last executing test programs: 51.717489112s ago: executing program 4 (id=1648): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x80020, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001600)=@vmx={0x5, 0x0, 0x2080, {0x80a0000, 0xfec00000, {0x5}, 0x1, 0x6}, {"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", "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"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000003680)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.39417149s ago: executing program 4 (id=1653): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f000026f000/0x6000)=nil, 0x6000) read(r0, &(0x7f0000000080)=""/172, 0xdc) 51.186375155s ago: executing program 4 (id=1658): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22003, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, 0x0) 51.042254228s ago: executing program 4 (id=1662): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800012, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='devpts\x00', 0x3000096, 0x0) chroot(&(0x7f0000000940)='./file0\x00') mount$bind(&(0x7f0000000980)='.\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0/../file0/../file0\x00') 50.717837317s ago: executing program 4 (id=1664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0xa, 0x4}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000180)={0xa000000000000000, 0xeeee8000, 0x0, 0x4}) 50.120499371s ago: executing program 4 (id=1669): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f000026f000/0x6000)=nil, 0x6000) read(r0, &(0x7f0000000080)=""/172, 0xdc) 49.719525501s ago: executing program 32 (id=1669): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f000026f000/0x6000)=nil, 0x6000) read(r0, &(0x7f0000000080)=""/172, 0xdc) 4.783145433s ago: executing program 3 (id=2050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000680)=""/222}, 0x78) 4.49527416s ago: executing program 3 (id=2053): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r2, 0x3, r0, 0xffff4e13, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2, 0x5, 0x4000003}) 4.308970234s ago: executing program 3 (id=2055): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1, 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000002400)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002440)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000024c0)="000000952ba3000000000000000089", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.978034422s ago: executing program 3 (id=2060): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x6f5e, 0x402) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)=ANY=[]) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 3.765884507s ago: executing program 3 (id=2062): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) tkill(0x0, 0x7) 3.365934668s ago: executing program 5 (id=2065): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r2, 0x3, r0, 0xffff4e13, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2, 0x5, 0x4000003}) 3.115360664s ago: executing program 5 (id=2067): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 3.001364617s ago: executing program 0 (id=2069): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f00000003c0), 0x40000000000036a, 0x10122, 0x0) 2.86334548s ago: executing program 5 (id=2070): r0 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0x5}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.674211685s ago: executing program 3 (id=2071): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000980)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000b00)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x1c1c41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000b80)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.625453206s ago: executing program 0 (id=2072): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) 2.481026699s ago: executing program 1 (id=2073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000002380)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000002440)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.348475072s ago: executing program 0 (id=2074): io_uring_setup(0x885, &(0x7f0000000100)={0x0, 0x1f8a, 0x8, 0x0, 0x19b}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @loopback, 0x106}, 0x1c) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 2.340429973s ago: executing program 2 (id=2075): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001740), 0xfffffedf, 0x10, &(0x7f0000001780), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001840)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 1.990569511s ago: executing program 1 (id=2076): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='r', 0x1) 1.965591132s ago: executing program 2 (id=2077): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r2, 0x3, r0, 0xffff4e13, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2, 0x5, 0x4000003}) 1.901363723s ago: executing program 5 (id=2078): socket$nl_rdma(0x10, 0x3, 0x14) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) preadv(r1, &(0x7f0000002540), 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f0000003580)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000035c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000003600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.787410206s ago: executing program 2 (id=2079): gettid() syz_open_procfs(0x0, 0x0) unshare(0x2040400) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000001680)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) eventfd2(0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000f, 0x204031, 0xffffffffffffffff, 0x50728000) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_timedreceive(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) 1.733617817s ago: executing program 5 (id=2080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x4, 0x8, 0x88}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.652345939s ago: executing program 2 (id=2081): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) tkill(0x0, 0x7) 1.63417306s ago: executing program 5 (id=2082): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000400)=0x1800, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x0, @local}, 0x16) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x90, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r1, &(0x7f0000000600), 0x800001d, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000010341a020800000000000109022400010000000309040000090300030009210a0003012229000905810300"], 0x0) modify_ldt$write2(0x11, &(0x7f0000000800)={0x6, 0x100000, 0x2000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.476306284s ago: executing program 2 (id=2083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) listen(r2, 0xb) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x0, 0x184, 0x671, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x7, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x0, 0x8000000009, 0x803, 0x26c00, 0x9, 0x2], 0xeeee8000, 0x102280}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x111043, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000140)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0x3, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x2, 0x7e, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf8, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xe, 0x5, 0x7, 0x5, 0x7, 0x43, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.334028837s ago: executing program 1 (id=2084): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) 1.177377181s ago: executing program 0 (id=2085): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f00000014c0)=[{0x1, 0x8001, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001540)=[0x7fff]) 1.150234722s ago: executing program 2 (id=2086): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r2, 0x1c, &(0x7f0000000580)={{0xa, 0x4e23, 0xe30c, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80}}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x381182, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80801) r11 = syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r11, 0xc004562f, &(0x7f0000000240)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x9ddd, 0x722, 0x8, 0x10007, 0x7f, 0x27, 0x31, {0x200, 0x6fd8e8eb}, 0x3, 0xed}}) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) 1.137661152s ago: executing program 1 (id=2087): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000480)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000004c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 713.540782ms ago: executing program 1 (id=2088): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x10000000}, @flat=@binder={0x73622a85, 0x100}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x82000000000006}) 550.147616ms ago: executing program 1 (id=2089): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={0x0, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r1, 0x3, r0, 0xffff4e13, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r1, 0x5, 0x4000003}) 232.356804ms ago: executing program 0 (id=2090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001540)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 0s ago: executing program 0 (id=2091): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x6f5e, 0x402) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB]) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) kernel console output (not intermixed with test programs): 7753][ T4794] copy_net_ns+0x33e/0x5b0 [ 131.977796][ T4794] create_new_namespaces+0x3ce/0x700 [ 131.977836][ T4794] unshare_nsproxy_namespaces+0x116/0x160 [ 131.978422][ T4794] ksys_unshare+0x4f6/0x8e0 [ 131.978474][ T4794] ? sighand_ctor+0x40/0x40 [ 131.978503][ T4794] ? lock_chain_count+0x20/0x20 [ 131.978539][ T4794] ? syscall_enter_from_user_mode+0x21/0x80 [ 131.978591][ T4794] __x64_sys_unshare+0x34/0x40 [ 131.978620][ T4794] do_syscall_64+0x4c/0xa0 [ 131.978646][ T4794] ? clear_bhb_loop+0x60/0xb0 [ 131.978703][ T4794] ? clear_bhb_loop+0x60/0xb0 [ 131.978732][ T4794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.978758][ T4794] RIP: 0033:0x7f296bb9e559 [ 131.978786][ T4794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.978806][ T4794] RSP: 002b:00007f296c9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 131.978832][ T4794] RAX: ffffffffffffffda RBX: 00007f296be25fa0 RCX: 00007f296bb9e559 [ 131.978850][ T4794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 131.978865][ T4794] RBP: 00007f296bc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 131.978884][ T4794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.978906][ T4794] R13: 00007f296be26038 R14: 00007f296be25fa0 R15: 00007ffee8ebf048 [ 131.978938][ T4794] [ 132.302901][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.983796][ T4814] FAULT_INJECTION: forcing a failure. [ 132.983796][ T4814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.025722][ T4814] CPU: 0 PID: 4814 Comm: syz.0.160 Not tainted syzkaller #0 [ 133.033451][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.044349][ T4814] Call Trace: [ 133.047777][ T4814] [ 133.051469][ T4814] dump_stack_lvl+0x188/0x24e [ 133.057012][ T4814] ? show_regs_print_info+0x12/0x12 [ 133.062301][ T4814] ? load_image+0x410/0x410 [ 133.066890][ T4814] ? __lock_acquire+0x7ea0/0x7ea0 [ 133.075917][ T4814] ? __kasan_slab_alloc+0x6b/0x80 [ 133.081657][ T4814] should_fail_ex+0x390/0x4c0 [ 133.086417][ T4814] prepare_alloc_pages+0x1e1/0x5b0 [ 133.091609][ T4814] __alloc_pages+0x130/0x4f0 [ 133.096273][ T4814] ? zone_statistics+0x170/0x170 [ 133.101317][ T4814] __get_free_pages+0x8/0x30 [ 133.105973][ T4814] kasan_populate_vmalloc_pte+0x31/0xf0 [ 133.111667][ T4814] ? __apply_to_page_range+0x97b/0xd10 [ 133.117217][ T4814] __apply_to_page_range+0x98d/0xd10 [ 133.122570][ T4814] ? kasan_populate_vmalloc+0x70/0x70 [ 133.128128][ T4814] alloc_vmap_area+0x179f/0x18d0 [ 133.133159][ T4814] ? vm_map_ram+0xab0/0xab0 [ 133.137747][ T4814] ? rcu_is_watching+0x11/0xa0 [ 133.142590][ T4814] __get_vm_area_node+0x158/0x330 [ 133.147790][ T4814] __vmalloc_node_range+0x357/0x1380 [ 133.153163][ T4814] ? prealloc_init+0x148/0xa10 [ 133.158018][ T4814] ? __lock_acquire+0x7ea0/0x7ea0 [ 133.163117][ T4814] ? free_vm_area+0x50/0x50 [ 133.167702][ T4814] bpf_map_area_alloc+0xd4/0xe0 [ 133.172642][ T4814] ? prealloc_init+0x148/0xa10 [ 133.177480][ T4814] prealloc_init+0x148/0xa10 [ 133.182150][ T4814] htab_map_alloc+0xc5f/0x1100 [ 133.186990][ T4814] map_create+0x524/0xff0 [ 133.191391][ T4814] ? security_bpf+0x7a/0xa0 [ 133.195951][ T4814] __sys_bpf+0x38b/0x780 [ 133.200264][ T4814] ? bpf_link_show_fdinfo+0x380/0x380 [ 133.205732][ T4814] ? lock_chain_count+0x20/0x20 [ 133.210658][ T4814] __x64_sys_bpf+0x78/0x90 [ 133.215152][ T4814] do_syscall_64+0x4c/0xa0 [ 133.219677][ T4814] ? clear_bhb_loop+0x60/0xb0 [ 133.224432][ T4814] ? clear_bhb_loop+0x60/0xb0 [ 133.229196][ T4814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.235163][ T4814] RIP: 0033:0x7f7e8699e559 [ 133.239640][ T4814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.259317][ T4814] RSP: 002b:00007f7e8785d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.268251][ T4814] RAX: ffffffffffffffda RBX: 00007f7e86c25fa0 RCX: 00007f7e8699e559 [ 133.276307][ T4814] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 0000000000000000 [ 133.284441][ T4814] RBP: 00007f7e86a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 133.292651][ T4814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.300873][ T4814] R13: 00007f7e86c26038 R14: 00007f7e86c25fa0 R15: 00007ffdb6b95278 [ 133.309289][ T4814] [ 133.513137][ T4828] FAULT_INJECTION: forcing a failure. [ 133.513137][ T4828] name failslab, interval 1, probability 0, space 0, times 0 [ 133.554505][ T4828] CPU: 0 PID: 4828 Comm: syz.1.166 Not tainted syzkaller #0 [ 133.562064][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.572226][ T4828] Call Trace: [ 133.575560][ T4828] [ 133.578544][ T4828] dump_stack_lvl+0x188/0x24e [ 133.583395][ T4828] ? show_regs_print_info+0x12/0x12 [ 133.588660][ T4828] ? load_image+0x410/0x410 [ 133.593229][ T4828] ? __might_sleep+0xd0/0xd0 [ 133.597976][ T4828] ? __lock_acquire+0x7ea0/0x7ea0 [ 133.603082][ T4828] should_fail_ex+0x390/0x4c0 [ 133.607844][ T4828] should_failslab+0x5/0x20 [ 133.612412][ T4828] slab_pre_alloc_hook+0x59/0x300 [ 133.617508][ T4828] ? xfrm_state_init+0x16e/0x470 [ 133.622535][ T4828] __kmem_cache_alloc_node+0x4f/0x270 [ 133.627997][ T4828] ? xfrm_state_init+0x16e/0x470 [ 133.633099][ T4828] __kmalloc+0xa3/0x240 [ 133.637552][ T4828] xfrm_state_init+0x16e/0x470 [ 133.642381][ T4828] xfrm_net_init+0x1a3/0xe70 [ 133.647022][ T4828] ? policy_hash_direct+0x5b0/0x5b0 [ 133.652369][ T4828] ops_init+0x360/0x5e0 [ 133.656581][ T4828] setup_net+0x4f2/0xbd0 [ 133.660973][ T4828] ? copy_net_ns+0x5b0/0x5b0 [ 133.665714][ T4828] ? copy_net_ns+0x324/0x5b0 [ 133.670460][ T4828] ? down_read_killable+0x1cc/0x340 [ 133.675713][ T4828] copy_net_ns+0x33e/0x5b0 [ 133.680273][ T4828] create_new_namespaces+0x3ce/0x700 [ 133.685705][ T4828] unshare_nsproxy_namespaces+0x116/0x160 [ 133.691561][ T4828] ksys_unshare+0x4f6/0x8e0 [ 133.696145][ T4828] ? sighand_ctor+0x40/0x40 [ 133.700708][ T4828] ? lock_chain_count+0x20/0x20 [ 133.705632][ T4828] ? syscall_enter_from_user_mode+0x21/0x80 [ 133.711850][ T4828] __x64_sys_unshare+0x34/0x40 [ 133.716670][ T4828] do_syscall_64+0x4c/0xa0 [ 133.721308][ T4828] ? clear_bhb_loop+0x60/0xb0 [ 133.726159][ T4828] ? clear_bhb_loop+0x60/0xb0 [ 133.730903][ T4828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.737462][ T4828] RIP: 0033:0x7f603179e559 [ 133.741919][ T4828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.761576][ T4828] RSP: 002b:00007f6032685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 133.770037][ T4828] RAX: ffffffffffffffda RBX: 00007f6031a25fa0 RCX: 00007f603179e559 [ 133.778046][ T4828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 133.786053][ T4828] RBP: 00007f60318358b0 R08: 0000000000000000 R09: 0000000000000000 [ 133.794058][ T4828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.802067][ T4828] R13: 00007f6031a26038 R14: 00007f6031a25fa0 R15: 00007ffc11ebbc98 [ 133.810130][ T4828] [ 134.519058][ T4861] rxe_eth0 speed is unknown, defaulting to 1000 [ 135.252605][ T4889] device syzkaller0 entered promiscuous mode [ 135.264969][ T4889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.273795][ T4889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.294953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.308475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.610601][ T4898] FAULT_INJECTION: forcing a failure. [ 135.610601][ T4898] name failslab, interval 1, probability 0, space 0, times 0 [ 135.636003][ T4898] CPU: 0 PID: 4898 Comm: syz.3.197 Not tainted syzkaller #0 [ 135.643386][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.653500][ T4898] Call Trace: [ 135.656838][ T4898] [ 135.659824][ T4898] dump_stack_lvl+0x188/0x24e [ 135.664578][ T4898] ? show_regs_print_info+0x12/0x12 [ 135.669850][ T4898] ? load_image+0x410/0x410 [ 135.674441][ T4898] ? __might_sleep+0xd0/0xd0 [ 135.679097][ T4898] ? __lock_acquire+0x7ea0/0x7ea0 [ 135.684229][ T4898] should_fail_ex+0x390/0x4c0 [ 135.688996][ T4898] should_failslab+0x5/0x20 [ 135.693573][ T4898] slab_pre_alloc_hook+0x59/0x300 [ 135.698706][ T4898] kmem_cache_alloc+0x56/0x2f0 [ 135.703568][ T4898] ? __alloc_file+0x25/0x230 [ 135.708232][ T4898] __alloc_file+0x25/0x230 [ 135.712712][ T4898] alloc_empty_file+0x90/0x180 [ 135.717536][ T4898] alloc_file+0x5b/0x5f0 [ 135.721849][ T4898] alloc_file_pseudo+0x180/0x200 [ 135.726856][ T4898] ? alloc_empty_file_noaccount+0x80/0x80 [ 135.732673][ T4898] __shmem_file_setup+0x1cf/0x290 [ 135.737768][ T4898] shmem_zero_setup+0x89/0x120 [ 135.742600][ T4898] mmap_region+0x125c/0x1c50 [ 135.747278][ T4898] ? file_mmap_ok+0x170/0x170 [ 135.752038][ T4898] ? validate_mm+0x23f/0x2e0 [ 135.756695][ T4898] ? arch_get_unmapped_area+0x640/0x640 [ 135.762303][ T4898] ? cap_mmap_addr+0x206/0x2c0 [ 135.767180][ T4898] do_mmap+0x9ce/0x10d0 [ 135.771412][ T4898] ? mlock_future_check+0x100/0x100 [ 135.776668][ T4898] ? ima_file_mmap+0xf7/0x140 [ 135.781416][ T4898] ? ima_file_free+0x3e0/0x3e0 [ 135.786262][ T4898] vm_mmap_pgoff+0x1c1/0x2d0 [ 135.790931][ T4898] ? account_locked_vm+0xe0/0xe0 [ 135.795945][ T4898] ? ksys_mmap_pgoff+0xef/0x720 [ 135.800952][ T4898] ? lockdep_hardirqs_on+0x94/0x140 [ 135.806229][ T4898] do_syscall_64+0x4c/0xa0 [ 135.810722][ T4898] ? clear_bhb_loop+0x60/0xb0 [ 135.815454][ T4898] ? clear_bhb_loop+0x60/0xb0 [ 135.820197][ T4898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.826175][ T4898] RIP: 0033:0x7f3c9859e559 [ 135.830651][ T4898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.850317][ T4898] RSP: 002b:00007f3c99510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 135.858888][ T4898] RAX: ffffffffffffffda RBX: 00007f3c98825fa0 RCX: 00007f3c9859e559 [ 135.867187][ T4898] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 0000000000000000 [ 135.875407][ T4898] RBP: 00007f3c986358b0 R08: ffffffffffffffff R09: 0000000000000000 [ 135.883433][ T4898] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 135.891463][ T4898] R13: 00007f3c98826038 R14: 00007f3c98825fa0 R15: 00007ffc94710968 [ 135.899520][ T4898] [ 136.022869][ T4904] rxe_eth0 speed is unknown, defaulting to 1000 [ 137.516949][ T4949] rxe_eth0 speed is unknown, defaulting to 1000 syzkaller syzkaller login: [ 139.038871][ T5003] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.390305][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.397310][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.218317][ T5048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.228149][ T5048] bond0: (slave bond1): Enslaving as an active interface with an up link [ 140.443440][ T5056] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.056282][ T5079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.065032][ T5079] bond0: (slave bond1): Enslaving as an active interface with an up link [ 141.706895][ T5107] rxe_eth0 speed is unknown, defaulting to 1000 syzkaller syzkaller login: [ 142.731782][ T5145] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.128204][ T5154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 143.981910][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 143.981926][ T27] audit: type=1326 audit(1792191383.833:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.2.319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 144.070473][ T27] audit: type=1326 audit(1792191383.833:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.2.319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 144.110062][ T27] audit: type=1326 audit(1792191383.873:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.2.319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 144.142540][ T27] audit: type=1326 audit(1792191383.873:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.2.319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 144.173003][ T27] audit: type=1326 audit(1792191383.873:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.2.319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 144.207357][ T27] audit: type=1326 audit(1792191383.873:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.2.319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 144.237352][ T27] audit: type=1326 audit(1792191383.873:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.2.319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 144.298980][ T27] audit: type=1326 audit(1792191383.873:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.2.319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 144.363457][ T5195] rxe_eth0 speed is unknown, defaulting to 1000 [ 144.379617][ T27] audit: type=1326 audit(1792191383.873:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.2.319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 144.776399][ T5204] FAULT_INJECTION: forcing a failure. [ 144.776399][ T5204] name fail_futex, interval 1, probability 0, space 0, times 0 [ 144.830336][ T5204] CPU: 1 PID: 5204 Comm: syz.2.325 Not tainted syzkaller #0 [ 144.837747][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 144.847865][ T5204] Call Trace: [ 144.851234][ T5204] [ 144.854226][ T5204] dump_stack_lvl+0x188/0x24e [ 144.858977][ T5204] ? show_regs_print_info+0x12/0x12 [ 144.864244][ T5204] ? load_image+0x410/0x410 [ 144.868818][ T5204] ? release_firmware_map_entry+0x187/0x187 [ 144.874804][ T5204] should_fail_ex+0x390/0x4c0 [ 144.879560][ T5204] get_futex_key+0x1b1/0x1000 [ 144.884311][ T5204] ? futex_setup_timer+0xc0/0xc0 [ 144.889315][ T5204] ? tcp_sendmsg+0x35/0x40 [ 144.893814][ T5204] futex_wake+0x123/0x4f0 [ 144.898212][ T5204] ? _local_bh_enable+0xa0/0xa0 [ 144.903124][ T5204] ? futex_wake_mark+0x150/0x150 [ 144.908109][ T5204] ? fput+0x150/0x1a0 [ 144.912127][ T5204] ? __sys_sendto+0x514/0x650 [ 144.916885][ T5204] do_futex+0x2e2/0x320 [ 144.921114][ T5204] ? __ia32_sys_get_robust_list+0x100/0x100 [ 144.927058][ T5204] ? put_timespec64+0xd5/0x120 [ 144.931874][ T5204] __se_sys_futex+0x381/0x410 [ 144.936593][ T5204] ? __x64_sys_futex+0xf0/0xf0 [ 144.941613][ T5204] ? __x64_sys_futex+0x1d/0xf0 [ 144.946449][ T5204] do_syscall_64+0x4c/0xa0 [ 144.951080][ T5204] ? clear_bhb_loop+0x60/0xb0 [ 144.955828][ T5204] ? clear_bhb_loop+0x60/0xb0 [ 144.960562][ T5204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.966684][ T5204] RIP: 0033:0x7f296bb9e559 [ 144.971864][ T5204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.991557][ T5204] RSP: 002b:00007f296c9a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.000036][ T5204] RAX: ffffffffffffffda RBX: 00007f296be25fa8 RCX: 00007f296bb9e559 [ 145.008054][ T5204] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f296be25fac [ 145.016071][ T5204] RBP: 00007f296be25fa0 R08: 001bd3b8ea47c81a R09: 0000000000000000 [ 145.024087][ T5204] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 145.032094][ T5204] R13: 00007f296be26038 R14: 00007ffee8ebef60 R15: 00007ffee8ebf048 [ 145.040132][ T5204] [ 145.839727][ T5241] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.352822][ T5252] FAULT_INJECTION: forcing a failure. [ 146.352822][ T5252] name fail_futex, interval 1, probability 0, space 0, times 0 [ 146.397089][ T5252] CPU: 0 PID: 5252 Comm: syz.1.342 Not tainted syzkaller #0 [ 146.404675][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.414879][ T5252] Call Trace: [ 146.418239][ T5252] [ 146.421220][ T5252] dump_stack_lvl+0x188/0x24e [ 146.425962][ T5252] ? show_regs_print_info+0x12/0x12 [ 146.431235][ T5252] ? load_image+0x410/0x410 [ 146.435803][ T5252] ? release_firmware_map_entry+0x187/0x187 [ 146.441767][ T5252] should_fail_ex+0x390/0x4c0 [ 146.446555][ T5252] get_futex_key+0x1b1/0x1000 [ 146.451324][ T5252] ? futex_setup_timer+0xc0/0xc0 [ 146.456323][ T5252] ? tcp_sendmsg+0x35/0x40 [ 146.460821][ T5252] futex_wake+0x123/0x4f0 [ 146.465217][ T5252] ? _local_bh_enable+0xa0/0xa0 [ 146.470129][ T5252] ? futex_wake_mark+0x150/0x150 [ 146.475138][ T5252] ? fput+0x150/0x1a0 [ 146.479216][ T5252] ? __sys_sendto+0x514/0x650 [ 146.483962][ T5252] do_futex+0x2e2/0x320 [ 146.488188][ T5252] ? __ia32_sys_get_robust_list+0x100/0x100 [ 146.494142][ T5252] ? put_timespec64+0xd5/0x120 [ 146.498991][ T5252] __se_sys_futex+0x381/0x410 [ 146.504527][ T5252] ? __x64_sys_futex+0xf0/0xf0 [ 146.510168][ T5252] ? __x64_sys_futex+0x1d/0xf0 [ 146.515801][ T5252] do_syscall_64+0x4c/0xa0 [ 146.520375][ T5252] ? clear_bhb_loop+0x60/0xb0 [ 146.527187][ T5252] ? clear_bhb_loop+0x60/0xb0 [ 146.532402][ T5252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.538734][ T5252] RIP: 0033:0x7f603179e559 [ 146.543380][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.563266][ T5252] RSP: 002b:00007f60326850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 146.571804][ T5252] RAX: ffffffffffffffda RBX: 00007f6031a25fa8 RCX: 00007f603179e559 [ 146.579930][ T5252] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6031a25fac [ 146.587973][ T5252] RBP: 00007f6031a25fa0 R08: 000232718757f888 R09: 0000000000000000 [ 146.596042][ T5252] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 146.604077][ T5252] R13: 00007f6031a26038 R14: 00007ffc11ebbbb0 R15: 00007ffc11ebbc98 [ 146.612150][ T5252] [ 146.815483][ T5262] Illegal XDP return value 2103171584 on prog (id 12) dev syz_tun, expect packet loss! [ 147.413407][ T5283] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.133365][ T5308] FAULT_INJECTION: forcing a failure. [ 148.133365][ T5308] name fail_futex, interval 1, probability 0, space 0, times 0 [ 148.153375][ T5308] CPU: 0 PID: 5308 Comm: syz.4.363 Not tainted syzkaller #0 [ 148.160793][ T5308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 148.170997][ T5308] Call Trace: [ 148.174338][ T5308] [ 148.177340][ T5308] dump_stack_lvl+0x188/0x24e [ 148.182096][ T5308] ? show_regs_print_info+0x12/0x12 [ 148.187363][ T5308] ? load_image+0x410/0x410 [ 148.191922][ T5308] ? release_firmware_map_entry+0x187/0x187 [ 148.197901][ T5308] should_fail_ex+0x390/0x4c0 [ 148.202663][ T5308] get_futex_key+0x1b1/0x1000 [ 148.207449][ T5308] ? futex_setup_timer+0xc0/0xc0 [ 148.212555][ T5308] ? tcp_sendmsg+0x35/0x40 [ 148.217070][ T5308] futex_wake+0x123/0x4f0 [ 148.221600][ T5308] ? _local_bh_enable+0xa0/0xa0 [ 148.226527][ T5308] ? futex_wake_mark+0x150/0x150 [ 148.231537][ T5308] ? fput+0x150/0x1a0 [ 148.235581][ T5308] ? __sys_sendto+0x514/0x650 [ 148.240349][ T5308] do_futex+0x2e2/0x320 [ 148.244553][ T5308] ? __ia32_sys_get_robust_list+0x100/0x100 [ 148.250612][ T5308] ? put_timespec64+0xd5/0x120 [ 148.255421][ T5308] __se_sys_futex+0x381/0x410 [ 148.260139][ T5308] ? __x64_sys_futex+0xf0/0xf0 [ 148.264979][ T5308] ? __x64_sys_futex+0x1d/0xf0 [ 148.269816][ T5308] do_syscall_64+0x4c/0xa0 [ 148.274386][ T5308] ? clear_bhb_loop+0x60/0xb0 [ 148.279101][ T5308] ? clear_bhb_loop+0x60/0xb0 [ 148.283835][ T5308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.289773][ T5308] RIP: 0033:0x7f853839e559 [ 148.294232][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.313876][ T5308] RSP: 002b:00007f85393220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.322351][ T5308] RAX: ffffffffffffffda RBX: 00007f8538625fa8 RCX: 00007f853839e559 [ 148.330401][ T5308] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8538625fac [ 148.338853][ T5308] RBP: 00007f8538625fa0 R08: 0030b04ca84b5834 R09: 0000000000000000 [ 148.346889][ T5308] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 148.354910][ T5308] R13: 00007f8538626038 R14: 00007fffbf4f9920 R15: 00007fffbf4f9a08 [ 148.362956][ T5308] [ 148.723086][ T5319] rxe_eth0 speed is unknown, defaulting to 1000 [ 150.447836][ T5376] rxe_eth0 speed is unknown, defaulting to 1000 [ 152.067444][ T5432] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.411247][ T5476] rxe_eth0 speed is unknown, defaulting to 1000 [ 155.090080][ T5519] rxe_eth0 speed is unknown, defaulting to 1000 [ 155.345666][ T5532] loop1: detected capacity change from 0 to 1764 [ 155.689204][ T5542] netlink: 56 bytes leftover after parsing attributes in process `syz.0.452'. [ 156.436928][ T5565] rxe_eth0 speed is unknown, defaulting to 1000 [ 156.664106][ T5573] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.603427][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 157.635751][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 157.644718][ T5601] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 157.826025][ T5606] ip_tables: iptables: counters copy to user failed while replacing table [ 158.152443][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.564290][ T5631] FAULT_INJECTION: forcing a failure. [ 158.564290][ T5631] name failslab, interval 1, probability 0, space 0, times 0 [ 158.625354][ T5631] CPU: 0 PID: 5631 Comm: syz.3.489 Not tainted syzkaller #0 [ 158.632757][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.642868][ T5631] Call Trace: [ 158.646234][ T5631] [ 158.649210][ T5631] dump_stack_lvl+0x188/0x24e [ 158.653963][ T5631] ? show_regs_print_info+0x12/0x12 [ 158.659232][ T5631] ? load_image+0x410/0x410 [ 158.663795][ T5631] ? __might_sleep+0xd0/0xd0 [ 158.668447][ T5631] ? __lock_acquire+0x7ea0/0x7ea0 [ 158.673560][ T5631] should_fail_ex+0x390/0x4c0 [ 158.678326][ T5631] should_failslab+0x5/0x20 [ 158.682880][ T5631] slab_pre_alloc_hook+0x59/0x300 [ 