last executing test programs: 41.92047546s ago: executing program 1 (id=75): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x7ffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000140)) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000180)) 39.646780218s ago: executing program 2 (id=82): r0 = open(&(0x7f0000000100)='.\x00', 0x100000, 0x0) flock(r0, 0x1) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x9006}, 0x4) close_range(r2, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000001040101e088e16c05000000000000000500010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1abf0737765c88b0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r1}) openat(0xffffffffffffff9c, 0x0, 0xe042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb1/product\x00', 0x0, 0x0) utime(&(0x7f0000000240)='./sys\x00', &(0x7f0000000280)={0x3, 0x5}) read(r4, &(0x7f0000000000)=""/128, 0x80) 38.41423115s ago: executing program 2 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="944cf7", 0x3}], 0x1}, 0x20000010) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x2, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x4}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r2, 0x84, 0x83, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) unshare(0x100000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80301, 0x0) write$FUSE_POLL(r4, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000380)=0x95) r5 = open_tree(r4, &(0x7f0000000040)='\x00', 0x89101) move_mount(0xffffffffffffffff, 0x0, r5, 0x0, 0x46) 36.206428458s ago: executing program 0 (id=91): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r0, 0x402, 0x91ea6c12f182534) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1}) r1 = gettid() (async) r2 = syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022f0001010080fa0904000004ff00000007050102000200070581020002"], 0x0) (async) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) (async) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='7', 0x1) (async) bind$tipc(r4, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) write$P9_RVERSION(r3, &(0x7f0000000480)={0x15, 0x65, 0xffff, 0x5f8d7a71, 0x8, '9P2000.u'}, 0x15) (async) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) (async) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) (async) tkill(r1, 0x7) (async) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {0xbf}, @ext={0x0, 0x0}}, {0x0, 0xd, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x5, 0x7}, {0x0, 0x1}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x0, 0x3}, {}, @time=@time={0x8, 0xa}}], 0x70) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000240)={0x0, 0x0, 0x0}) mkdir(0x0, 0x9) (async) syz_usb_connect(0x0, 0x63, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002f90550"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x5, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000400)={r8, r9, r10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]}) 35.938634264s ago: executing program 2 (id=92): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x6, 0x1ff}, {0x0, 0x3}, {0x9}]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl(r4, 0x3b8f, &(0x7f0000000100)="280000000600000001") ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) 35.030757151s ago: executing program 0 (id=93): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4ad81) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r1, 0x0, 0x0, 0x1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902290001000000000904000000020201"], 0x0) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./dev\x00', &(0x7f0000000c40)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./mnt\x00', 0x1ff) syz_usb_connect(0x5, 0x24, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000e40), 0x1, 0x402) read$FUSE(r3, 0x0, 0xf5) (async) mount(&(0x7f0000000cc0)=@filename='./dev/sda1\x00', &(0x7f0000000d00)='./mnt\x00', &(0x7f0000000d40)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) chdir(&(0x7f0000000d80)='./file0\x00') (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x3f4, 0x2f93) (async) init_module(&(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0xb4, 0x0, 0x5, 0xfb, 0xa, 0x3, 0x3e, 0x2c, 0x244, 0x40, 0xb2, 0x3, 0x3, 0x38, 0x1, 0x585, 0x1, 0x1000}, [{0x7, 0x7fff, 0xfff, 0x7, 0x8, 0x0, 0x3, 0x81}], "e2211d43f2d496c3918baeb56ff6b3eeb262a9ee7261ccdfbd01cca3f7b8e9913c78193599ac3d12160c2d3688dc62fa9384dc2176301f972bc92a177c2a51605c06f71c2bab5b1fb1da70eb66e63ec8f64a93f11e0324f1d5f175b5d4902ef216f5021a13088dea91f897993c684827516b527f16da233efcc8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6f2, &(0x7f0000000b80)='/dev/snd/timer\x00') (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x6, [[0x80000022, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff, 0xfffff9ff], [0x39a0, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff8, 0x5], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xe8e1, 0xffffffff, 0x400]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a1, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1020, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x204000, 0x0, 0x0, 0x1}, {0x5, 0x200f4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000140)={0x1, 0x7, 0x1, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x7, 0x341, 0x5}) (async) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) 34.175076624s ago: executing program 3 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x80, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x60, 0x5b, "225a76eb46ec479493da3b137830415862c3add956e4153084d9dc3400a435a1d1fec9c2cfe85c7be8c8012adbd200d6e87b127c67281d48f6ae3e8164ba26d0e122efcb518085583042048b6ae14d8120a60016cdaf2e851ebdd917"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sysfs$2(0x2, 0x9, &(0x7f00000001c0)=""/88) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) r9 = memfd_create(&(0x7f00000002c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) 33.806027104s ago: executing program 3 (id=96): syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120400000002000000a0fd0100000008d81301020301f10112000102098001090458800036d877fc"], &(0x7f0000000140)={0x0, 0x0, 0x5, 0x0}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './cgroup.cpu/memory.limit_in_bytes\x00'}) accept4(r1, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) 33.709738649s ago: executing program 0 (id=97): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000014000180060001000a0000000800050001000000500002801400010000000000000000000000000000000001060002005000"], 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) (fail_nth: 7) 33.327053768s ago: executing program 0 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4081, 0xff1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2e", 0x9}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 32.857270127s ago: executing program 0 (id=99): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086d044fc1ffffed00000109022400010000000009040000010300030009210000000122050009058103"], 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0xc800) r0 = socket$inet6(0xa, 0x3, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001380)="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", 0x2a3}, {&(0x7f0000001640)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae3", 0x36}], 0x2}, 0x8000) recvmsg(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001700)=""/233, 0xe9}], 0x1, &(0x7f0000001800)=""/4080, 0xff0}, 0x0) close(r1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getrandom(&(0x7f0000000380)=""/4096, 0x1000, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000000c0)=0x8001, 0x4) sendmmsg(r0, &(0x7f0000000100), 0x2e9, 0xffe0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086d044fc1ffffed00000109022400010000000009040000010300030009210000000122050009058103"], 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0xc800) (async) socket$inet6(0xa, 0x3, 0x1) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001380)="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", 0x2a3}, {&(0x7f0000001640)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae3", 0x36}], 0x2}, 0x8000) (async) recvmsg(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001700)=""/233, 0xe9}], 0x1, &(0x7f0000001800)=""/4080, 0xff0}, 0x0) (async) close(r1) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) getrandom(&(0x7f0000000380)=""/4096, 0x1000, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000000c0)=0x8001, 0x4) (async) sendmmsg(r0, &(0x7f0000000100), 0x2e9, 0xffe0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) (async) 32.856823013s ago: executing program 1 (id=100): r0 = openat$kvm(0x0, &(0x7f0000002ac0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000200)={0x5261, 0x0, 0x70dc4fd9}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40000000f) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000002480), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000024c0), 0x0, 0x482) close(0x3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x2, @tick=0x6, 0x9, {0x0, 0x7}, 0x3, 0x2, 0x5}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x4c, &(0x7f0000002600)={0x133, &(0x7f0000002640)=[{}]}, 0x10) recvmmsg(r6, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000002780)={0xa6, 0x8, 0x7, "5d36343d41de294251968e8a012b7329a663d9d3f68079fb4cf5742e9c7b268bd475dcd60782ca41c9e6637a912254336fac071378e7fd60c45d31e5a57b201106a09ba2323a86171744467e4728b7e5a87a4b2b3fa3511fc71a5c0a1f6e2d79107a1641664e3321b1f32d45f39dcd5839315264935165d95221ea728546f9ded57fbd5098db7c0e987559ce6a46d91efeecaef86cf3855e9c89a6cfd21df70b50f1c6a530f0"}) prlimit64(0x0, 0x7, &(0x7f0000002700)={0x1, 0x8}, 0x0) sendmmsg$unix(r5, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000002500)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000002580)='macsec0\x00', 0x10) sendto$inet6(r8, &(0x7f00000025c0)="836bb66f", 0x18, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000002380)) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020303000000000000000000070800010001000029000000cc83a17083129a295a5ab18d21366c82e8e63ae9a508707e059441169eb1c9c2ea7d7755e3e6e124b9f9b38f4bed19dc7b970a7941c0314ba42b98c4f50a11d9089087ce0b1f11d1a8b3e21c"], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x40080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002980)={0x100, r9, 0x300, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xdc, 0xc5, "68375ade99d737612eb3401b417853e38f805c8d611cc42dbd8b71fb9e007e821a0ce5e74c7f04fc3305caf1792ac39d3c9d435a0ccfc47e7f3dc25ddb36be4cc72ef541e59738e7cd571e67e4ae104e47af99cf58e7003f0e9bb982b1d6328c7c598f197750951b80d8271ad2e99b65c505380a45207b3cfac8950e506bd35aadbe44df8710bfa3d258bf309ee646fec3e5d9f11bbf6137444ce19bbc04e01167f11f83d14cb6662266dd9639cc813d6bd1c9c3c7b84f8140c4be1b36837a682ef78b15447751e86b5c47f90715aa4cc2dbfd683a5f261d"}]}, 0x100}}, 0x880) 31.927612987s ago: executing program 2 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$tun(r0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYRESHEX=r1, @ANYRES16=r2], 0x0) 31.858405415s ago: executing program 1 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x7, 0x2, r2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r5, 0x7, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r4, 0xae80, 0x3000000) 30.737496633s ago: executing program 3 (id=103): r0 = syz_open_dev$loop(&(0x7f0000000680), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000fc0)={'#! ', './file0', [{0x20, '5\t+\x8c=\vw\xf7\x90\xc6\xf2\x9b\xf3\x0e\xc3YO\x02'}, {0x20, '+#'}, {0x20, 'x'}, {0x20, 'ipvlan1\x00'}, {0x20, 'ip6erspan0\x00L\xd9\x85\xa3\xbe\x8c\xb0\xccLu\x04:>\x87\xcb\xa9\xeaa\x87\xa9\xac\xfd\x85\x024\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58) writev(r1, &(0x7f0000001040)=[{&(0x7f0000001100)="dcdc6a56c9f195ffc6f9a5edf89f1f20ec51bc49", 