last executing test programs: 16.124103217s ago: executing program 3 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x59) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f020}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@redirect_dir_nofollow}, {@userxattr}, {@nfs_export_on}], [], 0x2c}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080", 0x2b}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r6, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(0x0, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 14.381262585s ago: executing program 2 (id=205): socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000733000/0x4000)=nil, 0x4000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x9a4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) 14.213747599s ago: executing program 3 (id=206): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, 0x0, 0x0) 12.359297668s ago: executing program 3 (id=207): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x10000, 0x37, 0x8}, 0x18) execveat(r5, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000480)={[&(0x7f0000000240)='($\x00', &(0x7f0000000340)='}\x00', &(0x7f00000003c0)='xfs\x00', &(0x7f0000000400)='\x00']}, &(0x7f0000000500)={[&(0x7f00000004c0)='{}-\x00']}, 0x800) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 11.877555427s ago: executing program 0 (id=210): clock_settime(0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xbe500, 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0xb, 0x4) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[], 0x1c}], 0x1}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0xce2e6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@file={0x1, './sys\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/100, 0x64}, 0x3}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000900)=""/91, 0x5b}], 0x1, &(0x7f00000002c0)=""/105, 0x69}, 0x8fa6}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000380), 0x80) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003a0339a20501da1600242014203010902120001b20260060904f20b00b4286412"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000740)={0x4, 0x7, 0x2, {0x1, @sliced={0x6, [0x2, 0x7, 0x3, 0xf, 0x6, 0x2, 0x4, 0x9, 0x0, 0x103, 0x592, 0x9, 0x9, 0x8d, 0x200, 0x4, 0x2, 0x2, 0xbe0, 0x40e, 0xffff, 0x0, 0x800b, 0x4, 0xbe5c, 0x3, 0x1, 0x2, 0x2, 0x3, 0x4, 0x1, 0x6, 0xf801, 0x4, 0x3, 0xfffb, 0x400, 0x3, 0x7, 0xeb4, 0xfff9, 0x0, 0x2, 0x101, 0x40, 0xf787, 0x2], 0x8e4f16d}}, 0xfffffe00}) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0) write$binfmt_elf32(r11, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r11, @ANYRES8], 0x3fb) 11.498491543s ago: executing program 1 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x59) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f020}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@redirect_dir_nofollow}, {@userxattr}, {@nfs_export_on}], [], 0x2c}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080", 0x2b}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r6, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, 0x0, 0x0) 11.203032667s ago: executing program 2 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x59) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f020}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@redirect_dir_nofollow}, {@userxattr}, {@nfs_export_on}], [], 0x2c}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080", 0x2b}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r6, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(0x0, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 9.49790319s ago: executing program 3 (id=214): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00I'], 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000d80)={0x14, &(0x7f0000000c00)={0x0, 0x0, 0xd7, {0xd7, 0x24, "08a9b968dc27c3b6b26a4bef7aa6e9ee8cf4fb0764850e8abd7c29f61edef6029c972f7896dcbabf9a5596c77666729528e013452bb98b9aab5da3b5cc12611c6b5e3c1195d972904a2bc29fdc46e8c2d442e23c4af405fcf6b4ecf2caa94d12d9b8c818568be456e2edc1e2ea59d80c98b8801e1159e66b0010040fcc3a77ca60a270095ce96e108c32f4937c3db2f8339a273e99cb7b98ef7ec99a1e774bfe9c036855f9187715a47450de81ce5578293e8fa3f39e0c2189345a3db71cac1843295f8766eb8a171e79cb979e0d1dc8ec15b453ff"}}, &(0x7f0000000d00)={0x0, 0x3, 0x76, @string={0x76, 0x3, "2acf1473aa676aff24b02468bdbf1df54b2029e74072abf9877da134a78e5393cb6573b75cb469b4531adbbba70abd321d6b43e540320fd28259f8abe37627e49e55029df066f1543cea2d394b1fb70c197c3eebc79635d91826e59be98acc5c58e5c18ef6cc672ab870df261f5d88a95c5c6aa2"}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x40, 0x8, 0xa9, "76134869bb93ad3066a977cdf67abd5cdf55e445dffdc52556b23948167d3eab64530b1c29442fa92f8ba2083ad176c26ede3b7e831458eed98ab25d561682a2f6ec1706ce798396a5d180a381877448dfdc11ba0f4b52b86356768d2aab13328583f3302566c7ee14e0eaeac5a664ead72fbf3563b697bd05697dad06a36451409863e7ac49d0951f09a13d217609d0f9c4dedbfdd62b22532400d00b655e639131e4b672ef184be5"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xd5}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000f00)={0x20, 0x81, 0x1, 'M'}, &(0x7f0000000f40)={0x20, 0x82, 0x1, "f4"}, &(0x7f0000000f80)={0x20, 0x83, 0x3, "0bff6f"}, &(0x7f0000000fc0)={0x20, 0x84, 0x1, "e7"}, &(0x7f0000001000)={0x20, 0x85, 0x3, 'Q4\n'}}) socket$nl_route(0x10, 0x3, 0x0) 8.195166303s ago: executing program 0 (id=215): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) ioperm(0x0, 0x80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 7.989727406s ago: executing program 1 (id=216): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x2004400d) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) r3 = io_uring_setup(0x649, &(0x7f0000000cc0)={0x0, 0x407c5c, 0x3201, 0x3, 0x966}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) io_uring_enter(r3, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r5, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='auxv\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) readv(r6, &(0x7f0000002700)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/102, 0x66}], 0x3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4f, 0x10001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xffdfffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001]}}) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_usb_connect(0x3, 0x232, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x7f, 0xa3, 0x3e, 0x20, 0xeef, 0x1, 0xffc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x220, 0x3, 0x7, 0x6, 0xc0, 0x9, "", [{{0x9, 0x4, 0xfe, 0x10, 0x5, 0x3, 0x1, 0xbb, 0x0, [@hid_hid={0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xa71}}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x6, 0x5d, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x6b2c}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xc4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x0, 0xc, 0x3, [@generic={0x36, 0x22, "a820576c994987a8522e5e8f8b99f45ade698e7d6349c151f7459e4ec840902209e11275d473a5f4d6dc643ed5f68c470e7745ae"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8, 0x0, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe3, 0xe}, @generic={0xb0, 0x3, "b8a57475469d071ca752cc38650ddaaab12050148b90fd9a39489f1735299bcc2e91f7a91dce7c7069bd259283995973fdc85c2b805a4a9c573e6a2f5b32c82e5ea9e08d2d7c4c23cf15f136d2bee4eff88a0c0516ababbf296ec18e16b91b8d8c9d68c3c7b3c3e5dc478ee39abb52d96bdf7418bf0b3c945bb416c5d75590832935d5130912b23e3a7a3b0cd10a429f9c9a9dcefda0ccd5572e364efda91e52557a7ea618ba98f3f8aa0dc08c69"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x2a, 0x1f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x9, 0x24, 0x6}}]}}, {{0x9, 0x4, 0xb3, 0x7, 0x3, 0x3f, 0x23, 0x2d, 0x5, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "678f"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x7fff000, 0x3e, 0x3, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0x40, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x8, 0x400}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x4, 0x0, 0x9}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x1, 0x40, 0x31, [@generic={0x39, 0xe, "579f45886475de57a93c980ae9a8cf440cd2c87063675e01552469f09ad2a3109cb7ef7a1cdfb63a588ee1ce66b84d3e112cb36ad5d7f7"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x10, 0x9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0xff, 0x81, 0x2}}]}}, {{0x9, 0x4, 0x7a, 0x7, 0x4, 0x6a, 0x32, 0xac, 0xd, [], [{{0x9, 0x5, 0xf, 0x2, 0x8, 0x4, 0x5, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x8, 0xf, 0xfa}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x2, 0xfd, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x5, 0x5a, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x1}, @generic={0x10, 0x22, "741b2390cdc3e33b230c275f4078"}]}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x110, 0x9, 0x8, 0x0, 0xff, 0x6}, 0xc, &(0x7f00000006c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x8, 0x1}]}, 0xa, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x42b}}, {0xd0, &(0x7f0000000bc0)=@string={0xd0, 0x3, "aa832d76d68e7276295fd4103fd28875560e6c3f01b97fb4d3785e4a5cdc6959cac717da9f5f0e6eaf2263fed0e999ba75b783d2de106c22c72316512f01fdad9b1e982a8bfe46bdb667df1fff6aaed68c1662b706b71c5633da6d7832095e12f564bf76fe0e5d469b0e00e24cc181dae8f8a2c4c87b443231bc044e5c3a26bd33f7847c1568656bc602587ac5ca4cc335125d0f899af2a43d42747262f381bbf439e10567483929277fd17712b21c78e7f86b86d1817b2d69967b843e6af83c9740837962faa8a3b0a75e851662"}}, {0x62, &(0x7f00000007c0)=@string={0x62, 0x3, "126a0000a731137df360ba9d56408c4eed19e7c2281ceaeab5e019b00127fba6917ff1f48b22a7111194f1718bfb448e36347865c00c65ac85f726c1488e663ccf8f511776050ab85605074cdc3456e46319abddb9ffe8135d01152ee2754cbf"}}, {0x3d, &(0x7f0000000280)=@string={0x3d, 0x3, "5c610140c7653e898a6a5b76007082940495e3acd51257b6fcb2385d26b5c61ba810ac39673b90d53e6707dd2af7ec3fb0f4e8dffee9491d151c7d"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1407}}, {0x51, &(0x7f0000000740)=@string={0x51, 0x3, "3bd7130f7373c4d63f5b27a4cf7a88e9e373929c127484dd9cf9330bac2ae25b2ca4e6aaa7f2d563d9195bf8c21242df8c97e53cd889d637128ab1ec1700"/79}}, {0x9f, &(0x7f0000000d40)=ANY=[@ANYBLOB="9f03bbf9810472cb06000000d35d591e18f4c43de3a25146ccac53061a3a7e7fedecfcf0cabec1b1e5c6a7a9de2e7aeac8b68998582b244c6a0c4dc2189b2023b4ab5cb76c0edf92b26ceaed7799920ac8e62efde3f5fb391d56e76873149fef3828b46177032cbe5f47b2df1d89afb1fce7166f6dd3ba18c922c5cb3380aa75d782b6de7af9727c60581943dfbf6beec7d1972830bfabebd3ff127cb2960336b86fcb01112e54067dd423c7db6f7b276c574a6b8fc7b5377c59eae4cdfb025be642ded3d398688cbf418efa4e14b5e8d4af363dc9cee2271bb3d5b2674b13d53b6e390cb8317085d45ae8f0d8a277c640e20d193c9a4480720493148fda6bbc1fb9008a93911fbc8948946258c1c684a4639b14cdf7d6b4f9d40353006a0ca5be9d8e84351f137fa325edc954741768eaa71065466e0e685bc47c9d25a5f03087119977e829493dc7ce69f7a6581a19c32d77c6594ba9f36702e5c492"]}, {0x9e, &(0x7f00000008c0)=@string={0x9e, 0x3, "1fc6890541050bedc42bf1efda3092191ac7f4c99a1521489c00ea7396d2ac1723b7b0824abd0af5f7ba75eb344e54c6404bcdaf2156f97c703b4e5277d623850b03300d81ed913597d07d0483d3ca588a75e361c80ec4e7420cda2abed1bce185a1dbbf1834a937f240cff5db62e9796554928a6424de7573aa4bae0c942e877ef1135ba16f8c76f0248a3fea8395650b984ca3f322fd8a8e201e89"}}, {0x8d, &(0x7f00000009c0)=@string={0x8d, 0x3, "e0b16b6abf8f10f7f1d15bcc9027c6b788d9b6fc7398dfeb2132ea4bddb192d20a2e9bf3ed361f7bd402aeced1498a0b286f0448c60d8b1feb99cde47a7f943d88dc4dcd1884475aecb9c6c1af47438538d2eb5a700c08a0a00a91e56e7d9fd39d90cc0e7683aaffa846d09de2a050f29e8f46815273a696c570bdb0f6c6dc7fd6ea01a73af79b35097054"}}, {0x5b, &(0x7f0000000a80)=@string={0x5b, 0x3, "bacada25c3ad649bf3e37a8dac678a9b98be5cb6075f91c700d5762cc5e0d5fe71d5d79eeb5a97fc421ae1b0b7d0c2614a3048826b8ec8da820574617748e1f01475c258acbbd85b288fcfec76f81985218d075c1dcbb5fbaf"}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0xfffffffffffffe92, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 7.988190212s ago: executing program 2 (id=217): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000840)) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 7.376507872s ago: executing program 4 (id=219): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="fc0200001e0001002bbd7000fbdbdf2520010000000000000000000000000002000004d30a002b00fe8000000000000000000000000000aa000000000000000008000c000d0000"], 0x2fc}, 0x1, 0x0, 0x0, 0x4080045}, 0x4010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket(0xa, 0x3, 0xff) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@ipv6_delrule={0xb0, 0x21, 0x800, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x7, 0xc}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}}, @FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0xf7}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wlan0\x00'}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa6}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x4080) shutdown(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb88a845000014aa00000001170000010203040506070800000c00020006002000080000000c0003000800", @nested={0x4, 0x12e}]}, 0x58}}, 0x4000000) 7.185032912s ago: executing program 4 (id=220): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1, 0xa, 0xfffffffc) 6.624403129s ago: executing program 4 (id=221): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000043886943acb0eea7db8e72fa291a972b00bf9a7c473a431b89be3db7474afd29ff5bb8e22285177132c246d5a2ac9c8779a4dc4dfbf68e555c81079c5dfdab3f8b52e7912d7ec1113029a0d9fd5f86c5377aca23292478c03a10c71857835bd3a9e41057ada54f0f02842f827a86a7eb1926"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r7}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0x7, 0x3a79, {{0x20, 0x4, 0x2, 0x2a, 0x80, 0x66, 0x0, 0x40, 0x4, 0x0, @loopback, @multicast2, {[@noop, @timestamp_addr={0x44, 0x44, 0x58, 0x1, 