158.687967][ T5631] kmem_cache_alloc_lru+0x49/0x2e0 [ 158.693133][ T5631] ? __d_alloc+0x2e/0x6e0 [ 158.697521][ T5631] __d_alloc+0x2e/0x6e0 [ 158.701734][ T5631] ? d_alloc_pseudo+0xe/0x70 [ 158.706381][ T5631] d_alloc_pseudo+0x19/0x70 [ 158.710966][ T5631] alloc_file_pseudo+0xe0/0x200 [ 158.715910][ T5631] ? alloc_empty_file_noaccount+0x80/0x80 [ 158.721719][ T5631] ? alloc_fd+0x590/0x640 [ 158.726116][ T5631] sock_alloc_file+0xb3/0x240 [ 158.730873][ T5631] __sys_socket+0x12d/0x190 [ 158.735439][ T5631] __x64_sys_socket+0x76/0x80 [ 158.740176][ T5631] do_syscall_64+0x4c/0xa0 [ 158.744645][ T5631] ? clear_bhb_loop+0x60/0xb0 [ 158.749380][ T5631] ? clear_bhb_loop+0x60/0xb0 [ 158.754126][ T5631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.760071][ T5631] RIP: 0033:0x7f3c9859e559 [ 158.764544][ T5631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.784213][ T5631] RSP: 002b:00007f3c99510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 158.792717][ T5631] RAX: ffffffffffffffda RBX: 00007f3c98825fa0 RCX: 00007f3c9859e559 [ 158.800775][ T5631] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 158.808802][ T5631] RBP: 00007f3c986358b0 R08: 0000000000000000 R09: 0000000000000000 [ 158.816857][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.824886][ T5631] R13: 00007f3c98826038 R14: 00007f3c98825fa0 R15: 00007ffc94710968 [ 158.832951][ T5631] [ 160.124518][ T5664] rxe_eth0 speed is unknown, defaulting to 1000 [ 160.487241][ T5677] loop1: detected capacity change from 0 to 128 [ 160.838122][ T5681] loop3: detected capacity change from 0 to 256 [ 160.888375][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 161.923698][ T27] audit: type=1326 audit(1792191401.773:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 162.011261][ T27] audit: type=1326 audit(1792191401.773:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 162.078288][ T27] audit: type=1326 audit(1792191401.803:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 162.153801][ T27] audit: type=1326 audit(1792191401.803:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 162.208021][ T27] audit: type=1326 audit(1792191401.803:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 162.293992][ T27] audit: type=1326 audit(1792191401.803:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 162.353393][ T27] audit: type=1326 audit(1792191401.803:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 162.398798][ T27] audit: type=1326 audit(1792191401.803:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 162.470832][ T5715] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.497852][ T27] audit: type=1326 audit(1792191401.803:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 162.621119][ T27] audit: type=1326 audit(1792191401.803:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.2.518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 164.246088][ T5767] rxe_eth0 speed is unknown, defaulting to 1000 [ 165.234074][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.041409][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.099543][ T5801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.740094][ T5824] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.265307][ T5834] loop2: detected capacity change from 0 to 128 [ 167.280511][ T5834] ======================================================= [ 167.280511][ T5834] WARNING: The mand mount option has been deprecated and [ 167.280511][ T5834] and is ignored by this kernel. Remove the mand [ 167.280511][ T5834] option from the mount to silence this warning. [ 167.280511][ T5834] ======================================================= [ 167.652479][ T5840] ip_tables: iptables: counters copy to user failed while replacing table [ 168.751528][ T5871] rxe_eth0 speed is unknown, defaulting to 1000 [ 169.584155][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 169.611637][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 169.637993][ T5883] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 169.886704][ T5892] loop3: detected capacity change from 0 to 128 [ 170.494387][ T5902] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.340129][ T5937] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.858040][ T5947] netlink: 104 bytes leftover after parsing attributes in process `syz.2.610'. [ 173.090685][ T5955] syz.2.614 uses obsolete (PF_INET,SOCK_PACKET) [ 173.451610][ T5967] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.471931][ T5967] IPv6: NLM_F_REPLACE set, but no existing node found! [ 173.793347][ T5981] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.364727][ T5989] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.844956][ T6004] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.701862][ T6034] capability: warning: `syz.2.643' uses deprecated v2 capabilities in a way that may be insecure [ 175.777496][ T6036] sctp: [Deprecated]: syz.4.644 (pid 6036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.777496][ T6036] Use struct sctp_sack_info instead [ 175.832253][ T26] kernel read not supported for file [userfaultfd] (pid: 26 comm: kworker/1:1) [ 176.904099][ T6076] device ip6gre1 entered promiscuous mode [ 177.006971][ T6076] syz.0.660 (6076) used greatest stack depth: 20256 bytes left [ 178.013425][ T6103] rxe_eth0 speed is unknown, defaulting to 1000 [ 179.860172][ T6134] loop3: detected capacity change from 0 to 256 [ 179.893157][ T6134] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.978434][ T6140] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 180.019364][ T6140] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 181.561732][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 181.561747][ T27] audit: type=1326 audit(1792191421.413:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 181.683156][ T27] audit: type=1326 audit(1792191421.463:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 181.728571][ T27] audit: type=1326 audit(1792191421.463:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 181.764520][ T27] audit: type=1326 audit(1792191421.463:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 181.813356][ T27] audit: type=1326 audit(1792191421.463:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 181.897586][ T27] audit: type=1326 audit(1792191421.463:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 181.930749][ T27] audit: type=1326 audit(1792191421.463:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 181.985638][ T27] audit: type=1326 audit(1792191421.463:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 182.041288][ T27] audit: type=1326 audit(1792191421.463:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 182.103670][ T27] audit: type=1326 audit(1792191421.463:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.1.710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 182.225637][ T6214] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.671746][ T6263] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.836244][ T6271] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.207859][ T6287] loop1: detected capacity change from 0 to 764 [ 184.566939][ T6285] netlink: 'syz.3.742': attribute type 6 has an invalid length. [ 184.938357][ T6300] ip_tables: iptables: counters copy to user failed while replacing table [ 185.254519][ T6314] loop4: detected capacity change from 0 to 1764 [ 185.459240][ T6321] netlink: 52 bytes leftover after parsing attributes in process `syz.2.755'. [ 185.512843][ T6325] loop0: detected capacity change from 0 to 128 [ 186.286734][ T6346] loop1: detected capacity change from 0 to 256 [ 186.343331][ T6344] loop2: detected capacity change from 0 to 164 [ 186.458047][ T6344] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 186.751815][ T6364] FAULT_INJECTION: forcing a failure. [ 186.751815][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 186.785675][ T6364] CPU: 1 PID: 6364 Comm: syz.4.771 Not tainted syzkaller #0 [ 186.795683][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.807900][ T6364] Call Trace: [ 186.811239][ T6364] [ 186.814248][ T6364] dump_stack_lvl+0x188/0x24e [ 186.819164][ T6364] ? show_regs_print_info+0x12/0x12 [ 186.824620][ T6364] ? load_image+0x410/0x410 [ 186.829282][ T6364] ? __might_sleep+0xd0/0xd0 [ 186.834024][ T6364] ? __lock_acquire+0x7ea0/0x7ea0 [ 186.839224][ T6364] should_fail_ex+0x390/0x4c0 [ 186.844068][ T6364] should_failslab+0x5/0x20 [ 186.848699][ T6364] slab_pre_alloc_hook+0x59/0x300 [ 186.853797][ T6364] kmem_cache_alloc+0x56/0x2f0 [ 186.858640][ T6364] ? create_new_namespaces+0x34/0x700 [ 186.864268][ T6364] create_new_namespaces+0x34/0x700 [ 186.869523][ T6364] ? apparmor_capable+0x12c/0x190 [ 186.874620][ T6364] ? bpf_lsm_capable+0x5/0x10 [ 186.879643][ T6364] ? security_capable+0x85/0xb0 [ 186.884655][ T6364] unshare_nsproxy_namespaces+0x116/0x160 [ 186.890536][ T6364] ksys_unshare+0x4f6/0x8e0 [ 186.895391][ T6364] ? sighand_ctor+0x40/0x40 [ 186.900312][ T6364] ? lock_chain_count+0x20/0x20 [ 186.905585][ T6364] ? syscall_enter_from_user_mode+0x21/0x80 [ 186.911647][ T6364] __x64_sys_unshare+0x34/0x40 [ 186.916514][ T6364] do_syscall_64+0x4c/0xa0 [ 186.921086][ T6364] ? clear_bhb_loop+0x60/0xb0 [ 186.925934][ T6364] ? clear_bhb_loop+0x60/0xb0 [ 186.930732][ T6364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.936868][ T6364] RIP: 0033:0x7f853839e559 [ 186.941687][ T6364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.962001][ T6364] RSP: 002b:00007f8539322028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 186.970550][ T6364] RAX: ffffffffffffffda RBX: 00007f8538625fa0 RCX: 00007f853839e559 [ 186.978741][ T6364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 186.986776][ T6364] RBP: 00007f85384358b0 R08: 0000000000000000 R09: 0000000000000000 [ 186.994810][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.002850][ T6364] R13: 00007f8538626038 R14: 00007f8538625fa0 R15: 00007fffbf4f9a08 [ 187.010902][ T6364] [ 187.501206][ T6390] FAULT_INJECTION: forcing a failure. [ 187.501206][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 187.566682][ T6390] CPU: 0 PID: 6390 Comm: syz.0.781 Not tainted syzkaller #0 [ 187.574088][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.584210][ T6390] Call Trace: [ 187.587551][ T6390] [ 187.590534][ T6390] dump_stack_lvl+0x188/0x24e [ 187.595295][ T6390] ? show_regs_print_info+0x12/0x12 [ 187.600569][ T6390] ? load_image+0x410/0x410 [ 187.605115][ T6390] ? __lock_acquire+0x7ea0/0x7ea0 [ 187.610205][ T6390] should_fail_ex+0x390/0x4c0 [ 187.615572][ T6390] should_failslab+0x5/0x20 [ 187.620138][ T6390] slab_pre_alloc_hook+0x59/0x300 [ 187.625221][ T6390] ? kobject_set_name_vargs+0x5d/0x110 [ 187.630744][ T6390] __kmem_cache_alloc_node+0x4f/0x270 [ 187.636265][ T6390] ? kobject_set_name_vargs+0x5d/0x110 [ 187.641998][ T6390] __kmalloc_node_track_caller+0xa0/0x240 [ 187.647758][ T6390] kvasprintf+0xe8/0x1a0 [ 187.652048][ T6390] ? __lock_acquire+0x7ea0/0x7ea0 [ 187.657564][ T6390] ? bust_spinlocks+0xd0/0xd0 [ 187.662504][ T6390] ? kvasprintf_const+0xdd/0x240 [ 187.667519][ T6390] kobject_set_name_vargs+0x5d/0x110 [ 187.672987][ T6390] dev_set_name+0xdf/0x130 [ 187.677495][ T6390] ? get_device+0x30/0x30 [ 187.681886][ T6390] ? __init_waitqueue_head+0xa4/0x140 [ 187.687328][ T6390] ? device_initialize+0x247/0x450 [ 187.692495][ T6390] wakeup_source_sysfs_add+0x1a5/0x2b0 [ 187.698005][ T6390] wakeup_source_register+0x15f/0x230 [ 187.703430][ T6390] ep_insert+0xeab/0x1980 [ 187.708006][ T6390] ? ep_loop_check+0x1b0/0x1b0 [ 187.712828][ T6390] ? mutex_lock_nested+0x10/0x10 [ 187.718453][ T6390] ? apparmor_capable+0x12c/0x190 [ 187.723648][ T6390] ? bpf_lsm_capable+0x5/0x10 [ 187.728515][ T6390] ? security_capable+0x85/0xb0 [ 187.733506][ T6390] do_epoll_ctl+0x8b2/0xf40 [ 187.738245][ T6390] __x64_sys_epoll_ctl+0x162/0x1b0 [ 187.743596][ T6390] ? ep_modify+0xa80/0xa80 [ 187.748248][ T6390] ? lockdep_hardirqs_on+0x94/0x140 [ 187.753519][ T6390] do_syscall_64+0x4c/0xa0 [ 187.758434][ T6390] ? clear_bhb_loop+0x60/0xb0 [ 187.763159][ T6390] ? clear_bhb_loop+0x60/0xb0 [ 187.767891][ T6390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.774097][ T6390] RIP: 0033:0x7f7e8699e559 [ 187.778661][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.798755][ T6390] RSP: 002b:00007f7e8785d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 187.807307][ T6390] RAX: ffffffffffffffda RBX: 00007f7e86c25fa0 RCX: 00007f7e8699e559 [ 187.815708][ T6390] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 187.823809][ T6390] RBP: 00007f7e86a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 187.832010][ T6390] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 187.840030][ T6390] R13: 00007f7e86c26038 R14: 00007f7e86c25fa0 R15: 00007ffdb6b95278 [ 187.848154][ T6390] [ 188.353578][ T6398] program syz.0.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.583442][ T6402] FAULT_INJECTION: forcing a failure. [ 188.583442][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 188.615766][ T6402] CPU: 1 PID: 6402 Comm: syz.0.786 Not tainted syzkaller #0 [ 188.624245][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.634558][ T6402] Call Trace: [ 188.637905][ T6402] [ 188.640906][ T6402] dump_stack_lvl+0x188/0x24e [ 188.645685][ T6402] ? show_regs_print_info+0x12/0x12 [ 188.650972][ T6402] ? load_image+0x410/0x410 [ 188.655546][ T6402] ? __might_sleep+0xd0/0xd0 [ 188.660235][ T6402] ? __lock_acquire+0x7ea0/0x7ea0 [ 188.665340][ T6402] should_fail_ex+0x390/0x4c0 [ 188.670110][ T6402] should_failslab+0x5/0x20 [ 188.674679][ T6402] slab_pre_alloc_hook+0x59/0x300 [ 188.679791][ T6402] kmem_cache_alloc+0x56/0x2f0 [ 188.684621][ T6402] ? create_new_namespaces+0x34/0x700 [ 188.690172][ T6402] create_new_namespaces+0x34/0x700 [ 188.695434][ T6402] ? apparmor_capable+0x12c/0x190 [ 188.700532][ T6402] ? bpf_lsm_capable+0x5/0x10 [ 188.705297][ T6402] ? security_capable+0x85/0xb0 [ 188.710227][ T6402] unshare_nsproxy_namespaces+0x116/0x160 [ 188.716441][ T6402] ksys_unshare+0x4f6/0x8e0 [ 188.721839][ T6402] ? sighand_ctor+0x40/0x40 [ 188.727573][ T6402] ? lock_chain_count+0x20/0x20 [ 188.732513][ T6402] ? syscall_enter_from_user_mode+0x21/0x80 [ 188.738484][ T6402] __x64_sys_unshare+0x34/0x40 [ 188.743316][ T6402] do_syscall_64+0x4c/0xa0 [ 188.748321][ T6402] ? clear_bhb_loop+0x60/0xb0 [ 188.753064][ T6402] ? clear_bhb_loop+0x60/0xb0 [ 188.757804][ T6402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.763760][ T6402] RIP: 0033:0x7f7e8699e559 [ 188.768336][ T6402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.787999][ T6402] RSP: 002b:00007f7e8785d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 188.796593][ T6402] RAX: ffffffffffffffda RBX: 00007f7e86c25fa0 RCX: 00007f7e8699e559 [ 188.804624][ T6402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 188.812827][ T6402] RBP: 00007f7e86a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 188.822613][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.830733][ T6402] R13: 00007f7e86c26038 R14: 00007f7e86c25fa0 R15: 00007ffdb6b95278 [ 188.838971][ T6402] [ 188.962106][ T6408] loop4: detected capacity change from 0 to 8192 [ 189.024422][ T6408] syz.4.788: attempt to access beyond end of device [ 189.024422][ T6408] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 189.067641][ T6408] Buffer I/O error on dev loop4, logical block 57847, async page read [ 189.131628][ T6408] syz.4.788: attempt to access beyond end of device [ 189.131628][ T6408] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 189.195683][ T6408] Buffer I/O error on dev loop4, logical block 57847, async page read [ 189.217216][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 189.217244][ T27] audit: type=1800 audit(1792191429.073:62): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.788" name="file2" dev="loop4" ino=1048642 res=0 errno=0 [ 189.320347][ T6415] loop1: detected capacity change from 0 to 736 [ 189.380761][ T6408] syz.4.788 (6408) used greatest stack depth: 19632 bytes left [ 189.596595][ T6420] loop4: detected capacity change from 0 to 512 [ 189.643055][ T6420] FAT-fs (loop4): Unrecognized mount option "shortname=wannt" or missing value [ 190.369945][ T6444] FAULT_INJECTION: forcing a failure. [ 190.369945][ T6444] name failslab, interval 1, probability 0, space 0, times 0 [ 190.427030][ T6444] CPU: 0 PID: 6444 Comm: syz.3.802 Not tainted syzkaller #0 [ 190.434428][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 190.444626][ T6444] Call Trace: [ 190.447956][ T6444] [ 190.450959][ T6444] dump_stack_lvl+0x188/0x24e [ 190.455699][ T6444] ? show_regs_print_info+0x12/0x12 [ 190.460965][ T6444] ? load_image+0x410/0x410 [ 190.465528][ T6444] ? __might_sleep+0xd0/0xd0 [ 190.470242][ T6444] ? __lock_acquire+0x7ea0/0x7ea0 [ 190.475423][ T6444] should_fail_ex+0x390/0x4c0 [ 190.480187][ T6444] should_failslab+0x5/0x20 [ 190.484752][ T6444] slab_pre_alloc_hook+0x59/0x300 [ 190.489845][ T6444] ? xfrm_state_init+0x16e/0x470 [ 190.494877][ T6444] __kmem_cache_alloc_node+0x4f/0x270 [ 190.500317][ T6444] ? xfrm_state_init+0x16e/0x470 [ 190.505317][ T6444] __kmalloc+0xa3/0x240 [ 190.509536][ T6444] xfrm_state_init+0x16e/0x470 [ 190.514445][ T6444] xfrm_net_init+0x1a3/0xe70 [ 190.519098][ T6444] ? policy_hash_direct+0x5b0/0x5b0 [ 190.524365][ T6444] ops_init+0x360/0x5e0 [ 190.528586][ T6444] setup_net+0x4f2/0xbd0 [ 190.532916][ T6444] ? copy_net_ns+0x5b0/0x5b0 [ 190.537587][ T6444] ? copy_net_ns+0x324/0x5b0 [ 190.542326][ T6444] ? down_read_killable+0x1cc/0x340 [ 190.547686][ T6444] copy_net_ns+0x33e/0x5b0 [ 190.552195][ T6444] create_new_namespaces+0x3ce/0x700 [ 190.557564][ T6444] unshare_nsproxy_namespaces+0x116/0x160 [ 190.563343][ T6444] ksys_unshare+0x4f6/0x8e0 [ 190.567950][ T6444] ? sighand_ctor+0x40/0x40 [ 190.572627][ T6444] ? lock_chain_count+0x20/0x20 [ 190.577549][ T6444] ? syscall_enter_from_user_mode+0x21/0x80 [ 190.583711][ T6444] __x64_sys_unshare+0x34/0x40 [ 190.588530][ T6444] do_syscall_64+0x4c/0xa0 [ 190.593015][ T6444] ? clear_bhb_loop+0x60/0xb0 [ 190.597752][ T6444] ? clear_bhb_loop+0x60/0xb0 [ 190.602492][ T6444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.608444][ T6444] RIP: 0033:0x7f3c9859e559 [ 190.612908][ T6444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.632568][ T6444] RSP: 002b:00007f3c99510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 190.641076][ T6444] RAX: ffffffffffffffda RBX: 00007f3c98825fa0 RCX: 00007f3c9859e559 [ 190.649279][ T6444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 190.657389][ T6444] RBP: 00007f3c986358b0 R08: 0000000000000000 R09: 0000000000000000 [ 190.665502][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.673541][ T6444] R13: 00007f3c98826038 R14: 00007f3c98825fa0 R15: 00007ffc94710968 [ 190.681598][ T6444] [ 190.810859][ T6450] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.013603][ T6454] kernel profiling enabled (shift: 63) [ 191.020799][ T6454] profiling shift: 63 too large [ 191.183477][ T6458] loop3: detected capacity change from 0 to 512 [ 191.218373][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.810'. [ 191.772981][ T6484] capability: warning: `syz.2.818' uses 32-bit capabilities (legacy support in use) [ 191.843761][ T6488] FAULT_INJECTION: forcing a failure. [ 191.843761][ T6488] name failslab, interval 1, probability 0, space 0, times 0 [ 191.905748][ T6488] CPU: 1 PID: 6488 Comm: syz.0.819 Not tainted syzkaller #0 [ 191.913144][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.923259][ T6488] Call Trace: [ 191.926591][ T6488] [ 191.929571][ T6488] dump_stack_lvl+0x188/0x24e [ 191.934339][ T6488] ? show_regs_print_info+0x12/0x12 [ 191.939603][ T6488] ? load_image+0x410/0x410 [ 191.944173][ T6488] ? __might_sleep+0xd0/0xd0 [ 191.948824][ T6488] ? __lock_acquire+0x7ea0/0x7ea0 [ 191.953932][ T6488] should_fail_ex+0x390/0x4c0 [ 191.958687][ T6488] should_failslab+0x5/0x20 [ 191.963272][ T6488] slab_pre_alloc_hook+0x59/0x300 [ 191.968392][ T6488] ? xfrm_state_init+0x16e/0x470 [ 191.973425][ T6488] __kmem_cache_alloc_node+0x4f/0x270 [ 191.978869][ T6488] ? xfrm_state_init+0x16e/0x470 [ 191.983863][ T6488] __kmalloc+0xa3/0x240 [ 191.988084][ T6488] xfrm_state_init+0x16e/0x470 [ 191.992906][ T6488] xfrm_net_init+0x1a3/0xe70 [ 191.997592][ T6488] ? policy_hash_direct+0x5b0/0x5b0 [ 192.002865][ T6488] ops_init+0x360/0x5e0 [ 192.007089][ T6488] setup_net+0x4f2/0xbd0 [ 192.011406][ T6488] ? copy_net_ns+0x5b0/0x5b0 [ 192.016077][ T6488] ? copy_net_ns+0x324/0x5b0 [ 192.020739][ T6488] ? down_read_killable+0x1cc/0x340 [ 192.026076][ T6488] copy_net_ns+0x33e/0x5b0 [ 192.030568][ T6488] create_new_namespaces+0x3ce/0x700 [ 192.035922][ T6488] unshare_nsproxy_namespaces+0x116/0x160 [ 192.041706][ T6488] ksys_unshare+0x4f6/0x8e0 [ 192.046288][ T6488] ? sighand_ctor+0x40/0x40 [ 192.050858][ T6488] ? lock_chain_count+0x20/0x20 [ 192.055778][ T6488] ? syscall_enter_from_user_mode+0x21/0x80 [ 192.061772][ T6488] __x64_sys_unshare+0x34/0x40 [ 192.066599][ T6488] do_syscall_64+0x4c/0xa0 [ 192.071075][ T6488] ? clear_bhb_loop+0x60/0xb0 [ 192.075806][ T6488] ? clear_bhb_loop+0x60/0xb0 [ 192.080579][ T6488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.086527][ T6488] RIP: 0033:0x7f7e8699e559 [ 192.090986][ T6488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.110650][ T6488] RSP: 002b:00007f7e8785d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.119127][ T6488] RAX: ffffffffffffffda RBX: 00007f7e86c25fa0 RCX: 00007f7e8699e559 [ 192.127152][ T6488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 192.135176][ T6488] RBP: 00007f7e86a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 192.143212][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.151265][ T6488] R13: 00007f7e86c26038 R14: 00007f7e86c25fa0 R15: 00007ffdb6b95278 [ 192.159314][ T6488] [ 192.191302][ T6476] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 192.309263][ T6490] bond0: (slave ip6tnl1): refused to change device type [ 192.737337][ T27] audit: type=1326 audit(1792191432.593:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.4.825" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7fc00000 [ 192.826212][ T27] audit: type=1326 audit(1792191432.633:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.4.825" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85383982d7 code=0x7fc00000 [ 192.921288][ T27] audit: type=1326 audit(1792191432.653:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.4.825" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f853839e559 code=0x7fc00000 [ 193.646068][ T27] audit: type=1326 audit(1792191433.503:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 193.710747][ T27] audit: type=1326 audit(1792191433.533:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 193.813835][ T6535] FAULT_INJECTION: forcing a failure. [ 193.813835][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 193.817527][ T27] audit: type=1326 audit(1792191433.533:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 193.860748][ T27] audit: type=1326 audit(1792191433.543:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 193.884136][ T6535] CPU: 0 PID: 6535 Comm: syz.1.841 Not tainted syzkaller #0 [ 193.895287][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.905387][ T6535] Call Trace: [ 193.908696][ T6535] [ 193.911660][ T6535] dump_stack_lvl+0x188/0x24e [ 193.916378][ T6535] ? show_regs_print_info+0x12/0x12 [ 193.921634][ T6535] ? load_image+0x410/0x410 [ 193.926288][ T6535] ? __might_sleep+0xd0/0xd0 [ 193.930915][ T6535] ? __lock_acquire+0x7ea0/0x7ea0 [ 193.935985][ T6535] should_fail_ex+0x390/0x4c0 [ 193.940711][ T6535] should_failslab+0x5/0x20 [ 193.945242][ T6535] slab_pre_alloc_hook+0x59/0x300 [ 193.950312][ T6535] ? xfrm_state_init+0x16e/0x470 [ 193.955283][ T6535] __kmem_cache_alloc_node+0x4f/0x270 [ 193.960720][ T6535] ? xfrm_state_init+0x16e/0x470 [ 193.965708][ T6535] __kmalloc+0xa3/0x240 [ 193.969912][ T6535] xfrm_state_init+0x16e/0x470 [ 193.974715][ T6535] xfrm_net_init+0x1a3/0xe70 [ 193.979344][ T6535] ? policy_hash_direct+0x5b0/0x5b0 [ 193.984583][ T6535] ops_init+0x360/0x5e0 [ 193.988779][ T6535] setup_net+0x4f2/0xbd0 [ 193.993060][ T6535] ? copy_net_ns+0x5b0/0x5b0 [ 193.997691][ T6535] ? copy_net_ns+0x324/0x5b0 [ 194.002323][ T6535] ? down_read_killable+0x1cc/0x340 [ 194.007580][ T6535] copy_net_ns+0x33e/0x5b0 [ 194.012081][ T6535] create_new_namespaces+0x3ce/0x700 [ 194.017408][ T6535] unshare_nsproxy_namespaces+0x116/0x160 [ 194.023171][ T6535] ksys_unshare+0x4f6/0x8e0 [ 194.027727][ T6535] ? sighand_ctor+0x40/0x40 [ 194.032269][ T6535] ? lock_chain_count+0x20/0x20 [ 194.037191][ T6535] ? syscall_enter_from_user_mode+0x21/0x80 [ 194.043133][ T6535] __x64_sys_unshare+0x34/0x40 [ 194.047936][ T6535] do_syscall_64+0x4c/0xa0 [ 194.052383][ T6535] ? clear_bhb_loop+0x60/0xb0 [ 194.057120][ T6535] ? clear_bhb_loop+0x60/0xb0 [ 194.061833][ T6535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.067758][ T6535] RIP: 0033:0x7f603179e559 [ 194.072205][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.091859][ T6535] RSP: 002b:00007f6032685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 194.100306][ T6535] RAX: ffffffffffffffda RBX: 00007f6031a25fa0 RCX: 00007f603179e559 [ 194.108310][ T6535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 194.116311][ T6535] RBP: 00007f60318358b0 R08: 0000000000000000 R09: 0000000000000000 [ 194.124306][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.132337][ T6535] R13: 00007f6031a26038 R14: 00007f6031a25fa0 R15: 00007ffc11ebbc98 [ 194.140360][ T6535] [ 194.194027][ T27] audit: type=1326 audit(1792191433.543:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 194.232894][ T27] audit: type=1326 audit(1792191433.543:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 194.295572][ T27] audit: type=1326 audit(1792191433.553:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 194.376330][ T27] audit: type=1326 audit(1792191433.553:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 194.435383][ T27] audit: type=1326 audit(1792191433.553:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 194.497914][ T27] audit: type=1326 audit(1792191433.543:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 194.560309][ T6550] loop3: detected capacity change from 0 to 256 [ 194.569808][ T27] audit: type=1326 audit(1792191433.553:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 194.618695][ T6550] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.625870][ T27] audit: type=1326 audit(1792191433.553:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 194.699943][ T27] audit: type=1326 audit(1792191433.553:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.4.840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f853839e559 code=0x7ffc0000 [ 195.044605][ T27] audit: type=1326 audit(1792191434.893:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.1.850" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 195.090329][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff813295e2 (__mcheck_cpu_init_clear_banks+0x102/0x1e0) [ 195.105760][ C0] Call Trace: [ 195.109068][ C0] [ 195.111942][ C0] mce_cpu_restart+0xca/0x1a0 [ 195.116684][ C0] __flush_smp_call_function_queue+0x2f0/0xd50 [ 195.122886][ C0] ? mce_restart+0x1a0/0x1a0 [ 195.127530][ C0] __sysvec_call_function_single+0xba/0x350 [ 195.133555][ C0] sysvec_call_function_single+0x98/0xc0 [ 195.139233][ C0] [ 195.142185][ C0] [ 195.145145][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 195.151155][ C0] RIP: 0010:lock_acquire+0x226/0x4a0 [ 195.156479][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 ef 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 195.176131][ C0] RSP: 0018:ffffc9000c657620 EFLAGS: 00000206 [ 195.182233][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 873c4b6fc908f700 [ 195.190239][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2b20 RDI: ffffffff8adf7160 [ 195.198243][ C0] RBP: ffffc9000c657740 R08: dffffc0000000000 R09: 1ffffffff2326848 [ 195.206257][ C0] R10: dffffc0000000000 R11: fffffbfff2326849 R12: 1ffff920018caed0 [ 195.214257][ C0] R13: 0000000000000000 R14: 0000000000000246 R15: dffffc0000000000 [ 195.222307][ C0] ? pfn_valid+0xcd/0x420 [ 195.226688][ C0] ? read_lock_is_recursive+0x10/0x10 [ 195.232100][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 195.237157][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 195.242244][ C0] ? folio_mark_accessed+0x329/0x14e0 [ 195.247650][ C0] ? pfn_valid+0xcd/0x420 [ 195.252018][ C0] ? page_ext_get+0x1e/0x2a0 [ 195.256661][ C0] page_ext_get+0x3a/0x2a0 [ 195.261108][ C0] ? page_ext_get+0x1e/0x2a0 [ 195.265733][ C0] page_table_check_clear+0x4a/0x6b0 [ 195.271084][ C0] ? __page_table_check_pte_clear+0x3f/0x70 [ 195.277105][ C0] unmap_page_range+0x1905/0x25b0 [ 195.282717][ C0] unmap_vmas+0x260/0x390 [ 195.287087][ C0] ? unmap_vmas+0x1bd/0x390 [ 195.291642][ C0] ? unmap_page_range+0x25b0/0x25b0 [ 195.297059][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 195.302153][ C0] exit_mmap+0x20d/0x970 [ 195.306544][ C0] ? vm_brk+0x20/0x20 [ 195.310568][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 195.316344][ C0] ? exit_mm+0x23d/0x350 [ 195.320638][ C0] ? uprobe_clear_state+0x274/0x290 [ 195.325920][ C0] __mmput+0x118/0x3a0 [ 195.330043][ C0] exit_mm+0x24d/0x350 [ 195.334165][ C0] ? sysctl_delayacct+0x220/0x220 [ 195.339337][ C0] ? do_exit+0x2570/0x2570 [ 195.343813][ C0] ? tty_audit_exit+0x149/0x1f0 [ 195.348697][ C0] do_exit+0x958/0x2570 [ 195.352892][ C0] ? preempt_schedule_common+0xa5/0xd0 [ 195.358383][ C0] ? put_task_struct+0x80/0x80 [ 195.363269][ C0] ? preempt_schedule+0xbc/0xd0 [ 195.368150][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 195.374363][ C0] ? lock_chain_count+0x20/0x20 [ 195.379267][ C0] do_group_exit+0x229/0x2e0 [ 195.383898][ C0] __x64_sys_exit_group+0x3b/0x40 [ 195.388956][ C0] do_syscall_64+0x4c/0xa0 [ 195.393399][ C0] ? clear_bhb_loop+0x60/0xb0 [ 195.398105][ C0] ? clear_bhb_loop+0x60/0xb0 [ 195.402852][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.408799][ C0] RIP: 0033:0x7f853839e559 [ 195.413242][ C0] Code: Unable to access opcode bytes at 0x7f853839e52f. [ 195.420289][ C0] RSP: 002b:00007fffbf4f9d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 195.428817][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f853839e559 [ 195.436820][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.444903][ C0] RBP: 00007fffbf4f9dac R08: 0000000000000000 R09: 00000000000927c0 [ 195.452903][ C0] R10: 00007f8538626038 R11: 0000000000000246 R12: 00000000000000a0 [ 195.460901][ C0] R13: 00000000000927c0 R14: 000000000002f688 R15: 00007fffbf4f9e00 [ 195.468917][ C0] [ 195.545663][ T27] audit: type=1326 audit(1792191434.923:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.1.850" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 195.823647][ T6562] loop4: detected capacity change from 0 to 8192 [ 195.903271][ T6562] syz.4.852: attempt to access beyond end of device [ 195.903271][ T6562] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 195.985704][ T6562] Buffer I/O error on dev loop4, logical block 57847, async page read [ 196.034597][ T6562] syz.4.852: attempt to access beyond end of device [ 196.034597][ T6562] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 196.093250][ T6562] Buffer I/O error on dev loop4, logical block 57847, async page read [ 196.389887][ T6582] loop1: detected capacity change from 0 to 8192 [ 196.904711][ T6595] 0: reclassify loop, rule prio 0, protocol 03 [ 197.043494][ T6597] process 'syz.3.866' launched '/dev/fd/4' with NULL argv: empty string added [ 197.839307][ T6627] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.854234][ T6628] loop1: detected capacity change from 0 to 136 [ 198.402983][ T6645] loop4: detected capacity change from 0 to 128 [ 199.072313][ T6667] sctp: [Deprecated]: syz.0.896 (pid 6667) Use of int in max_burst socket option deprecated. [ 199.072313][ T6667] Use struct sctp_assoc_value instead [ 199.657040][ T6689] loop3: detected capacity change from 0 to 128 [ 199.713322][ T6691] mmap: syz.0.906 (6691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 199.871275][ T6693] netlink: 'syz.4.907': attribute type 15 has an invalid length. [ 200.624644][ T6725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.677844][ T6725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.827966][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.835013][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.033229][ T6732] loop1: detected capacity change from 0 to 8192 [ 201.104641][ T6732] syz.1.933: attempt to access beyond end of device [ 201.104641][ T6732] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 201.135554][ T6732] Buffer I/O error on dev loop1, logical block 57847, async page read [ 201.166400][ T6732] syz.1.933: attempt to access beyond end of device [ 201.166400][ T6732] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 201.225960][ T6732] Buffer I/O error on dev loop1, logical block 57847, async page read [ 201.282089][ T6736] loop0: detected capacity change from 0 to 8192 [ 201.306076][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 201.306091][ T27] audit: type=1800 audit(1792191441.163:89): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.933" name="file2" dev="loop1" ino=1048652 res=0 errno=0 [ 202.346483][ T6772] loop0: detected capacity change from 0 to 1764 [ 202.973812][ T6780] loop2: detected capacity change from 0 to 8192 [ 203.042597][ T6780] syz.2.940: attempt to access beyond end of device [ 203.042597][ T6780] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 203.091845][ T6780] Buffer I/O error on dev loop2, logical block 57847, async page read [ 203.134277][ T6780] syz.2.940: attempt to access beyond end of device [ 203.134277][ T6780] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 203.186048][ T6780] Buffer I/O error on dev loop2, logical block 57847, async page read [ 203.210835][ T27] audit: type=1800 audit(1792191443.063:90): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.940" name="file2" dev="loop2" ino=1048654 res=0 errno=0 [ 203.363821][ T6792] loop0: detected capacity change from 0 to 512 [ 203.527051][ T6798] program syz.1.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.977829][ T6800] loop4: detected capacity change from 0 to 8192 [ 204.035028][ T6812] loop1: detected capacity change from 0 to 1764 [ 204.113427][ T6814] loop3: detected capacity change from 0 to 256 [ 205.161657][ T6837] loop3: detected capacity change from 0 to 164 [ 205.230302][ T6837] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 205.857418][ T6856] loop3: detected capacity change from 0 to 1764 [ 206.271333][ T6864] loop1: detected capacity change from 0 to 256 [ 206.828962][ T6886] loop1: detected capacity change from 0 to 1764 [ 207.641482][ T6921] loop4: detected capacity change from 0 to 1764 [ 210.444193][ T6997] FAULT_INJECTION: forcing a failure. [ 210.444193][ T6997] name failslab, interval 1, probability 0, space 0, times 0 [ 210.472309][ T6997] CPU: 1 PID: 6997 Comm: syz.2.1021 Not tainted syzkaller #0 [ 210.480056][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.493059][ T6997] Call Trace: [ 210.496404][ T6997] [ 210.499390][ T6997] dump_stack_lvl+0x188/0x24e [ 210.504237][ T6997] ? show_regs_print_info+0x12/0x12 [ 210.509641][ T6997] ? load_image+0x410/0x410 [ 210.514212][ T6997] ? __might_sleep+0xd0/0xd0 [ 210.518964][ T6997] ? __lock_acquire+0x7ea0/0x7ea0 [ 210.524097][ T6997] should_fail_ex+0x390/0x4c0 [ 210.528860][ T6997] should_failslab+0x5/0x20 [ 210.533422][ T6997] slab_pre_alloc_hook+0x59/0x300 [ 210.538606][ T6997] kmem_cache_alloc_lru+0x49/0x2e0 [ 210.544225][ T6997] ? __d_alloc+0x2e/0x6e0 [ 210.549024][ T6997] __d_alloc+0x2e/0x6e0 [ 210.553535][ T6997] ? d_alloc_pseudo+0xe/0x70 [ 210.559519][ T6997] d_alloc_pseudo+0x19/0x70 [ 210.564635][ T6997] alloc_file_pseudo+0xe0/0x200 [ 210.569854][ T6997] ? alloc_empty_file_noaccount+0x80/0x80 [ 210.577559][ T6997] ? alloc_fd+0x590/0x640 [ 210.582219][ T6997] sock_alloc_file+0xb3/0x240 [ 210.587126][ T6997] __sys_socket+0x12d/0x190 [ 210.591715][ T6997] __x64_sys_socket+0x76/0x80 [ 210.597893][ T6997] do_syscall_64+0x4c/0xa0 [ 210.603872][ T6997] ? clear_bhb_loop+0x60/0xb0 [ 210.609410][ T6997] ? clear_bhb_loop+0x60/0xb0 [ 210.614448][ T6997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.621746][ T6997] RIP: 0033:0x7f296bb9e559 [ 210.626764][ T6997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.651134][ T6997] RSP: 002b:00007f296c9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 210.662211][ T6997] RAX: ffffffffffffffda RBX: 00007f296be25fa0 RCX: 00007f296bb9e559 [ 210.671670][ T6997] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 210.680187][ T6997] RBP: 00007f296bc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 210.688601][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.698597][ T6997] R13: 00007f296be26038 R14: 00007f296be25fa0 R15: 00007ffee8ebf048 [ 210.708237][ T6997] [ 211.832804][ T27] audit: type=1800 audit(1792191451.683:91): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1022" name="file1" dev="sda1" ino=2047 res=0 errno=0 [ 211.903737][ T27] audit: type=1800 audit(1792191451.723:92): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1022" name="file1" dev="sda1" ino=2047 res=0 errno=0 [ 212.415003][ T7042] rxe_eth0 speed is unknown, defaulting to 1000 [ 213.261916][ T7067] loop3: detected capacity change from 0 to 1764 [ 214.432808][ T7096] rxe_eth0 speed is unknown, defaulting to 1000 [ 214.809317][ T7098] loop3: detected capacity change from 0 to 1764 [ 215.431621][ T3535] kernel read not supported for file [userfaultfd] (pid: 3535 comm: kworker/1:2) [ 217.050593][ T3535] kernel read not supported for file [userfaultfd] (pid: 3535 comm: kworker/1:2) [ 217.917060][ T7176] overlayfs: failed to resolve './bus': -2 [ 219.161650][ T4275] kernel read not supported for file [userfaultfd] (pid: 4275 comm: kworker/1:4) [ 219.370617][ T7207] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 222.755321][ T7330] loop1: detected capacity change from 0 to 164 [ 222.851492][ T7330] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 224.619564][ T7389] loop2: detected capacity change from 0 to 164 [ 224.674773][ T7389] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 224.933977][ T7406] 9pnet_fd: Insufficient options for proto=fd [ 225.774068][ T7441] loop1: detected capacity change from 0 to 164 [ 225.842723][ T7441] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 226.269411][ T7455] Zero length message leads to an empty skb [ 227.161780][ T7493] 9pnet_fd: Insufficient options for proto=fd [ 228.505678][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 228.505716][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 228.511922][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 228.520787][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 228.530751][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 228.548356][ T7541] rxe_eth0 speed is unknown, defaulting to 1000 [ 233.743215][ T7718] overlayfs: failed to resolve './bus': -2 [ 234.606116][ T7742] overlayfs: failed to resolve './bus': -2 [ 235.927830][ T7780] program syz.0.1335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.717070][ T7837] FAULT_INJECTION: forcing a failure. [ 237.717070][ T7837] name failslab, interval 1, probability 0, space 0, times 0 [ 237.740684][ T7837] CPU: 1 PID: 7837 Comm: syz.0.1358 Not tainted syzkaller #0 [ 237.748161][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 237.758285][ T7837] Call Trace: [ 237.761652][ T7837] [ 237.764629][ T7837] dump_stack_lvl+0x188/0x24e [ 237.769374][ T7837] ? show_regs_print_info+0x12/0x12 [ 237.774637][ T7837] ? load_image+0x410/0x410 [ 237.779207][ T7837] ? __might_sleep+0xd0/0xd0 [ 237.783896][ T7837] ? __lock_acquire+0x7ea0/0x7ea0 [ 237.788992][ T7837] should_fail_ex+0x390/0x4c0 [ 237.793748][ T7837] should_failslab+0x5/0x20 [ 237.798313][ T7837] slab_pre_alloc_hook+0x59/0x300 [ 237.803401][ T7837] kmem_cache_alloc_lru+0x49/0x2e0 [ 237.808568][ T7837] ? __d_alloc+0x2e/0x6e0 [ 237.812957][ T7837] __d_alloc+0x2e/0x6e0 [ 237.817175][ T7837] ? d_alloc_pseudo+0xe/0x70 [ 237.821823][ T7837] d_alloc_pseudo+0x19/0x70 [ 237.826377][ T7837] alloc_file_pseudo+0xe0/0x200 [ 237.831294][ T7837] ? alloc_empty_file_noaccount+0x80/0x80 [ 237.837079][ T7837] ? alloc_fd+0x590/0x640 [ 237.841521][ T7837] sock_alloc_file+0xb3/0x240 [ 237.846280][ T7837] __sys_socket+0x12d/0x190 [ 237.850845][ T7837] __x64_sys_socket+0x76/0x80 [ 237.855558][ T7837] do_syscall_64+0x4c/0xa0 [ 237.860007][ T7837] ? clear_bhb_loop+0x60/0xb0 [ 237.864717][ T7837] ? clear_bhb_loop+0x60/0xb0 [ 237.869458][ T7837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.875383][ T7837] RIP: 0033:0x7f7e8699e559 [ 237.879920][ T7837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.899562][ T7837] RSP: 002b:00007f7e8785d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 237.908025][ T7837] RAX: ffffffffffffffda RBX: 00007f7e86c25fa0 RCX: 00007f7e8699e559 [ 237.916033][ T7837] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 237.924032][ T7837] RBP: 00007f7e86a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 237.932031][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.940039][ T7837] R13: 00007f7e86c26038 R14: 00007f7e86c25fa0 R15: 00007ffdb6b95278 [ 237.948057][ T7837] [ 248.261028][ T8119] loop0: detected capacity change from 0 to 736 [ 248.585784][ T8129] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1470'. [ 250.144965][ T8162] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1482'. [ 251.487618][ T8196] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1496'. [ 251.815794][ T27] audit: type=1326 audit(1792191491.673:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 251.896779][ T27] audit: type=1326 audit(1792191491.703:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 251.979332][ T27] audit: type=1326 audit(1792191491.703:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 252.058401][ T27] audit: type=1326 audit(1792191491.703:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 252.116701][ T27] audit: type=1326 audit(1792191491.703:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 252.205608][ T27] audit: type=1326 audit(1792191491.713:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 252.272301][ T27] audit: type=1326 audit(1792191491.723:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 252.305872][ T27] audit: type=1326 audit(1792191491.723:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 252.335857][ T27] audit: type=1326 audit(1792191491.723:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 252.390702][ T27] audit: type=1326 audit(1792191491.723:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7ffc0000 [ 253.471814][ T8245] loop1: detected capacity change from 0 to 736 [ 254.309569][ T8264] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1521'. [ 254.681472][ T8275] overlayfs: missing 'workdir' [ 255.555342][ T8307] overlayfs: missing 'workdir' [ 255.571620][ T8304] 9pnet_fd: Insufficient options for proto=fd [ 256.171481][ T8330] FAULT_INJECTION: forcing a failure. [ 256.171481][ T8330] name fail_futex, interval 1, probability 0, space 0, times 0 [ 256.190889][ T8330] CPU: 0 PID: 8330 Comm: syz.2.1547 Not tainted syzkaller #0 [ 256.198368][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 256.208474][ T8330] Call Trace: [ 256.211805][ T8330] [ 256.214786][ T8330] dump_stack_lvl+0x188/0x24e [ 256.219538][ T8330] ? show_regs_print_info+0x12/0x12 [ 256.224794][ T8330] ? load_image+0x410/0x410 [ 256.229382][ T8330] ? __lock_acquire+0x7ea0/0x7ea0 [ 256.234489][ T8330] should_fail_ex+0x390/0x4c0 [ 256.239272][ T8330] get_futex_key+0x1b1/0x1000 [ 256.244025][ T8330] ? futex_setup_timer+0xc0/0xc0 [ 256.249048][ T8330] futex_wake+0x123/0x4f0 [ 256.253451][ T8330] ? futex_wake_mark+0x150/0x150 [ 256.258466][ T8330] ? __lock_acquire+0x7ea0/0x7ea0 [ 256.263561][ T8330] ? file_end_write+0x156/0x250 [ 256.268490][ T8330] ? vfs_write+0x777/0x9a0 [ 256.272976][ T8330] do_futex+0x2e2/0x320 [ 256.277203][ T8330] ? __ia32_sys_get_robust_list+0x100/0x100 [ 256.283178][ T8330] __se_sys_futex+0x381/0x410 [ 256.287961][ T8330] ? __x64_sys_futex+0xf0/0xf0 [ 256.292822][ T8330] ? __x64_sys_futex+0x1d/0xf0 [ 256.297650][ T8330] do_syscall_64+0x4c/0xa0 [ 256.302172][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 256.306917][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 256.311658][ T8330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.317608][ T8330] RIP: 0033:0x7f296bb9e559 [ 256.322087][ T8330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.341754][ T8330] RSP: 002b:00007f296c9a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 256.350351][ T8330] RAX: ffffffffffffffda RBX: 00007f296be25fa8 RCX: 00007f296bb9e559 [ 256.358385][ T8330] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f296be25fac [ 256.366415][ T8330] RBP: 00007f296be25fa0 R08: 003312ae784a186c R09: 0000000000000000 [ 256.374451][ T8330] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 256.382490][ T8330] R13: 00007f296be26038 R14: 00007ffee8ebef60 R15: 00007ffee8ebf048 [ 256.390563][ T8330] [ 256.611879][ T8337] overlayfs: missing 'workdir' [ 257.051963][ T8348] 9pnet_fd: Insufficient options for proto=fd [ 257.384952][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 257.384969][ T27] audit: type=1326 audit(1792191497.233:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.0.1554" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8699e559 code=0x7fc00000 [ 257.514521][ T27] audit: type=1326 