0x14}], 0x1) write$UHID_INPUT(r1, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000002180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000002000", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 30.50149355s ago: executing program 3 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x80, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x60, 0x5b, "225a76eb46ec479493da3b137830415862c3add956e4153084d9dc3400a435a1d1fec9c2cfe85c7be8c8012adbd200d6e87b127c67281d48f6ae3e8164ba26d0e122efcb518085583042048b6ae14d8120a60016cdaf2e851ebdd917"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sysfs$2(0x2, 0x9, &(0x7f00000001c0)=""/88) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) r9 = memfd_create(&(0x7f00000002c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) 30.501307836s ago: executing program 2 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/fs/netfs/cookies\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ufs\x00', 0x1, &(0x7f0000000200)='ufstype=44bsd\x00') read(r0, &(0x7f00000005c0)=""/4096, 0x1000) 30.059129782s ago: executing program 3 (id=106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4081, 0xff1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 29.955933012s ago: executing program 2 (id=107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4081, 0xff1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2e", 0x9}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 29.767184854s ago: executing program 1 (id=108): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001e40)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r3, &(0x7f0000000000)=@phonet={0x23, 0xb, 0xee, 0xff}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x20, 0x12, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x10, 0x125, 0x0, 0x1, [@nested={0xc, 0x2c, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8d4}]}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x48055}, 0x8880) poll(&(0x7f0000000140)=[{r3}, {r0, 0x100}, {r4, 0x13d}], 0x3, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e80), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001f80)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000001fc0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f00000020c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) write$nci(r0, 0x0, 0x0) 29.239699982s ago: executing program 0 (id=109): r0 = syz_open_dev$mtd(&(0x7f00000014c0), 0x0, 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001500)={0x1, 0x20000000, 0xfffe, &(0x7f0000001540)={0x0, 0x10000, 0x1}}) 29.120273589s ago: executing program 1 (id=110): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@rand_addr=0x64010100, @multicast1, 0xffffffffffffffff, "1cebca135b64ebdae31ae4a7e42f960cc0004fc7c86f12fe5282480eeba41e35", 0xd5e8, 0x101, 0x5, 0x98}, 0x3c) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 28.873225601s ago: executing program 1 (id=111): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) socket(0xa, 0x2400000001, 0x0) (async) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0], 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x1000}, 0x4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x1000}, 0x4) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000440)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sendto$inet(r1, &(0x7f0000000480)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) (async) recvfrom$inet(r1, &(0x7f0000000640), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x280501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sysfs$2(0x9, 0x0, 0x0) (async) r5 = dup(r4) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1e1a02, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'\x00', 0x1}) (async, rerun: 64) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000000240)) (async, rerun: 64) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="00003f918cae1a00889af223361cf400530101"], 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x8, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/apparmor/.load\x00', 0x2, 0x81) (rerun: 32) 28.812084618s ago: executing program 3 (id=112): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000004e23000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) write(r3, 0x0, 0x0) 0s ago: executing program 32 (id=109): r0 = syz_open_dev$mtd(&(0x7f00000014c0), 0x0, 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001500)={0x1, 0x20000000, 0xfffe, &(0x7f0000001540)={0x0, 0x10000, 0x1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 77.144781][ T5598] cgroup: Unknown subsys name 'net' [ 77.273467][ T5598] cgroup: Unknown subsys name 'cpuset' [ 77.283442][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.852156][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.800886][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.801981][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.804258][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.807105][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.807815][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.847339][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.864479][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.867615][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.868258][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.869360][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.870820][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.876201][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.884031][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.890654][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.894151][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.941723][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.942940][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.943692][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.947340][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.948471][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.724436][ T5614] rdma_rxe: Failed to create IPv4 UDP tunnel [ 83.735124][ T5608] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.737441][ T5615] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.737950][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.753763][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.768755][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.039303][ T5612] infiniband rxe0: set active [ 84.040237][ T5612] infiniband rxe0: added rxe_eth0 [ 84.064854][ T32] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.081814][ T5612] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 84.081847][ T5612] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 84.081883][ T5612] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 84.160675][ T5612] RDS/IB: rxe0: added [ 84.161044][ T5612] smc: adding ib device rxe0 with port count 1 [ 84.162974][ T5612] smc: ib device rxe0 port 1 has no pnetid [ 84.199822][ T32] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.230822][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.621901][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.622590][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.622745][ T5615] bridge_slave_0: entered allmulticast mode [ 84.624985][ T5615] bridge_slave_0: entered promiscuous mode [ 84.655726][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.678867][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.678988][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.679126][ T5615] bridge_slave_1: entered allmulticast mode [ 84.685299][ T5615] bridge_slave_1: entered promiscuous mode [ 84.780578][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.844301][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.865217][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.865330][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.865763][ T5614] bridge_slave_0: entered allmulticast mode [ 84.867970][ T5614] bridge_slave_0: entered promiscuous mode [ 84.890281][ T5618] Bluetooth: hci0: command tx timeout [ 84.921973][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.922070][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.922486][ T5614] bridge_slave_1: entered allmulticast mode [ 84.925292][ T5614] bridge_slave_1: entered promiscuous mode [ 84.960507][ T5615] team0: Port device team_slave_0 added [ 84.969840][ T5618] Bluetooth: hci1: command tx timeout [ 84.970262][ T5618] Bluetooth: hci2: command tx timeout [ 85.000193][ T5615] team0: Port device team_slave_1 added [ 85.000265][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.024850][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.026147][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.026291][ T5608] bridge_slave_0: entered allmulticast mode [ 85.028028][ T5608] bridge_slave_0: entered promiscuous mode [ 85.059949][ T54] Bluetooth: hci3: command tx timeout [ 85.066593][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.066770][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.066977][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.067091][ T5608] bridge_slave_1: entered allmulticast mode [ 85.072281][ T5608] bridge_slave_1: entered promiscuous mode [ 85.116901][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.154794][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.154813][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.154839][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.206632][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.208728][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.208742][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.208768][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.274245][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.296042][ T5614] team0: Port device team_slave_0 added [ 85.362840][ T5614] team0: Port device team_slave_1 added [ 85.387143][ T5608] team0: Port device team_slave_0 added [ 85.423178][ T5608] team0: Port device team_slave_1 added [ 85.447890][ T5615] hsr_slave_0: entered promiscuous mode [ 85.448795][ T5615] hsr_slave_1: entered promiscuous mode [ 85.460565][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.460600][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.460662][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.516607][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.516622][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.516642][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.518234][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.518245][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.518267][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.537792][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.537839][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.537896][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.570469][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.766969][ T5614] hsr_slave_0: entered promiscuous mode [ 85.768053][ T5614] hsr_slave_1: entered promiscuous mode [ 85.768863][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 85.768950][ T5614] Cannot create hsr debugfs directory [ 85.802276][ T5608] hsr_slave_0: entered promiscuous mode [ 85.803683][ T5608] hsr_slave_1: entered promiscuous mode [ 85.804677][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 85.804696][ T5608] Cannot create hsr debugfs directory [ 