0x3, [{@private=0xa010100, 0x7ad05272}, {@loopback, 0x4}, {@local, 0x2}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010101, 0x4}, {@broadcast}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x5}]}, @lsrr={0x83, 0x17, 0xd, [@broadcast, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}]}, @timestamp_addr={0x44, 0xc, 0x57, 0x1, 0xe, [{@loopback, 0x401}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r7, 0x68, &(0x7f0000000200)}, 0x10) r8 = dup3(r4, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f00000001c0)={0x10000004}) r9 = getpid() kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r6, &(0x7f0000000100)={r5, r6, 0xfffffffe}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x3, 0x8, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xd, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x1, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x80003, 0x8000, 0xfffffff9, 0x3, 0x3, 0x25, 0x5, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x1, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0xfff, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x5, 0x9, 0x2, 0x0, 0xc, 0x3, 0xb, 0xfffffff8, 0x8000, 0x5, 0x7, 0x5, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x8001f, 0x404, 0x8, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000002, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0x4000e, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000009, 0x3, 0x83, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x0, 0x7, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x5, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2850, 0x100, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x6, 0x4, 0x4, 0x3, 0x4, 0xffffffff, 0x7fff, 0xffff8a32, 0xfffffff8, 0xf, 0x5, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) write$input_event(r10, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfffffffd}, 0x18) 6.476218757s ago: executing program 0 (id=222): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x80, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x48050) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000040)=0x4, &(0x7f0000000540)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r0, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r0}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) 6.377853447s ago: executing program 4 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYBLOB="01000000000000002800128009000100766c616e00000000180002800600010000000000", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x400007fc, 0xffffffffffffffff, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x1, 0x4, 0x0, 0x7, 0x7, 0x4, 0x100000000001, 0x6], 0x1000, 0x47f00}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.945031266s ago: executing program 0 (id=224): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000000c0)="c0", &(0x7f0000000040)=@udp6=r1, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x84000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x42, 0x1, 0x4, "b408754749573f7c17e6e724c609b9424f5a003870ac2600", 0x32314d4e}) 4.926501134s ago: executing program 4 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) creat(&(0x7f0000000240)='./file1\x00', 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r7, r7, &(0x7f0000000000)=0x7, 0x4) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYBLOB="01000000000000002800128009000100766c616e00000000180002800600010000000000", @ANYRES64=r6], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x400007fc, 0xffffffffffffffff, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x1, 0x4, 0x0, 0x7, 0x7, 0x4, 0x100000000001, 0x6], 0x1000, 0x47f00}) mkdir(0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000003900)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/227, 0xe3}], 0x5, &(0x7f0000001b00)=""/249, 0xf9}, 0x2}, {{&(0x7f0000001c00)=@nfc_llcp, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/74, 0x4a}, {&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000001d80)=""/241, 0xf1}], 0x3, &(0x7f0000001ec0)=""/120, 0x78}, 0x8}, {{&(0x7f0000001f40)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001fc0)=""/228, 0xe4}, {&(0x7f00000020c0)=""/220, 0xdc}], 0x2}, 0xfffffffd}, {{&(0x7f0000002200)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/52, 0x34}, {&(0x7f00000022c0)=""/227, 0xe3}, {&(0x7f0000000600)=""/180, 0xb4}, {&(0x7f0000002480)=""/96, 0x60}, {&(0x7f0000002500)=""/3, 0x3}], 0x5, &(0x7f0000003a40)=""/4111, 0x100f}}, {{&(0x7f00000035c0)=@vsock, 0x80, &(0x7f0000003840)=[{&(0x7f0000003640)=""/147, 0x93}, {&(0x7f0000003700)=""/37, 0x25}, {&(0x7f0000003740)=""/34, 0x22}, {&(0x7f0000003780)=""/182, 0xb6}], 0x4, &(0x7f0000003880)=""/73, 0x49}, 0x80000}], 0x5, 0x2, 0x0) 4.867472653s ago: executing program 3 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x59) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f020}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@redirect_dir_nofollow}, {@userxattr}, {@nfs_export_on}], [], 0x2c}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080", 0x2b}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r6, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, 0x0, 0x0) 3.636551077s ago: executing program 0 (id=227): socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000733000/0x4000)=nil, 0x4000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x9a4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) (fail_nth: 2) 3.440545928s ago: executing program 1 (id=228): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x64000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000480), &(0x7f00000004c0)}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.229129694s ago: executing program 3 (id=229): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x64000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000480), &(0x7f00000004c0)}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.751858823s ago: executing program 2 (id=230): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="fc0200001e0001002bbd7000fbdbdf2520010000000000000000000000000002000004d30a002b00fe8000000000000000000000000000aa000000000000000008000c000d0000"], 0x2fc}, 0x1, 0x0, 0x0, 0x4080045}, 0x4010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket(0xa, 0x3, 0xff) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@ipv6_delrule={0xb0, 0x21, 0x800, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x7, 0xc}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}}, @FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0xf7}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wlan0\x00'}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa6}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x4080) shutdown(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb88a845000014aa00000001170000010203040506070800000c00020006002000080000000c0003000800", @nested={0x4, 0x12e}]}, 0x58}}, 0x4000000) 1.523720325s ago: executing program 1 (id=231): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1, 0xa, 0xfffffffc) 1.505740522s ago: executing program 4 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000240)={0x7fffffff, 0xf, 0x3}) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup2(0xffffffffffffffff, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000008b00)={r4, 0x0, 0x1, "b9"}, 0x9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={r4, 0x5, 0x79}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r9, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000780)="bd", 0x1}], 0x2, 0x8, 0x3) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_dellink={0x2c, 0x11, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r8, 0x6201a, 0x100}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000) accept4(r3, 0x0, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000140)=0xd) writev(r10, &(0x7f0000000900)=[{&(0x7f0000000080)="72f70b67bbb8fbb6f9ff486627d6c331ed4b9e08a95e4c15bc5db5609412b7bdc661a9f9c37a7dad8ff53f53ddac96745521ba9eb7e8486990fbc948b0a86eb372365a45dfa3f5c5111e7a522627f110f16c597e85012adfde2db9c63775747719c78946a3faf1eb7921774442aad78ff78ad43063c1f3739364cecb309a4a", 0x7f}, {&(0x7f0000000740)="0c7547ed166791f0df96a20a193e89ffe4dda942", 0xfffffed1}], 0x2) 1.493269846s ago: executing program 0 (id=233): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='schedstat\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = syz_clone3(&(0x7f0000001d00)={0x20000000, &(0x7f0000000100), 0x0, &(0x7f0000000300), {0x25}, &(0x7f0000000340)=""/165, 0xa5, &(0x7f0000000cc0)=""/4096, &(0x7f0000001cc0)=[r0, r3, r5, r0], 0x4, {r4}}, 0x58) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000001d80)={'\x00', 0x1ff, 0x8, 0x9, 0x270b, 0x1e9e00000000, r6}) ptrace(0x8, r5) wait4(0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/103, 0x67}], 0x3}, 0x400002e1) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 1.49273912s ago: executing program 2 (id=234): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="186000000000000000000e0000000000181100008492d63b915cfef2beed94ad04125f34095481037419769472083402b58cc5d064", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r5, 0xfffffffff7fffffe, 0x0) read$FUSE(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c000533000111000001f500010244132403b1fd606412c3258e3d67aa5b00010000000000330000001d2bffc1264d04000280040003"], 0x64}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FIONCLEX(r9, 0x5450) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="270201000000000008000a00", @ANYRES32=r11, @ANYBLOB="200012800e0001006970366772657461700000000c000280080001003238"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r9, r11, 0x25, 0x1a, @void}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r1, &(0x7f0000000040)=0x3, 0xc95) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 266.801598ms ago: executing program 1 (id=235): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1a55ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)='%ps \x00', 0xc00}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffff50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 256.059949ms ago: executing program 2 (id=236): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00I'], 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000d80)={0x14, &(0x7f0000000c00)={0x0, 0x0, 0xd7, {0xd7, 0x24, "08a9b968dc27c3b6b26a4bef7aa6e9ee8cf4fb0764850e8abd7c29f61edef6029c972f7896dcbabf9a5596c77666729528e013452bb98b9aab5da3b5cc12611c6b5e3c1195d972904a2bc29fdc46e8c2d442e23c4af405fcf6b4ecf2caa94d12d9b8c818568be456e2edc1e2ea59d80c98b8801e1159e66b0010040fcc3a77ca60a270095ce96e108c32f4937c3db2f8339a273e99cb7b98ef7ec99a1e774bfe9c036855f9187715a47450de81ce5578293e8fa3f39e0c2189345a3db71cac1843295f8766eb8a171e79cb979e0d1dc8ec15b453ff"}}, &(0x7f0000000d00)={0x0, 0x3, 0x76, @string={0x76, 0x3, "2acf1473aa676aff24b02468bdbf1df54b2029e74072abf9877da134a78e5393cb6573b75cb469b4531adbbba70abd321d6b43e540320fd28259f8abe37627e49e55029df066f1543cea2d394b1fb70c197c3eebc79635d91826e59be98acc5c58e5c18ef6cc672ab870df261f5d88a95c5c6aa2"}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x40, 0x8, 0xa9, "76134869bb93ad3066a977cdf67abd5cdf55e445dffdc52556b23948167d3eab64530b1c29442fa92f8ba2083ad176c26ede3b7e831458eed98ab25d561682a2f6ec1706ce798396a5d180a381877448dfdc11ba0f4b52b86356768d2aab13328583f3302566c7ee14e0eaeac5a664ead72fbf3563b697bd05697dad06a36451409863e7ac49d0951f09a13d217609d0f9c4dedbfdd62b22532400d00b655e639131e4b672ef184be5"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xd5}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000f00)={0x20, 0x81, 0x1, 'M'}, &(0x7f0000000f40)={0x20, 0x82, 0x1, "f4"}, &(0x7f0000000f80)={0x20, 0x83, 0x3, "0bff6f"}, &(0x7f0000000fc0)={0x20, 0x84, 0x1, "e7"}, &(0x7f0000001000)={0x20, 0x85, 0x3, 'Q4\n'}}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=237): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="186000000000000000000e0000000000181100008492d63b915cfef2beed94ad04125f34095481037419769472083402b58cc5d064f0b58a27fcd4c7e697fd6f3d83bfa47e61a3a13b88a108b2699a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r5, 0xfffffffff7fffffe, 0x0) read$FUSE(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c000533000111000001f500010244132403b1fd606412c3258e3d67aa5b00010000000000330000001d2bffc1264d04000280040003"], 0x64}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FIONCLEX(r9, 0x5450) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="270201000000000008000a00", @ANYRES32=r11, @ANYBLOB="200012800e0001006970366772657461700000000c000280080001003238"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r9, r11, 0x25, 0x1a, @void}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r1, &(0x7f0000000040)=0x3, 0xc95) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 75.598463][ T5571] cgroup: Unknown subsys name 'net' [ 75.830590][ T5571] cgroup: Unknown subsys name 'cpuset' [ 75.884934][ T5571] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.495980][ T5571] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.959473][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.972141][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.990015][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.998622][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.026619][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.035763][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.036557][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.042742][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.042768][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.042891][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.043194][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.045484][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.047133][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.058479][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.060092][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.066938][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.067831][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.068562][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.071074][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.071736][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.106671][ T5589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.195068][ T5589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.195894][ T5589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.197161][ T5589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.197800][ T5589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.095509][ T4899] Bluetooth: hci4: command tx timeout [ 82.174532][ T5589] Bluetooth: hci1: command tx timeout [ 82.176582][ T4899] Bluetooth: hci3: command tx timeout [ 82.255197][ T4899] Bluetooth: hci0: command tx timeout [ 82.257052][ T4899] Bluetooth: hci2: command tx timeout [ 82.576845][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.578133][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.578345][ T5584] bridge_slave_0: entered allmulticast mode [ 82.581888][ T5584] bridge_slave_0: entered promiscuous mode [ 82.615554][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.615706][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.616826][ T5583] bridge_slave_0: entered allmulticast mode [ 82.619174][ T5583] bridge_slave_0: entered promiscuous mode [ 82.622309][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.622373][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.622469][ T5587] bridge_slave_0: entered allmulticast mode [ 82.626655][ T5587] bridge_slave_0: entered promiscuous mode [ 82.659641][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.659769][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.659923][ T5584] bridge_slave_1: entered allmulticast mode [ 82.663636][ T5584] bridge_slave_1: entered promiscuous mode [ 82.686404][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.687669][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.688137][ T5583] bridge_slave_1: entered allmulticast mode [ 82.690626][ T5583] bridge_slave_1: entered promiscuous mode [ 82.692135][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.692245][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.692737][ T5587] bridge_slave_1: entered allmulticast mode [ 82.696272][ T5587] bridge_slave_1: entered promiscuous mode [ 82.751469][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.751615][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.752136][ T5582] bridge_slave_0: entered allmulticast mode [ 82.755451][ T5582] bridge_slave_0: entered promiscuous mode [ 82.789987][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.790138][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.790286][ T5585] bridge_slave_0: entered allmulticast mode [ 82.795697][ T5585] bridge_slave_0: entered promiscuous mode [ 82.819978][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.820943][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.821418][ T5582] bridge_slave_1: entered allmulticast mode [ 82.823794][ T5582] bridge_slave_1: entered promiscuous mode [ 82.859094][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.859709][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.860167][ T5585] bridge_slave_1: entered allmulticast mode [ 82.862575][ T5585] bridge_slave_1: entered promiscuous mode [ 82.871683][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.896490][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.902652][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.922730][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.940412][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.943616][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.973765][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.006470][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.023756][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.250040][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.252721][ T5584] team0: Port device team_slave_0 added [ 83.272543][ T5583] team0: Port device team_slave_0 added [ 83.276393][ T5587] team0: Port device team_slave_0 added [ 83.292398][ T5584] team0: Port device team_slave_1 added [ 83.310321][ T5583] team0: Port device team_slave_1 added [ 83.312959][ T5587] team0: Port device team_slave_1 added [ 83.340606][ T5582] team0: Port device team_slave_0 added [ 83.370062][ T5585] team0: Port device team_slave_0 added [ 83.408727][ T5582] team0: Port device team_slave_1 added [ 83.448605][ T5585] team0: Port device team_slave_1 added [ 83.451700][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.451714][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.451743][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.493606][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.493622][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.493646][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.500690][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.500705][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.500729][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.524021][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.524038][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.524062][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.595803][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.595821][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.595844][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.601852][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.601869][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.601892][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.663047][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.663063][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.663086][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.695270][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.695287][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.695310][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.701489][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.701506][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.701530][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.708650][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.708666][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.708689][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.890866][ T5584] hsr_slave_0: entered promiscuous mode [ 83.892185][ T5584] hsr_slave_1: entered promiscuous mode [ 83.906332][ T5587] hsr_slave_0: entered promiscuous mode [ 83.908164][ T5587] hsr_slave_1: entered promiscuous mode [ 83.909182][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 83.909306][ T5587] Cannot create hsr debugfs directory [ 83.923335][ T5583] hsr_slave_0: entered promiscuous mode [ 83.926245][ T5583] hsr_slave_1: entered promiscuous mode [ 83.927450][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 83.927473][ T5583] Cannot create hsr debugfs directory [ 84.007545][ T5582] hsr_slave_0: entered promiscuous mode [ 84.009216][ T5582] hsr_slave_1: entered promiscuous mode [ 84.010049][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 84.010071][ T5582] Cannot create hsr debugfs directory [ 84.051458][ T5585] hsr_slave_0: entered promiscuous mode [ 84.054279][ T5585] hsr_slave_1: entered promiscuous mode [ 84.057134][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 84.057158][ T5585] Cannot create hsr debugfs directory [ 84.174798][ T5589] Bluetooth: hci4: command tx timeout [ 84.255746][ T5589] Bluetooth: hci3: command tx timeout [ 84.255764][ T4899] Bluetooth: hci1: command tx timeout [ 84.335069][ T4899] Bluetooth: hci0: command tx timeout [ 84.335108][ T5589] Bluetooth: hci2: command tx timeout [ 85.183936][ T5584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.236799][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.250970][ T5584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.288203][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.296639][ T5584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.329561][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.350875][ T5584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.380292][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.518839][ T5582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.549134][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.556596][ T5582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.588729][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.597168][ T5582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.627878][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.658010][ T5582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.688674][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.801575][ T5585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.843004][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.853802][ T5585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.877186][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.880777][ T5585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.898344][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.924723][ T5585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.960510][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.111338][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.148304][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.157279][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.190488][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.198171][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.227967][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.249970][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.256205][ T5589] Bluetooth: hci4: command tx timeout [ 86.278872][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.337225][ T5589] Bluetooth: hci3: command tx timeout [ 86.337251][ T4899] Bluetooth: hci1: command tx timeout [ 86.376710][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.413210][ T5587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.414547][ T5589] Bluetooth: hci2: command tx timeout [ 86.414583][ T5589] Bluetooth: hci0: command tx timeout [ 86.449020][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.461389][ T5587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.490655][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.499984][ T5587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.528083][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.542956][ T5587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.578436][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.622456][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.641737][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.676812][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.677371][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.723215][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.723421][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.820305][ T10] cfg80211: failed to load regulatory.db [ 86.838727][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.882774][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.894859][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.895072][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.936238][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.936872][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.017912][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.061098][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.061300][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.089060][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.112690][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.124050][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.266716][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.362242][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.391764][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.407877][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.463969][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.471913][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.586733][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.636576][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.645685][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.721585][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.721705][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.117186][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.334499][ T4899] Bluetooth: hci4: command tx timeout [ 88.416774][ T4899] Bluetooth: hci1: command tx timeout [ 88.416857][ T4899] Bluetooth: hci3: command tx timeout [ 88.494711][ T4899] Bluetooth: hci2: command tx timeout [ 88.496944][ T5589] Bluetooth: hci0: command tx timeout [ 88.542522][ T5584] veth0_vlan: entered promiscuous mode [ 88.579974][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.644867][ T5584] veth1_vlan: entered promiscuous mode [ 88.871202][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.950044][ T5584] veth0_macvtap: entered promiscuous mode [ 88.981852][ T5584] veth1_macvtap: entered promiscuous mode [ 89.119811][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.208159][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.266910][ T5585] veth0_vlan: entered promiscuous mode [ 89.283157][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.380793][ T5585] veth1_vlan: entered promiscuous mode [ 89.471099][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.819328][ T5582] veth0_vlan: entered promiscuous mode [ 89.843799][ T5585] veth0_macvtap: entered promiscuous mode [ 89.857378][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.871983][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.873358][ T5583] veth0_vlan: entered promiscuous mode [ 89.901989][ T5585] veth1_macvtap: entered promiscuous mode [ 89.915278][ T5582] veth1_vlan: entered promiscuous mode [ 89.958725][ T5583] veth1_vlan: entered promiscuous mode [ 90.001606][ T5587] veth0_vlan: entered promiscuous mode [ 90.018001][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.025413][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.025471][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.075772][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.093848][ T5587] veth1_vlan: entered promiscuous mode [ 90.220490][ T5583] veth0_macvtap: entered promiscuous mode [ 90.226970][ T5582] veth0_macvtap: entered promiscuous mode [ 90.341477][ T5583] veth1_macvtap: entered promiscuous mode [ 90.421626][ T5582] veth1_macvtap: entered promiscuous mode [ 90.692368][ T5587] veth0_macvtap: entered promiscuous mode [ 90.729123][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.745595][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.749824][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.749844][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.751120][ T5587] veth1_macvtap: entered promiscuous mode [ 90.843208][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.029282][ T37] audit: type=1326 audit(1788018164.329:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e1a8e159 code=0x7ffc0000 [ 91.081566][ T37] audit: type=1326 audit(1788018164.329:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e1a8e159 code=0x7ffc0000 [ 91.107380][ T37] audit: type=1326 audit(1788018164.329:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f07e1a4e98e code=0x7ffc0000 [ 91.132868][ T37] audit: type=1326 audit(1788018164.329:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e1a8e159 code=0x7ffc0000 [ 91.167322][ T37] audit: type=1326 audit(1788018164.339:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e1a8e159 code=0x7ffc0000 [ 91.171513][ T37] audit: type=1326 audit(1788018164.339:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e1a8e159 code=0x7ffc0000 [ 91.243376][ T37] audit: type=1326 audit(1788018164.339:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e1a8e159 code=0x7ffc0000 [ 91.271101][ T37] audit: type=1326 audit(1788018164.339:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e1a8e159 code=0x7ffc0000 [ 91.278971][ T37] audit: type=1326 audit(1788018164.339:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e1a8e159 code=0x7ffc0000 [ 91.284668][ T37] audit: type=1326 audit(1788018164.339:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5781 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e1a8e159 code=0x7ffc0000 [ 91.544859][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.648386][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.649622][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.708980][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.887539][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.968426][ T5786] macsec1: entered promiscuous mode [ 91.973841][ T5786] virt_wifi0: entered promiscuous mode [ 93.223053][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.236974][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.632573][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.640590][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.834661][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.842594][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.011588][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 95.729989][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.740514][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.266695][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.281825][ T4091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.283058][ T4091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.477421][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.488335][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.501156][ T1139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.501413][ T1139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.795600][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.795666][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.912969][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919451][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919496][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919530][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919562][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919594][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919632][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919664][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919695][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919727][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919758][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919790][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919822][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919853][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919885][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.088755][ T5825] FAULT_INJECTION: forcing a failure. [ 97.088755][ T5825] name failslab, interval 1, probability 0, space 0, times 1 [ 97.101853][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 97.101880][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.101898][ T5825] Call Trace: [ 97.101908][ T5825] [ 97.101916][ T5825] dump_stack_lvl+0xe8/0x150 [ 97.101955][ T5825] should_fail_ex+0x46b/0x600 [ 97.101993][ T5825] should_failslab+0xa8/0x100 [ 97.102019][ T5825] kmem_cache_alloc_node_noprof+0xac/0x660 [ 97.102042][ T5825] ? __alloc_skb+0x1db/0x7a0 [ 97.102059][ T5825] ? __alloc_skb+0x1db/0x7a0 [ 97.102081][ T5825] __alloc_skb+0x1db/0x7a0 [ 97.102103][ T5825] netlink_sendmsg+0x5d4/0xb40 [ 97.102126][ T5825] ? lockdep_unlock+0x5c/0xd0 [ 97.102151][ T5825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.102195][ T5825] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 97.102224][ T5825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.102246][ T5825] sock_sendmsg_nosec+0x13a/0x180 [ 97.102267][ T5825] ____sys_sendmsg+0x565/0x870 [ 97.102296][ T5825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.102326][ T5825] ? import_iovec+0x73/0xa0 [ 97.102350][ T5825] ___sys_sendmsg+0x2a5/0x360 [ 97.102369][ T5825] ? __lock_acquire+0x6df/0x2e40 [ 97.102393][ T5825] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.102447][ T5825] ? __fget_files+0x2a/0x420 [ 97.102464][ T5825] ? __fget_files+0x3a8/0x420 [ 97.102488][ T5825] __x64_sys_sendmsg+0x1b7/0x290 [ 97.102510][ T5825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.102548][ T5825] do_syscall_64+0x166/0x520 [ 97.102567][ T5825] ? trace_irq_disable+0x3b/0x140 [ 97.102587][ T5825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.102604][ T5825] ? clear_bhb_loop+0x70/0xc0 [ 97.102626][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.102643][ T5825] RIP: 0033:0x7f01342be159 [ 97.102666][ T5825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.102680][ T5825] RSP: 002b:00007f0132516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.102705][ T5825] RAX: ffffffffffffffda RBX: 00007f0134545fa0 RCX: 00007f01342be159 [ 97.102719][ T5825] RDX: 0000000020084884 RSI: 00002000000000c0 RDI: 0000000000000004 [ 97.102731][ T5825] RBP: 00007f0132516090 R08: 0000000000000000 R09: 0000000000000000 [ 97.102742][ T5825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.102753][ T5825] R13: 00007f0134546038 R14: 00007f0134545fa0 R15: 00007ffc4bbf1ca8 [ 97.102781][ T5825] [ 98.072939][ T5840] [ 98.979029][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.165243][ T5843] mmap: syz.4.5 (5843) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.182358][ T5856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.184913][ T5858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.185995][ T5858] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 101.186011][ T5858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18'. [ 101.486971][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 102.197085][ T5882] Invalid ELF header magic: != ELF [ 102.955257][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802238e400: rx timeout, send abort [ 102.957969][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802238e400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.237437][ T5889] tipc: Withdrawal distribution failure [ 103.645226][ T5893] [ 104.228991][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011b8d400: rx timeout, send abort [ 104.229220][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888011b8d400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.774322][ T5903] IPv6: sit1: Disabled Multicast RS [ 104.781551][ T5903] sit1: entered allmulticast mode [ 104.898146][ T5901] netlink: 108 bytes leftover after parsing attributes in process `syz.0.29'. [ 104.988214][ T5912] FAULT_INJECTION: forcing a failure. [ 104.988214][ T5912] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.021909][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.021932][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.021940][ T5912] Call Trace: [ 105.021946][ T5912] [ 105.021952][ T5912] dump_stack_lvl+0xe8/0x150 [ 105.021983][ T5912] should_fail_ex+0x46b/0x600 [ 105.022006][ T5912] _copy_to_user+0x31/0xb0 [ 105.022027][ T5912] simple_read_from_buffer+0xe1/0x170 [ 105.022047][ T5912] proc_fail_nth_read+0x1be/0x230 [ 105.022071][ T5912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.022091][ T5912] ? rw_verify_area+0x250/0x4d0 [ 105.022107][ T5912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.022121][ T5912] vfs_read+0x219/0xa90 [ 105.022146][ T5912] ? __pfx_vfs_read+0x10/0x10 [ 105.022176][ T5912] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.022197][ T5912] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.022213][ T5912] ? mutex_lock_nested+0x152/0x1d0 [ 105.022234][ T5912] ? fdget_pos+0x252/0x320 [ 105.022258][ T5912] ksys_read+0x156/0x270 [ 105.022283][ T5912] ? __pfx_ksys_read+0x10/0x10 [ 105.022311][ T5912] do_syscall_64+0x166/0x520 [ 105.022330][ T5912] ? trace_irq_disable+0x3b/0x140 [ 105.022350][ T5912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.022367][ T5912] ? clear_bhb_loop+0x70/0xc0 [ 105.022387][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.022405][ T5912] RIP: 0033:0x7f07e1a4e98e [ 105.022421][ T5912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.022436][ T5912] RSP: 002b:00007f07dfcc4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.022454][ T5912] RAX: ffffffffffffffda RBX: 00007f07dfcc56c0 RCX: 00007f07e1a4e98e [ 105.022466][ T5912] RDX: 000000000000000f RSI: 00007f07dfcc50a0 RDI: 0000000000000004 [ 105.022474][ T5912] RBP: 00007f07dfcc5090 R08: 0000000000000000 R09: 0000000000000000 [ 105.022482][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.022490][ T5912] R13: 00007f07e1d16128 R14: 00007f07e1d16090 R15: 00007ffc85cbf988 [ 105.022512][ T5912] [ 105.465265][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 105.715222][ T5598] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.819984][ T5927] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 106.106301][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.108650][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.944976][ T5598] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 107.158662][ T5598] usb 5-1: config 2 has an invalid descriptor of length 125, skipping remainder of the config [ 107.169651][ T5598] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.169679][ T5598] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.169703][ T5598] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 107.172581][ T5598] usb 5-1: config 2 has an invalid descriptor of length 125, skipping remainder of the config [ 107.172643][ T5598] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.172665][ T5598] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.172688][ T5598] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 107.253493][ T5598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.253521][ T5598] usb 5-1: Product: syz [ 107.253535][ T5598] usb 5-1: Manufacturer: syz [ 107.253549][ T5598] usb 5-1: SerialNumber: syz [ 107.444709][ T5937] Invalid ELF header magic: != ELF [ 107.683349][ T5598] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 107.886358][ T5947] [ 108.751155][ T5598] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 108.915788][ T5598] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 108.971510][ T5598] usb 5-1: USB disconnect, device number 2 [ 109.010858][ T5598] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 109.041128][ T5598] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 109.056559][ T5598] ti_usb_3410_5052 5-1:2.0: device disconnected [ 109.701905][ T5964] Invalid ELF header magic: != ELF [ 111.022869][ T5972] ubi0: attaching mtd0 [ 111.095307][ T5972] ubi0: scanning is finished [ 111.095374][ T5972] ubi0: empty MTD device detected [ 111.621399][ T5975] loop0: detected capacity change from 0 to 3904 [ 111.803428][ T5975] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 111.808078][ T5975] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 111.808099][ T5975] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 