last executing test programs: 37.726939726s ago: executing program 2 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x8931, 0x80002) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0xfff, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffa}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x80003ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) (async) r1 = gettid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setpgid(r1, r2) 35.057733453s ago: executing program 4 (id=187): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @beacon=[@NL80211_ATTR_IE={0x28, 0x2a, [@perr={0x84, 0xf, {0x6, 0x1, [{{}, @device_b, 0x6b07, @void, 0x25}]}}, @supported_rates={0x1, 0x1, [{0x48}]}, @mesh_chsw={0x76, 0x6, {0xa, 0x1, 0x8, 0x9}}, @mesh_chsw={0x76, 0x6, {0xe, 0x7, 0x3a, 0x3}}]}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000880) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 34.252685032s ago: executing program 2 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x9, 0x3) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 32.662037708s ago: executing program 2 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x9, 0x3) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 31.989177786s ago: executing program 4 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010000000000000000000a0000000000000000000000140011"], 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 31.69305114s ago: executing program 0 (id=198): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendfile(r2, r1, 0x0, 0x20000) listen(0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x20000) 31.280742623s ago: executing program 4 (id=200): syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030300000e0000000000110000070800", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x28}}, 0x14014) 30.047316004s ago: executing program 1 (id=202): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x9, 0x7, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000640), 0xc, 0x2) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000700)={0x23, 0x3, 0x11, 0x1, 0x0, 0x3e8, 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x13}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004800) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.959418013s ago: executing program 0 (id=203): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xffff, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/79) write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}, 0x11, 0x9, 0x4}, {{}, 0x4, 0x8, 0x1}, {{0x77359400}, 0x11, 0x925, 0x4}, {{0x77359400}, 0x1f, 0x100, 0x20459916}, {{0x77359400}, 0x3, 0x9, 0xffff}, {{}, 0x1f, 0x4, 0x7c4}], 0x90) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3e8, 0x400, 0xfffffffb, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000084) r2 = dup2(r0, r1) sendmsg$nl_generic(r2, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x238, 0x2e, 0x20, 0x70bd26, 0x25dfdbfd, {0xd}, [@nested={0x1c, 0x13c, 0x0, 0x1, [@typed={0x13, 0x14e, 0x0, 0x0, @str='[{@-\xff/&@(^{#}-\x00'}, @nested={0x4, 0x113}]}, @nested={0x13b, 0x128, 0x0, 0x1, [@nested={0x4, 0x5}, @generic="03ed9c6a58c9403bb2208cc9dbf150ab70c71f5bdef92d86569b2a278d21897609289022a817d1fecc60f7d8fead75b0cd8ab79e4066baedabf9c914bb9b96e6fd1f986246ed25d1b81a040178dbe28d98b72e373ff1e81414d9a13a7bb7d0f9a4959ebc6b19986e2bc8ac142df97be9aded5f13ef611af632892aea2cadc46b80e5a067ec9a460b8552ae348d7cf0ac1c42f01e27ba83bd53edf268dcd9ef6a1c2b8ff4ae105ec3ae0fd6138d", @typed={0x8, 0x14, 0x0, 0x0, @u32=0xfffffff8}, @nested={0x4, 0x14f}, @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@multicast1}, @generic="0060d60d8c4e448db841b68e6fc93bf36dd4465467fe3224d70e6b749ae6890fecb87a7219dc2b70b8c4325080ae68dd35349a66c842d4557af3ce63d723f63900b24678ae9fe9d3c352dcdbc3cb7ab092a99985eff2f82537b3bad31ac863c87211de8c95eefbc0633dea45dd4f", @nested={0x4, 0xe0}]}, @generic="68b3b2ca2cbde1cbb462c37655d28a2359861a9cef953611497bdccabecd63e53b3b64818c30bc1d591161e457014be75cda6de2d4014b36d78ab20d73df319e7df1f623e69b9dea0fd0cc6031773c2ff66bbcd39f723dfdd7446f9f650da5c9d92775d8d81bfe6c3879d6f6da674dee09a4c27f1fbcd61723b067445b039906f1e5d94115f0e6effda50210dcb808fac4047a707f0414a6d8426959c04abc5fe8c50c19c65e28874b8ac59db892649583866883714c279a4a6ce08863c799d4ed5b09c25f4c90a854e2dd71"]}, 0x238}, 0x1, 0x0, 0x0, 0x40010}, 0x20008001) r3 = syz_clone(0x1010a00, &(0x7f0000001980)="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", 0x1000, &(0x7f0000002980), &(0x7f00000029c0), &(0x7f0000002a00)="7d34df39841ee781b3d5d0c5425ea60642eb8509a58029c9ac8c2d76584bce3818fa105d3fc43f9ebfd130be220b29702ab774b7acf8a16c8c6214a192570a01b5cd901b5ffdfcfb6190091504ef80b3208fe2f02cedeadccd8128418297d106ec0160239da70876175f9e17dc99ec7f985500187478c985653d01") ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000002a80)=r3) 29.897333213s ago: executing program 3 (id=204): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$pid(0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 29.65919224s ago: executing program 3 (id=205): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x3f, 0x107, 0x1, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}]}, 0x18}}, 0xc814) (fail_nth: 1) 29.639013137s ago: executing program 0 (id=206): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x125042, 0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in6=@ipv4}}, {{@in=@loopback}}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.115765348s ago: executing program 0 (id=207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000008c0)={'macvlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "6bd5cd02564f02baa6f0bebffdfae62afcb1fd7181456afb25ec29769ccfbab0", "3fd06d696e33edf2548c47a6ff34f2e528f318224e461f3782aae3d6a86be6b4", "168bc75f89267387dfe8f726649ab412c8ca4807008b540eccf6cbc20509a46a", "d010df955837f8ba675efba4d90d6941354f8b57b5e0f933bebd023dfd8556c7", "4c5138db1c62592d6f60fe50e538dc820105b16582d6dee0c3fd5fa47b3a23c0", "e9115c6266848f73be343ab4", 0x3, 0x9, 0x3, 0xfa, 0x5}}) 27.227764884s ago: executing program 2 (id=208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000008c0)={'macvlan0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "6bd5cd02564f02baa6f0bebffdfae62afcb1fd7181456afb25ec29769ccfbab0", "3fd06d696e33edf2548c47a6ff34f2e20eb400", "168bc75f89267387dfe8f726649ab412c8ca4807008b540eccf6cbc20000a46a", "d010df955837f8ba675efba4d90d6941354f8b57b5e0f933bebd023dfd8556c7", "4c5138db1c62592d6f60fe50e538dc820105b16582d6dee0c3fd5fa47b3a23c0", "0000fb070000009700", 0xab, 0x9, 0x4, 0xfa, 0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) r2 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x15, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x10240, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r3, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x2020, &(0x7f0000008dc0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$video4linux(&(0x7f0000000200), 0x5, 0x2000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r6, 0xc040563d, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x1, {0xa, 0x6, 0x9, 0xc42}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340), &(0x7f00000003c0), 0x2, 0x0) socketpair(0xa, 0x1, 0x0, 0x0) getpid() bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 27.176899265s ago: executing program 3 (id=209): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./gadget/ep1in-bulk\x00', 0x222000, 0x120) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8, 0x5, 0x1c, 0xea39, 0xd7e, 0x0}) ioprio_get$pid(0x3, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="000000000902190001010080320904000001ff00000007058102400000090219000101", 0x23) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) pipe(&(0x7f0000000200)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27.065698847s ago: executing program 0 (id=210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 27.057496614s ago: executing program 4 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000340)=0x8000, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) map_shadow_stack(&(0x7f0000295000/0x9000)=nil, 0x9000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe64e431205f2e760c69669c", 0x24) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close(0x3) 26.879173858s ago: executing program 3 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x70}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x9, 0x3) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 25.409185849s ago: executing program 3 (id=213): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendfile(r2, r1, 0x0, 0x20000) listen(0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x20000) 25.071119826s ago: executing program 0 (id=214): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)={0xfc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @beacon=[@NL80211_ATTR_IE={0xde, 0x2a, [@perr={0x84, 0xf, {0x6, 0x1, [{{}, @device_b, 0x6b07, @void, 0x25}]}}, @supported_rates={0x1, 0x1, [{0x48}]}, @measure_req={0x26, 0xb4, {0xf, 0xf, 0xa9, "98efac3bc06212143a79e805829e0163d9c93a62cfdb1c8fe992578102f4883c3ae6df757a1205362b5ce589be30c07211ec3a68792c21310e7c8b3305d04ddaa169cce3a2db437e2b760c4dcb63cec222ba27bbada2049ce7d6b694e867ce0711237c536b1b25d360cd72179931bc344557a056f95cb1df538e01b5ac6c72bf6743f722c884dd833056ace9bf5d45b21800ed77482d53c1cd275ba69258f03b340e162c0965b9494ea9dcbc626f868373"}}, @mesh_chsw={0x76, 0x6, {0xa, 0x1, 0x8, 0x9}}, @mesh_chsw={0x76, 0x6, {0xe, 0x7, 0x3a, 0x3}}]}]]}, 0xfc}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000880) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 24.872319919s ago: executing program 2 (id=215): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$pid(0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 24.665327646s ago: executing program 2 (id=216): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x4000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x300) clock_adjtime(0x0, &(0x7f0000000200)={0x19ae, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000006, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x42}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x7c}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0xc9, 0x77, 0x6c, 0x8, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x4, 0x40, 0x8, "", [{{0x9, 0x4, 0xe2, 0xf9, 0x0, 0xd4, 0x17, 0xdf, 0x1}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x14, 0x0}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x423}}, {0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "04da4f233f96d2f9f74ccb0e6b8ed198ebef81fb61f9ce880cf86305eff9bc32f5cb2e31afd0b997700750bc2d065b072a29c6a19212da8291499f1eb8f928876b00ad819ed19ed290c60a121ccf9eaf994f211fc7745bdf93cd9ce478abda00849b0a30301fc643fed55f6b1a62083b8cdda887bdb2c5df578863fe31d9b20e3b8b"}}]}) 23.484641861s ago: executing program 3 (id=217): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000600)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000211000/0x1000)=nil) munlockall() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc01"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@local, 0x2}, @host, 0x2, 0x8000000000000000, 0x9, 0x7, 0x6eca, 0x2, 0xffffffff}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r0, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x700, 0x10, 0x0, 0x8a, {{0x1f, 0x4, 0x2, 0x3f, 0x7c, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010101, {[@generic={0x94, 0x4, "c96f"}, @rr={0x7, 0xf, 0x90, [@local, @multicast1, @loopback]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x27, 0xb4, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @remote, @multicast1, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x21, [@empty, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010102, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}}) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0x0, r4, 0x36}, 0x10) 21.860885645s ago: executing program 4 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x70}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x9, 0x3) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 19.782307772s ago: executing program 1 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c0065a84a1c0aa1c42e039725fb1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 1) 19.777534882s ago: executing program 4 (id=220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="090225bd7000fedbdf250100000008000800000000000500020002000000140007000000000000000000000000000000000105000400010000000400050014000700fc0200000000000000000000000000010500040002000000080008007f00000108000600e000000108000b00", @ANYRES32, @ANYBLOB="08000800ac001411050002000a"], 0xa0}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r1, 0x72b}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000340)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100003042cbd70003f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88100000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001b000200000091aa5354e41aa12cc31043d19b"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4000}, 0x0) 19.165132346s ago: executing program 1 (id=221): syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030300000e0000000000110000070800", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x28}}, 0x14014) 17.189578181s ago: executing program 1 (id=222): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./gadget/ep1in-bulk\x00', 0x222000, 0x120) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8, 0x5, 0x1c, 0xea39, 0xd7e, 0x0}) ioprio_get$pid(0x3, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="000000000902190001010080320904000001ff00000007058102400000090219000101", 0x23) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) pipe(&(0x7f0000000200)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 16.833337679s ago: executing program 1 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x70}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x9, 0x3) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 15.350014814s ago: executing program 1 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0xc0040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000005, 0x7fffffff, 0x0, 0x1, 0x0, 0x7fffffffff7fffff, 0xffffffffffffff70, 0xa, 0x7f, 0x0, 0x80, 0x3, 0x6, 0x1, 0x1], 0xeeee0000, 0x300}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14296f"], 0x14}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.487481999s ago: executing program 32 (id=214): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)={0xfc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @beacon=[@NL80211_ATTR_IE={0xde, 0x2a, [@perr={0x84, 0xf, {0x6, 0x1, [{{}, @device_b, 0x6b07, @void, 0x25}]}}, @supported_rates={0x1, 0x1, [{0x48}]}, @measure_req={0x26, 0xb4, {0xf, 0xf, 0xa9, "98efac3bc06212143a79e805829e0163d9c93a62cfdb1c8fe992578102f4883c3ae6df757a1205362b5ce589be30c07211ec3a68792c21310e7c8b3305d04ddaa169cce3a2db437e2b760c4dcb63cec222ba27bbada2049ce7d6b694e867ce0711237c536b1b25d360cd72179931bc344557a056f95cb1df538e01b5ac6c72bf6743f722c884dd833056ace9bf5d45b21800ed77482d53c1cd275ba69258f03b340e162c0965b9494ea9dcbc626f868373"}}, @mesh_chsw={0x76, 