86.235399][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.247501][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.257946][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.269675][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.270697][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.276265][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.279173][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.310940][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.413835][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.417697][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.448361][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.457309][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.458145][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.468034][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.501099][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.504174][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.591056][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.591217][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.591341][ T5612] bridge_slave_0: entered allmulticast mode [ 86.592771][ T5612] bridge_slave_0: entered promiscuous mode [ 86.633547][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.633706][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.633856][ T5612] bridge_slave_1: entered allmulticast mode [ 86.635310][ T5612] bridge_slave_1: entered promiscuous mode [ 86.682958][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.703939][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.760919][ T5612] team0: Port device team_slave_0 added [ 86.766866][ T5612] team0: Port device team_slave_1 added [ 86.787855][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.798344][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.799211][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.813710][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.814629][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.818121][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.850870][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.854027][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.854999][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.855013][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.855039][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.873980][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.873996][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.874094][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.969574][ T54] Bluetooth: hci0: command tx timeout [ 87.032227][ T5612] hsr_slave_0: entered promiscuous mode [ 87.033222][ T5612] hsr_slave_1: entered promiscuous mode [ 87.034946][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 87.034967][ T5612] Cannot create hsr debugfs directory [ 87.062737][ T54] Bluetooth: hci2: command tx timeout [ 87.062769][ T5618] Bluetooth: hci1: command tx timeout [ 87.130533][ T5618] Bluetooth: hci3: command tx timeout [ 87.239211][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.365113][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.368079][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.406995][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.407079][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.451880][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.471707][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.471806][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.500581][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.500643][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.531408][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.531499][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.538916][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.548575][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.574251][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.577241][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.577995][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.595782][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.617909][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.628479][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.646472][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.703590][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.753402][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.753536][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.778171][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.778293][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.007199][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.055579][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.083769][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.083861][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.134314][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.134427][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.762921][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.884736][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.918956][ T5615] veth0_vlan: entered promiscuous mode [ 88.957423][ T5615] veth1_vlan: entered promiscuous mode [ 89.011696][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.031867][ T5608] veth0_vlan: entered promiscuous mode [ 89.050572][ T5618] Bluetooth: hci0: command tx timeout [ 89.078765][ T5608] veth1_vlan: entered promiscuous mode [ 89.114968][ T5615] veth0_macvtap: entered promiscuous mode [ 89.131149][ T5618] Bluetooth: hci2: command tx timeout [ 89.131177][ T54] Bluetooth: hci1: command tx timeout [ 89.136099][ T5615] veth1_macvtap: entered promiscuous mode [ 89.181707][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.210153][ T54] Bluetooth: hci3: command tx timeout [ 89.217472][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.252315][ T5608] veth0_macvtap: entered promiscuous mode [ 89.257901][ T5608] veth1_macvtap: entered promiscuous mode [ 89.279234][ T5614] veth0_vlan: entered promiscuous mode [ 89.299844][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.318809][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.318994][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.319033][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.319080][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.348149][ T5614] veth1_vlan: entered promiscuous mode [ 89.380499][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.402503][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.479577][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.479603][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.509637][ T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.509682][ T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.509718][ T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.509753][ T63] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.576073][ T5614] veth0_macvtap: entered promiscuous mode [ 89.595557][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.595577][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.624310][ T5614] veth1_macvtap: entered promiscuous mode [ 89.639943][ T5612] veth0_vlan: entered promiscuous mode [ 89.706843][ T5612] veth1_vlan: entered promiscuous mode [ 89.715667][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.755246][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.775690][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.775708][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.794449][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.867181][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.867198][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.911609][ T5612] veth0_macvtap: entered promiscuous mode [ 89.935724][ T5612] veth1_macvtap: entered promiscuous mode [ 90.020245][ T3377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.021243][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.021765][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.021900][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.067685][ T5770] FAULT_INJECTION: forcing a failure. [ 90.067685][ T5770] name failslab, interval 1, probability 0, space 0, times 1 [ 90.067720][ T5770] CPU: 0 UID: 0 PID: 5770 Comm: syz.2.5 Not tainted syzkaller #0 PREEMPT(full) [ 90.067741][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.067760][ T5770] Call Trace: [ 90.067771][ T5770] [ 90.067779][ T5770] dump_stack_lvl+0xe8/0x150 [ 90.067808][ T5770] should_fail_ex+0x3eb/0x540 [ 90.067840][ T5770] should_failslab+0xa8/0x100 [ 90.067862][ T5770] __kmalloc_noprof+0xf9/0x710 [ 90.067890][ T5770] ? ___neigh_create+0x6da/0x22e0 [ 90.067912][ T5770] ? ___neigh_create+0x6da/0x22e0 [ 90.067941][ T5770] ___neigh_create+0x6da/0x22e0 [ 90.067973][ T5770] ? iptable_mangle_hook+0x18a/0x4c0 [ 90.068004][ T5770] ip_neigh_gw4+0x30b/0x430 [ 90.068033][ T5770] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 90.068070][ T5770] ip_finish_output2+0xe21/0x10b0 [ 90.068096][ T5770] ? ip_skb_dst_mtu+0x811/0xa50 [ 90.068118][ T5770] ? ip_finish_output2+0x3de/0x10b0 [ 90.068147][ T5770] ? ip_finish_output+0x40b/0x530 [ 90.068174][ T5770] ip_output+0x29f/0x450 [ 90.068196][ T5770] ? ip_output+0x5a/0x450 [ 90.068220][ T5770] ip_push_pending_frames+0x8b/0x110 [ 90.068244][ T5770] raw_sendmsg+0x1486/0x1a20 [ 90.068295][ T5770] ? __pfx_raw_sendmsg+0x10/0x10 [ 90.068315][ T5770] ? __lock_acquire+0x747/0x2de0 [ 90.068378][ T5770] ? aa_sock_msg_perm+0xfc/0x210 [ 90.068406][ T5770] ? sock_rps_record_flow+0x19/0x350 [ 90.068439][ T5770] ? inet_sendmsg+0x298/0x320 [ 90.068462][ T5770] ? apparmor_socket_sendmsg+0x98/0x360 [ 90.068490][ T5770] ? __pfx_inet_sendmsg+0x10/0x10 [ 90.068515][ T5770] sock_sendmsg_nosec+0x10f/0x190 [ 90.068539][ T5770] __sys_sendto+0x408/0x5a0 [ 90.068564][ T5770] ? ksys_write+0x1e6/0x270 [ 90.068597][ T5770] ? __pfx___sys_sendto+0x10/0x10 [ 90.068620][ T5770] ? __mutex_unlock_slowpath+0x731/0x900 [ 90.068662][ T5770] ? fdget+0x1ac/0x250 [ 90.068703][ T5770] ? __pfx_ksys_write+0x10/0x10 [ 90.068739][ T5770] __x64_sys_sendto+0xde/0x100 [ 90.068769][ T5770] do_syscall_64+0x166/0x520 [ 90.068795][ T5770] ? trace_irq_disable+0x3b/0x140 [ 90.068817][ T5770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.068838][ T5770] ? clear_bhb_loop+0x70/0xc0 [ 90.068863][ T5770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.068901][ T5770] RIP: 0033:0x7ff899b9e559 [ 90.068929][ T5770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.068946][ T5770] RSP: 002b:00007ff89ab1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 90.068974][ T5770] RAX: ffffffffffffffda RBX: 00007ff899e25fa0 RCX: 00007ff899b9e559 [ 90.068989][ T5770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 90.069001][ T5770] RBP: 00007ff89ab1e090 R08: 0000200000000480 R09: 0000000000000010 [ 90.069014][ T5770] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 90.069027][ T5770] R13: 00007ff899e26038 R14: 00007ff899e25fa0 R15: 00007ffee86d76b8 [ 90.069062][ T5770] [ 90.086589][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.387558][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.428365][ T3377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.428385][ T3377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.495119][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.495612][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.524303][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.524324][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.591842][ T33] audit: type=1800 audit(1792258069.380:2): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 