last executing test programs: 27m21.014330251s ago: executing program 32 (id=347): unshare(0x64000600) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) 26m43.008416083s ago: executing program 33 (id=422): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) poll(&(0x7f0000000600)=[{r1, 0x420}], 0x1, 0x80000000) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566773499aabbccddeefb00112233445566778899aabbccddeeff00112233045566778899aabbccccddeeff010000000000000000000200", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x8, 0x37, 0x30, 0x30, 0x30, 0x0, 0x38]}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000580)={'fscrypt:', @desc4}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdd8706e0cdfa6be8411411eb3e0e991467601fa7590931ab1575e497fa2974de1559c8f95118b6680568af90fbd32a6fd249117c5", 0x429}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000980)={'fscrypt:', @auto=[0x36, 0x31, 0x30, 0x63, 0x34, 0x39, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "0011223344556677888899aabbccddeeff00112033445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x33}, 0x48, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000000700), 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) 24m24.249956158s ago: executing program 4 (id=748): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3ffff) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000002100010026bd7000fddbdf250a00000e0100000304000000050015000300000014000100fe8000000000000000000000000000aa14000100fc00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x8000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) r1 = socket(0x2c, 0x3, 0x7fff) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b00010000"], 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c03, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000040c0)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x1, 0x40000000000000, 0xffffffffffffffff, 0x4, 0x0, 0x7572, {0x0, 0x0, 0x9a84, 0xffffffff, 0x0, 0x726, 0x1, 0x6, 0x0, 0x4000, 0x0, 0x0, 0xffffffffffffffff, 0x10000000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r2}, 0x38) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) pipe(&(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c}, 0x38) 24m23.117173876s ago: executing program 1 (id=753): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="201201000000d6efb22f0eaad71196b1b0662e486dfc3e819a7b4ee31aaab72a1239385ae43ff99e87586115c2d2b04c537cc2419b4ac63b5648d2f881bdfc3110"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) 24m22.992539322s ago: executing program 2 (id=754): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x312, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0xa1, 0x48, 0xa0, 0x10, 0x4ca, 0x3010, 0xc65e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x300, 0x1, 0x5, 0x4, 0x50, 0x7, "", [{{0x9, 0x4, 0x72, 0xfa, 0xb, 0x62, 0xb5, 0x51, 0xdb, [], [{{0x9, 0x5, 0xd, 0x4, 0x8, 0x9, 0xa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x200}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x0, 0x8, 0x20, [@generic={0x77, 0x9, "b0e7801bdf5487d13b59e971708e569235580e6b4d1f6e7ab78b30b899239d265cb4c3260e2f09575f6d4a9df44fbcc9362f77cdc29218ba1a1d2c21705c5467c704813fb9985e6af25fc024a9e6db4a8928109e2f73a4564ba1c3d86226cac300298449ae2644e40e7209d5888c0b1886f4985d23"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x1, 0x1, 0x1, [@generic={0x82, 0xa, "3defcff019d804cd49c39d11632b398e8fdb967452b1e67cdc1536470b945476696d37071180c0e9ee8d64413c356b5156b00d861122ff3ed3d6334becd1a6ec222a357cb0147f3c9c2eea97dd7529e4fbe4073b3bd741174d5db996d5af02cb355632cc114395cb330eb8215a6a9501f8751624a43be1d9e33a8a39ef0d2196"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x0, 0xf1, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x401}]}}, {{0x9, 0x5, 0x7, 0x2, 0x48, 0x3, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xd}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x10, 0xc, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @generic={0x41, 0x29, "3a244f348efc2aaa958f424dab8f4979e0401cd8bbe3b2de2fdbbb672c54146eec5eb0561deb875000eebb9f341d305b7867483a6d0b22c17fd3c0108b3d15"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x8, 0x81, 0x3, [@generic={0xd6, 0x22, "44aaa53c97fcb4c2208ade7ff2594b91a5ac52a4b513142e268048072f6663063e7e60b68a783b4a4061eb1c6d71956b5e7dbcfd0a3ef66783279d120f0d3b366a0ee3a8f808f1f20da1481715b4295b528e706c1912a21b5c3b1743b7ea260001439fcc6854b33ac6430898b382b04039631ab7965ee167f3b4b34dc2f78fc9e17e9a12a0c4315a657b7ce4562e2812a795d35a214982f4a2fea3a17d60069672133b79704ffb27613f037e1602af63d906ebbdf375b26ed0f86f2f3563c5acb7d09e7460a8c363c81d8d25fd0710eadc490375"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x4, 0x7, 0x7f, [@generic={0x33, 0x21, "5757134fc0d356daf77ff41ebd5244a0360f7dfe5363c6970191b6ba95a002242e3a2475e0378c94c234aad66f20f93a00"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x80, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xbd, 0x5}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0xe, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5e00}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3bf, 0x7, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x54af}, @generic={0x10, 0x21, "14abb1903671392abfd5d80582fe"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 24m22.237654874s ago: executing program 1 (id=755): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, 0x0, 0x0}, &(0x7f00000041c0)={0x34, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24m22.191521457s ago: executing program 4 (id=756): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r6, &(0x7f0000002640)=[{&(0x7f0000000200)='den', 0x3}], 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000180)={0x2}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r6, r3, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 24m17.331591231s ago: executing program 4 (id=757): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 24m17.138297274s ago: executing program 2 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c0000002b00090025bd7000ffd3df2501"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480b0) 24m17.085726608s ago: executing program 1 (id=759): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000200)={[{}]}) 24m16.762283718s ago: executing program 4 (id=760): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffa, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x2, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) bind$packet(r2, &(0x7f0000000180)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24m16.638630089s ago: executing program 2 (id=761): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) 24m16.441314678s ago: executing program 1 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24m16.125627901s ago: executing program 2 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 24m15.708985117s ago: executing program 1 (id=764): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3ffff) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000002100010026bd7000fddbdf250a00000e0100000304000000050015000300000014000100fe8000000000000000000000000000aa14000100fc00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x8000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) r1 = socket(0x2c, 0x3, 0x7fff) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b00010000"], 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c03, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000040c0)="68c5ac4472cf4c55a95a4033efea47aaa2166bc5bf26041d530b7a8093f52a799ed64f7d388329e03a7263761a603ac78dc4f00e76854b0bf547b01d6e4b755c86cbd1f79f2b52aa37b394b12c8adadea9f0303e786c4f5d1a003d0dd2105d7f913c8b0b37db87660db041e3ef02e74014e152bec1a59404691f8d5536f907db385e0c10b26f5e4b1cb3649b4851fd9497b8a5a46d92ae939db388e9dd4221d56445365516ba4afbaf71f0a1f283af35f6bf0335d4ee45d206eb7d27b9c1b57700cea4b6df1b78b32cc210ce8f9cbd51c6061f5020b25140978d87feeb8fcfebd36bfa26edb914734c8d62cc770ccd47e39e83d37d61e1e40c8dd5c57595c1a1b676b47e61c57e044b80a2115571bfa525911abea7c4dd544f144a54edcffad16f0c4f97a24103cdda4985c5b2f24121e093bd6dea99e8e82285219bf32e7f31cfa72c619e439d9b30963baae00cfa75c343dec4ded492e2be126e8a4a028a4bd8a31c816082689bf4f24a1bb992fcbc6021820e64dc0c5b49700b939032cd0850e99fcd18987f49ddcba704f696c620e134d4952668e0b26f3e38b50eee1b9cc4040a73ac78478fa14f02288fe6703875c0e2588d120cce70e239c0d625c2dff76eebadf2e4abf3b48b14592be27efe6901a7b9a3e368afe0bc9eacc385df9fc50d8d511cd3563546c3e3eac6888282dc18aa0dd5ca8f6c9fa553329a824fc926357bee26103a7d6f6f97aaf40a74f9895a32572cad2f847d3a43dd46e56366bef0ac50075fa0dd4ca9112cb2d1f5ff104d07e045e0f52d501fdfb4d8b5b25ddda0d50a9dd227ea44f65aa187e42ef04f81c03ef7b98d87c6aa528a23aa03633b6f8851932a293c3cff455d7492ad2d624468dba864a0bca66e73dd10e30c9b92af9ebb918dbc47cdade725f4cbfa5bcd41f7165363a375918de916506cf34debb32c73c07912186604f0643fe9cdc48df54382dffbd6618fde5cd539ed66017501cb19341578197eb1c628c2bd66d6c0492dac5287e8151341e04b5233bdb75c76115929012e85624457e6fdc01a76586ab1fae4ca66f3e8cfadc12de75de7c7136ec1c81fc63fdd904646b549b745882a6a4fdc6be24069ed96506ba98175c72d111173a4605b468e09d27a03372a6ddd41cd0258a0376bd4a7fdbb81bcc96b0a74f5995a5441bbb3eb56c0a5fc95fc6174526c7eb733781abccf374886e5660300220475bdd90868bba8fbe24f28f4562d2f16717e78508754332d6f631d3ab1db0a1dab327a062c3425d05205ec2e501d88557976dfccef49da5374fcca03faa2965af1fed40bcc38c9224ae2b690ca770a48535bd12ad48e3b67ca34a568aa77a4054796ca54d9fa166735aac622f70f30f54170c28a8945575a90c6b6c060174544d2d0c6e0ba45d7e119539fec300b38c20ab49ec49bf966d5195dde7b62dd5d732b590743ebf83ca79e20d3a7a96cfcd3d5ed362116501d6c7829aeb373d75c34885f97cc7d46c232eaa8eb766fe7b4f5dc544018e53acd585aa3fc37fa2f5da0598de6fb4fbe6e853e0399e1161849bf28c7f3e70fe586d90f6e23ca784f9a62a6fb26a30fc4b0daab410f40985b2ccf33fa3b134c46018d5f490e19a1a6358fb64fca2262b40605226f736a419120eb12d9839ae5e00dda82b0e38d035aba5b7c64bad62690d0be82644c4bc3389a50e778c57f5d565c7325ae1d26191b0b35718f98d0703203cd15f797e9d0851f08a5043d38c7b70afa73d03d76c1b3a0beb2883e7071ae392255eb93f8b7766aa8e8476154cad09543d5663f5218a4ccb1d5221aa2b5ff384fa2deebd3bee5bd59498de9e69fc0312a0e9f95d473c3a0114cef6be8e83f13dad24feaf8e0202ae31d9d72d8adc898f5efa2056188c911b62362b78570cb388d72d0fb66e9f51327074c76b6a811ec56e325cbad4fd7e1688567a5832e559bcf9054f74e35c72c0645e76414395f305a5c20093d51aaced12f8f41c91c1fc105c48ab6eb5a6ea98d2feeba9fca5f6f87c1ecda7ede362a7b3f549437863ca0b3d718ac440156c63913b0dcd593f6c7194467cb4f4ce53c100dc0802e3a05523fc34ea3745449317db3eadf1f24a35f7230323148c4daa3cb3b200a696dec875dff60ff8d934a081a3492542db94c02ae1e1fee8e9b4ed05ba7bd522e8d93f3e0258cf709ca23ec1f0da74cee30f06703844746954a63eb05f013e1c3e0b52867d4d4c28ce4a3b8e1810f7af52d3f9aa4a1890f4b102664fcb3e47e2d1e84aab2498f8e356dc08c1b6bc126527ed6a052eb514c5e4447683f810f9061aee5b88a76b6cc75194babb655bc89bbd44bc114f93f086a2591fcb566dcb3e25afc921b0347977824069fab2670a72604e9771ba8c0c1b11bb70f021a16e90a5e38e4ad8b5bcdf09728f55342333ba41d0c15af22fbe225949bb86d353954ec9943d1735b54a764ab78b4700b49d3cc753c93b288d167441b89d8e8cc7e0c42d32ba882e2a49d72dae5c6b6a4bfbaef4a7ac70a0de2ee03e74da5857fef687bbe890a84136b6ab1c6359eb7d46d3cb085e907188e43b21024d6585eaea577bd2134bd7cfa1b31171b6a6c91092e4ca87bebb09c37114a834084616b69c07feca46761ef8f3581c7c17bce4d43153848feb4c87f1888e1a7da3972613d8564db52b7254331d6250b4402a0b2cc6bf52f21df0fc62a0b8b4038b95df7a6c1a472fbe8269463e337e98b4f751953d9b560abf3f281bd08a8204236bdc30dddf518f23d77eaeca327aba62fdf164f91cd921b4a8fc8d357081cc878907bbbe7b669fab8dca504194918ecc0a2fe549a4d8d4cca9e2d946491f90e7a4ae4004c12f0eb3641573c3ebdc2b2c51608d6861dd7a143b36a6ebc237ca80460050a39f6402cea2d9e22ba27ef59ae86b8365bc4fb7286a34febdebbb7960346ac78549b77b5d828cb6731b7065956530b488ec59c6181a6eeaf2b64f6f1be35a7b11498b9950248affd379fddce489f96fdbeed3838a616800e7dc31c1592d7760a9643c6dcf195ed0b1092accac7597f088a7495cbb9baaa8b786b6f6e2f0791c5ae2ed6e54a47e49bed986fe4f09bdf0620b6d2b1968cc71d732f470fef4c29fdd106d3e456a53b104c3e16e1ce512885342f74ee9390633c39026cf20f6e6125dff27b78d4d5057e9fcc2168732ee53744a38bb5bccdd5e40c846eaae97508da077ca88adee6a1752cddb600ae257054a87317da6352ea18fef0d97ac2c7311fc0917b1086f03ec63cadbaa49e58a23845dd134d419a4f9905dfbb8b111bbbf28a485e3f43f9fea4934266304b7451f54b2110b3488ab09ccf76d290323e1f8a55d098c70a0489934c9e3edbb874da666b04e2335c0d5692eb3a862b74cd1e856539acc2432b29eb792f8a52b44aabe44646c8afe30a2431be20b68323250825804796c98936b4c6bc8f86dadac011bf1157a9c195e67ef6e571d8f4465b049f860d5b3a13851cfd9f3bf0c2de3d8f3e361a0587acd6bdc4f2f4184f53308eaeea10812b14d6c1396144466e92c13bcc1b0f145b889b00110ae004dbc56ad5a7dcb69e74db5030b91cf60fbe1f02c8e18f68289b7c60a4a91e4c1fecbd72334e4ac06554524e3f8e40a9970859d817c2ec53adc69f4ec496ce597532341a1389efafd8cc29e79e69e31dcc7b2d106f5540189429dd718e63368c51e07a2f759d083c0c47f5a0c6ef5a912998a73b14a6a82c72dc7a747345b6c946433cbe7e135dac30cc61fb2f10bada9434b12c037a4961ab3265931707a630c68e9860c2007fbdfca0d8af7256e8c57a0dd72f6e97ea1da8177077e5e02ab281450f82712557caecac0a45e4b695c33f2194dc58c38dbe45015193949ac1bc50839955472681fcf7f61d9ae2ce569fbfe0a9d33819237fdc3be6be6139a5d1b275752487e9fbf1f55ea26c36eda979c4f576a471f55eaf683401a36ea4e86405ff0a49009ae8634d7e40b771f1e7342dee3ee6f8677dbeaff8e4b58a7890ac9ba677bbfef7b568cb819ba5cd6362efc1e8611a51582d7b649499ffcbabed51c7b5f135ea77d2e9a2730f7ee6ba40ed8c0006eb841d101f16709ae0b9c5e0330beb60d95bd538233cf8cdb93aaff3716de59bdff6c4f170fa7166b19535f07566a64f6d1f8dc2a8a0ef2c6437aa4a0d601102e9550e219071452b894b41ccbb55ad4bf7b9c36783e5b21bf90a327e688e39b9e9e9dd2939fe49b960d8cff11beeb3eeb261befc3981892c7a7f0dc94b0e05ce45398e6c4aacda0141cba0ef0d23e206b1f8b960b94865719b841dc92cab8d3686e39841a4b28b4521621c5e826e0a507b44f703b9ea7bba1da00ddfd926e33c9a8737b5edeafa54fe7b64e50084801ecd94e277ffeac3cfa6eeecbdd61a2e68b2881907c9c3531d9cb6d74467cb875336c12e0fcbf040e4cab8e8a1fc10e7b7ba177adffa841ed3b327040660da4a723939cfde767368beda6ef96e773c65c4779b4828e5eadb479150090869a4a2ffaf69e674c93d2359051a7852bcf193b6bfc360a657d17e60bbc76d379ceddb4077875e4a2ed867e5f278a6d2f553fce9609e61efd95f60278e3fc1fbc5accaf738fd468a5a056045e97192aa8550a0e0f22dab20a86ce61c4382263e8fd9a7659145b84c69eb848a7397b466691afa117448e2d709d0b8dd567bafd04a71bb0fa8ac3a632e51bdd129d7f7df9da302e6a93ed1b648bb3b0f4eb761ca305dc03883c10933ace4079437ccd203a5e02d5457e6b761543ad18230e093bd704c9052ef9c830afc2866bf54896051085c412bc52c20de7700f1e3526ea14ca7fb1a30b854ffdd2c79c5d644a50e39344f18306aa0b78e8d6e581d4953fea60a1db321c26f51b0f467868014f5b2f9c95205bd51079662d95dd62224b108ca1a71e2c9a036954948cae0fc4675085ac39cf4c7c495987d619e73479fb758dadee1b3d64435d6852bd22c19623d323369aa48aaeefdefb784cc6c12da1e6107102ba00dff80f054c197994b53eecc339fa0dc91bb9f6649beae160dd5b46370bb1765f1cb38b065bcbbebb2e889fa185f842ba4f886d67362770b1da9f9c813ce5092b548683a0a37d1e7b58e5b81add8352c0572122d54df87e54960d8bbdf2787e7df4c114770a9b9ab6c064ea9bf69fd82173687dd28bd876d872271e7e3c013adbc6fbc30d9c8f3ba0e84604e7b738a38b5b8ef09ecc826cec351a88a0fbdb46de5c44d18b678503efe0c3510d5c1398565a9db761a7448852237ec3919c451a53c7f801661521942a0db0d5304da01299ce01a1590ce669d94244b7c69340e0f2d0094730ef1ca5c4db59926d01644a52b728c5ebc6f071abd696b469cd70ca9f713d572b8f4a825722c53711df8a4e15fd1602647253ff75412c12569217ae1531819ea9422259308867c8759c4b800c58f2c278ac51ce37af1aa85bfc42a7b64a23e103079c2bdf58e3ba34d636e3085e2f489e3771eee2b38b59a1186809bbd4b2b5e963f641158e0153e25f921995b272fe85041629702e7b61ff331240c2ac370eb0b797a58975f19508486c2fa57fa41737894040208c6e62a7ed933c3bb76c123b6d1cfbb058f24ac2fefeb09c4cc7cae6df049d26edea0f38021528c75022ce57342da08d9ab983e4276057c6a699f5e8e6243fd950e7d59fa00f532e2f1e0f8420a933ce2393385b0b84d3e7aceb722007d49e7a5a1b43f30edc966679bc33c5323f5882eb31c6410eedcc9fafea9374b16cacb4a24351d8b8fdb6d829567aa6f12063c3eca1a1be9061541a6e9b0964b32956d33c0df56663a788e44fb66b2535df13645b824ddef690cd46a6291f595fce6d59814f043b479037c3005d2484a7a1069411a05e939b16311565cb1741d455671e70c4485fa3c5e136494d894a40c2c147f8be1ce7e775cc904b09ae44d8384970290282c1fd5197842c0354caa4a7cba9164479303b4053936cea416023db6191bdd4b03d3b7d6ca55d613ec58279bb6d9bd875f5c7ea469c2fcdf54a2fbb0622a4a927bfe5523c2ec27997827811c5281f55df9cc8538abead1fbcdc068d8568e8bc4424365253202c7e76d9a51bb48f4dbb289016a732f0f4211ddb09ba818bf1bec3628619319497a150b8a65586aa757773af88db9784e9dabf778d5b09b608a468350f71543423a5cbf88158fe223cce6af6dabdfa400d15a22225a77afa0b0fec0b4fb1304e73fd44aea3e215902eb850e3c585a624e902c1a6e8972657b023f6e0ab493b7297047469643d95ff763949d4ab33d24a391bb625ac1efa7062911a192a8f3c06b43c1ca5d10417a263e3475908e069e5a374918c3c938a8f246fe581a834fc284612d3b55674e0ef9311c70fcf55032f284be632dbabe9e9d90dc7b91808acf2d33e7ebce1c5347c1449b1701c14f7abd2e9a120d2b8325186820dcd60049f421acf4b19e8f24dee6b237f4322e6eeafe7f75545ee4242a2794ce32ab53f7e8313b2784208ba382c357592eac2edefe82e8d9a36dcd63ed7925b0723aeec09b692f95ee010b1292d5930ff73c9d359011f95c5d3cd1fd3584d80c179c3611473fc40dad4518e2a662bd150eaf90c50e0391762061b40a6b7d3709119d18c6dcf8b53a9b2d74c5b130961e297420f539a0da0792792cb00c1fd6bafad8c24181200a430fbf4bf7355f2a06000a9f7c5d23fd3857c644e5d98e1681e8ee930b36a42d809393d4337ac2f72f380a7d94a61f36d54a80acd8361b3eb716ad5b09b5c6cb1963705acf3e2a7f5e5af3ed4a8f80c717356f52b456d7e970baed1b39923af27a455d8ae6148a5ffb2390d8397fc3c6c2f7ee54a840bc31b60bac09f9c4c0126bce7bfa9afee7aff42bb14fbcb9e51190ca7fd1edcdcc56d25784cff1cb251b6100248a1fe5e3d61e7df77399aa6d64fc5557da61a11e99d6525c61d03857f967f7aff81af11036610d811066208950a2be49ee30a2c14ff33d6f42aa0e89189c0086b91fb1c2f571029f57901579a4acb371dd0f263c761a6f208a643774fd9a8fa8080fd4d8058527a6b86742527b2c656937fb97e55debbafc1da4649df7472295e89de7c51324be4149f659c7d148ee1d063aaf7d02653aec9d34be17667c6c8d590bcf9ab0dc01c9ea80ad46822d73245f02d6673b20f102e7aeb5d241917545b0cdda940c5f0149f3b994c9830b3e0e9632d85b89b816a7e09abde0f001185e3d63a271d8a2b201fd3beb487f7599893a98388ec32b85ac3b1ee9eccdfd5ee7d318ae11686ed418d34aaef9c02e6e2ca8b0384d03b2f17d4168bb5762159ae47bb84854568e0881ca4ccfb7cd4dc5dcd4224185df690d6078f9975cb1d5c249ec71f3fa1b7ea06c4d412cf662bc0acee9a798d67367acf05ff2f9440e92aebe8370e4ba4c6e560d561a7531d05bd761a53d93ace41c225eb7ffa6076028727d4cdd5e54fa6c9a4bc12ca7f51418a9d79f531a1ece25c2d60826ef0e026c7662e3b86a459c2bda5be2d7d5991ef9f5983d652aa654abb4c40b6ca0b78991edbf1c9461016e3c2b917f45d1b30b9958b92a895bf116f54e95542a5ec249179f124210f5d08ac1c2943c87baf3b63a82c437737fe028ee4f0e0bb202b662e2e6f45978c2b8ec1e1e73f6cb9eb104026cb19b2af09882235bef526584a173068bf812bd3a98492743c9b6c02b811a5904ef8dbb74790a613a117a8f0de1239bc9bf76d20af0790b1a5c1c32dea9ed7b559437ba3d4acd7302705d1867485863e195eece8b6ff5f05f1f890a5f5e4063e9881f258f7e909fcab8de8f726e99c70acf7b974ec90df19e32c5d889f7a91f7261adef9fad4838dbddf5d0b5c092159e63f651160f90d1c419671da093bab5de537209f4e15f0c4c64bf1a4bd233aea1fda7123e2f2b7c516d2b4ebf1be4effb25bbb47abfed29384935e3e2c9fb2e2f4056114e6e15d536978badf22f0a3834a64cf18ef735c5ae60c9fb9e207023c7dbcf060d2fbc2ab7398eb9f885e4d60745f62fe0fed8dd200622ac9de04279471c7e76befcf7846c4fa9e62f08adb115212beb18c4505fcf246474a11b8332b84152302d4c1bbc63384d66d88d57bd250458af60cd1cffb7567b061faba64b6229ace6cca6b8a18bd5ba0c112776c6908945261b8f22e66da0884461c173db4864416879e50d99209505ad473fbc5ea4def2bd1d2d321b52172c5d343acc6c695fd2a1e9ba2ce8a5291e22c6187c9de3880a8f2889773cc1240b6062ae26697462c457c4404fb619a37f354b1b2d0b0f473b3bbe224c4edb086cd2551f44566d47021909752b8775f975dcd8f6e1a405cf9371301d94d7ab3fbe7bbbf59b809b175eb7362a22102090379e94bd1a65bc0541f9ad62da71efc3a52e718216d29524da58314f3a046f9f4bf35fa87a9b3371a6d967d5f24619c17a07a8781f4dc4573220bba38513f40bab1e68575505f6efb5d211553b6acb6fea501c3a6f3db27e7c1a674deb3a72ae211ab824ad12fdfe539d7e4fc91491dd3b3fae852d02bfa24780bf65b766b02461b3c67b1b78cbd620b5e1834647ab9b24128f6bdb861e1ab1fcae97394c786f4a0a0621b62200a01910ebb62d2e580341866b1e7b5e32d25695fe1d7ad65c4b2e6bbfa3120ff1948753d655e0196ef732f1a4e4e338db8bdf8a04cc14eb81a0e0f6c9fe3fb6b71b36a1c751ae07656bc92a9c6a0b8007fb20aa81c0ee58f0135d5e0e76ab7ad40d21539896366f75e0aa8370c86bbc6363177f29d8df2bde1a116449557211f750d855171e78724da4832ebd5ad6a9db8983f4487caa28dea46e6c36b2b154f31148c017f1683374bd064a3fd87b1de0c6f6c301cd80f2a45928e3d501117783a8ad5d19402b0c41945abefbfa9df42f7b74129a76d336633bc46a475b374223eb8e5f440fc5868a149902cf49aed4ba1e074d02fd40aa80f901fc9fe628008a76ca11caca96f0a2f3756ab5ad6d194bad87e6b6a458b904130f53aee1e50be878f972252004e877e490902d337e5b7432fc0138e3ee00af73a57a3160438717cd49fcb836e76603adfd1530966aa81589bc205bf33a5330848d90421907ef08118a4833f8fcaf7cfc73bf0d34e01fdc9965e594e74c5012f415f59e9ed37b039f9fd6a27627ba334bed66848eabdf59fa6ae1cb42a5ed6cc2805b249ffedc786ffbb312dc5456689c202a62d2334c6b52c87eeb3a0189c4ab5c9b08593e372321bfa326db3f6fb54a879966ecd4a69b5e00deac54449aac8c88ba667595d066d555dbe78cbdecf7dd436ce367a8fb9a560b4902ca23b9923632015a254ea4c470f018a33d670b196a4a1e370f24da7e0791325fb605099fc40e2d8e63bf6a179f4a063580b8ea973f52bed8dce4a5ae2ff9b8d7dc87b40cd898560c49ab4a3295e8dd857f2b9a9bd38634e50ce762a2c8c9f793f1835fd54db70437e7b86b492f9aa8d689229357720af9afbe773ac15fa78966aecf59fbab6833622044d2b463ed3b3a7401bb4845e5bada82d7ae06e229a3a2b661a85b1441b665c44463fb909b3233794a0b5836ed1dc6301f06d899197c7400354569c5fb2ea10d4c08598da5601522a976696e2ecd637315a19b3ba0e97c05071d8ac7aed1eed8fecbf774b317fc24c6923e2fba45153d1e715aeaca9d5891b59b91664a791f94bb9b0de217233a6bfe9777998171dad5422f6bbb33f1e624300c64414e1f1f4887a8832c64ab728ac2469df9820a282b58efe68cb1e57d08b61b255ba99a190f1f07903c8e3ec89d6211c8a5db67a0ba1e656839e3eadac62aab949cd0251b0e0d71d96dda94c229e126534bb76db1a4010418d115504c2e4226a767c5b8da95ca5fb3bad2ccaa6a96463d8b3b9566e17bb905b064261e2974b02eedbf161a1e0aee7c4fdfe1da891d64565929724dd06d5aedb8b0f7266ecd7a8fe6c73037ce1f281762e14d7571b0b242dd850863812d29a2be7239486273bc6a7f64cd6b37ee19413a11435fa4c03a69772d335f9ab857c662557f5aa2123354bf8bdfe5131997e1569edc7aade81e38b191ac4c53e027edd561025d3cf4c343d33489cb180c66502b5f59cd2593e656ecdbb40cf4ef2206830b10ffb7256fd326b4e97fbefcbec53c6798723af5aef968c78c02c20bb95d9c869109eb56f448fba7358cee5fe2d55852862842d14415debb083540e98c786a9f394ac83280ea617945d0710f18a363d74bd00518d965fa259e94be3b788eac72aaa9311ea21ed5e147df112bae4eed8eeaa649c41084b422a5230281adb7464772d25ee9f2b20d5e605a063bb78a87608680480224ec99df76eeae08e087bfec48fb44caab5daa10e728a853e18c8ffaadad491dbb0150393f5043e6f5fb6addb3f9c14c1c4fab2e93f8a4feb3e8619489f8a4ad6b6a42dd510f0519f130fad212ddb0f251e333e032b9995b39b49336762507b35e3172a098fde0baa7a1f114dc5fd4431dad05bdc98c0ac0e797ba9b0835c649639f8e6cc9279e3057a98fdac02a28d5861443e2e720bd5e189b74bfc0fc0883cd8ec96d810bcf1dca9e094a39aa584e368663fedb50bde86db9dd1511c40d0ed07a6d6ca2712861f6a55549545386203e340f943eaeb4c6ccb51deb3b470b43e748fa3d8101fd7793e831d869b0d0f558ad54da3eb430735a1a91da099cb4843c3e6a7b0f055b0a5388a0d8adb5c36ea98bb152ba0cb90ebb9b5a8c97b2918b0837984076c9a4615991f1b618d622f94ca9c166545e5b316344db4bb73d1625a375781e7b6365feeb6b9859bbf8c51f3d523172141f2e2d3154124848838e62342f683b44b4e7c2fef827cd7fd999c41edd95400cd0ecf9fbe1b33474801f0fad95db381c6445628649ec39f6ab48f99e232a6d51dd403611ad476c546d13460e38a5ef2f3a00e44ceefc771dfdf0cbc6a0c253389a17356ef5fd63175e3e3ea52361180acf40e0eff1c4ee15c9e97ce2f62e56eb606ee726320cedbb8e48341aa6fc9b9600b96d24683caef4269d008be2f02fc97060e04dec3ab800ab82140a36685d107f9dbdecc4bacb24d1cf346f9eb7b04c811474aeb75feba8b2ce9cd4a3b050e77947329d680e0435c8d034aadd19df1f88f552af461fdb5c629a337d00cc668a56df09e8a98c4d1e162709d8b1d3d878819e1c8973cc1fda03faea0bd732a861c3280fb5f1415a448d4e3abfdf3f5064ec08c84f8ef3d47ac8f654c56e17d5914fb6e1f566bf672e35cd3c5e58c36e31c162f84ae7de76329b59b364e0017c7d56f732660c80594a045f64294118d8a9c8963a99df25739d25b04ffc39415a501854bfd7600adac2eba25cecaae12ba5158f2777a98ccd24db124d1c7163f87d8a91c60000000000000000495d89e4bc545ed2089928fdaafcaa6b8e544f713a988e2b7e5636736259fab99a6e3443adcd670a76cadacc8f31e0a0afdc0a592175e20b190300b33e2fd30cd1e338eefe9b4014e7bb53494b410bb77da41b9be11c00893be01f888c2d57f3e1d2db0a1abbca39247a8396ead29a6447422ce3", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x1, 