111.808182][ T5975] loop0: [ 114.441356][ T5972] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 114.554410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.244540][ T5724] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.204462][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 116.205305][ T5724] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 116.207204][ T5724] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 116.207226][ T5724] usb 3-1: config 0 has no interface number 0 [ 116.207271][ T5724] usb 3-1: config 0 interface 12 has no altsetting 0 [ 116.239770][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.239796][ T5724] usb 3-1: Product: syz [ 116.239810][ T5724] usb 3-1: Manufacturer: syz [ 116.239824][ T5724] usb 3-1: SerialNumber: syz [ 116.585059][ T5724] usb 3-1: config 0 descriptor?? [ 121.175186][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 121.197315][ T5724] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 121.197395][ T5724] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 121.197410][ T5724] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 121.197495][ T5724] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 121.292654][ T5724] usb 3-1: USB disconnect, device number 2 [ 121.316362][ T6033] [ 121.755068][ T5593] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.949940][ T5593] usb 4-1: Using ep0 maxpacket: 8 [ 121.958112][ T5593] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.974841][ T5593] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.976094][ T5593] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.976122][ T5593] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.976146][ T5593] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.976190][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.095032][ T5590] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.178447][ T6047] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.385206][ T5590] usb 2-1: Using ep0 maxpacket: 32 [ 122.386355][ T5590] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 122.388195][ T5590] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 122.422102][ T5590] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 122.422129][ T5590] usb 2-1: Product: syz [ 122.422142][ T5590] usb 2-1: Manufacturer: syz [ 122.422155][ T5590] usb 2-1: SerialNumber: syz [ 122.449791][ T5593] usb 4-1: GET_CAPABILITIES returned 0 [ 122.455403][ T5593] usbtmc 4-1:16.0: can't read capabilities [ 122.631530][ T5590] usb 2-1: config 0 descriptor?? [ 122.640092][ T6040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.810009][ T5590] hub 2-1:0.0: bad descriptor, ignoring hub [ 122.810102][ T5590] hub 2-1:0.0: probe with driver hub failed with error -5 [ 123.087798][ T5593] usb 4-1: USB disconnect, device number 2 [ 123.341715][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.58'. [ 123.356674][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.58'. [ 123.791053][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 123.872602][ T6058] ip6gretap1: entered allmulticast mode [ 123.909342][ T6058] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 123.923510][ T6058] batman_adv: batadv0: Adding interface: ip6gretap1 [ 123.923551][ T6058] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.923649][ T6058] batman_adv: batadv0: Interface activated: ip6gretap1 [ 124.285198][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.58'. [ 124.285340][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.58'. [ 124.579115][ T6068] netlink: 692 bytes leftover after parsing attributes in process `syz.0.61'. [ 124.762077][ T5593] usb 2-1: USB disconnect, device number 2 [ 125.013418][ T6075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.015818][ T6075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.176774][ T6087] Invalid ELF header magic: != ELF [ 127.424608][ T6103] [ 128.362489][ T5589] Bluetooth: hci4: link tx timeout [ 128.362689][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.390742][ T5589] Bluetooth: hci4: link tx timeout [ 128.397207][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.424990][ T5589] Bluetooth: hci4: link tx timeout [ 128.426107][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.440107][ T5589] Bluetooth: hci4: link tx timeout [ 128.441591][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.456147][ T5589] Bluetooth: hci4: link tx timeout [ 128.456164][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.479393][ T5589] Bluetooth: hci4: link tx timeout [ 128.480982][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.589716][ T5589] Bluetooth: hci4: link tx timeout [ 128.589775][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.621166][ T5589] Bluetooth: hci4: link tx timeout [ 128.621830][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.634872][ T5589] Bluetooth: hci4: link tx timeout [ 128.636369][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.648270][ T5589] Bluetooth: hci4: link tx timeout [ 128.649255][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.656269][ T5589] Bluetooth: hci4: link tx timeout [ 128.656286][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.667379][ T5589] Bluetooth: hci4: link tx timeout [ 128.667395][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.687679][ T5589] Bluetooth: hci4: link tx timeout [ 128.687697][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.701974][ T5589] Bluetooth: hci4: link tx timeout [ 128.701992][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.717153][ T5589] Bluetooth: hci4: link tx timeout [ 128.717209][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.733283][ T5589] Bluetooth: hci4: link tx timeout [ 128.733335][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.748228][ T5589] Bluetooth: hci4: link tx timeout [ 128.748282][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.761257][ T5589] Bluetooth: hci4: link tx timeout [ 128.761307][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.785798][ T5589] Bluetooth: hci4: link tx timeout [ 128.785851][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.800037][ T5589] Bluetooth: hci4: link tx timeout [ 128.800088][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.814155][ T5589] Bluetooth: hci4: link tx timeout [ 128.816006][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.827394][ T5589] Bluetooth: hci4: link tx timeout [ 128.828475][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.838816][ T5589] Bluetooth: hci4: link tx timeout [ 128.838831][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.848924][ T5589] Bluetooth: hci4: link tx timeout [ 128.848940][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.868322][ T5589] Bluetooth: hci4: link tx timeout [ 128.869464][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.881309][ T5589] Bluetooth: hci4: link tx timeout [ 128.881325][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.894286][ T5589] Bluetooth: hci4: link tx timeout [ 128.895308][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.905526][ T5589] Bluetooth: hci4: link tx timeout [ 128.905542][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.920740][ T5589] Bluetooth: hci4: link tx timeout [ 128.922076][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.932395][ T5589] Bluetooth: hci4: link tx timeout [ 128.932410][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.947521][ T5589] Bluetooth: hci4: link tx timeout [ 128.949045][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.952886][ T5589] Bluetooth: hci4: link tx timeout [ 128.952898][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.999351][ T5589] Bluetooth: hci4: link tx timeout [ 128.999412][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.019192][ T5589] Bluetooth: hci4: link tx timeout [ 129.022493][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.038783][ T5589] Bluetooth: hci4: link tx timeout [ 129.038801][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.040641][ T5589] Bluetooth: hci4: link tx timeout [ 129.040655][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.044501][ T5589] Bluetooth: hci4: link tx timeout [ 129.044544][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.084963][ T5589] Bluetooth: hci4: link tx timeout [ 129.089716][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.108584][ T5589] Bluetooth: hci4: link tx timeout [ 129.115419][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.131011][ T5589] Bluetooth: hci4: link tx timeout [ 129.131069][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.133609][ T5589] Bluetooth: hci4: link tx timeout [ 129.133638][ T5589] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.479853][ T6104] FAULT_INJECTION: forcing a failure. [ 129.479853][ T6104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.504111][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.3.67 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.504139][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.504149][ T6104] Call Trace: [ 129.504157][ T6104] [ 129.504165][ T6104] dump_stack_lvl+0xe8/0x150 [ 129.504196][ T6104] should_fail_ex+0x46b/0x600 [ 129.504220][ T6104] _copy_to_user+0x31/0xb0 [ 129.504244][ T6104] sctp_getsockopt_disable_fragments+0x12c/0x1b0 [ 129.504270][ T6104] ? __pfx_sctp_getsockopt_disable_fragments+0x10/0x10 [ 129.504300][ T6104] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 129.504319][ T6104] ? lockdep_hardirqs_on+0x7b/0x110 [ 129.504338][ T6104] sctp_getsockopt+0xacc/0xb90 [ 129.504366][ T6104] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 129.504385][ T6104] do_sock_getsockopt+0x51d/0x7e0 [ 129.504410][ T6104] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 129.504440][ T6104] ? __fget_files+0x3a8/0x420 [ 129.504453][ T6104] ? __fget_files+0x2a/0x420 [ 129.504472][ T6104] __x64_sys_getsockopt+0x1aa/0x250 [ 129.504496][ T6104] do_syscall_64+0x166/0x520 [ 129.504512][ T6104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.504527][ T6104] ? clear_bhb_loop+0x70/0xc0 [ 129.504545][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.504558][ T6104] RIP: 0033:0x7f01342be159 [ 129.504580][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.504592][ T6104] RSP: 002b:00007f01324f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 129.504612][ T6104] RAX: ffffffffffffffda RBX: 00007f0134546090 RCX: 00007f01342be159 [ 129.504622][ T6104] RDX: 0000000000000008 RSI: 0000000000000084 RDI: 0000000000000003 [ 129.504631][ T6104] RBP: 00007f01324f5090 R08: 0000200000000040 R09: 0000000000000000 [ 129.504640][ T6104] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.504649][ T6104] R13: 00007f0134546128 R14: 00007f0134546090 R15: 00007ffc4bbf1ca8 [ 129.504672][ T6104] [ 129.889403][ T6122] ubi0: attaching mtd0 [ 129.914209][ T6122] ubi0: scanning is finished [ 130.414733][ T5589] Bluetooth: hci4: command 0x0406 tx timeout [ 130.935428][ T6126] input: syz1 as /devices/virtual/input/input6 [ 131.030411][ T6131] netlink: 692 bytes leftover after parsing attributes in process `syz.0.74'. [ 131.200851][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 131.650264][ T6122] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 132.947078][ T6140] ubi0: attaching mtd0 [ 132.949840][ T6140] ubi0: scanning is finished [ 133.416797][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 133.416816][ T37] audit: type=1326 audit(1788018206.779:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041e50e159 code=0x7ffc0000 [ 133.418184][ T37] audit: type=1326 audit(1788018206.789:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041e50e159 code=0x7ffc0000 [ 133.426634][ T37] audit: type=1326 audit(1788018206.799:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f041e4ce98e code=0x7ffc0000 [ 133.428465][ T37] audit: type=1326 audit(1788018206.799:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041e50e159 code=0x7ffc0000 [ 133.434566][ T37] audit: type=1326 audit(1788018206.799:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041e50e159 code=0x7ffc0000 [ 133.438052][ T37] audit: type=1326 audit(1788018206.809:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f041e50e159 code=0x7ffc0000 [ 133.439347][ T37] audit: type=1326 audit(1788018206.809:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041e50e159 code=0x7ffc0000 [ 133.440683][ T37] audit: type=1326 audit(1788018206.809:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041e50e159 code=0x7ffc0000 [ 133.443133][ T37] audit: type=1326 audit(1788018206.809:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f041e50e159 code=0x7ffc0000 [ 133.444306][ T37] audit: type=1326 audit(1788018206.809:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041e50e159 code=0x7ffc0000 [ 133.532884][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.532979][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.772124][ T6154] Invalid ELF header magic: != ELF [ 135.154353][ T6158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.156775][ T6158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.846914][ T6140] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 138.853038][ T6144] ubi0: attaching mtd0 [ 138.856803][ T6144] ubi0: scanning is finished [ 139.592788][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 139.631875][ T6180] ip6gretap1: entered allmulticast mode [ 139.656562][ T6180] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 139.667196][ T6180] batman_adv: batadv0: Adding interface: ip6gretap1 [ 139.667260][ T6180] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.667343][ T6180] batman_adv: batadv0: Interface activated: ip6gretap1 [ 140.716221][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 140.759515][ T6189] ip6gretap1: entered