90.659193][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.659212][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.679590][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.701747][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.752217][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.752237][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.776783][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.911949][ T5780] sit0: entered promiscuous mode [ 90.915551][ T5780] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 90.915594][ T5780] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.959589][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 90.962563][ T9] usb 3-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 90.967704][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.967730][ T9] usb 3-1: config 0 has no interface number 0 [ 90.967774][ T9] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.967802][ T9] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.967825][ T9] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.967852][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 90.967918][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.061408][ T9] usb 3-1: config 0 descriptor?? [ 91.080365][ T9] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 91.124503][ T5782] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 91.129935][ T54] Bluetooth: hci0: command tx timeout [ 91.172824][ T5784] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 91.173979][ T5784] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 91.210898][ T5618] Bluetooth: hci1: command tx timeout [ 91.210944][ T54] Bluetooth: hci2: command tx timeout [ 91.287755][ T5788] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.307018][ T54] Bluetooth: hci3: command tx timeout [ 91.497349][ T9] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 91.549557][ T5724] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.625371][ T5795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 91.719930][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 91.720456][ T5724] usb 4-1: New USB device found: idVendor=093a, idProduct=010e, bcdDevice=a5.84 [ 91.721436][ T5724] usb 4-1: config 124 has an invalid interface number: 27 but max is 0 [ 91.721458][ T5724] usb 4-1: config 124 has no interface number 0 [ 91.721484][ T5724] usb 4-1: config 124 interface 27 has no altsetting 0 [ 91.723570][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.723587][ T5724] usb 4-1: Product: syz [ 91.723598][ T5724] usb 4-1: Manufacturer: syz [ 91.723609][ T5724] usb 4-1: SerialNumber: syz [ 91.887897][ T9] elan 0003:04F3:074D.0001: Get report error for parm 6: 0 [ 91.985080][ T5787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.018435][ T193] cfg80211: failed to load regulatory.db [ 92.068684][ T5724] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 92.068791][ T5724] gspca_mr97310a: reg write [21] error -22 [ 92.068873][ T5724] mr97310a 4-1:124.27: probe with driver mr97310a failed with error -22 [ 92.094993][ T5724] usb 4-1: USB disconnect, device number 2 [ 92.241155][ T5799] FAULT_INJECTION: forcing a failure. [ 92.241155][ T5799] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.241179][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 92.241196][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.241206][ T5799] Call Trace: [ 92.241212][ T5799] [ 92.241218][ T5799] dump_stack_lvl+0xe8/0x150 [ 92.241245][ T5799] should_fail_ex+0x3eb/0x540 [ 92.241271][ T5799] _copy_to_iter+0x5a1/0x17e0 [ 92.241308][ T5799] ? __pfx__copy_to_iter+0x10/0x10 [ 92.241331][ T5799] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 92.241353][ T5799] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 92.241374][ T5799] __skb_datagram_iter+0xf8/0x980 [ 92.241400][ T5799] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 92.241441][ T5799] skb_copy_datagram_iter+0xb5/0x240 [ 92.241464][ T5799] netlink_recvmsg+0x2c8/0xa70 [ 92.241486][ T5799] ? __pfx_netlink_recvmsg+0x10/0x10 [ 92.241505][ T5799] ? aa_sock_msg_perm+0x144/0x210 [ 92.241528][ T5799] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 92.241547][ T5799] ? security_socket_recvmsg+0x7e/0x2c0 [ 92.241562][ T5799] ? __pfx_netlink_recvmsg+0x10/0x10 [ 92.241577][ T5799] sock_recvmsg+0x196/0x1e0 [ 92.241594][ T5799] ____sys_recvmsg+0x1e6/0x4a0 [ 92.241612][ T5799] ? iovec_from_user+0x87/0x250 [ 92.241635][ T5799] ? __pfx_____sys_recvmsg+0x10/0x10 [ 92.241665][ T5799] ? import_iovec+0x73/0xa0 [ 92.241685][ T5799] ___sys_recvmsg+0x213/0x5a0 [ 92.241708][ T5799] ? __pfx____sys_recvmsg+0x10/0x10 [ 92.241731][ T5799] ? lock_acquire+0x115/0x350 [ 92.241753][ T5799] ? __fget_files+0x2a/0x420 [ 92.241771][ T5799] ? __fget_files+0x3a2/0x420 [ 92.241789][ T5799] ? __fget_files+0x2a/0x420 [ 92.241812][ T5799] ? fdget+0x1ac/0x250 [ 92.241832][ T5799] do_recvmmsg+0x31a/0x7f0 [ 92.241857][ T5799] ? __pfx_do_recvmmsg+0x10/0x10 [ 92.241885][ T5799] ? get_timespec64+0x119/0x1b0 [ 92.241901][ T5799] ? __pfx_get_timespec64+0x10/0x10 [ 92.241916][ T5799] ? fdget+0x1ac/0x250 [ 92.241939][ T5799] __x64_sys_recvmmsg+0x1b7/0x250 [ 92.241960][ T5799] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 92.241987][ T5799] do_syscall_64+0x166/0x520 [ 92.242004][ T5799] ? trace_irq_disable+0x3b/0x140 [ 92.242018][ T5799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.242031][ T5799] ? clear_bhb_loop+0x70/0xc0 [ 92.242047][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.242060][ T5799] RIP: 0033:0x7f42bf79e559 [ 92.242072][ T5799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.242082][ T5799] RSP: 002b:00007f42c0621028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 92.242096][ T5799] RAX: ffffffffffffffda RBX: 00007f42bfa25fa0 RCX: 00007f42bf79e559 [ 92.242105][ T5799] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 92.242114][ T5799] RBP: 00007f42c0621090 R08: 0000200000003700 R09: 0000000000000000 [ 92.242122][ T5799] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 92.242129][ T5799] R13: 00007f42bfa26038 R14: 00007f42bfa25fa0 R15: 00007fffb22758f8 [ 92.242149][ T5799] [ 92.318219][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.348606][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.392651][ T9] elan 0003:04F3:074D.0001: Get report error for parm 7: 0 [ 92.695418][ T5803] gadgetfs: bound to dummy_udc driver [ 92.794861][ T5806] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 92.828650][ T9] elan 0003:04F3:074D.0001: Get report error for parm 8: -71 [ 92.850847][ T9] elan 0003:04F3:074D.0001: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 92.850887][ T9] elan 0003:04F3:074D.0001: Input device is not registered [ 92.882795][ T9] elan 0003:04F3:074D.0001: probe with driver elan failed with error -119 [ 92.903490][ T9] usb 3-1: USB disconnect, device number 2 [ 92.924884][ T5802] gadgetfs: suspended from state 2 [ 92.939505][ T5684] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.076067][ T5808] fido_id[5808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.193923][ T5816] FAULT_INJECTION: forcing a failure. [ 93.193923][ T5816] name failslab, interval 1, probability 0, space 0, times 0 [ 93.193955][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT(full) [ 93.193979][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.193993][ T5816] Call Trace: [ 93.194001][ T5816] [ 93.194010][ T5816] dump_stack_lvl+0xe8/0x150 [ 93.194045][ T5816] should_fail_ex+0x3eb/0x540 [ 93.194093][ T5816] should_failslab+0xa8/0x100 [ 93.194120][ T5816] __kmalloc_noprof+0xf9/0x710 [ 93.194152][ T5816] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 93.194184][ T5816] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 93.194226][ T5816] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 93.194268][ T5816] genl_family_rcv_msg_doit+0xda/0x340 [ 93.194307][ T5816] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.194348][ T5816] ? apparmor_capable+0x126/0x170 [ 93.194375][ T5816] ? bpf_lsm_capable+0x9/0x20 [ 93.194399][ T5816] ? security_capable+0x7e/0x2c0 [ 93.194436][ T5816] genl_rcv_msg+0x614/0x7a0 [ 93.194475][ T5816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.194505][ T5816] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 93.194541][ T5816] ? __asan_memcpy+0x40/0x70 [ 93.194581][ T5816] netlink_rcv_skb+0x226/0x4a0 [ 93.194606][ T5816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.194638][ T5816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.194692][ T5816] ? down_read+0x2b9/0x320 [ 93.194729][ T5816] genl_rcv+0x28/0x40 [ 93.194755][ T5816] netlink_unicast+0x8ef/0xa80 [ 93.194808][ T5816] netlink_sendmsg+0x7f0/0xb20 [ 93.194843][ T5816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.194871][ T5816] ? aa_sock_msg_perm+0x144/0x210 [ 93.194907][ T5816] ? apparmor_socket_sendmsg+0x98/0x360 [ 93.194937][ T5816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.194960][ T5816] sock_sendmsg_nosec+0x14e/0x190 [ 93.194986][ T5816] ____sys_sendmsg+0x54e/0x850 [ 93.195022][ T5816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.195062][ T5816] ? import_iovec+0x73/0xa0 [ 93.195104][ T5816] ___sys_sendmsg+0x2a5/0x360 [ 93.195132][ T5816] ? __lock_acquire+0x747/0x2de0 [ 93.195158][ T5816] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.195228][ T5816] ? __fget_files+0x3a2/0x420 [ 93.195260][ T5816] ? __fget_files+0x2a/0x420 [ 93.195302][ T5816] __x64_sys_sendmsg+0x1b1/0x290 [ 93.195336][ T5816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.195390][ T5816] do_syscall_64+0x166/0x520 [ 93.195420][ T5816] ? trace_irq_disable+0x3b/0x140 [ 93.195444][ T5816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.195466][ T5816] ? clear_bhb_loop+0x70/0xc0 [ 93.195494][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.195516][ T5816] RIP: 0033:0x7fc47d19e559 [ 93.195536][ T5816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.195554][ T5816] RSP: 002b:00007fc47e070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.195576][ T5816] RAX: ffffffffffffffda RBX: 00007fc47d425fa0 RCX: 00007fc47d19e559 [ 93.195593][ T5816] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 93.195606][ T5816] RBP: 00007fc47e070090 R08: 0000000000000000 R09: 0000000000000000 [ 93.195619][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.195631][ T5816] R13: 00007fc47d426038 R14: 00007fc47d425fa0 R15: 00007fffcd784558 [ 93.195664][ T5816] [ 94.005498][ T5837] block nbd0: not configured, cannot reconfigure [ 94.206103][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 94.292835][ T5834] mmap: syz.2.24 (5834) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.324038][ T63] nci: nci_rsp_packet: unknown rsp opcode 0xc00 [ 94.451603][ T63] nci: nci_rsp_packet: unknown rsp opcode 0x402 [ 94.760954][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.772254][ T5860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.772785][ T5860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.794200][ T5860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.795771][ T5860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.910882][ T9] usb 3-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 94.912167][ T9] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 94.912228][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 72, changing to 7 [ 94.912256][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8418, setting to 1024 [ 94.914331][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.914357][ T9] usb 3-1: Product: syz [ 94.914373][ T9] usb 3-1: Manufacturer: syz [ 94.914388][ T9] usb 3-1: SerialNumber: syz [ 94.949130][ T9] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 95.029494][ T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.181453][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 95.187284][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.187332][ T32] usb 4-1: New USB device found: idVendor=1397, idProduct=00bd, bcdDevice=0.40 [ 95.188418][ T32] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 95.230371][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.230405][ T32] usb 4-1: Product: syz [ 95.230420][ T32] usb 4-1: Manufacturer: syz [ 95.230434][ T32] usb 4-1: SerialNumber: syz [ 95.431996][ T5724] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.517330][ T9] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 95.633697][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 95.636212][ T32] usb 4-1: failed to read device descriptor: -71 [ 95.636265][ T32] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 95.641791][ T9] usb 3-1: USB disconnect, device number 3 [ 95.665304][ T32] usb 4-1: invalid MIDI EP [ 95.665321][ T32] usb 4-1: snd-bcd2000: error during probing [ 95.685850][ T32] snd-bcd2000 4-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 95.704341][ T32] usb 4-1: invalid MIDI EP [ 95.704361][ T32] usb 4-1: snd-bcd2000: error during probing [ 95.705499][ T32] snd-bcd2000 4-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 95.709060][ T32] usb 4-1: invalid MIDI EP [ 95.709077][ T32] usb 4-1: snd-bcd2000: error during probing [ 95.739693][ T32] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 95.741386][ T32] usb 4-1: USB disconnect, device number 3 [ 95.771714][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.056053][ T5877] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.171278][ T5839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.328049][ T5891] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 97.659494][ T5763] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.668235][ T5902] FAULT_INJECTION: forcing a failure. [ 97.668235][ T5902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.668255][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT(full) [ 97.668270][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.668278][ T5902] Call Trace: [ 97.668283][ T5902] [ 97.668288][ T5902] dump_stack_lvl+0xe8/0x150 [ 97.668310][ T5902] should_fail_ex+0x3eb/0x540 [ 97.668332][ T5902] _copy_to_user+0x31/0xb0 [ 97.668352][ T5902] simple_read_from_buffer+0xe1/0x170 [ 97.668376][ T5902] proc_fail_nth_read+0x1bb/0x230 [ 97.668393][ T5902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.668409][ T5902] ? rw_verify_area+0x24a/0x4c0 [ 97.668435][ T5902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.668449][ T5902] vfs_read+0x213/0xa80 [ 97.668473][ T5902] ? __pfx___mutex_lock+0x10/0x10 [ 97.668493][ T5902] ? __pfx_vfs_read+0x10/0x10 [ 97.668514][ T5902] ? __fget_files+0x2a/0x420 [ 97.668533][ T5902] ? __fget_files+0x3a2/0x420 [ 97.668551][ T5902] ? __fget_files+0x2a/0x420 [ 97.668573][ T5902] ? fdget+0x1ac/0x250 [ 97.668596][ T5902] ksys_read+0x150/0x270 [ 97.668619][ T5902] ? __pfx_ksys_read+0x10/0x10 [ 97.668646][ T5902] do_syscall_64+0x166/0x520 [ 97.668664][ T5902] ? trace_irq_disable+0x3b/0x140 [ 97.668680][ T5902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.668693][ T5902] ? clear_bhb_loop+0x70/0xc0 [ 97.668709][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.668721][ T5902] RIP: 0033:0x7fc47d15ed8e [ 97.668733][ T5902] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.668743][ T5902] RSP: 002b:00007fc47e02dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.668757][ T5902] RAX: ffffffffffffffda RBX: 00007fc47e02e6c0 RCX: 00007fc47d15ed8e [ 97.668766][ T5902] RDX: 000000000000000f RSI: 00007fc47e02e0a0 RDI: 0000000000000005 [ 97.668774][ T5902] RBP: 00007fc47e02e090 R08: 0000000000000000 R09: 0000000000000000 [ 97.668782][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.668789][ T5902] R13: 00007fc47d426218 R14: 00007fc47d426180 R15: 00007fffcd784558 [ 97.668809][ T5902] [ 97.742894][ T32] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.919232][ T5763] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.919283][ T5763] usb 2-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 97.939259][ T5763] usb 2-1: config index 0 descriptor too short (expected 40744, got 96) [ 97.939288][ T5763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.939308][ T5763] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.939353][ T5763] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 97.967966][ T32] usb 1-1: device descriptor read/64, error -71 [ 97.978903][ T5763] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 97.978934][ T5763] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 97.978959][ T5763] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.978982][ T5763] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 98.035604][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.035639][ T5763] usb 2-1: Product: syz [ 98.035656][ T5763] usb 2-1: Manufacturer: syz [ 98.035671][ T5763] usb 2-1: SerialNumber: syz [ 98.133003][ T5905] FAULT_INJECTION: forcing a failure. [ 98.133003][ T5905] name failslab, interval 1, probability 0, space 0, times 0 [ 98.133035][ T5905] CPU: 0 UID: 0 PID: 5905 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) [ 98.133059][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.133071][ T5905] Call Trace: [ 98.133079][ T5905] [ 98.133088][ T5905] dump_stack_lvl+0xe8/0x150 [ 98.133131][ T5905] should_fail_ex+0x3eb/0x540 [ 98.133168][ T5905] should_failslab+0xa8/0x100 [ 98.133194][ T5905] __kmalloc_cache_noprof+0x9e/0x600 [ 98.133226][ T5905] ? __kmalloc_cache_noprof+0x148/0x600 [ 98.133255][ T5905] ? netlbl_mgmt_add_common+0x5c8/0x1260 [ 98.133287][ T5905] ? netlbl_mgmt_add_common+0x5c8/0x1260 [ 98.133328][ T5905] netlbl_mgmt_add_common+0x5c8/0x1260 [ 98.133373][ T5905] netlbl_mgmt_adddef+0x28b/0x330 [ 98.133427][ T5905] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 98.133465][ T5905] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 98.133497][ T5905] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 98.133539][ T5905] genl_family_rcv_msg_doit+0x233/0x340 [ 98.133579][ T5905] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 98.133627][ T5905] ? bpf_lsm_capable+0x9/0x20 [ 98.133650][ T5905] ? security_capable+0x7e/0x2c0 [ 98.133689][ T5905] genl_rcv_msg+0x614/0x7a0 [ 98.133728][ T5905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.133759][ T5905] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 98.133808][ T5905] netlink_rcv_skb+0x226/0x4a0 [ 98.133834][ T5905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.133869][ T5905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.133912][ T5905] ? down_read+0x2b9/0x320 [ 98.133951][ T5905] genl_rcv+0x28/0x40 [ 98.133979][ T5905] netlink_unicast+0x8ef/0xa80 [ 98.134035][ T5905] netlink_sendmsg+0x7f0/0xb20 [ 98.134068][ T5905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.134097][ T5905] ? aa_sock_msg_perm+0x144/0x210 [ 98.134143][ T5905] ? apparmor_socket_sendmsg+0x98/0x360 [ 98.134175][ T5905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.134199][ T5905] sock_sendmsg_nosec+0x14e/0x190 [ 98.134226][ T5905] ____sys_sendmsg+0x54e/0x850 [ 98.134264][ T5905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.134308][ T5905] ? import_iovec+0x73/0xa0 [ 98.134343][ T5905] ___sys_sendmsg+0x2a5/0x360 [ 98.134372][ T5905] ? __lock_acquire+0x747/0x2de0 [ 98.134400][ T5905] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.134475][ T5905] ? __fget_files+0x3a2/0x420 [ 98.134506][ T5905] ? __fget_files+0x2a/0x420 [ 98.134549][ T5905] __x64_sys_sendmsg+0x1b1/0x290 [ 98.134608][ T5905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.134659][ T5905] do_syscall_64+0x166/0x520 [ 98.134685][ T5905] ? trace_irq_disable+0x3b/0x140 [ 98.134707][ T5905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.134729][ T5905] ? clear_bhb_loop+0x70/0xc0 [ 98.134754][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.134774][ T5905] RIP: 0033:0x7fc47d19e559 [ 98.134793][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.134809][ T5905] RSP: 002b:00007fc47e070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.134831][ T5905] RAX: ffffffffffffffda RBX: 00007fc47d425fa0 RCX: 00007fc47d19e559 [ 98.134845][ T5905] RDX: 0000000000000810 RSI: 0000200000000380 RDI: 0000000000000004 [ 98.134858][ T5905] RBP: 00007fc47e070090 R08: 0000000000000000 R09: 0000000000000000 [ 98.134870][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.134882][ T5905] R13: 00007fc47d426038 R14: 00007fc47d425fa0 R15: 00007fffcd784558 [ 98.134914][ T5905] [ 98.229127][ T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.538692][ T5763] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 98.567142][ T5909] capability: warning: `syz.2.44' uses 32-bit capabilities (legacy support in use) [ 98.812263][ T32] usb 1-1: device descriptor read/64, error -71 [ 98.882816][ T5915] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 99.202073][ T32] usb usb1-port1: attempt power cycle [ 99.776878][ T5763] usb 2-1: USB disconnect, device number 2 [ 99.819528][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.937143][ T32] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.969576][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 99.970327][ T9] usb 4-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 99.973659][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.973684][ T9] usb 4-1: Product: syz [ 99.973699][ T9] usb 4-1: Manufacturer: syz [ 99.973715][ T9] usb 4-1: SerialNumber: syz [ 100.022902][ T9] usb 4-1: config 0 descriptor?? [ 100.041261][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 100.062245][ T5940] jffs2: notice: (5940) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.090688][ T32] usb 1-1: device descriptor read/8, error -71 [ 100.122108][ T5938] zonefs (nullb0) ERROR: Not a zoned block device [ 100.661452][ T5944] Zero length message leads to an empty skb [ 100.721796][ T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.949138][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.959970][ T9] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 100.970953][ T32] usb 1-1: device not accepting address 6, error -71 [ 100.994074][ T32] usb usb1-port1: unable to enumerate USB device [ 101.137132][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.152698][ T9] usb 4-1: USB disconnect, device number 4 [ 101.231365][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.693520][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.802535][ T5957] FAULT_INJECTION: forcing a failure. [ 101.802535][ T5957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.802564][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.3.58 Not tainted syzkaller #0 PREEMPT(full) [ 101.802584][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.802595][ T5957] Call Trace: [ 101.802602][ T5957] [ 101.802611][ T5957] dump_stack_lvl+0xe8/0x150 [ 101.802640][ T5957] should_fail_ex+0x3eb/0x540 [ 101.802671][ T5957] _copy_from_user+0x2d/0xb0 [ 101.802699][ T5957] get_timespec64+0x96/0x1b0 [ 101.802722][ T5957] ? __pfx_get_timespec64+0x10/0x10 [ 101.802744][ T5957] ? fdget+0x1ac/0x250 [ 101.802814][ T5957] __x64_sys_recvmmsg+0x14b/0x250 [ 101.802859][ T5957] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 101.802904][ T5957] do_syscall_64+0x166/0x520 [ 101.802932][ T5957] ? trace_irq_disable+0x3b/0x140 [ 101.802955][ T5957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.802977][ T5957] ? clear_bhb_loop+0x70/0xc0 [ 101.803004][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.803025][ T5957] RIP: 0033:0x7fc47d19e559 [ 101.803045][ T5957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.803063][ T5957] RSP: 002b:00007fc47e070028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 101.803085][ T5957] RAX: ffffffffffffffda RBX: 00007fc47d425fa0 RCX: 00007fc47d19e559 [ 101.803101][ T5957] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 101.803115][ T5957] RBP: 00007fc47e070090 R08: 0000200000003700 R09: 0000000000000000 [ 101.803129][ T5957] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 101.803142][ T5957] R13: 00007fc47d426038 R14: 00007fc47d425fa0 R15: 00007fffcd784558 [ 101.803176][ T5957] [ 101.856170][ T5763] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.065750][ T32] usb 1-1: device descriptor read/64, error -71 [ 102.218793][ T5964] FAULT_INJECTION: forcing a failure. [ 102.218793][ T5964] name failslab, interval 1, probability 0, space 0, times 0 [ 102.218833][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.3.60 Not tainted syzkaller #0 PREEMPT(full) [ 102.218860][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.218873][ T5964] Call Trace: [ 102.218881][ T5964] [ 102.218891][ T5964] dump_stack_lvl+0xe8/0x150 [ 102.218926][ T5964] should_fail_ex+0x3eb/0x540 [ 102.218960][ T5964] ? __alloc_skb+0x1db/0x7a0 [ 102.218987][ T5964] should_failslab+0xa8/0x100 [ 102.219012][ T5964] ? __alloc_skb+0x1db/0x7a0 [ 102.219037][ T5964] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 102.219066][ T5964] ? __alloc_skb+0x18d/0x7a0 [ 102.219095][ T5964] ? __alloc_skb+0x1db/0x7a0 [ 102.219129][ T5964] __alloc_skb+0x1db/0x7a0 [ 102.219161][ T5964] netlink_ack+0x136/0xb30 [ 102.219182][ T5964] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.219220][ T5964] ? __asan_memcpy+0x40/0x70 [ 102.219259][ T5964] netlink_rcv_skb+0x2a4/0x4a0 [ 102.219284][ T5964] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.219316][ T5964] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.219358][ T5964] ? down_read+0x2b9/0x320 [ 102.219395][ T5964] genl_rcv+0x28/0x40 [ 102.219423][ T5964] netlink_unicast+0x8ef/0xa80 [ 102.219478][ T5964] netlink_sendmsg+0x7f0/0xb20 [ 102.219510][ T5964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.219539][ T5964] ? aa_sock_msg_perm+0x144/0x210 [ 102.219577][ T5964] ? apparmor_socket_sendmsg+0x98/0x360 [ 102.219608][ T5964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.219632][ T5964] sock_sendmsg_nosec+0x14e/0x190 [ 102.219659][ T5964] ____sys_sendmsg+0x54e/0x850 [ 102.219696][ T5964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.219738][ T5964] ? import_iovec+0x73/0xa0 [ 102.219773][ T5964] ___sys_sendmsg+0x2a5/0x360 [ 102.219802][ T5964] ? __lock_acquire+0x747/0x2de0 [ 102.219837][ T5964] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.219910][ T5964] ? __fget_files+0x3a2/0x420 [ 102.219941][ T5964] ? __fget_files+0x2a/0x420 [ 102.219983][ T5964] __x64_sys_sendmsg+0x1b1/0x290 [ 102.220017][ T5964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.220074][ T5964] do_syscall_64+0x166/0x520 [ 102.220103][ T5964] ? trace_irq_disable+0x3b/0x140 [ 102.220126][ T5964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.220149][ T5964] ? clear_bhb_loop+0x70/0xc0 [ 102.220177][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.220198][ T5964] RIP: 0033:0x7fc47d19e559 [ 102.220218][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.220236][ T5964] RSP: 002b:00007fc47e070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.220259][ T5964] RAX: ffffffffffffffda RBX: 00007fc47d425fa0 RCX: 00007fc47d19e559 [ 102.220275][ T5964] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 102.220288][ T5964] RBP: 00007fc47e070090 R08: 0000000000000000 R09: 0000000000000000 [ 102.220302][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.220314][ T5964] R13: 00007fc47d426038 R14: 00007fc47d425fa0 R15: 00007fffcd784558 [ 102.220350][ T5964] [ 102.876571][ T5763] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.876621][ T5763] usb 2-1: New USB device found: idVendor=0bfd, idProduct=0112, bcdDevice=bb.9e [ 102.915591][ T32] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 103.037644][ T5763] usb 2-1: config 4 has an invalid interface number: 12 but max is 0 [ 103.037681][ T5763] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 103.037700][ T5763] usb 2-1: config 4 has no interface number 0 [ 103.037739][ T5763] usb 2-1: config 4 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.037762][ T5763] usb 2-1: config 4 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.037787][ T5763] usb 2-1: config 4 interface 12 has no altsetting 0 [ 103.415185][ T5971] FAULT_INJECTION: forcing a failure. [ 103.415185][ T5971] name failslab, interval 1, probability 0, space 0, times 0 [ 103.415213][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.2.63 Not tainted syzkaller #0 PREEMPT(full) [ 103.415233][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.415244][ T5971] Call Trace: [ 103.415251][ T5971] [ 103.415259][ T5971] dump_stack_lvl+0xe8/0x150 [ 103.415288][ T5971] should_fail_ex+0x3eb/0x540 [ 103.415319][ T5971] should_failslab+0xa8/0x100 [ 103.415338][ T5971] ? skb_clone+0x212/0x3a0 [ 103.415366][ T5971] kmem_cache_alloc_noprof+0x9c/0x600 [ 103.415393][ T5971] ? skb_clone+0x212/0x3a0 [ 103.415426][ T5971] skb_clone+0x212/0x3a0 [ 103.415451][ T5971] ? ip_mc_output+0x1d6/0x580 [ 103.415477][ T5971] ip_mc_output+0x1e3/0x580 [ 103.415504][ T5971] ip_send_skb+0x45/0xc0 [ 103.415533][ T5971] udp_send_skb+0x7ed/0xf70 [ 103.415570][ T5971] udp_sendmsg+0x1971/0x2140 [ 103.415613][ T5971] ? __pfx_udp_sendmsg+0x10/0x10 [ 103.415648][ T5971] ? __lock_acquire+0x747/0x2de0 [ 103.415671][ T5971] ? current_check_autobind_udp_socket+0x210/0x4b0 [ 103.415717][ T5971] ? aa_sock_msg_perm+0xfc/0x210 [ 103.415743][ T5971] ? sock_rps_record_flow+0x19/0x350 [ 103.415770][ T5971] ? inet_sendmsg+0x23e/0x320 [ 103.415791][ T5971] ? apparmor_socket_sendmsg+0x98/0x360 [ 103.415817][ T5971] ? __pfx_inet_sendmsg+0x10/0x10 [ 103.415840][ T5971] sock_sendmsg_nosec+0x10f/0x190 [ 103.415862][ T5971] ____sys_sendmsg+0x54e/0x850 [ 103.415893][ T5971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.415928][ T5971] ? import_iovec+0x73/0xa0 [ 103.415958][ T5971] ___sys_sendmsg+0x2a5/0x360 [ 103.415982][ T5971] ? __lock_acquire+0x747/0x2de0 [ 103.416004][ T5971] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.416035][ T5971] ? kstrtouint+0x6e/0xe0 [ 103.416081][ T5971] ? __fget_files+0x3a2/0x420 [ 103.416108][ T5971] ? __fget_files+0x2a/0x420 [ 103.416149][ T5971] __sys_sendmmsg+0x273/0x4d0 [ 103.416181][ T5971] ? __pfx___sys_sendmmsg+0x10/0x10 [ 103.416215][ T5971] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.416256][ T5971] ? ksys_write+0x242/0x270 [ 103.416288][ T5971] ? __pfx_ksys_write+0x10/0x10 [ 103.416322][ T5971] __x64_sys_sendmmsg+0xa0/0xc0 [ 103.416351][ T5971] do_syscall_64+0x166/0x520 [ 103.416376][ T5971] ? trace_irq_disable+0x3b/0x140 [ 103.416396][ T5971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.416415][ T5971] ? clear_bhb_loop+0x70/0xc0 [ 103.416438][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.416458][ T5971] RIP: 0033:0x7ff899b9e559 [ 103.416475][ T5971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.416490][ T5971] RSP: 002b:00007ff89ab1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.416509][ T5971] RAX: ffffffffffffffda RBX: 00007ff899e25fa0 RCX: 00007ff899b9e559 [ 103.416523][ T5971] RDX: 000000000800001d RSI: 0000200000000780 RDI: 0000000000000003 [ 103.416535][ T5971] RBP: 00007ff89ab1e090 R08: 0000000000000000 R09: 0000000000000000 [ 103.416545][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.416556][ T5971] R13: 00007ff899e26038 R14: 00007ff899e25fa0 R15: 00007ffee86d76b8 [ 103.416585][ T5971] [ 103.423037][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.423100][ T5763] usb 2-1: Product: syz [ 103.423145][ T5763] usb 2-1: Manufacturer: syz [ 103.423186][ T5763] usb 2-1: SerialNumber: syz [ 104.042349][ T5973] netlink: 4172 bytes leftover after parsing attributes in process `syz.0.64'. [ 104.044664][ T5973] netlink: 'syz.0.64': attribute type 5 has an invalid length. [ 104.128936][ T5763] usb 2-1: can't set config #4, error -71 [ 104.217972][ T32] usb 1-1: device descriptor read/64, error -71 [ 104.240166][ T5763] usb 2-1: USB disconnect, device number 3 [ 104.389478][ T32] usb usb1-port1: attempt power cycle [ 104.977109][ T5987] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 105.020949][ T5987] FAULT_INJECTION: forcing a failure. [ 105.020949][ T5987] name failslab, interval 1, probability 0, space 0, times 0 [ 105.020979][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT(full) [ 105.021002][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.021015][ T5987] Call Trace: [ 105.021023][ T5987] [ 105.021032][ T5987] dump_stack_lvl+0xe8/0x150 [ 105.021064][ T5987] should_fail_ex+0x3eb/0x540 [ 105.021100][ T5987] should_failslab+0xa8/0x100 [ 105.021122][ T5987] ? alloc_file_pseudo_noaccount+0x11a/0x2b0 [ 105.021151][ T5987] kmem_cache_alloc_noprof+0x9c/0x600 [ 105.021178][ T5987] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 105.021207][ T5987] ? alloc_file_pseudo_noaccount+0x11a/0x2b0 [ 105.021242][ T5987] alloc_file_pseudo_noaccount+0x11a/0x2b0 [ 105.021274][ T5987] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 105.021301][ T5987] ? iput+0x451/0xf00 [ 105.021341][ T5987] bdev_file_open_by_dev+0x181/0x240 [ 105.021375][ T5987] setup_bdev_super+0x5a/0x680 [ 105.021399][ T5987] get_tree_bdev_flags+0x388/0x4f0 [ 105.021421][ T5987] ? __pfx_zonefs_fill_super+0x10/0x10 [ 105.021443][ T5987] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 105.021480][ T5987] vfs_get_tree+0x92/0x2a0 [ 105.021529][ T5987] do_new_mount+0x325/0xb00 [ 105.021568][ T5987] ? __pfx_do_new_mount+0x10/0x10 [ 105.021602][ T5987] ? ns_capable+0x84/0xe0 [ 105.021629][ T5987] ? path_mount+0x647/0x1050 [ 105.021664][ T5987] ? user_path_at+0xd4/0x160 [ 105.021700][ T5987] __se_sys_mount+0x31d/0x420 [ 105.021739][ T5987] ? __pfx___se_sys_mount+0x10/0x10 [ 105.021776][ T5987] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 105.021805][ T5987] ? __x64_sys_mount+0x20/0xc0 [ 105.021839][ T5987] do_syscall_64+0x166/0x520 [ 105.021869][ T5987] ? trace_irq_disable+0x3b/0x140 [ 105.021893][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.021916][ T5987] ? clear_bhb_loop+0x70/0xc0 [ 105.021942][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.021965][ T5987] RIP: 0033:0x7ff899b9e559 [ 105.021984][ T5987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.022003][ T5987] RSP: 002b:00007ff89ab1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.022027][ T5987] RAX: ffffffffffffffda RBX: 00007ff899e25fa0 RCX: 00007ff899b9e559 [ 105.022043][ T5987] RDX: 0000200000000000 RSI: 0000200000000200 RDI: 0000200000000080 [ 105.022059][ T5987] RBP: 00007ff899c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 105.022073][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.022086][ T5987] R13: 00007ff899e26038 R14: 00007ff899e25fa0 R15: 00007ffee86d76b8 [ 105.022121][ T5987] [ 105.022624][ T5987] /dev/nullb0: Can't open blockdev [ 106.175676][ T5996] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 106.175701][ T5996] netlink: 248 bytes leftover after parsing attributes in process `syz.0.73'. [ 106.521787][ T6003] netlink: 'syz.0.76': attribute type 3 has an invalid length. [ 106.549557][ T6003] process 'syz.0.76' launched './file0' with NULL argv: empty string added [ 106.726621][ T6007] sit0: entered promiscuous mode [ 106.750410][ T6007] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 106.750432][ T6007] netlink: 1 bytes leftover after parsing attributes in process `syz.0.78'. [ 107.365303][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 107.519946][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.519994][ T10] usb 1-1: New USB device found: idVendor=2c7c, idProduct=030a, bcdDevice=cf.d0 [ 107.521138][ T10] usb 1-1: config 114 has an invalid interface number: 49 but max is 