last executing test programs: 2.598292589s ago: executing program 4 (id=2449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000"], 0x340a) 2.189958706s ago: executing program 1 (id=2453): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.109897887s ago: executing program 4 (id=2454): r0 = socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x200002, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r1, r2, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.006134299s ago: executing program 4 (id=2458): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240440c4}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.983467799s ago: executing program 1 (id=2460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) ioctl(r4, 0x8b1a, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) 1.519397286s ago: executing program 4 (id=2465): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xb, 0x83, 0xfffd, 0x9dff, 0xe, "96ca676bc0d8a891"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x7, 0xd, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004fc0)={0x2, 0x3, &(0x7f0000004940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0xff}}, &(0x7f00000049c0)='syzkaller\x00', 0x4b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2053) 1.426677478s ago: executing program 0 (id=2466): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 1.357629579s ago: executing program 0 (id=2467): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) 1.357014889s ago: executing program 3 (id=2468): r0 = socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x200002, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r1, r2, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.33946512s ago: executing program 0 (id=2469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) 1.253811881s ago: executing program 3 (id=2470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48400) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000003800)=""/4107, 0x100b}, {0x0}, {&(0x7f0000000c00)=""/101, 0x65}, {&(0x7f0000000340)=""/274, 0x112}], 0x5}, 0x20001008}], 0x1, 0x0, 0x0) 1.25314557s ago: executing program 3 (id=2471): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x0, 0x2}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xd0, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xc}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xa, 0xa, 0xc, 0xb, 0xf, 0xc, 0x8, 0x6, 0xa, 0xe, 0x10, 0x7, 0x4, 0x3, 0x2, 0x2], 0x0, [0xc, 0xe, 0x5, 0x4000, 0x6, 0x6, 0xc5c, 0x0, 0xe949, 0x401, 0xfc00, 0x7, 0x8b2, 0x2, 0x7, 0xf], [0x3, 0x7, 0xfffe, 0x400, 0x1, 0x0, 0x3, 0x8, 0x3, 0x1, 0x8, 0x200, 0x7, 0x8, 0x9, 0x9]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x10, 0x10, 0x8, 0x9, 0x1, 0x10, 0x2, 0x1, 0xd, 0x8, 0xa, 0xa, 0xc, 0x10, 0xa, 0x4], 0x0, [0x9, 0x8000, 0x8, 0x6, 0x3, 0x0, 0x4, 0xfff, 0x81, 0x100, 0x7, 0x7, 0x7, 0x938f, 0x6, 0x4], [0x1, 0x6, 0x4, 0x8, 0x4, 0xfff3, 0x100, 0x8, 0x0, 0xd, 0x9, 0xa3, 0x8, 0xc79, 0x800, 0x31]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x25fb8c91}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3e, 0x4, 0x0, 0x2, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0xff, 0x6, 0x7, 0x2, 0x7fffffff, 0x4, 0x3}}, {0xa, 0x2, [0x8001, 0x4, 0x0]}}, {{0x1c, 0x1, {0x6, 0x6, 0x3, 0x3, 0x2, 0x66ea05ef, 0x1}}, {0x4}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.236475451s ago: executing program 0 (id=2472): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.221223021s ago: executing program 3 (id=2473): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r0, 0x0, 0x0) close(r0) 1.200626561s ago: executing program 3 (id=2474): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfd, 0x10603, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x1c, r4, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.098311113s ago: executing program 1 (id=2475): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240440c4}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.070107644s ago: executing program 0 (id=2476): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 929.853416ms ago: executing program 1 (id=2478): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 849.502587ms ago: executing program 1 (id=2479): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) 848.765817ms ago: executing program 1 (id=2480): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) tkill(0x0, 0x13) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x802, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r4, 0x0, 0x3, &(0x7f0000000b80), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x6f, 0x20, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x1, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x7, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xfd, 0x0, 0x1, {0x8, 0x25, 0x1, 0x0, 0x3c, 0xc, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x10, 0x8c, 0x4e, {0x8, 0x25, 0x1, 0x4, 0x1, 0x2, 0x7}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 832.254248ms ago: executing program 0 (id=2481): r0 = socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffe14) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r1, r2, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 794.575228ms ago: executing program 2 (id=2482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48400) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000003800)=""/4107, 0x100b}, {0x0}, {&(0x7f0000000c00)=""/101, 0x65}, {&(0x7f0000000340)=""/274, 0x112}], 0x5}, 0x20001008}], 0x1, 0x0, 0x0) 753.005589ms ago: executing program 2 (id=2483): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x0, 0x2}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xd0, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xc}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xa, 0xa, 0xc, 0xb, 0xf, 0xc, 0x8, 0x6, 0xa, 0xe, 0x10, 0x7, 0x4, 0x3, 0x2, 0x2], 0x0, [0xc, 0xe, 0x5, 0x4000, 0x6, 0x6, 0xc5c, 0x0, 0xe949, 0x401, 0xfc00, 0x7, 0x8b2, 0x2, 0x7, 0xf], [0x3, 0x7, 0xfffe, 0x400, 0x1, 0x0, 0x3, 0x8, 0x3, 0x1, 0x8, 0x200, 0x7, 0x8, 0x9, 0x9]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x10, 0x10, 0x8, 0x9, 0x1, 0x10, 0x2, 0x1, 0xd, 0x8, 0xa, 0xa, 0xc, 0x10, 0xa, 0x4], 0x0, [0x9, 0x8000, 0x8, 0x6, 0x3, 0x0, 0x4, 0xfff, 0x81, 0x100, 0x7, 0x7, 0x7, 0x938f, 0x6, 0x4], [0x1, 0x6, 0x4, 0x8, 0x4, 0xfff3, 0x100, 0x8, 0x0, 0xd, 0x9, 0xa3, 0x8, 0xc79, 0x800, 0x31]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x25fb8c91}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3e, 0x4, 0x0, 0x2, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0xff, 0x6, 0x7, 0x2, 0x7fffffff, 0x4, 0x3}}, {0xa, 0x2, [0x8001, 0x4, 0x0]}}, {{0x1c, 0x1, {0x6, 0x6, 0x3, 0x3, 0x2, 0x66ea05ef, 0x1}}, {0x4}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 718.236159ms ago: executing program 2 (id=2484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) 657.49247ms ago: executing program 4 (id=2485): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r0, 0x0, 0x0) 609.408431ms ago: executing program 4 (id=2486): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xb, 0x83, 0xfffd, 0x9dff, 0xe, "96ca676bc0d8a891"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x7, 0xd, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004fc0)={0x2, 0x0, 0x0, &(0x7f00000049c0)='syzkaller\x00', 0x4b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2053) 598.103191ms ago: executing program 2 (id=2487): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 398.856684ms ago: executing program 2 (id=2488): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 15.54376ms ago: executing program 3 (id=2489): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 0s ago: executing program 2 (id=2490): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) setns(0xc9, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") kernel console output (not intermixed with test programs): 3c/0x258 [ 269.054704][ T7303] do_el0_svc+0x5c/0x134 [ 269.055423][ T7303] el0_svc+0x58/0x128 [ 269.056147][ T7303] el0t_64_sync_handler+0x84/0xf0 [ 269.057074][ T7303] el0t_64_sync+0x18c/0x190 [ 269.068884][ T4622] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 269.070467][ T4622] usb 1-1: config 0 has no interface number 0 [ 269.071572][ T4622] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.073772][ T4622] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.079745][ T4622] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 269.083935][ T4622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.089879][ T4622] usb 1-1: Product: syz [ 269.090638][ T4622] usb 1-1: Manufacturer: syz [ 269.096203][ T4622] usb 1-1: SerialNumber: syz [ 269.106413][ T4622] usb 1-1: config 0 descriptor?? [ 269.116331][ T4622] yurex 1-1:0.50: Could not submitting URB [ 269.123230][ T4622] yurex: probe of 1-1:0.50 failed with error -5 [ 269.316677][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.319349][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.330671][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.336966][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.578391][ T7319] FAULT_INJECTION: forcing a failure. [ 269.578391][ T7319] name failslab, interval 1, probability 0, space 0, times 0 [ 269.580564][ T7319] CPU: 0 PID: 7319 Comm: syz.2.780 Not tainted syzkaller #0 [ 269.581835][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 269.583681][ T7319] Call trace: [ 269.584262][ T7319] dump_backtrace+0x1c4/0x1f0 [ 269.585123][ T7319] show_stack+0x2c/0x3c [ 269.585866][ T7319] __dump_stack+0x30/0x40 [ 269.586742][ T7319] dump_stack_lvl+0xf4/0x15c [ 269.587578][ T7319] dump_stack+0x1c/0x5c [ 269.588365][ T7319] should_fail_ex+0x3cc/0x524 [ 269.589222][ T7319] __should_failslab+0xc0/0x11c [ 269.590146][ T7319] should_failslab+0x10/0x28 [ 269.590990][ T7319] __kmem_cache_alloc_node+0x7c/0x318 [ 269.591972][ T7319] __kmalloc+0xc4/0x180 [ 269.592714][ T7319] mpi_resize+0x80/0x1ac [ 269.593467][ T7319] mpi_powm+0x62c/0x13cc [ 269.594261][ T7319] rsa_enc+0x1e8/0x340 [ 269.595012][ T7319] pkcs1pad_verify+0x3ac/0x5a8 [ 269.595846][ T7319] public_key_verify_signature+0x720/0xb30 [ 269.596920][ T7319] x509_check_for_self_signed+0x2dc/0x3c0 [ 269.597963][ T7319] x509_cert_parse+0x4d8/0x6e0 [ 269.598836][ T7319] x509_key_preparse+0x74/0x5c8 [ 269.599695][ T7319] asymmetric_key_preparse+0xcc/0x17c [ 269.600692][ T7319] key_create_or_update+0x394/0x868 [ 269.601650][ T7319] __arm64_sys_add_key+0x40c/0x520 [ 269.602583][ T7319] invoke_syscall+0x98/0x290 [ 269.603435][ T7319] el0_svc_common+0x13c/0x258 [ 269.604303][ T7319] do_el0_svc+0x5c/0x134 [ 269.605086][ T7319] el0_svc+0x58/0x128 [ 269.605830][ T7319] el0t_64_sync_handler+0x84/0xf0 [ 269.606787][ T7319] el0t_64_sync+0x18c/0x190 [ 269.901034][ T7333] netlink: 'syz.2.785': attribute type 1 has an invalid length. [ 269.928579][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.969625][ T7333] bond1: (slave dummy0): making interface the new active one [ 269.974342][ T7333] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 269.975821][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 270.092573][ T7338] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 270.113847][ T7338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.150482][ T7338] bond1: (slave dummy0): Releasing active interface [ 270.186664][ T7338] bond2: (slave dummy0): making interface the new active one [ 270.188956][ T7338] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 270.209931][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 270.610277][ T7352] device syzkaller0 entered promiscuous mode [ 271.110111][ T7369] input: syz1 as /devices/virtual/input/input16 [ 271.606822][ T4375] usb 1-1: USB disconnect, device number 16 [ 272.139400][ T4855] wlan1: Trigger new scan to find an IBSS to join [ 273.275848][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.277532][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.306128][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.309096][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.319122][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.333350][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.812038][ T27] audit: type=1326 audit(273.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.823" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x0 [ 274.009056][ T27] audit: type=1326 audit(273.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.2.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x0 [ 274.443268][ T7472] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 274.745407][ T7487] 9pnet_fd: Insufficient options for proto=fd [ 274.770028][ T7489] device-mapper: ioctl: Unable to rename non-existent device, to ÿÿ [ 274.856075][ T27] audit: type=1326 audit(274.840:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.843" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x0 [ 274.976862][ T7509] FAULT_INJECTION: forcing a failure. [ 274.976862][ T7509] name failslab, interval 1, probability 0, space 0, times 0 [ 274.979506][ T7509] CPU: 0 PID: 7509 Comm: syz.1.848 Not tainted syzkaller #0 [ 274.980740][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 274.982600][ T7509] Call trace: [ 274.983223][ T7509] dump_backtrace+0x1c4/0x1f0 [ 274.984103][ T7509] show_stack+0x2c/0x3c [ 274.984881][ T7509] __dump_stack+0x30/0x40 [ 274.985702][ T7509] dump_stack_lvl+0xf4/0x15c [ 274.986593][ T7509] dump_stack+0x1c/0x5c [ 274.987411][ T7509] should_fail_ex+0x3cc/0x524 [ 274.988335][ T7509] __should_failslab+0xc0/0x11c [ 274.989287][ T7509] should_failslab+0x10/0x28 [ 274.990185][ T7509] __kmem_cache_alloc_node+0x7c/0x318 [ 274.991219][ T7509] __kmalloc+0xc4/0x180 [ 274.992070][ T7509] mpi_alloc_limb_space+0x38/0x54 [ 274.993008][ T7509] mpihelp_mul_karatsuba_case+0xd0/0x9c0 [ 274.994107][ T7509] mpi_powm+0xa18/0x13cc [ 274.994928][ T7509] rsa_enc+0x1e8/0x340 [ 274.995707][ T7509] pkcs1pad_verify+0x3ac/0x5a8 [ 274.996638][ T7509] public_key_verify_signature+0x720/0xb30 [ 274.997741][ T7509] x509_check_for_self_signed+0x2dc/0x3c0 [ 274.998833][ T7509] x509_cert_parse+0x4d8/0x6e0 [ 274.999750][ T7509] x509_key_preparse+0x74/0x5c8 [ 275.000693][ T7509] asymmetric_key_preparse+0xcc/0x17c [ 275.001742][ T7509] key_create_or_update+0x394/0x868 [ 275.002758][ T7509] __arm64_sys_add_key+0x40c/0x520 [ 275.003755][ T7509] invoke_syscall+0x98/0x290 [ 275.004596][ T7509] el0_svc_common+0x13c/0x258 [ 275.005481][ T7509] do_el0_svc+0x5c/0x134 [ 275.006299][ T7509] el0_svc+0x58/0x128 [ 275.007039][ T7509] el0t_64_sync_handler+0x84/0xf0 [ 275.007975][ T7509] el0t_64_sync+0x18c/0x190 [ 275.176121][ T7528] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 275.215424][ T7529] input: syz1 as /devices/virtual/input/input17 [ 275.272963][ T7539] FAULT_INJECTION: forcing a failure. [ 275.272963][ T7539] name failslab, interval 1, probability 0, space 0, times 0 [ 275.275696][ T7539] CPU: 0 PID: 7539 Comm: syz.0.863 Not tainted syzkaller #0 [ 275.276911][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 275.278855][ T7539] Call trace: [ 275.279445][ T7539] dump_backtrace+0x1c4/0x1f0 [ 275.280322][ T7539] show_stack+0x2c/0x3c [ 275.281096][ T7539] __dump_stack+0x30/0x40 [ 275.281904][ T7539] dump_stack_lvl+0xf4/0x15c [ 275.282734][ T7539] dump_stack+0x1c/0x5c [ 275.283509][ T7539] should_fail_ex+0x3cc/0x524 [ 275.284414][ T7539] __should_failslab+0xc0/0x11c [ 275.285319][ T7539] should_failslab+0x10/0x28 [ 275.286203][ T7539] __kmem_cache_alloc_node+0x7c/0x318 [ 275.287224][ T7539] __kmalloc+0xc4/0x180 [ 275.288015][ T7539] x509_key_preparse+0x1e0/0x5c8 [ 275.288945][ T7539] asymmetric_key_preparse+0xcc/0x17c [ 275.289931][ T7539] key_create_or_update+0x394/0x868 [ 275.290913][ T7539] __arm64_sys_add_key+0x40c/0x520 [ 275.291880][ T7539] invoke_syscall+0x98/0x290 [ 275.292742][ T7539] el0_svc_common+0x13c/0x258 [ 275.293625][ T7539] do_el0_svc+0x5c/0x134 [ 275.294440][ T7539] el0_svc+0x58/0x128 [ 275.295239][ T7539] el0t_64_sync_handler+0x84/0xf0 [ 275.296150][ T7539] el0t_64_sync+0x18c/0x190 [ 275.296999][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.892210][ T7579] device-mapper: ioctl: Unable to rename non-existent device, to ÿÿ [ 275.946940][ T7586] FAULT_INJECTION: forcing a failure. [ 275.946940][ T7586] name failslab, interval 1, probability 0, space 0, times 0 [ 275.950157][ T7586] CPU: 0 PID: 7586 Comm: syz.2.885 Not tainted syzkaller #0 [ 275.951368][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 275.953153][ T7586] Call trace: [ 275.953781][ T7586] dump_backtrace+0x1c4/0x1f0 [ 275.954624][ T7586] show_stack+0x2c/0x3c [ 275.955402][ T7586] __dump_stack+0x30/0x40 [ 275.956186][ T7586] dump_stack_lvl+0xf4/0x15c [ 275.957015][ T7586] dump_stack+0x1c/0x5c [ 275.957831][ T7586] should_fail_ex+0x3cc/0x524 [ 275.958728][ T7586] __should_failslab+0xc0/0x11c [ 275.959680][ T7586] should_failslab+0x10/0x28 [ 275.960551][ T7586] __kmem_cache_alloc_node+0x7c/0x318 [ 275.961601][ T7586] __kmalloc+0xc4/0x180 [ 275.962402][ T7586] get_derived_key+0x48/0x118 [ 275.963232][ T7586] encrypted_read+0x69c/0xc04 [ 275.964068][ T7586] keyctl_read_key+0x230/0x3e0 [ 275.964941][ T7586] __arm64_sys_keyctl+0x204/0x8e0 [ 275.965916][ T7586] invoke_syscall+0x98/0x290 [ 275.966797][ T7586] el0_svc_common+0x13c/0x258 [ 275.967709][ T7586] do_el0_svc+0x5c/0x134 [ 275.968484][ T7586] el0_svc+0x58/0x128 [ 275.969235][ T7586] el0t_64_sync_handler+0x84/0xf0 [ 275.970211][ T7586] el0t_64_sync+0x18c/0x190 [ 276.094246][ T4435] wlan1: Trigger new scan to find an IBSS to join [ 276.103226][ T4435] wlan1: Trigger new scan to find an IBSS to join [ 276.250463][ T7605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.893'. [ 276.255146][ T7604] FAULT_INJECTION: forcing a failure. [ 276.255146][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 276.259828][ T7604] CPU: 1 PID: 7604 Comm: syz.1.892 Not tainted syzkaller #0 [ 276.261266][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 276.263334][ T7604] Call trace: [ 276.263930][ T7604] dump_backtrace+0x1c4/0x1f0 [ 276.264932][ T7604] show_stack+0x2c/0x3c [ 276.265791][ T7604] __dump_stack+0x30/0x40 [ 276.266690][ T7604] dump_stack_lvl+0xf4/0x15c [ 276.267617][ T7604] dump_stack+0x1c/0x5c [ 276.268419][ T7604] should_fail_ex+0x3cc/0x524 [ 276.269280][ T7604] __should_failslab+0xc0/0x11c [ 276.270203][ T7604] should_failslab+0x10/0x28 [ 276.271039][ T7604] __kmem_cache_alloc_node+0x7c/0x318 [ 276.272010][ T7604] __kmalloc_node+0xc8/0x184 [ 276.272844][ T7604] kvmalloc_node+0x88/0x1d4 [ 276.273705][ T7604] xt_alloc_entry_offsets+0x50/0x60 [ 276.274657][ T7604] translate_table+0x158/0x18dc [ 276.275550][ T7604] do_ipt_set_ctl+0x7f8/0xb84 [ 276.276394][ T7604] nf_setsockopt+0x260/0x280 [ 276.277272][ T7604] ip_setsockopt+0x124/0x134 [ 276.278091][ T7604] udp_setsockopt+0xa4/0xbc [ 276.278938][ T7604] sock_common_setsockopt+0xb0/0xcc [ 276.279938][ T7604] __sys_setsockopt+0x2fc/0x50c [ 276.280872][ T7604] __arm64_sys_setsockopt+0xc0/0xdc [ 276.281854][ T7604] invoke_syscall+0x98/0x290 [ 276.282705][ T7604] el0_svc_common+0x13c/0x258 [ 276.283568][ T7604] do_el0_svc+0x5c/0x134 [ 276.284362][ T7604] el0_svc+0x58/0x128 [ 276.285115][ T7604] el0t_64_sync_handler+0x84/0xf0 [ 276.286076][ T7604] el0t_64_sync+0x18c/0x190 [ 276.497660][ T7615] input: syz1 as /devices/virtual/input/input18 [ 276.654159][ T7621] netlink: 'syz.1.900': attribute type 11 has an invalid length. [ 276.655810][ T7621] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.900'. [ 276.660333][ T7620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.776140][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'. [ 277.045386][ T5004] wlan1: Creating new IBSS network, BSSID 3e:7e:02:71:8d:08 [ 277.256032][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 277.440461][ T7677] sctp: [Deprecated]: syz.4.921 (pid 7677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.440461][ T7677] Use struct sctp_sack_info instead [ 277.549190][ T7679] netlink: 'syz.0.926': attribute type 11 has an invalid length. [ 277.550697][ T7679] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.926'. [ 277.556340][ T7681] FAULT_INJECTION: forcing a failure. [ 277.556340][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 277.559231][ T7681] CPU: 0 PID: 7681 Comm: syz.2.925 Not tainted syzkaller #0 [ 277.560678][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 277.562610][ T7681] Call trace: [ 277.563240][ T7681] dump_backtrace+0x1c4/0x1f0 [ 277.564179][ T7681] show_stack+0x2c/0x3c [ 277.565076][ T7681] __dump_stack+0x30/0x40 [ 277.565939][ T7681] dump_stack_lvl+0xf4/0x15c [ 277.566555][ T7678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.566769][ T7681] dump_stack+0x1c/0x5c [ 277.569176][ T7681] should_fail_ex+0x3cc/0x524 [ 277.570042][ T7681] __should_failslab+0xc0/0x11c [ 277.570971][ T7681] should_failslab+0x10/0x28 [ 277.571852][ T7681] kmem_cache_alloc+0x88/0x310 [ 277.572742][ T7681] pte_alloc_one+0x78/0x254 [ 277.573707][ T7681] __pte_alloc+0x30/0xac [ 277.574658][ T7681] handle_mm_fault+0x25d8/0x3018 [ 277.575588][ T7681] do_page_fault+0x310/0x99c [ 277.576451][ T7681] do_translation_fault+0x94/0xc8 [ 277.577396][ T7681] do_mem_abort+0x70/0x198 [ 277.578262][ T7681] el0_da+0x70/0x144 [ 277.579040][ T7681] el0t_64_sync_handler+0x90/0xf0 [ 277.580136][ T7681] el0t_64_sync+0x18c/0x190 [ 277.581087][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.586544][ T7681] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 277.862390][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.930'. [ 277.942566][ T7706] netlink: 'syz.3.937': attribute type 11 has an invalid length. [ 277.944279][ T7706] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.937'. [ 277.959129][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.140011][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.204095][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.382046][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 278.390204][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.391633][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.885532][ T7742] device syzkaller0 entered promiscuous mode [ 278.932234][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.954'. [ 279.111720][ T7759] FAULT_INJECTION: forcing a failure. [ 279.111720][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 279.121140][ T7759] CPU: 0 PID: 7759 Comm: syz.0.958 Not tainted syzkaller #0 [ 279.122438][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 279.124266][ T7759] Call trace: [ 279.124906][ T7759] dump_backtrace+0x1c4/0x1f0 [ 279.125839][ T7759] show_stack+0x2c/0x3c [ 279.126675][ T7759] __dump_stack+0x30/0x40 [ 279.127469][ T7759] dump_stack_lvl+0xf4/0x15c [ 279.128360][ T7759] dump_stack+0x1c/0x5c [ 279.129135][ T7759] should_fail_ex+0x3cc/0x524 [ 279.129984][ T7759] __should_failslab+0xc0/0x11c [ 279.130893][ T7759] should_failslab+0x10/0x28 [ 279.131765][ T7759] __kmem_cache_alloc_node+0x7c/0x318 [ 279.132760][ T7759] __kmalloc_node+0xc8/0x184 [ 279.133613][ T7759] kvmalloc_node+0x88/0x1d4 [ 279.134469][ T7759] xt_alloc_entry_offsets+0x50/0x60 [ 279.135472][ T7759] translate_table+0x158/0x18dc [ 279.136380][ T7759] do_ipt_set_ctl+0x7f8/0xb84 [ 279.137256][ T7759] nf_setsockopt+0x260/0x280 [ 279.138123][ T7759] ip_setsockopt+0x124/0x134 [ 279.138964][ T7759] udp_setsockopt+0xa4/0xbc [ 279.139779][ T7759] sock_common_setsockopt+0xb0/0xcc [ 279.140727][ T7759] __sys_setsockopt+0x2fc/0x50c [ 279.141650][ T7759] __arm64_sys_setsockopt+0xc0/0xdc [ 279.142628][ T7759] invoke_syscall+0x98/0x290 [ 279.143502][ T7759] el0_svc_common+0x13c/0x258 [ 279.144383][ T7759] do_el0_svc+0x5c/0x134 [ 279.145189][ T7759] el0_svc+0x58/0x128 [ 279.145937][ T7759] el0t_64_sync_handler+0x84/0xf0 [ 279.146909][ T7759] el0t_64_sync+0x18c/0x190 [ 279.224625][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.962'. [ 279.247905][ T7770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.257196][ T7770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.275527][ T7768] input: syz1 as /devices/virtual/input/input19 [ 279.291472][ T7772] FAULT_INJECTION: forcing a failure. [ 279.291472][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 279.298671][ T7772] CPU: 1 PID: 7772 Comm: syz.0.964 Not tainted syzkaller #0 [ 279.300021][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 279.301818][ T7772] Call trace: [ 279.302456][ T7772] dump_backtrace+0x1c4/0x1f0 [ 279.303341][ T7772] show_stack+0x2c/0x3c [ 279.304101][ T7772] __dump_stack+0x30/0x40 [ 279.304905][ T7772] dump_stack_lvl+0xf4/0x15c [ 279.305772][ T7772] dump_stack+0x1c/0x5c [ 279.306581][ T7772] should_fail_ex+0x3cc/0x524 [ 279.307477][ T7772] __should_failslab+0xc0/0x11c [ 279.308342][ T7772] should_failslab+0x10/0x28 [ 279.309152][ T7772] __kmem_cache_alloc_node+0x7c/0x318 [ 279.310069][ T7772] __kmalloc+0xc4/0x180 [ 279.310784][ T7772] sk_prot_alloc+0xc4/0x1e8 [ 279.311575][ T7772] sk_alloc+0x44/0x3a0 [ 279.312298][ T7772] __netlink_create+0x80/0x2a8 [ 279.313110][ T7772] __netlink_kernel_create+0x130/0x6a4 [ 279.314080][ T7772] genl_pernet_init+0xac/0x160 [ 279.314888][ T7772] ops_init+0x2b0/0x53c [ 279.315617][ T7772] setup_net+0x494/0xb6c [ 279.316370][ T7772] copy_net_ns+0x2b8/0x578 [ 279.317127][ T7772] create_new_namespaces+0x30c/0x604 [ 279.318044][ T7772] unshare_nsproxy_namespaces+0x108/0x160 [ 279.319072][ T7772] ksys_unshare+0x3f0/0x70c [ 279.319862][ T7772] __arm64_sys_unshare+0x3c/0x50 [ 279.320777][ T7772] invoke_syscall+0x98/0x290 [ 279.321655][ T7772] el0_svc_common+0x13c/0x258 [ 279.322549][ T7772] do_el0_svc+0x5c/0x134 [ 279.323291][ T7772] el0_svc+0x58/0x128 [ 279.324023][ T7772] el0t_64_sync_handler+0x84/0xf0 [ 279.324967][ T7772] el0t_64_sync+0x18c/0x190 [ 279.397017][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.966'. [ 279.478869][ T7784] device syzkaller0 entered promiscuous mode [ 279.550503][ T7791] FAULT_INJECTION: forcing a failure. [ 279.550503][ T7791] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 279.554455][ T7791] CPU: 0 PID: 7791 Comm: syz.4.972 Not tainted syzkaller #0 [ 279.555870][ T7791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 279.557981][ T7791] Call trace: [ 279.558583][ T7791] dump_backtrace+0x1c4/0x1f0 [ 279.559486][ T7791] show_stack+0x2c/0x3c [ 279.560267][ T7791] __dump_stack+0x30/0x40 [ 279.561043][ T7791] dump_stack_lvl+0xf4/0x15c [ 279.561863][ T7791] dump_stack+0x1c/0x5c [ 279.562656][ T7791] should_fail_ex+0x3cc/0x524 [ 279.563508][ T7791] should_fail+0x14/0x24 [ 279.564299][ T7791] should_fail_usercopy+0x20/0x30 [ 279.565241][ T7791] strncpy_from_user+0x48/0x59c [ 279.566170][ T7791] __arm64_sys_add_key+0x14c/0x520 [ 279.567103][ T7791] invoke_syscall+0x98/0x290 [ 279.567930][ T7791] el0_svc_common+0x13c/0x258 [ 279.568802][ T7791] do_el0_svc+0x5c/0x134 [ 279.569590][ T7791] el0_svc+0x58/0x128 [ 279.570341][ T7791] el0t_64_sync_handler+0x84/0xf0 [ 279.571255][ T7791] el0t_64_sync+0x18c/0x190 [ 279.595340][ T7793] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 279.637748][ T7797] FAULT_INJECTION: forcing a failure. [ 279.637748][ T7797] name failslab, interval 1, probability 0, space 0, times 0 [ 279.640415][ T7797] CPU: 0 PID: 7797 Comm: syz.4.975 Not tainted syzkaller #0 [ 279.641722][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 279.643694][ T7797] Call trace: [ 279.644305][ T7797] dump_backtrace+0x1c4/0x1f0 [ 279.645202][ T7797] show_stack+0x2c/0x3c [ 279.645953][ T7797] __dump_stack+0x30/0x40 [ 279.646778][ T7797] dump_stack_lvl+0xf4/0x15c [ 279.647650][ T7797] dump_stack+0x1c/0x5c [ 279.648566][ T7797] should_fail_ex+0x3cc/0x524 [ 279.649572][ T7797] __should_failslab+0xc0/0x11c [ 279.650549][ T7797] should_failslab+0x10/0x28 [ 279.651404][ T7797] kmem_cache_alloc+0x88/0x310 [ 279.652314][ T7797] pte_alloc_one+0x78/0x254 [ 279.653170][ T7797] __pte_alloc+0x30/0xac [ 279.653992][ T7797] handle_mm_fault+0x25d8/0x3018 [ 279.654898][ T7797] do_page_fault+0x310/0x99c [ 279.655734][ T7797] do_translation_fault+0x94/0xc8 [ 279.656662][ T7797] do_mem_abort+0x70/0x198 [ 279.657442][ T7797] el0_da+0x70/0x144 [ 279.658142][ T7797] el0t_64_sync_handler+0x90/0xf0 [ 279.659146][ T7797] el0t_64_sync+0x18c/0x190 [ 279.663970][ T7797] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 279.862908][ T7824] device syzkaller0 entered promiscuous mode [ 280.092412][ T7840] 9pnet_fd: Insufficient options for proto=fd [ 280.103881][ T5004] wlan1: Trigger new scan to find an IBSS to join [ 280.125937][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.128363][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.177892][ T7848] device syzkaller0 entered promiscuous mode [ 280.306067][ T7850] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 280.439688][ T7854] input: syz1 as /devices/virtual/input/input20 [ 280.562322][ T7871] FAULT_INJECTION: forcing a failure. [ 280.562322][ T7871] name failslab, interval 1, probability 0, space 0, times 0 [ 280.565111][ T7871] CPU: 0 PID: 7871 Comm: syz.2.1009 Not tainted syzkaller #0 [ 280.566505][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 280.568406][ T7871] Call trace: [ 280.569006][ T7871] dump_backtrace+0x1c4/0x1f0 [ 280.569906][ T7871] show_stack+0x2c/0x3c [ 280.570705][ T7871] __dump_stack+0x30/0x40 [ 280.571548][ T7871] dump_stack_lvl+0xf4/0x15c [ 280.572464][ T7871] dump_stack+0x1c/0x5c [ 280.573276][ T7871] should_fail_ex+0x3cc/0x524 [ 280.574180][ T7871] __should_failslab+0xc0/0x11c [ 280.575123][ T7871] should_failslab+0x10/0x28 [ 280.576063][ T7871] __kmem_cache_alloc_node+0x7c/0x318 [ 280.577112][ T7871] __kmalloc+0xc4/0x180 [ 280.577923][ T7871] security_sk_alloc+0x54/0x140 [ 280.578878][ T7871] sk_prot_alloc+0xe0/0x1e8 [ 280.579709][ T7871] sk_alloc+0x44/0x3a0 [ 280.580463][ T7871] __netlink_create+0x80/0x2a8 [ 280.581372][ T7871] __netlink_kernel_create+0x130/0x6a4 [ 280.582426][ T7871] genl_pernet_init+0xac/0x160 [ 280.583358][ T7871] ops_init+0x2b0/0x53c [ 280.584151][ T7871] setup_net+0x494/0xb6c [ 280.584971][ T7871] copy_net_ns+0x2b8/0x578 [ 280.585809][ T7871] create_new_namespaces+0x30c/0x604 [ 280.586798][ T7871] unshare_nsproxy_namespaces+0x108/0x160 [ 280.587890][ T7871] ksys_unshare+0x3f0/0x70c [ 280.588748][ T7871] __arm64_sys_unshare+0x3c/0x50 [ 280.589701][ T7871] invoke_syscall+0x98/0x290 [ 280.590598][ T7871] el0_svc_common+0x13c/0x258 [ 280.591513][ T7871] do_el0_svc+0x5c/0x134 [ 280.592340][ T7871] el0_svc+0x58/0x128 [ 280.593124][ T7871] el0t_64_sync_handler+0x84/0xf0 [ 280.594089][ T7871] el0t_64_sync+0x18c/0x190 [ 280.702830][ T7876] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 280.710817][ T7879] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 281.133893][ T4518] wlan1: Trigger new scan to find an IBSS to join [ 281.463163][ T24] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 281.578079][ T7909] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 281.617649][ T7915] FAULT_INJECTION: forcing a failure. [ 281.617649][ T7915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.624837][ T7915] CPU: 1 PID: 7915 Comm: syz.3.1028 Not tainted syzkaller #0 [ 281.626134][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 281.626961][ T7917] overlayfs: failed to resolve './bus': -2 [ 281.627992][ T7915] Call trace: [ 281.629643][ T7915] dump_backtrace+0x1c4/0x1f0 [ 281.630489][ T7915] show_stack+0x2c/0x3c [ 281.631226][ T7915] __dump_stack+0x30/0x40 [ 281.632015][ T7915] dump_stack_lvl+0xf4/0x15c [ 281.632814][ T7915] dump_stack+0x1c/0x5c [ 281.633550][ T7915] should_fail_ex+0x3cc/0x524 [ 281.634410][ T7915] should_fail_alloc_page+0x74/0xb8 [ 281.635317][ T7915] prepare_alloc_pages+0x1b8/0x4f0 [ 281.636231][ T7915] __alloc_pages+0x134/0x544 [ 281.637074][ T7915] alloc_pages+0x434/0x6fc [ 281.637895][ T7915] cuse_channel_open+0x14c/0x5c0 [ 281.638826][ T7915] misc_open+0x310/0x388 [ 281.639615][ T7915] chrdev_open+0x3d0/0x51c [ 281.640438][ T7915] do_dentry_open+0x738/0xf8c [ 281.641317][ T7915] vfs_open+0x7c/0x90 [ 281.642035][ T7915] path_openat+0x1fc0/0x27a0 [ 281.642878][ T7915] do_filp_open+0x198/0x38c [ 281.643691][ T7915] do_sys_openat2+0x134/0x3fc [ 281.644537][ T7915] __arm64_sys_openat+0x11c/0x150 [ 281.645444][ T7915] invoke_syscall+0x98/0x290 [ 281.646298][ T7915] el0_svc_common+0x13c/0x258 [ 281.647163][ T7915] do_el0_svc+0x5c/0x134 [ 281.647983][ T7915] el0_svc+0x58/0x128 [ 281.648744][ T7915] el0t_64_sync_handler+0x84/0xf0 [ 281.649626][ T7915] el0t_64_sync+0x18c/0x190 [ 281.652896][ T24] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 281.655065][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.656786][ T24] usb 1-1: config 0 has no interface number 0 [ 281.657744][ T24] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.659745][ T24] usb 1-1: config 0 interface 41 has no altsetting 0 [ 281.664508][ T24] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 281.668421][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.670728][ T24] usb 1-1: Product: syz [ 281.672739][ T24] usb 1-1: Manufacturer: syz [ 281.674920][ T24] usb 1-1: SerialNumber: syz [ 281.678392][ T24] usb 1-1: config 0 descriptor?? [ 281.682738][ T24] CoreChips: probe of 1-1:0.41 failed with error -22 [ 281.822729][ T7939] __nla_validate_parse: 2 callbacks suppressed [ 281.822740][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 282.070666][ T7974] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1056'. [ 282.093566][ T4403] wlan1: Trigger new scan to find an IBSS to join [ 282.107003][ T5004] wlan1: Creating new IBSS network, BSSID 32:2b:7f:e6:5a:7a [ 282.304479][ T7991] 9pnet_fd: Insufficient options for proto=fd [ 282.351783][ T7993] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 282.355137][ T7993] FAULT_INJECTION: forcing a failure. [ 282.355137][ T7993] name fail_futex, interval 1, probability 0, space 0, times 0 [ 282.365233][ T7993] CPU: 1 PID: 7993 Comm: syz.1.1064 Not tainted syzkaller #0 [ 282.366602][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 282.368549][ T7993] Call trace: [ 282.369149][ T7993] dump_backtrace+0x1c4/0x1f0 [ 282.370103][ T7993] show_stack+0x2c/0x3c [ 282.370951][ T7993] __dump_stack+0x30/0x40 [ 282.371817][ T7993] dump_stack_lvl+0xf4/0x15c [ 282.372720][ T7993] dump_stack+0x1c/0x5c [ 282.373519][ T7993] should_fail_ex+0x3cc/0x524 [ 282.374419][ T7993] should_fail+0x14/0x24 [ 282.375259][ T7993] get_futex_key+0x904/0xfb0 [ 282.376111][ T7993] futex_wait_setup+0xbc/0x320 [ 282.376955][ T7993] futex_wait+0x164/0x424 [ 282.377747][ T7993] do_futex+0x2e8/0x340 [ 282.378511][ T7993] __arm64_sys_futex+0x390/0x414 [ 282.379425][ T7993] invoke_syscall+0x98/0x290 [ 282.380275][ T7993] el0_svc_common+0x13c/0x258 [ 282.381150][ T7993] do_el0_svc+0x5c/0x134 [ 282.381900][ T7993] el0_svc+0x58/0x128 [ 282.382615][ T7993] el0t_64_sync_handler+0x84/0xf0 [ 282.383522][ T7993] el0t_64_sync+0x18c/0x190 [ 282.524344][ T7999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1067'. [ 282.526609][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1067'. [ 282.686947][ T8005] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 283.070802][ T8043] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 283.134003][ T4518] wlan1: Trigger new scan to find an IBSS to join [ 283.140351][ T8048] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 284.083994][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1102'. [ 284.152787][ T8084] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1104'. [ 284.208786][ T4622] usb 1-1: USB disconnect, device number 17 [ 284.208794][ T8092] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 284.216477][ T8092] FAULT_INJECTION: forcing a failure. [ 284.216477][ T8092] name failslab, interval 1, probability 0, space 0, times 0 [ 284.219059][ T8092] CPU: 1 PID: 8092 Comm: syz.1.1109 Not tainted syzkaller #0 [ 284.220385][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 284.222212][ T8092] Call trace: [ 284.222796][ T8092] dump_backtrace+0x1c4/0x1f0 [ 284.223638][ T8092] show_stack+0x2c/0x3c [ 284.224397][ T8092] __dump_stack+0x30/0x40 [ 284.225313][ T8092] dump_stack_lvl+0xf4/0x15c [ 284.226214][ T8092] dump_stack+0x1c/0x5c [ 284.227008][ T8092] should_fail_ex+0x3cc/0x524 [ 284.228017][ T8092] __should_failslab+0xc0/0x11c [ 284.228994][ T8092] should_failslab+0x10/0x28 [ 284.229878][ T8092] kmem_cache_alloc+0x88/0x310 [ 284.230786][ T8092] __sigqueue_alloc+0x3e0/0x4e4 [ 284.231768][ T8092] __send_signal_locked+0x1d8/0xc88 [ 284.232864][ T8092] do_notify_parent+0x9bc/0xbe4 [ 284.233824][ T8092] release_task+0x11d0/0x1510 [ 284.234753][ T8092] do_exit+0x10bc/0x19ac [ 284.235579][ T8092] do_group_exit+0x198/0x238 [ 284.236454][ T8092] get_signal+0x11f4/0x133c [ 284.237306][ T8092] do_notify_resume+0x364/0x2c84 [ 284.238255][ T8092] el0_svc+0x98/0x128 [ 284.239022][ T8092] el0t_64_sync_handler+0x84/0xf0 [ 284.239971][ T8092] el0t_64_sync+0x18c/0x190 [ 284.359156][ T8108] FAULT_INJECTION: forcing a failure. [ 284.359156][ T8108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 284.362054][ T8108] CPU: 0 PID: 8108 Comm: syz.2.1115 Not tainted syzkaller #0 [ 284.363316][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 284.365394][ T8108] Call trace: [ 284.366073][ T8108] dump_backtrace+0x1c4/0x1f0 [ 284.367028][ T8108] show_stack+0x2c/0x3c [ 284.367896][ T8108] __dump_stack+0x30/0x40 [ 284.368800][ T8108] dump_stack_lvl+0xf4/0x15c [ 284.369708][ T8108] dump_stack+0x1c/0x5c [ 284.370515][ T8108] should_fail_ex+0x3cc/0x524 [ 284.371433][ T8108] should_fail_alloc_page+0x74/0xb8 [ 284.372375][ T8108] prepare_alloc_pages+0x1b8/0x4f0 [ 284.373312][ T8108] __alloc_pages+0x134/0x544 [ 284.374176][ T8108] alloc_pages+0x434/0x6fc [ 284.374997][ T8108] cuse_channel_open+0x14c/0x5c0 [ 284.375946][ T8108] misc_open+0x310/0x388 [ 284.376789][ T8108] chrdev_open+0x3d0/0x51c [ 284.377646][ T8108] do_dentry_open+0x738/0xf8c [ 284.378561][ T8108] vfs_open+0x7c/0x90 [ 284.379311][ T8108] path_openat+0x1fc0/0x27a0 [ 284.380178][ T8108] do_filp_open+0x198/0x38c [ 284.381001][ T8108] do_sys_openat2+0x134/0x3fc [ 284.381857][ T8108] __arm64_sys_openat+0x11c/0x150 [ 284.382771][ T8108] invoke_syscall+0x98/0x290 [ 284.383612][ T8108] el0_svc_common+0x13c/0x258 [ 284.384548][ T8108] do_el0_svc+0x5c/0x134 [ 284.385375][ T8108] el0_svc+0x58/0x128 [ 284.386135][ T8108] el0t_64_sync_handler+0x84/0xf0 [ 284.387039][ T8108] el0t_64_sync+0x18c/0x190 [ 284.795826][ T8124] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 284.872706][ T8138] FAULT_INJECTION: forcing a failure. [ 284.872706][ T8138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 284.881111][ T8138] CPU: 0 PID: 8138 Comm: syz.2.1130 Not tainted syzkaller #0 [ 284.882446][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 284.884357][ T8138] Call trace: [ 284.884941][ T8138] dump_backtrace+0x1c4/0x1f0 [ 284.885776][ T8138] show_stack+0x2c/0x3c [ 284.886595][ T8138] __dump_stack+0x30/0x40 [ 284.887419][ T8138] dump_stack_lvl+0xf4/0x15c [ 284.888408][ T8138] dump_stack+0x1c/0x5c [ 284.889270][ T8138] should_fail_ex+0x3cc/0x524 [ 284.890254][ T8138] should_fail_alloc_page+0x74/0xb8 [ 284.891297][ T8138] prepare_alloc_pages+0x1b8/0x4f0 [ 284.892320][ T8138] __alloc_pages+0x134/0x544 [ 284.893239][ T8138] alloc_pages+0x434/0x6fc [ 284.894078][ T8138] cuse_channel_open+0x14c/0x5c0 [ 284.894998][ T8138] misc_open+0x310/0x388 [ 284.895812][ T8138] chrdev_open+0x3d0/0x51c [ 284.896657][ T8138] do_dentry_open+0x738/0xf8c [ 284.897532][ T8138] vfs_open+0x7c/0x90 [ 284.898297][ T8138] path_openat+0x1fc0/0x27a0 [ 284.899193][ T8138] do_filp_open+0x198/0x38c [ 284.900065][ T8138] do_sys_openat2+0x134/0x3fc [ 284.900916][ T8138] __arm64_sys_openat+0x11c/0x150 [ 284.901886][ T8138] invoke_syscall+0x98/0x290 [ 284.902777][ T8138] el0_svc_common+0x13c/0x258 [ 284.903638][ T8138] do_el0_svc+0x5c/0x134 [ 284.904457][ T8138] el0_svc+0x58/0x128 [ 284.905162][ T8138] el0t_64_sync_handler+0x84/0xf0 [ 284.906087][ T8138] el0t_64_sync+0x18c/0x190 [ 285.033339][ T8152] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 285.228987][ T8163] input: syz1 as /devices/virtual/input/input21 [ 285.624438][ T8181] loop0: detected capacity change from 0 to 128 [ 285.628520][ T8181] FAT-fs (loop0): Unrecognized mount option "0x00000000000000000x0000000000000000" or missing value [ 285.643781][ T8183] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 285.666285][ T8183] FAULT_INJECTION: forcing a failure. [ 285.666285][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 285.668679][ T8183] CPU: 1 PID: 8183 Comm: syz.4.1149 Not tainted syzkaller #0 [ 285.669970][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 285.671802][ T8183] Call trace: [ 285.672397][ T8183] dump_backtrace+0x1c4/0x1f0 [ 285.673276][ T8183] show_stack+0x2c/0x3c [ 285.674034][ T8183] __dump_stack+0x30/0x40 [ 285.674831][ T8183] dump_stack_lvl+0xf4/0x15c [ 285.675655][ T8183] dump_stack+0x1c/0x5c [ 285.676446][ T8183] should_fail_ex+0x3cc/0x524 [ 285.677292][ T8183] __should_failslab+0xc0/0x11c [ 285.678158][ T8183] should_failslab+0x10/0x28 [ 285.679035][ T8183] kmem_cache_alloc+0x88/0x310 [ 285.679945][ T8183] __sigqueue_alloc+0x3e0/0x4e4 [ 285.680877][ T8183] __send_signal_locked+0x1d8/0xc88 [ 285.681895][ T8183] do_notify_parent+0x9bc/0xbe4 [ 285.682822][ T8183] release_task+0x11d0/0x1510 [ 285.683743][ T8183] do_exit+0x10bc/0x19ac [ 285.684557][ T8183] do_group_exit+0x198/0x238 [ 285.685416][ T8183] get_signal+0x11f4/0x133c [ 285.686290][ T8183] do_notify_resume+0x364/0x2c84 [ 285.687207][ T8183] el0_svc+0x98/0x128 [ 285.687955][ T8183] el0t_64_sync_handler+0x84/0xf0 [ 285.688914][ T8183] el0t_64_sync+0x18c/0x190 [ 286.144422][ T8181] loop0: detected capacity change from 0 to 32768 [ 286.196568][ T8181] loop0: p1 < > p3 p4 < > [ 286.202047][ T8181] loop0: p3 size 50361344 extends beyond EOD, truncated [ 286.270819][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.273341][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.282083][ T8206] FAULT_INJECTION: forcing a failure. [ 286.282083][ T8206] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.289287][ T8206] CPU: 0 PID: 8206 Comm: syz.0.1157 Not tainted syzkaller #0 [ 286.290627][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 286.292452][ T8206] Call trace: [ 286.293060][ T8206] dump_backtrace+0x1c4/0x1f0 [ 286.293937][ T8206] show_stack+0x2c/0x3c [ 286.294751][ T8206] __dump_stack+0x30/0x40 [ 286.295704][ T8206] dump_stack_lvl+0xf4/0x15c [ 286.296661][ T8206] dump_stack+0x1c/0x5c [ 286.297482][ T8206] should_fail_ex+0x3cc/0x524 [ 286.298413][ T8206] should_fail_alloc_page+0x74/0xb8 [ 286.299434][ T8206] prepare_alloc_pages+0x1b8/0x4f0 [ 286.300440][ T8206] __alloc_pages+0x134/0x544 [ 286.301321][ T8206] alloc_pages+0x434/0x6fc [ 286.302182][ T8206] cuse_channel_open+0x14c/0x5c0 [ 286.303133][ T8206] misc_open+0x310/0x388 [ 286.303925][ T8206] chrdev_open+0x3d0/0x51c [ 286.304727][ T8206] do_dentry_open+0x738/0xf8c [ 286.305636][ T8206] vfs_open+0x7c/0x90 [ 286.306405][ T8206] path_openat+0x1fc0/0x27a0 [ 286.306865][ T7380] udevd[7380]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 286.307338][ T8206] do_filp_open+0x198/0x38c [ 286.309480][ T7381] udevd[7381]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 286.309937][ T8206] do_sys_openat2+0x134/0x3fc [ 286.312664][ T8206] __arm64_sys_openat+0x11c/0x150 [ 286.313680][ T8206] invoke_syscall+0x98/0x290 [ 286.314580][ T8206] el0_svc_common+0x13c/0x258 [ 286.315274][ T7197] udevd[7197]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 286.315495][ T8206] do_el0_svc+0x5c/0x134 [ 286.318086][ T8206] el0_svc+0x58/0x128 [ 286.318840][ T8206] el0t_64_sync_handler+0x84/0xf0 [ 286.319784][ T8206] el0t_64_sync+0x18c/0x190 [ 286.797156][ T27] audit: type=1326 audit(286.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.810212][ T27] audit: type=1326 audit(286.790:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.821781][ T27] audit: type=1326 audit(286.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.827796][ T8232] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 286.829461][ T27] audit: type=1326 audit(286.800:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.838714][ T27] audit: type=1326 audit(286.800:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.843584][ T27] audit: type=1326 audit(286.800:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.851368][ T27] audit: type=1326 audit(286.800:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.855790][ T27] audit: type=1326 audit(286.800:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.859926][ T27] audit: type=1326 audit(286.800:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.864458][ T27] audit: type=1326 audit(286.800:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.1166" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e979368 code=0x7ffc0000 [ 286.938395][ T8243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1171'. [ 286.940386][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'. [ 287.053799][ T39] wlan1: Trigger new scan to find an IBSS to join [ 287.133323][ T4403] wlan1: Trigger new scan to find an IBSS to join [ 287.509348][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 287.511533][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'. [ 287.590971][ T8294] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1190'. [ 288.004021][ T5004] wlan1: Creating new IBSS network, BSSID 86:61:41:6f:6f:1d [ 288.270824][ T8324] input: syz1 as /devices/virtual/input/input22 [ 288.598801][ T8329] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 288.600140][ T8329] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 288.604158][ T8329] vhci_hcd vhci_hcd.0: Device attached [ 288.860584][ T8355] FAULT_INJECTION: forcing a failure. [ 288.860584][ T8355] name fail_futex, interval 1, probability 0, space 0, times 0 [ 288.871252][ T8355] CPU: 0 PID: 8355 Comm: syz.4.1214 Not tainted syzkaller #0 [ 288.872675][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 288.874563][ T8355] Call trace: [ 288.875202][ T8355] dump_backtrace+0x1c4/0x1f0 [ 288.876113][ T8355] show_stack+0x2c/0x3c [ 288.876898][ T8355] __dump_stack+0x30/0x40 [ 288.877727][ T8355] dump_stack_lvl+0xf4/0x15c [ 288.878596][ T8355] dump_stack+0x1c/0x5c [ 288.879386][ T8355] should_fail_ex+0x3cc/0x524 [ 288.880313][ T8355] should_fail+0x14/0x24 [ 288.881134][ T8355] get_futex_key+0x904/0xfb0 [ 288.881969][ T8355] futex_wait_setup+0xbc/0x320 [ 288.882865][ T8355] futex_wait+0x164/0x424 [ 288.883677][ T8355] do_futex+0x2e8/0x340 [ 288.884465][ T8355] __arm64_sys_futex+0x390/0x414 [ 288.885406][ T8355] invoke_syscall+0x98/0x290 [ 288.886281][ T8355] el0_svc_common+0x13c/0x258 [ 288.887190][ T8355] do_el0_svc+0x5c/0x134 [ 288.888011][ T8355] el0_svc+0x58/0x128 [ 288.888790][ T8355] el0t_64_sync_handler+0x84/0xf0 [ 288.889777][ T8355] el0t_64_sync+0x18c/0x190 [ 288.913177][ T4377] usb 3-1: SetAddress Request (2) to port 0 [ 288.914569][ T4377] usb 3-1: new SuperSpeed USB device number 2 using vhci_hcd [ 289.144191][ T8330] vhci_hcd: connection reset by peer [ 289.145508][ T5004] vhci_hcd: stop threads [ 289.146334][ T5004] vhci_hcd: release socket [ 289.147201][ T5004] vhci_hcd: disconnect device [ 289.282616][ T8370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.629609][ T8396] input: syz1 as /devices/virtual/input/input23 [ 289.932660][ T8405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1230'. [ 289.978023][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.985714][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.989213][ T8414] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 290.093302][ T5004] wlan1: Trigger new scan to find an IBSS to join [ 290.094631][ T5004] wlan1: Trigger new scan to find an IBSS to join [ 290.247693][ T8423] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 290.249101][ T8423] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 290.250992][ T8423] vhci_hcd vhci_hcd.0: Device attached [ 290.497034][ T8426] loop0: detected capacity change from 0 to 2048 [ 290.593400][ T8430] 9pnet_fd: Insufficient options for proto=fd [ 290.620856][ T8426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 290.697227][ T8448] FAULT_INJECTION: forcing a failure. [ 290.697227][ T8448] name fail_futex, interval 1, probability 0, space 0, times 0 [ 290.710400][ T8448] CPU: 1 PID: 8448 Comm: syz.4.1244 Not tainted syzkaller #0 [ 290.711790][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 290.713488][ T8448] Call trace: [ 290.714102][ T8448] dump_backtrace+0x1c4/0x1f0 [ 290.714978][ T8448] show_stack+0x2c/0x3c [ 290.715712][ T8448] __dump_stack+0x30/0x40 [ 290.716500][ T8448] dump_stack_lvl+0xf4/0x15c [ 290.717298][ T8448] dump_stack+0x1c/0x5c [ 290.718054][ T8448] should_fail_ex+0x3cc/0x524 [ 290.718999][ T8448] should_fail+0x14/0x24 [ 290.719814][ T8448] get_futex_key+0x904/0xfb0 [ 290.720708][ T8448] futex_wait_setup+0xbc/0x320 [ 290.721638][ T8448] futex_wait+0x164/0x424 [ 290.722473][ T8448] do_futex+0x2e8/0x340 [ 290.723291][ T8448] __arm64_sys_futex+0x390/0x414 [ 290.724242][ T8448] invoke_syscall+0x98/0x290 [ 290.725091][ T8448] el0_svc_common+0x13c/0x258 [ 290.726009][ T8448] do_el0_svc+0x5c/0x134 [ 290.726809][ T8448] el0_svc+0x58/0x128 [ 290.727534][ T8448] el0t_64_sync_handler+0x84/0xf0 [ 290.728485][ T8448] el0t_64_sync+0x18c/0x190 [ 290.743283][ T4381] usb 5-1: SetAddress Request (6) to port 0 [ 290.744485][ T4381] usb 5-1: new SuperSpeed USB device number 6 using vhci_hcd [ 290.863742][ T8424] vhci_hcd: connection reset by peer [ 290.866274][ T5004] vhci_hcd: stop threads [ 290.867052][ T5004] vhci_hcd: release socket [ 290.867691][ T8458] FAULT_INJECTION: forcing a failure. [ 290.867691][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 290.867940][ T5004] vhci_hcd: disconnect device [ 290.870484][ T8458] CPU: 1 PID: 8458 Comm: syz.2.1247 Not tainted syzkaller #0 [ 290.872157][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 290.874168][ T8458] Call trace: [ 290.874880][ T8458] dump_backtrace+0x1c4/0x1f0 [ 290.875899][ T8458] show_stack+0x2c/0x3c [ 290.876783][ T8458] __dump_stack+0x30/0x40 [ 290.877625][ T8458] dump_stack_lvl+0xf4/0x15c [ 290.878469][ T8458] dump_stack+0x1c/0x5c [ 290.879260][ T8458] should_fail_ex+0x3cc/0x524 [ 290.880152][ T8458] __should_failslab+0xc0/0x11c [ 290.881051][ T8458] should_failslab+0x10/0x28 [ 290.881915][ T8458] __kmem_cache_alloc_node+0x7c/0x318 [ 290.882926][ T8458] kmalloc_trace+0x48/0x94 [ 290.883697][ T8458] alloc_mnt_ns+0xc0/0x3b4 [ 290.884530][ T8458] __arm64_sys_fsmount+0x528/0x8c4 [ 290.885422][ T8458] invoke_syscall+0x98/0x290 [ 290.886265][ T8458] el0_svc_common+0x13c/0x258 [ 290.887115][ T8458] do_el0_svc+0x5c/0x134 [ 290.887904][ T8458] el0_svc+0x58/0x128 [ 290.888603][ T8458] el0t_64_sync_handler+0x84/0xf0 [ 290.889486][ T8458] el0t_64_sync+0x18c/0x190 [ 290.925999][ T8464] FAULT_INJECTION: forcing a failure. [ 290.925999][ T8464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.928177][ T8464] CPU: 1 PID: 8464 Comm: syz.2.1249 Not tainted syzkaller #0 [ 290.929457][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 290.931189][ T8464] Call trace: [ 290.931805][ T8464] dump_backtrace+0x1c4/0x1f0 [ 290.932711][ T8464] show_stack+0x2c/0x3c [ 290.933509][ T8464] __dump_stack+0x30/0x40 [ 290.934341][ T8464] dump_stack_lvl+0xf4/0x15c [ 290.935203][ T8464] dump_stack+0x1c/0x5c [ 290.935996][ T8464] should_fail_ex+0x3cc/0x524 [ 290.936880][ T8464] should_fail+0x14/0x24 [ 290.937696][ T8464] should_fail_usercopy+0x20/0x30 [ 290.938637][ T8464] strncpy_from_user+0x48/0x59c [ 290.939563][ T8464] getname_flags+0xec/0x458 [ 290.940436][ T8464] getname+0x28/0x38 [ 290.941206][ T8464] do_sys_openat2+0xdc/0x3fc [ 290.942094][ T8464] __arm64_sys_openat+0x11c/0x150 [ 290.943011][ T8464] invoke_syscall+0x98/0x290 [ 290.943808][ T8464] el0_svc_common+0x13c/0x258 [ 290.944663][ T8464] do_el0_svc+0x5c/0x134 [ 290.945454][ T8464] el0_svc+0x58/0x128 [ 290.946172][ T8464] el0t_64_sync_handler+0x84/0xf0 [ 290.947116][ T8464] el0t_64_sync+0x18c/0x190 [ 290.963471][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 291.051912][ T8475] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 291.146162][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 291.148336][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 291.152743][ T24] usb 1-1: string descriptor 0 read error: -22 [ 291.154927][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 291.158732][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.170893][ T24] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 291.181473][ T24] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 291.202198][ T7197] udevd[7197]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.314039][ T278] wlan1: Creating new IBSS network, BSSID 9a:b7:97:e6:8b:2e [ 292.328302][ T8555] FAULT_INJECTION: forcing a failure. [ 292.328302][ T8555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.330842][ T8555] CPU: 0 PID: 8555 Comm: syz.2.1283 Not tainted syzkaller #0 [ 292.332303][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 292.334360][ T8555] Call trace: [ 292.335018][ T8555] dump_backtrace+0x1c4/0x1f0 [ 292.335972][ T8555] show_stack+0x2c/0x3c [ 292.336769][ T8555] __dump_stack+0x30/0x40 [ 292.337541][ T8555] dump_stack_lvl+0xf4/0x15c [ 292.338363][ T8555] dump_stack+0x1c/0x5c [ 292.339132][ T8555] should_fail_ex+0x3cc/0x524 [ 292.340118][ T8555] should_fail+0x14/0x24 [ 292.340996][ T8555] should_fail_usercopy+0x20/0x30 [ 292.342035][ T8555] strncpy_from_user+0x48/0x59c [ 292.343099][ T8555] getname_flags+0xec/0x458 [ 292.343985][ T8555] getname+0x28/0x38 [ 292.344763][ T8555] do_sys_openat2+0xdc/0x3fc [ 292.345630][ T8555] __arm64_sys_openat+0x11c/0x150 [ 292.346545][ T8555] invoke_syscall+0x98/0x290 [ 292.347387][ T8555] el0_svc_common+0x13c/0x258 [ 292.348291][ T8555] do_el0_svc+0x5c/0x134 [ 292.349113][ T8555] el0_svc+0x58/0x128 [ 292.349883][ T8555] el0t_64_sync_handler+0x84/0xf0 [ 292.350854][ T8555] el0t_64_sync+0x18c/0x190 [ 293.069130][ T8590] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 293.171227][ T4403] wlan1: Trigger new scan to find an IBSS to join [ 293.178936][ T24] usb 1-1: USB disconnect, device number 18 [ 293.186356][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 293.279961][ T8596] input: syz1 as /devices/virtual/input/input24 [ 294.013552][ T4377] usb 3-1: device descriptor read/8, error -110 [ 294.102214][ T5004] wlan1: Trigger new scan to find an IBSS to join [ 294.468105][ T8638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.469860][ T8638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.704502][ T4377] usb usb3-port1: attempt power cycle [ 294.751713][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1320'. [ 294.811713][ T8669] FAULT_INJECTION: forcing a failure. [ 294.811713][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 294.815252][ T8669] CPU: 1 PID: 8669 Comm: syz.2.1323 Not tainted syzkaller #0 [ 294.816727][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 294.818766][ T8669] Call trace: [ 294.819434][ T8669] dump_backtrace+0x1c4/0x1f0 [ 294.820380][ T8669] show_stack+0x2c/0x3c [ 294.821208][ T8669] __dump_stack+0x30/0x40 [ 294.822095][ T8669] dump_stack_lvl+0xf4/0x15c [ 294.822998][ T8669] dump_stack+0x1c/0x5c [ 294.823802][ T8669] should_fail_ex+0x3cc/0x524 [ 294.824718][ T8669] __should_failslab+0xc0/0x11c [ 294.825677][ T8669] should_failslab+0x10/0x28 [ 294.826533][ T8669] slab_pre_alloc_hook+0x6c/0x31c [ 294.827484][ T8669] kmem_cache_alloc_lru+0x60/0x284 [ 294.828442][ T8669] sock_alloc_inode+0x2c/0xcc [ 294.829346][ T8669] new_inode_pseudo+0x68/0x1cc [ 294.830266][ T8669] __sock_create+0x138/0x8a8 [ 294.831122][ T8669] __sys_socket+0xc0/0x1b0 [ 294.831972][ T8669] __arm64_sys_socket+0x7c/0x94 [ 294.832897][ T8669] invoke_syscall+0x98/0x290 [ 294.833779][ T8669] el0_svc_common+0x13c/0x258 [ 294.834676][ T8669] do_el0_svc+0x5c/0x134 [ 294.835478][ T8669] el0_svc+0x58/0x128 [ 294.836228][ T8669] el0t_64_sync_handler+0x84/0xf0 [ 294.837188][ T8669] el0t_64_sync+0x18c/0x190 [ 294.841223][ T8669] socket: no more sockets [ 294.843006][ T8669] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 295.229226][ T8685] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 295.353645][ T4377] usb usb3-port1: unable to enumerate USB device [ 295.405778][ T4435] wlan1: Creating new IBSS network, BSSID 1a:cb:d4:0f:74:28 [ 295.432852][ T8693] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 295.435903][ T8693] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 295.468045][ T8697] FAULT_INJECTION: forcing a failure. [ 295.468045][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 295.470677][ T8697] CPU: 1 PID: 8697 Comm: syz.4.1336 Not tainted syzkaller #0 [ 295.472066][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 295.474051][ T8697] Call trace: [ 295.474716][ T8697] dump_backtrace+0x1c4/0x1f0 [ 295.475645][ T8697] show_stack+0x2c/0x3c [ 295.476481][ T8697] __dump_stack+0x30/0x40 [ 295.477323][ T8697] dump_stack_lvl+0xf4/0x15c [ 295.478219][ T8697] dump_stack+0x1c/0x5c [ 295.479033][ T8697] should_fail_ex+0x3cc/0x524 [ 295.479962][ T8697] __should_failslab+0xc0/0x11c [ 295.480890][ T8697] should_failslab+0x10/0x28 [ 295.481776][ T8697] slab_pre_alloc_hook+0x6c/0x31c [ 295.482755][ T8697] kmem_cache_alloc_lru+0x60/0x284 [ 295.483748][ T8697] sock_alloc_inode+0x2c/0xcc [ 295.484657][ T8697] new_inode_pseudo+0x68/0x1cc [ 295.485569][ T8697] __sock_create+0x138/0x8a8 [ 295.486469][ T8697] __sys_socket+0xc0/0x1b0 [ 295.487339][ T8697] __arm64_sys_socket+0x7c/0x94 [ 295.488274][ T8697] invoke_syscall+0x98/0x290 [ 295.489125][ T8697] el0_svc_common+0x13c/0x258 [ 295.490009][ T8697] do_el0_svc+0x5c/0x134 [ 295.490817][ T8697] el0_svc+0x58/0x128 [ 295.491574][ T8697] el0t_64_sync_handler+0x84/0xf0 [ 295.492532][ T8697] el0t_64_sync+0x18c/0x190 [ 295.493744][ T8697] socket: no more sockets [ 295.495922][ T8697] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 295.516128][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.518126][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.521495][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.527311][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.529781][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.531582][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.863363][ T4381] usb 5-1: device descriptor read/8, error -110 [ 296.299648][ T4381] usb usb5-port1: attempt power cycle [ 296.471935][ T8736] fuse: Bad value for 'fd' [ 296.520131][ T8740] device syzkaller0 entered promiscuous mode [ 296.697195][ T8752] Bluetooth: hci0: invalid len left 7, exp >= 104 [ 296.709032][ T8754] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 296.933745][ T4381] usb usb5-port1: unable to enumerate USB device [ 297.042860][ T8783] FAULT_INJECTION: forcing a failure. [ 297.042860][ T8783] name failslab, interval 1, probability 0, space 0, times 0 [ 297.046404][ T8783] CPU: 1 PID: 8783 Comm: syz.2.1374 Not tainted syzkaller #0 [ 297.047727][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 297.049574][ T8783] Call trace: [ 297.050181][ T8783] dump_backtrace+0x1c4/0x1f0 [ 297.051047][ T8783] show_stack+0x2c/0x3c [ 297.051812][ T8783] __dump_stack+0x30/0x40 [ 297.052609][ T8783] dump_stack_lvl+0xf4/0x15c [ 297.053467][ T8783] dump_stack+0x1c/0x5c [ 297.054256][ T8783] should_fail_ex+0x3cc/0x524 [ 297.055192][ T8783] __should_failslab+0xc0/0x11c [ 297.056141][ T8783] should_failslab+0x10/0x28 [ 297.057042][ T8783] slab_pre_alloc_hook+0x6c/0x31c [ 297.057998][ T8783] kmem_cache_alloc_lru+0x60/0x284 [ 297.059074][ T8783] sock_alloc_inode+0x2c/0xcc [ 297.059970][ T8783] new_inode_pseudo+0x68/0x1cc [ 297.060900][ T8783] __sock_create+0x138/0x8a8 [ 297.061784][ T8783] __sys_socket+0xc0/0x1b0 [ 297.062669][ T8783] __arm64_sys_socket+0x7c/0x94 [ 297.063602][ T8783] invoke_syscall+0x98/0x290 [ 297.064486][ T8783] el0_svc_common+0x13c/0x258 [ 297.065369][ T8783] do_el0_svc+0x5c/0x134 [ 297.066165][ T8783] el0_svc+0x58/0x128 [ 297.066927][ T8783] el0t_64_sync_handler+0x84/0xf0 [ 297.067844][ T8783] el0t_64_sync+0x18c/0x190 [ 297.068840][ T4435] wlan1: Trigger new scan to find an IBSS to join [ 297.072757][ T8783] socket: no more sockets [ 297.078743][ T8783] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 297.790316][ T8818] input: syz1 as /devices/virtual/input/input25 [ 297.835464][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.837460][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.087040][ T8824] device syzkaller0 entered promiscuous mode [ 298.120449][ T8824] tipc: Started in network mode [ 298.121875][ T8824] tipc: Node identity 1e9c97265d46, cluster identity 4711 [ 298.137383][ T8824] tipc: Enabled bearer , priority 0 [ 298.182309][ T8824] tipc: Resetting bearer [ 298.216007][ T8823] tipc: Resetting bearer [ 298.544669][ T4855] wlan1: Creating new IBSS network, BSSID 06:c4:56:47:ad:45 [ 298.563705][ T8823] tipc: Disabling bearer [ 299.094320][ T4374] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 299.120256][ T8853] Bluetooth: hci0: invalid len left 7, exp >= 104 [ 299.275868][ T4374] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 299.277779][ T4374] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.279609][ T4374] usb 1-1: config 0 has no interface number 0 [ 299.280785][ T4374] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.340153][ T8861] input: syz1 as /devices/virtual/input/input26 [ 299.613228][ T4374] usb 1-1: config 0 interface 41 has no altsetting 0 [ 299.619548][ T4374] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 299.621098][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.622463][ T4374] usb 1-1: Product: syz [ 299.623244][ T4374] usb 1-1: Manufacturer: syz [ 299.624007][ T4374] usb 1-1: SerialNumber: syz [ 299.625866][ T4374] usb 1-1: config 0 descriptor?? [ 299.627754][ T4374] CoreChips: probe of 1-1:0.41 failed with error -22 [ 299.718060][ T8869] device syzkaller0 entered promiscuous mode [ 299.821852][ T8873] device syzkaller0 entered promiscuous mode [ 299.838457][ T8873] tipc: Enabled bearer , priority 0 [ 299.854211][ T8873] tipc: Resetting bearer [ 299.859031][ T8872] tipc: Resetting bearer [ 299.924199][ T8872] tipc: Disabling bearer [ 301.210049][ T8911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1426'. [ 301.230063][ T8913] device syzkaller0 entered promiscuous mode [ 301.240606][ T8913] tipc: Started in network mode [ 301.241760][ T8913] tipc: Node identity 6a5bce8c10de, cluster identity 4711 [ 301.243827][ T8913] tipc: Enabled bearer , priority 0 [ 301.252831][ T8913] tipc: Resetting bearer [ 301.262451][ T8912] tipc: Resetting bearer [ 301.373686][ T8912] tipc: Disabling bearer [ 301.720465][ T4377] usb 1-1: USB disconnect, device number 19 [ 302.003001][ T8950] overlayfs: missing 'lowerdir' [ 302.263241][ T8958] input: syz1 as /devices/virtual/input/input27 [ 303.120993][ T9016] ip_tables: iptables: counters copy to user failed while replacing table [ 303.145517][ T9018] ip_tables: iptables: counters copy to user failed while replacing table [ 303.378908][ T9032] device syzkaller0 entered promiscuous mode [ 303.397915][ T9035] device syzkaller0 entered promiscuous mode [ 303.404549][ T9035] tipc: Started in network mode [ 303.405700][ T9035] tipc: Node identity d26e035ad7b1, cluster identity 4711 [ 303.407399][ T9035] tipc: Enabled bearer , priority 0 [ 303.412032][ T8984] loop0: detected capacity change from 0 to 131072 [ 303.419728][ T8984] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 303.421256][ T8984] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 303.424679][ T8984] F2FS-fs (loop0): invalid crc value [ 303.440489][ T9035] tipc: Resetting bearer [ 303.487223][ T9039] input: syz1 as /devices/virtual/input/input28 [ 303.795933][ T8984] F2FS-fs (loop0): Found nat_bits in checkpoint [ 303.832641][ T8984] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 303.834893][ T8984] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 303.846156][ T9034] tipc: Resetting bearer [ 303.923962][ T9034] tipc: Disabling bearer [ 303.969196][ T9047] device syzkaller0 entered promiscuous mode [ 304.128001][ T9069] FAULT_INJECTION: forcing a failure. [ 304.128001][ T9069] name failslab, interval 1, probability 0, space 0, times 0 [ 304.136776][ T9069] CPU: 0 PID: 9069 Comm: syz.4.1489 Not tainted syzkaller #0 [ 304.138307][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 304.140093][ T9069] Call trace: [ 304.140662][ T9069] dump_backtrace+0x1c4/0x1f0 [ 304.141531][ T9069] show_stack+0x2c/0x3c [ 304.142343][ T9069] __dump_stack+0x30/0x40 [ 304.143140][ T9069] dump_stack_lvl+0xf4/0x15c [ 304.144077][ T9069] dump_stack+0x1c/0x5c [ 304.144934][ T9069] should_fail_ex+0x3cc/0x524 [ 304.145846][ T9069] __should_failslab+0xc0/0x11c [ 304.146830][ T9069] should_failslab+0x10/0x28 [ 304.147766][ T9069] slab_pre_alloc_hook+0x6c/0x31c [ 304.148793][ T9069] kmem_cache_alloc_lru+0x60/0x284 [ 304.149800][ T9069] sock_alloc_inode+0x2c/0xcc [ 304.150736][ T9069] new_inode_pseudo+0x68/0x1cc [ 304.151695][ T9069] __sock_create+0x138/0x8a8 [ 304.152637][ T9069] __sys_socket+0xc0/0x1b0 [ 304.153548][ T9069] __arm64_sys_socket+0x7c/0x94 [ 304.154474][ T9069] invoke_syscall+0x98/0x290 [ 304.155380][ T9069] el0_svc_common+0x13c/0x258 [ 304.156305][ T9069] do_el0_svc+0x5c/0x134 [ 304.157162][ T9069] el0_svc+0x58/0x128 [ 304.157980][ T9069] el0t_64_sync_handler+0x84/0xf0 [ 304.158975][ T9069] el0t_64_sync+0x18c/0x190 [ 304.180149][ T9072] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 304.313331][ T9069] socket: no more sockets [ 304.748570][ T9108] ip_tables: iptables: counters copy to user failed while replacing table [ 304.867573][ T9117] FAULT_INJECTION: forcing a failure. [ 304.867573][ T9117] name failslab, interval 1, probability 0, space 0, times 0 [ 304.870432][ T9117] CPU: 1 PID: 9117 Comm: syz.2.1506 Not tainted syzkaller #0 [ 304.871749][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 304.873638][ T9117] Call trace: [ 304.874281][ T9117] dump_backtrace+0x1c4/0x1f0 [ 304.875141][ T9117] show_stack+0x2c/0x3c [ 304.875872][ T9117] __dump_stack+0x30/0x40 [ 304.876648][ T9117] dump_stack_lvl+0xf4/0x15c [ 304.877474][ T9117] dump_stack+0x1c/0x5c [ 304.878245][ T9117] should_fail_ex+0x3cc/0x524 [ 304.879126][ T9117] __should_failslab+0xc0/0x11c [ 304.880059][ T9117] should_failslab+0x10/0x28 [ 304.880887][ T9117] kmem_cache_alloc+0x88/0x310 [ 304.881747][ T9117] security_inode_alloc+0x38/0x11c [ 304.882689][ T9117] inode_init_always+0x6c8/0xb28 [ 304.883591][ T9117] new_inode_pseudo+0x7c/0x1cc [ 304.884455][ T9117] __sock_create+0x138/0x8a8 [ 304.885291][ T9117] __sys_socket+0xc0/0x1b0 [ 304.886257][ T9117] __arm64_sys_socket+0x7c/0x94 [ 304.887275][ T9117] invoke_syscall+0x98/0x290 [ 304.888179][ T9117] el0_svc_common+0x13c/0x258 [ 304.889090][ T9117] do_el0_svc+0x5c/0x134 [ 304.889898][ T9117] el0_svc+0x58/0x128 [ 304.890691][ T9117] el0t_64_sync_handler+0x84/0xf0 [ 304.891652][ T9117] el0t_64_sync+0x18c/0x190 [ 304.936994][ T9117] socket: no more sockets [ 304.943060][ T9117] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 305.246545][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.249034][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.253598][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.256251][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.260132][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.262440][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.611957][ T9134] FAULT_INJECTION: forcing a failure. [ 305.611957][ T9134] name failslab, interval 1, probability 0, space 0, times 0 [ 305.624411][ T9134] CPU: 0 PID: 9134 Comm: syz.4.1512 Not tainted syzkaller #0 [ 305.625774][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 305.627660][ T9134] Call trace: [ 305.628275][ T9134] dump_backtrace+0x1c4/0x1f0 [ 305.629216][ T9134] show_stack+0x2c/0x3c [ 305.630032][ T9134] __dump_stack+0x30/0x40 [ 305.630870][ T9134] dump_stack_lvl+0xf4/0x15c [ 305.631744][ T9134] dump_stack+0x1c/0x5c [ 305.632539][ T9134] should_fail_ex+0x3cc/0x524 [ 305.633419][ T9134] __should_failslab+0xc0/0x11c [ 305.634364][ T9134] should_failslab+0x10/0x28 [ 305.635374][ T9134] slab_pre_alloc_hook+0x6c/0x31c [ 305.636490][ T9134] kmem_cache_alloc_lru+0x60/0x284 [ 305.637610][ T9134] sock_alloc_inode+0x2c/0xcc [ 305.638654][ T9134] new_inode_pseudo+0x68/0x1cc [ 305.639545][ T9134] __sock_create+0x138/0x8a8 [ 305.640431][ T9134] __sys_socket+0xc0/0x1b0 [ 305.641055][ T9137] fuse: Bad value for 'fd' [ 305.641258][ T9134] __arm64_sys_socket+0x7c/0x94 [ 305.643070][ T9134] invoke_syscall+0x98/0x290 [ 305.644043][ T9134] el0_svc_common+0x13c/0x258 [ 305.644979][ T9134] do_el0_svc+0x5c/0x134 [ 305.645817][ T9134] el0_svc+0x58/0x128 [ 305.646623][ T9134] el0t_64_sync_handler+0x84/0xf0 [ 305.647626][ T9134] el0t_64_sync+0x18c/0x190 [ 305.655424][ T9134] socket: no more sockets [ 305.661219][ T9134] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 306.568460][ T9168] fuse: Bad value for 'fd' [ 306.692746][ T9175] device syzkaller0 entered promiscuous mode [ 307.053339][ T4449] wlan1: Trigger new scan to find an IBSS to join [ 307.505772][ T9197] device syzkaller0 entered promiscuous mode [ 307.521298][ T9197] tipc: Started in network mode [ 307.522562][ T9197] tipc: Node identity ca05d8d5019a, cluster identity 4711 [ 307.524504][ T9197] tipc: Enabled bearer , priority 0 [ 307.550879][ T9197] tipc: Resetting bearer [ 307.562515][ T9196] tipc: Resetting bearer [ 307.623681][ T9196] tipc: Disabling bearer [ 307.694417][ T9207] device syzkaller0 entered promiscuous mode [ 308.860261][ T9248] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 308.994205][ T9256] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 309.053373][ T4449] wlan1: Trigger new scan to find an IBSS to join [ 309.271231][ T9278] device syzkaller0 entered promiscuous mode [ 309.276428][ T9278] tipc: Enabled bearer , priority 0 [ 309.281909][ T9278] tipc: Resetting bearer [ 309.284925][ T9277] tipc: Resetting bearer [ 309.333906][ T9277] tipc: Disabling bearer [ 309.461686][ T9283] device syzkaller0 entered promiscuous mode [ 309.613304][ T4449] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 309.816188][ T9291] device syzkaller0 entered promiscuous mode [ 310.205507][ T4449] wlan1: Trigger new scan to find an IBSS to join [ 310.260317][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.261535][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.368157][ T9315] device syzkaller0 entered promiscuous mode [ 310.696783][ T9342] ip_tables: iptables: counters copy to user failed while replacing table [ 310.867623][ T9357] FAULT_INJECTION: forcing a failure. [ 310.867623][ T9357] name failslab, interval 1, probability 0, space 0, times 0 [ 310.878998][ T9357] CPU: 1 PID: 9357 Comm: syz.0.1603 Not tainted syzkaller #0 [ 310.880332][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 310.882055][ T9357] Call trace: [ 310.882582][ T9357] dump_backtrace+0x1c4/0x1f0 [ 310.883327][ T9357] show_stack+0x2c/0x3c [ 310.884046][ T9357] __dump_stack+0x30/0x40 [ 310.884826][ T9357] dump_stack_lvl+0xf4/0x15c [ 310.885576][ T9357] dump_stack+0x1c/0x5c [ 310.886372][ T9357] should_fail_ex+0x3cc/0x524 [ 310.887202][ T9357] __should_failslab+0xc0/0x11c [ 310.888091][ T9357] should_failslab+0x10/0x28 [ 310.888918][ T9357] slab_pre_alloc_hook+0x6c/0x31c [ 310.889840][ T9357] kmem_cache_alloc_lru+0x60/0x284 [ 310.890798][ T9357] sock_alloc_inode+0x2c/0xcc [ 310.891673][ T9357] new_inode_pseudo+0x68/0x1cc [ 310.892557][ T9357] sock_create_lite+0xd0/0x3f8 [ 310.893419][ T9357] __netlink_kernel_create+0xfc/0x6a4 [ 310.894442][ T9357] genl_pernet_init+0xac/0x160 [ 310.895332][ T9357] ops_init+0x2b0/0x53c [ 310.896081][ T9357] setup_net+0x494/0xb6c [ 310.896862][ T9357] copy_net_ns+0x2b8/0x578 [ 310.897731][ T9357] create_new_namespaces+0x30c/0x604 [ 310.898693][ T9357] unshare_nsproxy_namespaces+0x108/0x160 [ 310.899694][ T9357] ksys_unshare+0x3f0/0x70c [ 310.900497][ T9357] __arm64_sys_unshare+0x3c/0x50 [ 310.901390][ T9357] invoke_syscall+0x98/0x290 [ 310.902290][ T9357] el0_svc_common+0x13c/0x258 [ 310.903137][ T9357] do_el0_svc+0x5c/0x134 [ 310.903941][ T9357] el0_svc+0x58/0x128 [ 310.904724][ T9357] el0t_64_sync_handler+0x84/0xf0 [ 310.905641][ T9357] el0t_64_sync+0x18c/0x190 [ 311.208739][ T9368] device syzkaller0 entered promiscuous mode [ 311.212911][ T9368] tipc: Enabled bearer , priority 0 [ 311.227073][ T9368] tipc: Resetting bearer [ 311.239432][ T9367] tipc: Resetting bearer [ 311.269824][ T9373] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.294543][ T9367] tipc: Disabling bearer [ 311.344240][ T9382] FAULT_INJECTION: forcing a failure. [ 311.344240][ T9382] name fail_futex, interval 1, probability 0, space 0, times 0 [ 311.350049][ T9382] CPU: 1 PID: 9382 Comm: syz.2.1612 Not tainted syzkaller #0 [ 311.351432][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 311.353341][ T9382] Call trace: [ 311.353959][ T9382] dump_backtrace+0x1c4/0x1f0 [ 311.354856][ T9382] show_stack+0x2c/0x3c [ 311.355638][ T9382] __dump_stack+0x30/0x40 [ 311.356466][ T9382] dump_stack_lvl+0xf4/0x15c [ 311.357335][ T9382] dump_stack+0x1c/0x5c [ 311.358176][ T9382] should_fail_ex+0x3cc/0x524 [ 311.359075][ T9382] should_fail+0x14/0x24 [ 311.359878][ T9382] get_futex_key+0x904/0xfb0 [ 311.360743][ T9382] futex_wake+0x10c/0x458 [ 311.361367][ T9384] FAULT_INJECTION: forcing a failure. [ 311.361367][ T9384] name fail_futex, interval 1, probability 0, space 0, times 0 [ 311.361537][ T9382] do_futex+0x2c4/0x340 [ 311.364769][ T9382] __arm64_sys_futex+0x390/0x414 [ 311.365711][ T9382] invoke_syscall+0x98/0x290 [ 311.366591][ T9382] el0_svc_common+0x13c/0x258 [ 311.367465][ T9382] do_el0_svc+0x5c/0x134 [ 311.368289][ T9382] el0_svc+0x58/0x128 [ 311.369056][ T9382] el0t_64_sync_handler+0x84/0xf0 [ 311.369987][ T9382] el0t_64_sync+0x18c/0x190 [ 311.370794][ T9384] CPU: 0 PID: 9384 Comm: syz.4.1613 Not tainted syzkaller #0 [ 311.372164][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 311.374054][ T9384] Call trace: [ 311.374649][ T9384] dump_backtrace+0x1c4/0x1f0 [ 311.375235][ T9379] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 311.375503][ T9384] show_stack+0x2c/0x3c [ 311.377402][ T9384] __dump_stack+0x30/0x40 [ 311.378217][ T9384] dump_stack_lvl+0xf4/0x15c [ 311.379088][ T9384] dump_stack+0x1c/0x5c [ 311.379847][ T9384] should_fail_ex+0x3cc/0x524 [ 311.380735][ T9384] should_fail+0x14/0x24 [ 311.381668][ T9384] get_futex_key+0x904/0xfb0 [ 311.382683][ T9384] futex_wake+0x10c/0x458 [ 311.383621][ T9384] do_futex+0x2c4/0x340 [ 311.384500][ T9384] __arm64_sys_futex+0x390/0x414 [ 311.385478][ T9384] invoke_syscall+0x98/0x290 [ 311.386357][ T9384] el0_svc_common+0x13c/0x258 [ 311.387245][ T9384] do_el0_svc+0x5c/0x134 [ 311.388042][ T9384] el0_svc+0x58/0x128 [ 311.388808][ T9384] el0t_64_sync_handler+0x84/0xf0 [ 311.389754][ T9384] el0t_64_sync+0x18c/0x190 [ 311.523229][ T9392] loop0: detected capacity change from 0 to 2048 [ 311.555308][ T9394] FAULT_INJECTION: forcing a failure. [ 311.555308][ T9394] name failslab, interval 1, probability 0, space 0, times 0 [ 311.557990][ T9394] CPU: 1 PID: 9394 Comm: syz.2.1618 Not tainted syzkaller #0 [ 311.559380][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 311.561369][ T9394] Call trace: [ 311.562014][ T9394] dump_backtrace+0x1c4/0x1f0 [ 311.562930][ T9394] show_stack+0x2c/0x3c [ 311.563733][ T9394] __dump_stack+0x30/0x40 [ 311.564553][ T9394] dump_stack_lvl+0xf4/0x15c [ 311.565415][ T9394] dump_stack+0x1c/0x5c [ 311.566190][ T9394] should_fail_ex+0x3cc/0x524 [ 311.567068][ T9394] __should_failslab+0xc0/0x11c [ 311.567966][ T9394] should_failslab+0x10/0x28 [ 311.568808][ T9394] slab_pre_alloc_hook+0x6c/0x31c [ 311.569712][ T9394] kmem_cache_alloc_lru+0x60/0x284 [ 311.570632][ T9394] sock_alloc_inode+0x2c/0xcc [ 311.571516][ T9394] new_inode_pseudo+0x68/0x1cc [ 311.572366][ T9394] sock_create_lite+0xd0/0x3f8 [ 311.573211][ T9394] __netlink_kernel_create+0xfc/0x6a4 [ 311.574162][ T9394] genl_pernet_init+0xac/0x160 [ 311.574993][ T9394] ops_init+0x2b0/0x53c [ 311.575739][ T9394] setup_net+0x494/0xb6c [ 311.576486][ T9394] copy_net_ns+0x2b8/0x578 [ 311.577293][ T9394] create_new_namespaces+0x30c/0x604 [ 311.578224][ T9394] unshare_nsproxy_namespaces+0x108/0x160 [ 311.579258][ T9394] ksys_unshare+0x3f0/0x70c [ 311.580093][ T9394] __arm64_sys_unshare+0x3c/0x50 [ 311.581008][ T9394] invoke_syscall+0x98/0x290 [ 311.581855][ T9394] el0_svc_common+0x13c/0x258 [ 311.582734][ T9394] do_el0_svc+0x5c/0x134 [ 311.583517][ T9394] el0_svc+0x58/0x128 [ 311.584266][ T9394] el0t_64_sync_handler+0x84/0xf0 [ 311.585190][ T9394] el0t_64_sync+0x18c/0x190 [ 311.586616][ T9392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 311.645848][ T9403] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 311.785430][ T9417] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 311.812500][ T9420] FAULT_INJECTION: forcing a failure. [ 311.812500][ T9420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.815196][ T9420] CPU: 1 PID: 9420 Comm: syz.4.1627 Not tainted syzkaller #0 [ 311.816502][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 311.818463][ T9420] Call trace: [ 311.819074][ T9420] dump_backtrace+0x1c4/0x1f0 [ 311.819956][ T9420] show_stack+0x2c/0x3c [ 311.820720][ T9420] __dump_stack+0x30/0x40 [ 311.821528][ T9420] dump_stack_lvl+0xf4/0x15c [ 311.822420][ T9420] dump_stack+0x1c/0x5c [ 311.823188][ T9420] should_fail_ex+0x3cc/0x524 [ 311.824025][ T9420] should_fail+0x14/0x24 [ 311.824801][ T9420] should_fail_usercopy+0x20/0x30 [ 311.825704][ T9420] do_seccomp+0x30c/0xea4 [ 311.826466][ T9420] __arm64_sys_seccomp+0x7c/0x90 [ 311.827365][ T9420] invoke_syscall+0x98/0x290 [ 311.828247][ T9420] el0_svc_common+0x13c/0x258 [ 311.829129][ T9420] do_el0_svc+0x5c/0x134 [ 311.829902][ T9420] el0_svc+0x58/0x128 [ 311.830610][ T9420] el0t_64_sync_handler+0x84/0xf0 [ 311.831514][ T9420] el0t_64_sync+0x18c/0x190 [ 311.888661][ T9424] FAULT_INJECTION: forcing a failure. [ 311.888661][ T9424] name fail_futex, interval 1, probability 0, space 0, times 0 [ 311.891310][ T9424] CPU: 0 PID: 9424 Comm: syz.4.1629 Not tainted syzkaller #0 [ 311.892650][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 311.894636][ T9424] Call trace: [ 311.895277][ T9424] dump_backtrace+0x1c4/0x1f0 [ 311.896202][ T9424] show_stack+0x2c/0x3c [ 311.897039][ T9424] __dump_stack+0x30/0x40 [ 311.897844][ T9424] dump_stack_lvl+0xf4/0x15c [ 311.898708][ T9424] dump_stack+0x1c/0x5c [ 311.899458][ T9424] should_fail_ex+0x3cc/0x524 [ 311.900358][ T9424] should_fail+0x14/0x24 [ 311.901112][ T9424] get_futex_key+0x904/0xfb0 [ 311.901984][ T9424] futex_wake+0x10c/0x458 [ 311.902798][ T9424] do_futex+0x2c4/0x340 [ 311.903596][ T9424] __arm64_sys_futex+0x390/0x414 [ 311.904556][ T9424] invoke_syscall+0x98/0x290 [ 311.905430][ T9424] el0_svc_common+0x13c/0x258 [ 311.906332][ T9424] do_el0_svc+0x5c/0x134 [ 311.907145][ T9424] el0_svc+0x58/0x128 [ 311.907860][ T9424] el0t_64_sync_handler+0x84/0xf0 [ 311.908796][ T9424] el0t_64_sync+0x18c/0x190 [ 311.936025][ T4377] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 311.990578][ T9428] overlayfs: missing 'lowerdir' [ 312.093422][ T278] wlan1: Trigger new scan to find an IBSS to join [ 312.117163][ T4377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 312.119883][ T4377] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 312.124643][ T4377] usb 1-1: string descriptor 0 read error: -22 [ 312.125939][ T4377] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 312.127607][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.140697][ T4377] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 312.158073][ T4377] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 312.163019][ T9442] FAULT_INJECTION: forcing a failure. [ 312.163019][ T9442] name failslab, interval 1, probability 0, space 0, times 0 [ 312.165387][ T9442] CPU: 1 PID: 9442 Comm: syz.3.1636 Not tainted syzkaller #0 [ 312.166607][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 312.168523][ T9442] Call trace: [ 312.169152][ T9442] dump_backtrace+0x1c4/0x1f0 [ 312.169955][ T9442] show_stack+0x2c/0x3c [ 312.170679][ T9442] __dump_stack+0x30/0x40 [ 312.171435][ T9442] dump_stack_lvl+0xf4/0x15c [ 312.172267][ T9442] dump_stack+0x1c/0x5c [ 312.173004][ T9442] should_fail_ex+0x3cc/0x524 [ 312.173844][ T9442] __should_failslab+0xc0/0x11c [ 312.174711][ T9442] should_failslab+0x10/0x28 [ 312.175543][ T9442] __kmem_cache_alloc_node+0x7c/0x318 [ 312.176453][ T9442] __kmalloc+0xc4/0x180 [ 312.177210][ T9442] security_sk_alloc+0x54/0x140 [ 312.178095][ T9442] sk_prot_alloc+0xe0/0x1e8 [ 312.178921][ T9442] sk_alloc+0x44/0x3a0 [ 312.179656][ T9442] __netlink_create+0x80/0x2a8 [ 312.180533][ T9442] __netlink_kernel_create+0x130/0x6a4 [ 312.181591][ T9442] rtnetlink_net_init+0xa8/0x134 [ 312.182482][ T9442] ops_init+0x2b0/0x53c [ 312.183236][ T9442] setup_net+0x494/0xb6c [ 312.183982][ T9442] copy_net_ns+0x2b8/0x578 [ 312.184797][ T9442] create_new_namespaces+0x30c/0x604 [ 312.185770][ T9442] unshare_nsproxy_namespaces+0x108/0x160 [ 312.186809][ T9442] ksys_unshare+0x3f0/0x70c [ 312.187662][ T9442] __arm64_sys_unshare+0x3c/0x50 [ 312.188551][ T9442] invoke_syscall+0x98/0x290 [ 312.189357][ T9442] el0_svc_common+0x13c/0x258 [ 312.190197][ T9442] do_el0_svc+0x5c/0x134 [ 312.190947][ T9442] el0_svc+0x58/0x128 [ 312.191660][ T9442] el0t_64_sync_handler+0x84/0xf0 [ 312.192577][ T9442] el0t_64_sync+0x18c/0x190 [ 312.206489][ T7197] udevd[7197]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.457155][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 312.631640][ T9474] device syzkaller0 entered promiscuous mode [ 312.640134][ T9474] tipc: Enabled bearer , priority 0 [ 312.650651][ T9474] tipc: Resetting bearer [ 312.652916][ T9473] tipc: Resetting bearer [ 312.686603][ T9482] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 312.694167][ T9473] tipc: Disabling bearer [ 312.844535][ T24] usb 1-1: USB disconnect, device number 20 [ 312.867418][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 312.957550][ T9502] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 312.985145][ T9505] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 313.051051][ T9511] FAULT_INJECTION: forcing a failure. [ 313.051051][ T9511] name fail_futex, interval 1, probability 0, space 0, times 0 [ 313.053704][ T9511] CPU: 0 PID: 9511 Comm: syz.0.1666 Not tainted syzkaller #0 [ 313.055045][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 313.057085][ T9511] Call trace: [ 313.057743][ T9511] dump_backtrace+0x1c4/0x1f0 [ 313.058686][ T9511] show_stack+0x2c/0x3c [ 313.059520][ T9511] __dump_stack+0x30/0x40 [ 313.060335][ T9511] dump_stack_lvl+0xf4/0x15c [ 313.061231][ T9511] dump_stack+0x1c/0x5c [ 313.062018][ T9511] should_fail_ex+0x3cc/0x524 [ 313.062958][ T9511] should_fail+0x14/0x24 [ 313.063823][ T9511] get_futex_key+0x904/0xfb0 [ 313.064726][ T9511] futex_wake+0x10c/0x458 [ 313.065562][ T9511] do_futex+0x2c4/0x340 [ 313.066360][ T9511] __arm64_sys_futex+0x390/0x414 [ 313.067243][ T9511] invoke_syscall+0x98/0x290 [ 313.068100][ T9511] el0_svc_common+0x13c/0x258 [ 313.069031][ T9511] do_el0_svc+0x5c/0x134 [ 313.069860][ T9511] el0_svc+0x58/0x128 [ 313.070696][ T9511] el0t_64_sync_handler+0x84/0xf0 [ 313.071673][ T9511] el0t_64_sync+0x18c/0x190 [ 313.188478][ T9518] ip_tables: iptables: counters copy to user failed while replacing table [ 313.730399][ T9531] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 314.093447][ T39] wlan1: Trigger new scan to find an IBSS to join [ 314.103309][ T4454] wlan1: Trigger new scan to find an IBSS to join [ 314.225619][ T9547] FAULT_INJECTION: forcing a failure. [ 314.225619][ T9547] name fail_futex, interval 1, probability 0, space 0, times 0 [ 314.228375][ T9547] CPU: 0 PID: 9547 Comm: syz.3.1679 Not tainted syzkaller #0 [ 314.229821][ T9547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 314.231852][ T9547] Call trace: [ 314.232537][ T9547] dump_backtrace+0x1c4/0x1f0 [ 314.233429][ T9547] show_stack+0x2c/0x3c [ 314.234188][ T9547] __dump_stack+0x30/0x40 [ 314.234982][ T9547] dump_stack_lvl+0xf4/0x15c [ 314.235857][ T9547] dump_stack+0x1c/0x5c [ 314.236648][ T9547] should_fail_ex+0x3cc/0x524 [ 314.237546][ T9547] should_fail+0x14/0x24 [ 314.238372][ T9547] get_futex_key+0x904/0xfb0 [ 314.239289][ T9547] futex_wake+0x10c/0x458 [ 314.240150][ T9547] do_futex+0x2c4/0x340 [ 314.240938][ T9547] __arm64_sys_futex+0x390/0x414 [ 314.241899][ T9547] invoke_syscall+0x98/0x290 [ 314.242787][ T9547] el0_svc_common+0x13c/0x258 [ 314.243673][ T9547] do_el0_svc+0x5c/0x134 [ 314.244463][ T9547] el0_svc+0x58/0x128 [ 314.245301][ T9547] el0t_64_sync_handler+0x84/0xf0 [ 314.246290][ T9547] el0t_64_sync+0x18c/0x190 [ 315.114455][ T4905] wlan1: Creating new IBSS network, BSSID 8e:83:91:43:a3:ba [ 315.123746][ T9569] ip_tables: iptables: counters copy to user failed while replacing table [ 315.176136][ T9573] device syzkaller0 entered promiscuous mode [ 315.180655][ T9573] tipc: Enabled bearer , priority 0 [ 315.186116][ T9573] tipc: Resetting bearer [ 315.188834][ T9572] tipc: Resetting bearer [ 315.219164][ T9572] tipc: Disabling bearer [ 315.363696][ T9583] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 315.624063][ T9602] netlink: 'syz.3.1702': attribute type 10 has an invalid length. [ 315.643935][ T9602] team0: Port device netdevsim0 added [ 315.683629][ T9602] netlink: 'syz.3.1702': attribute type 10 has an invalid length. [ 315.719222][ T9602] team0: Port device netdevsim0 removed [ 315.721515][ T9602] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 315.794718][ T9605] device syzkaller0 entered promiscuous mode [ 315.801738][ T9605] tipc: Enabled bearer , priority 0 [ 315.817560][ T9605] tipc: Resetting bearer [ 315.819818][ T9604] tipc: Resetting bearer [ 315.873707][ T9604] tipc: Disabling bearer [ 316.297682][ T9622] device-mapper: ioctl: Unable to rename non-existent device, to ÿ [ 316.437412][ T9631] ip_tables: iptables: counters copy to user failed while replacing table [ 316.912165][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.914028][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.966291][ T9638] syz.0.1716 uses obsolete (PF_INET,SOCK_PACKET) [ 317.120508][ T9650] loop1: detected capacity change from 0 to 2048 [ 317.133473][ T4454] wlan1: Trigger new scan to find an IBSS to join [ 317.134777][ T39] wlan1: Trigger new scan to find an IBSS to join [ 317.238560][ T9650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 318.013997][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 318.399554][ T9690] device syzkaller0 entered promiscuous mode [ 318.412349][ T9692] ip_tables: iptables: counters copy to user failed while replacing table [ 318.419477][ T9690] tipc: Enabled bearer , priority 0 [ 318.436690][ T9690] tipc: Resetting bearer [ 318.439591][ T9688] tipc: Resetting bearer [ 318.594026][ T9688] tipc: Disabling bearer [ 318.788448][ T5046] wlan1: Creating new IBSS network, BSSID 1a:87:42:12:22:c5 [ 319.087082][ T9719] device syzkaller0 entered promiscuous mode [ 319.350984][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.352913][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.410047][ T9732] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 319.600736][ T9735] device syzkaller0 entered promiscuous mode [ 320.081216][ T9735] tipc: Started in network mode [ 320.082489][ T9735] tipc: Node identity b69ded3387f4, cluster identity 4711 [ 320.101026][ T9735] tipc: Enabled bearer , priority 0 [ 320.310230][ T9734] tipc: Resetting bearer [ 320.478228][ T9751] loop1: detected capacity change from 0 to 2048 [ 321.619586][ T4674] wlan1: Trigger new scan to find an IBSS to join [ 321.659647][ T9734] tipc: Disabling bearer [ 321.662041][ T5939] tipc: Node number set to 829025587 [ 321.681570][ T9751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 321.807669][ T9774] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 322.186694][ T9785] device syzkaller0 entered promiscuous mode [ 322.713356][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 322.766274][ T9792] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 322.886328][ T9804] device syzkaller0 entered promiscuous mode [ 322.890919][ T9804] tipc: Enabled bearer , priority 0 [ 322.893786][ T9803] tipc: Resetting bearer [ 322.964856][ T9803] tipc: Disabling bearer [ 322.970608][ T9811] device syzkaller0 entered promiscuous mode [ 322.992167][ T9819] FAULT_INJECTION: forcing a failure. [ 322.992167][ T9819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.995167][ T9819] CPU: 1 PID: 9819 Comm: syz.2.1778 Not tainted syzkaller #0 [ 322.996572][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 322.998572][ T9819] Call trace: [ 322.999231][ T9819] dump_backtrace+0x1c4/0x1f0 [ 323.000070][ T9819] show_stack+0x2c/0x3c [ 323.000798][ T9819] __dump_stack+0x30/0x40 [ 323.001581][ T9819] dump_stack_lvl+0xf4/0x15c [ 323.002431][ T9819] dump_stack+0x1c/0x5c [ 323.003217][ T9819] should_fail_ex+0x3cc/0x524 [ 323.004093][ T9819] should_fail+0x14/0x24 [ 323.004901][ T9819] should_fail_usercopy+0x20/0x30 [ 323.005874][ T9819] do_seccomp+0x30c/0xea4 [ 323.006723][ T9819] __arm64_sys_seccomp+0x7c/0x90 [ 323.007666][ T9819] invoke_syscall+0x98/0x290 [ 323.008556][ T9819] el0_svc_common+0x13c/0x258 [ 323.009460][ T9819] do_el0_svc+0x5c/0x134 [ 323.010262][ T9819] el0_svc+0x58/0x128 [ 323.011005][ T9819] el0t_64_sync_handler+0x84/0xf0 [ 323.011951][ T9819] el0t_64_sync+0x18c/0x190 [ 323.504149][ T4526] wlan1: Creating new IBSS network, BSSID 9a:2b:55:d7:06:66 [ 323.521984][ T9836] device syzkaller0 entered promiscuous mode [ 323.561022][ T9845] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 323.567664][ T9847] FAULT_INJECTION: forcing a failure. [ 323.567664][ T9847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.569918][ T9847] CPU: 1 PID: 9847 Comm: syz.3.1790 Not tainted syzkaller #0 [ 323.571202][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 323.573016][ T9847] Call trace: [ 323.573653][ T9847] dump_backtrace+0x1c4/0x1f0 [ 323.574538][ T9847] show_stack+0x2c/0x3c [ 323.575306][ T9847] __dump_stack+0x30/0x40 [ 323.576118][ T9847] dump_stack_lvl+0xf4/0x15c [ 323.576942][ T9847] dump_stack+0x1c/0x5c [ 323.577715][ T9847] should_fail_ex+0x3cc/0x524 [ 323.578576][ T9847] should_fail+0x14/0x24 [ 323.579468][ T9847] should_fail_usercopy+0x20/0x30 [ 323.580415][ T9847] do_seccomp+0x30c/0xea4 [ 323.581255][ T9847] __arm64_sys_seccomp+0x7c/0x90 [ 323.582136][ T9847] invoke_syscall+0x98/0x290 [ 323.583018][ T9847] el0_svc_common+0x13c/0x258 [ 323.583892][ T9847] do_el0_svc+0x5c/0x134 [ 323.584709][ T9847] el0_svc+0x58/0x128 [ 323.585461][ T9847] el0t_64_sync_handler+0x84/0xf0 [ 323.586385][ T9847] el0t_64_sync+0x18c/0x190 [ 323.905573][ T9866] device syzkaller0 entered promiscuous mode [ 323.986834][ T9874] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 324.404961][ T9886] input: syz1 as /devices/virtual/input/input29 [ 324.739600][ T9891] device syzkaller0 entered promiscuous mode [ 324.770487][ T9893] device syzkaller0 entered promiscuous mode [ 324.868120][ T9898] Set syz1 is full, maxelem 1029 reached [ 324.888522][ T9893] tipc: Enabled bearer , priority 0 [ 324.894299][ T9893] tipc: Resetting bearer [ 324.897654][ T9892] tipc: Resetting bearer [ 324.923900][ T9892] tipc: Disabling bearer [ 325.081581][ T9919] device syzkaller0 entered promiscuous mode [ 325.314436][ T9934] input: syz1 as /devices/virtual/input/input30 [ 325.689100][ T9936] device syzkaller0 entered promiscuous mode [ 325.749044][ T9941] FAULT_INJECTION: forcing a failure. [ 325.749044][ T9941] name fail_futex, interval 1, probability 0, space 0, times 0 [ 325.751615][ T9941] CPU: 1 PID: 9941 Comm: syz.0.1826 Not tainted syzkaller #0 [ 325.752963][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 325.754835][ T9941] Call trace: [ 325.755433][ T9941] dump_backtrace+0x1c4/0x1f0 [ 325.756324][ T9941] show_stack+0x2c/0x3c [ 325.757125][ T9941] __dump_stack+0x30/0x40 [ 325.757952][ T9941] dump_stack_lvl+0xf4/0x15c [ 325.758820][ T9941] dump_stack+0x1c/0x5c [ 325.759619][ T9941] should_fail_ex+0x3cc/0x524 [ 325.760489][ T9941] should_fail+0x14/0x24 [ 325.761285][ T9941] get_futex_key+0x18c/0xfb0 [ 325.762145][ T9941] futex_wake+0x10c/0x458 [ 325.762951][ T9941] do_futex+0x2c4/0x340 [ 325.763724][ T9941] mm_release+0x190/0x274 [ 325.764512][ T9941] exit_mm_release+0x30/0x40 [ 325.765361][ T9941] exit_mm+0x50/0x290 [ 325.766100][ T9941] do_exit+0x4d0/0x19ac [ 325.766914][ T9941] do_group_exit+0x198/0x238 [ 325.767793][ T9941] get_signal+0x11f4/0x133c [ 325.768636][ T9941] do_notify_resume+0x364/0x2c84 [ 325.769534][ T9941] el0_svc+0x98/0x128 [ 325.770286][ T9941] el0t_64_sync_handler+0x84/0xf0 [ 325.771239][ T9941] el0t_64_sync+0x18c/0x190 [ 326.039117][ T9972] device syzkaller0 entered promiscuous mode [ 326.527557][ T9999] input: syz1 as /devices/virtual/input/input31 [ 326.954644][T10010] ip_tables: iptables: counters copy to user failed while replacing table [ 327.091763][T10017] device syzkaller0 entered promiscuous mode [ 327.175037][T10025] FAULT_INJECTION: forcing a failure. [ 327.175037][T10025] name fail_futex, interval 1, probability 0, space 0, times 0 [ 327.183798][T10025] CPU: 0 PID: 10025 Comm: syz.0.1862 Not tainted syzkaller #0 [ 327.185185][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 327.186900][T10025] Call trace: [ 327.187461][T10025] dump_backtrace+0x1c4/0x1f0 [ 327.188200][T10025] show_stack+0x2c/0x3c [ 327.188873][T10025] __dump_stack+0x30/0x40 [ 327.189572][T10025] dump_stack_lvl+0xf4/0x15c [ 327.190424][T10025] dump_stack+0x1c/0x5c [ 327.191185][T10025] should_fail_ex+0x3cc/0x524 [ 327.192016][T10025] should_fail+0x14/0x24 [ 327.192794][T10025] get_futex_key+0x904/0xfb0 [ 327.193616][T10025] futex_wake+0x10c/0x458 [ 327.194384][T10025] do_futex+0x2c4/0x340 [ 327.195145][T10025] __arm64_sys_futex+0x390/0x414 [ 327.196010][T10025] invoke_syscall+0x98/0x290 [ 327.196848][T10025] el0_svc_common+0x13c/0x258 [ 327.197711][T10025] do_el0_svc+0x5c/0x134 [ 327.198536][T10025] el0_svc+0x58/0x128 [ 327.199279][T10025] el0t_64_sync_handler+0x84/0xf0 [ 327.200160][T10025] el0t_64_sync+0x18c/0x190 [ 327.234596][T10027] FAULT_INJECTION: forcing a failure. [ 327.234596][T10027] name failslab, interval 1, probability 0, space 0, times 0 [ 327.236979][T10027] CPU: 0 PID: 10027 Comm: syz.1.1864 Not tainted syzkaller #0 [ 327.238241][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 327.239994][T10027] Call trace: [ 327.240566][T10027] dump_backtrace+0x1c4/0x1f0 [ 327.241409][T10027] show_stack+0x2c/0x3c [ 327.242199][T10027] __dump_stack+0x30/0x40 [ 327.243052][T10027] dump_stack_lvl+0xf4/0x15c [ 327.243925][T10027] dump_stack+0x1c/0x5c [ 327.244752][T10027] should_fail_ex+0x3cc/0x524 [ 327.245683][T10027] __should_failslab+0xc0/0x11c [ 327.246639][T10027] should_failslab+0x10/0x28 [ 327.247521][T10027] __kmem_cache_alloc_node+0x7c/0x318 [ 327.248546][T10027] __kmalloc_node+0xc8/0x184 [ 327.249446][T10027] kvmalloc_node+0x88/0x1d4 [ 327.250344][T10027] xt_alloc_entry_offsets+0x50/0x60 [ 327.251379][T10027] translate_table+0x158/0x18dc [ 327.252326][T10027] do_ipt_set_ctl+0x7f8/0xb84 [ 327.253253][T10027] nf_setsockopt+0x260/0x280 [ 327.254188][T10027] ip_setsockopt+0x124/0x134 [ 327.255098][T10027] udp_setsockopt+0xa4/0xbc [ 327.255913][T10027] sock_common_setsockopt+0xb0/0xcc [ 327.256911][T10027] __sys_setsockopt+0x2fc/0x50c [ 327.257773][T10027] __arm64_sys_setsockopt+0xc0/0xdc [ 327.258765][T10027] invoke_syscall+0x98/0x290 [ 327.259631][T10027] el0_svc_common+0x13c/0x258 [ 327.260523][T10027] do_el0_svc+0x5c/0x134 [ 327.261317][T10027] el0_svc+0x58/0x128 [ 327.262063][T10027] el0t_64_sync_handler+0x84/0xf0 [ 327.263008][T10027] el0t_64_sync+0x18c/0x190 [ 327.475233][T10054] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 327.583081][T10063] device syzkaller0 entered promiscuous mode [ 328.093485][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 328.122771][T10078] device syzkaller0 entered promiscuous mode [ 328.130631][T10078] tipc: Enabled bearer , priority 0 [ 328.145379][T10078] tipc: Resetting bearer [ 328.147739][T10077] tipc: Resetting bearer [ 328.203677][T10077] tipc: Disabling bearer [ 328.230744][T10080] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 328.343825][T10089] FAULT_INJECTION: forcing a failure. [ 328.343825][T10089] name failslab, interval 1, probability 0, space 0, times 0 [ 328.345984][T10085] fuse: Bad value for 'fd' [ 328.346078][T10089] CPU: 1 PID: 10089 Comm: syz.0.1890 Not tainted syzkaller #0 [ 328.348360][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 328.350313][T10089] Call trace: [ 328.350954][T10089] dump_backtrace+0x1c4/0x1f0 [ 328.351871][T10089] show_stack+0x2c/0x3c [ 328.352650][T10089] __dump_stack+0x30/0x40 [ 328.353436][T10089] dump_stack_lvl+0xf4/0x15c [ 328.354261][T10089] dump_stack+0x1c/0x5c [ 328.355006][T10089] should_fail_ex+0x3cc/0x524 [ 328.355881][T10089] __should_failslab+0xc0/0x11c [ 328.356817][T10089] should_failslab+0x10/0x28 [ 328.357663][T10089] __kmem_cache_alloc_node+0x7c/0x318 [ 328.358684][T10089] __kmalloc_node+0xc8/0x184 [ 328.359565][T10089] kvmalloc_node+0x88/0x1d4 [ 328.360431][T10089] xt_alloc_entry_offsets+0x50/0x60 [ 328.361431][T10089] translate_table+0x158/0x18dc [ 328.362367][T10089] do_ipt_set_ctl+0x7f8/0xb84 [ 328.363275][T10089] nf_setsockopt+0x260/0x280 [ 328.364140][T10089] ip_setsockopt+0x124/0x134 [ 328.365009][T10089] udp_setsockopt+0xa4/0xbc [ 328.365871][T10089] sock_common_setsockopt+0xb0/0xcc [ 328.366869][T10089] __sys_setsockopt+0x2fc/0x50c [ 328.367801][T10089] __arm64_sys_setsockopt+0xc0/0xdc [ 328.368813][T10089] invoke_syscall+0x98/0x290 [ 328.369654][T10089] el0_svc_common+0x13c/0x258 [ 328.370539][T10089] do_el0_svc+0x5c/0x134 [ 328.371288][T10089] el0_svc+0x58/0x128 [ 328.371991][T10089] el0t_64_sync_handler+0x84/0xf0 [ 328.372886][T10089] el0t_64_sync+0x18c/0x190 [ 328.589979][ T4403] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 328.729559][T10095] device syzkaller0 entered promiscuous mode [ 328.769913][T10072] loop1: detected capacity change from 0 to 131072 [ 328.781101][T10072] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 328.786708][T10072] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 328.796225][T10072] F2FS-fs (loop1): invalid crc value [ 328.818114][T10072] F2FS-fs (loop1): Found nat_bits in checkpoint [ 328.841462][T10072] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 328.843095][T10072] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 329.342903][T10120] Bluetooth: MGMT ver 1.22 [ 329.393897][T10123] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 331.318698][T10165] device syzkaller0 entered promiscuous mode [ 331.322713][T10165] tipc: Enabled bearer , priority 0 [ 331.384792][T10166] tipc: Resetting bearer [ 331.391831][T10164] tipc: Resetting bearer [ 331.450982][T10170] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 331.483899][T10164] tipc: Disabling bearer [ 331.515432][T10175] fuse: Unknown parameter 'group_id00000000000000000000' [ 332.226572][ T4454] wlan1: Trigger new scan to find an IBSS to join [ 332.862931][T10211] fuse: Unknown parameter 'group_id00000000000000000000' [ 333.372341][T10218] device syzkaller0 entered promiscuous mode [ 333.394685][T10218] tipc: Enabled bearer , priority 0 [ 333.403892][ T5043] wlan1: Creating new IBSS network, BSSID 66:40:c2:cc:16:6c [ 333.815594][T10219] tipc: Resetting bearer [ 333.819884][T10216] tipc: Resetting bearer [ 333.853858][T10216] tipc: Disabling bearer [ 335.133482][ T4855] wlan1: Trigger new scan to find an IBSS to join [ 335.553587][T10274] device syzkaller0 entered promiscuous mode [ 335.558196][T10274] tipc: Enabled bearer , priority 0 [ 335.618711][T10275] tipc: Resetting bearer [ 335.624387][T10273] tipc: Resetting bearer [ 335.683761][T10273] tipc: Disabling bearer [ 337.128327][T10293] syz.0.1954: attempt to access beyond end of device [ 337.128327][T10293] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 337.158743][T10303] device syzkaller0 entered promiscuous mode [ 337.168784][T10303] tipc: Enabled bearer , priority 0 [ 337.218108][T10303] tipc: Resetting bearer [ 337.231439][T10300] tipc: Resetting bearer [ 337.310596][T10300] tipc: Disabling bearer [ 337.343772][T10293] device-mapper: table: 248:2: integrity: Error reading superblock (-EIO) [ 337.345557][T10293] device-mapper: ioctl: error adding target to table [ 337.712141][T10320] device syzkaller0 entered promiscuous mode [ 337.716645][T10320] tipc: Enabled bearer , priority 0 [ 337.771967][T10320] tipc: Resetting bearer [ 337.800641][T10319] tipc: Resetting bearer [ 337.878959][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.880915][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.823523][T10319] tipc: Disabling bearer [ 339.145394][ T4855] wlan1: Trigger new scan to find an IBSS to join [ 340.122734][ T39] wlan1: Trigger new scan to find an IBSS to join [ 341.313987][ T4526] wlan1: Creating new IBSS network, BSSID 02:47:05:07:25:39 [ 341.347933][T10381] device syzkaller0 entered promiscuous mode [ 343.012358][T10461] input: syz1 as /devices/virtual/input/input32 [ 343.286910][ T5046] wlan1: Trigger new scan to find an IBSS to join [ 343.325409][T10465] device syzkaller0 entered promiscuous mode [ 343.400026][T10465] tipc: Enabled bearer , priority 0 [ 343.409628][T10465] tipc: Resetting bearer [ 343.412094][T10464] tipc: Resetting bearer [ 344.005788][T10464] tipc: Disabling bearer [ 344.451130][T10520] device syzkaller0 entered promiscuous mode [ 344.933343][ T5046] wlan1: Creating new IBSS network, BSSID ca:61:41:d6:98:6a [ 345.154912][T10535] input: syz1 as /devices/virtual/input/input33 [ 345.637034][T10542] device syzkaller0 entered promiscuous mode [ 346.072839][T10558] Set syz1 is full, maxelem 1029 reached [ 346.243728][T10578] device syzkaller0 entered promiscuous mode [ 346.247867][T10578] tipc: Enabled bearer , priority 0 [ 346.259299][T10578] tipc: Resetting bearer [ 346.266485][T10577] tipc: Resetting bearer [ 346.360587][T10577] tipc: Disabling bearer [ 346.378776][T10588] input: syz1 as /devices/virtual/input/input34 [ 346.767008][T10587] device syzkaller0 entered promiscuous mode [ 346.802294][T10600] Set syz1 is full, maxelem 1029 reached [ 347.490225][T10646] device syzkaller0 entered promiscuous mode [ 347.732013][T10662] input: syz1 as /devices/virtual/input/input35 [ 348.556809][T10690] device syzkaller0 entered promiscuous mode [ 348.860374][ T4454] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.901163][T10696] fuse: Bad value for 'rootmode' [ 348.937782][T10702] Set syz1 is full, maxelem 1029 reached [ 348.960889][T10706] FAULT_INJECTION: forcing a failure. [ 348.960889][T10706] name failslab, interval 1, probability 0, space 0, times 0 [ 348.967830][T10706] CPU: 1 PID: 10706 Comm: syz.3.2111 Not tainted syzkaller #0 [ 348.969082][T10706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 348.970699][T10706] Call trace: [ 348.971260][T10706] dump_backtrace+0x1c4/0x1f0 [ 348.972065][T10706] show_stack+0x2c/0x3c [ 348.972783][T10706] __dump_stack+0x30/0x40 [ 348.973590][T10706] dump_stack_lvl+0xf4/0x15c [ 348.974512][T10706] dump_stack+0x1c/0x5c [ 348.975391][T10706] should_fail_ex+0x3cc/0x524 [ 348.976389][T10706] __should_failslab+0xc0/0x11c [ 348.977375][T10706] should_failslab+0x10/0x28 [ 348.978314][T10706] kmem_cache_alloc+0x88/0x310 [ 348.979294][T10706] skb_clone+0x194/0x308 [ 348.980162][T10706] nfnetlink_rcv+0x3c8/0x1c54 [ 348.981082][T10706] netlink_unicast+0x5fc/0x80c [ 348.981996][T10706] netlink_sendmsg+0x6f0/0x9d8 [ 348.982910][T10706] ____sys_sendmsg+0x588/0x90c [ 348.983829][T10706] __sys_sendmsg+0x288/0x374 [ 348.984765][T10706] __arm64_sys_sendmsg+0x80/0x94 [ 348.985830][T10706] invoke_syscall+0x98/0x290 [ 348.986707][T10706] el0_svc_common+0x13c/0x258 [ 348.987602][T10706] do_el0_svc+0x5c/0x134 [ 348.988416][T10706] el0_svc+0x58/0x128 [ 348.989172][T10706] el0t_64_sync_handler+0x84/0xf0 [ 348.990109][T10706] el0t_64_sync+0x18c/0x190 [ 349.061622][T10716] FAULT_INJECTION: forcing a failure. [ 349.061622][T10716] name fail_futex, interval 1, probability 0, space 0, times 0 [ 349.072025][T10716] CPU: 0 PID: 10716 Comm: syz.0.2112 Not tainted syzkaller #0 [ 349.073363][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 349.075187][T10716] Call trace: [ 349.075768][T10716] dump_backtrace+0x1c4/0x1f0 [ 349.076651][T10716] show_stack+0x2c/0x3c [ 349.077435][T10716] __dump_stack+0x30/0x40 [ 349.078293][T10716] dump_stack_lvl+0xf4/0x15c [ 349.079216][T10716] dump_stack+0x1c/0x5c [ 349.079963][T10716] should_fail_ex+0x3cc/0x524 [ 349.080811][T10716] should_fail+0x14/0x24 [ 349.081585][T10716] get_futex_key+0x904/0xfb0 [ 349.082478][T10716] futex_wake+0x10c/0x458 [ 349.083309][T10716] do_futex+0x2c4/0x340 [ 349.084092][T10716] __arm64_sys_futex+0x390/0x414 [ 349.085034][T10716] invoke_syscall+0x98/0x290 [ 349.085905][T10716] el0_svc_common+0x13c/0x258 [ 349.086825][T10716] do_el0_svc+0x5c/0x134 [ 349.087668][T10716] el0_svc+0x58/0x128 [ 349.088375][T10716] el0t_64_sync_handler+0x84/0xf0 [ 349.089302][T10716] el0t_64_sync+0x18c/0x190 [ 349.166158][T10728] fuse: Bad value for 'rootmode' [ 349.247411][T10735] Set syz1 is full, maxelem 1029 reached [ 349.622318][T10750] device syzkaller0 entered promiscuous mode [ 350.019857][T10759] fuse: Unknown parameter 'use00000000000000000000' [ 350.048895][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 350.060575][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 350.145558][T10775] device syzkaller0 entered promiscuous mode [ 350.150605][T10775] tipc: Enabled bearer , priority 0 [ 350.157161][T10775] tipc: Resetting bearer [ 350.159829][T10773] tipc: Resetting bearer [ 350.293725][T10773] tipc: Disabling bearer [ 350.616560][T10788] tipc: Enabled bearer , priority 0 [ 350.621448][T10788] tipc: Resetting bearer [ 350.704023][T10787] tipc: Disabling bearer [ 350.762111][T10795] fuse: Unknown parameter 'use00000000000000000000' [ 350.995610][T10819] fuse: Unknown parameter 'use00000000000000000000' [ 351.431581][T10832] Set syz1 is full, maxelem 1029 reached [ 352.076459][T10850] fuse: Unknown parameter 'user_i00000000000000000000' [ 353.499996][ T5043] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.762515][T10894] tipc: Enabled bearer , priority 0 [ 353.766619][T10894] tipc: Resetting bearer [ 353.851883][T10893] tipc: Disabling bearer [ 353.903579][ T4377] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 354.128738][ T4377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 354.131307][ T4377] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 354.137619][ T4377] usb 1-1: string descriptor 0 read error: -22 [ 354.138977][ T4377] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 354.140769][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.191453][ T4377] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 354.212913][ T4377] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 354.250821][ T7197] udevd[7197]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.708356][T10919] device syzkaller0 entered promiscuous mode [ 355.967021][ T4376] usb 1-1: USB disconnect, device number 21 [ 356.118324][T10947] device syzkaller0 entered promiscuous mode [ 356.232111][T10952] device syzkaller0 entered promiscuous mode [ 356.235485][T10952] tipc: Enabled bearer , priority 0 [ 356.286491][T10951] tipc: Resetting bearer [ 356.327186][T10951] tipc: Disabling bearer [ 356.339666][T10955] device syzkaller0 entered promiscuous mode [ 356.347416][T10955] tipc: Enabled bearer , priority 0 [ 356.357577][T10955] tipc: Resetting bearer [ 356.363356][T10954] tipc: Resetting bearer [ 356.433616][T10954] tipc: Disabling bearer [ 357.032713][T10967] netlink: 'syz.0.2212': attribute type 10 has an invalid length. [ 357.058906][T10967] team0: Port device netdevsim0 added [ 357.074327][T10967] netlink: 'syz.0.2212': attribute type 10 has an invalid length. [ 357.112445][T10967] team0: Port device netdevsim0 removed [ 357.116531][T10967] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 357.215597][T10977] Set syz1 is full, maxelem 1029 reached [ 357.311961][T10980] device syzkaller0 entered promiscuous mode [ 357.802667][T10997] device syzkaller0 entered promiscuous mode [ 357.808405][T10997] tipc: Enabled bearer , priority 0 [ 357.813687][T10997] tipc: Resetting bearer [ 357.817568][T10996] tipc: Resetting bearer [ 357.853861][T10996] tipc: Disabling bearer [ 357.963292][T11001] device syzkaller0 entered promiscuous mode [ 367.213169][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.852270][T11009] device syzkaller0 entered promiscuous mode [ 368.855110][T11010] tipc: Enabled bearer , priority 0 [ 368.880100][T11037] device syzkaller0 entered promiscuous mode [ 368.882569][T11037] tipc: Enabled bearer , priority 0 [ 368.890149][T11037] tipc: Resetting bearer [ 368.892076][T11036] tipc: Resetting bearer [ 368.925574][T11036] tipc: Disabling bearer [ 368.927554][T11042] FAULT_INJECTION: forcing a failure. [ 368.927554][T11042] name failslab, interval 1, probability 0, space 0, times 0 [ 368.929834][T11042] CPU: 1 PID: 11042 Comm: syz.4.2237 Not tainted syzkaller #0 [ 368.931161][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 368.932829][T11042] Call trace: [ 368.933427][T11042] dump_backtrace+0x1c4/0x1f0 [ 368.934271][T11042] show_stack+0x2c/0x3c [ 368.935027][T11042] __dump_stack+0x30/0x40 [ 368.935798][T11042] dump_stack_lvl+0xf4/0x15c [ 368.936616][T11042] dump_stack+0x1c/0x5c [ 368.937525][T11042] should_fail_ex+0x3cc/0x524 [ 368.938410][T11042] __should_failslab+0xc0/0x11c [ 368.939320][T11042] should_failslab+0x10/0x28 [ 368.940178][T11042] kmem_cache_alloc_node+0x8c/0x344 [ 368.941103][T11042] __alloc_skb+0x128/0x728 [ 368.941948][T11042] __netlink_deliver_tap+0x2b0/0x6d8 [ 368.942936][T11042] netlink_deliver_tap+0x1ac/0x1b0 [ 368.943882][T11042] netlink_unicast+0x5e0/0x80c [ 368.944783][T11042] netlink_sendmsg+0x6f0/0x9d8 [ 368.945663][T11042] ____sys_sendmsg+0x588/0x90c [ 368.946552][T11042] __sys_sendmsg+0x288/0x374 [ 368.947380][T11042] __arm64_sys_sendmsg+0x80/0x94 [ 368.948268][T11042] invoke_syscall+0x98/0x290 [ 368.949107][T11042] el0_svc_common+0x13c/0x258 [ 368.949986][T11042] do_el0_svc+0x5c/0x134 [ 368.950746][T11042] el0_svc+0x58/0x128 [ 368.951488][T11042] el0t_64_sync_handler+0x84/0xf0 [ 368.952395][T11042] el0t_64_sync+0x18c/0x190 [ 368.958525][T11005] tipc: Resetting bearer [ 368.981899][T11045] fuse: Bad value for 'fd' [ 368.994944][T11005] tipc: Disabling bearer [ 369.439844][T11065] tipc: Enabled bearer , priority 0 [ 369.467840][T11065] tipc: Resetting bearer [ 369.577737][T11064] tipc: Disabling bearer [ 370.088742][T11076] device syzkaller0 entered promiscuous mode [ 370.148582][T11080] netlink: 'syz.2.2251': attribute type 10 has an invalid length. [ 370.161247][T11080] team0: Port device netdevsim0 added [ 370.832145][T11094] fuse: Bad value for 'fd' [ 371.314983][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 371.429951][T11111] socket: no more sockets [ 372.377609][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.378781][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.440948][T11121] device-mapper: table: 248:1: mirror: Unrecognised