allmulticast mode [ 140.779966][ T6189] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 140.789414][ T6189] batman_adv: batadv0: Adding interface: ip6gretap1 [ 140.789457][ T6189] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.789537][ T6189] batman_adv: batadv0: Interface activated: ip6gretap1 [ 141.374134][ T6144] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 141.545057][ T6193] input: syz1 as /devices/virtual/input/input7 [ 141.903841][ T6197] loop0: detected capacity change from 0 to 3904 [ 142.659219][ T6212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.662191][ T6212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.718237][ T6214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.720659][ T6214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.862023][ T6203] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 142.863843][ T6203] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 142.863861][ T6203] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 142.863934][ T6203] loop0: p1 [ 142.864193][ T6203] loop0: p1 start 730970789 is beyond EOD, truncated [ 142.946172][ T4952] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 142.956941][ T4952] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 142.956959][ T4952] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 142.957058][ T4952] loop0: p1 [ 142.957285][ T4952] loop0: p1 start 730970789 is beyond EOD, truncated [ 143.343655][ T6224] Invalid ELF header magic: != ELF [ 145.353083][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 145.898904][ T6248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.101'. [ 146.110988][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.103'. [ 146.241197][ T6260] Zero length message leads to an empty skb [ 146.342284][ T6256] input: syz1 as /devices/virtual/input/input8 [ 146.385643][ T6263] netlink: 'syz.2.106': attribute type 4 has an invalid length. [ 146.449766][ T6264] netlink: 'syz.2.106': attribute type 4 has an invalid length. [ 146.524645][ T5724] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.694540][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 146.699896][ T5724] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 146.701329][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.837628][ T5724] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 147.689411][ T6280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.691808][ T6280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.892536][ T6281] Invalid ELF header magic: != ELF [ 149.142378][ T5724] gspca_nw80x: reg_r err -110 [ 149.147286][ T5724] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 149.287856][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 150.099451][ T5723] usb 5-1: USB disconnect, device number 3 [ 153.268747][ T6322] input: syz1 as /devices/virtual/input/input9 [ 154.173456][ T6338] Invalid ELF header magic: != ELF [ 155.354874][ T6350] xt_policy: too many policy elements [ 155.514518][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.745987][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 155.752076][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 155.753931][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 155.753959][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 155.753983][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 155.754019][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.950758][ T6343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.959083][ T6343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.115997][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 156.146119][ T6358] ip6gretap1: entered allmulticast mode [ 156.164758][ T6358] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 156.171612][ T6358] batman_adv: batadv0: Adding interface: ip6gretap1 [ 156.171649][ T6358] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.171730][ T6358] batman_adv: batadv0: Interface activated: ip6gretap1 [ 156.808593][ T10] mdc800 2-1:1.0: probe fails -> Wrong Endpoints. [ 156.919958][ T10] usb 2-1: USB disconnect, device number 3 [ 156.946268][ T6369] FAULT_INJECTION: forcing a failure. [ 156.946268][ T6369] name failslab, interval 1, probability 0, space 0, times 0 [ 156.970716][ T6369] CPU: 1 UID: 0 PID: 6369 Comm: syz.4.129 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.970743][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.970753][ T6369] Call Trace: [ 156.970761][ T6369] [ 156.970769][ T6369] dump_stack_lvl+0xe8/0x150 [ 156.970802][ T6369] should_fail_ex+0x46b/0x600 [ 156.970827][ T6369] should_failslab+0xa8/0x100 [ 156.970853][ T6369] __kmalloc_noprof+0xfb/0x790 [ 156.970875][ T6369] ? tomoyo_encode+0x2ad/0x570 [ 156.970895][ T6369] ? tomoyo_encode+0x2ad/0x570 [ 156.970922][ T6369] tomoyo_encode+0x2ad/0x570 [ 156.970947][ T6369] tomoyo_realpath_from_path+0x5fa/0x640 [ 156.970975][ T6369] ? tomoyo_path_number_perm+0x219/0x5f0 [ 156.970994][ T6369] tomoyo_path_number_perm+0x246/0x5f0 [ 156.971014][ T6369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.971031][ T6369] ? __lock_acquire+0x6df/0x2e40 [ 156.971067][ T6369] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.971086][ T6369] ? hook_file_ioctl+0x1f5/0x610 [ 156.971147][ T6369] ? __fget_files+0x2a/0x420 [ 156.971168][ T6369] ? __fget_files+0x2a/0x420 [ 156.971183][ T6369] ? __fget_files+0x3a8/0x420 [ 156.971199][ T6369] ? __fget_files+0x2a/0x420 [ 156.971219][ T6369] security_file_ioctl+0xc3/0x2a0 [ 156.971239][ T6369] __se_sys_ioctl+0x47/0x170 [ 156.971263][ T6369] do_syscall_64+0x166/0x520 [ 156.971282][ T6369] ? trace_irq_disable+0x3b/0x140 [ 156.971303][ T6369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.971319][ T6369] ? clear_bhb_loop+0x70/0xc0 [ 156.971340][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.971357][ T6369] RIP: 0033:0x7f041e50e159 [ 156.971375][ T6369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.971390][ T6369] RSP: 002b:00007f041c766028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.971410][ T6369] RAX: ffffffffffffffda RBX: 00007f041e795fa0 RCX: 00007f041e50e159 [ 156.971422][ T6369] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 156.971432][ T6369] RBP: 00007f041c766090 R08: 0000000000000000 R09: 0000000000000000 [ 156.971444][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.971454][ T6369] R13: 00007f041e796038 R14: 00007f041e795fa0 R15: 00007ffde6e7de78 [ 156.971485][ T6369] [ 156.971505][ T6369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.415196][ T5593] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 157.628448][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.653743][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.439501][ T5593] usb 3-1: not running at top speed; connect to a high speed hub [ 158.439590][ T5593] usb 3-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 158.444129][ T5593] usb 3-1: config 1 has an invalid interface number: 167 but max is 0 [ 158.444153][ T5593] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.444171][ T5593] usb 3-1: config 1 has no interface number 0 [ 158.444212][ T5593] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 158.444232][ T5593] usb 3-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.444257][ T5593] usb 3-1: config 1 interface 167 has no altsetting 0 [ 158.455275][ T5593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.455297][ T5593] usb 3-1: Product: syz [ 158.455311][ T5593] usb 3-1: Manufacturer: syz [ 158.455325][ T5593] usb 3-1: SerialNumber: syz [ 158.861015][ T5593] em28xx 3-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 158.861121][ T5593] em28xx 3-1:1.167: Device initialization failed. [ 158.861136][ T5593] em28xx 3-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 158.878823][ T5593] usb 3-1: USB disconnect, device number 3 [ 158.996153][ T6381] input: syz1 as /devices/virtual/input/input10 [ 159.367642][ T6381] syz.1.134 (6381) used greatest stack depth: 18216 bytes left [ 162.028063][ T6407] overlayfs: failed to resolve 'mtd0': -2 [ 162.616728][ T6407] FAULT_INJECTION: forcing a failure. [ 162.616728][ T6407] name failslab, interval 1, probability 0, space 0, times 0 [ 162.617066][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: syz.3.141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.617089][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.617107][ T6407] Call Trace: [ 162.617115][ T6407] [ 162.617124][ T6407] dump_stack_lvl+0xe8/0x150 [ 162.617156][ T6407] should_fail_ex+0x46b/0x600 [ 162.617181][ T6407] should_failslab+0xa8/0x100 [ 162.617208][ T6407] kmem_cache_alloc_node_noprof+0xac/0x660 [ 162.617231][ T6407] ? dup_task_struct+0x52/0xa00 [ 162.617252][ T6407] ? dup_task_struct+0x52/0xa00 [ 162.617282][ T6407] dup_task_struct+0x52/0xa00 [ 162.617306][ T6407] ? rt_spin_unlock+0x165/0x200 [ 162.617333][ T6407] copy_process+0x820/0x43f0 [ 162.617365][ T6407] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.617392][ T6407] ? rcu_is_watching+0x16/0xb0 [ 162.617417][ T6407] ? trace_hrtimer_start+0x82/0x200 [ 162.617441][ T6407] ? __pfx_copy_process+0x10/0x10 [ 162.617476][ T6407] kernel_clone+0x2d2/0x8d0 [ 162.617503][ T6407] ? __pfx_kernel_clone+0x10/0x10 [ 162.617545][ T6407] __x64_sys_clone+0x1b6/0x230 [ 162.617572][ T6407] ? __pfx___x64_sys_clone+0x10/0x10 [ 162.617624][ T6407] do_syscall_64+0x166/0x520 [ 162.617644][ T6407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.617662][ T6407] ? clear_bhb_loop+0x70/0xc0 [ 162.617684][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.617702][ T6407] RIP: 0033:0x7f01342be159 [ 162.617719][ T6407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.617734][ T6407] RSP: 002b:00007f0132515fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 162.617754][ T6407] RAX: ffffffffffffffda RBX: 00007f0134545fa0 RCX: 00007f01342be159 [ 162.617768][ T6407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.617779][ T6407] RBP: 00007f0132516090 R08: 0000000000000000 R09: 0000000000000000 [ 162.617790][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.617801][ T6407] R13: 00007f0134546038 R14: 00007f0134545fa0 R15: 00007ffc4bbf1ca8 [ 162.617831][ T6407] [ 163.198156][ T6421] netlink: zone id is out of range [ 163.201038][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 163.984406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 164.014404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 165.178601][ T6439] FAULT_INJECTION: forcing a failure. [ 165.178601][ T6439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.178790][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.1.146 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.178809][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.178819][ T6439] Call Trace: [ 165.178826][ T6439] [ 165.178847][ T6439] dump_stack_lvl+0xe8/0x150 [ 165.178894][ T6439] should_fail_ex+0x46b/0x600 [ 165.178920][ T6439] _copy_from_user+0x2d/0xb0 [ 165.178941][ T6439] sctp_setsockopt+0x1c4/0x12c0 [ 165.178966][ T6439] ? sock_common_setsockopt+0x36/0xc0 [ 165.178986][ T6439] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 165.179006][ T6439] do_sock_setsockopt+0x17c/0x1b0 [ 165.179032][ T6439] __x64_sys_setsockopt+0x143/0x1b0 [ 165.179059][ T6439] do_syscall_64+0x166/0x520 [ 165.179077][ T6439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.179096][ T6439] ? clear_bhb_loop+0x70/0xc0 [ 165.179117][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.179134][ T6439] RIP: 0033:0x7f07e1a8e159 [ 165.179151][ T6439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.179165][ T6439] RSP: 002b:00007f07dfce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.179184][ T6439] RAX: ffffffffffffffda RBX: 00007f07e1d15fa0 RCX: 00007f07e1a8e159 [ 165.179197][ T6439] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 165.179208][ T6439] RBP: 00007f07dfce6090 R08: 0000000000000008 R09: 0000000000000000 [ 165.179221][ T6439] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 165.179232][ T6439] R13: 00007f07e1d16038 R14: 00007f07e1d15fa0 R15: 00007ffc85cbf988 [ 165.179261][ T6439] [ 165.253972][ T6443] syz.2.147 uses obsolete (PF_INET,SOCK_PACKET) [ 165.872119][ T6449] input: syz1 as /devices/virtual/input/input11 [ 165.996143][ T6426] vlan2: entered allmulticast mode [ 166.002190][ T6426] bridge1: entered allmulticast mode [ 166.744637][ T6468] tipc: Started in network mode [ 166.744675][ T6468] tipc: Node identity 4, cluster identity 4711 [ 166.744687][ T6468] tipc: Node number set to 4 [ 166.754480][ T5593] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.934417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.944422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.954421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.964412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.974411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.984414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.994421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.518401][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 168.355315][ T5593] usb 2-1: Using ep0 maxpacket: 32 [ 168.357883][ T5593] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.357933][ T5593] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=7d.2a [ 168.375166][ T5593] usb 2-1: config 4 has an invalid interface number: 17 but max is 0 [ 168.375190][ T5593] usb 2-1: config 4 has no interface number 0 [ 168.375220][ T5593] usb 2-1: config 4 interface 17 has no altsetting 0 [ 168.379566][ T5593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.379618][ T5593] usb 2-1: Product: syz [ 168.379638][ T5593] usb 2-1: Manufacturer: syz [ 168.379651][ T5593] usb 2-1: SerialNumber: syz [ 169.243696][ T5593] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 