0x6, {0xa, 0x1, 0x8, 0x9}}, @mesh_chsw={0x76, 0x6, {0xe, 0x7, 0x3a, 0x3}}]}]]}, 0xfc}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000880) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.023821211s ago: executing program 33 (id=216): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x4000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x300) clock_adjtime(0x0, &(0x7f0000000200)={0x19ae, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000006, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x42}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x7c}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0xc9, 0x77, 0x6c, 0x8, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x4, 0x40, 0x8, "", [{{0x9, 0x4, 0xe2, 0xf9, 0x0, 0xd4, 0x17, 0xdf, 0x1}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x14, 0x0}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x423}}, {0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "04da4f233f96d2f9f74ccb0e6b8ed198ebef81fb61f9ce880cf86305eff9bc32f5cb2e31afd0b997700750bc2d065b072a29c6a19212da8291499f1eb8f928876b00ad819ed19ed290c60a121ccf9eaf994f211fc7745bdf93cd9ce478abda00849b0a30301fc643fed55f6b1a62083b8cdda887bdb2c5df578863fe31d9b20e3b8b"}}]}) 8.021814166s ago: executing program 34 (id=217): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000600)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000211000/0x1000)=nil) munlockall() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc01"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@local, 0x2}, @host, 0x2, 0x8000000000000000, 0x9, 0x7, 0x6eca, 0x2, 0xffffffff}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r0, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x700, 0x10, 0x0, 0x8a, {{0x1f, 0x4, 0x2, 0x3f, 0x7c, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010101, {[@generic={0x94, 0x4, "c96f"}, @rr={0x7, 0xf, 0x90, [@local, @multicast1, @loopback]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x27, 0xb4, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @remote, @multicast1, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x21, [@empty, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010102, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}}) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0x0, r4, 0x36}, 0x10) 4.017776987s ago: executing program 35 (id=220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="090225bd7000fedbdf250100000008000800000000000500020002000000140007000000000000000000000000000000000105000400010000000400050014000700fc0200000000000000000000000000010500040002000000080008007f00000108000600e000000108000b00", @ANYRES32, @ANYBLOB="08000800ac001411050002000a"], 0xa0}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r1, 0x72b}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000340)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100003042cbd70003f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88100000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001b000200000091aa5354e41aa12cc31043d19b"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4000}, 0x0) 0s ago: executing program 36 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0xc0040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000005, 0x7fffffff, 0x0, 0x1, 0x0, 0x7fffffffff7fffff, 0xffffffffffffff70, 0xa, 0x7f, 0x0, 0x80, 0x3, 0x6, 0x1, 0x1], 0xeeee0000, 0x300}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14296f"], 0x14}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 74.670490][ T5574] cgroup: Unknown subsys name 'net' [ 74.980887][ T5574] cgroup: Unknown subsys name 'cpuset' [ 75.036574][ T5574] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.644504][ T5574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.545652][ T5591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.576549][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.586650][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.596236][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.597802][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.598839][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.602769][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.618891][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.623434][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.640960][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.647847][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.654411][ T5591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.672451][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.680579][ T5595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.694657][ T5595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.695729][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.699712][ T5595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.700414][ T5595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.717790][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.750577][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.751496][ T5595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.770647][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.780620][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.789757][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.799585][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.778170][ T59] Bluetooth: hci4: command tx timeout [ 81.856350][ T59] Bluetooth: hci0: command tx timeout [ 81.858137][ T59] Bluetooth: hci1: command tx timeout [ 81.936301][ T5595] Bluetooth: hci2: command tx timeout [ 81.936728][ T59] Bluetooth: hci3: command tx timeout [ 82.213063][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.214021][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.214192][ T5589] bridge_slave_0: entered allmulticast mode [ 82.217425][ T5589] bridge_slave_0: entered promiscuous mode [ 82.222739][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.222859][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.223002][ T5586] bridge_slave_0: entered allmulticast mode [ 82.228381][ T5586] bridge_slave_0: entered promiscuous mode [ 82.267780][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.268200][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.268358][ T5588] bridge_slave_0: entered allmulticast mode [ 82.270795][ T5588] bridge_slave_0: entered promiscuous mode [ 82.276990][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.277102][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.277251][ T5589] bridge_slave_1: entered allmulticast mode [ 82.280210][ T5589] bridge_slave_1: entered promiscuous mode [ 82.283153][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.283270][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.283413][ T5586] bridge_slave_1: entered allmulticast mode [ 82.285907][ T5586] bridge_slave_1: entered promiscuous mode [ 82.332917][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.333032][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.333179][ T5588] bridge_slave_1: entered allmulticast mode [ 82.339321][ T5588] bridge_slave_1: entered promiscuous mode [ 82.376970][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.377122][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.377284][ T5587] bridge_slave_0: entered allmulticast mode [ 82.379724][ T5587] bridge_slave_0: entered promiscuous mode [ 82.441632][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.441780][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.441932][ T5587] bridge_slave_1: entered allmulticast mode [ 82.444379][ T5587] bridge_slave_1: entered promiscuous mode [ 82.448851][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.448974][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.449132][ T5590] bridge_slave_0: entered allmulticast mode [ 82.451971][ T5590] bridge_slave_0: entered promiscuous mode [ 82.484790][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.492813][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.518212][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.520582][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.520758][ T5590] bridge_slave_1: entered allmulticast mode [ 82.523783][ T5590] bridge_slave_1: entered promiscuous mode [ 82.530848][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.534894][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.543410][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.691475][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.727165][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.778003][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.781433][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.803134][ T5589] team0: Port device team_slave_0 added [ 82.807340][ T5586] team0: Port device team_slave_0 added [ 82.826760][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.829467][ T5588] team0: Port device team_slave_0 added [ 82.835682][ T5589] team0: Port device team_slave_1 added [ 82.839127][ T5586] team0: Port device team_slave_1 added [ 82.871221][ T5588] team0: Port device team_slave_1 added [ 82.900069][ T5587] team0: Port device team_slave_0 added [ 82.952500][ T5587] team0: Port device team_slave_1 added [ 82.955198][ T5590] team0: Port device team_slave_0 added [ 82.974127][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.976213][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.976243][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.008442][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.008460][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.008482][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.043568][ T5590] team0: Port device team_slave_1 added [ 83.045361][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.045376][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.045400][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.050227][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.050243][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.050267][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.053005][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.053019][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.053063][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.095019][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.095036][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.095060][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.128236][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.128254][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.128277][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.168664][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.168682][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.168705][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.170542][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.170555][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.170578][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.248461][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.248480][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.248504][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.345314][ T5589] hsr_slave_0: entered promiscuous mode [ 83.348665][ T5589] hsr_slave_1: entered promiscuous mode [ 83.361195][ T5586] hsr_slave_0: entered promiscuous mode [ 83.362431][ T5586] hsr_slave_1: entered promiscuous mode [ 83.363350][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 83.363946][ T5586] Cannot create hsr debugfs directory [ 83.462336][ T5588] hsr_slave_0: entered promiscuous mode [ 83.464492][ T5588] hsr_slave_1: entered promiscuous mode [ 83.465384][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 83.465407][ T5588] Cannot create hsr debugfs directory [ 83.496683][ T5587] hsr_slave_0: entered promiscuous mode [ 83.497943][ T5587] hsr_slave_1: entered promiscuous mode [ 83.499148][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 83.499172][ T5587] Cannot create hsr debugfs directory [ 83.564457][ T5590] hsr_slave_0: entered promiscuous mode [ 83.567031][ T5590] hsr_slave_1: entered promiscuous mode [ 83.567909][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 83.567931][ T5590] Cannot create hsr debugfs directory [ 83.856250][ T5595] Bluetooth: hci4: command tx timeout [ 83.936863][ T5595] Bluetooth: hci1: command tx timeout [ 83.936989][ T59] Bluetooth: hci0: command tx timeout [ 84.018678][ T5595] Bluetooth: hci2: command tx timeout [ 84.019044][ T59] Bluetooth: hci3: command tx timeout [ 84.839157][ T5586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.889765][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.901303][ T5586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.951458][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.959807][ T5586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.994884][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.013666][ T5586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.042936][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.152760][ T5588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.190743][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.198517][ T5588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.229124][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.246499][ T5588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.291788][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.311551][ T5588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.350684][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.471450][ T5587] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.511615][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.519754][ T5587] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.569578][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.573818][ T5587] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.606953][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.625376][ T5587] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.661536][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.791683][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.833717][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.848838][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.878743][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.887988][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.921659][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.946554][ T59] Bluetooth: hci4: command tx timeout [ 85.958739][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.990313][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.016175][ T59] Bluetooth: hci1: command tx timeout [ 86.026826][ T59] Bluetooth: hci0: command tx timeout [ 86.059594][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.096158][ T59] Bluetooth: hci3: command tx timeout [ 86.098810][ T59] Bluetooth: hci2: command tx timeout [ 86.148902][ T5590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.180711][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.194909][ T5590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.219959][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.233142][ T5590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.264351][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.275793][ T5590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.299532][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.314232][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.364540][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.365062][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.392359][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.436900][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.437062][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.513592][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.544370][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.544603][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.589572][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.604792][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.608789][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.703038][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.739619][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.793213][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.793613][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.839614][ T10] cfg80211: failed to load regulatory.db [ 86.915106][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.915313][ T3371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.993241][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.040069][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.059549][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.060216][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.110701][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.112803][ T3371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.248814][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.331270][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.332043][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.380400][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.382365][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.852440][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.016133][ T59] Bluetooth: hci4: command tx timeout [ 88.100159][ T59] Bluetooth: hci0: command tx timeout [ 88.100236][ T59] Bluetooth: hci1: command tx timeout [ 88.166986][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.177590][ T59] Bluetooth: hci3: command tx timeout [ 88.177678][ T5595] Bluetooth: hci2: command tx timeout [ 88.342394][ T5586] veth0_vlan: entered promiscuous mode [ 88.438422][ T5586] veth1_vlan: entered promiscuous mode [ 88.612693][ T5588] veth0_vlan: entered promiscuous mode [ 88.665401][ T5588] veth1_vlan: entered promiscuous mode [ 88.687853][ T5586] veth0_macvtap: entered promiscuous mode [ 88.705547][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.733777][ T5586] veth1_macvtap: entered promiscuous mode [ 88.782322][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.900427][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.910711][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.943377][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.963392][ T5588] veth0_macvtap: entered promiscuous mode [ 89.013652][ T5588] veth1_macvtap: entered promiscuous mode [ 89.253441][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.279428][ T5589] veth0_vlan: entered promiscuous mode [ 89.412017][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.473895][ T5589] veth1_vlan: entered promiscuous mode [ 89.493068][ T5590] veth0_vlan: entered promiscuous mode [ 89.620227][ T3398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.625592][ T5590] veth1_vlan: entered promiscuous mode [ 89.634266][ T3398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.741829][ T5587] veth0_vlan: entered promiscuous mode [ 89.904690][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.915825][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.960939][ T5587] veth1_vlan: entered promiscuous mode [ 89.975401][ T5589] veth0_macvtap: entered promiscuous mode [ 90.002257][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.013770][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.054593][ T5589] veth1_macvtap: entered promiscuous mode [ 90.185152][ T5590] veth0_macvtap: entered promiscuous mode [ 90.204575][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.206168][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.239757][ T5590] veth1_macvtap: entered promiscuous mode [ 90.253074][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.361176][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.369229][ T5587] veth0_macvtap: entered promiscuous mode [ 90.405709][ T5587] veth1_macvtap: entered promiscuous mode [ 90.429968][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.482650][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.669951][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.789141][ T5784] jffs2: notice: (5784) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.003212][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.704153][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.720281][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.338528][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.346831][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.350758][ T5793] sctp: [Deprecated]: syz.2.7 (pid 5793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.350758][ T5793] Use struct sctp_sack_info instead [ 92.525464][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.526978][ T3371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.528049][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.528553][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.528736][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.529155][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.574576][ T5797] FAULT_INJECTION: forcing a failure. [ 92.574576][ T5797] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.574618][ T5797] CPU: 1 UID: 0 PID: 5797 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 92.574638][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.574656][ T5797] Call Trace: [ 92.574663][ T5797] [ 92.574670][ T5797] dump_stack_lvl+0xe8/0x150 [ 92.574715][ T5797] should_fail_ex+0x46b/0x600 [ 92.574739][ T5797] _copy_from_user+0x2d/0xb0 [ 92.574760][ T5797] packet_setsockopt+0x9d1/0x1510 [ 92.574783][ T5797] ? __pfx_packet_setsockopt+0x10/0x10 [ 92.574800][ T5797] ? vfs_write+0x9e0/0xbb0 [ 92.574826][ T5797] ? __pfx_vfs_write+0x10/0x10 [ 92.574846][ T5797] ? do_sys_openat2+0x14e/0x200 [ 92.574868][ T5797] ? kmem_cache_free+0x187/0x6d0 [ 92.574891][ T5797] ? do_sys_openat2+0x14e/0x200 [ 92.574924][ T5797] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 92.574948][ T5797] ? __pfx_packet_setsockopt+0x10/0x10 [ 92.574967][ T5797] do_sock_setsockopt+0x17c/0x1b0 [ 92.574994][ T5797] __x64_sys_setsockopt+0x143/0x1b0 [ 92.575019][ T5797] do_syscall_64+0x166/0x520 [ 92.575038][ T5797] ? trace_irq_disable+0x3b/0x140 [ 92.575057][ T5797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.575075][ T5797] ? clear_bhb_loop+0x70/0xc0 [ 92.575097][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.575114][ T5797] RIP: 0033:0x7fbb44b1e159 [ 92.575135][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.575149][ T5797] RSP: 002b:00007fbb42d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.575173][ T5797] RAX: ffffffffffffffda RBX: 00007fbb44da5fa0 RCX: 00007fbb44b1e159 [ 92.575186][ T5797] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 92.575196][ T5797] RBP: 00007fbb42d76090 R08: 0000000000000010 R09: 0000000000000000 [ 92.575207][ T5797] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.575218][ T5797] R13: 00007fbb44da6038 R14: 00007fbb44da5fa0 R15: 00007ffe55ed4748 [ 92.575246][ T5797] [ 92.697374][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.887461][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.887532][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.956197][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.956261][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.967383][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.968021][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.229689][ T5806] FAULT_INJECTION: forcing a failure. [ 93.229689][ T5806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.229789][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: syz.0.12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 93.229808][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.229816][ T5806] Call Trace: [ 93.229822][ T5806] [ 93.229828][ T5806] dump_stack_lvl+0xe8/0x150 [ 93.229858][ T5806] should_fail_ex+0x46b/0x600 [ 93.229882][ T5806] _copy_from_user+0x2d/0xb0 [ 93.229905][ T5806] ___sys_sendmsg+0x1c6/0x360 [ 93.229928][ T5806] ? __lock_acquire+0x6df/0x2e40 [ 93.229952][ T5806] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.230005][ T5806] ? __fget_files+0x2a/0x420 [ 93.230022][ T5806] ? __fget_files+0x3a8/0x420 [ 93.230047][ T5806] __x64_sys_sendmsg+0x1b7/0x290 [ 93.230072][ T5806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.230112][ T5806] do_syscall_64+0x166/0x520 [ 93.230130][ T5806] ? trace_irq_disable+0x3b/0x140 [ 93.230150][ T5806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.230167][ T5806] ? clear_bhb_loop+0x70/0xc0 [ 93.230188][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.230205][ T5806] RIP: 0033:0x7f1e0cdee159 [ 93.230222][ T5806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.230236][ T5806] RSP: 002b:00007f1e0b046028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.230255][ T5806] RAX: ffffffffffffffda RBX: 00007f1e0d075fa0 RCX: 00007f1e0cdee159 [ 93.230268][ T5806] RDX: 0000000000000000 RSI: 00002000000093c0 RDI: 0000000000000003 [ 93.230279][ T5806] RBP: 00007f1e0b046090 R08: 0000000000000000 R09: 0000000000000000 [ 93.230291][ T5806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.230301][ T5806] R13: 00007f1e0d076038 R14: 00007f1e0d075fa0 R15: 00007ffca5ba3b48 [ 93.230329][ T5806] [ 93.436544][ T5804] ip6gre0: entered promiscuous mode [ 93.459010][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.459085][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.508548][ T5800] ip6gre0: left promiscuous mode [ 93.616747][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.720612][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.900884][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.903021][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.903206][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.903415][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.903790][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.904124][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.148872][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.373480][ T5822] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.518433][ T5828] FAULT_INJECTION: forcing a failure. [ 94.518433][ T5828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.548689][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 94.548715][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.548723][ T5828] Call Trace: [ 94.548730][ T5828] [ 94.548736][ T5828] dump_stack_lvl+0xe8/0x150 [ 94.548765][ T5828] should_fail_ex+0x46b/0x600 [ 94.548787][ T5828] _copy_to_user+0x31/0xb0 [ 94.548807][ T5828] simple_read_from_buffer+0xe1/0x170 [ 94.548825][ T5828] proc_fail_nth_read+0x1be/0x230 [ 94.548846][ T5828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.548866][ T5828] ? rw_verify_area+0x250/0x4d0 [ 94.548885][ T5828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.548900][ T5828] vfs_read+0x219/0xa90 [ 94.548919][ T5828] ? __pfx_vfs_read+0x10/0x10 [ 94.548935][ T5828] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 94.548953][ T5828] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.548968][ T5828] ? mutex_lock_nested+0x152/0x1d0 [ 94.548988][ T5828] ? fdget_pos+0x252/0x320 [ 94.549013][ T5828] ksys_read+0x156/0x270 [ 94.549032][ T5828] ? __pfx_ksys_read+0x10/0x10 [ 94.549059][ T5828] do_syscall_64+0x166/0x520 [ 94.549076][ T5828] ? trace_irq_disable+0x3b/0x140 [ 94.549107][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.549125][ T5828] ? clear_bhb_loop+0x70/0xc0 [ 94.549146][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.549162][ T5828] RIP: 0033:0x7fa10f52e98e [ 94.549179][ T5828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.549193][ T5828] RSP: 002b:00007fa10d783fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.549214][ T5828] RAX: ffffffffffffffda RBX: 00007fa10d7846c0 RCX: 00007fa10f52e98e [ 94.549227][ T5828] RDX: 000000000000000f RSI: 00007fa10d7840a0 RDI: 0000000000000005 [ 94.549239][ T5828] RBP: 00007fa10d784090 R08: 0000000000000000 R09: 0000000000000000 [ 94.549250][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.549260][ T5828] R13: 00007fa10f7f6218 R14: 00007fa10f7f6180 R15: 00007fff3ca42038 [ 94.549290][ T5828] [ 94.644642][ T1084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.761809][ T3398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.181991][ T5829] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.771256][ T5842] netlink: 'syz.0.20': attribute type 4 has an invalid length. [ 95.823277][ T5844] netlink: 'syz.0.20': attribute type 4 has an invalid length. [ 96.268600][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.456046][ T1084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.489848][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.503379][ T5318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.504094][ T5725] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.621924][ T5861] FAULT_INJECTION: forcing a failure. [ 96.621924][ T5861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.622011][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 96.622031][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.622039][ T5861] Call Trace: [ 96.622045][ T5861] [ 96.622051][ T5861] dump_stack_lvl+0xe8/0x150 [ 96.622080][ T5861] should_fail_ex+0x46b/0x600 [ 96.622104][ T5861] _copy_to_user+0x31/0xb0 [ 96.622127][ T5861] simple_read_from_buffer+0xe1/0x170 [ 96.622150][ T5861] proc_fail_nth_read+0x1be/0x230 [ 96.622173][ T5861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.622195][ T5861] ? rw_verify_area+0x250/0x4d0 [ 96.622219][ T5861] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 96.622237][ T5861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.622256][ T5861] vfs_read+0x219/0xa90 [ 96.622281][ T5861] ? __pfx_vfs_read+0x10/0x10 [ 96.622301][ T5861] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 96.622321][ T5861] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 