feature requested (-EINVAL) [ 372.442950][T11121] device-mapper: ioctl: error adding target to table [ 372.462076][T11131] fuse: Bad value for 'fd' [ 374.093360][ T39] wlan1: Trigger new scan to find an IBSS to join [ 374.181263][T11152] device syzkaller0 entered promiscuous mode [ 374.880618][T11164] Set syz1 is full, maxelem 1029 reached [ 375.005305][ T4888] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 375.854699][T11184] device-mapper: ioctl: populate_table: no targets specified [ 375.907491][T11178] device syzkaller0 entered promiscuous mode [ 375.974968][T11188] FAULT_INJECTION: forcing a failure. [ 375.974968][T11188] name failslab, interval 1, probability 0, space 0, times 0 [ 375.978560][T11188] CPU: 1 PID: 11188 Comm: syz.4.2288 Not tainted syzkaller #0 [ 375.979739][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 375.981413][T11188] Call trace: [ 375.981960][T11188] dump_backtrace+0x1c4/0x1f0 [ 375.982777][T11188] show_stack+0x2c/0x3c [ 375.983538][T11188] __dump_stack+0x30/0x40 [ 375.984379][T11188] dump_stack_lvl+0xf4/0x15c [ 375.985275][T11188] dump_stack+0x1c/0x5c [ 375.986057][T11188] should_fail_ex+0x3cc/0x524 [ 375.986904][T11188] __should_failslab+0xc0/0x11c [ 375.987769][T11188] should_failslab+0x10/0x28 [ 375.988614][T11188] __kmem_cache_alloc_node+0x7c/0x318 [ 375.989751][T11188] kmalloc_node_trace+0x44/0x90 [ 375.990785][T11188] blk_throtl_init+0xa8/0x424 [ 375.991764][T11188] blkcg_init_disk+0x394/0x480 [ 375.992739][T11188] __alloc_disk_node+0x234/0x438 [ 375.993697][T11188] __blk_alloc_disk+0x40/0xb8 [ 375.994602][T11188] dm_create+0x514/0xf48 [ 375.995428][T11188] dev_create+0xf4/0x25c [ 375.996243][T11188] dm_ctl_ioctl+0xaac/0xf1c [ 375.997107][T11188] __arm64_sys_ioctl+0x14c/0x1c8 [ 375.998053][T11188] invoke_syscall+0x98/0x290 [ 375.998916][T11188] el0_svc_common+0x13c/0x258 [ 375.999831][T11188] do_el0_svc+0x5c/0x134 [ 376.000590][T11188] el0_svc+0x58/0x128 [ 376.000610][T11188] el0t_64_sync_handler+0x84/0xf0 [ 376.002334][T11188] el0t_64_sync+0x18c/0x190 [ 376.154707][T11200] FAULT_INJECTION: forcing a failure. [ 376.154707][T11200] name failslab, interval 1, probability 0, space 0, times 0 [ 376.157172][T11200] CPU: 1 PID: 11200 Comm: syz.3.2294 Not tainted syzkaller #0 [ 376.158535][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 376.160291][T11200] Call trace: [ 376.160858][T11200] dump_backtrace+0x1c4/0x1f0 [ 376.161767][T11200] show_stack+0x2c/0x3c [ 376.162581][T11200] __dump_stack+0x30/0x40 [ 376.163418][T11200] dump_stack_lvl+0xf4/0x15c [ 376.164324][T11200] dump_stack+0x1c/0x5c [ 376.165119][T11200] should_fail_ex+0x3cc/0x524 [ 376.165991][T11200] __should_failslab+0xc0/0x11c [ 376.166857][T11200] should_failslab+0x10/0x28 [ 376.167703][T11200] __kmem_cache_alloc_node+0x7c/0x318 [ 376.168700][T11200] kmalloc_trace+0x48/0x94 [ 376.169544][T11200] percpu_ref_init+0xc8/0x2f0 [ 376.170466][T11200] blkg_alloc+0xf8/0x6d4 [ 376.171287][T11200] blkcg_init_disk+0x1d0/0x480 [ 376.172180][T11200] __alloc_disk_node+0x234/0x438 [ 376.173074][T11200] __blk_alloc_disk+0x40/0xb8 [ 376.173931][T11200] dm_create+0x514/0xf48 [ 376.173951][T11200] dev_create+0xf4/0x25c [ 376.174843][T11200] dm_ctl_ioctl+0xaac/0xf1c [ 376.176465][T11200] __arm64_sys_ioctl+0x14c/0x1c8 [ 376.176489][T11200] invoke_syscall+0x98/0x290 [ 376.178252][T11200] el0_svc_common+0x13c/0x258 [ 376.179142][T11200] do_el0_svc+0x5c/0x134 [ 376.179886][T11200] el0_svc+0x58/0x128 [ 376.180636][T11200] el0t_64_sync_handler+0x84/0xf0 [ 376.181578][T11200] el0t_64_sync+0x18c/0x190 [ 376.813382][ T278] net_ratelimit: 11 callbacks suppressed [ 377.059524][T11213] socket: no more sockets [ 377.133212][ T39] wlan1: Trigger new scan to find an IBSS to join [ 378.095637][ T278] wlan1: Trigger new scan to find an IBSS to join [ 379.033332][ T39] wlan1: Creating new IBSS network, BSSID 6e:93:9b:f7:95:a7 [ 380.097009][ T39] wlan1: Trigger new scan to find an IBSS to join [ 380.122442][ T5004] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 381.933568][ T278] net_ratelimit: 27 callbacks suppressed [ 383.133299][ T39] wlan1: Trigger new scan to find an IBSS to join [ 384.143389][ T5004] wlan1: Creating new IBSS network, BSSID da:ae:1d:e1:21:b3 [ 387.053186][ C0] net_ratelimit: 23 callbacks suppressed [ 387.497130][T11235] device syzkaller0 entered promiscuous mode [ 387.557998][T11255] fuse: Unknown parameter '0x0000000000000005' [ 387.930252][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2307'. [ 387.931996][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'. [ 388.025641][T11265] tipc: Enabled bearer , priority 0 [ 388.031226][T11265] tipc: Resetting bearer [ 388.035131][T11264] tipc: Disabling bearer [ 390.136126][T11308] FAULT_INJECTION: forcing a failure. [ 390.136126][T11308] name failslab, interval 1, probability 0, space 0, times 0 [ 390.138535][T11308] CPU: 1 PID: 11308 Comm: syz.0.2326 Not tainted syzkaller #0 [ 390.139833][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 390.141636][T11308] Call trace: [ 390.142199][T11308] dump_backtrace+0x1c4/0x1f0 [ 390.143013][T11308] show_stack+0x2c/0x3c [ 390.143788][T11308] __dump_stack+0x30/0x40 [ 390.144595][T11308] dump_stack_lvl+0xf4/0x15c [ 390.145450][T11308] dump_stack+0x1c/0x5c [ 390.146289][T11308] should_fail_ex+0x3cc/0x524 [ 390.147205][T11308] __should_failslab+0xc0/0x11c [ 390.148168][T11308] should_failslab+0x10/0x28 [ 390.149031][T11308] kmem_cache_alloc+0x88/0x310 [ 390.149936][T11308] security_inode_alloc+0x38/0x11c [ 390.150896][T11308] inode_init_always+0x6c8/0xb28 [ 390.151838][T11308] iget5_locked+0xb8/0x22c [ 390.152651][T11308] alloc_dax+0x128/0x320 [ 390.153443][T11308] dm_create+0x9fc/0xf48 [ 390.154203][T11308] dev_create+0xf4/0x25c [ 390.154971][T11308] dm_ctl_ioctl+0xaac/0xf1c [ 390.155753][T11308] __arm64_sys_ioctl+0x14c/0x1c8 [ 390.156630][T11308] invoke_syscall+0x98/0x290 [ 390.156655][T11308] el0_svc_common+0x13c/0x258 [ 390.158336][T11308] do_el0_svc+0x5c/0x134 [ 390.159093][T11308] el0_svc+0x58/0x128 [ 390.159827][T11308] el0t_64_sync_handler+0x84/0xf0 [ 390.160767][T11308] el0t_64_sync+0x18c/0x190 [ 391.625972][T11333] device syzkaller0 entered promiscuous mode [ 392.093165][ C1] net_ratelimit: 19 callbacks suppressed [ 393.155195][T11374] device syzkaller0 entered promiscuous mode [ 393.527223][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 393.528639][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 393.531466][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 393.532666][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 393.541533][T11384] ceph: No mds server is up or the cluster is laggy [ 394.379734][T11408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.381703][T11408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.180800][T11443] device syzkaller0 entered promiscuous mode [ 395.822727][T11459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.836994][T11459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.976082][T11460] device syzkaller0 entered promiscuous mode [ 397.438106][ C1] net_ratelimit: 30 callbacks suppressed [ 398.099140][ T4376] libceph: connect (1)[c::]:6789 error -101 [ 398.100385][ T4376] libceph: mon0 (1)[c::]:6789 connect error [ 398.575180][ T4674] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 398.729828][T11502] ceph: No mds server is up or the cluster is laggy [ 398.750159][ T4374] libceph: connect (1)[c::]:6789 error -101 [ 398.759167][ T4374] libceph: mon0 (1)[c::]:6789 connect error [ 398.983585][T11515] device syzkaller0 entered promiscuous mode [ 399.035344][ T5939] libceph: connect (1)[c::]:6789 error -97 [ 399.036531][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 399.048032][T11520] ceph: No mds server is up or the cluster is laggy [ 399.214432][T11531] fuse: Unknown parameter '0x0000000000000005' [ 399.673691][T11546] device syzkaller0 entered promiscuous mode [ 399.830150][T11554] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(9) [ 400.127097][T11566] fuse: Unknown parameter 'fd0x0000000000000005' [ 400.132933][T11562] device syzkaller0 entered promiscuous mode [ 400.743199][ T4622] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 400.948320][ T4622] usb 1-1: unable to get BOS descriptor or descriptor too short [ 400.950601][ T4622] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 400.955498][ T4622] usb 1-1: string descriptor 0 read error: -22 [ 400.956669][ T4622] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 400.958460][ T4622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.971508][ T4622] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 400.993073][ T4622] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 401.031309][T11254] udevd[11254]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.973128][ C1] net_ratelimit: 24 callbacks suppressed [ 403.178732][ T5939] usb 1-1: USB disconnect, device number 22 [ 406.746365][ T5004] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.093212][ C0] net_ratelimit: 24 callbacks suppressed [ 409.101327][ T5004] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.065881][T11630] fuse: Unknown parameter 'fd0x0000000000000005' [ 411.187688][ T4678] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.509882][T11649] tipc: Enabled bearer , priority 0 [ 411.514045][T11649] tipc: Resetting bearer [ 411.814104][T11648] tipc: Disabling bearer [ 411.980374][T11658] device syzkaller0 entered promiscuous mode [ 412.034547][T11662] fuse: Unknown parameter 'fd0x0000000000000005' [ 412.597219][T11684] tipc: Enabled bearer , priority 0 [ 412.606782][T11678] tipc: Resetting bearer [ 412.694541][T11677] tipc: Disabling bearer [ 412.791074][T11704] device syzkaller0 entered promiscuous mode [ 413.478495][T11726] tipc: Enabled bearer , priority 0 [ 413.481859][T11726] tipc: Resetting bearer [ 413.525394][T11724] tipc: Disabling bearer [ 413.533144][ C1] net_ratelimit: 19 callbacks suppressed [ 413.608411][T11743] device syzkaller0 entered promiscuous mode [ 414.369959][T11775] tipc: Enabled bearer , priority 0 [ 414.374358][T11775] tipc: Resetting bearer [ 414.424193][T11774] tipc: Disabling bearer [ 414.610415][T11783] device syzkaller0 entered promiscuous mode [ 415.010778][T11809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.017608][T11809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.048212][T11813] tipc: Enabled bearer , priority 0 [ 415.057144][T11813] tipc: Resetting bearer [ 415.111685][T11812] tipc: Disabling bearer [ 415.576053][T11821] FAULT_INJECTION: forcing a failure. [ 415.576053][T11821] name failslab, interval 1, probability 0, space 0, times 0 [ 415.585933][T11821] CPU: 1 PID: 11821 Comm: syz.3.2489 Not tainted syzkaller #0 [ 415.587301][T11821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 415.589132][T11821] Call trace: [ 415.589727][T11821] dump_backtrace+0x1c4/0x1f0 [ 415.590580][T11821] show_stack+0x2c/0x3c [ 415.591335][T11821] __dump_stack+0x30/0x40 [ 415.592121][T11821] dump_stack_lvl+0xf4/0x15c [ 415.593106][T11821] dump_stack+0x1c/0x5c [ 415.593910][T11821] should_fail_ex+0x3cc/0x524 [ 415.594860][T11821] __should_failslab+0xc0/0x11c [ 415.595767][T11821] should_failslab+0x10/0x28 [ 415.596732][T11821] __kmem_cache_alloc_node+0x7c/0x318 [ 415.597737][T11821] kmalloc_trace+0x48/0x94 [ 415.598556][T11821] blk_iolatency_init+0x80/0x47c [ 415.599524][T11821] blkcg_init_disk+0x3b8/0x480 [ 415.600411][T11821] __alloc_disk_node+0x234/0x438 [ 415.601377][T11821] __blk_alloc_disk+0x40/0xb8 [ 415.602300][T11821] dm_create+0x514/0xf48 [ 415.603132][T11821] dev_create+0xf4/0x25c [ 415.603949][T11821] dm_ctl_ioctl+0xaac/0xf1c [ 415.604836][T11821] __arm64_sys_ioctl+0x14c/0x1c8 [ 415.605801][T11821] invoke_syscall+0x98/0x290 [ 415.606684][T11821] el0_svc_common+0x13c/0x258 [ 415.607594][T11821] do_el0_svc+0x5c/0x134 [ 415.608381][T11821] el0_svc+0x58/0x128 [ 415.609126][T11821] el0t_64_sync_handler+0x84/0xf0 [ 415.610082][T11821] el0t_64_sync+0x18c/0x190 [ 415.619805][T11821] [ 415.620259][T11821] ====================================================== [ 415.621520][T11821] WARNING: possible circular locking dependency detected [ 415.622829][T11821] syzkaller #0 Not tainted [ 415.623401][ C0] tcp_conntracks: [ 415.623592][T11821] ------------------------------------------------------ [ 415.623600][T11821] syz.3.2489/11821 is trying to acquire lock: [ 415.624302][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 415.625541][T11821] ffff0000c496c0a8 ((&sq->pending_timer)){+.-.}-{0:0}, at: __timer_delete_sync+0x78/0x21c [ 415.629302][T11821] [ 415.629302][T11821] but task is already holding lock: [ 415.630620][T11821] ffff80001c7e0a30 (&blkcg->lock){....}-{2:2}, at: blkcg_deactivate_policy+0x18c/0x54c [ 415.632447][T11821] [ 415.632447][T11821] which lock already depends on the new lock. [ 415.632447][T11821] [ 415.633619][T11823] kcov: kcov_start: t = ffff0000c2e75400, size = 524288, area = ffff80002812b000 [ 415.634352][T11821] [ 415.634352][T11821] the existing dependency chain (in reverse order) is: [ 415.637723][T11821] [ 415.637723][T11821] -> #2 (&blkcg->lock){....}-{2:2}: [ 415.639126][T11821] _raw_spin_lock+0x54/0x6c [ 415.640075][T11821] blkg_create+0x924/0x11c4 [ 415.640980][T11821] blkcg_init_disk+0x20c/0x480 [ 415.641931][T11821] __alloc_disk_node+0x234/0x438 [ 415.642902][T11821] __blk_alloc_disk+0x40/0xb8 [ 415.643848][T11821] brd_alloc+0x32c/0x6a4 [ 415.644730][T11821] brd_init+0x120/0x194 [ 415.645572][T11821] do_one_initcall+0x278/0x9f0 [ 415.646519][T11821] do_initcall_level+0x158/0x214 [ 415.647519][T11821] do_initcalls+0x58/0xac [ 415.648416][T11821] do_basic_setup+0x8c/0xa0 [ 415.649359][T11821] kernel_init_freeable+0x35c/0x4f0 [ 415.650408][T11821] kernel_init+0x24/0x1d8 [ 415.651313][T11821] ret_from_fork+0x10/0x20 [ 415.652275][T11821] [ 415.652275][T11821] -> #1 (&q->queue_lock){..-.}-{2:2}: [ 415.653709][T11821] _raw_spin_lock_irq+0x70/0x98 [ 415.654685][T11821] throtl_pending_timer_fn+0x100/0xe20 [ 415.655822][T11821] call_timer_fn+0x1b8/0x96c [ 415.656780][T11821] __run_timers+0x478/0x6d8 [ 415.657721][T11821] run_timer_softirq+0x7c/0x114 [ 415.658715][T11821] handle_softirqs+0x318/0xc90 [ 415.659631][T11821] __do_softirq+0x14/0x20 [ 415.660523][T11821] ____do_softirq+0x14/0x20 [ 415.661439][T11821] call_on_irq_stack+0x30/0x48 [ 415.662392][T11821] do_softirq_own_stack+0x20/0x2c [ 415.663456][T11821] __irq_exit_rcu+0x23c/0x430 [ 415.664368][T11821] irq_exit_rcu+0x14/0x84 [ 415.665257][T11821] el1_interrupt+0x38/0x54 [ 415.666152][T11821] el1h_64_irq_handler+0x18/0x24 [ 415.667160][T11821] el1h_64_irq+0x64/0x68 [ 415.668025][T11821] __stack_depot_save+0x80/0x4bc [ 415.669043][T11821] kasan_set_track+0x64/0x80 [ 415.669997][T11821] kasan_save_free_info+0x38/0x5c [ 415.670988][T11821] ____kasan_slab_free+0x148/0x1b0 [ 415.671980][T11821] __kasan_slab_free+0x18/0x28 [ 415.672953][T11821] slab_free_freelist_hook+0x16c/0x1e8 [ 415.674025][T11821] kmem_cache_free+0x118/0x318 [ 415.674961][T11821] putname+0x114/0x174 [ 415.675781][T11821] do_sys_openat2+0x1cc/0x3fc [ 415.676745][T11821] __arm64_sys_openat+0x11c/0x150 [ 415.677815][T11821] invoke_syscall+0x98/0x290 [ 415.678803][T11821] el0_svc_common+0x13c/0x258 [ 415.679790][T11821] do_el0_svc+0x5c/0x134 [ 415.680687][T11821] el0_svc+0x58/0x128 [ 415.681528][T11821] el0t_64_sync_handler+0x84/0xf0 [ 415.682587][T11821] el0t_64_sync+0x18c/0x190 [ 415.683547][T11821] [ 415.683547][T11821] -> #0 ((&sq->pending_timer)){+.-.}-{0:0}: [ 415.685025][T11821] __lock_acquire+0x2808/0x6634 [ 415.686029][T11821] lock_acquire+0x20c/0x638 [ 415.686982][T11821] __timer_delete_sync+0xa0/0x21c [ 415.688018][T11821] timer_delete_sync+0x24/0x34 [ 415.688997][T11821] throtl_pd_free+0x20/0x48 [ 415.689936][T11821] blkcg_deactivate_policy+0x318/0x54c [ 415.691024][T11821] blk_throtl_exit+0x9c/0x13c [ 415.692003][T11821] blkcg_init_disk+0x3d8/0x480 [ 415.692997][T11821] __alloc_disk_node+0x234/0x438 [ 415.693983][T11821] __blk_alloc_disk+0x40/0xb8 [ 415.694966][T11821] dm_create+0x514/0xf48 [ 415.695845][T11821] dev_create+0xf4/0x25c [ 415.696762][T11821] dm_ctl_ioctl+0xaac/0xf1c [ 415.697644][T11821] __arm64_sys_ioctl+0x14c/0x1c8 [ 415.698630][T11821] invoke_syscall+0x98/0x290 [ 415.699591][T11821] el0_svc_common+0x13c/0x258 [ 415.700512][T11821] do_el0_svc+0x5c/0x134 [ 415.701440][T11821] el0_svc+0x58/0x128 [ 415.702318][T11821] el0t_64_sync_handler+0x84/0xf0 [ 415.703366][T11821] el0t_64_sync+0x18c/0x190 [ 415.704327][T11821] [ 415.704327][T11821] other info that might help us debug this: [ 415.704327][T11821] [ 415.706276][T11821] Chain exists of: [ 415.706276][T11821] (&sq->pending_timer) --> &q->queue_lock --> &blkcg->lock [ 415.706276][T11821] [ 415.708780][T11821] Possible unsafe locking scenario: [ 415.708780][T11821] [ 415.710180][T11821] CPU0 CPU1 [ 415.711141][T11821] ---- ---- [ 415.712087][T11821] lock(&blkcg->lock); [ 415.712860][T11821] lock(&q->queue_lock); [ 415.714076][T11821] lock(&blkcg->lock); [ 415.715245][T11821] lock((&sq->pending_timer)); [ 415.716162][T11821] [ 415.716162][T11821] *** DEADLOCK *** [ 415.716162][T11821] [ 415.717672][T11821] 2 locks held by syz.3.2489/11821: [ 415.718631][T11821] #0: ffff0000ced755b8 (&q->queue_lock){..-.}-{2:2}, at: blkcg_deactivate_policy+0xe4/0x54c [ 415.720590][T11821] #1: ffff80001c7e0a30 (&blkcg->lock){....