169.246891][ T5593] gspca_sn9c2028: read1 error -71 [ 169.247352][ T5593] gspca_sn9c2028: read1 error -71 [ 169.247719][ T5593] gspca_sn9c2028: read1 error -71 [ 169.247796][ T5593] sn9c2028 2-1:4.17: probe with driver sn9c2028 failed with error -71 [ 169.276257][ T5593] usb 2-1: USB disconnect, device number 4 [ 170.064587][ T5593] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.108076][ T6488] input: syz1 as /devices/virtual/input/input12 [ 170.246472][ T5593] usb 5-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 170.247850][ T5593] usb 5-1: config 0 interface 0 altsetting 26 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.247878][ T5593] usb 5-1: config 0 interface 0 altsetting 26 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.247910][ T5593] usb 5-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.247935][ T5593] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.247966][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.277881][ T5593] usb 5-1: config 0 descriptor?? [ 170.390537][ T6490] netlink: zone id is out of range [ 170.408157][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 170.742512][ T6490] vlan3: entered allmulticast mode [ 170.745928][ T6490] bridge2: entered allmulticast mode [ 170.974595][ T1250] usb 5-1: USB disconnect, device number 4 [ 171.412090][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.158'. [ 171.413432][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.158'. [ 171.599253][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.158'. [ 171.608316][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.158'. [ 171.786677][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.170'. [ 171.787434][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.170'. [ 172.003598][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.158'. [ 172.003650][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.158'. [ 172.004079][ T6535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.173'. [ 172.492679][ T6543] input: syz1 as /devices/virtual/input/input13 [ 173.934691][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.090333][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 174.093185][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 174.093214][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 174.093236][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 174.093258][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 174.093280][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 64 [ 174.105321][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.105345][ T10] usb 5-1: Product: syz [ 174.105358][ T10] usb 5-1: Manufacturer: syz [ 174.105381][ T10] usb 5-1: SerialNumber: syz [ 174.177159][ T6564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.177629][ T6564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.177727][ T6564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.177883][ T6564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.178158][ T6564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.220799][ T10] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 174.640074][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 174.803442][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 174.928698][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 174.970146][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 175.099443][ T10] usb 5-1: USB disconnect, device number 5 [ 175.416272][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 175.435933][ T6579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.492034][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 175.522332][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 175.749343][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 175.756001][ T10] keyspan 5-1:1.0: device disconnected [ 175.991821][ T6598] input: syz1 as /devices/virtual/input/input14 [ 176.931713][ T6608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.936936][ T6608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.310547][ T6635] FAULT_INJECTION: forcing a failure. [ 179.310547][ T6635] name failslab, interval 1, probability 0, space 0, times 0 [ 179.328446][ T6635] CPU: 1 UID: 0 PID: 6635 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.328478][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.328489][ T6635] Call Trace: [ 179.328497][ T6635] [ 179.328505][ T6635] dump_stack_lvl+0xe8/0x150 [ 179.328536][ T6635] should_fail_ex+0x46b/0x600 [ 179.328563][ T6635] should_failslab+0xa8/0x100 [ 179.328590][ T6635] __kmalloc_noprof+0xfb/0x790 [ 179.328613][ T6635] ? tomoyo_encode+0x2ad/0x570 [ 179.328634][ T6635] ? tomoyo_encode+0x2ad/0x570 [ 179.328661][ T6635] tomoyo_encode+0x2ad/0x570 [ 179.328688][ T6635] tomoyo_realpath_from_path+0x5fa/0x640 [ 179.328719][ T6635] ? tomoyo_path_number_perm+0x219/0x5f0 [ 179.328738][ T6635] tomoyo_path_number_perm+0x246/0x5f0 [ 179.328760][ T6635] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 179.328777][ T6635] ? __lock_acquire+0x6df/0x2e40 [ 179.328814][ T6635] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.328833][ T6635] ? hook_file_ioctl+0x1f5/0x610 [ 179.328877][ T6635] ? __fget_files+0x2a/0x420 [ 179.328898][ T6635] ? __fget_files+0x2a/0x420 [ 179.328914][ T6635] ? __fget_files+0x3a8/0x420 [ 179.328930][ T6635] ? __fget_files+0x2a/0x420 [ 179.328951][ T6635] security_file_ioctl+0xc3/0x2a0 [ 179.328972][ T6635] __se_sys_ioctl+0x47/0x170 [ 179.328997][ T6635] do_syscall_64+0x166/0x520 [ 179.329015][ T6635] ? trace_irq_disable+0x3b/0x140 [ 179.329036][ T6635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.329054][ T6635] ? clear_bhb_loop+0x70/0xc0 [ 179.329077][ T6635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.329095][ T6635] RIP: 0033:0x7f07e1a8e159 [ 179.329112][ T6635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.329127][ T6635] RSP: 002b:00007f07dfca4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.329147][ T6635] RAX: ffffffffffffffda RBX: 00007f07e1d16180 RCX: 00007f07e1a8e159 [ 179.329160][ T6635] RDX: 0000200000000100 RSI: 0000000000008933 RDI: 0000000000000006 [ 179.329172][ T6635] RBP: 00007f07dfca4090 R08: 0000000000000000 R09: 0000000000000000 [ 179.329183][ T6635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.329194][ T6635] R13: 00007f07e1d16218 R14: 00007f07e1d16180 R15: 00007ffc85cbf988 [ 179.329227][ T6635] [ 179.333150][ T6635] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.504892][ T6635] __nla_validate_parse: 2 callbacks suppressed [ 179.504909][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 180.368810][ T6650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.423077][ T6645] warning: `syz.2.200' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.550196][ T6640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.595219][ T6679] input: syz1 as /devices/virtual/input/input15 [ 183.877475][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 184.034516][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 184.039536][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 184.039598][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=42.02 [ 184.040980][ T9] usb 1-1: config 178 has an invalid interface number: 242 but max is 0 [ 184.041003][ T9] usb 1-1: config 178 has no interface number 0 [ 184.041033][ T9] usb 1-1: config 178 interface 242 has no altsetting 0 [ 184.043807][ T9] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 184.043830][ T9] usb 1-1: Product: syz [ 184.043844][ T9] usb 1-1: Manufacturer: syz [ 184.043858][ T9] usb 1-1: SerialNumber: syz [ 185.889671][ T9] airspy 1-1:178.242: usb_control_msg() failed -71 request 09 [ 185.889771][ T9] airspy 1-1:178.242: Could not detect board [ 185.889887][ T9] airspy 1-1:178.242: probe with driver airspy failed with error -71 [ 185.899268][ T9] usb 1-1: USB disconnect, device number 2 [ 185.916406][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.918578][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.349890][ T6708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.730410][ T6702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.765869][ T5715] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 187.944608][ T5715] usb 4-1: device descriptor read/64, error -71 [ 187.967930][ T1250] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 188.112892][ T6725] netlink: 692 bytes leftover after parsing attributes in process `syz.4.219'. [ 188.154519][ T1250] usb 3-1: Using ep0 maxpacket: 16 [ 188.161171][ T1250] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.162732][ T1250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.192511][ T1250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.192897][ T1250] usb 3-1: Product: syz [ 188.192914][ T1250] usb 3-1: Manufacturer: syz [ 188.192928][ T1250] usb 3-1: SerialNumber: syz [ 188.227773][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 188.247014][ T1250] usb 3-1: config 0 descriptor?? [ 188.264318][ T1250] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 188.278461][ T1250] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 188.297658][ T5715] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.554481][ T5715] usb 4-1: device descriptor read/64, error -71 [ 188.743049][ T5715] usb usb4-port1: attempt power cycle [ 188.850228][ T6733] input: syz1 as /devices/virtual/input/input16 [ 188.957350][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.024083][ T1250] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 189.383293][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 189.477630][ T5715] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 189.585745][ T5715] usb 4-1: device descriptor read/8, error -71 [ 189.779331][ T9] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=ff.c8 [ 189.782668][ T9] usb 2-1: config 7 has an invalid interface number: 254 but max is 2 [ 189.782693][ T9] usb 2-1: config 7 has an invalid interface number: 179 but max is 2 [ 189.782712][ T9] usb 2-1: config 7 has an invalid interface number: 122 but max is 2 [ 189.782731][ T9] usb 2-1: config 7 has no interface number 0 [ 189.782746][ T9] usb 2-1: config 7 has no interface number 1 [ 189.782760][ T9] usb 2-1: config 7 has no interface number 2 [ 189.782826][ T9] usb 2-1: config 7 interface 254 altsetting 16 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 189.782852][ T9] usb 2-1: config 7 interface 254 altsetting 16 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 189.782888][ T9] usb 2-1: config 7 interface 179 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 189.782909][ T9] usb 2-1: config 7 interface 179 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 189.782941][ T9] usb 2-1: config 7 interface 122 altsetting 7 bulk endpoint 0xF has invalid maxpacket 8 [ 189.782963][ T9] usb 2-1: config 7 interface 122 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 189.782984][ T9] usb 2-1: config 7 interface 122 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 189.783005][ T9] usb 2-1: config 7 interface 122 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 189.783025][ T9] usb 2-1: config 7 interface 254 has no altsetting 0 [ 189.783042][ T9] usb 2-1: config 7 interface 179 has no altsetting 0 [ 189.783058][ T9] usb 2-1: config 7 interface 122 has no altsetting 0 [ 189.813571][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.813598][ T9] usb 2-1: Product: 樒 [ 189.813612][ T9] usb 2-1: Manufacturer: 莪瘭軖癲弩ე툿疈๖㽬뤁둿磓䩞奩쟊徟渎⊯﹣몙띵튃პ≬⏇儖į귽ẛ⪘ﺋ뵆架῟櫿횮ᚌ띢뜆嘜硭ल቞擵皿໾䙝ປ셌쒢篈㉄백丄㩜봦粄栕步ˆ穘쫅썌ስཝ骉ꓲ䈽牴뮁㧴ס䡧⤹缧矑눒砜虫臑⵻险葻樾㳸䂗禃謁ꎨꞰ蕞或 [ 189.813638][ T9] usb 2-1: SerialNumber: 慜䀁旇褾檊癛瀀钂锄곣ዕ뙗닼崸딦ᯆႨ㦬㭧햐朾㿬ᵉᰕ [ 190.035369][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 190.144527][ T5715] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.159591][ T9] usbhid 2-1:7.254: couldn't find an input interrupt endpoint [ 190.187613][ T5715] usb 4-1: device descriptor read/8, error -71 [ 190.301060][ T5715] usb usb4-port1: unable to enumerate USB device [ 190.312502][ T1250] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 190.312532][ T1250] em28xx 3-1:0.0: board has no eeprom [ 190.354241][ T9] usb 2-1: USB disconnect, device number 5 [ 190.609529][ T6746] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 191.456579][ T6751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.458668][ T6751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.486606][ T6745] netlink: 'syz.4.225': attribute type 5 has an invalid length. [ 191.486680][ T6745] netlink: 'syz.4.225': attribute type 9 has an invalid length. [ 191.486694][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 191.509879][ T1250] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 191.509904][ T1250] em28xx 3-1:0.0: dvb set to bulk mode. [ 191.538846][ T6747] capability: warning: `syz.4.225' uses deprecated v2 capabilities in a way that may be insecure [ 191.843865][ T5715] em28xx 3-1:0.0: Binding DVB extension [ 192.418413][ T6753] FAULT_INJECTION: forcing a failure. [ 192.418413][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 192.433117][ T6753] CPU: 1 UID: 0 PID: 6753 Comm: syz.0.227 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.433133][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.433140][ T6753] Call Trace: [ 192.433147][ T6753] [ 192.433152][ T6753] dump_stack_lvl+0xe8/0x150 [ 192.433216][ T6753] should_fail_ex+0x46b/0x600 [ 192.433231][ T6753] should_failslab+0xa8/0x100 [ 192.433246][ T6753] ? anon_vma_clone+0x3f3/0x9f0 [ 192.433258][ T6753] kmem_cache_alloc_noprof+0x9e/0x690 [ 192.433272][ T6753] ? __pfx_mas_preallocate+0x10/0x10 [ 192.433282][ T6753] ? anon_vma_clone+0x3f3/0x9f0 [ 192.433298][ T6753] anon_vma_clone+0x3f3/0x9f0 [ 192.433317][ T6753] __split_vma+0x3d8/0xa00 [ 