audit(1792191497.283:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.0.1554" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7e8699e559 code=0x7fc00000 [ 257.609421][ T27] audit: type=1326 audit(1792191497.283:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.0.1554" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8699e559 code=0x7fc00000 [ 257.743449][ T8363] FAULT_INJECTION: forcing a failure. [ 257.743449][ T8363] name fail_futex, interval 1, probability 0, space 0, times 0 [ 257.777897][ T8363] CPU: 0 PID: 8363 Comm: syz.2.1559 Not tainted syzkaller #0 [ 257.785355][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 257.795550][ T8363] Call Trace: [ 257.798878][ T8363] [ 257.801860][ T8363] dump_stack_lvl+0x188/0x24e [ 257.806606][ T8363] ? show_regs_print_info+0x12/0x12 [ 257.811899][ T8363] ? load_image+0x410/0x410 [ 257.816459][ T8363] ? __lock_acquire+0x7ea0/0x7ea0 [ 257.821642][ T8363] should_fail_ex+0x390/0x4c0 [ 257.826394][ T8363] get_futex_key+0x1b1/0x1000 [ 257.831236][ T8363] ? futex_setup_timer+0xc0/0xc0 [ 257.836236][ T8363] futex_wake+0x123/0x4f0 [ 257.840742][ T8363] ? futex_wake_mark+0x150/0x150 [ 257.845741][ T8363] ? __lock_acquire+0x7ea0/0x7ea0 [ 257.850832][ T8363] ? file_end_write+0x156/0x250 [ 257.855752][ T8363] ? vfs_write+0x777/0x9a0 [ 257.860243][ T8363] do_futex+0x2e2/0x320 [ 257.864470][ T8363] ? __ia32_sys_get_robust_list+0x100/0x100 [ 257.870531][ T8363] __se_sys_futex+0x381/0x410 [ 257.875272][ T8363] ? __x64_sys_futex+0xf0/0xf0 [ 257.880126][ T8363] ? __x64_sys_futex+0x1d/0xf0 [ 257.884960][ T8363] do_syscall_64+0x4c/0xa0 [ 257.889452][ T8363] ? clear_bhb_loop+0x60/0xb0 [ 257.894206][ T8363] ? clear_bhb_loop+0x60/0xb0 [ 257.898954][ T8363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.904906][ T8363] RIP: 0033:0x7f296bb9e559 [ 257.909364][ T8363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.929065][ T8363] RSP: 002b:00007f296c9a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 257.937547][ T8363] RAX: ffffffffffffffda RBX: 00007f296be25fa8 RCX: 00007f296bb9e559 [ 257.945573][ T8363] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f296be25fac [ 257.953619][ T8363] RBP: 00007f296be25fa0 R08: 00197167155a48da R09: 0000000000000000 [ 257.961632][ T8363] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 257.969677][ T8363] R13: 00007f296be26038 R14: 00007ffee8ebef60 R15: 00007ffee8ebf048 [ 257.977745][ T8363] [ 258.397354][ T8379] loop2: detected capacity change from 0 to 16 [ 258.430083][ T8379] erofs: (device loop2): mounted with root inode @ nid 36. [ 258.929569][ T8395] FAULT_INJECTION: forcing a failure. [ 258.929569][ T8395] name fail_futex, interval 1, probability 0, space 0, times 0 [ 258.961846][ T8395] CPU: 0 PID: 8395 Comm: syz.3.1572 Not tainted syzkaller #0 [ 258.969366][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 258.979483][ T8395] Call Trace: [ 258.982826][ T8395] [ 258.985820][ T8395] dump_stack_lvl+0x188/0x24e [ 258.990685][ T8395] ? show_regs_print_info+0x12/0x12 [ 258.995968][ T8395] ? load_image+0x410/0x410 [ 259.000566][ T8395] ? __lock_acquire+0x7ea0/0x7ea0 [ 259.005700][ T8395] should_fail_ex+0x390/0x4c0 [ 259.010464][ T8395] get_futex_key+0x1b1/0x1000 [ 259.015221][ T8395] ? futex_setup_timer+0xc0/0xc0 [ 259.020237][ T8395] futex_wake+0x123/0x4f0 [ 259.024825][ T8395] ? futex_wake_mark+0x150/0x150 [ 259.029836][ T8395] ? __lock_acquire+0x7ea0/0x7ea0 [ 259.034973][ T8395] ? file_end_write+0x156/0x250 [ 259.039913][ T8395] ? vfs_write+0x777/0x9a0 [ 259.044413][ T8395] do_futex+0x2e2/0x320 [ 259.048649][ T8395] ? __ia32_sys_get_robust_list+0x100/0x100 [ 259.054627][ T8395] __se_sys_futex+0x381/0x410 [ 259.059380][ T8395] ? __x64_sys_futex+0xf0/0xf0 [ 259.064213][ T8395] ? __x64_sys_futex+0x1d/0xf0 [ 259.069062][ T8395] do_syscall_64+0x4c/0xa0 [ 259.073558][ T8395] ? clear_bhb_loop+0x60/0xb0 [ 259.078303][ T8395] ? clear_bhb_loop+0x60/0xb0 [ 259.083058][ T8395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.089039][ T8395] RIP: 0033:0x7f3c9859e559 [ 259.093522][ T8395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.113277][ T8395] RSP: 002b:00007f3c995100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 259.121840][ T8395] RAX: ffffffffffffffda RBX: 00007f3c98825fa8 RCX: 00007f3c9859e559 [ 259.129873][ T8395] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c98825fac [ 259.137967][ T8395] RBP: 00007f3c98825fa0 R08: 0024c492ab61a9e4 R09: 0000000000000000 [ 259.146024][ T8395] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 259.154267][ T8395] R13: 00007f3c98826038 R14: 00007ffc94710880 R15: 00007ffc94710968 [ 259.162353][ T8395] [ 259.539873][ T8411] ucma_write: process 752 (syz.0.1578) changed security contexts after opening file descriptor, this is not allowed. [ 260.581906][ T8440] loop2: detected capacity change from 0 to 8192 [ 260.674667][ T8440] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 260.699428][ T8440] FAT-fs (loop2): Filesystem has been set read-only [ 261.704846][ T27] audit: type=1326 audit(1792191501.553:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.3.1594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 261.733713][ T27] audit: type=1326 audit(1792191501.553:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.3.1594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 261.812747][ T27] audit: type=1326 audit(1792191501.553:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.3.1594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 261.838524][ T27] audit: type=1326 audit(1792191501.553:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.3.1594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 261.877983][ T27] audit: type=1326 audit(1792191501.553:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.3.1594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 261.936890][ T27] audit: type=1326 audit(1792191501.553:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.3.1594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 262.017994][ T27] audit: type=1326 audit(1792191501.553:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.3.1594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 262.268251][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.275169][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.124152][ T8532] FAULT_INJECTION: forcing a failure. [ 264.124152][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 264.180886][ T8532] CPU: 0 PID: 8532 Comm: syz.0.1624 Not tainted syzkaller #0 [ 264.188710][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 264.198824][ T8532] Call Trace: [ 264.202159][ T8532] [ 264.205143][ T8532] dump_stack_lvl+0x188/0x24e [ 264.209902][ T8532] ? show_regs_print_info+0x12/0x12 [ 264.215169][ T8532] ? load_image+0x410/0x410 [ 264.219748][ T8532] ? __might_sleep+0xd0/0xd0 [ 264.224401][ T8532] ? __lock_acquire+0x7ea0/0x7ea0 [ 264.229617][ T8532] should_fail_ex+0x390/0x4c0 [ 264.234478][ T8532] should_failslab+0x5/0x20 [ 264.239036][ T8532] slab_pre_alloc_hook+0x59/0x300 [ 264.244145][ T8532] kmem_cache_alloc+0x56/0x2f0 [ 264.248979][ T8532] ? mpol_new+0x165/0x300 [ 264.253390][ T8532] mpol_new+0x165/0x300 [ 264.257627][ T8532] __se_sys_mbind+0x401/0x810 [ 264.262379][ T8532] ? __ia32_sys_get_robust_list+0x100/0x100 [ 264.268345][ T8532] ? __x64_sys_mbind+0xf0/0xf0 [ 264.273200][ T8532] ? lock_chain_count+0x20/0x20 [ 264.278137][ T8532] ? __x64_sys_mbind+0x1d/0xf0 [ 264.282994][ T8532] do_syscall_64+0x4c/0xa0 [ 264.287483][ T8532] ? clear_bhb_loop+0x60/0xb0 [ 264.292228][ T8532] ? clear_bhb_loop+0x60/0xb0 [ 264.296984][ T8532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.302955][ T8532] RIP: 0033:0x7f7e8699e559 [ 264.307420][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.327096][ T8532] RSP: 002b:00007f7e8785d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 264.335576][ T8532] RAX: ffffffffffffffda RBX: 00007f7e86c25fa0 RCX: 00007f7e8699e559 [ 264.343608][ T8532] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 264.351638][ T8532] RBP: 00007f7e86a358b0 R08: 0000000000000000 R09: 0000000000000002 [ 264.359672][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.367699][ T8532] R13: 00007f7e86c26038 R14: 00007f7e86c25fa0 R15: 00007ffdb6b95278 [ 264.375743][ T8532] [ 265.003070][ T8552] loop0: detected capacity change from 0 to 256 [ 265.270059][ T8561] loop0: detected capacity change from 0 to 128 [ 266.939704][ T8624] loop4: detected capacity change from 0 to 256 [ 266.966549][ T8624] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.997250][ T8624] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.132176][ T8626] loop1: detected capacity change from 0 to 8192 [ 267.169133][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1663'. [ 267.215987][ T4274] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 267.230650][ T4274] FAT-fs (loop4): Filesystem has been set read-only [ 267.256585][ T4274] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 267.639582][ T8633] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 267.683163][ T8633] FAT-fs (loop1): Filesystem has been set read-only [ 267.798968][ T8626] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 267.822587][ T8636] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 267.872111][ T8626] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 268.866799][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.882399][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.891422][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.901155][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.909302][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 268.920191][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.966474][ T8656] rxe_eth0 speed is unknown, defaulting to 1000 [ 269.718737][ T8656] chnl_net:caif_netlink_parms(): no params data found [ 269.933048][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.965170][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.979131][ T8656] device bridge_slave_0 entered promiscuous mode [ 269.989740][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.997423][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.006549][ T8656] device bridge_slave_1 entered promiscuous mode [ 270.043017][ T8656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.058565][ T8656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.150891][ T8656] team0: Port device team_slave_0 added [ 270.181875][ T8656] team0: Port device team_slave_1 added [ 270.259364][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.272214][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.331073][ T8700] loop0: detected capacity change from 0 to 512 [ 270.336111][ T8656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.362118][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.402788][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.498895][ T8656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.643780][ T8656] device hsr_slave_0 entered promiscuous mode [ 270.683686][ T8656] device hsr_slave_1 entered promiscuous mode [ 270.710918][ T8656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.729924][ T8656] Cannot create hsr debugfs directory [ 270.985703][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 271.311769][ T8656] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.350551][ T8656] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.387559][ T8656] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.416746][ T8656] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.750732][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.804911][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.836967][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.866428][ T8656] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.906364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.930331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.973013][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.980320][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.018028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.049869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.076092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.103566][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.112325][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.143133][ T8733] overlayfs: unrecognized mount option "verity=require" or missing value [ 272.155157][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.180157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.243570][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.282645][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.304264][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.334174][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.344082][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.380576][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.403437][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.443881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.472700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.511828][ T8656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.879574][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1711'. [ 273.066290][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 273.353251][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.381326][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.418725][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.972661][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1722'. [ 273.994433][ T8793] rxe_eth0 speed is unknown, defaulting to 1000 [ 274.476145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.497713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.556974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.588164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.624979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.646438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.663325][ T8656] device veth0_vlan entered promiscuous mode [ 274.692818][ T8656] device veth1_vlan entered promiscuous mode [ 274.809500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.846141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.874992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.894560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.925759][ T8656] device veth0_macvtap entered promiscuous mode [ 274.961465][ T8656] device veth1_macvtap entered promiscuous mode [ 275.033421][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.054702][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.067376][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.091028][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.105865][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.126702][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.145551][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 