0x40000000000000, 0xffffffffffffffff, 0x4, 0x0, 0x7572, {0x0, 0x0, 0x9a84, 0xffffffff, 0x0, 0x726, 0x1, 0x6, 0x0, 0x4000, 0x0, 0x0, 0xffffffffffffffff, 0x10000000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r2}, 0x38) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) pipe(&(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c}, 0x38) 24m14.470501258s ago: executing program 4 (id=765): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r6, &(0x7f0000002640)=[{&(0x7f0000000200)='den', 0x3}], 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000180)={0x2}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r6, r3, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 24m12.893698254s ago: executing program 2 (id=766): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 24m9.948770791s ago: executing program 4 (id=767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, 0x0, 0x0, 0xffffffff8) 24m9.769201144s ago: executing program 1 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r5, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x40010) 23m56.436107632s ago: executing program 34 (id=766): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 23m51.671944194s ago: executing program 35 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r5, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x40010) 23m50.873674351s ago: executing program 36 (id=767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, 0x0, 0x0, 0xffffffff8) 22m21.572637871s ago: executing program 8 (id=834): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x801) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r2], 0x7) write$eventfd(r1, 0x0, 0x0) 22m20.597383682s ago: executing program 8 (id=837): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_io_uring_setup(0x1f19, &(0x7f0000000080)={0x0, 0xfd57, 0x80, 0x0, 0x277}, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, 0x0, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.stat\x00', 0x26e1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) lseek(r0, 0x54, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/174, 0xff56) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'8255\x00', [0x140, 0x0, 0xd, 0x6, 0x205, 0x4, 0x10001, 0x40000006, 0x7, 0x10, 0x5, 0x5, 0x3, 0xd, 0x4ce, 0x9e9b, 0x101, 0x8, 0x6, 0x9, 0xffffffff, 0x461, 0xa, 0x9, 0xffd, 0x80000005, 0x8, 0x3, 0x283, 0x8001, 0x5]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 22m17.456144684s ago: executing program 8 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000002300)=[{&(0x7f0000000200)=""/203, 0xcb}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 22m12.301611385s ago: executing program 8 (id=855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000001340)=0x3500, 0x4) write(0xffffffffffffffff, &(0x7f0000000300)="03", 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 22m11.976954407s ago: executing program 8 (id=856): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$FUSE(r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2128}, 0x0) 22m7.662954085s ago: executing program 8 (id=867): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x204, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1d8, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1c8, 0x1, [@m_tunnel_key={0x1c4, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x191, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 21m49.75842912s ago: executing program 37 (id=867): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x204, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1d8, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1c8, 0x1, [@m_tunnel_key={0x1c4, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x191, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 16m45.431567835s ago: executing program 5 (id=1755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74", 0x54}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbf", 0xbc}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m44.68129661s ago: executing program 5 (id=1763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x58, 0x117, 0x2, 0x3e, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c67"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x70, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e145755626689", 0x14}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16m43.199540301s ago: executing program 5 (id=1772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000030020008510000006000000180000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74", 0x54}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbf", 0xbc}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c530", 0x2a}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m42.69237501s ago: executing program 5 (id=1778): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 16m42.262004806s ago: executing program 5 (id=1781): r0 = inotify_init() munmap(&(0x7f000071e000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r1, 0x1009}], 0x1, 0x8000007) close_range(r0, 0xffffffffffffffff, 0x0) 16m41.057547567s ago: executing program 5 (id=1788): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000), 0x0) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r4, &(0x7f0000000080)=""/102330, 0x18fba, 0x82a) 16m25.936303058s ago: executing program 38 (id=1788): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000), 0x0) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r4, &(0x7f0000000080)=""/102330, 0x18fba, 0x82a) 1m7.472078443s ago: executing program 6 (id=6427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, 0x0) 1m6.856242691s ago: executing program 6 (id=6433): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x100) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 1m2.377705834s ago: executing program 6 (id=6452): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x1) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.938597249s ago: executing program 6 (id=6456): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000400)={0x138, 0x0, 0x104, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98b80000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @private1, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000003c0)=ANY=[@ANYBLOB="80000000ffffffffffffffffffffffff505050505050000000000000000000006400010000060202020202020101960507"], 0x59) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 1m0.203938384s ago: executing program 6 (id=6464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x80, {0x0, 0x0, 0x0, r4, {0xf, 0xffe0}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4044004) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 59.912674729s ago: executing program 6 (id=6465): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0xb7de}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/65, 0x41}, {&(0x7f0000000dc0)=""/103, 0x67}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/33, 0x21}], 0x1}, 0x10001}], 0x5, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003700e409000000000000020080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRESOCT=r2, @ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000000000001060000000000001100010000000000000000000600000a00e7d9600900000000000000be2126e6bcc40bc525ebe02b1ea1619a3ba585a5bbe3bee6311fdbf5b83e1fde3cc7bf8c36d2554d6ee858cb035ca1289617c89eb726500a"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 42.989684449s ago: executing program 39 (id=6465): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0xb7de}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/65, 0x41}, {&(0x7f0000000dc0)=""/103, 0x67}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/33, 0x21}], 0x1}, 0x10001}], 0x5, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003700e409000000000000020080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRESOCT=r2, @ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000000000001060000000000001100010000000000000000000600000a00e7d9600900000000000000be2126e6bcc40bc525ebe02b1ea1619a3ba585a5bbe3bee6311fdbf5b83e1fde3cc7bf8c36d2554d6ee858cb035ca1289617c89eb726500a"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 38.385558768s ago: executing program 0 (id=6490): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x19, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffff6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0x2}, {0x85, 0x0, 0x0, 0x8a}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.206911274s ago: executing program 0 (id=6491): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x2}, 0x60}], 0x1, 0x42, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b45, 0x100000000001) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000140)) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 37.933601646s ago: executing program 0 (id=6492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000180), 0x1000) 37.782587709s ago: executing program 0 (id=6493): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000200)=0x7ffffffe, 0x4) 37.57592085s ago: executing program 0 (id=6494): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 37.152287722s ago: executing program 0 (id=6495): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) 20.297720456s ago: executing program 40 (id=6495): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) 19.51773384s ago: executing program 2 (id=6479): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x200) 12.917248728s ago: executing program 9 (id=6513): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x1c8}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000011c0)={r0}) 11.659258851s ago: executing program 9 (id=6518): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) 10.59801738s ago: executing program 9 (id=6521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 10.501023486s ago: executing program 3 (id=6522): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x802) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000200)) 10.429480358s ago: executing program 7 (id=6523): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) 10.24183284s ago: executing program 9 (id=6524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) syz_80211_inject_frame(&(0x7f00000074c0), &(0x7f0000007500)=ANY=[@ANYBLOB="38100800ffffffffffff080213000001505050505050"], 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) recvmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002780)=""/4081, 0xff1}, {&(0x7f0000000440)=""/164, 0xa4}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000600)=""/59, 0x3b}], 0x4}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002640)=ANY=[@ANYBLOB="14000000027f0e"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010300007541ef7100001100000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 10.191650313s ago: executing program 7 (id=6525): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='0\n', 0x2) pread64(r0, &(0x7f0000000700)=""/100, 0x64, 0x0) write(r0, &(0x7f0000000800)='1\n', 0x2) pread64(r0, &(0x7f0000000900)=""/100, 0x64, 0x0) 9.853597767s ago: executing program 7 (id=6526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 8.898982311s ago: executing program 3 (id=6527): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir ./f', 0x7) write(r0, &(0x7f0000000700)='bind', 0x4) 8.864208899s ago: executing program 7 (id=6528): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0)=0x34, 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 8.637472524s ago: executing program 9 (id=6529): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) write(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x9) 8.461537534s ago: executing program 3 (id=6530): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f0000008880)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df00", 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x68, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}, {0x2, 0xfffffffffffffffb, 0x1c, 0xfffffca7, '/proc/thread-self/attr/exec\x00'}]}, 0x0, 0x0, 0x0, 0x0}) 8.0063359s ago: executing program 3 (id=6531): mkdir(&(0x7f0000000100)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlink(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000c00)='./my_configfs/usb_gadget/g1/configs/c.1/uac2.usb0\x00') unlink(&(0x7f0000000c00)='./my_configfs/usb_gadget/g1/configs/c.1/uac2.usb0\x00') 7.744211879s ago: executing program 7 (id=6532): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) move_mount(r2, &(0x7f0000000000)='\x00', r0, &(0x7f0000000000)='\x00', 0x44) 6.364450161s ago: executing program 3 (id=6533): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) 1.275430952s ago: executing program 7 (id=6534): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) 61.588484ms ago: executing program 3 (id=6535): mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sunrpc/rpc_task_begin/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/sunrpc/rpc_task_run_action/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='127.0.0.1:/\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000340)='addr=127.0.0.1\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=3,proto=tcp\x00') mkdir(&(0x7f00000004c0)='./file3\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file3\x00', &(0x7f0000000580)='nfs4\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=4,proto=tcp\x00') mkdir(&(0x7f0000000600)='./file4\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='none\x00', &(0x7f0000000680)='./file4\x00', &(0x7f00000006c0)='rpc_pipefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./file5\x00', 0x1ff) mount(&(0x7f0000000740)=@filename='none\x00', &(0x7f0000000780)='./file5\x00', &(0x7f00000007c0)='nfsd\x00', 0x0, 0x0) 0s ago: executing program 9 (id=6536): mkdir(&(0x7f0000000040)='nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='nfsd_mnt\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='-2\n-3\n\x00', 0x6) kernel console output (not intermixed with test programs): 0 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1827.463424][ T4952] RSP: 002b:00007fffded85698 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1827.463440][ T4952] RAX: ffffffffffffffda RBX: 000000000000003d RCX: 00007f12f0883707 [ 1827.463451][ T4952] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1827.463460][ T4952] RBP: 00007f12f090f560 R08: 0000000000000000 R09: 0000000000000000 [ 1827.463470][ T4952] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1827.463480][ T4952] R13: 00007fffded857c0 R14: 0000000000000022 R15: 00007fffded857c0 [ 1827.463504][ T4952] [ 1827.464223][T10517] FAULT_INJECTION: forcing a failure. [ 1827.464223][T10517] name failslab, interval 1, probability 10, space 0, times 85 [ 1827.464244][T10517] CPU: 0 UID: 0 PID: 10517 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.464262][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.464272][T10517] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.464297][T10517] Call Trace: [ 1827.464302][T10517] [ 1827.464309][T10517] dump_stack_lvl+0xe8/0x150 [ 1827.464335][T10517] should_fail_ex+0x467/0x600 [ 1827.464364][T10517] should_failslab+0xa8/0x100 [ 1827.464385][T10517] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.464404][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.464420][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.464442][T10517] __alloc_skb+0x1d7/0x7a0 [ 1827.464463][T10517] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.464497][T10517] ? process_scheduled_works+0xa20/0x14e0 [ 1827.464524][T10517] process_scheduled_works+0xa8e/0x14e0 [ 1827.464567][T10517] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.464593][T10517] ? assign_work+0x3cf/0x5d0 [ 1827.464617][T10517] worker_thread+0xa47/0xfb0 [ 1827.464659][T10517] kthread+0x388/0x470 [ 1827.464685][T10517] ? __pfx_worker_thread+0x10/0x10 [ 1827.464704][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.464731][T10517] ret_from_fork+0x514/0xb70 [ 1827.464759][T10517] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.464785][T10517] ? __switch_to+0xc89/0x1420 [ 1827.464811][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.464837][T10517] ret_from_fork_asm+0x1a/0x30 [ 1827.464866][T10517] [ 1827.465232][ T1281] FAULT_INJECTION: forcing a failure. [ 1827.465232][ T1281] name failslab, interval 1, probability 10, space 0, times 84 [ 1827.465252][ T1281] CPU: 0 UID: 0 PID: 1281 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.465270][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.465280][ T1281] Workqueue: bat_events batadv_mcast_mla_update [ 1827.465391][ T1281] Call Trace: [ 1827.465397][ T1281] [ 1827.465403][ T1281] dump_stack_lvl+0xe8/0x150 [ 1827.465429][ T1281] should_fail_ex+0x467/0x600 [ 1827.465458][ T1281] should_failslab+0xa8/0x100 [ 1827.465478][ T1281] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1827.465496][ T1281] ? batadv_mcast_get_bridge+0x1a/0x220 [ 1827.465526][ T1281] ? batadv_mcast_mla_update+0xfe4/0x3730 [ 1827.465549][ T1281] ? batadv_mcast_mla_update+0xfe4/0x3730 [ 1827.465579][ T1281] batadv_mcast_mla_update+0xfe4/0x3730 [ 1827.465603][ T1281] ? batadv_mcast_mla_update+0x186/0x3730 [ 1827.465636][ T1281] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 1827.465661][ T1281] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.465689][ T1281] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1827.465716][ T1281] ? process_scheduled_works+0xa20/0x14e0 [ 1827.465743][ T1281] ? rcu_is_watching+0x15/0xb0 [ 1827.465766][ T1281] ? process_scheduled_works+0xa20/0x14e0 [ 1827.465786][ T1281] process_scheduled_works+0xa8e/0x14e0 [ 1827.465828][ T1281] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.465853][ T1281] ? assign_work+0x3cf/0x5d0 [ 1827.465877][ T1281] worker_thread+0xa47/0xfb0 [ 1827.465918][ T1281] kthread+0x388/0x470 [ 1827.465944][ T1281] ? __pfx_worker_thread+0x10/0x10 [ 1827.465964][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.465990][ T1281] ret_from_fork+0x514/0xb70 [ 1827.466018][ T1281] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.466044][ T1281] ? __switch_to+0xc89/0x1420 [ 1827.466068][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.466094][ T1281] ret_from_fork_asm+0x1a/0x30 [ 1827.466123][ T1281] [ 1827.468174][T27673] FAULT_INJECTION: forcing a