96.622338][ T5861] ? mutex_lock_nested+0x152/0x1d0 [ 96.622360][ T5861] ? fdget_pos+0x252/0x320 [ 96.622384][ T5861] ksys_read+0x156/0x270 [ 96.622405][ T5861] ? __pfx_ksys_read+0x10/0x10 [ 96.622434][ T5861] do_syscall_64+0x166/0x520 [ 96.622451][ T5861] ? trace_irq_disable+0x3b/0x140 [ 96.622472][ T5861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.622488][ T5861] ? clear_bhb_loop+0x70/0xc0 [ 96.622509][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.622526][ T5861] RIP: 0033:0x7f1e0cdae98e [ 96.622542][ T5861] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.622556][ T5861] RSP: 002b:00007f1e0b024fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.622575][ T5861] RAX: ffffffffffffffda RBX: 00007f1e0b0256c0 RCX: 00007f1e0cdae98e [ 96.622587][ T5861] RDX: 000000000000000f RSI: 00007f1e0b0250a0 RDI: 0000000000000004 [ 96.622599][ T5861] RBP: 00007f1e0b025090 R08: 0000000000000000 R09: 0000000000000000 [ 96.622609][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.622620][ T5861] R13: 00007f1e0d076128 R14: 00007f1e0d076090 R15: 00007ffca5ba3b48 [ 96.622647][ T5861] [ 96.685373][ T31] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 96.746371][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 96.747194][ T5725] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 96.792462][ T5318] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 96.832518][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.867648][ T5725] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 96.867677][ T5725] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 96.867695][ T5725] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 96.867715][ T5725] usb 4-1: config 1 has no interface number 0 [ 96.867768][ T5725] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 160, changing to 11 [ 96.867794][ T5725] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 96.867834][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.972237][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.987523][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.009158][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.017259][ T31] usb 2-1: Product: syz [ 97.017279][ T31] usb 2-1: Manufacturer: syz [ 97.017291][ T31] usb 2-1: SerialNumber: syz [ 97.281758][ T5318] usb 3-1: config 0 descriptor?? [ 97.611241][ T5877] FAULT_INJECTION: forcing a failure. [ 97.611241][ T5877] name failslab, interval 1, probability 0, space 0, times 1 [ 97.624270][ T5318] cp210x 3-1:0.0: cp210x converter detected [ 97.674559][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 97.674585][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.674594][ T5877] Call Trace: [ 97.674601][ T5877] [ 97.674608][ T5877] dump_stack_lvl+0xe8/0x150 [ 97.674639][ T5877] should_fail_ex+0x46b/0x600 [ 97.674659][ T5877] should_failslab+0xa8/0x100 [ 97.674680][ T5877] __kmalloc_noprof+0xfb/0x790 [ 97.674698][ T5877] ? tomoyo_realpath_from_path+0xef/0x640 [ 97.674714][ T5877] ? tomoyo_realpath_from_path+0xef/0x640 [ 97.674735][ T5877] tomoyo_realpath_from_path+0xef/0x640 [ 97.674759][ T5877] ? tomoyo_path_number_perm+0x219/0x5f0 [ 97.674774][ T5877] tomoyo_path_number_perm+0x246/0x5f0 [ 97.674791][ T5877] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.674806][ T5877] ? __lock_acquire+0x6df/0x2e40 [ 97.674835][ T5877] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 97.674851][ T5877] ? hook_file_ioctl+0x1f5/0x610 [ 97.674888][ T5877] ? __fget_files+0x2a/0x420 [ 97.674905][ T5877] ? __fget_files+0x2a/0x420 [ 97.674918][ T5877] ? __fget_files+0x3a8/0x420 [ 97.674931][ T5877] ? __fget_files+0x2a/0x420 [ 97.674949][ T5877] security_file_ioctl+0xc3/0x2a0 [ 97.674967][ T5877] __se_sys_ioctl+0x47/0x170 [ 97.674990][ T5877] do_syscall_64+0x166/0x520 [ 97.675004][ T5877] ? trace_irq_disable+0x3b/0x140 [ 97.675020][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.675034][ T5877] ? clear_bhb_loop+0x70/0xc0 [ 97.675052][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.675066][ T5877] RIP: 0033:0x7f1e0cdee159 [ 97.675081][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.675094][ T5877] RSP: 002b:00007f1e0b046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.675114][ T5877] RAX: ffffffffffffffda RBX: 00007f1e0d075fa0 RCX: 00007f1e0cdee159 [ 97.675126][ T5877] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 97.675136][ T5877] RBP: 00007f1e0b046090 R08: 0000000000000000 R09: 0000000000000000 [ 97.675146][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.675156][ T5877] R13: 00007f1e0d076038 R14: 00007f1e0d075fa0 R15: 00007ffca5ba3b48 [ 97.675193][ T5877] [ 97.675201][ T5877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.021425][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.038290][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.115375][ T5725] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 98.140371][ T5882] FAULT_INJECTION: forcing a failure. [ 98.140371][ T5882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.154922][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.4.31 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.154946][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.154955][ T5882] Call Trace: [ 98.154963][ T5882] [ 98.154970][ T5882] dump_stack_lvl+0xe8/0x150 [ 98.155000][ T5882] should_fail_ex+0x46b/0x600 [ 98.155021][ T5882] _copy_from_user+0x2d/0xb0 [ 98.155040][ T5882] do_tcp_setsockopt+0x504/0x1f80 [ 98.155063][ T5882] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 98.155081][ T5882] ? preempt_schedule_common+0x7f/0xd0 [ 98.155097][ T5882] ? preempt_schedule_thunk+0x16/0x40 [ 98.155119][ T5882] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 98.155135][ T5882] ? mutex_lock_nested+0x152/0x1d0 [ 98.155154][ T5882] ? sock_common_setsockopt+0x36/0xc0 [ 98.155170][ T5882] ? tcp_setsockopt+0x3d/0xe0 [ 98.155187][ T5882] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 98.155204][ T5882] smc_setsockopt+0x232/0xb00 [ 98.155224][ T5882] ? __pfx_smc_setsockopt+0x10/0x10 [ 98.155242][ T5882] ? __fget_files+0x2a/0x420 [ 98.155256][ T5882] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 98.155279][ T5882] ? __pfx_smc_setsockopt+0x10/0x10 [ 98.155297][ T5882] do_sock_setsockopt+0x17c/0x1b0 [ 98.155321][ T5882] __x64_sys_setsockopt+0x143/0x1b0 [ 98.155341][ T5882] do_syscall_64+0x166/0x520 [ 98.155355][ T5882] ? trace_irq_disable+0x3b/0x140 [ 98.155371][ T5882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.155385][ T5882] ? clear_bhb_loop+0x70/0xc0 [ 98.155402][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.155416][ T5882] RIP: 0033:0x7fbffbd7e159 [ 98.155432][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.155444][ T5882] RSP: 002b:00007fbff9fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.155462][ T5882] RAX: ffffffffffffffda RBX: 00007fbffc005fa0 RCX: 00007fbffbd7e159 [ 98.155473][ T5882] RDX: 0000000000000020 RSI: 0000000000000006 RDI: 0000000000000003 [ 98.155481][ T5882] RBP: 00007fbff9fd6090 R08: 00000000000000d8 R09: 0000000000000000 [ 98.155489][ T5882] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 98.155499][ T5882] R13: 00007fbffc006038 R14: 00007fbffc005fa0 R15: 00007fff189699f8 [ 98.155525][ T5882] [ 98.453113][ T5883] syzkaller1: entered promiscuous mode [ 98.454037][ T5883] syzkaller1: entered allmulticast mode [ 98.466455][ T5318] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 98.466523][ T5318] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 98.678452][ T31] ttusb_dec_send_command: command bulk message failed: error -71 [ 98.717278][ T31] ttusb-dec 2-1:1.0: probe with driver ttusb-dec failed with error -71 [ 98.870823][ T5725] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 99.019712][ T5892] netlink: 'syz.0.32': attribute type 29 has an invalid length. [ 99.389505][ T31] usb 2-1: USB disconnect, device number 2 [ 99.619305][ T3371] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.905722][ T5318] usb 3-1: cp210x converter now attached to ttyUSB0 [ 99.974329][ T5725] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 99.977568][ T5318] usb 3-1: USB disconnect, device number 2 [ 100.223399][ T5899] FAULT_INJECTION: forcing a failure. [ 100.223399][ T5899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.238400][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.238423][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.238432][ T5899] Call Trace: [ 100.238439][ T5899] [ 100.238446][ T5899] dump_stack_lvl+0xe8/0x150 [ 100.238474][ T5899] should_fail_ex+0x46b/0x600 [ 100.238495][ T5899] _copy_from_user+0x2d/0xb0 [ 100.238514][ T5899] ___sys_sendmsg+0x1c6/0x360 [ 100.238534][ T5899] ? __lock_acquire+0x6df/0x2e40 [ 100.238559][ T5899] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.238607][ T5899] ? __fget_files+0x2a/0x420 [ 100.238620][ T5899] ? __fget_files+0x3a8/0x420 [ 100.238641][ T5899] __x64_sys_sendmsg+0x1b7/0x290 [ 100.238661][ T5899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.238693][ T5899] do_syscall_64+0x166/0x520 [ 100.238708][ T5899] ? trace_irq_disable+0x3b/0x140 [ 100.238725][ T5899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.238739][ T5899] ? clear_bhb_loop+0x70/0xc0 [ 100.238757][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.238772][ T5899] RIP: 0033:0x7fa10f56e159 [ 100.238788][ T5899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.238799][ T5899] RSP: 002b:00007fa10d7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.238815][ T5899] RAX: ffffffffffffffda RBX: 00007fa10f7f5fa0 RCX: 00007fa10f56e159 [ 100.238824][ T5899] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 100.238832][ T5899] RBP: 00007fa10d7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.238841][ T5899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.238849][ T5899] R13: 00007fa10f7f6038 R14: 00007fa10f7f5fa0 R15: 00007fff3ca42038 [ 100.238872][ T5899] [ 100.731029][ T5896] bond1: option min_links: invalid value (18446744073709551612) [ 100.745566][ T5896] bond1: option min_links: allowed values 0 - 2147483647 [ 100.909759][ T5318] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 101.091448][ T5318] cp210x 3-1:0.0: device disconnected [ 102.040636][ T5896] bond1 (unregistering): Released all slaves [ 103.128225][ T5921] FAULT_INJECTION: forcing a failure. [ 103.128225][ T5921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.128688][ T5921] CPU: 1 UID: 0 PID: 5921 Comm: syz.2.41 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.128711][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.128721][ T5921] Call Trace: [ 103.128728][ T5921] [ 103.128736][ T5921] dump_stack_lvl+0xe8/0x150 [ 103.128771][ T5921] should_fail_ex+0x46b/0x600 [ 103.128793][ T5921] _copy_from_user+0x2d/0xb0 [ 103.128813][ T5921] ___sys_sendmsg+0x1c6/0x360 [ 103.128836][ T5921] ? __lock_acquire+0x6df/0x2e40 [ 103.128860][ T5921] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.128911][ T5921] ? __fget_files+0x2a/0x420 [ 103.128926][ T5921] ? __fget_files+0x3a8/0x420 [ 103.128948][ T5921] __x64_sys_sendmsg+0x1b7/0x290 [ 103.128973][ T5921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.129013][ T5921] do_syscall_64+0x166/0x520 [ 103.129033][ T5921] ? trace_irq_disable+0x3b/0x140 [ 103.129053][ T5921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.129071][ T5921] ? clear_bhb_loop+0x70/0xc0 [ 103.129092][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.129109][ T5921] RIP: 0033:0x7fbb44b1e159 [ 103.129126][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.129140][ T5921] RSP: 002b:00007fbb42d76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.129159][ T5921] RAX: ffffffffffffffda RBX: 00007fbb44da5fa0 RCX: 00007fbb44b1e159 [ 103.129172][ T5921] RDX: 0000000020000400 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 103.129187][ T5921] RBP: 00007fbb42d76090 R08: 0000000000000000 R09: 0000000000000000 [ 103.129198][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.129208][ T5921] R13: 00007fbb44da6038 R14: 00007fbb44da5fa0 R15: 00007ffe55ed4748 [ 103.129236][ T5921] [ 103.260972][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 103.260995][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 104.269215][ T1238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.605984][ T1238] usb 5-1: Using ep0 maxpacket: 16 [ 104.741552][ T784] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.752531][ T1238] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.752630][ T1238] usb 5-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 104.773566][ T1238] usb 5-1: config 1 has an invalid interface number: 169 but max is 0 [ 104.773593][ T1238] usb 5-1: config 1 has no interface number 0 [ 104.773662][ T1238] usb 5-1: config 1 interface 169 has no altsetting 0 [ 104.794916][ T1238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.794942][ T1238] usb 5-1: Product: syz [ 104.794956][ T1238] usb 5-1: Manufacturer: syz [ 104.794970][ T1238] usb 5-1: SerialNumber: syz [ 104.931482][ T66] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.958347][ T3371] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.488230][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.812947][ T5318] usb 4-1: USB disconnect, device number 2 [ 105.844936][ T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 105.961154][ T5318] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 105.994370][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.138573][ T1238] io_ti 5-1:1.169: required endpoints missing [ 106.181056][ T5710] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.214501][ T31] usb 2-1: config 0 descriptor?? [ 106.223395][ T1238] usb 5-1: USB disconnect, device number 2 [ 106.300342][ T31] cp210x 2-1:0.0: cp210x converter detected [ 106.327742][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 106.332814][ T5710] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 106.376153][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.464590][ T5710] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.464695][ T5710] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.508816][ T5710] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 106.508906][ T5710] usb 3-1: Product: syz [ 106.508920][ T5710] usb 3-1: Manufacturer: syz [ 106.587449][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 106.603179][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.627675][ T9] usb 1-1: config 0 descriptor?? [ 106.701450][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 106.906367][ T5710] hub 3-1:4.0: USB hub found [ 107.017322][ T31] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 107.017447][ T31] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 107.104692][ T5710] hub 3-1:4.0: 4 ports detected [ 107.110108][ T5710] hub 3-1:4.0: insufficient power available to use all downstream ports [ 107.237818][ T31] usb 2-1: cp210x converter now attached to ttyUSB0 [ 107.348527][ T31] usb 2-1: USB disconnect, device number 3 [ 