}-{2:2}, at: blkcg_deactivate_policy+0x18c/0x54c [ 415.722481][T11821] [ 415.722481][T11821] stack backtrace: [ 415.723533][T11821] CPU: 1 PID: 11821 Comm: syz.3.2489 Not tainted syzkaller #0 [ 415.724877][T11821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 415.726723][T11821] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 415.728166][T11821] Call trace: [ 415.728740][T11821] dump_backtrace+0x1c4/0x1f0 [ 415.729560][T11821] show_stack+0x2c/0x3c [ 415.730314][T11821] __dump_stack+0x30/0x40 [ 415.731125][T11821] dump_stack_lvl+0xf4/0x15c [ 415.731990][T11821] dump_stack+0x1c/0x5c [ 415.732783][T11821] print_circular_bug+0x148/0x1b0 [ 415.733746][T11821] check_noncircular+0x264/0x2f8 [ 415.734690][T11821] __lock_acquire+0x2808/0x6634 [ 415.735612][T11821] lock_acquire+0x20c/0x638 [ 415.736464][T11821] __timer_delete_sync+0xa0/0x21c [ 415.737400][T11821] timer_delete_sync+0x24/0x34 [ 415.738320][T11821] throtl_pd_free+0x20/0x48 [ 415.739181][T11821] blkcg_deactivate_policy+0x318/0x54c [ 415.740229][T11821] blk_throtl_exit+0x9c/0x13c [ 415.741110][T11821] blkcg_init_disk+0x3d8/0x480 [ 415.741997][T11821] __alloc_disk_node+0x234/0x438 [ 415.742916][T11821] __blk_alloc_disk+0x40/0xb8 [ 415.743810][T11821] dm_create+0x514/0xf48 [ 415.744589][T11821] dev_create+0xf4/0x25c [ 415.745349][T11821] dm_ctl_ioctl+0xaac/0xf1c [ 415.746208][T11821] __arm64_sys_ioctl+0x14c/0x1c8 [ 415.747153][T11821] invoke_syscall+0x98/0x290 [ 415.748005][T11821] el0_svc_common+0x13c/0x258 [ 415.748913][T11821] do_el0_svc+0x5c/0x134 [ 415.749700][T11821] el0_svc+0x58/0x128 [ 415.750451][T11821] el0t_64_sync_handler+0x84/0xf0 [ 415.751442][T11821] el0t_64_sync+0x18c/0x190 [ 415.752441][ C0] nf_conntrack: normal packet for 0000000003dbc7c9 [ 415.753678][ C0] tcp_conntracks: [ 415.753693][ C0] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 415.755622][ T4622] kobject: '(null)' (00000000679c6eeb): kobject_cleanup, parent 0000000000000000 [ 415.757608][ T4622] kobject: '(null)' (00000000679c6eeb): calling ktype release [ 415.764879][ T4336] device: '0:58': device_unregister [ 415.765945][ T4336] kernfs runtime_status: removing [ 415.766923][ T4336] kernfs control: removing [ 415.767765][ T4336] kernfs runtime_suspended_time: removing [ 415.768416][T11821] kcov: kcov_task_exit: t = ffff0000c4258000, kcov->t = ffff0000c4258000 [ 415.768824][ T4336] kernfs runtime_active_time: removing [ 415.771451][ T4336] kernfs autosuspend_delay_ms: removing [ 415.772723][ T4336] kernfs power: removing [ 415.773149][ C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 415.774664][ T4336] kernfs subsystem: removing [ 415.776138][ T4336] kernfs 0:58: removing [ 415.776898][ T4336] kernfs uevent: removing [ 415.777761][ T4336] kernfs read_ahead_kb: removing [ 415.778626][ T4336] kernfs min_ratio: removing [ 415.779568][ T4336] kernfs max_ratio: removing [ 415.780305][ T4336] kernfs stable_pages_required: removing [ 415.781411][ T4336] PM: Removing info for No Bus:0:58 [ 415.782497][ T4336] kobject: '0:58' (00000000442a51fe): kobject_uevent_env [ 415.786774][ T4336] kobject: '0:58' (00000000442a51fe): fill_kobj_path: path = '/devices/virtual/bdi/0:58' [ 415.789465][ T4336] kernfs 0:58: removing [ 415.790365][ T4336] kobject: '0:58' (00000000442a51fe): kobject_cleanup, parent 0000000000000000 [ 415.792208][ T4336] kobject: '0:58' (00000000442a51fe): calling ktype release [ 415.794741][ T4336] device: '0:58': device_create_release [ 415.795942][ T4336] kobject: '0:58': free name [ 415.797758][ T4336] send_to_group: group=00000000596e721f mask=8 marks_mask=2008 marks_ignore_mask=0 data=00000000f1699b06 data_type=1 dir=0000000000000000 cookie=0 [ 415.800897][ T4336] inotify_handle_inode_event: group=00000000596e721f mark=00000000ef2f7d75 mask=8 [ 415.802785][ T4336] fsnotify_insert_event: group=00000000596e721f event=00000000c824f1a1 [ 415.804612][T11814] kcov: kcov_task_exit: t = ffff0000d15b8000, kcov->t = ffff0000d15b8000 [ 415.804788][T11811] kcov: kcov_task_exit: t = ffff0000c7a61c00, kcov->t = ffff0000c7a61c00 [ 415.806725][ T3939] get_one_event: group=00000000596e721f event=00000000c824f1a1 [ 415.808897][ T3939] fsnotify_remove_first_event: group=00000000596e721f event=00000000c824f1a1 [ 415.810355][ T3939] inotify_read: group=00000000596e721f kevent=00000000c824f1a1 [ 415.811814][ T3939] copy_event_to_user: group=00000000596e721f event=00000000c824f1a1 [ 415.813714][ T4376] kobject: '(null)' (00000000fcce02da): kobject_cleanup, parent 0000000000000000 [ 415.815165][ T4376] kobject: '(null)' (00000000fcce02da): calling ktype release [ 415.815408][ T3939] inotify_read: group=00000000596e721f kevent=0000000000000000 [ 415.819411][ T3939] kobject: 'loop0' (00000000a891a974): kobject_uevent_env [ 415.820664][ T3939] kobject: 'loop0' (00000000a891a974): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 415.824232][T11624] inotify_handle_inode_event: group=00000000596e721f mark=00000000ef2f7d75 mask=8000 [ 415.825747][T11624] fsnotify_insert_event: group=00000000596e721f event=00000000a8eec5ce [ 415.829491][ T3939] get_one_event: group=00000000596e721f event=00000000a8eec5ce [ 415.830911][ T3939] fsnotify_remove_first_event: group=00000000596e721f event=00000000a8eec5ce [ 415.832499][ T3939] inotify_read: group=00000000596e721f kevent=00000000a8eec5ce [ 415.835126][ T3939] copy_event_to_user: group=00000000596e721f event=00000000a8eec5ce [ 415.836558][ T3939] inotify_read: group=00000000596e721f kevent=0000000000000000 [ 415.853114][ C1] wireguard: wg2: Handshake for peer 11 ([::1]:20001/0%0) did not complete after 20 attempts, giving up [ 415.854348][ T4375] nf_conntrack: normal packet for 00000000e7175e03 [ 415.856420][ T4375] nf_conntrack: normal packet for 0000000090746dd6 [ 415.857746][ T4375] nf_conntrack: normal packet for 0000000098dadc5b [ 415.864513][T11823] kobject: '(null)' (0000000054c0e9f9): kobject_cleanup, parent 0000000000000000 [ 415.865995][T11823] kobject: '(null)' (0000000054c0e9f9): calling ktype release [ 415.868192][T11823] kcov: kcov_task_exit: t = ffff0000c2e75400, kcov->t = ffff0000c2e75400 [ 415.913222][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 415.933241][ T4375] kobject: '(null)' (00000000593da206): kobject_cleanup, parent 0000000000000000 [ 415.934889][ T4375] kobject: '(null)' (00000000593da206): calling ktype release [ 416.083210][ T6941] bond2: (slave dummy0): Send learning packet: mac aa:aa:aa:aa:aa:24 vlan 0 [ 416.103151][ T4435] wlan1: Trigger new scan to find an IBSS to join [ 416.104404][ T4435] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) [ 416.106070][ T4435] hwsim sw_scan request, prepping stuff [ 416.107205][ T4435] ieee80211 phy8: mac80211_hwsim_configure_filter [ 416.108552][ T4435] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) [ 416.183157][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2417(2417 - 0)/noht idle=0 ps=0 smps=static) [ 416.263170][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2422(2422 - 0)/noht idle=0 ps=0 smps=static) [ 416.343155][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2427(2427 - 0)/noht idle=0 ps=0 smps=static) [ 416.423107][ C1] wireguard: wg1: Handshake for peer 27 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 18) [ 416.423162][ T6941] ieee80211 phy8: mac80211_hwsim_config (freq=2432(2432 - 0)/noht idle=0 ps=0 smps=static) [ 416.425246][ C1] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 20) [ 416.427129][ T4905] nf_conntrack: normal packet for 00000000a34bc94e [ 416.429083][T11488] nf_conntrack: normal packet for 0000000093c34c66 [ 416.503164][T11488] ieee80211 phy8: mac80211_hwsim_config (freq=2437(2437 - 0)/noht idle=0 ps=0 smps=static) [ 416.583167][T11488] ieee80211 phy8: mac80211_hwsim_config (freq=2442(2442 - 0)/noht idle=0 ps=0 smps=static) [ 416.663198][T11488] ieee80211 phy8: mac80211_hwsim_config (freq=2447(2447 - 0)/noht idle=0 ps=0 smps=static) [ 416.743214][ T6941] ieee80211 phy8: mac80211_hwsim_config (freq=2452(2452 - 0)/noht idle=0 ps=0 smps=static) [ 416.823168][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2457(2457 - 0)/noht idle=0 ps=0 smps=static) [ 416.903183][T11488] ieee80211 phy8: mac80211_hwsim_config (freq=2462(2462 - 0)/noht idle=0 ps=0 smps=static) [ 417.023162][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) [ 417.024978][ T4905] ieee80211 phy8: mac80211_hwsim_configure_filter [ 417.026065][ T4905] hwsim sw_scan_complete [ 417.026944][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static) [ 417.133118][ C1] wireguard: wg2: Handshake for peer 23 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 417.183246][T11488] bond2: (slave dummy0): Send learning packet: mac aa:aa:aa:aa:aa:24 vlan 0 [ 417.453195][ T4375] nf_conntrack: normal packet for 00000000fafcf33c [ 417.773118][ C0] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 417.773188][ T4374] IPv6: now = 4294979072, schedule = 4294991097, rounded schedule = 4294991197 => 4294991097 [ 417.775692][ T4435] nf_conntrack: normal packet for 00000000a56d5376 [ 418.283138][ T6941] bond2: (slave dummy0): Send learning packet: mac aa:aa:aa:aa:aa:24 vlan 0 [ 418.546982][T11809] kcov: kcov_task_exit: t = ffff0000cfa6d400, kcov->t = ffff0000cfa6d400 [ 418.547025][T11795] kcov: kcov_task_exit: t = ffff0000d362d400, kcov->t = ffff0000d362d400 [ 418.550258][T11803] kcov: kcov_task_exit: t = ffff0000f5dc8000, kcov->t = ffff0000f5dc8000 [ 418.572241][ T4329] send_to_group: group=00000000596e721f mask=8 marks_mask=2008 marks_ignore_mask=0 data=00000000374223e0 data_type=1 dir=0000000000000000 cookie=0 [ 418.576331][ T4329] inotify_handle_inode_event: group=00000000596e721f mark=000000008929e311 mask=8 [ 418.577848][ T4329] fsnotify_insert_event: group=00000000596e721f event=00000000a81a1aa8 [ 418.579429][ T3939] get_one_event: group=00000000596e721f event=00000000a81a1aa8 [ 418.580852][ T3939] fsnotify_remove_first_event: group=00000000596e721f event=00000000a81a1aa8 [ 418.582352][ T3939] inotify_read: group=00000000596e721f kevent=00000000a81a1aa8 [ 418.583712][ T3939] copy_event_to_user: group=00000000596e721f event=00000000a81a1aa8 [ 418.585013][ T3939] inotify_read: group=00000000596e721f kevent=0000000000000000 [ 418.589014][ T3939] kobject: 'loop1' (0000000031773e16): kobject_uevent_env [ 418.590391][ T3939] kobject: 'loop1' (0000000031773e16): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 418.592970][T11624] inotify_handle_inode_event: group=00000000596e721f mark=000000008929e311 mask=8000 [ 418.595698][T11624] fsnotify_insert_event: group=00000000596e721f event=00000000783ab92b [ 418.597198][ T3939] get_one_event: group=00000000596e721f event=00000000783ab92b [ 418.598564][ T3939] fsnotify_remove_first_event: group=00000000596e721f event=00000000783ab92b [ 418.600197][ T3939] inotify_read: group=00000000596e721f kevent=00000000783ab92b [ 418.601708][ T3939] copy_event_to_user: group=00000000596e721f event=00000000783ab92b [ 418.603353][ T3939] inotify_read: group=00000000596e721f kevent=0000000000000000 [ 418.733126][ C1] net_ratelimit: 26 callbacks suppressed [ 418.733139][ C1] wireguard: wg0: Sending keepalive packet to peer 15 ([::1]:20002/0%0) [ 418.737526][ C0] wireguard: wg1: Receiving keepalive packet from peer 17 ([::1]:20001/0%0) [ 419.133167][T11488] wlan1: Trigger new scan to find an IBSS to join [ 419.134366][T11488] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) [ 419.136080][T11488] hwsim sw_scan request, prepping stuff [ 419.137275][T11488] ieee80211 phy8: mac80211_hwsim_configure_filter [ 419.138387][T11488] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) [ 419.213462][ T4855] ieee80211 phy8: mac80211_hwsim_config (freq=2417(2417 - 0)/noht idle=0 ps=0 smps=static) [ 419.313159][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2422(2422 - 0)/noht idle=0 ps=0 smps=static) [ 419.393187][ T4855] bond2: (slave dummy0): Send learning packet: mac aa:aa:aa:aa:aa:24 vlan 0 [ 419.393194][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2427(2427 - 0)/noht idle=0 ps=0 smps=static) [ 419.483170][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2432(2432 - 0)/noht idle=0 ps=0 smps=static) [ 419.573155][ T6941] ieee80211 phy8: mac80211_hwsim_config (freq=2437(2437 - 0)/noht idle=0 ps=0 smps=static) [ 419.653341][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2442(2442 - 0)/noht idle=0 ps=0 smps=static) [ 419.693109][ C0] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 18) [ 419.695085][ C0] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 419.696992][ C0] wireguard: wg1: Handshake for peer 3 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 18) [ 419.698880][ T4435] wireguard: wg0: Sending handshake initiation to peer 7 ([::1]:20002/0%0) [ 419.698910][ T4905] wireguard: wg1: Sending handshake initiation to peer 3 ([::1]:20001/0%0) [ 419.700797][ T6941] wireguard: wg1: Sending handshake initiation to peer 21 ([::1]:20001/0%0) [ 419.702041][ T4905] nf_conntrack: normal packet for 00000000e3a33bab [ 419.703825][ T6941] nf_conntrack: normal packet for 000000002f42e280 [ 419.705705][ T4375] wireguard: wg0: Invalid MAC of handshake, dropping packet from [::1]:20002/0%0 [ 419.705709][ T4376] wireguard: wg0: Invalid MAC of handshake, dropping packet from [::1]:20002/0%0 [ 419.733138][ T6941] ieee80211 phy8: mac80211_hwsim_config (freq=2447(2447 - 0)/noht idle=0 ps=0 smps=static) [ 419.773127][ C1] wireguard: wg0: Sending keepalive packet to peer 15 ([::1]:20002/0%0) [ 419.774775][ C1] wireguard: wg1: Receiving keepalive packet from peer 17 ([::1]:20001/0%0) [ 419.813179][ T6941] ieee80211 phy8: mac80211_hwsim_config (freq=2452(2452 - 0)/noht idle=0 ps=0 smps=static) [ 419.893140][ T6941] ieee80211 phy8: mac80211_hwsim_config (freq=2457(2457 - 0)/noht idle=0 ps=0 smps=static) [ 419.973143][ T4905] ieee80211 phy8: mac80211_hwsim_config (freq=2462(2462 - 0)/noht idle=0 ps=0 smps=static) [ 420.103141][ T4855] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) [ 420.104972][ T4855] ieee80211 phy8: mac80211_hwsim_configure_filter [ 420.106061][ T4855] hwsim sw_scan_complete [ 420.106894][ T4855] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static) [ 420.493118][ C0] wireguard: wg0: Sending keepalive packet to peer 16 ([::1]:20003/0%0) [ 420.494907][ T4375] nf_conntrack: normal packet for 00000000fafcf33c [ 420.523180][ T4855] bond2: (slave dummy0): Send learning packet: mac aa:aa:aa:aa:aa:24 vlan 0 [ 420.973112][ C0] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 421.533130][ C0] wireguard: wg1: Handshake for peer 27 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 19) [ 421.535540][ T4435] nf_conntrack: normal packet for 00000000a34bc94e [ 421.613117][ C1] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 20 attempts, giving up [ 421.615260][ T5939] nf_conntrack: normal packet for 0000000085e14d37 [ 421.643140][ T4855] bond2: (slave dummy0): Send learning packet: mac aa:aa:aa:aa:aa:24 vlan 0 [ 422.093175][ T6941] wlan1: Creating new IBSS network, BSSID 32:1f:c4:f8:d2:65 [ 422.095267][ T6941] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) [ 422.096968][ T6941] ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) [ 422.098720][ T6941] ieee80211 phy8: mac80211_hwsim_vif_info_changed(changed=0x4000 vif->addr=08:02:11:00:00:01) [ 422.101140][ T6941] ieee80211 phy8: mac80211_hwsim_conf_tx (queue=0 txop=0 cw_min=15 cw_max=1023 aifs=2) [ 422.102872][ T6941] ieee80211 phy8: mac80211_hwsim_conf_tx (queue=1 txop=0 cw_min=15 cw_max=1023 aifs=2) [ 422.104848][ T6941] ieee80211 phy8: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=2) [ 422.106650][ T6941] ieee80211 phy8: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=2) [ 422.108308][ T6941] ieee80211 phy8: mac80211_hwsim_link_info_changed(changed=0x2000 vif->addr=08:02:11:00:00:01, link id 0) [ 422.110154][ T6941] ieee80211 phy8: mac80211_hwsim_vif_info_changed(changed=0x8800 vif->addr=08:02:11:00:00:01) [ 422.111912][ T6941] ieee80211 phy8: mac80211_hwsim_link_info_changed(changed=0x3fe vif->addr=08:02:11:00:00:01, link id 0) [ 422.113859][ T6941] ieee80211 phy8: mac80211_hwsim_link_info_changed: BSSID changed: 32:1f:c4:f8:d2:65 [ 422.115417][ T6941] ieee80211 phy8: BCN EN: 1 (BI=100) [ 422.116377][ T6941] ieee80211 phy8: ERP_CTS_PROT: 0 [ 422.117250][ T6941] ieee80211 phy8: ERP_PREAMBLE: 0 [ 422.118121][ T6941] ieee80211 phy8: ERP_SLOT: 0 [ 422.118947][ T6941] ieee80211 phy8: HT: op_mode=0xb [ 422.119783][ T6941] ieee80211 phy8: BASIC_RATES: 0xf [ 422.120796][ T4435] debugfs: creating file '30' [ 422.120812][ T4855] mac80211_hwsim hwsim7 wlan1: bond_netdev_event received NETDEV_CHANGE [ 422.121575][ T4435] debugfs: creating file 'keylen' [ 422.123666][ T4855] net wlan1: siw: event 4 [ 422.125278][ T4435] debugfs: creating file 'flags' [ 422.126121][ T4435] debugfs: creating file 'keyidx' [ 422.127001][ T4435] debugfs: creating file 'hw_key_idx' [ 422.127907][ T4435] debugfs: creating file 'algorithm' [ 422.128821][ T4435] debugfs: creating file 'tx_spec' [ 422.129688][ T4435] debugfs: creating file 'rx_spec' [ 422.130599][ T4435] debugfs: creating file 'replays' [ 422.131506][ T4435] debugfs: creating file 'icverrors' [ 422.132449][ T4435] debugfs: creating file 'mic_failures' [ 422.133504][ T4435] debugfs: creating file 'key' [ 422.134331][ T4435] debugfs: creating file 'ifindex' [ 422.135263][ T4435] debugfs: creating file 'default_unicast_key' [ 422.136352][ T4435] debugfs: creating file 'default_multicast_key' [ 422.743143][ T4855] bond2: (slave dummy0): Send learning packet: mac aa:aa:aa:aa:aa:24 vlan 0 [ 422.903205][ C1] wireguard: wg2: Handshake for peer 23 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 11) [ 423.533343][ T4905] nf_conntrack: normal packet for 0000000093c34c66 [ 423.543114][ C0] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 423.545564][ T4375] nf_conntrack: normal packet for 00000000fafcf33c [ 423.546916][ T4375] nf_conntrack: normal packet for 00000000653c0bec [ 423.548498][ T56] nf_conntrack: normal packet for 00000000a56d5376 [ 423.863143][ T56] bond2: (slave dummy0): Send learning packet: mac aa:aa:aa:aa:aa:24 vlan 0 [ 423.933117][ C1] net_ratelimit: 25 callbacks suppressed [ 423.933131][ C1] wireguard: wg0: Sending keepalive packet to peer 15 ([::1]:20002/0%0) [ 423.935852][ C1] wireguard: wg1: Receiving keepalive packet from peer 17 ([::1]:20001/0%0) [ 424.173120][ C1] wireguard: wg2: Sending keepalive packet to peer 11 ([::1]:20001/0%0) [ 424.174658][ T56] wireguard: wg2: Sending handshake initiation to peer 11 ([::1]:20001/0%0) [ 424.813112][ C0] wireguard: wg1: Handshake for peer 3 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 19) [ 424.813123][ C1] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 424.815219][ T4435] wireguard: wg1: Sending handshake initiation to peer 3 ([::1]:20001/0%0) [ 424.817276][ T6941] wireguard: wg0: Sending handshake initiation to peer 7 ([::1]:20002/0%0) [ 424.818659][ T4435] nf_conntrack: normal packet for 00000000e3a33bab [ 424.821091][ T4374] wireguard: wg0: Invalid MAC of handshake, dropping packet from [::1]:20002/0%0 [ 424.973138][ C1] wireguard: wg0: Sending keepalive packet to peer 15 ([::1]:20002/0%0) [ 424.974974][ C0] wireguard: wg1: Receiving keepalive packet from peer 17 ([::1]:20001/0%0) [ 424.976763][ T4905] bond2: (slave dummy0): Send learning packet: mac aa:aa:aa:aa:aa:24 vlan 0 [ 425.453116][ C0] wireguard: wg1: Sending keepalive packet to peer 18 (127.0.0.1:20003) [ 425.453112][ C1] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 19) [ 425.453532][ T6941] nf_conntrack: normal packet for 000000002f42e280 [ 425.456225][ T5939] nf_conntrack: normal packet for 0000000098dadc5b [ 425.459111][ T5939] nf_conntrack: normal packet for 00000000e7175e03 [ 425.460357][ T5939] nf_conntrack: normal packet for 0000000090746dd6