failure. [ 1827.468174][T27673] name failslab, interval 1, probability 10, space 0, times 82 [ 1827.468196][T27673] CPU: 0 UID: 0 PID: 27673 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.468214][T27673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.468224][T27673] Call Trace: [ 1827.468230][T27673] [ 1827.468236][T27673] dump_stack_lvl+0xe8/0x150 [ 1827.468263][T27673] should_fail_ex+0x467/0x600 [ 1827.468291][T27673] should_failslab+0xa8/0x100 [ 1827.468313][T27673] kmem_cache_alloc_noprof+0xa4/0x650 [ 1827.468329][T27673] ? alloc_empty_file+0x5b/0x1d0 [ 1827.468344][T27673] ? alloc_empty_file+0x5b/0x1d0 [ 1827.468365][T27673] alloc_empty_file+0x5b/0x1d0 [ 1827.468382][T27673] path_openat+0x8f/0x3850 [ 1827.468408][T27673] ? kasan_save_track+0x3e/0x80 [ 1827.468423][T27673] ? __kasan_slab_alloc+0x6c/0x80 [ 1827.468440][T27673] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1827.468455][T27673] ? do_getname+0x2e/0x250 [ 1827.468479][T27673] ? do_sys_openat2+0xcc/0x200 [ 1827.468494][T27673] ? __x64_sys_openat+0x138/0x170 [ 1827.468510][T27673] ? do_syscall_64+0x174/0x580 [ 1827.468536][T27673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.468568][T27673] do_file_open+0x23e/0x4a0 [ 1827.468588][T27673] ? lockdep_hardirqs_on+0x7a/0x110 [ 1827.468610][T27673] ? __pfx_do_file_open+0x10/0x10 [ 1827.468648][T27673] ? alloc_fd+0x654/0x6d0 [ 1827.468672][T27673] do_sys_openat2+0x115/0x200 [ 1827.468690][T27673] ? __pfx_do_sys_openat2+0x10/0x10 [ 1827.468711][T27673] ? rcu_is_watching+0x15/0xb0 [ 1827.468735][T27673] __x64_sys_openat+0x138/0x170 [ 1827.468755][T27673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.468772][T27673] do_syscall_64+0x174/0x580 [ 1827.468790][T27673] ? trace_irq_disable+0x3b/0x140 [ 1827.468807][T27673] ? clear_bhb_loop+0x40/0x90 [ 1827.468827][T27673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.468843][T27673] RIP: 0033:0x7f316b9ae7ce [ 1827.468857][T27673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1827.468871][T27673] RSP: 002b:00007ffd535ed108 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1827.468887][T27673] RAX: ffffffffffffffda RBX: 000055557712b500 RCX: 00007f316b9ae7ce [ 1827.468900][T27673] RDX: 0000000000080001 RSI: 00007f316ba85e59 RDI: ffffffffffffff9c [ 1827.468911][T27673] RBP: 00007f316ba85e59 R08: 0000000000000000 R09: 0000000000000000 [ 1827.468922][T27673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1827.468931][T27673] R13: 00007ffd535ed1e0 R14: 00000000001bccfd R15: 00007ffd535ed750 [ 1827.468955][T27673] [ 1827.469137][T27673] FAULT_INJECTION: forcing a failure. [ 1827.469137][T27673] name failslab, interval 1, probability 10, space 0, times 81 [ 1827.469157][T27673] CPU: 0 UID: 0 PID: 27673 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.469175][T27673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.469184][T27673] Call Trace: [ 1827.469190][T27673] [ 1827.469196][T27673] dump_stack_lvl+0xe8/0x150 [ 1827.469223][T27673] should_fail_ex+0x467/0x600 [ 1827.469250][T27673] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1827.469270][T27673] should_failslab+0xa8/0x100 [ 1827.469290][T27673] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1827.469308][T27673] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 1827.469326][T27673] ? shmem_alloc_inode+0x28/0x40 [ 1827.469343][T27673] ? shmem_alloc_inode+0x28/0x40 [ 1827.469362][T27673] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.469388][T27673] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1827.469407][T27673] shmem_alloc_inode+0x28/0x40 [ 1827.469425][T27673] alloc_inode+0x6a/0x1b0 [ 1827.469443][T27673] new_inode+0x1f/0x170 [ 1827.469463][T27673] shmem_get_inode+0x3b1/0xf80 [ 1827.469488][T27673] ? __pfx_shmem_get_inode+0x10/0x10 [ 1827.469508][T27673] ? generic_permission+0x2bf/0x670 [ 1827.469536][T27673] shmem_symlink+0xa2/0x460 [ 1827.469562][T27673] vfs_symlink+0x18b/0x330 [ 1827.469590][T27673] ? security_path_symlink+0xfd/0x360 [ 1827.469619][T27673] filename_symlinkat+0x1cd/0x420 [ 1827.469648][T27673] ? __pfx_filename_symlinkat+0x10/0x10 [ 1827.469676][T27673] ? do_getname+0x151/0x250 [ 1827.469702][T27673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.469719][T27673] __se_sys_symlinkat+0x4e/0x2b0 [ 1827.469744][T27673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.469762][T27673] do_syscall_64+0x174/0x580 [ 1827.469781][T27673] ? trace_irq_disable+0x3b/0x140 [ 1827.469797][T27673] ? clear_bhb_loop+0x40/0x90 [ 1827.469816][T27673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.469832][T27673] RIP: 0033:0x7f316b9ed057 [ 1827.469846][T27673] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.469860][T27673] RSP: 002b:00007ffd535ed6b8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 1827.469875][T27673] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f316b9ed057 [ 1827.469886][T27673] RDX: 00007f316ba85e72 RSI: 00000000ffffff9c RDI: 00007f316ba848f3 [ 1827.469898][T27673] RBP: 00007ffd535ed6fc R08: 0000000000000000 R09: 0000000000000000 [ 1827.469908][T27673] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000dd [ 1827.469918][T27673] R13: 000055557713ea00 R14: 00000000001bccfd R15: 00007ffd535ed750 [ 1827.469943][T27673] [ 1827.474349][ T1281] FAULT_INJECTION: forcing a failure. [ 1827.474349][ T1281] name failslab, interval 1, probability 10, space 0, times 79 [ 1827.474372][ T1281] CPU: 0 UID: 0 PID: 1281 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.474390][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.474401][ T1281] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.474427][ T1281] Call Trace: [ 1827.474433][ T1281] [ 1827.474440][ T1281] dump_stack_lvl+0xe8/0x150 [ 1827.474466][ T1281] should_fail_ex+0x467/0x600 [ 1827.474495][ T1281] should_failslab+0xa8/0x100 [ 1827.474523][ T1281] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.474542][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.474559][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.474581][ T1281] __alloc_skb+0x1d7/0x7a0 [ 1827.474602][ T1281] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.474636][ T1281] ? process_scheduled_works+0xa20/0x14e0 [ 1827.474657][ T1281] process_scheduled_works+0xa8e/0x14e0 [ 1827.474700][ T1281] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.474725][ T1281] ? assign_work+0x3cf/0x5d0 [ 1827.474749][ T1281] worker_thread+0xa47/0xfb0 [ 1827.474791][ T1281] kthread+0x388/0x470 [ 1827.474817][ T1281] ? __pfx_worker_thread+0x10/0x10 [ 1827.474837][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.474863][ T1281] ret_from_fork+0x514/0xb70 [ 1827.474892][ T1281] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.474918][ T1281] ? __switch_to+0xc89/0x1420 [ 1827.474943][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.474969][ T1281] ret_from_fork_asm+0x1a/0x30 [ 1827.474999][ T1281] [ 1827.475212][T27595] FAULT_INJECTION: forcing a failure. [ 1827.475212][T27595] name failslab, interval 1, probability 10, space 0, times 78 [ 1827.475232][T27595] CPU: 0 UID: 0 PID: 27595 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.475250][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.475260][T27595] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.475284][T27595] Call Trace: [ 1827.475289][T27595] [ 1827.475296][T27595] dump_stack_lvl+0xe8/0x150 [ 1827.475321][T27595] should_fail_ex+0x467/0x600 [ 1827.475351][T27595] should_failslab+0xa8/0x100 [ 1827.475372][T27595] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.475390][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.475406][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.475428][T27595] __alloc_skb+0x1d7/0x7a0 [ 1827.475449][T27595] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.475483][T27595] ? process_scheduled_works+0xa20/0x14e0 [ 1827.475503][T27595] process_scheduled_works+0xa8e/0x14e0 [ 1827.475551][T27595] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.475576][T27595] ? assign_work+0x3cf/0x5d0 [ 1827.475600][T27595] worker_thread+0xa47/0xfb0 [ 1827.475632][T27595] ? __kthread_parkme+0x71/0x1f0 [ 1827.475663][T27595] kthread+0x388/0x470 [ 1827.475688][T27595] ? __pfx_worker_thread+0x10/0x10 [ 1827.475707][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.475734][T27595] ret_from_fork+0x514/0xb70 [ 1827.475761][T27595] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.475788][T27595] ? __switch_to+0xc89/0x1420 [ 1827.475812][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.475838][T27595] ret_from_fork_asm+0x1a/0x30 [ 1827.475867][T27595] [ 1827.476184][T27595] FAULT_INJECTION: forcing a failure. [ 1827.476184][T27595] name failslab, interval 1, probability 10, space 0, times 74 [ 1827.476201][T27595] CPU: 0 UID: 0 PID: 27595 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.476219][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.476229][T27595] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.476251][T27595] Call Trace: [ 1827.476256][T27595] [ 1827.476262][T27595] dump_stack_lvl+0xe8/0x150 [ 1827.476288][T27595] should_fail_ex+0x467/0x600 [ 1827.476317][T27595] should_failslab+0xa8/0x100 [ 1827.476337][T27595] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.476355][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.476371][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.476393][T27595] __alloc_skb+0x1d7/0x7a0 [ 1827.476414][T27595] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.476448][T27595] ? process_scheduled_works+0xa20/0x14e0 [ 1827.476468][T27595] process_scheduled_works+0xa8e/0x14e0 [ 1827.476517][T27595] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.476543][T27595] ? assign_work+0x3cf/0x5d0 [ 1827.476571][T27595] worker_thread+0xa47/0xfb0 [ 1827.476603][T27595] ? __kthread_parkme+0x71/0x1f0 [ 1827.476634][T27595] kthread+0x388/0x470 [ 1827.476659][T27595] ? __pfx_worker_thread+0x10/0x10 [ 1827.476678][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.476704][T27595] ret_from_fork+0x514/0xb70 [ 1827.476732][T27595] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.476758][T27595] ? __switch_to+0xc89/0x1420 [ 1827.476782][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.476808][T27595] ret_from_fork_asm+0x1a/0x30 [ 1827.476837][T27595] [ 1827.476937][T27595] FAULT_INJECTION: forcing a failure. [ 1827.476937][T27595] name failslab, interval 1, probability 10, space 0, times 73 [ 1827.476956][T27595] CPU: 0 UID: 0 PID: 27595 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.476974][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.476984][T27595] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.477007][T27595] Call Trace: [ 1827.477012][T27595] [ 1827.477018][T27595] dump_stack_lvl+0xe8/0x150 [ 1827.477044][T27595] should_fail_ex+0x467/0x600 [ 1827.477076][T27595] should_failslab+0xa8/0x100 [ 1827.477100][T27595] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.477118][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.477134][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.477156][T27595] __alloc_skb+0x1d7/0x7a0 [ 1827.477177][T27595] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.477211][T27595] ? process_scheduled_works+0xa20/0x14e0 [ 1827.477231][T27595] process_scheduled_works+0xa8e/0x14e0 [ 1827.477276][T27595] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.477302][T27595] ? assign_work+0x3cf/0x5d0 [ 1827.477326][T27595] worker_thread+0xa47/0xfb0 [ 1827.477358][T27595] ? __kthread_parkme+0x71/0x1f0 [ 1827.477388][T27595] kthread+0x388/0x470 [ 1827.477413][T27595] ? __pfx_worker_thread+0x10/0x10 [ 1827.477433][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.477459][T27595] ret_from_fork+0x514/0xb70 [ 1827.477487][T27595] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.477529][T27595] ? __switch_to+0xc89/0x1420 [ 1827.477553][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.477580][T27595] ret_from_fork_asm+0x1a/0x30 [ 1827.477609][T27595] [ 1827.488848][ T1281] FAULT_INJECTION: forcing a failure. [ 1827.488848][ T1281] name failslab, interval 1, probability 10, space 0, times 71 [ 1827.488876][ T1281] CPU: 0 UID: 0 PID: 1281 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.488894][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.488905][ T1281] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.488932][ T1281] Call Trace: [ 1827.488939][ T1281] [ 1827.488946][ T1281] dump_stack_lvl+0xe8/0x150 [ 1827.488974][ T1281] should_fail_ex+0x467/0x600 [ 1827.489005][ T1281] should_failslab+0xa8/0x100 [ 1827.489027][ T1281] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.489046][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.489063][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.489086][ T1281] __alloc_skb+0x1d7/0x7a0 [ 1827.489107][ T1281] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.489141][ T1281] ? process_scheduled_works+0xa20/0x14e0 [ 1827.489162][ T1281] process_scheduled_works+0xa8e/0x14e0 [ 1827.489205][ T1281] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.489230][ T1281] ? assign_work+0x3cf/0x5d0 [ 1827.489254][ T1281] worker_thread+0xa47/0xfb0 [ 1827.489297][ T1281] kthread+0x388/0x470 [ 1827.489322][ T1281] ? __pfx_worker_thread+0x10/0x10 [ 1827.489342][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.489368][ T1281] ret_from_fork+0x514/0xb70 [ 1827.489397][ T1281] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.489423][ T1281] ? __switch_to+0xc89/0x1420 [ 1827.489452][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.489478][ T1281] ret_from_fork_asm+0x1a/0x30 [ 1827.489508][ T1281] [ 1827.489631][ T1281] FAULT_INJECTION: forcing a failure. [ 1827.489631][ T1281] name failslab, interval 1, probability 10, space 0, times 70 [ 1827.489651][ T1281] CPU: 0 UID: 0 PID: 1281 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.489668][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.489678][ T1281] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.489701][ T1281] Call Trace: [ 1827.489706][ T1281] [ 1827.489713][ T1281] dump_stack_lvl+0xe8/0x150 [ 1827.489741][ T1281] should_fail_ex+0x467/0x600 [ 1827.489770][ T1281] should_failslab+0xa8/0x100 [ 1827.489791][ T1281] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.489809][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.489825][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.489848][ T1281] __alloc_skb+0x1d7/0x7a0 [ 1827.489869][ T1281] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.489903][ T1281] ? process_scheduled_works+0xa20/0x14e0 [ 1827.489923][ T1281] process_scheduled_works+0xa8e/0x14e0 [ 1827.489965][ T1281] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.489991][ T1281] ? assign_work+0x3cf/0x5d0 [ 1827.490015][ T1281] worker_thread+0xa47/0xfb0 [ 1827.490057][ T1281] kthread+0x388/0x470 [ 1827.490082][ T1281] ? __pfx_worker_thread+0x10/0x10 [ 1827.490102][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.490128][ T1281] ret_from_fork+0x514/0xb70 [ 1827.490156][ T1281] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.490182][ T1281] ? __switch_to+0xc89/0x1420 [ 1827.490207][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.490233][ T1281] ret_from_fork_asm+0x1a/0x30 [ 1827.490262][ T1281] [ 1827.494018][T27674] FAULT_INJECTION: forcing a failure. [ 1827.494018][T27674] name failslab, interval 1, probability 10, space 0, times 70 [ 1827.494044][T27674] CPU: 0 UID: 0 PID: 27674 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.494081][T27674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.494091][T27674] Call Trace: [ 1827.494097][T27674] [ 1827.494104][T27674] dump_stack_lvl+0xe8/0x150 [ 1827.494134][T27674] should_fail_ex+0x467/0x600 [ 1827.494164][T27674] should_failslab+0xa8/0x100 [ 1827.494185][T27674] __kmalloc_noprof+0xfe/0x780 [ 1827.494202][T27674] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1827.494218][T27674] ? security_prepare_creds+0x52/0x360 [ 1827.494238][T27674] ? security_prepare_creds+0x52/0x360 [ 1827.494264][T27674] security_prepare_creds+0x52/0x360 [ 1827.494287][T27674] prepare_creds+0x57d/0x820 [ 1827.494307][T27674] prepare_exec_creds+0x18/0x220 [ 1827.494326][T27674] bprm_execve+0xec/0x14b0 [ 1827.494357][T27674] ? __pfx_bprm_execve+0x10/0x10 [ 1827.494382][T27674] ? alloc_bprm+0x582/0x640 [ 1827.494404][T27674] kernel_execve+0x8c3/0x9c0 [ 1827.494431][T27674] call_usermodehelper_exec_async+0x212/0x360 [ 1827.494451][T27674] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1827.494473][T27674] ret_from_fork+0x514/0xb70 [ 1827.494501][T27674] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.494535][T27674] ? __switch_to+0xc89/0x1420 [ 1827.494559][T27674] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1827.494582][T27674] ret_from_fork_asm+0x1a/0x30 [ 1827.494610][T27674] [ 1827.507143][ C0] FAULT_INJECTION: forcing a failure. [ 1827.507143][ C0] name failslab, interval 1, probability 10, space 0, times 69 [ 1827.507169][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.507188][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.507199][ C0] Call Trace: [ 1827.507205][ C0] [ 1827.507213][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.507243][ C0] should_fail_ex+0x467/0x600 [ 1827.507274][ C0] should_failslab+0xa8/0x100 [ 1827.507296][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.507315][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.507333][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.507356][ C0] __alloc_skb+0x1d7/0x7a0 [ 1827.507377][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 1827.507400][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 1827.507425][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.507443][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 1827.507465][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1827.507487][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1827.507514][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.507547][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1827.507572][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.507595][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1827.507613][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.507636][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.507655][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.507678][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1827.507699][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 1827.507718][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1827.507738][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 1827.507778][ C0] hrtimer_run_softirq+0x18f/0x260 [ 1827.507808][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.507839][ C0] run_ktimerd+0x69/0x100 [ 1827.507862][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.507888][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.507917][ C0] kthread+0x388/0x470 [ 1827.507943][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.507964][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.507991][ C0] ret_from_fork+0x514/0xb70 [ 1827.508020][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.508046][ C0] ? __switch_to+0xc89/0x1420 [ 1827.508076][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.508105][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.508136][ C0] [ 1827.515257][T27595] FAULT_INJECTION: forcing a failure. [ 1827.515257][T27595] name failslab, interval 1, probability 10, space 0, times 67 [ 1827.515285][T27595] CPU: 0 UID: 0 PID: 27595 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.515304][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.515316][T27595] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.515345][T27595] Call Trace: [ 1827.515351][T27595] [ 1827.515358][T27595] dump_stack_lvl+0xe8/0x150 [ 1827.515393][T27595] should_fail_ex+0x467/0x600 [ 1827.515423][T27595] should_failslab+0xa8/0x100 [ 1827.515445][T27595] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.515464][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.515482][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.515504][T27595] __alloc_skb+0x1d7/0x7a0 [ 1827.515525][T27595] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.515559][T27595] ? process_scheduled_works+0xa20/0x14e0 [ 1827.515580][T27595] process_scheduled_works+0xa8e/0x14e0 [ 1827.515623][T27595] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.515648][T27595] ? assign_work+0x3cf/0x5d0 [ 1827.515673][T27595] worker_thread+0xa47/0xfb0 [ 1827.515709][T27595] ? __kthread_parkme+0x71/0x1f0 [ 1827.515740][T27595] kthread+0x388/0x470 [ 1827.515765][T27595] ? __pfx_worker_thread+0x10/0x10 [ 1827.515785][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.515811][T27595] ret_from_fork+0x514/0xb70 [ 1827.515840][T27595] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.515866][T27595] ? __switch_to+0xc89/0x1420 [ 1827.515892][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.515918][T27595] ret_from_fork_asm+0x1a/0x30 [ 1827.515947][T27595] [ 1827.560464][T10517] FAULT_INJECTION: forcing a failure. [ 