_disable+0x3b/0x140 [ 182.864264][ T6457] ? clear_bhb_loop+0x40/0x90 [ 182.864286][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.864302][ T6457] RIP: 0033:0x7fe1dea9d68e [ 182.864319][ T6457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.864333][ T6457] RSP: 002b:00007fe1dccebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.864351][ T6457] RAX: ffffffffffffffda RBX: 00007fe1dccec6c0 RCX: 00007fe1dea9d68e [ 182.864364][ T6457] RDX: 000000000000000f RSI: 00007fe1dccec0a0 RDI: 0000000000000005 [ 182.864375][ T6457] RBP: 00007fe1dccec090 R08: 0000000000000000 R09: 0000000000000000 [ 182.864386][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.864396][ T6457] R13: 00007fe1ded56218 R14: 00007fe1ded56180 R15: 00007ffed71f2dd8 [ 182.864425][ T6457] [ 187.028758][ T6490] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 187.871913][ T821] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 187.871929][ T821] #PF: supervisor read access in kernel mode [ 187.871938][ T821] #PF: error_code(0x0000) - not-present page [ 187.871947][ T821] PGD 0 P4D 0 [ 187.871964][ T821] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 187.871982][ T821] CPU: 1 UID: 0 PID: 821 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.872001][ T821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.872011][ T821] Workqueue: usb_hub_wq hub_event [ 187.872036][ T821] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 187.872056][ T821] Code: 8a 8d 4c 8b b8 08 24 6a 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 60 55 02 8e 4d 8b 3f 49 81 ff 60 55 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 c1 70 e7 02 84 c0 74 0e 49 8b 07 49 [ 187.872069][ T821] RSP: 0018:ffffc9000483f7c8 EFLAGS: 00010207 [ 187.872082][ T821] RAX: 0000000000000000 RBX: ffff8880260cbd80 RCX: 0000000000000000 [ 187.872094][ T821] RDX: 00000000e0258100 RSI: 0000000000000001 RDI: ffffffff8ba75c80 [ 187.872105][ T821] RBP: 0000000000100000 R08: ffffffff8b1dea40 R09: ffffffff8dfc8000 [ 187.872117][ T821] R10: dffffc0000000000 R11: fffffbfff1f10dff R12: 0000000000000002 [ 187.872128][ T821] R13: 0000000000000001 R14: ffff8880369fb400 R15: 0000000000000000 [ 187.872145][ T821] FS: 0000000000000000(0000) GS:ffff888126287000(0000) knlGS:0000000000000000 [ 187.872158][ T821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.872170][ T821] CR2: 0000000000000010 CR3: 0000000059396000 CR4: 00000000003526f0 [ 187.872184][ T821] Call Trace: [ 187.872190][ T821] [ 187.872199][ T821] hub_event+0x150/0x4f60 [ 187.872225][ T821] ? __lock_acquire+0x6b5/0x2cf0 [ 187.872245][ T821] ? look_up_lock_class+0x57/0x110 [ 187.872270][ T821] ? __lock_acquire+0x6b5/0x2cf0 [ 187.872295][ T821] ? lock_acquire+0x106/0x350 [ 187.872314][ T821] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 187.872333][ T821] ? __pfx_hub_event+0x10/0x10 [ 187.872354][ T821] ? process_scheduled_works+0xa70/0x1860 [ 187.872375][ T821] ? process_scheduled_works+0xa70/0x1860 [ 187.872390][ T821] ? process_scheduled_works+0xa70/0x1860 [ 187.872407][ T821] process_scheduled_works+0xb5d/0x1860 [ 187.872436][ T821] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.872455][ T821] ? assign_work+0x3d5/0x5e0 [ 187.872472][ T821] worker_thread+0xa53/0xfc0 [ 187.872499][ T821] kthread+0x388/0x470 [ 187.872518][ T821] ? __pfx_worker_thread+0x10/0x10 [ 187.872534][ T821] ? __pfx_kthread+0x10/0x10 [ 187.872554][ T821] ret_from_fork+0x514/0xb70 [ 187.872573][ T821] ? __pfx_ret_from_fork+0x10/0x10 [ 187.872590][ T821] ? __switch_to+0xc79/0x1410 [ 187.872612][ T821] ? __pfx_kthread+0x10/0x10 [ 187.872632][ T821] ret_from_fork_asm+0x1a/0x30 [ 187.872657][ T821] [ 187.872663][ T821] Modules linked in: [ 187.872683][ T821] CR2: 0000000000000010 [ 187.872699][ T821] ---[ end trace 0000000000000000 ]--- [ 187.872711][ T821] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 187.872735][ T821] Code: 8a 8d 4c 8b b8 08 24 6a 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 60 55 02 8e 4d 8b 3f 49 81 ff 60 55 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 c1 70 e7 02 84 c0 74 0e 49 8b 07 49 [ 187.872748][ T821] RSP: 0018:ffffc9000483f7c8 EFLAGS: 00010207 [ 187.872761][ T821] RAX: 0000000000000000 RBX: ffff8880260cbd80 RCX: 0000000000000000 [ 187.872772][ T821] RDX: 00000000e0258100 RSI: 0000000000000001 RDI: ffffffff8ba75c80 [ 187.872783][ T821] RBP: 0000000000100000 R08: ffffffff8b1dea40 R09: ffffffff8dfc8000 [ 187.872795][ T821] R10: dffffc0000000000 R11: fffffbfff1f10dff R12: 0000000000000002 [ 187.872806][ T821] R13: 0000000000000001 R14: ffff8880369fb400 R15: 0000000000000000 [ 187.872817][ T821] FS: 0000000000000000(0000) GS:ffff888126287000(0000) knlGS:0000000000000000 [ 187.872830][ T821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.872842][ T821] CR2: 0000000000000010 CR3: 0000000059396000 CR4: 00000000003526f0 [ 187.872858][ T821] Kernel panic - not syncing: Fatal exception [ 187.872985][ T821] Kernel Offset: disabled