275.145958][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.185328][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.237657][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.277289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.292308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.305040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.331320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.363255][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.391030][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.416887][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.435124][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.448740][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.459834][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.473243][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.494311][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.514274][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.536045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.554206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.584333][ T8656] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.597172][ T8656] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.613552][ T8656] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.632804][ T8656] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.879409][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.911093][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.959542][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.996649][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.004574][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.022346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.657080][ T8861] overlayfs: failed to resolve './bus': -2 [ 276.896746][ T8868] loop7: detected capacity change from 0 to 8 [ 276.933779][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.943123][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.002911][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.012317][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.025195][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.034785][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.078867][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.088290][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.152800][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.162388][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.172598][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.182021][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.233775][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.233822][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 277.243510][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.363891][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.373210][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.383822][ T8868] ldm_validate_partition_table(): Disk read failed. [ 277.476832][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.486444][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.506279][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.515581][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.527365][ T8868] Dev loop7: unable to read RDB block 0 [ 277.544016][ T8868] loop7: unable to read partition table [ 277.550982][ T8868] loop7: partition table beyond EOD, truncated [ 277.568437][ T8868] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 277.589352][ T8872] ldm_validate_partition_table(): Disk read failed. [ 277.652174][ T8872] Dev loop7: unable to read RDB block 0 [ 277.718992][ T8872] loop7: unable to read partition table [ 277.745817][ T8872] loop7: partition table beyond EOD, truncated [ 278.136168][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.269198][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.354992][ T8908] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 278.384922][ T8908] pit: kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 278.435086][ T8908] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 278.436052][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.486390][ T8908] pit: kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 278.502837][ T8908] pit: kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 278.535287][ T8908] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 278.550460][ T8914] overlayfs: failed to resolve './bus': -2 [ 278.564342][ T8908] pit: kvm: requested 34361 ns i8254 timer period limited to 200000 ns [ 278.614130][ T8908] pit: kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 278.630519][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.674986][ T8908] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 278.706074][ T8908] pit: kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 279.033123][ T8925] device syzkaller1 entered promiscuous mode [ 280.297329][ T8967] overlayfs: failed to resolve './bus': -2 [ 280.495796][ T8973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1773'. [ 281.223778][ T8996] FAULT_INJECTION: forcing a failure. [ 281.223778][ T8996] name failslab, interval 1, probability 0, space 0, times 0 [ 281.281924][ T8996] CPU: 0 PID: 8996 Comm: syz.5.1781 Not tainted syzkaller #0 [ 281.289402][ T8996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 281.299520][ T8996] Call Trace: [ 281.302845][ T8996] [ 281.305824][ T8996] dump_stack_lvl+0x188/0x24e [ 281.310574][ T8996] ? show_regs_print_info+0x12/0x12 [ 281.315845][ T8996] ? load_image+0x410/0x410 [ 281.320409][ T8996] ? __might_sleep+0xd0/0xd0 [ 281.325087][ T8996] ? __lock_acquire+0x7ea0/0x7ea0 [ 281.330182][ T8996] should_fail_ex+0x390/0x4c0 [ 281.334932][ T8996] should_failslab+0x5/0x20 [ 281.339492][ T8996] slab_pre_alloc_hook+0x59/0x300 [ 281.344621][ T8996] kmem_cache_alloc+0x56/0x2f0 [ 281.349444][ T8996] ? getname_flags+0xb7/0x500 [ 281.354170][ T8996] getname_flags+0xb7/0x500 [ 281.358705][ T8996] ? syscall_enter_from_user_mode+0x21/0x80 [ 281.364675][ T8996] __x64_sys_unlink+0x38/0x50 [ 281.369394][ T8996] do_syscall_64+0x4c/0xa0 [ 281.373856][ T8996] ? clear_bhb_loop+0x60/0xb0 [ 281.378574][ T8996] ? clear_bhb_loop+0x60/0xb0 [ 281.383311][ T8996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.389241][ T8996] RIP: 0033:0x7f04ea99e559 [ 281.393713][ T8996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.413392][ T8996] RSP: 002b:00007f04eb8e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 281.421850][ T8996] RAX: ffffffffffffffda RBX: 00007f04eac25fa0 RCX: 00007f04ea99e559 [ 281.429861][ T8996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.437870][ T8996] RBP: 00007f04eaa358b0 R08: 0000000000000000 R09: 0000000000000000 [ 281.445874][ T8996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.453876][ T8996] R13: 00007f04eac26038 R14: 00007f04eac25fa0 R15: 00007fff537bc9c8 [ 281.461892][ T8996] [ 282.144664][ T46] device hsr_slave_0 left promiscuous mode [ 282.176829][ T46] device hsr_slave_1 left promiscuous mode [ 282.194420][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.223727][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.265876][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.306220][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.332212][ T46] device bridge_slave_1 left promiscuous mode [ 282.381601][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.424208][ T46] device bridge_slave_0 left promiscuous mode [ 282.442520][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.625647][ T46] device veth1_macvtap left promiscuous mode [ 282.642855][ T46] device veth0_macvtap left promiscuous mode [ 282.669700][ T46] device veth1_vlan left promiscuous mode [ 282.687677][ T46] device veth0_vlan left promiscuous mode [ 282.881055][ T9047] loop1: detected capacity change from 0 to 256 [ 283.559904][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1803'. [ 284.010266][ T46] bond0 (unregistering): (slave bond1): Releasing backup interface [ 284.041079][ T46] bond1 (unregistering): Released all slaves [ 284.689644][ T9095] loop2: detected capacity change from 0 to 164 [ 284.740107][ T8929] blk_print_req_error: 27 callbacks suppressed [ 284.740126][ T8929] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.325124][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 285.325143][ T27] audit: type=1326 audit(1792191525.173:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 285.435144][ T27] audit: type=1326 audit(1792191525.173:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 285.510009][ T27] audit: type=1326 audit(1792191525.183:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 285.537557][ T46] team0 (unregistering): Port device team_slave_1 removed [ 285.594090][ T27] audit: type=1326 audit(1792191525.183:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 285.633717][ T27] audit: type=1326 audit(1792191525.183:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 285.669093][ T46] team0 (unregistering): Port device team_slave_0 removed [ 285.705764][ T27] audit: type=1326 audit(1792191525.183:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 285.759684][ T9119] loop1: detected capacity change from 0 to 256 [ 285.799128][ T9119] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777" or missing value [ 285.812541][ T27] audit: type=1326 audit(1792191525.183:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 285.906774][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.931948][ T27] audit: type=1326 audit(1792191525.183:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 286.055624][ T27] audit: type=1326 audit(1792191525.183:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 286.147470][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.181295][ T27] audit: type=1326 audit(1792191525.183:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.2.1820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bb9e559 code=0x7ffc0000 [ 286.232209][ T9129] loop3: detected capacity change from 0 to 256 [ 287.197817][ T46] bond0 (unregistering): Released all slaves [ 287.350946][ T9030] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 287.415140][ T9032] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 291.445302][ T9250] overlayfs: missing 'lowerdir' [ 292.041157][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1869'. [ 293.306955][ T9284] overlayfs: missing 'lowerdir' [ 293.699378][ T9301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 293.998898][ T9307] device bridge_slave_0 left promiscuous mode [ 294.017151][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.541990][ T9328] overlayfs: missing 'lowerdir' [ 295.464317][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.072642][ T9322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.117953][ T9322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.315235][ T9363] overlayfs: missing 'lowerdir' [ 296.511289][ T9369] FAULT_INJECTION: forcing a failure. [ 296.511289][ T9369] name failslab, interval 1, probability 0, space 0, times 0 [ 296.535634][ T9369] CPU: 1 PID: 9369 Comm: syz.1.1902 Not tainted syzkaller #0 [ 296.543113][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 296.553242][ T9369] Call Trace: [ 296.556564][ T9369] [ 296.559542][ T9369] dump_stack_lvl+0x188/0x24e [ 296.564292][ T9369] ? show_regs_print_info+0x12/0x12 [ 296.569591][ T9369] ? load_image+0x410/0x410 [ 296.574157][ T9369] ? __might_sleep+0xd0/0xd0 [ 296.578804][ T9369] ? __lock_acquire+0x7ea0/0x7ea0 [ 296.583899][ T9369] should_fail_ex+0x390/0x4c0 [ 296.588655][ T9369] should_failslab+0x5/0x20 [ 296.593210][ T9369] slab_pre_alloc_hook+0x59/0x300 [ 296.598325][ T9369] ? cgroup_init_fs_context+0x50/0x3c0 [ 296.603834][ T9369] __kmem_cache_alloc_node+0x4f/0x270 [ 296.609302][ T9369] ? cgroup_init_fs_context+0x50/0x3c0 [ 296.614822][ T9369] kmalloc_trace+0x26/0xe0 [ 296.619300][ T9369] cgroup_init_fs_context+0x50/0x3c0 [ 296.624654][ T9369] ? cgroup_do_get_tree+0x510/0x510 [ 296.629910][ T9369] alloc_fs_context+0x628/0x7d0 [ 296.634932][ T9369] __se_sys_fsopen+0xa0/0x2c0 [ 296.639676][ T9369] do_syscall_64+0x4c/0xa0 [ 296.644211][ T9369] ? clear_bhb_loop+0x60/0xb0 [ 296.648955][ T9369] ? clear_bhb_loop+0x60/0xb0 [ 296.653712][ T9369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.659763][ T9369] RIP: 0033:0x7f603179e559 [ 296.664234][ T9369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.684039][ T9369] RSP: 002b:00007f6032685028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 296.692525][ T9369] RAX: ffffffffffffffda RBX: 00007f6031a25fa0 RCX: 00007f603179e559 [ 296.700554][ T9369] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 296.708670][ T9369] RBP: 00007f60318358b0 R08: 0000000000000000 R09: 0000000000000000 [ 296.716687][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.724799][ T9369] R13: 00007f6031a26038 R14: 00007f6031a25fa0 R15: 00007ffc11ebbc98 [ 296.732843][ T9369] [ 297.282594][ T9387] loop1: detected capacity change from 0 to 164 [ 297.422897][ T9322] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.436272][ T9322] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.450626][ T9322] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.460155][ T9322] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.576166][ T9393] overlayfs: missing 'lowerdir' [ 298.026825][ T9405] program syz.2.1919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.343365][ T9420] loop5: detected capacity change from 0 to 128 [ 298.851149][ T9438] create_pit_timer: 14 callbacks suppressed [ 298.851172][ T9438] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 298.890587][ T9438] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 298.916009][ T9438] pit: kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 298.954117][ T9438] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 298.995558][ T9438] pit: kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 299.037387][ T9438] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 299.068715][ T9438] pit: kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 299.119246][ T9438] pit: kvm: requested 161752 ns i8254 timer period limited to 200000 ns [ 299.171734][ T9438] pit: kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 299.226760][ T9438] pit: kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 301.051688][ T9508] device bridge_slave_1 left promiscuous mode [ 301.104169][ T9508] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.176104][ T9508] bond0: (slave bond_slave_0): Releasing backup interface [ 301.237940][ T9508] bond0: (slave bond_slave_1): Releasing backup interface [ 301.279415][ T9508] team0: Port device team_slave_0 removed [ 301.309526][ T9508] team0: Port device team_slave_1 removed [ 301.331598][ T9508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.379214][ T9508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.647254][ T9523] FAULT_INJECTION: forcing a failure. [ 301.647254][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 301.723720][ T9523] CPU: 0 PID: 9523 Comm: syz.2.1954 Not tainted syzkaller #0 [ 301.731192][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 301.741306][ T9523] Call Trace: [ 301.744636][ T9523] [ 301.747703][ T9523] dump_stack_lvl+0x188/0x24e [ 301.752450][ T9523] ? show_regs_print_info+0x12/0x12 [ 301.757709][ T9523] ? load_image+0x410/0x410 [ 301.762277][ T9523] ? __might_sleep+0xd0/0xd0 [ 301.766926][ T9523] ? __lock_acquire+0x7ea0/0x7ea0 [ 301.772026][ T9523] should_fail_ex+0x390/0x4c0 [ 301.776777][ T9523] should_failslab+0x5/0x20 [ 301.781338][ T9523] slab_pre_alloc_hook+0x59/0x300 [ 301.786431][ T9523] kmem_cache_alloc+0x56/0x2f0 [ 301.791261][ T9523] ? getname_flags+0xb7/0x500 [ 301.796006][ T9523] getname_flags+0xb7/0x500 [ 301.800565][ T9523] ? syscall_enter_from_user_mode+0x21/0x80 [ 301.806541][ T9523] __x64_sys_unlink+0x38/0x50 [ 301.811304][ T9523] do_syscall_64+0x4c/0xa0 [ 301.815783][ T9523] ? clear_bhb_loop+0x60/0xb0 [ 301.820558][ T9523] ? clear_bhb_loop+0x60/0xb0 [ 301.825325][ T9523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.831277][ T9523] RIP: 0033:0x7f296bb9e559 [ 301.835747][ T9523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.855762][ T9523] RSP: 002b:00007f296c9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 301.864242][ T9523] RAX: ffffffffffffffda RBX: 00007f296be25fa0 RCX: 00007f296bb9e559 [ 301.872362][ T9523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.880394][ T9523] RBP: 00007f296bc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 301.888439][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.896474][ T9523] R13: 00007f296be26038 R14: 00007f296be25fa0 R15: 00007ffee8ebf048 [ 301.904581][ T9523] [ 303.493152][ T9573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1971'. [ 304.968985][ T9607] sctp: [Deprecated]: syz.3.1981 (pid 9607) Use of int in max_burst socket option deprecated. [ 304.968985][ T9607] Use struct sctp_assoc_value instead [ 307.931339][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 307.931356][ T27] audit: type=1326 audit(1792191547.783:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.1.