1827.560464][T10517] name failslab, interval 1, probability 10, space 0, times 66 [ 1827.560492][T10517] CPU: 0 UID: 0 PID: 10517 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.560511][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.560523][T10517] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.560552][T10517] Call Trace: [ 1827.560560][T10517] [ 1827.560568][T10517] dump_stack_lvl+0xe8/0x150 [ 1827.560596][T10517] should_fail_ex+0x467/0x600 [ 1827.560626][T10517] should_failslab+0xa8/0x100 [ 1827.560648][T10517] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.560667][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.560684][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.560706][T10517] __alloc_skb+0x1d7/0x7a0 [ 1827.560726][T10517] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.560760][T10517] ? process_scheduled_works+0xa20/0x14e0 [ 1827.560780][T10517] process_scheduled_works+0xa8e/0x14e0 [ 1827.560822][T10517] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.560847][T10517] ? assign_work+0x3cf/0x5d0 [ 1827.560870][T10517] worker_thread+0xa47/0xfb0 [ 1827.560912][T10517] kthread+0x388/0x470 [ 1827.560937][T10517] ? __pfx_worker_thread+0x10/0x10 [ 1827.560956][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.560981][T10517] ret_from_fork+0x514/0xb70 [ 1827.561009][T10517] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.561034][T10517] ? __switch_to+0xc89/0x1420 [ 1827.561058][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.561083][T10517] ret_from_fork_asm+0x1a/0x30 [ 1827.561112][T10517] [ 1827.561198][T10517] FAULT_INJECTION: forcing a failure. [ 1827.561198][T10517] name failslab, interval 1, probability 10, space 0, times 65 [ 1827.561218][T10517] CPU: 0 UID: 0 PID: 10517 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.561235][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.561246][T10517] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.561268][T10517] Call Trace: [ 1827.561274][T10517] [ 1827.561280][T10517] dump_stack_lvl+0xe8/0x150 [ 1827.561310][T10517] should_fail_ex+0x467/0x600 [ 1827.561339][T10517] should_failslab+0xa8/0x100 [ 1827.561391][T10517] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.561409][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.561426][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.561448][T10517] __alloc_skb+0x1d7/0x7a0 [ 1827.561468][T10517] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.561503][T10517] ? process_scheduled_works+0xa20/0x14e0 [ 1827.561523][T10517] process_scheduled_works+0xa8e/0x14e0 [ 1827.561565][T10517] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.561591][T10517] ? assign_work+0x3cf/0x5d0 [ 1827.561615][T10517] worker_thread+0xa47/0xfb0 [ 1827.561658][T10517] kthread+0x388/0x470 [ 1827.561683][T10517] ? __pfx_worker_thread+0x10/0x10 [ 1827.561702][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.561728][T10517] ret_from_fork+0x514/0xb70 [ 1827.561757][T10517] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.561782][T10517] ? __switch_to+0xc89/0x1420 [ 1827.561807][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.561833][T10517] ret_from_fork_asm+0x1a/0x30 [ 1827.561862][T10517] [ 1827.561873][T10517] FAULT_INJECTION: forcing a failure. [ 1827.561873][T10517] name failslab, interval 1, probability 10, space 0, times 64 [ 1827.572876][T27672] FAULT_INJECTION: forcing a failure. [ 1827.572876][T27672] name failslab, interval 1, probability 10, space 0, times 64 [ 1827.572909][T27672] CPU: 0 UID: 0 PID: 27672 Comm: syz.9.6496 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.572928][T27672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.572939][T27672] Call Trace: [ 1827.572945][T27672] [ 1827.572952][T27672] dump_stack_lvl+0xe8/0x150 [ 1827.572983][T27672] should_fail_ex+0x467/0x600 [ 1827.573014][T27672] should_failslab+0xa8/0x100 [ 1827.573036][T27672] __kvmalloc_node_noprof+0x17a/0x8a0 [ 1827.573059][T27672] ? io_alloc_cache_init+0x42/0x140 [ 1827.573231][T27672] ? io_alloc_cache_init+0x42/0x140 [ 1827.573256][T27672] io_alloc_cache_init+0x42/0x140 [ 1827.573278][T27672] io_ring_ctx_alloc+0x4fe/0xc60 [ 1827.573307][T27672] io_uring_create+0x50/0x990 [ 1827.573328][T27672] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1827.573371][T27672] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1827.573413][T27672] ? rcu_is_watching+0x15/0xb0 [ 1827.573442][T27672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.573461][T27672] do_syscall_64+0x174/0x580 [ 1827.573483][T27672] ? clear_bhb_loop+0x40/0x90 [ 1827.573504][T27672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.573521][T27672] RIP: 0033:0x7f4226b9df99 [ 1827.573537][T27672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.573550][T27672] RSP: 002b:00007f4224df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1827.573567][T27672] RAX: ffffffffffffffda RBX: 00007f4226e25fa0 RCX: 00007f4226b9df99 [ 1827.573579][T27672] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000002b2 [ 1827.573589][T27672] RBP: 00007f4226c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1827.573600][T27672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1827.573609][T27672] R13: 00007f4226e26038 R14: 00007f4226e25fa0 R15: 00007fff77976538 [ 1827.573634][T27672] [ 1827.588273][ T4963] udevd[4963]: could not unlink /run/udev/queue: Cannot allocate memory [ 1827.589525][ T4963] FAULT_INJECTION: forcing a failure. [ 1827.589525][ T4963] name failslab, interval 1, probability 10, space 0, times 62 [ 1827.589550][ T4963] CPU: 0 UID: 0 PID: 4963 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.589568][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.589579][ T4963] Call Trace: [ 1827.589585][ T4963] [ 1827.589592][ T4963] dump_stack_lvl+0xe8/0x150 [ 1827.589623][ T4963] should_fail_ex+0x467/0x600 [ 1827.589657][ T4963] should_failslab+0xa8/0x100 [ 1827.589679][ T4963] kmem_cache_alloc_noprof+0xa4/0x650 [ 1827.589695][ T4963] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1827.589717][ T4963] ? do_getname+0x2e/0x250 [ 1827.589741][ T4963] ? do_getname+0x2e/0x250 [ 1827.589766][ T4963] ? __pfx___x64_sys_epoll_wait+0x10/0x10 [ 1827.589791][ T4963] do_getname+0x2e/0x250 [ 1827.589815][ T4963] ? __se_sys_unlink+0x12/0x140 [ 1827.589839][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.589856][ T4963] __se_sys_unlink+0x1e/0x140 [ 1827.589881][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.589898][ T4963] do_syscall_64+0x174/0x580 [ 1827.589920][ T4963] ? clear_bhb_loop+0x40/0x90 [ 1827.589940][ T4963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.589956][ T4963] RIP: 0033:0x7f9ba4314937 [ 1827.589972][ T4963] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1827.589986][ T4963] RSP: 002b:00007ffed7fae1b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1827.590003][ T4963] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f9ba4314937 [ 1827.590015][ T4963] RDX: 0000000000000000 RSI: 000000006ce5cec0 RDI: 000055f1279e902e [ 1827.590026][ T4963] RBP: 0000000000000000 R08: 000000006ce8f3ae R09: 3fffffffffffffff [ 1827.590037][ T4963] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1827.590048][ T4963] R13: 000055f127a04100 R14: 0000000000000001 R15: 0000000000000000 [ 1827.590071][ T4963] [ 1827.609108][ C0] FAULT_INJECTION: forcing a failure. [ 1827.609108][ C0] name failslab, interval 1, probability 10, space 0, times 60 [ 1827.609137][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.609156][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.609167][ C0] Call Trace: [ 1827.609175][ C0] [ 1827.609184][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.609215][ C0] should_fail_ex+0x467/0x600 [ 1827.609247][ C0] should_failslab+0xa8/0x100 [ 1827.609270][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.609290][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.609308][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.609331][ C0] __alloc_skb+0x1d7/0x7a0 [ 1827.609354][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 1827.609382][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 1827.609407][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.609426][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 1827.609447][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1827.609471][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1827.609502][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1827.609527][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.609550][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1827.609568][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.609591][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.609610][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.609633][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1827.609656][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 1827.609674][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1827.609694][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 1827.609735][ C0] hrtimer_run_softirq+0x18f/0x260 [ 1827.609765][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.609796][ C0] run_ktimerd+0x69/0x100 [ 1827.609819][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.609846][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.609876][ C0] kthread+0x388/0x470 [ 1827.609902][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.609923][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.609950][ C0] ret_from_fork+0x514/0xb70 [ 1827.609979][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.610005][ C0] ? __switch_to+0xc89/0x1420 [ 1827.610031][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.610057][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.610087][ C0] [ 1827.610445][ C0] FAULT_INJECTION: forcing a failure. [ 1827.610445][ C0] name failslab, interval 1, probability 10, space 0, times 59 [ 1827.610465][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.610489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.610499][ C0] Call Trace: [ 1827.610504][ C0] [ 1827.610511][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.610537][ C0] should_fail_ex+0x467/0x600 [ 1827.610567][ C0] should_failslab+0xa8/0x100 [ 1827.610588][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.610607][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.610623][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.610646][ C0] __alloc_skb+0x1d7/0x7a0 [ 1827.610667][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 1827.610689][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 1827.610713][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.610730][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 1827.610752][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1827.610775][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1827.610796][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.610828][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1827.610851][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.610874][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1827.610891][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.610914][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.610933][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.610956][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1827.610977][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 1827.610995][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1827.611015][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 1827.611055][ C0] hrtimer_run_softirq+0x18f/0x260 [ 1827.611084][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.611114][ C0] run_ktimerd+0x69/0x100 [ 1827.611137][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.611162][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.611192][ C0] kthread+0x388/0x470 [ 1827.611217][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.611239][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.611265][ C0] ret_from_fork+0x514/0xb70 [ 1827.611294][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.611324][ C0] ? __switch_to+0xc89/0x1420 [ 1827.611349][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.611381][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.611411][ C0] [ 1827.631717][T12043] FAULT_INJECTION: forcing a failure. [ 1827.631717][T12043] name failslab, interval 1, probability 10, space 0, times 53 [ 1827.631745][T12043] CPU: 0 UID: 0 PID: 12043 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.631764][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.631776][T12043] Workqueue: events_unbound cfg80211_wiphy_work [ 1827.631808][T12043] Call Trace: [ 1827.631815][T12043] [ 1827.631822][T12043] dump_stack_lvl+0xe8/0x150 [ 1827.631851][T12043] should_fail_ex+0x467/0x600 [ 1827.631883][T12043] should_failslab+0xa8/0x100 [ 1827.631906][T12043] __kmalloc_noprof+0xfe/0x780 [ 1827.631925][T12043] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1827.631950][T12043] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1827.631980][T12043] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1827.632013][T12043] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.632037][T12043] ? kvfree_call_rcu+0xd4/0x3c0 [ 1827.632057][T12043] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1827.632096][T12043] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1827.632120][T12043] ? cfg80211_update_known_bss+0xa51/0x1430 [ 1827.632152][T12043] ieee80211_inform_bss+0x163/0x10d0 [ 1827.632176][T12043] ? __cfg80211_bss_update+0x125c/0x2010 [ 1827.632201][T12043] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1827.632224][T12043] ? rt_spin_lock+0x20e/0x400 [ 1827.632260][T12043] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1827.632281][T12043] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 1827.632305][T12043] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 1827.632336][T12043] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1827.632387][T12043] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 1827.632412][T12043] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 1827.632440][T12043] cfg80211_inform_bss_data+0x25b/0x3d50 [ 1827.632486][T12043] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1827.632541][T12043] ? __lock_acquire+0x683/0x2ce0 [ 1827.632573][T12043] ? cfg80211_defragment_element+0x3e/0x360 [ 1827.632601][T12043] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1827.632624][T12043] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 1827.632653][T12043] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1827.632677][T12043] ieee80211_bss_info_update+0x791/0xa50 [ 1827.632702][T12043] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1827.632722][T12043] ? sta_info_get+0x4f/0x300 [ 1827.632754][T12043] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 1827.632779][T12043] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 1827.632815][T12043] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 1827.632838][T12043] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1827.632864][T12043] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1827.632884][T12043] ? lockdep_hardirqs_on+0x7a/0x110 [ 1827.632905][T12043] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1827.632925][T12043] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1827.632954][T12043] ? reacquire_held_locks+0x104/0x190 [ 1827.632989][T12043] ? rt_spin_unlock+0x163/0x200 [ 1827.633021][T12043] ieee80211_iface_work+0x78a/0x1010 [ 1827.633052][T12043] cfg80211_wiphy_work+0x29e/0x420 [ 1827.633080][T12043] ? process_scheduled_works+0xa20/0x14e0 [ 1827.633101][T12043] process_scheduled_works+0xa8e/0x14e0 [ 1827.633145][T12043] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.633171][T12043] ? assign_work+0x3cf/0x5d0 [ 1827.633195][T12043] worker_thread+0xa47/0xfb0 [ 1827.633239][T12043] kthread+0x388/0x470 [ 1827.633264][T12043] ? __pfx_worker_thread+0x10/0x10 [ 1827.633283][T12043] ? __pfx_kthread+0x10/0x10 [ 1827.633310][T12043] ret_from_fork+0x514/0xb70 [ 1827.633339][T12043] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.633365][T12043] ? __switch_to+0xc89/0x1420 [ 1827.633413][T12043] ? __pfx_kthread+0x10/0x10 [ 1827.633440][T12043] ret_from_fork_asm+0x1a/0x30 [ 1827.633470][T12043] [ 1827.666685][ T4952] FAULT_INJECTION: forcing a failure. [ 1827.666685][ T4952] name failslab, interval 1, probability 10, space 0, times 51 [ 1827.666714][ T4952] CPU: 0 UID: 0 PID: 4952 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.666733][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.666743][ T4952] Call Trace: [ 1827.666750][ T4952] [ 1827.666757][ T4952] dump_stack_lvl+0xe8/0x150 [ 1827.666788][ T4952] should_fail_ex+0x467/0x600 [ 1827.666819][ T4952] should_failslab+0xa8/0x100 [ 1827.666841][ T4952] kmem_cache_alloc_noprof+0xa4/0x650 [ 1827.666858][ T4952] ? security_inode_alloc+0x39/0x310 [ 1827.666883][ T4952] ? security_inode_alloc+0x39/0x310 [ 1827.666911][ T4952] security_inode_alloc+0x39/0x310 [ 1827.666937][ T4952] inode_init_always_gfp+0x983/0xd40 [ 1827.666957][ T4952] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1827.666983][ T4952] alloc_inode+0x82/0x1b0 [ 1827.667000][ T4952] __sock_create+0x12d/0x9d0 [ 1827.667032][ T4952] __sys_socket+0xd6/0x1b0 [ 1827.667048][ T4952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.667066][ T4952] __x64_sys_socket+0x7a/0x90 [ 1827.667082][ T4952] do_syscall_64+0x174/0x580 [ 1827.667104][ T4952] ? clear_bhb_loop+0x40/0x90 [ 1827.667124][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.667140][ T4952] RIP: 0033:0x7f12f0883707 [ 1827.667156][ T4952] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1827.667170][ T4952] RSP: 002b:00007fffded85698 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1827.667187][ T4952] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f12f0883707 [ 1827.667198][ T4952] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1827.667208][ T4952] RBP: 00007f12f090f560 R08: 0000000000000073 R09: 0000000000000001 [ 1827.667218][ T4952] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1827.667228][ T4952] R13: 00007fffded857c0 R14: 000000000000001e R15: 00007fffded857c0 [ 1827.667252][ T4952] [ 1827.667267][ T4952] socket: no more sockets [ 1827.679641][T27601] FAULT_INJECTION: forcing a failure. [ 1827.679641][T27601] name failslab, interval 1, probability 10, space 0, times 48 [ 1827.679668][T27601] CPU: 0 UID: 0 PID: 27601 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.679687][T27601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.679698][T27601] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1827.679787][T27601] Call Trace: [ 1827.679796][T27601] [ 1827.679804][T27601] dump_stack_lvl+0xe8/0x150 [ 1827.679832][T27601] should_fail_ex+0x467/0x600 [ 1827.679862][T27601] should_failslab+0xa8/0x100 [ 1827.679883][T27601] kmem_cache_alloc_noprof+0xa4/0x650 [ 1827.679900][T27601] ? skb_clone+0x212/0x3a0 [ 1827.679921][T27601] ? skb_clone+0x212/0x3a0 [ 1827.679946][T27601] skb_clone+0x212/0x3a0 [ 1827.679969][T27601] batadv_iv_send_outstanding_bat_ogm_packet+0x571/0x790 [ 1827.679999][T27601] ? process_scheduled_works+0xa20/0x14e0 [ 1827.680019][T27601] process_scheduled_works+0xa8e/0x14e0 [ 1827.680059][T27601] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.680083][T27601] ? assign_work+0x3cf/0x5d0 [ 1827.680106][T27601] worker_thread+0xa47/0xfb0 [ 1827.680137][T27601] ? __kthread_parkme+0x71/0x1f0 [ 1827.680167][T27601] kthread+0x388/0x470 [ 1827.680190][T27601] ? __pfx_worker_thread+0x10/0x10 [ 1827.680209][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.680234][T27601] ret_from_fork+0x514/0xb70 [ 1827.680263][T27601] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.680287][T27601] ? __switch_to+0xc89/0x1420 [ 1827.680312][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.680336][T27601] ret_from_fork_asm+0x1a/0x30 [ 1827.680364][T27601] [ 1827.680630][T27634] FAULT_INJECTION: forcing a failure. [ 1827.680630][T27634] name failslab, interval 1, probability 10, space 0, times 48 [ 1827.680651][T27634] CPU: 0 UID: 0 PID: 27634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.680669][T27634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.680679][T27634] Call Trace: [ 1827.680685][T27634] [ 1827.680691][T27634] dump_stack_lvl+0xe8/0x150 [ 1827.680718][T27634] should_fail_ex+0x467/0x600 [ 1827.680746][T27634] should_failslab+0xa8/0x100 [ 1827.680767][T27634] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.680785][T27634] ? __alloc_skb+0x1d7/0x7a0 [ 1827.680801][T27634] ? __alloc_skb+0x1d7/0x7a0 [ 1827.680823][T27634] __alloc_skb+0x1d7/0x7a0 [ 1827.680843][T27634] netlink_sendmsg+0x5d4/0xb40 [ 1827.680873][T27634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1827.680895][T27634] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1827.680926][T27634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1827.680946][T27634] sock_sendmsg_nosec+0x13a/0x180 [ 1827.680974][T27634] __sys_sendto+0x41e/0x5d0 [ 1827.680996][T27634] ? __pfx___sys_sendto+0x10/0x10 [ 1827.681013][T27634] ? lockdep_hardirqs_on+0x7a/0x110 [ 1827.681042][T27634] ? fput_close_sync+0x11f/0x240 [ 1827.681059][T27634] ? kmem_cache_free+0x526/0x6c0 [ 1827.681084][T27634] ? __pfx_fput_close_sync+0x10/0x10 [ 1827.681108][T27634] __x64_sys_sendto+0xde/0x100 [ 1827.681126][T27634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.681144][T27634] do_syscall_64+0x174/0x580 [ 1827.681163][T27634] ? trace_irq_disable+0x3b/0x140 [ 1827.681179][T27634] ? clear_bhb_loop+0x40/0x90 [ 1827.681199][T27634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.681215][T27634] RIP: 0033:0x7efc8e5ee7ce [ 1827.681230][T27634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1827.681244][T27634] RSP: 002b:00007fff7ea8e678 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1827.681260][T27634] RAX: ffffffffffffffda RBX: 000055558f703500 RCX: 00007efc8e5ee7ce [ 1827.681273][T27634] RDX: 000000000000002c RSI: 00007efc8f3e4670 RDI: 0000000000000003 [ 1827.681283][T27634] RBP: 0000000000000001 R08: 00007fff7ea8e6f4 R09: 000000000000000c [ 1827.681294][T27634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1827.681310][T27634] R13: 0000000000000000 R14: 00007efc8f3e4670 R15: 0000000000000000 [ 1827.681333][T27634] [ 1827.682064][T27601] FAULT_INJECTION: forcing a failure. [ 1827.682064][T27601] name failslab, interval 1, probability 10, space 0, times 46 [ 1827.682086][T27601] CPU: 0 UID: 0 PID: 27601 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.682104][T27601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.682115][T27601] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.682140][T27601] Call Trace: [ 1827.682146][T27601] [ 1827.682152][T27601] dump_stack_lvl+0xe8/0x150 [ 1827.682179][T27601] should_fail_ex+0x467/0x600 [ 1827.682209][T27601] should_failslab+0xa8/0x100 [ 1827.682231][T27601] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.682249][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.682266][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.682288][T27601] __alloc_skb+0x1d7/0x7a0 [ 1827.682309][T27601] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.682344][T27601] ? process_scheduled_works+0xa20/0x14e0 [ 1827.682365][T27601] process_scheduled_works+0xa8e/0x14e0 [ 1827.682415][T27601] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.682441][T27601] ? assign_work+0x3cf/0x5d0 [ 1827.682466][T27601] worker_thread+0xa47/0xfb0 [ 1827.682498][T27601] ? __kthread_parkme+0x71/0x1f0 [ 1827.682528][T27601] kthread+0x388/0x470 [ 1827.682563][T27601] ? __pfx_worker_thread+0x10/0x10 [ 1827.682582][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.682608][T27601] ret_from_fork+0x514/0xb70 [ 1827.682638][T27601] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.682664][T27601] ? __switch_to+0xc89/0x1420 [ 1827.682689][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.682715][T27601] ret_from_fork_asm+0x1a/0x30 [ 1827.682744][T27601] [ 1827.682817][T27601] FAULT_INJECTION: forcing a failure. [ 1827.682817][T27601] name failslab, interval 1, probability 10, space 0, times 45 [ 1827.682835][T27601] CPU: 0 UID: 0 PID: 27601 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.682853][T27601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.682863][T27601] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.682886][T27601] Call Trace: [ 1827.682892][T27601] [ 1827.682898][T27601] dump_stack_lvl+0xe8/0x150 [ 1827.682923][T27601] should_fail_ex+0x467/0x600 [ 1827.682953][T27601] should_failslab+0xa8/0x100 [ 1827.682973][T27601] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.682992][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.683008][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.683030][T27601] __alloc_skb+0x1d7/0x7a0 [ 1827.683051][T27601] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.683085][T27601] ? process_scheduled_works+0xa20/0x14e0 [ 1827.683106][T27601] process_scheduled_works+0xa8e/0x14e0 [ 1827.683148][T27601] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.683174][T27601] ? assign_work+0x3cf/0x5d0 [ 1827.683198][T27601] worker_thread+0xa47/0xfb0 [ 1827.683230][T27601] ? __kthread_parkme+0x71/0x1f0 [ 1827.683260][T27601] kthread+0x388/0x470 [ 1827.683286][T27601] ? __pfx_worker_thread+0x10/0x10 [ 1827.683305][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.683334][T27601] ret_from_fork+0x514/0xb70 [ 1827.683362][T27601] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.683393][T27601] ? __switch_to+0xc89/0x1420 [ 1827.683418][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.683444][T27601] ret_from_fork_asm+0x1a/0x30 [ 1827.683474][T27601] [ 1827.683873][ C0] FAULT_INJECTION: forcing a failure. [ 1827.683873][ C0] name failslab, interval 1, probability 10, space 0, times 44 [ 1827.683896][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.683914][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.683924][ C0] Call Trace: [ 1827.683930][ C0] [ 1827.683937][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.683964][ C0] should_fail_ex+0x467/0x600 [ 1827.683994][ C0] should_failslab+0xa8/0x100 [ 1827.684016][ C0] kmem_cache_alloc_noprof+0xa4/0x650 [ 1827.684033][ C0] ? dst_alloc+0x105/0x170 [ 1827.684055][ C0] ? dst_alloc+0x105/0x170 [ 1827.684079][ C0] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1827.684106][ C0] dst_alloc+0x105/0x170 [ 1827.684132][ C0] icmp6_dst_alloc+0x75/0x450 [ 1827.684149][ C0] ? icmpv6_flow_init+0x62/0x120 [ 1827.684176][ C0] ndisc_send_skb+0x42f/0x1650 [ 1827.684204][ C0] ? ndisc_send_skb+0x203/0x1650 [ 1827.684233][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1827.684256][ C0] ? ndisc_alloc_skb+0x1a6/0x480 [ 1827.684301][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 1827.684321][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1827.684346][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1827.684367][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1827.684406][ C0] call_timer_fn+0x192/0x5e0 [ 1827.684427][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1827.684446][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1827.684465][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1827.684495][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1827.684516][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1827.684537][ C0] __run_timer_base+0x67b/0x9b0 [ 1827.684568][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1827.684591][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1827.684614][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1827.684640][ C0] run_timer_softirq+0xb7/0x170 [ 1827.684659][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.684689][ C0] run_ktimerd+0x69/0x100 [ 1827.684712][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.684737][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.684767][ C0] kthread+0x388/0x470 [ 1827.684792][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.684814][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.684840][ C0] ret_from_fork+0x514/0xb70 [ 1827.684869][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.684895][ C0] ? __switch_to+0xc89/0x1420 [ 1827.684920][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.684946][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.684979][ C0] [ 1827.685294][ C0] FAULT_INJECTION: forcing a failure. [ 1827.685294][ C0] name failslab, interval 1, probability 10, space 0, times 42 [ 1827.685314][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.685331][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.685341][ C0] Call Trace: [ 1827.685347][ C0] [ 1827.685353][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.685386][ C0] should_fail_ex+0x467/0x600 [ 1827.685415][ C0] should_failslab+0xa8/0x100 [ 1827.685436][ C0] kmem_cache_alloc_noprof+0xa4/0x650 [ 1827.685453][ C0] ? dst_alloc+0x105/0x170 [ 1827.685475][ C0] ? dst_alloc+0x105/0x170 [ 1827.685499][ C0] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1827.685524][ C0] dst_alloc+0x105/0x170 [ 1827.685550][ C0] icmp6_dst_alloc+0x75/0x450 [ 1827.685567][ C0] ? icmpv6_flow_init+0x62/0x120 [ 1827.685593][ C0] ndisc_send_skb+0x42f/0x1650 [ 1827.685621][ C0] ? ndisc_send_skb+0x203/0x1650 [ 1827.685650][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1827.685674][ C0] ? ndisc_alloc_skb+0x1a6/0x480 [ 1827.685719][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 1827.685738][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1827.685762][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1827.685783][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1827.685814][ C0] call_timer_fn+0x192/0x5e0 [ 1827.685835][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1827.685854][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1827.685873][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1827.685902][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1827.685923][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1827.685944][ C0] __run_timer_base+0x67b/0x9b0 [ 1827.685974][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1827.685997][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1827.686019][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1827.686045][ C0] run_timer_softirq+0xb7/0x170 [ 1827.686064][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.686093][ C0] run_ktimerd+0x69/0x100 [ 1827.686116][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.686141][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.686171][ C0] kthread+0x388/0x470 [ 1827.686196][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.686218][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.686244][ C0] ret_from_fork+0x514/0xb70 [ 1827.686273][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.686299][ C0] ? __switch_to+0xc89/0x1420 [ 1827.686324][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.686351][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.686386][ C0] [ 1827.688906][T27601] FAULT_INJECTION: forcing a failure. [ 1827.688906][T27601] name failslab, interval 1, probability 10, space 0, times 39 [ 1827.688929][T27601] CPU: 0 UID: 0 PID: 27601 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.688948][T27601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.688958][T27601] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.688985][T27601] Call Trace: [ 1827.688991][T27601] [ 1827.688998][T27601] dump_stack_lvl+0xe8/0x150 [ 1827.689025][T27601] should_fail_ex+0x467/0x600 [ 1827.689055][T27601] should_failslab+0xa8/0x100 [ 1827.689077][T27601] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.689096][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.689112][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.689134][T27601] __alloc_skb+0x1d7/0x7a0 [ 1827.689155][T27601] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.689189][T27601] ? process_scheduled_works+0xa20/0x14e0 [ 1827.689210][T27601] process_scheduled_works+0xa8e/0x14e0 [ 1827.689253][T27601] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.689278][T27601] ? assign_work+0x3cf/0x5d0 [ 1827.689302][T27601] worker_thread+0xa47/0xfb0 [ 1827.689335][T27601] ? __kthread_parkme+0x71/0x1f0 [ 1827.689365][T27601] kthread+0x388/0x470 [ 1827.689397][T27601] ? __pfx_worker_thread+0x10/0x10 [ 1827.689416][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.689442][T27601] ret_from_fork+0x514/0xb70 [ 1827.689471][T27601] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.689497][T27601] ? __switch_to+0xc89/0x1420 [ 1827.689522][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.689548][T27601] ret_from_fork_asm+0x1a/0x30 [ 1827.689577][T27601] [ 1827.700074][ T1281] FAULT_INJECTION: forcing a failure. [ 1827.700074][ T1281] name failslab, interval 1, probability 10, space 0, times 37 [ 1827.700101][ T1281] CPU: 0 UID: 0 PID: 1281 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.700120][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.700132][ T1281] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.700160][ T1281] Call Trace: [ 1827.700166][ T1281] [ 1827.700173][ T1281] dump_stack_lvl+0xe8/0x150 [ 1827.700202][ T1281] should_fail_ex+0x467/0x600 [ 1827.700232][ T1281] should_failslab+0xa8/0x100 [ 1827.700254][ T1281] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.700273][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.700290][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.700313][ T1281] __alloc_skb+0x1d7/0x7a0 [ 1827.700334][ T1281] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.700387][ T1281] ? process_scheduled_works+0xa20/0x14e0 [ 1827.700409][ T1281] process_scheduled_works+0xa8e/0x14e0 [ 1827.700451][ T1281] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.700477][ T1281] ? assign_work+0x3cf/0x5d0 [ 1827.700501][ T1281] worker_thread+0xa47/0xfb0 [ 1827.700543][ T1281] kthread+0x388/0x470 [ 1827.700569][ T1281] ? __pfx_worker_thread+0x10/0x10 [ 1827.700588][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.700615][ T1281] ret_from_fork+0x514/0xb70 [ 1827.700643][ T1281] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.700669][ T1281] ? __switch_to+0xc89/0x1420 [ 1827.700694][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.700720][ T1281] ret_from_fork_asm+0x1a/0x30 [ 1827.700750][ T1281] [ 1827.701007][ T1281] FAULT_INJECTION: forcing a failure. [ 1827.701007][ T1281] name failslab, interval 1, probability 10, space 0, times 36 [ 1827.701026][ T1281] CPU: 0 UID: 0 PID: 1281 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.701044][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.701054][ T1281] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.701077][ T1281] Call Trace: [ 1827.701082][ T1281] [ 1827.701088][ T1281] dump_stack_lvl+0xe8/0x150 [ 1827.701114][ T1281] should_fail_ex+0x467/0x600 [ 1827.701143][ T1281] should_failslab+0xa8/0x100 [ 1827.701164][ T1281] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.701182][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.701198][ T1281] ? __alloc_skb+0x1d7/0x7a0 [ 1827.701220][ T1281] __alloc_skb+0x1d7/0x7a0 [ 1827.701241][ T1281] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.701275][ T1281] ? process_scheduled_works+0xa20/0x14e0 [ 1827.701304][ T1281] process_scheduled_works+0xa8e/0x14e0 [ 1827.701347][ T1281] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.701377][ T1281] ? assign_work+0x3cf/0x5d0 [ 1827.701402][ T1281] worker_thread+0xa47/0xfb0 [ 1827.701444][ T1281] kthread+0x388/0x470 [ 1827.701469][ T1281] ? __pfx_worker_thread+0x10/0x10 [ 1827.701489][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.701515][ T1281] ret_from_fork+0x514/0xb70 [ 1827.701543][ T1281] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.701569][ T1281] ? __switch_to+0xc89/0x1420 [ 1827.701593][ T1281] ? __pfx_kthread+0x10/0x10 [ 1827.701619][ T1281] ret_from_fork_asm+0x1a/0x30 [ 1827.701649][ T1281] [ 1827.704470][T27595] FAULT_INJECTION: forcing a failure. [ 1827.704470][T27595] name failslab, interval 1, probability 10, space 0, times 32 [ 1827.704494][T27595] CPU: 0 UID: 0 PID: 27595 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.704513][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.704523][T27595] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.704549][T27595] Call Trace: [ 1827.704555][T27595] [ 1827.704562][T27595] dump_stack_lvl+0xe8/0x150 [ 1827.704589][T27595] should_fail_ex+0x467/0x600 [ 1827.704619][T27595] should_failslab+0xa8/0x100 [ 1827.704641][T27595] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.704660][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.704676][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.704698][T27595] __alloc_skb+0x1d7/0x7a0 [ 1827.704719][T27595] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.704757][T27595] ? process_scheduled_works+0xa20/0x14e0 [ 1827.704778][T27595] process_scheduled_works+0xa8e/0x14e0 [ 1827.704820][T27595] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.704846][T27595] ? assign_work+0x3cf/0x5d0 [ 1827.704870][T27595] worker_thread+0xa47/0xfb0 [ 1827.704902][T27595] ? __kthread_parkme+0x71/0x1f0 [ 1827.704932][T27595] kthread+0x388/0x470 [ 1827.704957][T27595] ? __pfx_worker_thread+0x10/0x10 [ 1827.704977][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.705003][T27595] ret_from_fork+0x514/0xb70 [ 1827.705032][T27595] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.705058][T27595] ? __switch_to+0xc89/0x1420 [ 1827.705083][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.705109][T27595] ret_from_fork_asm+0x1a/0x30 [ 1827.705138][T27595] [ 1827.712052][ C0] FAULT_INJECTION: forcing a failure. [ 1827.712052][ C0] name failslab, interval 1, probability 10, space 0, times 31 [ 1827.712078][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.712097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.712108][ C0] Call Trace: [ 1827.712114][ C0] [ 1827.712121][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.712151][ C0] should_fail_ex+0x467/0x600 [ 1827.712182][ C0] should_failslab+0xa8/0x100 [ 1827.712205][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.712224][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.712242][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.712264][ C0] __alloc_skb+0x1d7/0x7a0 [ 1827.712286][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 1827.712308][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 1827.712333][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.712351][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 1827.712378][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1827.712401][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1827.712423][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.712455][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1827.712480][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.712502][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1827.712520][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.712543][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.712562][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.712585][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1827.712607][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 1827.712625][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1827.712645][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 1827.712685][ C0] hrtimer_run_softirq+0x18f/0x260 [ 1827.712715][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.712746][ C0] run_ktimerd+0x69/0x100 [ 1827.712769][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.712794][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.712824][ C0] kthread+0x388/0x470 [ 1827.712850][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.712872][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.712898][ C0] ret_from_fork+0x514/0xb70 [ 1827.712928][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.712954][ C0] ? __switch_to+0xc89/0x1420 [ 1827.712979][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.713006][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.713036][ C0] [ 1827.713183][ C0] FAULT_INJECTION: forcing a failure. [ 1827.713183][ C0] name failslab, interval 1, probability 10, space 0, times 30 [ 1827.713203][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.713221][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.713230][ C0] Call Trace: [ 1827.713236][ C0] [ 1827.713242][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.713269][ C0] should_fail_ex+0x467/0x600 [ 1827.713299][ C0] should_failslab+0xa8/0x100 [ 1827.713320][ C0] __kmalloc_noprof+0xfe/0x780 [ 1827.713337][ C0] ? kthread+0x388/0x470 [ 1827.713361][ C0] ? ret_from_fork+0x514/0xb70 [ 1827.713392][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1827.713407][ C0] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1827.713432][ C0] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1827.713467][ C0] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1827.713501][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.713525][ C0] ? kvfree_call_rcu+0xd4/0x3c0 [ 1827.713546][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1827.713585][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1827.713610][ C0] ? cfg80211_update_known_bss+0xa51/0x1430 [ 1827.713643][ C0] ieee80211_inform_bss+0x163/0x10d0 [ 1827.713669][ C0] ? __cfg80211_bss_update+0x125c/0x2010 [ 1827.713694][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1827.713713][ C0] ? rt_spin_lock+0x20e/0x400 [ 1827.713746][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1827.713769][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1827.713791][ C0] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 1827.713815][ C0] ? panic_on_this_cpu+0x32/0x40 [ 1827.713829][ C0] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 1827.713860][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1827.713901][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.713923][ C0] ? desc_update_last_finalized+0x18d/0x1f0 [ 1827.713999][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 1827.714028][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 1827.714062][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.714086][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.714108][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.714132][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.714149][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1827.714176][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.714199][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.714224][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.714250][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 1827.714270][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.714301][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.714324][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1827.714347][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 1827.714383][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1827.714408][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 1827.714434][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1827.714467][ C0] ? rt_spin_unlock+0x157/0x200 [ 1827.714493][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1827.714517][ C0] ieee80211_scan_rx+0x552/0xa40 [ 1827.714545][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 1827.714586][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1827.714607][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.714644][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.714668][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.714693][ C0] ? reacquire_held_locks+0x104/0x190 [ 1827.714719][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.714740][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 1827.714765][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1827.714788][ C0] ? rt_spin_unlock+0x163/0x200 [ 1827.714816][ C0] ? skb_dequeue+0x11a/0x150 [ 1827.714844][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 1827.714869][ C0] tasklet_action_common+0x31c/0x600 [ 1827.714899][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.714928][ C0] run_ktimerd+0x69/0x100 [ 1827.714952][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.714977][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.715007][ C0] kthread+0x388/0x470 [ 1827.715032][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.715054][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.715081][ C0] ret_from_fork+0x514/0xb70 [ 1827.715110][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.715136][ C0] ? __switch_to+0xc89/0x1420 [ 1827.715162][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.715189][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.715220][ C0] [ 1827.715700][ C0] FAULT_INJECTION: forcing a failure. [ 1827.715700][ C0] name failslab, interval 1, probability 10, space 0, times 28 [ 1827.715722][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.715740][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.715750][ C0] Call Trace: [ 1827.715756][ C0] [ 1827.715762][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.715790][ C0] should_fail_ex+0x467/0x600 [ 1827.715820][ C0] should_failslab+0xa8/0x100 [ 1827.715841][ C0] __kmalloc_noprof+0xfe/0x780 [ 1827.715860][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 1827.715883][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 1827.715913][ C0] cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 1827.715946][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1827.715986][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.716010][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 1827.716037][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 1827.716064][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.716086][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1827.716109][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1827.716125][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.716146][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1827.716164][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1827.716190][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1827.716210][ C0] ? stack_trace_save+0xa9/0x100 [ 1827.716237][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1827.716262][ C0] ? kfree+0x1c5/0x6c0 [ 1827.716278][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1827.716305][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.716325][ C0] ? kasan_save_track+0x4f/0x80 [ 1827.716341][ C0] ? kasan_save_track+0x3e/0x80 [ 1827.716356][ C0] ? kasan_save_free_info+0x40/0x50 [ 1827.716385][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1827.716402][ C0] ? kmem_cache_free+0x187/0x6c0 [ 1827.716419][ C0] ? llc_rcv+0x77a/0xcb0 [ 1827.716503][ C0] ? netif_receive_skb+0x4af/0xbf0 [ 1827.716532][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.716569][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1827.716592][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 1827.716622][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1827.716646][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 1827.716672][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1827.716699][ C0] ? rcu_is_watching+0x15/0xb0 [ 1827.716721][ C0] ? netif_receive_skb+0x38b/0xbf0 [ 1827.716748][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1827.716772][ C0] ieee80211_scan_rx+0x552/0xa40 [ 1827.716799][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 1827.716839][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1827.716859][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.716897][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.716919][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.716944][ C0] ? reacquire_held_locks+0x104/0x190 [ 1827.716970][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.716991][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 1827.717019][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1827.717041][ C0] ? rt_spin_unlock+0x163/0x200 [ 1827.717070][ C0] ? skb_dequeue+0x11a/0x150 [ 1827.717097][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 1827.717121][ C0] tasklet_action_common+0x31c/0x600 [ 1827.717150][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.717179][ C0] run_ktimerd+0x69/0x100 [ 1827.717202][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.717228][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.717257][ C0] kthread+0x388/0x470 [ 1827.717283][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.717305][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.717332][ C0] ret_from_fork+0x514/0xb70 [ 1827.717361][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.717393][ C0] ? __switch_to+0xc89/0x1420 [ 1827.717418][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.717444][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.717474][ C0] [ 1827.727761][T10517] CPU: 0 UID: 0 PID: 10517 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.727785][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.727797][T10517] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.727825][T10517] Call Trace: [ 1827.727834][T10517] [ 1827.727841][T10517] dump_stack_lvl+0xe8/0x150 [ 1827.727870][T10517] should_fail_ex+0x467/0x600 [ 1827.727901][T10517] should_failslab+0xa8/0x100 [ 1827.727923][T10517] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.727943][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.727960][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.727982][T10517] __alloc_skb+0x1d7/0x7a0 [ 1827.728003][T10517] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.728038][T10517] ? process_scheduled_works+0xa20/0x14e0 [ 1827.728059][T10517] process_scheduled_works+0xa8e/0x14e0 [ 1827.728101][T10517] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.728127][T10517] ? assign_work+0x3cf/0x5d0 [ 1827.728151][T10517] worker_thread+0xa47/0xfb0 [ 1827.728194][T10517] kthread+0x388/0x470 [ 1827.728220][T10517] ? __pfx_worker_thread+0x10/0x10 [ 1827.728239][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.728266][T10517] ret_from_fork+0x514/0xb70 [ 1827.728295][T10517] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.728320][T10517] ? __switch_to+0xc89/0x1420 [ 1827.728346][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.728379][T10517] ret_from_fork_asm+0x1a/0x30 [ 1827.728408][T10517] [ 1827.731147][T12786] FAULT_INJECTION: forcing a failure. [ 1827.731147][T12786] name failslab, interval 1, probability 10, space 0, times 25 [ 1827.731172][T12786] CPU: 0 UID: 0 PID: 12786 Comm: kworker/u8:61 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.731191][T12786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.731202][T12786] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1827.731227][T12786] Call Trace: [ 1827.731233][T12786] [ 1827.731240][T12786] dump_stack_lvl+0xe8/0x150 [ 1827.731268][T12786] should_fail_ex+0x467/0x600 [ 1827.731302][T12786] should_failslab+0xa8/0x100 [ 1827.731325][T12786] __kmalloc_noprof+0xfe/0x780 [ 1827.731342][T12786] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1827.731369][T12786] ? batadv_tvlv_container_register+0x3f/0x7d0 [ 1827.731447][T12786] ? batadv_tvlv_container_register+0x3f/0x7d0 [ 1827.731472][T12786] batadv_tvlv_container_register+0x3f/0x7d0 [ 1827.731498][T12786] batadv_tt_tvlv_container_update+0x598/0x660 [ 1827.731518][T12786] ? rt_spin_lock+0x1e0/0x400 [ 1827.731551][T12786] batadv_tt_local_commit_changes_nolock+0xca3/0xdb0 [ 1827.731618][T12786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1827.731640][T12786] ? rcu_is_watching+0x15/0xb0 [ 1827.731662][T12786] ? rt_spin_lock+0x20e/0x400 [ 1827.731689][T12786] ? __pfx_batadv_tt_local_commit_changes_nolock+0x10/0x10 [ 1827.731717][T12786] ? __local_bh_disable_ip+0x3c/0x420 [ 1827.731740][T12786] ? batadv_tt_local_commit_changes+0x1f/0x60 [ 1827.731768][T12786] ? batadv_tt_local_commit_changes+0x1f/0x60 [ 1827.731793][T12786] batadv_tt_local_commit_changes+0x3c/0x60 [ 1827.731820][T12786] batadv_iv_ogm_schedule+0x264/0xfa0 [ 1827.731839][T12786] ? pskb_expand_head+0xd77/0x13a0 [ 1827.731870][T12786] ? skb_push+0x8e/0xe0 [ 1827.731892][T12786] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 1827.731910][T12786] ? batadv_skb_head_push+0x187/0x200 [ 1827.731934][T12786] ? batadv_send_skb_packet+0x40e/0x650 [ 1827.731963][T12786] batadv_iv_send_outstanding_bat_ogm_packet+0x67a/0x790 [ 1827.731993][T12786] ? process_scheduled_works+0xa20/0x14e0 [ 1827.732014][T12786] process_scheduled_works+0xa8e/0x14e0 [ 1827.732058][T12786] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.732084][T12786] ? assign_work+0x3cf/0x5d0 [ 1827.732108][T12786] worker_thread+0xa47/0xfb0 [ 1827.732152][T12786] kthread+0x388/0x470 [ 1827.732178][T12786] ? __pfx_worker_thread+0x10/0x10 [ 1827.732198][T12786] ? __pfx_kthread+0x10/0x10 [ 1827.732224][T12786] ret_from_fork+0x514/0xb70 [ 1827.732253][T12786] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.732279][T12786] ? __switch_to+0xc89/0x1420 [ 1827.732305][T12786] ? __pfx_kthread+0x10/0x10 [ 1827.732331][T12786] ret_from_fork_asm+0x1a/0x30 [ 1827.732361][T12786] [ 1827.791686][ T4963] udevd[4963]: could not unlink /run/udev/queue: Cannot allocate memory [ 1827.791904][ T4963] FAULT_INJECTION: forcing a failure. [ 1827.791904][ T4963] name failslab, interval 1, probability 10, space 0, times 23 [ 1827.791930][ T4963] CPU: 0 UID: 0 PID: 4963 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.791948][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.791959][ T4963] Call Trace: [ 1827.791965][ T4963] [ 1827.791972][ T4963] dump_stack_lvl+0xe8/0x150 [ 1827.792004][ T4963] should_fail_ex+0x467/0x600 [ 1827.792035][ T4963] should_failslab+0xa8/0x100 [ 1827.792058][ T4963] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 1827.792076][ T4963] ? __d_alloc+0x37/0x6f0 [ 1827.792095][ T4963] ? __d_alloc+0x37/0x6f0 [ 1827.792118][ T4963] __d_alloc+0x37/0x6f0 [ 1827.792141][ T4963] d_alloc+0x4b/0x190 [ 1827.792158][ T4963] ? lookup_one_qstr_excl+0xc4/0x360 [ 1827.792181][ T4963] lookup_one_qstr_excl+0xd8/0x360 [ 1827.792200][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.792218][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.792236][ T4963] filename_unlinkat+0x2c0/0x610 [ 1827.792265][ T4963] ? __pfx_filename_unlinkat+0x10/0x10 [ 1827.792294][ T4963] ? do_getname+0x151/0x250 [ 1827.792320][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.792337][ T4963] __se_sys_unlink+0x2e/0x140 [ 1827.792361][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.792379][ T4963] do_syscall_64+0x174/0x580 [ 1827.792401][ T4963] ? clear_bhb_loop+0x40/0x90 [ 1827.792421][ T4963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.792437][ T4963] RIP: 0033:0x7f9ba4314937 [ 1827.792453][ T4963] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1827.792466][ T4963] RSP: 002b:00007ffed7fae1b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1827.792484][ T4963] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f9ba4314937 [ 1827.792496][ T4963] RDX: 0000000000000000 RSI: 000000006ce5cec0 RDI: 000055f1279e902e [ 1827.792506][ T4963] RBP: 0000000000000000 R08: 000000006cec0a17 R09: 3fffffffffffffff [ 1827.792517][ T4963] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1827.792536][ T4963] R13: 000055f127a04100 R14: 0000000000000001 R15: 0000000000000000 [ 1827.792560][ T4963] [ 1827.792599][ T4963] udevd[4963]: could not unlink /run/udev/queue: Cannot allocate memory [ 1827.792677][ T4963] FAULT_INJECTION: forcing a failure. [ 1827.792677][ T4963] name failslab, interval 1, probability 10, space 0, times 22 [ 1827.792697][ T4963] CPU: 0 UID: 0 PID: 4963 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.792714][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.792724][ T4963] Call Trace: [ 1827.792729][ T4963] [ 1827.792735][ T4963] dump_stack_lvl+0xe8/0x150 [ 1827.792761][ T4963] should_fail_ex+0x467/0x600 [ 1827.792790][ T4963] should_failslab+0xa8/0x100 [ 1827.792811][ T4963] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 1827.792829][ T4963] ? __d_alloc+0x37/0x6f0 [ 1827.792847][ T4963] ? __d_alloc+0x37/0x6f0 [ 1827.792870][ T4963] __d_alloc+0x37/0x6f0 [ 1827.792893][ T4963] d_alloc+0x4b/0x190 [ 1827.792910][ T4963] ? lookup_one_qstr_excl+0xc4/0x360 [ 1827.792932][ T4963] lookup_one_qstr_excl+0xd8/0x360 [ 1827.792951][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.792969][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.792986][ T4963] filename_unlinkat+0x2c0/0x610 [ 1827.793015][ T4963] ? __pfx_filename_unlinkat+0x10/0x10 [ 1827.793044][ T4963] ? do_getname+0x151/0x250 [ 1827.793070][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.793091][ T4963] __se_sys_unlink+0x2e/0x140 [ 1827.793115][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.793133][ T4963] do_syscall_64+0x174/0x580 [ 1827.793154][ T4963] ? clear_bhb_loop+0x40/0x90 [ 1827.793174][ T4963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.793190][ T4963] RIP: 0033:0x7f9ba4314937 [ 1827.793203][ T4963] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1827.793217][ T4963] RSP: 002b:00007ffed7fae1b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1827.793232][ T4963] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f9ba4314937 [ 1827.793244][ T4963] RDX: 0000000000000000 RSI: 000000006ce5cec0 RDI: 000055f1279e902e [ 1827.793255][ T4963] RBP: 0000000000000000 R08: 000000006cec0d10 R09: 3fffffffffffffff [ 1827.793266][ T4963] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1827.793276][ T4963] R13: 000055f127a04100 R14: 0000000000000001 R15: 0000000000000000 [ 1827.793300][ T4963] [ 1827.800629][T27591] FAULT_INJECTION: forcing a failure. [ 1827.800629][T27591] name failslab, interval 1, probability 10, space 0, times 22 [ 1827.800657][T27591] CPU: 0 UID: 0 PID: 27591 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.800676][T27591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.800687][T27591] Workqueue: events_unbound cfg80211_wiphy_work [ 1827.800719][T27591] Call Trace: [ 1827.800726][T27591] [ 1827.800734][T27591] dump_stack_lvl+0xe8/0x150 [ 1827.800763][T27591] should_fail_ex+0x467/0x600 [ 1827.800794][T27591] should_failslab+0xa8/0x100 [ 1827.800815][T27591] __kmalloc_noprof+0xfe/0x780 [ 1827.800834][T27591] ? unwind_next_frame+0x8f/0x2550 [ 1827.800852][T27591] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1827.800877][T27591] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1827.800907][T27591] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1827.800937][T27591] ? try_to_take_rt_mutex+0x842/0xb00 [ 1827.800962][T27591] ? __lock_acquire+0x683/0x2ce0 [ 1827.800990][T27591] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1827.801015][T27591] ? __lock_acquire+0x683/0x2ce0 [ 1827.801037][T27591] ieee80211_ibss_rx_queued_mgmt+0x509/0x2c40 [ 1827.801062][T27591] ? __lock_acquire+0x683/0x2ce0 [ 1827.801087][T27591] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.801114][T27591] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1827.801140][T27591] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1827.801160][T27591] ? lockdep_hardirqs_on+0x7a/0x110 [ 1827.801180][T27591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1827.801199][T27591] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1827.801233][T27591] ? reacquire_held_locks+0x104/0x190 [ 1827.801266][T27591] ? rt_spin_unlock+0x163/0x200 [ 1827.801302][T27591] ieee80211_iface_work+0x78a/0x1010 [ 1827.801332][T27591] cfg80211_wiphy_work+0x29e/0x420 [ 1827.801361][T27591] ? process_scheduled_works+0xa20/0x14e0 [ 1827.801382][T27591] process_scheduled_works+0xa8e/0x14e0 [ 1827.801423][T27591] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.801448][T27591] ? assign_work+0x3cf/0x5d0 [ 1827.801472][T27591] worker_thread+0xa47/0xfb0 [ 1827.801503][T27591] ? __kthread_parkme+0x71/0x1f0 [ 1827.801540][T27591] kthread+0x388/0x470 [ 1827.801565][T27591] ? __pfx_worker_thread+0x10/0x10 [ 1827.801584][T27591] ? __pfx_kthread+0x10/0x10 [ 1827.801611][T27591] ret_from_fork+0x514/0xb70 [ 1827.801640][T27591] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.801665][T27591] ? __switch_to+0xc89/0x1420 [ 1827.801691][T27591] ? __pfx_kthread+0x10/0x10 [ 1827.801717][T27591] ret_from_fork_asm+0x1a/0x30 [ 1827.801746][T27591] [ 1827.813899][ C0] FAULT_INJECTION: forcing a failure. [ 1827.813899][ C0] name failslab, interval 1, probability 10, space 0, times 22 [ 1827.813930][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.813949][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.813960][ C0] Call Trace: [ 1827.813966][ C0] [ 1827.813975][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.814007][ C0] should_fail_ex+0x467/0x600 [ 1827.814051][ C0] should_failslab+0xa8/0x100 [ 1827.814073][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.814093][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.814111][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.814134][ C0] __alloc_skb+0x1d7/0x7a0 [ 1827.814156][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 1827.814178][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 1827.814203][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.814222][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 1827.814243][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1827.814267][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1827.814297][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1827.814322][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.814345][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1827.814362][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.814386][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.814405][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.814428][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1827.814450][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 1827.814468][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1827.814488][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 1827.814535][ C0] hrtimer_run_softirq+0x18f/0x260 [ 1827.814565][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.814596][ C0] run_ktimerd+0x69/0x100 [ 1827.814620][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.814646][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.814675][ C0] kthread+0x388/0x470 [ 1827.814701][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.814723][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.814750][ C0] ret_from_fork+0x514/0xb70 [ 1827.814779][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.814806][ C0] ? __switch_to+0xc89/0x1420 [ 1827.814832][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.814859][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.814889][ C0] [ 1827.815671][ C0] FAULT_INJECTION: forcing a failure. [ 1827.815671][ C0] name failslab, interval 1, probability 