192.433332][ T6753] ? __pfx___split_vma+0x10/0x10 [ 192.433348][ T6753] ? mas_find+0x6d9/0xcb0 [ 192.433361][ T6753] vms_gather_munmap_vmas+0x4e3/0x1370 [ 192.433384][ T6753] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 192.433401][ T6753] ? mas_walk+0x381/0x490 [ 192.433420][ T6753] mmap_region+0x940/0x2240 [ 192.433444][ T6753] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 192.433457][ T6753] ? __pfx_mmap_region+0x10/0x10 [ 192.433470][ T6753] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 192.433486][ T6753] ? __lock_acquire+0x6df/0x2e40 [ 192.433509][ T6753] ? __lock_acquire+0x6df/0x2e40 [ 192.433544][ T6753] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 192.433567][ T6753] ? kstrtoull+0x137/0x1d0 [ 192.433583][ T6753] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 192.433601][ T6753] ? cap_mmap_addr+0xaf/0x100 [ 192.433612][ T6753] ? bpf_lsm_mmap_addr+0x9/0x50 [ 192.433622][ T6753] ? security_mmap_addr+0x71/0x240 [ 192.433637][ T6753] do_mmap+0xe0e/0x1310 [ 192.433653][ T6753] ? __pfx_do_mmap+0x10/0x10 [ 192.433671][ T6753] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 192.433687][ T6753] ? rwbase_write_lock+0x550/0x720 [ 192.433704][ T6753] vm_mmap_pgoff+0x275/0x4e0 [ 192.433719][ T6753] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 192.433727][ T6753] ? ksys_write+0x248/0x270 [ 192.433740][ T6753] ? __pfx_ksys_write+0x10/0x10 [ 192.433754][ T6753] ? __x64_sys_mmap+0x7f/0x140 [ 192.433766][ T6753] do_syscall_64+0x166/0x520 [ 192.433776][ T6753] ? trace_irq_disable+0x3b/0x140 [ 192.433788][ T6753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.433798][ T6753] ? clear_bhb_loop+0x70/0xc0 [ 192.433816][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.433827][ T6753] RIP: 0033:0x7fbba034e159 [ 192.433838][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.433847][ T6753] RSP: 002b:00007fbb9e5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 192.433859][ T6753] RAX: ffffffffffffffda RBX: 00007fbba05d5fa0 RCX: 00007fbba034e159 [ 192.433866][ T6753] RDX: 0000000002000006 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 192.433873][ T6753] RBP: 00007fbb9e5a6090 R08: ffffffffffffffff R09: 00000000d0fb6000 [ 192.433880][ T6753] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 192.433886][ T6753] R13: 00007fbba05d6038 R14: 00007fbba05d5fa0 R15: 00007ffc7a57d8c8 [ 192.433902][ T6753] [ 192.861639][ T6760] ubi0: attaching mtd0 [ 192.885272][ T6760] ubi0: scanning is finished [ 193.556275][ T6713] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 193.624198][ T9] usb 3-1: USB disconnect, device number 4 [ 193.700912][ T5715] em28xx 3-1:0.0: Registering input extension [ 193.701278][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 193.716760][ T9] em28xx 3-1:0.0: Closing input extension [ 193.735621][ T6767] netlink: 692 bytes leftover after parsing attributes in process `syz.2.230'. [ 193.756084][ T6760] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 193.763215][ T6764] ubi0: attaching mtd0 [ 193.766029][ T6764] ubi0: scanning is finished [ 194.326754][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.433333][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 194.993607][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.452353][ T5723] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 195.458843][ T5723] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 195.458949][ T5723] ------------[ cut here ]------------ [ 195.458957][ T5723] no supported rates for sta 08:02:11:00:00:00 (0x1, band 0) in rate_mask 0x2 with flags 0x0 [ 195.458978][ T5723] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x5a2/0x8a0, CPU#0: kworker/0:6/5723 [ 195.502145][ T5723] Modules linked in: [ 195.507814][ T5723] CPU: 0 UID: 0 PID: 5723 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.517770][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.527974][ T5723] Workqueue: events cfg80211_conn_work [ 195.533462][ T5723] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 195.539763][ T5723] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 195.559444][ T5723] RSP: 0018:ffffc9000589e770 EFLAGS: 00010246 [ 195.565553][ T5723] RAX: 0000000000000000 RBX: ffff8880601ed364 RCX: 0000000000000000 [ 195.573522][ T5723] RDX: 0000000000000001 RSI: ffff8880601ed290 RDI: ffffffff8fc2aa60 [ 195.581537][ T5723] RBP: ffff8880631e1180 R08: 0000000000000002 R09: 0000000000000000 [ 195.589544][ T5723] R10: 0000000000000100 R11: 0000000000000004 R12: ffff888035645de8 [ 195.597546][ T5723] R13: dffffc0000000000 R14: ffffffff8fc2aa60 R15: ffff8880631e3db8 [ 195.605548][ T5723] FS: 0000000000000000(0000) GS:ffff888125bd6000(0000) knlGS:0000000000000000 [ 195.614520][ T5723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.621105][ T5723] CR2: 00007fbb9e563ff8 CR3: 0000000034052000 CR4: 00000000003526f0 [ 195.629116][ T5723] Call Trace: [ 195.632396][ T5723] [ 195.635373][ T5723] rate_control_send_low+0xf9/0x7b0 [ 195.640594][ T5723] rate_control_get_rate+0x20b/0x5f0 [ 195.645931][ T5723] ieee80211_tx_h_rate_ctrl+0xb06/0x1770 [ 195.651593][ T5723] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 195.657715][ T5723] ? ieee80211_queue_skb+0x1d89/0x2340 [ 195.663183][ T5723] invoke_tx_handlers_late+0xb8/0x1840 [ 195.668696][ T5723] ? sta_info_get+0x2ec/0x300 [ 195.673385][ T5723] ? invoke_tx_handlers_early+0xa48/0x1d20 [ 195.679252][ T5723] ieee80211_tx+0x2e5/0x4d0 [ 195.683768][ T5723] ? __pfx_ieee80211_tx+0x10/0x10 [ 195.688847][ T5723] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 195.694325][ T5723] ? ieee80211_xmit+0x2e5/0x3c0 [ 195.699219][ T5723] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 195.705227][ T5723] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 195.711039][ T5723] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 195.716363][ T5723] ieee80211_tx_skb_tid+0x29e/0x480 [ 195.721581][ T5723] ieee80211_send_auth+0x46e/0x600 [ 195.726749][ T5723] ? __pfx_ieee80211_send_auth+0x10/0x10 [ 195.732397][ T5723] ? __pfx__printk+0x10/0x10 [ 195.737044][ T5723] ieee80211_auth+0x682/0xb70 [ 195.741755][ T5723] ? ieee80211_sta_work+0x3981/0x3b60 [ 195.747216][ T5723] ? __pfx_ieee80211_auth+0x10/0x10 [ 195.752468][ T5723] ? ieee80211_prep_connection+0x660/0x14c0 [ 195.758441][ T5723] ieee80211_mgd_auth+0x1111/0x1810 [ 195.763688][ T5723] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 195.769306][ T5723] ? trace_cfg80211_return_bss+0x7c/0x1f0 [ 195.775091][ T5723] ? __cfg80211_get_bss+0x615/0x930 [ 195.780326][ T5723] cfg80211_mlme_auth+0x549/0x8f0 [ 195.785449][ T5723] cfg80211_conn_do_work+0x545/0xd70 [ 195.790776][ T5723] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 195.796727][ T5723] ? cfg80211_conn_work+0xcb/0x440 [ 195.801861][ T5723] ? cfg80211_conn_work+0x2a2/0x440 [ 195.807135][ T5723] cfg80211_conn_work+0x2d2/0x440 [ 195.812184][ T5723] ? __pfx_cfg80211_conn_work+0x10/0x10 [ 195.817781][ T5723] ? __lock_acquire+0x6df/0x2e40 [ 195.822746][ T5723] ? lock_acquire+0x115/0x350 [ 195.827499][ T5723] ? __lock_acquire+0x6df/0x2e40 [ 195.832546][ T5723] ? look_up_lock_class+0x57/0x110 [ 195.837733][ T5723] ? register_lock_class+0x31/0x2e0 [ 195.842960][ T5723] ? __lock_acquire+0x6df/0x2e40 [ 195.847966][ T5723] ? lapic_next_event+0x11/0x20 [ 195.852931][ T5723] ? clockevents_program_event+0x491/0x630 [ 195.858814][ T5723] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.863868][ T5723] ? lock_acquire+0x115/0x350 [ 195.868612][ T5723] ? rcu_is_watching+0x16/0xb0 [ 195.873396][ T5723] ? process_scheduled_works+0x97a/0x1630 [ 195.879183][ T5723] process_scheduled_works+0xc3d/0x1630 [ 195.884814][ T5723] ? __pfx_process_scheduled_works+0x10/0x10 [ 195.890816][ T5723] ? assign_work+0x3cf/0x5d0 [ 195.895480][ T5723] worker_thread+0xa47/0xfb0 [ 195.900102][ T5723] ? __kthread_parkme+0x71/0x1f0 [ 195.905104][ T5723] kthread+0x38b/0x470 [ 195.909179][ T5723] ? __pfx_worker_thread+0x10/0x10 [ 195.914297][ T5723] ? __pfx_kthread+0x10/0x10 [ 195.918943][ T5723] ret_from_fork+0x514/0xb70 [ 195.923546][ T5723] ? __pfx_ret_from_fork+0x10/0x10 [ 195.928731][ T5723] ? __switch_to+0xc89/0x1420 [ 195.933425][ T5723] ? __pfx_kthread+0x10/0x10 [ 195.938063][ T5723] ret_from_fork_asm+0x1a/0x30 [ 195.942949][ T5723] [ 195.946008][ T5723] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.953293][ T5723] CPU: 0 UID: 0 PID: 5723 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.963183][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.973244][ T5723] Workqueue: events cfg80211_conn_work [ 195.978724][ T5723] Call Trace: [ 195.982003][ T5723] [ 195.984938][ T5723] vpanic+0x56d/0xa60 [ 195.988927][ T5723] ? __pfx__printk+0x10/0x10 [ 195.993524][ T5723] ? __pfx_vpanic+0x10/0x10 [ 195.998029][ T5723] ? is_bpf_text_address+0x292/0x2b0 [ 196.003322][ T5723] ? is_bpf_text_address+0x26/0x2b0 [ 196.008533][ T5723] panic+0xc5/0xd0 [ 196.012267][ T5723] ? __pfx_panic+0x10/0x10 [ 196.016711][ T5723] ? ret_from_fork_asm+0x1a/0x30 [ 196.021654][ T5723] __warn+0x315/0x4c0 [ 196.025634][ T5723] ? __rate_control_send_low+0x5a2/0x8a0 [ 196.031279][ T5723] ? __rate_control_send_low+0x5a2/0x8a0 [ 196.036923][ T5723] __report_bug+0x276/0x570 [ 196.041436][ T5723] ? __rate_control_send_low+0x5a2/0x8a0 [ 196.047081][ T5723] ? __pfx___report_bug+0x10/0x10 [ 196.052125][ T5723] ? __lock_acquire+0x6df/0x2e40 [ 196.057071][ T5723] report_bug_entry+0x19b/0x290 [ 196.061926][ T5723] ? __rate_control_send_low+0x638/0x8a0 [ 196.067566][ T5723] ? __rate_control_send_low+0x63d/0x8a0 [ 196.073215][ T5723] handle_bug+0xce/0x200 [ 196.077483][ T5723] exc_invalid_op+0x1a/0x50 [ 196.082004][ T5723] asm_exc_invalid_op+0x1a/0x20 [ 196.086881][ T5723] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 196.093142][ T5723] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 196.112767][ T5723] RSP: 0018:ffffc9000589e770 EFLAGS: 00010246 [ 196.118839][ T5723] RAX: 0000000000000000 RBX: ffff8880601ed364 RCX: 0000000000000000 [ 196.126821][ T5723] RDX: 0000000000000001 RSI: ffff8880601ed290 RDI: ffffffff8fc2aa60 [ 196.134803][ T5723] RBP: ffff8880631e1180 R08: 0000000000000002 R09: 0000000000000000 [ 196.142779][ T5723] R10: 0000000000000100 R11: 0000000000000004 R12: ffff888035645de8 [ 196.150749][ T5723] R13: dffffc0000000000 R14: ffffffff8fc2aa60 R15: ffff8880631e3db8 [ 196.158773][ T5723] rate_control_send_low+0xf9/0x7b0 [ 196.164002][ T5723] rate_control_get_rate+0x20b/0x5f0 [ 196.169313][ T5723] ieee80211_tx_h_rate_ctrl+0xb06/0x1770 [ 196.174994][ T5723] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 196.181088][ T5723] ? ieee80211_queue_skb+0x1d89/0x2340 [ 196.186565][ T5723] invoke_tx_handlers_late+0xb8/0x1840 [ 196.192038][ T5723] ? sta_info_get+0x2ec/0x300 [ 196.196724][ T5723] ? invoke_tx_handlers_early+0xa48/0x1d20 [ 196.202545][ T5723] ieee80211_tx+0x2e5/0x4d0 [ 196.207059][ T5723] ? __pfx_ieee80211_tx+0x10/0x10 [ 196.212112][ T5723] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 196.217584][ T5723] ? ieee80211_xmit+0x2e5/0x3c0 [ 196.222455][ T5723] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 196.228455][ T5723] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 196.234275][ T5723] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 196.239570][ T5723] ieee80211_tx_skb_tid+0x29e/0x480 [ 196.244783][ T5723] ieee80211_send_auth+0x46e/0x600 [ 196.249975][ T5723] ? __pfx_ieee80211_send_auth+0x10/0x10 [ 196.255621][ T5723] ? __pfx__printk+0x10/0x10 [ 196.260225][ T5723] ieee80211_auth+0x682/0xb70 [ 196.264916][ T5723] ? ieee80211_sta_work+0x3981/0x3b60 [ 196.270304][ T5723] ? __pfx_ieee80211_auth+0x10/0x10 [ 196.275504][ T5723] ? ieee80211_prep_connection+0x660/0x14c0 [ 196.281410][ T5723] ieee80211_mgd_auth+0x1111/0x1810 [ 196.286648][ T5723] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 196.292192][ T5723] ? trace_cfg80211_return_bss+0x7c/0x1f0 [ 196.297920][ T5723] ? __cfg80211_get_bss+0x615/0x930 [ 196.303129][ T5723] cfg80211_mlme_auth+0x549/0x8f0 [ 196.308174][ T5723] cfg80211_conn_do_work+0x545/0xd70 [ 196.313475][ T5723] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 196.319401][ T5723] ? cfg80211_conn_work+0xcb/0x440 [ 196.324527][ T5723] ? cfg80211_conn_work+0x2a2/0x440 [ 196.329737][ T5723] cfg80211_conn_work+0x2d2/0x440 [ 196.334778][ T5723] ? __pfx_cfg80211_conn_work+0x10/0x10 [ 196.340331][ T5723] ? __lock_acquire+0x6df/0x2e40 [ 196.345285][ T5723] ? lock_acquire+0x115/0x350 [ 196.349970][ T5723] ? __lock_acquire+0x6df/0x2e40 [ 196.354918][ T5723] ? look_up_lock_class+0x57/0x110 [ 196.360029][ T5723] ? register_lock_class+0x31/0x2e0 [ 196.365238][ T5723] ? __lock_acquire+0x6df/0x2e40 [ 196.370183][ T5723] ? lapic_next_event+0x11/0x20 [ 196.375036][ T5723] ? clockevents_program_event+0x491/0x630 [ 196.380850][ T5723] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.385893][ T5723] ? lock_acquire+0x115/0x350 [ 196.390586][ T5723] ? rcu_is_watching+0x16/0xb0 [ 196.395358][ T5723] ? process_scheduled_works+0x97a/0x1630 [ 196.401083][ T5723] process_scheduled_works+0xc3d/0x1630 [ 196.406670][ T5723] ? __pfx_process_scheduled_works+0x10/0x10 [ 196.412664][ T5723] ? assign_work+0x3cf/0x5d0 [ 196.417260][ T5723] worker_thread+0xa47/0xfb0 [ 196.421870][ T5723] ? __kthread_parkme+0x71/0x1f0 [ 196.426828][ T5723] kthread+0x38b/0x470 [ 196.430901][ T5723] ? __pfx_worker_thread+0x10/0x10 [ 196.436013][ T5723] ? __pfx_kthread+0x10/0x10 [ 196.440603][ T5723] ret_from_fork+0x514/0xb70 [ 196.445201][ T5723] ? __pfx_ret_from_fork+0x10/0x10 [ 196.450308][ T5723] ? __switch_to+0xc89/0x1420 [ 196.454996][ T5723] ? __pfx_kthread+0x10/0x10 [ 196.459589][ T5723] ret_from_fork_asm+0x1a/0x30 [ 196.464367][ T5723] [ 196.467647][ T5723] Kernel Offset: disabled [ 196.471965][ T5723] Rebooting in 86400 seconds..