107.349983][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.369298][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.505997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.515999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.525999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.535993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.555998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.752463][ T9] gspca_sunplus: reg_w_riv err -110 [ 107.755896][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 107.875994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.885999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.895973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.905986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.915979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.330075][ T5710] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 109.843353][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.844505][ T31] cp210x 2-1:0.0: device disconnected [ 109.974379][ T5576] usb 1-1: USB disconnect, device number 2 [ 112.185345][ T31] usb 3-1: USB disconnect, device number 3 [ 112.489907][ T5970] FAULT_INJECTION: forcing a failure. [ 112.489907][ T5970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.490007][ T5970] CPU: 1 UID: 0 PID: 5970 Comm: syz.4.54 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.490024][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.490032][ T5970] Call Trace: [ 112.490039][ T5970] [ 112.490046][ T5970] dump_stack_lvl+0xe8/0x150 [ 112.490075][ T5970] should_fail_ex+0x46b/0x600 [ 112.490100][ T5970] _copy_from_user+0x2d/0xb0 [ 112.490122][ T5970] ___sys_sendmsg+0x1c6/0x360 [ 112.490145][ T5970] ? __lock_acquire+0x6df/0x2e40 [ 112.490169][ T5970] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.490222][ T5970] ? __fget_files+0x2a/0x420 [ 112.490238][ T5970] ? __fget_files+0x3a8/0x420 [ 112.490263][ T5970] __x64_sys_sendmsg+0x1b7/0x290 [ 112.490288][ T5970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.490329][ T5970] do_syscall_64+0x166/0x520 [ 112.490350][ T5970] ? trace_irq_disable+0x3b/0x140 [ 112.490370][ T5970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.490388][ T5970] ? clear_bhb_loop+0x70/0xc0 [ 112.490410][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.490427][ T5970] RIP: 0033:0x7fbffbd7e159 [ 112.490444][ T5970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.490457][ T5970] RSP: 002b:00007fbff9fd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.490477][ T5970] RAX: ffffffffffffffda RBX: 00007fbffc005fa0 RCX: 00007fbffbd7e159 [ 112.490489][ T5970] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 112.490500][ T5970] RBP: 00007fbff9fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.490512][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.490522][ T5970] R13: 00007fbffc006038 R14: 00007fbffc005fa0 R15: 00007fff189699f8 [ 112.490548][ T5970] [ 112.822771][ T5972] FAULT_INJECTION: forcing a failure. [ 112.822771][ T5972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.837096][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.837122][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.837146][ T5972] Call Trace: [ 112.837154][ T5972] [ 112.837161][ T5972] dump_stack_lvl+0xe8/0x150 [ 112.837194][ T5972] should_fail_ex+0x46b/0x600 [ 112.837219][ T5972] _copy_from_user+0x2d/0xb0 [ 112.837242][ T5972] __sys_connect+0x156/0x470 [ 112.837264][ T5972] ? __pfx___sys_connect+0x10/0x10 [ 112.837293][ T5972] ? __pfx_ksys_write+0x10/0x10 [ 112.837316][ T5972] __x64_sys_connect+0x7a/0x90 [ 112.837334][ T5972] do_syscall_64+0x166/0x520 [ 112.837351][ T5972] ? trace_irq_disable+0x3b/0x140 [ 112.837369][ T5972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.837386][ T5972] ? clear_bhb_loop+0x70/0xc0 [ 112.837407][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.837424][ T5972] RIP: 0033:0x7f1e0cdee159 [ 112.837440][ T5972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.837454][ T5972] RSP: 002b:00007f1e0b046028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 112.837473][ T5972] RAX: ffffffffffffffda RBX: 00007f1e0d075fa0 RCX: 00007f1e0cdee159 [ 112.837486][ T5972] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 112.837497][ T5972] RBP: 00007f1e0b046090 R08: 0000000000000000 R09: 0000000000000000 [ 112.837510][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.837520][ T5972] R13: 00007f1e0d076038 R14: 00007f1e0d075fa0 R15: 00007ffca5ba3b48 [ 112.837547][ T5972] [ 113.357942][ T5979] FAULT_INJECTION: forcing a failure. [ 113.357942][ T5979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.375448][ T5979] CPU: 0 UID: 0 PID: 5979 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.375475][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.375486][ T5979] Call Trace: [ 113.375494][ T5979] [ 113.375501][ T5979] dump_stack_lvl+0xe8/0x150 [ 113.375541][ T5979] should_fail_ex+0x46b/0x600 [ 113.375566][ T5979] _copy_from_user+0x2d/0xb0 [ 113.375588][ T5979] __sys_bpf+0x2e7/0xd90 [ 113.375620][ T5979] ? __pfx___sys_bpf+0x10/0x10 [ 113.375645][ T5979] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.375671][ T5979] ? rt_mutex_slowunlock+0x219/0x460 [ 113.375712][ T5979] ? ksys_write+0x248/0x270 [ 113.375734][ T5979] ? __pfx_ksys_write+0x10/0x10 [ 113.375759][ T5979] __x64_sys_bpf+0xba/0xd0 [ 113.375784][ T5979] do_syscall_64+0x166/0x520 [ 113.375803][ T5979] ? trace_irq_disable+0x3b/0x140 [ 113.375824][ T5979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.375842][ T5979] ? clear_bhb_loop+0x70/0xc0 [ 113.375864][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.375881][ T5979] RIP: 0033:0x7f1e0cdee159 [ 113.375898][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.375913][ T5979] RSP: 002b:00007f1e0b046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.375936][ T5979] RAX: ffffffffffffffda RBX: 00007f1e0d075fa0 RCX: 00007f1e0cdee159 [ 113.375946][ T5979] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 113.375957][ T5979] RBP: 00007f1e0b046090 R08: 0000000000000000 R09: 0000000000000000 [ 113.375967][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.375976][ T5979] R13: 00007f1e0d076038 R14: 00007f1e0d075fa0 R15: 00007ffca5ba3b48 [ 113.376001][ T5979] [ 113.468537][ T5981] FAULT_INJECTION: forcing a failure. [ 113.468537][ T5981] name failslab, interval 1, probability 0, space 0, times 0 [ 113.468568][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.4.58 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.468588][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.468598][ T5981] Call Trace: [ 113.468605][ T5981] [ 113.468613][ T5981] dump_stack_lvl+0xe8/0x150 [ 113.468645][ T5981] should_fail_ex+0x46b/0x600 [ 113.468670][ T5981] should_failslab+0xa8/0x100 [ 113.468696][ T5981] __kmalloc_noprof+0xfb/0x790 [ 113.468718][ T5981] ? tomoyo_realpath_from_path+0xef/0x640 [ 113.468739][ T5981] ? tomoyo_realpath_from_path+0xef/0x640 [ 113.468766][ T5981] tomoyo_realpath_from_path+0xef/0x640 [ 113.468795][ T5981] ? tomoyo_path_number_perm+0x219/0x5f0 [ 113.468812][ T5981] tomoyo_path_number_perm+0x246/0x5f0 [ 113.468833][ T5981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.468849][ T5981] ? __lock_acquire+0x6df/0x2e40 [ 113.468885][ T5981] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.468902][ T5981] ? hook_file_ioctl+0x1f5/0x610 [ 113.468943][ T5981] ? __fget_files+0x2a/0x420 [ 113.468963][ T5981] ? __fget_files+0x2a/0x420 [ 113.468978][ T5981] ? __fget_files+0x3a8/0x420 [ 113.468994][ T5981] ? __fget_files+0x2a/0x420 [ 113.469013][ T5981] security_file_ioctl+0xc3/0x2a0 [ 113.469046][ T5981] __se_sys_ioctl+0x47/0x170 [ 113.469071][ T5981] do_syscall_64+0x166/0x520 [ 113.469089][ T5981] ? trace_irq_disable+0x3b/0x140 [ 113.469108][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.469126][ T5981] ? clear_bhb_loop+0x70/0xc0 [ 113.469147][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.469164][ T5981] RIP: 0033:0x7fbffbd7e159 [ 113.469181][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.469196][ T5981] RSP: 002b:00007fbff9fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.469215][ T5981] RAX: ffffffffffffffda RBX: 00007fbffc005fa0 RCX: 00007fbffbd7e159 [ 113.469227][ T5981] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000004 [ 113.469239][ T5981] RBP: 00007fbff9fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.469249][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.469260][ T5981] R13: 00007fbffc006038 R14: 00007fbffc005fa0 R15: 00007fff189699f8 [ 113.469289][ T5981] [ 113.480966][ T5981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.372042][ T5686] kernel write not supported for file /snd/seq (pid: 5686 comm: kworker/0:5) [ 114.905430][ T5992] netlink: 72 bytes leftover after parsing attributes in process `syz.4.62'. [ 115.637564][ T6006] MTD: Couldn't look up './dev/mtdblock0': -2 [ 116.786125][ T5724] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.942217][ T5724] usb 3-1: Using ep0 maxpacket: 16 [ 116.951557][ T5724] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 116.958259][ T5724] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 116.958287][ T5724] usb 3-1: config 0 has no interface number 0 [ 116.958330][ T5724] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 116.958355][ T5724] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 116.964885][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.964910][ T5724] usb 3-1: Product: syz [ 116.964924][ T5724] usb 3-1: Manufacturer: syz [ 116.964937][ T5724] usb 3-1: SerialNumber: syz [ 117.051149][ T5724] usb 3-1: config 0 descriptor?? [ 117.052278][ T6029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.052475][ T6029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.091514][ T6039] ÿ: renamed from bond_slave_0 (while UP) [ 117.227257][ T6044] MTD: Couldn't look up './dev/mtdblock0': -2 [ 117.308911][ T6029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.316427][ T6029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.327790][ T5710] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 117.498872][ T5710] usb 4-1: not running at top speed; connect to a high speed hub [ 117.499017][ T5710] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 117.519060][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.519217][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.544184][ T5724] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 117.778893][ T5724] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 219 [ 117.819124][ T6054] FAULT_INJECTION: forcing a failure. [ 117.819124][ T6054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.819214][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.4.81 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.819235][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.819245][ T6054] Call Trace: [ 117.819252][ T6054] [ 117.819266][ T6054] dump_stack_lvl+0xe8/0x150 [ 117.819294][ T6054] should_fail_ex+0x46b/0x600 [ 117.819313][ T6054] _copy_from_user+0x2d/0xb0 [ 117.819339][ T6054] ___sys_sendmsg+0x1c6/0x360 [ 117.819362][ T6054] ? __lock_acquire+0x6df/0x2e40 [ 117.819388][ T6054] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.819440][ T6054] ? __fget_files+0x2a/0x420 [ 117.819457][ T6054] ? __fget_files+0x3a8/0x420 [ 117.819482][ T6054] __x64_sys_sendmsg+0x1b7/0x290 [ 117.819506][ T6054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.819548][ T6054] do_syscall_64+0x166/0x520 [ 117.819566][ T6054] ? trace_irq_disable+0x3b/0x140 [ 117.819587][ T6054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.819604][ T6054] ? clear_bhb_loop+0x70/0xc0 [ 117.819625][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.819642][ T6054] RIP: 0033:0x7fbffbd7e159 [ 117.819658][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.819673][ T6054] RSP: 002b:00007fbff9fd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.819692][ T6054] RAX: ffffffffffffffda RBX: 00007fbffc005fa0 RCX: 00007fbffbd7e159 [ 117.819704][ T6054] RDX: 0000000004000094 RSI: 0000200000000100 RDI: 0000000000000003 [ 117.819716][ T6054] RBP: 00007fbff9fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.819726][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.819744][ T6054] R13: 00007fbffc006038 R14: 00007fbffc005fa0 R15: 00007fff189699f8 [ 117.819772][ T6054] [ 117.870396][ T5710] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 118.364016][ T5710] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 118.377002][ T5710] uvcvideo 4-1:1.1: No frame descriptor found for the default format. [ 118.377072][ T5710] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 118.399993][ T5710] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -22 [ 118.565881][ T6067] Zero length message leads to an empty skb [ 118.629769][ T5710] usb 4-1: USB disconnect, device number 3 [ 118.798925][ T1238] usb 3-1: USB disconnect, device number 4 [ 119.100704][ T6081] MTD: Couldn't look up './dev/mtdblock0': -2 [ 119.162703][ T6080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.90'. [ 119.763989][ T6104] netlink: 64 bytes leftover after parsing attributes in process `syz.1.98'. ¼[ 123.690765][ T6137] jffs2: notice: (6137) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 123.708807][ T6135] netlink: 'syz.2.106': attribute type 4 has an invalid length. [ 123.715512][ T6135] netlink: 'syz.2.106': attribute type 4 has an invalid length. [ 124.164428][ T6155] jffs2: notice: (6155) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 124.261904][ T6153] FAULT_INJECTION: forcing a failure. [ 124.261904][ T6153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.262028][ T6153] CPU: 1 UID: 0 PID: 6153 Comm: syz.1.111 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.262047][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.262057][ T6153] Call Trace: [ 124.262064][ T6153] [ 124.262073][ T6153] dump_stack_lvl+0xe8/0x150 [ 124.262103][ T6153] should_fail_ex+0x46b/0x600 [ 124.262127][ T6153] _copy_from_user+0x2d/0xb0 [ 124.262149][ T6153] ___sys_sendmsg+0x1c6/0x360 [ 124.262172][ T6153] ? __lock_acquire+0x6df/0x2e40 [ 124.262197][ T6153] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.262248][ T6153] ? __fget_files+0x2a/0x420 [ 124.262265][ T6153] ? __fget_files+0x3a8/0x420 [ 124.262290][ T6153] __x64_sys_sendmsg+0x1b7/0x290 [ 124.262315][ T6153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.262355][ T6153] do_syscall_64+0x166/0x520 [ 124.262373][ T6153] ? trace_irq_disable+0x3b/0x140 [ 124.262394][ T6153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.262413][ T6153] ? clear_bhb_loop+0x70/0xc0 [ 124.262434][ T6153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.262451][ T6153] RIP: 0033:0x7fa10f56e159 [ 124.262468][ T6153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.262483][ T6153] RSP: 002b:00007fa10d7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.262502][ T6153] RAX: ffffffffffffffda RBX: 00007fa10f7f5fa0 RCX: 00007fa10f56e159 [ 124.262515][ T6153] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000007 [ 124.262526][ T6153] RBP: 00007fa10d7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.262537][ T6153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.262548][ T6153] R13: 00007fa10f7f6038 R14: 00007fa10f7f5fa0 R15: 00007fff3ca42038 [ 124.262575][ T6153] [ 124.527619][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.687496][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.698997][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.720890][ T9] usb 5-1: config 0 descriptor?? [ 124.748578][ T9] cp210x 5-1:0.0: cp210x converter detected [ 124.963739][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 124.971340][ T9] cp210x 5-1:0.0: querying part number failed [ 125.011197][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 125.032515][ T6170] netlink: Only one type of NAT may be specified [ 125.048091][ T6170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.353092][ T6178] FAULT_INJECTION: forcing a failure. [ 125.353092][ T6178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.353160][ T6178] CPU: 1 UID: 0 PID: 6178 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.353180][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.353190][ T6178] Call Trace: [ 125.353196][ T6178] [ 125.353202][ T6178] dump_stack_lvl+0xe8/0x150 [ 125.353228][ T6178] should_fail_ex+0x46b/0x600 [ 125.353259][ T6178] _copy_from_user+0x2d/0xb0 [ 125.353282][ T6178] ___sys_sendmsg+0x1c6/0x360 [ 125.353308][ T6178] ? __lock_acquire+0x6df/0x2e40 [ 125.353333][ T6178] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.353385][ T6178] ? __fget_files+0x2a/0x420 [ 125.353402][ T6178] ? __fget_files+0x3a8/0x420 [ 125.353428][ T6178] __x64_sys_sendmsg+0x1b7/0x290 [ 125.353453][ T6178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.353494][ T6178] do_syscall_64+0x166/0x520 [ 125.353512][ T6178] ? trace_irq_disable+0x3b/0x140 [ 125.353532][ T6178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.353550][ T6178] ? clear_bhb_loop+0x70/0xc0 [ 125.353570][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.353587][ T6178] RIP: 0033:0x7f1e0cdee159 [ 125.353604][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.353619][ T6178] RSP: 002b:00007f1e0b046028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.353638][ T6178] RAX: ffffffffffffffda RBX: 00007f1e0d075fa0 RCX: 00007f1e0cdee159 [ 125.353651][ T6178] RDX: 000000000000e800 RSI: 0000200000000100 RDI: 0000000000000004 [ 125.353661][ T6178] RBP: 00007f1e0b046090 R08: 0000000000000000 R09: 0000000000000000 [ 125.353672][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.353682][ T6178] R13: 00007f1e0d076038 R14: 00007f1e0d075fa0 R15: 00007ffca5ba3b48 [ 125.353710][ T6178] [ 125.493028][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.656085][ T9] usb 2-1: device descriptor read/64, error -71 [ 125.742444][ T6183] jffs2: notice: (6183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 125.928565][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.236178][ T9] usb 2-1: device descriptor read/64, error -71 [ 126.463717][ T9] usb usb2-port1: attempt power cycle [ 128.983983][ T5873] usb 5-1: USB disconnect, device number 3 [ 129.113043][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.150360][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.186719][ T5873] cp210x 5-1:0.0: device disconnected [ 129.224457][ T6198] FAULT_INJECTION: forcing a failure. [ 129.224457][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.224539][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.224558][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.224568][ T6198] Call Trace: [ 129.224573][ T6198] [ 129.224579][ T6198] dump_stack_lvl+0xe8/0x150 [ 129.224607][ T6198] should_fail_ex+0x46b/0x600 [ 129.224631][ T6198] _copy_from_user+0x2d/0xb0 [ 129.224652][ T6198] ___sys_sendmsg+0x1c6/0x360 [ 129.224676][ T6198] ? __lock_acquire+0x6df/0x2e40 [ 129.224701][ T6198] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.224753][ T6198] ? __fget_files+0x2a/0x420 [ 129.224770][ T6198] ? __fget_files+0x3a8/0x420 [ 129.224796][ T6198] __x64_sys_sendmsg+0x1b7/0x290 [ 129.224820][ T6198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.224861][ T6198] do_syscall_64+0x166/0x520 [ 129.224880][ T6198] ? trace_irq_disable+0x3b/0x140 [ 129.224900][ T6198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.224925][ T6198] ? clear_bhb_loop+0x70/0xc0 [ 129.224947][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.224964][ T6198] RIP: 0033:0x7fbffbd7e159 [ 129.224980][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.224995][ T6198] RSP: 002b:00007fbff9fd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.225013][ T6198] RAX: ffffffffffffffda RBX: 00007fbffc005fa0 RCX: 00007fbffbd7e159 [ 129.225026][ T6198] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003 [ 129.225038][ T6198] RBP: 00007fbff9fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.225049][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.225059][ T6198] R13: 00007fbffc006038 R14: 00007fbffc005fa0 R15: 00007fff189699f8 [ 129.225087][ T6198] [ 129.376481][ T9] usb 2-1: device not accepting address 6, error -71 [ 132.367291][ T6234] jffs2: notice: (6234) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 132.577712][ T5318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.578564][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.727177][ T5318] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.740941][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.766054][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 132.773204][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 132.777968][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.777992][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.781056][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.781080][ T9] usb 5-1: SerialNumber: syz [ 132.833678][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.834174][ T5318] usb 1-1: config 0 descriptor?? [ 132.838141][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.868080][ T5318] cp210x 1-1:0.0: cp210x converter detected [ 132.966462][ T9] usb 5-1: 0:2 : does not exist [ 133.044988][ T5318] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 133.052684][ T5318] cp210x 1-1:0.0: querying part number failed [ 133.080313][ T5318] usb 1-1: cp210x converter now attached to ttyUSB0 [ 133.346661][ T9] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 133.359970][ T9] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 133.359996][ T9] usb 5-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 133.512846][ T9] usb 5-1: USB disconnect, device number 4 [ 133.985039][ T6250] FAULT_INJECTION: forcing a failure. [ 133.985039][ T6250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.988628][ T6250] CPU: 1 UID: 0 PID: 6250 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.988659][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.988669][ T6250] Call Trace: [ 133.988677][ T6250] [ 133.988685][ T6250] dump_stack_lvl+0xe8/0x150 [ 133.988715][ T6250] should_fail_ex+0x46b/0x600 [ 133.988740][ T6250] _copy_from_user+0x2d/0xb0 [ 133.988761][ T6250] ___sys_sendmsg+0x1c6/0x360 [ 133.988788][ T6250] ? __lock_acquire+0x6df/0x2e40 [ 133.988812][ T6250] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.988866][ T6250] ? __fget_files+0x2a/0x420 [ 133.988883][ T6250] ? __fget_files+0x3a8/0x420 [ 133.988908][ T6250] __x64_sys_sendmsg+0x1b7/0x290 [ 133.988933][ T6250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.988974][ T6250] do_syscall_64+0x166/0x520 [ 133.988993][ T6250] ? trace_irq_disable+0x3b/0x140 [ 133.989012][ T6250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.989030][ T6250] ? clear_bhb_loop+0x70/0xc0 [ 133.989052][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.989069][ T6250] RIP: 0033:0x7fa10f56e159 [ 133.989086][ T6250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.989101][ T6250] RSP: 002b:00007fa10d7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.989120][ T6250] RAX: ffffffffffffffda RBX: 00007fa10f7f5fa0 RCX: 00007fa10f56e159 [ 133.989133][ T6250] RDX: 0000000020000040 RSI: 0000200000000480 RDI: 0000000000000003 [ 133.989144][ T6250] RBP: 00007fa10d7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.989155][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.989166][ T6250] R13: 00007fa10f7f6038 R14: 00007fa10f7f5fa0 R15: 00007fff3ca42038 [ 133.989194][ T6250] [ 134.146152][ T5710] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 134.312041][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.325485][ T5710] usb 4-1: not running at top speed; connect to a high speed hub [ 134.325571][ T5710] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=2f.b4 [ 134.327327][ T5710] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 134.327349][ T5710] usb 4-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 134.327367][ T5710] usb 4-1: config 0 has no interface number 0 [ 134.327407][ T5710] usb 4-1: config 0 interface 125 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 134.327513][ T5710] usb 4-1: config 0 interface 125 has no altsetting 0 [ 134.340423][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.340448][ T5710] usb 4-1: Product: syz [ 134.340462][ T5710] usb 4-1: Manufacturer: syz [ 134.340475][ T5710] usb 4-1: SerialNumber: syz [ 134.366691][ T5710] usb 4-1: config 0 descriptor?? [ 136.230487][ T5710] usb 4-1: USB disconnect, device number 4 [ 136.294353][ T5709] usb 1-1: USB disconnect, device number 3 [ 136.430811][ T6273] jffs2: notice: (6273) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 136.510415][ T5709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.517405][ T5709] cp210x 1-1:0.0: device disconnected [ 137.043200][ T6289] FAULT_INJECTION: forcing a failure. [ 137.043200][ T6289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.045290][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.4.152 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.045314][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.045324][ T6289] Call Trace: [ 137.045331][ T6289] [ 137.045338][ T6289] dump_stack_lvl+0xe8/0x150 [ 137.045378][ T6289] should_fail_ex+0x46b/0x600 [ 137.045401][ T6289] _copy_from_user+0x2d/0xb0 [ 137.045424][ T6289] __sys_bpf+0x2e7/0xd90 [ 137.045455][ T6289] ? __pfx___sys_bpf+0x10/0x10 [ 137.045480][ T6289] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.045503][ T6289] ? rt_mutex_slowunlock+0x219/0x460 [ 137.045543][ T6289] ? ksys_write+0x248/0x270 [ 137.045564][ T6289] ? __pfx_ksys_write+0x10/0x10 [ 137.045588][ T6289] __x64_sys_bpf+0xba/0xd0 [ 137.045610][ T6289] do_syscall_64+0x166/0x520 [ 137.045628][ T6289] ? trace_irq_disable+0x3b/0x140 [ 137.045648][ T6289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.045665][ T6289] ? clear_bhb_loop+0x70/0xc0 [ 137.045686][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.045703][ T6289] RIP: 0033:0x7fbffbd7e159 [ 137.045719][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.045733][ T6289] RSP: 002b:00007fbff9fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.045753][ T6289] RAX: ffffffffffffffda RBX: 00007fbffc005fa0 RCX: 00007fbffbd7e159 [ 137.045766][ T6289] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 137.045777][ T6289] RBP: 00007fbff9fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 137.045788][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.045798][ T6289] R13: 00007fbffc006038 R14: 00007fbffc005fa0 R15: 00007fff189699f8 [ 137.045826][ T6289] [ 137.272517][ T6293] random: crng reseeded on system resumption [ 137.976868][ T5318] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.138158][ T5318] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.147371][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.164749][ T5318] usb 5-1: config 0 descriptor?? [ 138.185790][ T5318] cp210x 5-1:0.0: cp210x converter detected [ 138.508387][ T5318] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 138.516035][ T5318] cp210x 5-1:0.0: querying part number failed [ 138.546075][ T5710] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.558135][ T5318] usb 5-1: cp210x converter now attached to ttyUSB0 [ 138.762964][ T5710] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 138.766400][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.766452][ T5710] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 138.774314][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.774339][ T5710] usb 3-1: Product: syz [ 138.774353][ T5710] usb 3-1: Manufacturer: syz [ 138.774365][ T5710] usb 3-1: SerialNumber: syz [ 138.822663][ T6317] jffs2: notice: (6317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 138.935294][ T6320] FAULT_INJECTION: forcing a failure. [ 138.935294][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.935882][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.1.163 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.935904][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.935913][ T6320] Call Trace: [ 138.935922][ T6320] [ 138.935929][ T6320] dump_stack_lvl+0xe8/0x150 [ 138.935956][ T6320] should_fail_ex+0x46b/0x600 [ 138.935979][ T6320] _copy_from_user+0x2d/0xb0 [ 138.936000][ T6320] ___sys_sendmsg+0x1c6/0x360 [ 138.936022][ T6320] ? __lock_acquire+0x6df/0x2e40 [ 138.936048][ T6320] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.936100][ T6320] ? __fget_files+0x2a/0x420 [ 138.936116][ T6320] ? __fget_files+0x3a8/0x420 [ 138.936141][ T6320] __x64_sys_sendmsg+0x1b7/0x290 [ 138.936166][ T6320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.936206][ T6320] do_syscall_64+0x166/0x520 [ 138.936226][ T6320] ? trace_irq_disable+0x3b/0x140 [ 138.936246][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.936274][ T6320] ? clear_bhb_loop+0x70/0xc0 [ 138.936294][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.936312][ T6320] RIP: 0033:0x7fa10f56e159 [ 138.936328][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.936343][ T6320] RSP: 002b:00007fa10d7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.936362][ T6320] RAX: ffffffffffffffda RBX: 00007fa10f7f5fa0 RCX: 00007fa10f56e159 [ 138.936375][ T6320] RDX: 0000000024000840 RSI: 0000200000000000 RDI: 0000000000000003 [ 138.936386][ T6320] RBP: 00007fa10d7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.936397][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.936407][ T6320] R13: 00007fa10f7f6038 R14: 00007fa10f7f5fa0 R15: 00007fff3ca42038 [ 138.936435][ T6320] [ 138.990403][ T5318] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.156124][ T5318] usb 1-1: Using ep0 maxpacket: 16 [ 139.164228][ T5318] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 139.165774][ T5318] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.165805][ T5318] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.165831][ T5318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.165870][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.244132][ T5318] usb 1-1: config 0 descriptor?? [ 139.374522][ T5710] ttusb_dec_send_command: command bulk