10, space 0, times 21 [ 1827.815694][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.815711][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.815721][ C0] Call Trace: [ 1827.815728][ C0] [ 1827.815734][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.815761][ C0] should_fail_ex+0x467/0x600 [ 1827.815792][ C0] should_failslab+0xa8/0x100 [ 1827.815814][ C0] __kmalloc_noprof+0xfe/0x780 [ 1827.815833][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 1827.815857][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 1827.815888][ C0] cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 1827.815921][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1827.815962][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.815983][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 1827.816011][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 1827.816040][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.816065][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.816089][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.816108][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1827.816134][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.816162][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.816182][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1827.816201][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1827.816225][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 1827.816246][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.816276][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.816298][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1827.816323][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 1827.816352][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1827.816377][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 1827.816403][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1827.816436][ C0] ? rt_spin_unlock+0x157/0x200 [ 1827.816461][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1827.816486][ C0] ieee80211_scan_rx+0x552/0xa40 [ 1827.816514][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 1827.816559][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1827.816580][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.816617][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.816640][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.816665][ C0] ? reacquire_held_locks+0x104/0x190 [ 1827.816691][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.816712][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 1827.816737][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1827.816759][ C0] ? rt_spin_unlock+0x163/0x200 [ 1827.816787][ C0] ? skb_dequeue+0x11a/0x150 [ 1827.816815][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 1827.816840][ C0] tasklet_action_common+0x31c/0x600 [ 1827.816869][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.816898][ C0] run_ktimerd+0x69/0x100 [ 1827.816922][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.816947][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.816977][ C0] kthread+0x388/0x470 [ 1827.817002][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.817024][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.817051][ C0] ret_from_fork+0x514/0xb70 [ 1827.817080][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.817106][ C0] ? __switch_to+0xc89/0x1420 [ 1827.817131][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.817157][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.817187][ C0] [ 1827.817451][ C0] FAULT_INJECTION: forcing a failure. [ 1827.817451][ C0] name failslab, interval 1, probability 10, space 0, times 20 [ 1827.817471][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.817488][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.817498][ C0] Call Trace: [ 1827.817504][ C0] [ 1827.817510][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.817543][ C0] should_fail_ex+0x467/0x600 [ 1827.817573][ C0] should_failslab+0xa8/0x100 [ 1827.817594][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.817612][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.817629][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.817651][ C0] __alloc_skb+0x1d7/0x7a0 [ 1827.817672][ C0] skb_copy_expand+0x1aa/0xbf0 [ 1827.817706][ C0] ieee80211_make_monitor_skb+0x5f9/0x3ba0 [ 1827.817731][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1827.817754][ C0] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1827.817788][ C0] ? ieee80211_handle_mu_mimo_mon+0xd9/0x3e0 [ 1827.817813][ C0] ? __pfx_ieee80211_make_monitor_skb+0x10/0x10 [ 1827.817842][ C0] ? __pfx_ieee80211_handle_mu_mimo_mon+0x10/0x10 [ 1827.817870][ C0] ? rt_spin_unlock+0x163/0x200 [ 1827.817903][ C0] ieee80211_rx_list+0x1973/0x3b40 [ 1827.817943][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1827.817964][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.818000][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.818023][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.818048][ C0] ? reacquire_held_locks+0x104/0x190 [ 1827.818074][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1827.818095][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 1827.818119][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1827.818142][ C0] ? rt_spin_unlock+0x163/0x200 [ 1827.818170][ C0] ? skb_dequeue+0x11a/0x150 [ 1827.818196][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 1827.818221][ C0] tasklet_action_common+0x31c/0x600 [ 1827.818250][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.818279][ C0] run_ktimerd+0x69/0x100 [ 1827.818302][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.818327][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.818356][ C0] kthread+0x388/0x470 [ 1827.818382][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.818403][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.818430][ C0] ret_from_fork+0x514/0xb70 [ 1827.818458][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.818484][ C0] ? __switch_to+0xc89/0x1420 [ 1827.818509][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.818540][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.818570][ C0] [ 1827.837100][ T4952] FAULT_INJECTION: forcing a failure. [ 1827.837100][ T4952] name failslab, interval 1, probability 10, space 0, times 19 [ 1827.837127][ T4952] CPU: 0 UID: 0 PID: 4952 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.837146][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.837157][ T4952] Call Trace: [ 1827.837164][ T4952] [ 1827.837170][ T4952] dump_stack_lvl+0xe8/0x150 [ 1827.837202][ T4952] should_fail_ex+0x467/0x600 [ 1827.837233][ T4952] should_failslab+0xa8/0x100 [ 1827.837255][ T4952] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.837274][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 1827.837292][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 1827.837313][ T4952] __alloc_skb+0x1d7/0x7a0 [ 1827.837334][ T4952] alloc_skb_with_frags+0xc6/0x760 [ 1827.837352][ T4952] ? __lock_acquire+0x683/0x2ce0 [ 1827.837378][ T4952] sock_alloc_send_pskb+0x884/0x9a0 [ 1827.837413][ T4952] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1827.837441][ T4952] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1827.837470][ T4952] unix_dgram_sendmsg+0x4da/0x17b0 [ 1827.837503][ T4952] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1827.837538][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1827.837575][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1827.837599][ T4952] sock_sendmsg_nosec+0x13a/0x180 [ 1827.837627][ T4952] __sys_sendto+0x41e/0x5d0 [ 1827.837644][ T4952] ? smack_privileged_cred+0x33c/0x380 [ 1827.837673][ T4952] ? __pfx___sys_sendto+0x10/0x10 [ 1827.837701][ T4952] ? __pfx___sys_connect+0x10/0x10 [ 1827.837726][ T4952] ? rcu_is_watching+0x15/0xb0 [ 1827.837752][ T4952] __x64_sys_sendto+0xde/0x100 [ 1827.837771][ T4952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.837789][ T4952] do_syscall_64+0x174/0x580 [ 1827.837811][ T4952] ? clear_bhb_loop+0x40/0x90 [ 1827.837832][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.837848][ T4952] RIP: 0033:0x7f12f0808407 [ 1827.837863][ T4952] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1827.837877][ T4952] RSP: 002b:00007fffded85680 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1827.837894][ T4952] RAX: ffffffffffffffda RBX: 00007f12f06b8c80 RCX: 00007f12f0808407 [ 1827.837907][ T4952] RDX: 000000000000005d RSI: 00007fffded857c0 RDI: 0000000000000003 [ 1827.837917][ T4952] RBP: 00007fffded85bf0 R08: 0000000000000000 R09: 0000000000000000 [ 1827.837927][ T4952] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffded85c08 [ 1827.837937][ T4952] R13: 00007fffded857c0 R14: 0000000000000042 R15: 00007fffded857c0 [ 1827.837961][ T4952] [ 1827.838119][ T4952] FAULT_INJECTION: forcing a failure. [ 1827.838119][ T4952] name failslab, interval 1, probability 10, space 0, times 17 [ 1827.838139][ T4952] CPU: 0 UID: 0 PID: 4952 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.838157][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.838166][ T4952] Call Trace: [ 1827.838171][ T4952] [ 1827.838177][ T4952] dump_stack_lvl+0xe8/0x150 [ 1827.838204][ T4952] should_fail_ex+0x467/0x600 [ 1827.838232][ T4952] should_failslab+0xa8/0x100 [ 1827.838252][ T4952] __kmalloc_noprof+0xfe/0x780 [ 1827.838269][ T4952] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1827.838285][ T4952] ? security_sk_alloc+0x52/0x360 [ 1827.838301][ T4952] ? security_sk_alloc+0x52/0x360 [ 1827.838317][ T4952] ? rcu_is_watching+0x15/0xb0 [ 1827.838345][ T4952] security_sk_alloc+0x52/0x360 [ 1827.838363][ T4952] sk_prot_alloc+0x101/0x210 [ 1827.838390][ T4952] sk_alloc+0x3a/0x390 [ 1827.838412][ T4952] unix_create1+0xb0/0x7d0 [ 1827.838438][ T4952] unix_create+0x14c/0x1d0 [ 1827.838461][ T4952] __sock_create+0x4b3/0x9d0 [ 1827.838493][ T4952] __sys_socket+0xd6/0x1b0 [ 1827.838510][ T4952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.838534][ T4952] __x64_sys_socket+0x7a/0x90 [ 1827.838550][ T4952] do_syscall_64+0x174/0x580 [ 1827.838571][ T4952] ? clear_bhb_loop+0x40/0x90 [ 1827.838591][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.838606][ T4952] RIP: 0033:0x7f12f0883707 [ 1827.838620][ T4952] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1827.838633][ T4952] RSP: 002b:00007fffded85698 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1827.838649][ T4952] RAX: ffffffffffffffda RBX: 000000000000005d RCX: 00007f12f0883707 [ 1827.838660][ T4952] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1827.838670][ T4952] RBP: 00007f12f090f560 R08: 0000000000000000 R09: 0000000000000000 [ 1827.838680][ T4952] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1827.838689][ T4952] R13: 00007fffded857c0 R14: 0000000000000042 R15: 00007fffded857c0 [ 1827.838713][ T4952] [ 1827.838967][T27673] FAULT_INJECTION: forcing a failure. [ 1827.838967][T27673] name failslab, interval 1, probability 10, space 0, times 17 [ 1827.839048][T27673] CPU: 0 UID: 0 PID: 27673 Comm: syz.3.6497 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.839067][T27673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.839077][T27673] Call Trace: [ 1827.839082][T27673] [ 1827.839089][T27673] dump_stack_lvl+0xe8/0x150 [ 1827.839116][T27673] should_fail_ex+0x467/0x600 [ 1827.839145][T27673] should_failslab+0xa8/0x100 [ 1827.839166][T27673] kmem_cache_alloc_noprof+0xa4/0x650 [ 1827.839182][T27673] ? vm_area_dup+0x28/0x670 [ 1827.839270][T27673] ? vm_area_dup+0x28/0x670 [ 1827.839294][T27673] vm_area_dup+0x28/0x670 [ 1827.839313][T27673] ? __split_vma+0x1ce/0xa40 [ 1827.839339][T27673] __split_vma+0x1e4/0xa40 [ 1827.839371][T27673] ? __pfx___split_vma+0x10/0x10 [ 1827.839410][T27673] vma_modify+0x9a7/0x1ec0 [ 1827.839443][T27673] vma_modify_flags+0x24b/0x330 [ 1827.839466][T27673] ? __pfx_vma_modify_flags+0x10/0x10 [ 1827.839498][T27673] ? rcu_is_watching+0x15/0xb0 [ 1827.839524][T27673] ? percpu_counter_add_batch+0xec/0x1d0 [ 1827.839552][T27673] ? __vm_enough_memory+0x11a/0x380 [ 1827.839580][T27673] mprotect_fixup+0x624/0xb10 [ 1827.839626][T27673] ? __pfx_mprotect_fixup+0x10/0x10 [ 1827.839647][T27673] ? mas_next_slot+0xc94/0xd70 [ 1827.839686][T27673] do_mprotect_pkey+0x9d3/0xcd0 [ 1827.839708][T27673] ? lockdep_hardirqs_on+0x7a/0x110 [ 1827.839736][T27673] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1827.839768][T27673] ? vm_mmap_pgoff+0x35d/0x4e0 [ 1827.839801][T27673] ? rcu_is_watching+0x15/0xb0 [ 1827.839825][T27673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.839843][T27673] __x64_sys_mprotect+0x80/0x90 [ 1827.839865][T27673] do_syscall_64+0x174/0x580 [ 1827.839884][T27673] ? trace_irq_disable+0x3b/0x140 [ 1827.839901][T27673] ? clear_bhb_loop+0x40/0x90 [ 1827.839921][T27673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.839937][T27673] RIP: 0033:0x7f316b9edd97 [ 1827.839951][T27673] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.839965][T27673] RSP: 002b:00007ffd535ed2f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1827.839981][T27673] RAX: ffffffffffffffda RBX: 00007f3169c466c0 RCX: 00007f316b9edd97 [ 1827.839993][T27673] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f3169c27000 [ 1827.840004][T27673] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1827.840013][T27673] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd535ed450 [ 1827.840024][T27673] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1827.840048][T27673] [ 1827.842373][T27601] FAULT_INJECTION: forcing a failure. [ 1827.842373][T27601] name failslab, interval 1, probability 10, space 0, times 15 [ 1827.842398][T27601] CPU: 0 UID: 0 PID: 27601 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.842417][T27601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.842428][T27601] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.842455][T27601] Call Trace: [ 1827.842461][T27601] [ 1827.842468][T27601] dump_stack_lvl+0xe8/0x150 [ 1827.842496][T27601] should_fail_ex+0x467/0x600 [ 1827.842533][T27601] should_failslab+0xa8/0x100 [ 1827.842555][T27601] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.842573][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.842590][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.842612][T27601] __alloc_skb+0x1d7/0x7a0 [ 1827.842633][T27601] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.842668][T27601] ? process_scheduled_works+0xa20/0x14e0 [ 1827.842689][T27601] process_scheduled_works+0xa8e/0x14e0 [ 1827.842731][T27601] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.842758][T27601] ? assign_work+0x3cf/0x5d0 [ 1827.842782][T27601] worker_thread+0xa47/0xfb0 [ 1827.842814][T27601] ? __kthread_parkme+0x71/0x1f0 [ 1827.842845][T27601] kthread+0x388/0x470 [ 1827.842870][T27601] ? __pfx_worker_thread+0x10/0x10 [ 1827.842890][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.842916][T27601] ret_from_fork+0x514/0xb70 [ 1827.842945][T27601] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.842971][T27601] ? __switch_to+0xc89/0x1420 [ 1827.842996][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.843022][T27601] ret_from_fork_asm+0x1a/0x30 [ 1827.843052][T27601] [ 1827.843353][T27601] FAULT_INJECTION: forcing a failure. [ 1827.843353][T27601] name failslab, interval 1, probability 10, space 0, times 13 [ 1827.843373][T27601] CPU: 0 UID: 0 PID: 27601 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.843391][T27601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.843401][T27601] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.843424][T27601] Call Trace: [ 1827.843430][T27601] [ 1827.843436][T27601] dump_stack_lvl+0xe8/0x150 [ 1827.843467][T27601] should_fail_ex+0x467/0x600 [ 1827.843496][T27601] should_failslab+0xa8/0x100 [ 1827.843521][T27601] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.843540][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.843555][T27601] ? __alloc_skb+0x1d7/0x7a0 [ 1827.843578][T27601] __alloc_skb+0x1d7/0x7a0 [ 1827.843599][T27601] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.843633][T27601] ? process_scheduled_works+0xa20/0x14e0 [ 1827.843654][T27601] process_scheduled_works+0xa8e/0x14e0 [ 1827.843696][T27601] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.843722][T27601] ? assign_work+0x3cf/0x5d0 [ 1827.843746][T27601] worker_thread+0xa47/0xfb0 [ 1827.843778][T27601] ? __kthread_parkme+0x71/0x1f0 [ 1827.843809][T27601] kthread+0x388/0x470 [ 1827.843834][T27601] ? __pfx_worker_thread+0x10/0x10 [ 1827.843854][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.843880][T27601] ret_from_fork+0x514/0xb70 [ 1827.843908][T27601] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.843934][T27601] ? __switch_to+0xc89/0x1420 [ 1827.843959][T27601] ? __pfx_kthread+0x10/0x10 [ 1827.843985][T27601] ret_from_fork_asm+0x1a/0x30 [ 1827.844014][T27601] [ 1827.889074][T10517] FAULT_INJECTION: forcing a failure. [ 1827.889074][T10517] name failslab, interval 1, probability 10, space 0, times 13 [ 1827.889105][T10517] CPU: 0 UID: 0 PID: 10517 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.889125][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.889137][T10517] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.889166][T10517] Call Trace: [ 1827.889173][T10517] [ 1827.889181][T10517] dump_stack_lvl+0xe8/0x150 [ 1827.889215][T10517] should_fail_ex+0x467/0x600 [ 1827.889246][T10517] should_failslab+0xa8/0x100 [ 1827.889268][T10517] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.889287][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.889304][T10517] ? __alloc_skb+0x1d7/0x7a0 [ 1827.889326][T10517] __alloc_skb+0x1d7/0x7a0 [ 1827.889347][T10517] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.889381][T10517] ? process_scheduled_works+0xa20/0x14e0 [ 1827.889403][T10517] process_scheduled_works+0xa8e/0x14e0 [ 1827.889445][T10517] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.889471][T10517] ? assign_work+0x3cf/0x5d0 [ 1827.889495][T10517] worker_thread+0xa47/0xfb0 [ 1827.889537][T10517] kthread+0x388/0x470 [ 1827.889563][T10517] ? __pfx_worker_thread+0x10/0x10 [ 1827.889582][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.889608][T10517] ret_from_fork+0x514/0xb70 [ 1827.889637][T10517] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.889663][T10517] ? __switch_to+0xc89/0x1420 [ 1827.889688][T10517] ? __pfx_kthread+0x10/0x10 [ 1827.889714][T10517] ret_from_fork_asm+0x1a/0x30 [ 1827.889743][T10517] [ 1827.891524][T12786] FAULT_INJECTION: forcing a failure. [ 1827.891524][T12786] name failslab, interval 1, probability 10, space 0, times 12 [ 1827.891548][T12786] CPU: 0 UID: 0 PID: 12786 Comm: kworker/u8:61 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.891567][T12786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.891578][T12786] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.891605][T12786] Call Trace: [ 1827.891611][T12786] [ 1827.891618][T12786] dump_stack_lvl+0xe8/0x150 [ 1827.891646][T12786] should_fail_ex+0x467/0x600 [ 1827.891675][T12786] should_failslab+0xa8/0x100 [ 1827.891697][T12786] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.891716][T12786] ? __alloc_skb+0x1d7/0x7a0 [ 1827.891733][T12786] ? __alloc_skb+0x1d7/0x7a0 [ 1827.891755][T12786] __alloc_skb+0x1d7/0x7a0 [ 1827.891776][T12786] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.891810][T12786] ? process_scheduled_works+0xa20/0x14e0 [ 1827.891831][T12786] process_scheduled_works+0xa8e/0x14e0 [ 1827.891874][T12786] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.891900][T12786] ? assign_work+0x3cf/0x5d0 [ 1827.891924][T12786] worker_thread+0xa47/0xfb0 [ 1827.891979][T12786] kthread+0x388/0x470 [ 1827.892005][T12786] ? __pfx_worker_thread+0x10/0x10 [ 1827.892025][T12786] ? __pfx_kthread+0x10/0x10 [ 1827.892051][T12786] ret_from_fork+0x514/0xb70 [ 1827.892079][T12786] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.892105][T12786] ? __switch_to+0xc89/0x1420 [ 1827.892130][T12786] ? __pfx_kthread+0x10/0x10 [ 1827.892156][T12786] ret_from_fork_asm+0x1a/0x30 [ 1827.892186][T12786] [ 1827.892651][T12786] FAULT_INJECTION: forcing a failure. [ 1827.892651][T12786] name failslab, interval 1, probability 10, space 0, times 10 [ 1827.892671][T12786] CPU: 0 UID: 0 PID: 12786 Comm: kworker/u8:61 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.892688][T12786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.892699][T12786] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.892721][T12786] Call Trace: [ 1827.892727][T12786] [ 1827.892734][T12786] dump_stack_lvl+0xe8/0x150 [ 1827.892764][T12786] should_fail_ex+0x467/0x600 [ 1827.892793][T12786] should_failslab+0xa8/0x100 [ 1827.892814][T12786] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.892832][T12786] ? __alloc_skb+0x1d7/0x7a0 [ 1827.892848][T12786] ? __alloc_skb+0x1d7/0x7a0 [ 1827.892870][T12786] __alloc_skb+0x1d7/0x7a0 [ 1827.892891][T12786] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.892925][T12786] ? process_scheduled_works+0xa20/0x14e0 [ 1827.892946][T12786] process_scheduled_works+0xa8e/0x14e0 [ 1827.892993][T12786] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.893019][T12786] ? assign_work+0x3cf/0x5d0 [ 1827.893043][T12786] worker_thread+0xa47/0xfb0 [ 1827.893085][T12786] kthread+0x388/0x470 [ 1827.893111][T12786] ? __pfx_worker_thread+0x10/0x10 [ 1827.893130][T12786] ? __pfx_kthread+0x10/0x10 [ 1827.893156][T12786] ret_from_fork+0x514/0xb70 [ 1827.893185][T12786] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.893211][T12786] ? __switch_to+0xc89/0x1420 [ 1827.893235][T12786] ? __pfx_kthread+0x10/0x10 [ 1827.893262][T12786] ret_from_fork_asm+0x1a/0x30 [ 1827.893291][T12786] [ 1827.902353][T27595] FAULT_INJECTION: forcing a failure. [ 1827.902353][T27595] name failslab, interval 1, probability 10, space 0, times 9 [ 1827.902380][T27595] CPU: 0 UID: 0 PID: 27595 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.902399][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.902410][T27595] Workqueue: events_unbound nsim_dev_trap_report_work [ 1827.902438][T27595] Call Trace: [ 1827.902444][T27595] [ 1827.902451][T27595] dump_stack_lvl+0xe8/0x150 [ 1827.902480][T27595] should_fail_ex+0x467/0x600 [ 1827.902511][T27595] should_failslab+0xa8/0x100 [ 1827.902533][T27595] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.902552][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.902569][T27595] ? __alloc_skb+0x1d7/0x7a0 [ 1827.902592][T27595] __alloc_skb+0x1d7/0x7a0 [ 1827.902613][T27595] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1827.902647][T27595] ? process_scheduled_works+0xa20/0x14e0 [ 1827.902669][T27595] process_scheduled_works+0xa8e/0x14e0 [ 1827.902711][T27595] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.902737][T27595] ? assign_work+0x3cf/0x5d0 [ 1827.902761][T27595] worker_thread+0xa47/0xfb0 [ 1827.902793][T27595] ? __kthread_parkme+0x71/0x1f0 [ 1827.902824][T27595] kthread+0x388/0x470 [ 1827.902849][T27595] ? __pfx_worker_thread+0x10/0x10 [ 1827.902869][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.902895][T27595] ret_from_fork+0x514/0xb70 [ 1827.902923][T27595] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.902949][T27595] ? __switch_to+0xc89/0x1420 [ 1827.902981][T27595] ? __pfx_kthread+0x10/0x10 [ 1827.903008][T27595] ret_from_fork_asm+0x1a/0x30 [ 1827.903037][T27595] [ 1827.916455][ C0] FAULT_INJECTION: forcing a failure. [ 1827.916455][ C0] name failslab, interval 1, probability 10, space 0, times 4 [ 1827.916483][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.916505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.916515][ C0] Call Trace: [ 1827.916521][ C0] [ 1827.916529][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.916561][ C0] should_fail_ex+0x467/0x600 [ 1827.916593][ C0] should_failslab+0xa8/0x100 [ 1827.916615][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.916635][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1827.916652][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1827.916675][ C0] __alloc_skb+0x5a3/0x7a0 [ 1827.916697][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 1827.916719][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 1827.916743][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.916762][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 1827.916783][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1827.916807][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1827.916828][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.916860][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1827.916886][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.916908][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1827.916926][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.916949][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.916979][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.917002][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1827.917024][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 1827.917042][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1827.917062][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 1827.917103][ C0] hrtimer_run_softirq+0x18f/0x260 [ 1827.917133][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.917164][ C0] run_ktimerd+0x69/0x100 [ 1827.917187][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.917213][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.917243][ C0] kthread+0x388/0x470 [ 1827.917269][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.917291][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.917318][ C0] ret_from_fork+0x514/0xb70 [ 1827.917347][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.917374][ C0] ? __switch_to+0xc89/0x1420 [ 1827.917400][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.917426][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.917457][ C0] [ 1827.917803][ C0] FAULT_INJECTION: forcing a failure. [ 1827.917803][ C0] name failslab, interval 1, probability 10, space 0, times 2 [ 1827.917823][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.917841][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.917851][ C0] Call Trace: [ 1827.917857][ C0] [ 1827.917863][ C0] dump_stack_lvl+0xe8/0x150 [ 1827.917890][ C0] should_fail_ex+0x467/0x600 [ 1827.917920][ C0] should_failslab+0xa8/0x100 [ 1827.917941][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1827.917960][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.917982][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 1827.918006][ C0] __alloc_skb+0x1d7/0x7a0 [ 1827.918027][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 1827.918050][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 1827.918073][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1827.918091][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 1827.918113][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1827.918136][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1827.918157][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1827.918189][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1827.918213][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.918235][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1827.918252][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.918276][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1827.918295][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1827.918318][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1827.918340][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 1827.918358][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1827.918378][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 1827.918418][ C0] hrtimer_run_softirq+0x18f/0x260 [ 1827.918448][ C0] handle_softirqs+0x1d9/0x6c0 [ 1827.918478][ C0] run_ktimerd+0x69/0x100 [ 1827.918501][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1827.918526][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1827.918556][ C0] kthread+0x388/0x470 [ 1827.918581][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1827.918603][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.918630][ C0] ret_from_fork+0x514/0xb70 [ 1827.918658][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.918685][ C0] ? __switch_to+0xc89/0x1420 [ 1827.918710][ C0] ? __pfx_kthread+0x10/0x10 [ 1827.918737][ C0] ret_from_fork_asm+0x1a/0x30 [ 1827.918767][ C0] [ 1827.982374][ T4963] udevd[4963]: could not unlink /run/udev/queue: Cannot allocate memory [ 1829.044336][ T8209] Bluetooth: hci2: command tx timeout [ 1834.126705][T12568] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.503299][T27601] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.818955][T12568] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.921653][T12568] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.394183][T27669] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1837.395038][T27669] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1839.523606][ T8209] Bluetooth: hci4: command 0x0406 tx timeout [ 1840.966596][T27669] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1840.966657][T27669] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1841.603579][ T8209] Bluetooth: hci4: command 0x0406 tx timeout [ 1843.046161][ T8209] Bluetooth: hci5: command 0x0406 tx timeout [ 1843.186220][T27669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1843.186289][T27669] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1843.943040][ T37] audit: type=1800 audit(2000000988.800:97): pid=27698 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.6505" name="idVendor" dev="configfs" ino=214426 res=0 errno=0 [ 1843.951738][ T37] audit: type=1800 audit(2000000988.810:98): pid=27698 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.6505" name="idProduct" dev="configfs" ino=214427 res=0 errno=0 [ 1844.115727][ T37] audit: type=1800 audit(2000000988.980:99): pid=27699 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.6505" name="configuration" dev="configfs" ino=214430 res=0 errno=0 [ 1844.352433][ T8271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1844.428891][ T8271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1844.430878][ T8271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1844.450638][ T8271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1844.468935][ T8271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1844.688694][ T37] audit: type=1800 audit(2000000989.550:100): pid=27701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.6505" name="UDC" dev="configfs" ino=214445 res=0 errno=0 [ 1845.129968][ T8271] Bluetooth: hci5: command 0x0406 tx timeout [ 1845.210278][ T8271] Bluetooth: hci3: command 0x0406 tx timeout [ 1845.973590][ T8895] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1846.153580][ T8895] usb 4-1: Using ep0 maxpacket: 8 [ 1846.155449][ T8895] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1846.155469][ T8895] usb 4-1: config 0 has no interface number 0 [ 1846.155501][ T8895] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1846.155519][ T8895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.162556][ T8895] usb 4-1: config 0 descriptor?? [ 1846.233350][ T8209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1846.295711][ T8209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1846.329690][ T8209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1846.368923][ T8209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1846.369471][ T8209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1846.668303][ T8895] viperboard 4-1:0.143: version 0.00 found at bus 004 address 011 [ 1846.735180][ T8271] Bluetooth: hci1: command tx timeout [ 1847.059409][T27591] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.328691][ T8271] Bluetooth: hci3: command 0x0406 tx timeout [ 1847.635135][ T8895] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1847.635160][ T8895] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1847.785363][ T197] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1847.933585][ T197] usb 8-1: Using ep0 maxpacket: 32 [ 1847.935489][ T197] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1847.935509][ T197] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1847.935525][ T197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1847.935568][ T197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1847.935584][ T197] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1847.935603][ T197] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1847.935633][ T197] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1847.935650][ T197] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.059719][ T197] usb 8-1: config 0 descriptor?? [ 1848.449679][ T197] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1848.488027][ T5727] usb 4-1: USB disconnect, device number 11 [ 1848.521985][ T197] usb 8-1: USB disconnect, device number 38 [ 1848.742038][ T8271] Bluetooth: hci2: command tx timeout [ 1848.780696][ T197] usblp0: removed [ 1848.815499][ T8271] Bluetooth: hci1: command tx timeout [ 1849.183616][ T197] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1849.347886][ T197] usb 8-1: Using ep0 maxpacket: 32 [ 1849.349715][ T197] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1849.349735][ T197] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1849.349750][ T197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1849.349786][ T197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1849.349803][ T197] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1849.349821][ T197] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1849.349851][ T197] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1849.349869][ T197] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.460021][ T197] usb 8-1: config 0 descriptor?? [ 1849.743784][ T197] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1849.915838][T22267] usb 8-1: USB disconnect, device number 39 [ 1849.994206][T22267] usblp0: removed [ 1850.515357][T27591] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.803674][ T8271] Bluetooth: hci2: command tx timeout [ 1850.883642][ T8271] Bluetooth: hci1: command tx timeout [ 1851.273264][T27755] Mass Storage Function, version: 2009/09/11 [ 1851.273303][T27755] LUN: removable file: (no medium) [ 1851.442976][T27755] mass_storage.usb0/lun.0: unable to open backing file: fi [ 1851.858986][T27760] Mass Storage Function, version: 2009/09/11 [ 1851.859010][T27760] LUN: removable file: (no medium) [ 1851.968596][ T8271] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1852.101847][T27591] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.197267][ T37] audit: type=1800 audit(2000000997.030:101): pid=27759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.6517" name="UDC" dev="configfs" ino=214731 res=0 errno=0 [ 1852.889501][ T8271] Bluetooth: hci2: command tx timeout [ 1853.002654][ T8271] Bluetooth: hci1: command tx timeout [ 1853.074076][T27776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1853.161473][T22267] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1853.319068][T27591] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.344503][T22267] usb 4-1: Using ep0 maxpacket: 8 [ 1853.346452][T22267] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1853.346473][T22267] usb 4-1: config 0 has no interface number 0 [ 1853.346507][T22267] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1853.346525][T22267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.402393][T22267] usb 4-1: config 0 descriptor?? [ 1853.604792][T22267] viperboard 4-1:0.143: version 0.00 found at bus 004 address 012 [ 1853.990301][T22267] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1853.990327][T22267] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1854.121133][T22267] usb 4-1: USB disconnect, device number 12 [ 1854.629140][T27789] CacheFiles: Failed to register: -2 [ 1854.913585][ T197] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1854.968904][ T8271] Bluetooth: hci2: command tx timeout [ 1855.067364][ T197] usb 10-1: too many configurations: 36, using maximum allowed: 8 [ 1855.110589][ T197] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1855.110613][ T197] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.110628][ T197] usb 10-1: Product: syz [ 1855.110639][ T197] usb 10-1: Manufacturer: syz [ 1855.110651][ T197] usb 10-1: SerialNumber: syz [ 1855.458254][T22267] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1856.019541][ T8271] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1857.871991][ T8271] Bluetooth: hci2: command tx timeout [ 1857.884725][T22267] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1861.929459][T22267] ath9k_htc: Failed to initialize the device [ 1862.920604][ T8895] usb 10-1: USB disconnect, device number 35 [ 1863.052842][ T8895] usb 10-1: ath9k_htc: USB layer deinitialized [ 1863.316611][ T8895] ================================================================== [ 1863.316681][ T8895] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1863.316735][ T8895] Read of size 8 at addr ffffc90006a82008 by task kworker/0:11/8895 [ 1863.316749][ T8895] [ 1863.316788][ T8895] CPU: 0 UID: 0 PID: 8895 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1863.316813][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1863.316825][ T8895] Workqueue: usb_hub_wq hub_event [ 1863.316869][ T8895] Call Trace: [ 1863.316876][ T8895] [ 1863.316884][ T8895] dump_stack_lvl+0xe8/0x150 [ 1863.316914][ T8895] print_address_description+0x55/0x1e0 [ 1863.316940][ T8895] ? __list_add_valid_or_report+0x4e/0x130 [ 1863.316955][ T8895] print_report+0x58/0x70 [ 1863.316977][ T8895] kasan_report+0x117/0x150 [ 1863.317008][ T8895] ? __list_add_valid_or_report+0x4e/0x130 [ 1863.317028][ T8895] __list_add_valid_or_report+0x4e/0x130 [ 1863.317045][ T8895] kcov_remote_stop+0x457/0x680 [ 1863.317100][ T8895] hub_event+0x4789/0x4cf0 [ 1863.317120][ T8895] ? __lock_acquire+0x683/0x2ce0 [ 1863.317141][ T8895] ? register_lock_class+0x31/0x2e0 [ 1863.317168][ T8895] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1863.317194][ T8895] ? __pfx_hub_event+0x10/0x10 [ 1863.317211][ T8895] ? process_scheduled_works+0xa20/0x14e0 [ 1863.317234][ T8895] ? rcu_is_watching+0x15/0xb0 [ 1863.317257][ T8895] ? process_scheduled_works+0xa20/0x14e0 [ 1863.317276][ T8895] process_scheduled_works+0xa8e/0x14e0 [ 1863.317306][ T8895] ? __pfx_process_scheduled_works+0x10/0x10 [ 1863.317329][ T8895] ? assign_work+0x3cf/0x5d0 [ 1863.317349][ T8895] worker_thread+0xa47/0xfb0 [ 1863.317375][ T8895] ? __kthread_parkme+0x71/0x1f0 [ 1863.317401][ T8895] kthread+0x388/0x470 [ 1863.317425][ T8895] ? __pfx_worker_thread+0x10/0x10 [ 1863.317445][ T8895] ? __pfx_kthread+0x10/0x10 [ 1863.317469][ T8895] ret_from_fork+0x514/0xb70 [ 1863.317497][ T8895] ? __pfx_ret_from_fork+0x10/0x10 [ 1863.317522][ T8895] ? __switch_to+0xc89/0x1420 [ 1863.317546][ T8895] ? __pfx_kthread+0x10/0x10 [ 1863.317570][ T8895] ret_from_fork_asm+0x1a/0x30 [ 1863.317592][ T8895] [ 1863.317598][ T8895] [ 1863.317602][ T8895] The buggy address belongs to a vmalloc virtual mapping [ 1863.317640][ T8895] Memory state around the buggy address: [ 1863.317649][ T8895] ffffc90006a81f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1863.317661][ T8895] ffffc90006a81f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1863.317672][ T8895] >ffffc90006a82000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1863.317680][ T8895] ^ [ 1863.317689][ T8895] ffffc90006a82080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1863.317700][ T8895] ffffc90006a82100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1863.317708][ T8895] ================================================================== [ 1863.317721][ T8895] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1863.317733][ T8895] CPU: 0 UID: 0 PID: 8895 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1863.317751][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1863.317761][ T8895] Workqueue: usb_hub_wq hub_event [ 1863.317777][ T8895] Call Trace: [ 1863.317786][ T8895] [ 1863.317792][ T8895] vpanic+0x56c/0xa60 [ 1863.317809][ T8895] ? __pfx_vpanic+0x10/0x10 [ 1863.317828][ T8895] panic+0xc5/0xd0 [ 1863.317843][ T8895] ? __pfx_panic+0x10/0x10 [ 1863.317858][ T8895] ? __list_add_valid_or_report+0x4e/0x130 [ 1863.317874][ T8895] ? rcu_is_watching+0x15/0xb0 [ 1863.317897][ T8895] ? __list_add_valid_or_report+0x4e/0x130 [ 1863.317912][ T8895] check_panic_on_warn+0x89/0xb0 [ 1863.317929][ T8895] ? __list_add_valid_or_report+0x4e/0x130 [ 1863.317944][ T8895] end_report+0x73/0x170 [ 1863.317963][ T8895] ? __list_add_valid_or_report+0x4e/0x130 [ 1863.317978][ T8895] kasan_report+0x128/0x150 [ 1863.318002][ T8895] ? __list_add_valid_or_report+0x4e/0x130 [ 1863.318022][ T8895] __list_add_valid_or_report+0x4e/0x130 [ 1863.318039][ T8895] kcov_remote_stop+0x457/0x680 [ 1863.318067][ T8895] hub_event+0x4789/0x4cf0 [ 1863.318087][ T8895] ? __lock_acquire+0x683/0x2ce0 [ 1863.318105][ T8895] ? register_lock_class+0x31/0x2e0 [ 1863.318131][ T8895] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1863.318157][ T8895] ? __pfx_hub_event+0x10/0x10 [ 1863.318173][ T8895] ? process_scheduled_works+0xa20/0x14e0 [ 1863.318195][ T8895] ? rcu_is_watching+0x15/0xb0 [ 1863.318216][ T8895] ? process_scheduled_works+0xa20/0x14e0 [ 1863.318236][ T8895] process_scheduled_works+0xa8e/0x14e0 [ 1863.318266][ T8895] ? __pfx_process_scheduled_works+0x10/0x10 [ 1863.318288][ T8895] ? assign_work+0x3cf/0x5d0 [ 1863.318309][ T8895] worker_thread+0xa47/0xfb0 [ 1863.318334][ T8895] ? __kthread_parkme+0x71/0x1f0 [ 1863.318360][ T8895] kthread+0x388/0x470 [ 1863.318383][ T8895] ? __pfx_worker_thread+0x10/0x10 [ 1863.318403][ T8895] ? __pfx_kthread+0x10/0x10 [ 1863.318427][ T8895] ret_from_fork+0x514/0xb70 [ 1863.318453][ T8895] ? __pfx_ret_from_fork+0x10/0x10 [ 1863.318478][ T8895] ? __switch_to+0xc89/0x1420 [ 1863.318499][ T8895] ? __pfx_kthread+0x10/0x10 [ 1863.318524][ T8895] ret_from_fork_asm+0x1a/0x30 [ 1863.318546][ T8895] [ 1863.318610][ T8895] Kernel Offset: disabled