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7fc00000 [ 308.642380][ T27] audit: type=1326 audit(1792191548.493:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.1.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60317982d7 code=0x7fc00000 [ 308.727700][ T27] audit: type=1326 audit(1792191548.493:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.1.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f603173f8d9 code=0x7fc00000 [ 308.841232][ T27] audit: type=1326 audit(1792191548.493:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.1.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f603173f99d code=0x7fc00000 [ 308.942329][ T27] audit: type=1326 audit(1792191548.493:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.1.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f603179e559 code=0x7fc00000 [ 308.948453][ T9708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'. [ 309.598438][ T9728] device veth0_vlan left promiscuous mode [ 309.618901][ T9728] device veth0_vlan entered promiscuous mode [ 310.167127][ T27] audit: type=1326 audit(1792191550.023:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.1.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7fc00000 [ 310.754438][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2027'. [ 310.896310][ T27] audit: type=1326 audit(1792191550.753:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.1.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60317982d7 code=0x7fc00000 [ 310.997496][ T27] audit: type=1326 audit(1792191550.773:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.1.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f603173f8d9 code=0x7fc00000 [ 311.104674][ T27] audit: type=1326 audit(1792191550.773:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.1.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f603173f99d code=0x7fc00000 [ 311.177838][ T27] audit: type=1326 audit(1792191550.773:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.1.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f603179e559 code=0x7fc00000 [ 311.440100][ T9778] loop1: detected capacity change from 0 to 164 [ 311.846946][ T9786] program syz.1.2037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.990458][ T9823] program syz.3.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.310193][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 313.310211][ T27] audit: type=1326 audit(1792191553.163:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.1.2043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60317982d7 code=0x7fc00000 [ 314.024272][ T9855] program syz.3.2060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.352605][ T27] audit: type=1326 audit(1792191554.203:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.2062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 314.406733][ T27] audit: type=1326 audit(1792191554.233:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.2062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 315.067409][ T27] audit: type=1326 audit(1792191554.923:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.2062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c985982d7 code=0x7fc00000 [ 315.124856][ T9880] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 315.143447][ T27] audit: type=1326 audit(1792191554.953:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.2062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c9853f8d9 code=0x7fc00000 [ 315.257236][ T27] audit: type=1326 audit(1792191554.953:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.2062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3c9853f99d code=0x7fc00000 [ 315.369386][ T27] audit: type=1326 audit(1792191554.953:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.2062" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3c9859e559 code=0x7fc00000 [ 315.590252][ T9892] device syzkaller0 entered promiscuous mode [ 316.839621][ T4352] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 316.949892][ T9940] binder: 9938:9940 ioctl c058560f 0 returned -22 [ 317.138739][ T4352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.165540][ T4352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.185567][ T4352] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.213453][ T4352] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 317.224210][ T4352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.257441][ T4352] usb 6-1: config 0 descriptor?? [ 317.425635][ T8886] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 317.529667][ T27] audit: type=1326 audit(1792191557.383:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.2089" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7fc00000 [ 317.630598][ T8886] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 317.648037][ T8886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.664186][ T8886] usb 3-1: config 0 descriptor?? [ 317.724035][ T8886] pwc: Samsung MPC-C10 USB webcam detected. [ 317.825086][ T4352] usbhid 6-1:0.0: can't add hid device: -71 [ 317.845919][ T4352] usbhid: probe of 6-1:0.0 failed with error -71 [ 317.892285][ T4352] usb 6-1: USB disconnect, device number 2 [ 317.909599][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.946834][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.006083][ T9940] ------------[ cut here ]------------ [ 318.011921][ T9940] WARNING: CPU: 0 PID: 9940 at include/linux/fs.h:509 hugetlb_split+0x234/0x2a0 [ 318.021304][ T9940] Modules linked in: [ 318.026033][ T9940] CPU: 0 PID: 9940 Comm: syz.2.2086 Not tainted syzkaller #0 [ 318.033534][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 318.044512][ T9940] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 318.050119][ T9940] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 b8 4e b4 ff 0f 0b e9 65 fe ff ff e8 ac 4e b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 e4 06 01 8f 80 e1 07 80 c1 03 38 c1 [ 318.069867][ T9952] program syz.0.2091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.070992][ T9940] RSP: 0018:ffffc90004cf77e8 EFLAGS: 00010283 [ 318.086856][ T9940] RAX: ffffffff81cdf7d4 RBX: 0000200000400000 RCX: 0000000000080000 [ 318.095114][ T9940] RDX: ffffc90005fc1000 RSI: 0000000000000be9 RDI: 0000000000000bea [ 318.103382][ T9940] RBP: 0000000000000000 R08: ffff88802abf5aef R09: 1ffff1100557eb5d [ 318.111662][ T9940] R10: dffffc0000000000 R11: ffffed100557eb5e R12: ffff8880562cd658 [ 318.119859][ T9940] R13: dffffc0000000000 R14: ffff8880562cd5e8 R15: ffff888027ba3d38 [ 318.128396][ T9940] FS: 00007f296c9a76c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 318.137749][ T9940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.145273][ T9940] CR2: 0000001b2fe06ff8 CR3: 00000000562d2000 CR4: 00000000003506f0 [ 318.153448][ T9940] DR0: 0000000000000009 DR1: 00000000000000c9 DR2: 00000000000000f3 [ 318.161598][ T9940] DR3: 00000000000000c0 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.169776][ T9940] Call Trace: [ 318.173644][ T9940] [ 318.176811][ T9940] __vma_adjust+0x553/0x1d00 [ 318.183011][ T9940] ? lockdep_softirqs_off+0x430/0x430 [ 318.189497][ T9940] ? validate_mm+0x2e0/0x2e0 [ 318.194188][ T9940] ? __init_rwsem+0x11e/0x160 [ 318.199036][ T9940] ? hugetlb_vm_op_open+0x332/0x540 [ 318.204412][ T9940] __split_vma+0x3a2/0x4f0 [ 318.209304][ T9940] userfaultfd_ioctl+0x36d0/0x3f90 [ 318.214521][ T9940] ? userfaultfd_poll+0x1c0/0x1c0 [ 318.219756][ T9940] ? tomoyo_path_number_perm+0x205/0x650 [ 318.225858][ T27] audit: type=1326 audit(1792191558.073:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.2089" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f603179e559 code=0x7fc00000 [ 318.225860][ T9940] ? __lock_acquire+0x7ea0/0x7ea0 [ 318.255141][ T9940] ? slab_free_freelist_hook+0x133/0x1b0 [ 318.261031][ T9940] ? tomoyo_path_number_perm+0x4fb/0x650 [ 318.266779][ T9940] ? __kmem_cache_free+0xb6/0x200 [ 318.271884][ T9940] ? tomoyo_path_number_perm+0x205/0x650 [ 318.277674][ T9940] ? tomoyo_path_number_perm+0x5a4/0x650 [ 318.283498][ T9940] ? tomoyo_path_number_perm+0x205/0x650 [ 318.289284][ T9940] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 318.294884][ T9940] ? bpf_lsm_file_ioctl+0x5/0x10 [ 318.299973][ T9940] ? security_file_ioctl+0x7c/0xa0 [ 318.305159][ T9940] ? userfaultfd_poll+0x1c0/0x1c0 [ 318.310408][ T9940] __se_sys_ioctl+0xfa/0x170 [ 318.315072][ T9940] do_syscall_64+0x4c/0xa0 [ 318.319646][ T9940] ? clear_bhb_loop+0x60/0xb0 [ 318.324431][ T9940] ? clear_bhb_loop+0x60/0xb0 [ 318.329226][ T9940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.335192][ T9940] RIP: 0033:0x7f296bb9e559 [ 318.339719][ T9940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.359978][ T9940] RSP: 002b:00007f296c9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.368765][ T9940] RAX: ffffffffffffffda RBX: 00007f296be25fa0 RCX: 00007f296bb9e559 [ 318.376855][ T9940] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 000000000000000a [ 318.384979][ T9940] RBP: 00007f296bc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 318.393091][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.398926][ T27] audit: type=1326 audit(1792191558.073:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.2089" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7fc00000 [ 318.401196][ T27] audit: type=1326 audit(1792191558.073:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.2089" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603179e559 code=0x7fc00000 [ 318.425531][ T9940] R13: 00007f296be26038 R14: 00007f296be25fa0 R15: 00007ffee8ebf048 [ 318.425574][ T9940] [ 318.425586][ T9940] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 318.425600][ T9940] CPU: 0 PID: 9940 Comm: syz.2.2086 Not tainted syzkaller #0 [ 318.425621][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 318.425633][ T9940] Call Trace: [ 318.425642][ T9940] [ 318.425650][ T9940] dump_stack_lvl+0x188/0x24e [ 318.425681][ T9940] ? memcpy+0x3c/0x60 [ 318.425703][ T9940] ? show_regs_print_info+0x12/0x12 [ 318.425731][ T9940] ? load_image+0x410/0x410 [ 318.425762][ T9940] panic+0x2d3/0x710 [ 318.425799][ T9940] ? bpf_jit_dump+0xd0/0xd0 [ 318.425847][ T9940] __warn+0x2f8/0x4f0 [ 318.425913][ T9940] ? hugetlb_split+0x234/0x2a0 [ 318.426021][ T9940] ? hugetlb_split+0x234/0x2a0 [ 318.426109][ T9940] report_bug+0x2ba/0x4f0 [ 318.426177][ T9940] ? hugetlb_split+0x234/0x2a0 [ 318.426310][ T9940] handle_bug+0x3a/0x70 [ 318.426385][ T9940] exc_invalid_op+0x16/0x40 [ 318.426453][ T9940] asm_exc_invalid_op+0x16/0x20 [ 318.426526][ T9940] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 318.426593][ T9940] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 b8 4e b4 ff 0f 0b e9 65 fe ff ff e8 ac 4e b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 e4 06 01 8f 80 e1 07 80 c1 03 38 c1 [ 318.426646][ T9940] RSP: 0018:ffffc90004cf77e8 EFLAGS: 00010283 [ 318.426701][ T9940] RAX: ffffffff81cdf7d4 RBX: 0000200000400000 RCX: 0000000000080000 [ 318.426750][ T9940] RDX: ffffc90005fc1000 RSI: 0000000000000be9 RDI: 0000000000000bea [ 318.426785][ T9940] RBP: 0000000000000000 R08: ffff88802abf5aef R09: 1ffff1100557eb5d [ 318.426828][ T9940] R10: dffffc0000000000 R11: ffffed100557eb5e R12: ffff8880562cd658 [ 318.426871][ T9940] R13: dffffc0000000000 R14: ffff8880562cd5e8 R15: ffff888027ba3d38 [ 318.426936][ T9940] ? hugetlb_split+0x234/0x2a0 [ 318.427020][ T9940] ? hugetlb_split+0x234/0x2a0 [ 318.427087][ T9940] __vma_adjust+0x553/0x1d00 [ 318.427194][ T9940] ? lockdep_softirqs_off+0x430/0x430 [ 318.427281][ T9940] ? validate_mm+0x2e0/0x2e0 [ 318.427427][ T9940] ? __init_rwsem+0x11e/0x160 [ 318.427518][ T9940] ? hugetlb_vm_op_open+0x332/0x540 [ 318.427586][ T9940] __split_vma+0x3a2/0x4f0 [ 318.427677][ T9940] userfaultfd_ioctl+0x36d0/0x3f90 [ 318.427780][ T9940] ? userfaultfd_poll+0x1c0/0x1c0 [ 318.427846][ T9940] ? tomoyo_path_number_perm+0x205/0x650 [ 318.427924][ T9940] ? __lock_acquire+0x7ea0/0x7ea0 [ 318.427999][ T9940] ? slab_free_freelist_hook+0x133/0x1b0 [ 318.428091][ T9940] ? tomoyo_path_number_perm+0x4fb/0x650 [ 318.428158][ T9940] ? __kmem_cache_free+0xb6/0x200 [ 318.428226][ T9940] ? tomoyo_path_number_perm+0x205/0x650 [ 318.428308][ T9940] ? tomoyo_path_number_perm+0x5a4/0x650 [ 318.428375][ T9940] ? tomoyo_path_number_perm+0x205/0x650 [ 318.428448][ T9940] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 318.428652][ T9940] ? bpf_lsm_file_ioctl+0x5/0x10 [ 318.428749][ T9940] ? security_file_ioctl+0x7c/0xa0 [ 318.428847][ T9940] ? userfaultfd_poll+0x1c0/0x1c0 [ 318.428917][ T9940] __se_sys_ioctl+0xfa/0x170 [ 318.429001][ T9940] do_syscall_64+0x4c/0xa0 [ 318.429074][ T9940] ? clear_bhb_loop+0x60/0xb0 [ 318.429139][ T9940] ? clear_bhb_loop+0x60/0xb0 [ 318.429214][ T9940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.429287][ T9940] RIP: 0033:0x7f296bb9e559 [ 318.429332][ T9940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.429384][ T9940] RSP: 002b:00007f296c9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.429449][ T9940] RAX: ffffffffffffffda RBX: 00007f296be25fa0 RCX: 00007f296bb9e559 [ 318.429492][ T9940] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 000000000000000a [ 318.429534][ T9940] RBP: 00007f296bc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 318.429568][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.429601][ T9940] R13: 00007f296be26038 R14: 00007f296be25fa0 R15: 00007ffee8ebf048 [ 318.429692][ T9940] [ 318.450503][ T9940] Kernel Offset: disabled [ 318.848982][ T9940] Rebooting in 86400 seconds..