message failed: error -71 [ 139.374769][ T5710] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -71 [ 139.444373][ T5710] usb 3-1: USB disconnect, device number 5 [ 141.171723][ T5710] usb 5-1: USB disconnect, device number 5 [ 141.261536][ T5710] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.281445][ T5710] cp210x 5-1:0.0: device disconnected [ 141.426126][ T5318] usbhid 1-1:0.0: can't add hid device: -71 [ 141.461691][ T5318] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 141.486144][ T5318] usb 1-1: USB disconnect, device number 4 [ 141.497288][ T6335] FAULT_INJECTION: forcing a failure. [ 141.497288][ T6335] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 141.519070][ T6335] CPU: 1 UID: 0 PID: 6335 Comm: syz.1.169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.519096][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.519105][ T6335] Call Trace: [ 141.519113][ T6335] [ 141.519124][ T6335] dump_stack_lvl+0xe8/0x150 [ 141.519150][ T6335] should_fail_ex+0x46b/0x600 [ 141.519170][ T6335] prepare_alloc_pages+0x223/0x650 [ 141.519193][ T6335] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 141.519213][ T6335] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 141.519234][ T6335] ? __pfx_policy_nodemask+0x10/0x10 [ 141.519255][ T6335] ? __lock_acquire+0x6df/0x2e40 [ 141.519278][ T6335] alloc_pages_mpol+0xd4/0x280 [ 141.519301][ T6335] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 141.519323][ T6335] vma_alloc_folio_noprof+0xe1/0x1e0 [ 141.519345][ T6335] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 141.519364][ T6335] ? lock_acquire+0x115/0x350 [ 141.519387][ T6335] do_pte_missing+0x835/0x28f0 [ 141.519413][ T6335] ? handle_mm_fault+0xeb/0x28c0 [ 141.519433][ T6335] handle_mm_fault+0xf64/0x28c0 [ 141.519454][ T6335] ? handle_mm_fault+0xeb/0x28c0 [ 141.519478][ T6335] ? __pfx_handle_mm_fault+0x10/0x10 [ 141.519494][ T6335] ? lock_vma_under_rcu+0x45a/0x500 [ 141.519513][ T6335] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.519562][ T6335] do_user_addr_fault+0xa4f/0x1340 [ 141.519586][ T6335] ? trace_page_fault_user+0x84/0x1e0 [ 141.519603][ T6335] exc_page_fault+0x6a/0xc0 [ 141.519619][ T6335] asm_exc_page_fault+0x26/0x30 [ 141.519634][ T6335] RIP: 0033:0x7fa10f42f6cb [ 141.519649][ T6335] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 141.519661][ T6335] RSP: 002b:00007fa10d7c4fa0 EFLAGS: 00010206 [ 141.519675][ T6335] RAX: 0000000000000000 RBX: 00007fa10f7f5fa0 RCX: 0000000000000000 [ 141.519684][ T6335] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000013c0 [ 141.519693][ T6335] RBP: 00007fa10d7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.519702][ T6335] R10: 00002000000013c0 R11: 0000000000000000 R12: 0000000000000001 [ 141.519710][ T6335] R13: 00007fa10f7f6038 R14: 00007fa10f7f5fa0 R15: 00007fff3ca42038 [ 141.519735][ T6335] [ 141.531880][ T6335] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 142.332983][ T6351] jffs2: notice: (6351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 142.805902][ T6360] FAULT_INJECTION: forcing a failure. [ 142.805902][ T6360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.806112][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.1.177 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.806136][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.806146][ T6360] Call Trace: [ 142.806154][ T6360] [ 142.806163][ T6360] dump_stack_lvl+0xe8/0x150 [ 142.806194][ T6360] should_fail_ex+0x46b/0x600 [ 142.806219][ T6360] _copy_from_user+0x2d/0xb0 [ 142.806241][ T6360] ___sys_sendmsg+0x1c6/0x360 [ 142.806264][ T6360] ? __lock_acquire+0x6df/0x2e40 [ 142.806294][ T6360] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.806350][ T6360] ? __fget_files+0x2a/0x420 [ 142.806367][ T6360] ? __fget_files+0x3a8/0x420 [ 142.806394][ T6360] __x64_sys_sendmsg+0x1b7/0x290 [ 142.806420][ T6360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.806462][ T6360] do_syscall_64+0x166/0x520 [ 142.806482][ T6360] ? trace_irq_disable+0x3b/0x140 [ 142.806502][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.806521][ T6360] ? clear_bhb_loop+0x70/0xc0 [ 142.806543][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.806561][ T6360] RIP: 0033:0x7fa10f56e159 [ 142.806578][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.806592][ T6360] RSP: 002b:00007fa10d7a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.806612][ T6360] RAX: ffffffffffffffda RBX: 00007fa10f7f6090 RCX: 00007fa10f56e159 [ 142.806625][ T6360] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 142.806636][ T6360] RBP: 00007fa10d7a5090 R08: 0000000000000000 R09: 0000000000000000 [ 142.806648][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.806658][ T6360] R13: 00007fa10f7f6128 R14: 00007fa10f7f6090 R15: 00007fff3ca42038 [ 142.806688][ T6360] [ 142.919021][ T6362] FAULT_INJECTION: forcing a failure. [ 142.919021][ T6362] name failslab, interval 1, probability 0, space 0, times 0 [ 142.919052][ T6362] CPU: 1 UID: 0 PID: 6362 Comm: syz.3.167 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.919073][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.919083][ T6362] Call Trace: [ 142.919090][ T6362] [ 142.919098][ T6362] dump_stack_lvl+0xe8/0x150 [ 142.919132][ T6362] should_fail_ex+0x46b/0x600 [ 142.919156][ T6362] should_failslab+0xa8/0x100 [ 142.919183][ T6362] kmem_cache_alloc_node_noprof+0xac/0x660 [ 142.919206][ T6362] ? __alloc_skb+0x1db/0x7a0 [ 142.919225][ T6362] ? __alloc_skb+0x1db/0x7a0 [ 142.919249][ T6362] __alloc_skb+0x1db/0x7a0 [ 142.919274][ T6362] kcm_sendmsg+0x25cc/0x2ad0 [ 142.919297][ T6362] ? is_bpf_text_address+0x292/0x2b0 [ 142.919321][ T6362] ? is_bpf_text_address+0x26/0x2b0 [ 142.919347][ T6362] ? kernel_text_address+0xa5/0xe0 [ 142.919368][ T6362] ? __kernel_text_address+0xd/0x30 [ 142.919391][ T6362] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 142.919415][ T6362] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 142.919438][ T6362] ? _parse_integer_limit+0x18f/0x1e0 [ 142.919469][ T6362] ? __pfx_kcm_sendmsg+0x10/0x10 [ 142.919489][ T6362] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 142.919520][ T6362] ? __pfx_kcm_sendmsg+0x10/0x10 [ 142.919537][ T6362] sock_sendmsg_nosec+0x13a/0x180 [ 142.919558][ T6362] sock_write_iter+0x2e4/0x3f0 [ 142.919585][ T6362] ? __pfx_sock_write_iter+0x10/0x10 [ 142.919617][ T6362] ? bpf_lsm_file_permission+0x9/0x20 [ 142.919633][ T6362] ? security_file_permission+0x75/0x260 [ 142.919658][ T6362] vfs_write+0x61e/0xbb0 [ 142.919686][ T6362] ? __pfx_vfs_write+0x10/0x10 [ 142.919715][ T6362] ? __fget_files+0x2a/0x420 [ 142.919742][ T6362] ksys_write+0x156/0x270 [ 142.919763][ T6362] ? __pfx_ksys_write+0x10/0x10 [ 142.919792][ T6362] do_syscall_64+0x166/0x520 [ 142.919811][ T6362] ? trace_irq_disable+0x3b/0x140 [ 142.919831][ T6362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.919849][ T6362] ? clear_bhb_loop+0x70/0xc0 [ 142.919870][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.919887][ T6362] RIP: 0033:0x7fed7e02e159 [ 142.919903][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.919917][ T6362] RSP: 002b:00007fed7c286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.919936][ T6362] RAX: ffffffffffffffda RBX: 00007fed7e2b5fa0 RCX: 00007fed7e02e159 [ 142.919954][ T6362] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003 [ 142.919966][ T6362] RBP: 00007fed7c286090 R08: 0000000000000000 R09: 0000000000000000 [ 142.919977][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.919987][ T6362] R13: 00007fed7e2b6038 R14: 00007fed7e2b5fa0 R15: 00007fff7fe37c08 [ 142.920017][ T6362] [ 147.006144][ T5873] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 147.048579][ T6385] jffs2: notice: (6385) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 147.166803][ T5873] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 147.179102][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.198034][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.207279][ T5873] usb 2-1: Product: syz [ 147.207299][ T5873] usb 2-1: Manufacturer: syz [ 147.207313][ T5873] usb 2-1: SerialNumber: syz [ 147.499809][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.523822][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.581787][ T5873] ttusb_dec_send_command: command bulk message failed: error -71 [ 147.588589][ T5873] ttusb-dec 2-1:1.0: probe with driver ttusb-dec failed with error -71 [ 147.608042][ T5873] usb 2-1: USB disconnect, device number 8 [ 148.034863][ T6398] FAULT_INJECTION: forcing a failure. [ 148.034863][ T6398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.048702][ T6398] CPU: 0 UID: 0 PID: 6398 Comm: syz.3.188 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.048731][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.048743][ T6398] Call Trace: [ 148.048750][ T6398] [ 148.048758][ T6398] dump_stack_lvl+0xe8/0x150 [ 148.048808][ T6398] should_fail_ex+0x46b/0x600 [ 148.048836][ T6398] _copy_to_user+0x31/0xb0 [ 148.048860][ T6398] simple_read_from_buffer+0xe1/0x170 [ 148.048886][ T6398] proc_fail_nth_read+0x1be/0x230 [ 148.048915][ T6398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.048952][ T6398] ? rw_verify_area+0x250/0x4d0 [ 148.048975][ T6398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.048995][ T6398] vfs_read+0x219/0xa90 [ 148.049022][ T6398] ? __pfx_vfs_read+0x10/0x10 [ 148.049060][ T6398] ? do_sys_openat2+0x14e/0x200 [ 148.049085][ T6398] ? kmem_cache_free+0x187/0x6d0 [ 148.049109][ T6398] ? __pfx_do_sendfile+0x10/0x10 [ 148.049154][ T6398] ksys_read+0x156/0x270 [ 148.049191][ T6398] ? __pfx_ksys_read+0x10/0x10 [ 148.049222][ T6398] do_syscall_64+0x166/0x520 [ 148.049242][ T6398] ? trace_irq_disable+0x3b/0x140 [ 148.049265][ T6398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.049284][ T6398] ? clear_bhb_loop+0x70/0xc0 [ 148.049324][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.049342][ T6398] RIP: 0033:0x7fed7dfee98e [ 148.049358][ T6398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.049373][ T6398] RSP: 002b:00007fed7c285fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.049392][ T6398] RAX: ffffffffffffffda RBX: 00007fed7c2866c0 RCX: 00007fed7dfee98e [ 148.049405][ T6398] RDX: 000000000000000f RSI: 00007fed7c2860a0 RDI: 0000000000000005 [ 148.049415][ T6398] RBP: 00007fed7c286090 R08: 0000000000000000 R09: 0000000000000000 [ 148.049427][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.049438][ T6398] R13: 00007fed7e2b6038 R14: 00007fed7e2b5fa0 R15: 00007fff7fe37c08 [ 148.049467][ T6398] [ 149.829636][ T6408] FAULT_INJECTION: forcing a failure. [ 149.829636][ T6408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.829737][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.1.190 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.829754][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.829763][ T6408] Call Trace: [ 149.829769][ T6408] [ 149.829776][ T6408] dump_stack_lvl+0xe8/0x150 [ 149.829807][ T6408] should_fail_ex+0x46b/0x600 [ 149.829833][ T6408] _copy_from_user+0x2d/0xb0 [ 149.829854][ T6408] ___sys_sendmsg+0x1c6/0x360 [ 149.829877][ T6408] ? __lock_acquire+0x6df/0x2e40 [ 149.829901][ T6408] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.829950][ T6408] ? __fget_files+0x2a/0x420 [ 149.829967][ T6408] ? __fget_files+0x3a8/0x420 [ 149.829993][ T6408] __x64_sys_sendmsg+0x1b7/0x290 [ 149.830018][ T6408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.830059][ T6408] do_syscall_64+0x166/0x520 [ 149.830085][ T6408] ? trace_irq_disable+0x3b/0x140 [ 149.830105][ T6408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.830123][ T6408] ? clear_bhb_loop+0x70/0xc0 [ 149.830144][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.830161][ T6408] RIP: 0033:0x7fa10f56e159 [ 149.830178][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.830193][ T6408] RSP: 002b:00007fa10d7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.830212][ T6408] RAX: ffffffffffffffda RBX: 00007fa10f7f5fa0 RCX: 00007fa10f56e159 [ 149.830224][ T6408] RDX: 0000000020004044 RSI: 0000200000000f00 RDI: 0000000000000004 [ 149.830236][ T6408] RBP: 00007fa10d7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.830247][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.830257][ T6408] R13: 00007fa10f7f6038 R14: 00007fa10f7f5fa0 R15: 00007fff3ca42038 [ 149.830285][ T6408] [ 150.094130][ T5873] asus 0018:0B05:0101.0001: hidraw0: I2C HID v0.00 Device [syz1] on syz0 [ 150.108839][ T5873] asus 0018:0B05:0101.0001: Asus handshake 5d failed to send: -5 [ 150.108861][ T5873] asus 0018:0B05:0101.0001: Failed to initialize 0x5d: -5. [ 150.220550][ T6409] overlayfs: conflicting options: nfs_export=on,index=off [ 150.375621][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 150.436627][ T6418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.195'. [ 150.632259][ T6414] fido_id[6414]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.781325][ T6427] jffs2: notice: (6427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 151.036996][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.048869][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.066233][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.199436][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.235122][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.346094][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.507021][ T5873] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 152.518012][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.520529][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.520554][ T5873] usb 5-1: Product: syz [ 152.520568][ T5873] usb 5-1: Manufacturer: syz [ 152.520582][ T5873] usb 5-1: SerialNumber: syz [ 152.796199][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.820850][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.821145][ T6443] FAULT_INJECTION: forcing a failure. [ 152.821145][ T6443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.821174][ T6443] CPU: 1 UID: 0 PID: 6443 Comm: syz.3.205 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.821195][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.821204][ T6443] Call Trace: [ 152.821211][ T6443] [ 152.821219][ T6443] dump_stack_lvl+0xe8/0x150 [ 152.821249][ T6443] should_fail_ex+0x46b/0x600 [ 152.821274][ T6443] _copy_from_user+0x2d/0xb0 [ 152.821297][ T6443] ___sys_sendmsg+0x1c6/0x360 [ 152.821321][ T6443] ? __lock_acquire+0x6df/0x2e40 [ 152.821351][ T6443] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.821423][ T6443] ? __fget_files+0x2a/0x420 [ 152.821441][ T6443] ? __fget_files+0x3a8/0x420 [ 152.821467][ T6443] __x64_sys_sendmsg+0x1b7/0x290 [ 152.821492][ T6443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.821533][ T6443] do_syscall_64+0x166/0x520 [ 152.821551][ T6443] ? trace_irq_disable+0x3b/0x140 [ 152.821572][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.821590][ T6443] ? clear_bhb_loop+0x70/0xc0 [ 152.821612][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.821629][ T6443] RIP: 0033:0x7fed7e02e159 [ 152.821645][ T6443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.821660][ T6443] RSP: 002b:00007fed7c286028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.821678][ T6443] RAX: ffffffffffffffda RBX: 00007fed7e2b5fa0 RCX: 00007fed7e02e159 [ 152.821691][ T6443] RDX: 000000000000c814 RSI: 00002000000000c0 RDI: 0000000000000005 [ 152.821703][ T6443] RBP: 00007fed7c286090 R08: 0000000000000000 R09: 0000000000000000 [ 152.821714][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.821724][ T6443] R13: 00007fed7e2b6038 R14: 00007fed7e2b5fa0 R15: 00007fff7fe37c08 [ 152.821752][ T6443] [ 153.072600][ T5873] ttusb_dec_send_command: command bulk message failed: error -71 [ 153.080556][ T5873] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -71 [ 153.106531][ T5873] usb 5-1: USB disconnect, device number 6 [ 154.976953][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.286069][ T37] audit: type=1326 audit(1788011122.333:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 155.297433][ T37] audit: type=1326 audit(1788011122.383:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 155.297476][ T37] audit: type=1326 audit(1788011122.383:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 155.297512][ T37] audit: type=1326 audit(1788011122.383:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 155.297553][ T37] audit: type=1326 audit(1788011122.383:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 155.297589][ T37] audit: type=1326 audit(1788011122.393:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 155.297624][ T37] audit: type=1326 audit(1788011122.393:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 155.297659][ T37] audit: type=1326 audit(1788011122.393:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 155.297700][ T37] audit: type=1326 audit(1788011122.413:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 155.297737][ T37] audit: type=1326 audit(1788011122.413:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb44b1e159 code=0x7ffc0000 [ 157.259869][ T6468] jffs2: notice: (6468) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 162.305139][ T5873] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.556482][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 162.563769][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.563822][ T5873] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 162.564932][ T5873] usb 3-1: config 4 has an invalid interface number: 226 but max is 0 [ 162.564954][ T5873] usb 3-1: config 4 has no interface number 0 [ 162.564984][ T5873] usb 3-1: config 4 interface 226 has no altsetting 0 [ 162.620438][ T5873] usb 3-1: language id specifier not provided by device, defaulting to English [ 162.633654][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.633720][ T5873] usb 3-1: Product: syz [ 162.633734][ T5873] usb 3-1: Manufacturer: syz [ 162.633748][ T5873] usb 3-1: SerialNumber: syz [ 162.744239][ T6491] FAULT_INJECTION: forcing a failure. [ 162.744239][ T6491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.757776][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.757802][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.757812][ T6491] Call Trace: [ 162.757820][ T6491] [ 162.757827][ T6491] dump_stack_lvl+0xe8/0x150 [ 162.757859][ T6491] should_fail_ex+0x46b/0x600 [ 162.757887][ T6491] _copy_from_user+0x2d/0xb0 [ 162.757910][ T6491] __sys_bpf+0x2e7/0xd90 [ 162.757942][ T6491] ? __pfx___sys_bpf+0x10/0x10 [ 162.757968][ T6491] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 162.757993][ T6491] ? rt_mutex_slowunlock+0x219/0x460 [ 162.758034][ T6491] ? ksys_write+0x248/0x270 [ 162.758057][ T6491] ? __pfx_ksys_write+0x10/0x10 [ 162.758087][ T6491] __x64_sys_bpf+0xba/0xd0 [ 162.758112][ T6491] do_syscall_64+0x166/0x520 [ 162.758131][ T6491] ? trace_irq_disable+0x3b/0x140 [ 162.758151][ T6491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.758170][ T6491] ? clear_bhb_loop+0x70/0xc0 [ 162.758192][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.758209][ T6491] RIP: 0033:0x7fa10f56e159 [ 162.758227][ T6491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.758242][ T6491] RSP: 002b:00007fa10d7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.758262][ T6491] RAX: ffffffffffffffda RBX: 00007fa10f7f5fa0 RCX: 00007fa10f56e159 [ 162.758276][ T6491] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 162.758287][ T6491] RBP: 00007fa10d7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.758298][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.758309][ T6491] R13: 00007fa10f7f6038 R14: 00007fa10f7f5fa0 R15: 00007fff3ca42038 [ 162.758339][ T6491] [ 163.616092][ T5318] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.847580][ T5318] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 163.876772][ T5318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.905484][ T5318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.913735][ T5318] usb 2-1: Product: syz [ 163.913754][ T5318] usb 2-1: Manufacturer: syz [ 163.913769][ T5318] usb 2-1: SerialNumber: syz [ 164.220326][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.236217][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.316954][ T5318] ttusb_dec_send_command: command bulk message failed: error -71 [ 164.325179][ T5318] ttusb-dec 2-1:1.0: probe with driver ttusb-dec failed with error -71 [ 164.589786][ T5318] usb 2-1: USB disconnect, device number 9 [ 165.081162][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.220'. [ 166.960574][ T5873] go7007 3-1:4.226: probe with driver go7007 failed with error -12 [ 166.981529][ T5873] usb 3-1: USB disconnect, device number 6 [ 167.809637][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 173.578825][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.614834][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.623569][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.657633][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.665411][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.802396][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.836754][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.846126][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.875084][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.883879][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.163730][ T5595] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.215453][ T5595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.238063][ T5595] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.248288][ T5595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.256904][ T5595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.589152][ T6509] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.589362][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.589913][ T6509] bridge_slave_0: entered allmulticast mode [ 176.614002][ T6509] bridge_slave_0: entered promiscuous mode [ 176.662375][ T6509] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.669670][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.669887][ T6509] bridge_slave_1: entered allmulticast mode [ 176.672505][ T6509] bridge_slave_1: entered promiscuous mode [ 176.838253][ T6509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.869599][ T6509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.056635][ T5593] Bluetooth: hci6: command tx timeout [ 177.114002][ T6509] team0: Port device team_slave_0 added [ 177.146948][ T6509] team0: Port device team_slave_1 added [ 177.263453][ T6509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.270524][ T6509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.270551][ T6509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.344443][ T6509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.353435][ T6509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.353466][ T6509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.376136][ T5593] Bluetooth: hci7: command tx timeout [ 178.450056][ T5595] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 178.492127][ T5595] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 178.510222][ T5595] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 178.534180][ T5595] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 178.537971][ T5595] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 179.136101][ T5593] Bluetooth: hci6: command tx timeout [ 179.456262][ T5593] Bluetooth: hci7: command tx timeout [ 180.656152][ T5593] Bluetooth: hci8: command tx timeout [ 181.216124][ T5593] Bluetooth: hci6: command tx timeout [ 181.537218][ T5593] Bluetooth: hci7: command tx timeout [ 182.452228][ T5595] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 182.496139][ T5595] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 182.509646][ T5595] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 182.540973][ T5595] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 182.550433][ T5595] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 182.736482][ T5593] Bluetooth: hci8: command tx timeout [ 183.296061][ T5593] Bluetooth: hci6: command tx timeout [ 183.616170][ T5593] Bluetooth: hci7: command tx timeout [ 184.656241][ T5593] Bluetooth: hci9: command tx timeout [ 184.816088][ T5593] Bluetooth: hci8: command tx timeout [ 186.736152][ T5593] Bluetooth: hci9: command tx timeout [ 186.896918][ T5593] Bluetooth: hci8: command tx timeout [ 188.816177][ T5593] Bluetooth: hci9: command tx timeout [ 190.896262][ T5593] Bluetooth: hci9: command tx timeout [ 206.581319][ T5601] Bluetooth: hci3: command 0x0406 tx timeout [ 206.581520][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 206.657212][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 206.658751][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 233.670768][ T5601] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 233.711195][ T5601] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 233.724524][ T5601] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 233.736235][ T5601] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 233.762355][ T5601] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 233.964551][ T4901] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 234.007087][ T4901] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 234.016580][ T4901] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 234.022645][ T4901] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 234.033727][ T4901] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 234.595007][ T6586] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 234.630033][ T6586] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 234.640090][ T6586] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 234.648745][ T6586] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 234.662903][ T6586] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 239.030856][ T6576] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 239.058403][ T6576] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 239.074293][ T6576] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 239.093257][ T6576] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 239.101210][ T6576] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 242.552772][ T6591] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 242.604024][ T6591] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 242.616964][ T6591] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 242.629142][ T6591] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 242.639847][ T6591] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 263.805901][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 263.812871][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29 [ 263.819976][ C1] rcu: (detected by 1, t=10502 jiffies, g=14941, q=12589 ncpus=2) [ 263.827880][ C1] task:ktimers/1 state:R running task stack:23016 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 263.841433][ C1] Call Trace: [ 263.844706][ C1] [ 263.847533][ C1] sched_show_task+0x4aa/0x5f0 [ 263.852287][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 263.857560][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 263.862776][ C1] ? wq_watchdog_touch+0xf9/0x160 [ 263.867786][ C1] print_other_cpu_stall+0xfbf/0x1350 [ 263.873138][ C1] ? notifier_call_chain+0x1a5/0x3d0 [ 263.878411][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 263.884192][ C1] ? __timekeeping_advance+0xe58/0x1370 [ 263.889725][ C1] ? __timekeeping_advance+0xe58/0x1370 [ 263.895256][ C1] rcu_sched_clock_irq+0x9fe/0x10e0 [ 263.900441][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 263.906059][ C1] ? rcu_is_watching+0x16/0xb0 [ 263.910822][ C1] ? trace_softirq_raise+0x3b/0x130 [ 263.916059][ C1] update_process_times+0x234/0x2d0 [ 263.921265][ C1] tick_nohz_handler+0x38f/0x6b0 [ 263.926238][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 263.931701][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 263.936797][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 263.942239][ C1] __hrtimer_run_queues+0x3a0/0xaf0 [ 263.947465][ C1] hrtimer_interrupt+0x4c2/0xa80 [ 263.952411][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 263.958408][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 263.964048][ C1] [ 263.966975][ C1] [ 263.969895][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.975863][ C1] RIP: 0010:lock_release+0x2e1/0x3c0 [ 263.981133][ C1] Code: 00 03 11 00 00 00 00 eb b5 e8 5b 5f b3 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 93 ba 02 11 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b8 00 13 [ 264.000719][ C1] RSP: 0018:ffffc90000a3fa80 EFLAGS: 00000282 [ 264.006770][ C1] RAX: 8af237bf8d67d800 RBX: 0000000000000206 RCX: 0000000000000046 [ 264.014736][ C1] RDX: 00000000a4267143 RSI: ffffffff8db3b460 RDI: ffffffff8bcc2080 [ 264.022704][ C1] RBP: ffff88801d2ccb38 R08: b800000000000000 R09: 0000000000000000 [ 264.030654][ C1] R10: 0000000000000000 R11: ffffffff8e1c3ac0 R12: 0000000000000005 [ 264.038625][ C1] R13: 0000000000000005 R14: ffff88805daeb400 R15: ffff88801d2cbe80 [ 264.046608][ C1] rt_spin_unlock+0x29/0x200 [ 264.051189][ C1] advance_sched+0x9a3/0xc90 [ 264.055852][ C1] ? __pfx_advance_sched+0x10/0x10 [ 264.060940][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 264.066128][ C1] hrtimer_run_softirq+0x1e1/0x2e0 [ 264.071224][ C1] handle_softirqs+0x1da/0x6d0 [ 264.075975][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 264.080977][ C1] run_ktimerd+0x6a/0x100 [ 264.085303][ C1] smpboot_thread_fn+0x565/0xa70 [ 264.090227][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 264.095240][ C1] kthread+0x38b/0x470 [ 264.099294][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 264.104756][ C1] ? __pfx_kthread+0x10/0x10 [ 264.109324][ C1] ret_from_fork+0x514/0xb70 [ 264.113894][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 264.118980][ C1] ? __switch_to+0xc89/0x1420 [ 264.123642][ C1] ? __pfx_kthread+0x10/0x10 [ 264.128208][ C1] ret_from_fork_asm+0x1a/0x30 [ 264.132957][ C1]