0 [ 107.521162][ T10] usb 1-1: config 114 has no interface number 0 [ 107.521200][ T10] usb 1-1: config 114 interface 49 altsetting 232 bulk endpoint 0x2 has invalid maxpacket 1023 [ 107.521223][ T10] usb 1-1: config 114 interface 49 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 107.521247][ T10] usb 1-1: config 114 interface 49 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 107.521278][ T10] usb 1-1: config 114 interface 49 has no altsetting 0 [ 107.544565][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.544602][ T10] usb 1-1: Product: syz [ 107.544616][ T10] usb 1-1: Manufacturer: syz [ 107.544631][ T10] usb 1-1: SerialNumber: syz [ 107.703393][ T6012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.703569][ T6012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.994849][ T6016] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 109.005079][ T10] option 1-1:114.49: GSM modem (1-port) converter detected [ 109.078846][ T10] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 109.115265][ T10] usb 1-1: USB disconnect, device number 10 [ 109.145581][ T10] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 109.150379][ T10] option 1-1:114.49: device disconnected [ 110.963548][ T6047] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.592816][ T6056] dlm: no locking on control device [ 111.602538][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.603890][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.803182][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 111.954396][ T9] usb 1-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 111.955413][ T9] usb 1-1: config index 0 descriptor too short (expected 47, got 46) [ 111.955435][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.955475][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 111.955511][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.193949][ T9] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 112.194023][ T9] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 112.194401][ T9] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 112.238242][ T9] usb 1-1: USB disconnect, device number 11 [ 112.831608][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.845859][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.850143][ T6067] Invalid ELF header magic: != ELF [ 113.044603][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 113.194283][ T9] usb 1-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 113.195524][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.197732][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.197755][ T9] usb 1-1: Product: syz [ 113.197770][ T9] usb 1-1: Manufacturer: syz [ 113.197785][ T9] usb 1-1: SerialNumber: syz [ 113.201746][ T9] usb 1-1: config 0 descriptor?? [ 113.267861][ T9] ims_pcu 1-1:0.0: Zero length descriptor [ 113.267912][ T9] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 113.467254][ T9] usb 1-1: USB disconnect, device number 12 [ 114.086410][ T6089] FAULT_INJECTION: forcing a failure. [ 114.086410][ T6089] name failslab, interval 1, probability 0, space 0, times 0 [ 114.086448][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT(full) [ 114.086468][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.086479][ T6089] Call Trace: [ 114.086486][ T6089] [ 114.086494][ T6089] dump_stack_lvl+0xe8/0x150 [ 114.086534][ T6089] should_fail_ex+0x3eb/0x540 [ 114.086564][ T6089] ? __alloc_skb+0x1db/0x7a0 [ 114.086587][ T6089] should_failslab+0xa8/0x100 [ 114.086611][ T6089] ? __alloc_skb+0x1db/0x7a0 [ 114.086633][ T6089] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 114.086659][ T6089] ? __alloc_skb+0x18d/0x7a0 [ 114.086682][ T6089] ? __alloc_skb+0x1db/0x7a0 [ 114.086711][ T6089] __alloc_skb+0x1db/0x7a0 [ 114.086738][ T6089] netlink_ack+0x136/0xb30 [ 114.086756][ T6089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.086789][ T6089] ? __asan_memcpy+0x40/0x70 [ 114.086821][ T6089] netlink_rcv_skb+0x2a4/0x4a0 [ 114.086842][ T6089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.086869][ T6089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.086923][ T6089] ? down_read+0x2b9/0x320 [ 114.086957][ T6089] genl_rcv+0x28/0x40 [ 114.086982][ T6089] netlink_unicast+0x8ef/0xa80 [ 114.087032][ T6089] netlink_sendmsg+0x7f0/0xb20 [ 114.087061][ T6089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.087087][ T6089] ? aa_sock_msg_perm+0x144/0x210 [ 114.087129][ T6089] ? apparmor_socket_sendmsg+0x98/0x360 [ 114.087158][ T6089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.087179][ T6089] sock_sendmsg_nosec+0x14e/0x190 [ 114.087204][ T6089] ____sys_sendmsg+0x54e/0x850 [ 114.087238][ T6089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.087275][ T6089] ? import_iovec+0x73/0xa0 [ 114.087307][ T6089] ___sys_sendmsg+0x2a5/0x360 [ 114.087333][ T6089] ? __lock_acquire+0x747/0x2de0 [ 114.087358][ T6089] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.087424][ T6089] ? __fget_files+0x3a2/0x420 [ 114.087452][ T6089] ? __fget_files+0x2a/0x420 [ 114.087490][ T6089] __x64_sys_sendmsg+0x1b1/0x290 [ 114.087522][ T6089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.087573][ T6089] do_syscall_64+0x166/0x520 [ 114.087598][ T6089] ? trace_irq_disable+0x3b/0x140 [ 114.087620][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.087640][ T6089] ? clear_bhb_loop+0x70/0xc0 [ 114.087665][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.087685][ T6089] RIP: 0033:0x7fc559f9e559 [ 114.087711][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.087727][ T6089] RSP: 002b:00007fc55adce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.087752][ T6089] RAX: ffffffffffffffda RBX: 00007fc55a225fa0 RCX: 00007fc559f9e559 [ 114.087767][ T6089] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 114.087779][ T6089] RBP: 00007fc55adce090 R08: 0000000000000000 R09: 0000000000000000 [ 114.087791][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.087802][ T6089] R13: 00007fc55a226038 R14: 00007fc55a225fa0 R15: 00007fff58da25c8 [ 114.087835][ T6089] [ 114.407814][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 114.554339][ T10] usb 4-1: device descriptor read/64, error -71 [ 114.792765][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 114.931935][ T10] usb 4-1: device descriptor read/64, error -71 [ 115.041544][ T10] usb usb4-port1: attempt power cycle [ 115.325035][ T6099] program syz.1.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.379610][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 115.401347][ T5724] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 115.403100][ T10] usb 4-1: device descriptor read/8, error -71 [ 115.547716][ T5724] usb 1-1: Using ep0 maxpacket: 8 [ 115.548525][ T5724] usb 1-1: New USB device found: idVendor=046d, idProduct=c14f, bcdDevice=ff.ff [ 115.549826][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.549854][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.551088][ T5724] usb 1-1: New USB device strings: Mfr=237, Product=0, SerialNumber=0 [ 115.551110][ T5724] usb 1-1: Manufacturer: syz [ 115.554063][ T5724] usb 1-1: config 0 descriptor?? [ 115.637214][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 115.658008][ T10] usb 4-1: device descriptor read/8, error -71 [ 115.766638][ T10] usb usb4-port1: unable to enumerate USB device [ 115.827669][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.829690][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.114212][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.263931][ T10] usb 3-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 116.265392][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.265416][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.266857][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.266882][ T10] usb 3-1: SerialNumber: syz [ 116.537942][ T10] usb 3-1: 0:2 : does not exist [ 116.538050][ T10] usb 3-1: unit 5 not found! [ 116.595885][ T10] usb 3-1: USB disconnect, device number 4 [ 116.658984][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.126120][ T6110] loop8: detected capacity change from 0 to 7 [ 117.145912][ T6110] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 117.145944][ T6110] loop8: partition table partially beyond EOD, truncated [ 117.146745][ T6110] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 117.175985][ T6110] loop8: p2 start 121280928 is beyond EOD, truncated [ 117.272287][ T5611] udevd[5611]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 118.422156][ T10] usb 1-1: USB disconnect, device number 13 [ 133.767058][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.781729][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.203792][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.218285][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.691537][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 247.698551][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6149/1:b..l.. [ 247.707396][ C0] rcu: (detected by 0, t=10502 jiffies, g=18385, q=974511 ncpus=2) [ 247.715439][ C0] task:syz.1.111 state:R running task stack:28632 pid:6149 tgid:6141 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 247.729024][ C0] Call Trace: [ 247.732350][ C0] [ 247.735316][ C0] __schedule+0x17dd/0x5820 [ 247.739894][ C0] ? __pfx___schedule+0x10/0x10 [ 247.744814][ C0] ? __lock_acquire+0x747/0x2de0 [ 247.749900][ C0] preempt_schedule_irq+0x4b/0x90 [ 247.754968][ C0] irqentry_exit+0x14f/0x9b0 [ 247.759602][ C0] ? trace_irq_disable+0x3b/0x140 [ 247.764746][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.770790][ C0] RIP: 0010:lock_acquire+0x5/0x350 [ 247.775934][ C0] Code: 13 a9 00 ff 00 ff 0f 95 c0 c3 cc cc cc cc cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 58 4c 89 cb 45 89 c7 41 89 cd [ 247.795580][ C0] RSP: 0018:ffffc900063576f0 EFLAGS: 00000246 [ 247.801678][ C0] RAX: 0000000000000001 RBX: ffffffff816efd53 RCX: 0000000000000002 [ 247.809762][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9015a420 [ 247.817759][ C0] RBP: 1ffff92000c6af08 R08: 0000000000000000 R09: 0000000000000000 [ 247.825771][ C0] R10: ffffc90006357858 R11: fffff52000c6af0d R12: dffffc0000000000 [ 247.833799][ C0] R13: ffffffff817889cf R14: ffffc90006357808 R15: 1ffff92000c6af01 [ 247.841810][ C0] ? unwind_next_frame+0x8f/0x2550 [ 247.846955][ C0] ? arch_stack_walk+0xe3/0x150 [ 247.851939][ C0] unwind_next_frame+0xac/0x2550 [ 247.856915][ C0] ? unwind_next_frame+0x8f/0x2550 [ 247.862064][ C0] ? __unwind_start+0xed/0x660 [ 247.866868][ C0] ? unwind_next_frame+0x8f/0x2550 [ 247.872018][ C0] __unwind_start+0x514/0x660 [ 247.876738][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.882924][ C0] arch_stack_walk+0xe3/0x150 [ 247.887641][ C0] ? arch_stack_walk+0xe3/0x150 [ 247.892528][ C0] stack_trace_save+0xa9/0x100 [ 247.897326][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 247.902722][ C0] ? __lock_acquire+0x747/0x2de0 [ 247.907690][ C0] save_stack+0x122/0x230 [ 247.912043][ C0] ? __pfx_save_stack+0x10/0x10 [ 247.916942][ C0] ? lock_acquire+0x115/0x350 [ 247.921679][ C0] __reset_page_owner+0x73/0x2a0 [ 247.926653][ C0] __free_frozen_pages+0xc97/0xd90 [ 247.931843][ C0] __slab_free+0x269/0x2c0 [ 247.936304][ C0] ? qlist_free_all+0x8e/0x100 [ 247.941109][ C0] qlist_free_all+0x99/0x100 [ 247.945762][ C0] kasan_quarantine_reduce+0x148/0x160 [ 247.951285][ C0] __kasan_kmalloc+0x22/0xb0 [ 247.955910][ C0] __kmalloc_noprof+0x366/0x710 [ 247.960854][ C0] ? __kmalloc_noprof+0x1a6/0x710 [ 247.965944][ C0] ? security_sk_alloc+0x52/0x360 [ 247.971000][ C0] ? security_sk_alloc+0x52/0x360 [ 247.976139][ C0] security_sk_alloc+0x52/0x360 [ 247.981044][ C0] sk_prot_alloc+0x101/0x210 [ 247.985684][ C0] ? sk_alloc+0x27/0x390 [ 247.989965][ C0] sk_alloc+0x3a/0x390 [ 247.994093][ C0] packet_create+0x100/0x8b0 [ 247.998736][ C0] __sock_create+0x4b5/0xac0 [ 248.003369][ C0] __sys_socket+0xd6/0x1b0 [ 248.007870][ C0] __x64_sys_socket+0x7a/0x90 [ 248.012579][ C0] do_syscall_64+0x166/0x520 [ 248.017243][ C0] ? trace_irq_disable+0x3b/0x140 [ 248.022292][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.028390][ C0] ? clear_bhb_loop+0x70/0xc0 [ 248.033104][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.039015][ C0] RIP: 0033:0x7f42bf79e559 [ 248.043450][ C0] RSP: 002b:00007f42bd9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 248.051916][ C0] RAX: ffffffffffffffda RBX: 00007f42bfa26450 RCX: 00007f42bf79e559 [ 248.059913][ C0] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 248.067916][ C0] RBP: 00007f42bf835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 248.075918][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.083918][ C0] R13: 00007f42bfa264e8 R14: 00007f42bfa26450 R15: 00007fffb22758f8 [ 248.091946][ C0] [ 248.095026][ C0] rcu: rcu_preempt kthread starved for 436 jiffies! g18385 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 248.105899][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 248.115898][ C0] rcu: RCU grace-period kthread stack dump: [ 248.121803][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 248.135356][ C0] Call Trace: [ 248.138659][ C0] [ 248.141627][ C0] __schedule+0x17dd/0x5820 [ 248.146183][ C0] ? __lock_acquire+0x747/0x2de0 [ 248.151187][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 248.156358][ C0] ? __pfx___schedule+0x10/0x10 [ 248.161249][ C0] ? lock_acquire+0x115/0x350 [ 248.165968][ C0] ? schedule+0x90/0x2b0 [ 248.170267][ C0] schedule+0x164/0x2b0 [ 248.174468][ C0] schedule_timeout+0x152/0x2c0 [ 248.179359][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 248.184766][ C0] ? __pfx_process_timeout+0x10/0x10 [ 248.190098][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 248.195949][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 248.201526][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 248.207156][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 248.212093][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 248.218291][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 248.223605][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 248.228865][ C0] rcu_gp_kthread+0x9c/0x340 [ 248.233535][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 248.238777][ C0] ? __kthread_parkme+0x71/0x1f0 [ 248.243768][ C0] ? __kthread_parkme+0x199/0x1f0 [ 248.248848][ C0] kthread+0x38b/0x480 [ 248.252970][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 248.258241][ C0] ? __pfx_kthread+0x10/0x10 [ 248.262877][ C0] ret_from_fork+0x514/0xb70 [ 248.267523][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 248.272679][ C0] ? __switch_to+0xc78/0x1410 [ 248.277396][ C0] ? __pfx_kthread+0x10/0x10 [ 248.282060][ C0] ret_from_fork_asm+0x1a/0x30 [ 248.286875][ C0] [ 248.289944][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 248.296321][ C0] Sending NMI from CPU 0 to CPUs 1: [ 248.301572][ C1] NMI backtrace for cpu 1 [ 248.301589][ C1] CPU: 1 UID: 0 PID: 27 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 248.301614][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 248.301626][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 248.301650][ C1] RIP: 0010:lock_release+0xa8/0x3c0 [ 248.301686][ C1] Code: 00 0f 85 01 02 00 00 49 81 3e a0 49 a4 95 0f 84 f4 01 00 00 9c 5b fa 48 c7 c7 23 b8 7c 8e e8 bf fc 64 0a 65 ff 05 60 8f 3e 13 44 24 24 01 00 00 00 83 3d 79 3d 19 10 00 0f 84 9a 01 00 00 41 [ 248.301700][ C1] RSP: 0018:ffffc90000a37bf8 EFLAGS: 00000002 [ 248.301715][ C1] RAX: 0000000000000001 RBX: 0000000000000206 RCX: 8000000000000101 [ 248.301728][ C1] RDX: ffffffff92577101 RSI: ffffffff8e7cb823 RDI: ffffffff8c8fbd80 [ 248.301741][ C1] RBP: 1ffffffff24aee01 R08: ffffc90000a1eee0 R09: 0000000000000000 [ 248.301754][ C1] R10: ffffc90000a37d58 R11: fffff52000146fad R12: ffffc90000a18000 [ 248.301767][ C1] R13: ffffffff817889cf R14: ffffffff9015a420 R15: ffff88801faa8000 [ 248.301781][ C1] FS: 0000000000000000(0000) GS:ffff8881234f7000(0000) knlGS:0000000000000000 [ 248.301796][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.301808][ C1] CR2: 00007fffcd7837dc CR3: 00000000792a8000 CR4: 00000000003526f0 [ 248.301824][ C1] Call Trace: [ 248.301830][ C1] [ 248.301840][ C1] ? unwind_next_frame+0x8f/0x2550 [ 248.301861][ C1] unwind_next_frame+0x1baa/0x2550 [ 248.301883][ C1] ? __local_bh_enable_ip+0x100/0x140 [ 248.301902][ C1] ? unwind_next_frame+0x8f/0x2550 [ 248.301934][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.301951][ C1] arch_stack_walk+0x11b/0x150 [ 248.301970][ C1] ? blake2s_compress+0xfa/0x1c00 [ 248.301989][ C1] ? fill_pool+0x163/0x610 [ 248.302004][ C1] stack_trace_save+0xa9/0x100 [ 248.302019][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 248.302036][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 248.302062][ C1] ? fill_pool+0x163/0x610 [ 248.302076][ C1] kasan_save_track+0x3e/0x80 [ 248.302102][ C1] ? kasan_save_track+0x3e/0x80 [ 248.302126][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 248.302140][ C1] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 248.302162][ C1] ? fill_pool+0x163/0x610 [ 248.302175][ C1] ? debug_object_activate+0x38d/0x420 [ 248.302200][ C1] ? rcu_do_enqueue+0x2a/0x870 [ 248.302226][ C1] ? call_rcu+0x20e/0x300 [ 248.302244][ C1] ? skb_release_head_state+0x71/0x370 [ 248.302267][ C1] ? __kfree_skb+0x24/0x210 [ 248.302288][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 248.302314][ C1] ? nft_synproxy_do_eval+0x389/0x5d0 [ 248.302340][ C1] ? nft_do_chain+0x48d/0x1b10 [ 248.302356][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 248.302370][ C1] ? nf_hook_slow+0xc5/0x220 [ 248.302390][ C1] ? NF_HOOK+0x21f/0x3c0 [ 248.302405][ C1] ? NF_HOOK+0x336/0x3c0 [ 248.302418][ C1] ? process_backlog+0xa6b/0x18b0 [ 248.302438][ C1] ? __napi_poll+0xaa/0x330 [ 248.302456][ C1] ? net_rx_action+0x61d/0xf50 [ 248.302475][ C1] ? handle_softirqs+0x265/0x8d0 [ 248.302491][ C1] ? do_softirq+0x77/0xd0 [ 248.302507][ C1] ? __local_bh_enable_ip+0x100/0x140 [ 248.302539][ C1] __kasan_slab_alloc+0x6c/0x80 [ 248.302580][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 248.302602][ C1] ? kasan_save_stack+0x3e/0x60 [ 248.302628][ C1] ? fill_pool+0x163/0x610 [ 248.302642][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 248.302665][ C1] ? __kfree_skb+0x24/0x210 [ 248.302687][ C1] ? fill_pool+0x163/0x610 [ 248.302705][ C1] fill_pool+0x163/0x610 [ 248.302721][ C1] ? __pfx_fill_pool+0x10/0x10 [ 248.302747][ C1] ? worker_thread+0xa47/0xfb0 [ 248.302768][ C1] ? ret_from_fork+0x514/0xb70 [ 248.302793][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 248.302821][ C1] ? debug_object_activate+0x364/0x420 [ 248.302848][ C1] debug_object_activate+0x38d/0x420 [ 248.302879][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 248.302897][ C1] rcu_do_enqueue+0x2a/0x870 [ 248.302929][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 248.302947][ C1] call_rcu+0x20e/0x300 [ 248.302969][ C1] ? __pfx_call_rcu+0x10/0x10 [ 248.302992][ C1] ? dst_release+0x126/0x1b0 [ 248.303011][ C1] skb_release_head_state+0x71/0x370 [ 248.303036][ C1] __kfree_skb+0x24/0x210 [ 248.303060][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 248.303092][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 248.303121][ C1] ? nf_ip_checksum+0x13c/0x510 [ 248.303150][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 248.303181][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 248.303209][ C1] ? __lock_acquire+0x747/0x2de0 [ 248.303231][ C1] nft_do_chain+0x48d/0x1b10 [ 248.303252][ C1] ? __lock_acquire+0x747/0x2de0 [ 248.303270][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 248.303290][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 248.303329][ C1] nft_do_chain_inet+0x360/0x4b0 [ 248.303347][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 248.303363][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 248.303392][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 248.303416][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 248.303433][ C1] nf_hook_slow+0xc5/0x220 [ 248.303457][ C1] NF_HOOK+0x21f/0x3c0 [ 248.303474][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 248.303492][ C1] ? NF_HOOK+0x9e/0x3c0 [ 248.303507][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 248.303542][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 248.303568][ C1] ? ip_local_deliver+0x113/0x190 [ 248.303587][ C1] NF_HOOK+0x336/0x3c0 [ 248.303604][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 248.303621][ C1] ? NF_HOOK+0x9e/0x3c0 [ 248.303637][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 248.303655][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 248.303672][ C1] ? ip_rcv_core+0x88d/0xd50 [ 248.303691][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 248.303707][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 248.303724][ C1] process_backlog+0xa6b/0x18b0 [ 248.303749][ C1] ? process_backlog+0x3de/0x18b0 [ 248.303778][ C1] __napi_poll+0xaa/0x330 [ 248.303800][ C1] net_rx_action+0x61d/0xf50 [ 248.303829][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 248.303865][ C1] handle_softirqs+0x265/0x8d0 [ 248.303889][ C1] ? kernel_fpu_end+0x62/0x80 [ 248.303910][ C1] do_softirq+0x77/0xd0 [ 248.303927][ C1] [ 248.303933][ C1] [ 248.303940][ C1] __local_bh_enable_ip+0x100/0x140 [ 248.303959][ C1] blake2s_compress+0xfa/0x1c00 [ 248.303979][ C1] ? __asan_memset+0x22/0x50 [ 248.304004][ C1] ? encode_point+0x8346/0x84b0 [ 248.304030][ C1] ? __pfx_encode_point+0x10/0x10 [ 248.304049][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 248.304072][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 248.304103][ C1] blake2s_update+0x140/0x450 [ 248.304124][ C1] hmac+0x2d1/0x3b0 [ 248.304149][ C1] ? __pfx_hmac+0x10/0x10 [ 248.304190][ C1] kdf+0xff/0x290 [ 248.304216][ C1] ? __pfx_kdf+0x10/0x10 [ 248.304251][ C1] wg_noise_handshake_consume_initiation+0x273/0x9b0 [ 248.304280][ C1] ? wg_packet_encrypt_worker+0x16dd/0x1750 [ 248.304298][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 248.304316][ C1] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 248.304345][ C1] ? __local_bh_enable_ip+0xe9/0x140 [ 248.304367][ C1] ? __asan_memset+0x22/0x50 [ 248.304391][ C1] ? blake2s_final+0x145/0x270 [ 248.304411][ C1] ? compute_mac1+0x184/0x200 [ 248.304434][ C1] ? __pfx_compute_mac1+0x10/0x10 [ 248.304465][ C1] ? __crypto_memneq+0x42/0x470 [ 248.304498][ C1] ? wg_packet_handshake_receive_worker+0x2e6/0x10b0 [ 248.304520][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 248.304541][ C1] wg_packet_handshake_receive_worker+0x674/0x10b0 [ 248.304566][ C1] ? look_up_lock_class+0x57/0x110 [ 248.304598][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 248.304620][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.304650][ C1] ? lock_acquire+0x115/0x350 [ 248.304671][ C1] ? rcu_is_watching+0x16/0xb0 [ 248.304693][ C1] ? process_scheduled_works+0x97a/0x1630 [ 248.304715][ C1] process_scheduled_works+0xc3d/0x1630 [ 248.304763][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.304786][ C1] ? assign_work+0x3cf/0x5d0 [ 248.304808][ C1] worker_thread+0xa47/0xfb0 [ 248.304842][ C1] kthread+0x38b/0x480 [ 248.304868][ C1] ? __pfx_worker_thread+0x10/0x10 [ 248.304888][ C1] ? __pfx_kthread+0x10/0x10 [ 248.304914][ C1] ret_from_fork+0x514/0xb70 [ 248.304941][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 248.304966][ C1] ? __switch_to+0xc78/0x1410 [ 248.304989][ C1] ? __pfx_kthread+0x10/0x10 [ 248.305016][ C1] ret_from_fork_asm+0x1a/0x30 [ 248.305048][ C1]