last executing test programs: 4.489470243s ago: executing program 0 (id=669): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) socket$packet(0x11, 0x2, 0x300) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = io_uring_setup(0x28fb, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x9, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r1, r2, 0x0) 3.858705916s ago: executing program 0 (id=673): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x6000002e, 0xffffffffffffffff, 0x0) 3.590884842s ago: executing program 3 (id=676): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000200)={0x2000, 0x11b000}) 3.540476663s ago: executing program 1 (id=677): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x2, 0x9], 0x2) io_uring_enter(r0, 0x1e61, 0x9296, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000160001"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 3.487977744s ago: executing program 2 (id=678): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x890) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000a40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x1, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xcd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x20000000, 0x0, 0x0, 0x92c, 0x3, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6ef, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff1e97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80003, 0x0, 0x9, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0x4000100000001]}) socket$netlink(0x10, 0x3, 0x6) open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16=r2, @ANYRES32=r2], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000300), 0x5, 0x210000) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000340)={0x1, 0x2, 0x6, 0x4, 0x1, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_usbip_server_init(0x4) 3.486589185s ago: executing program 0 (id=679): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb0, 0x1c080, 0xa, 0x28002f7}) io_uring_enter(r0, 0x60a, 0x552f, 0x16, 0x0, 0x0) 3.324337979s ago: executing program 1 (id=680): rt_sigtimedwait(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0x104000000a]}, 0x0, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.292787236s ago: executing program 0 (id=681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0xffffffa1, 0x0, 0x1, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 3.237472007s ago: executing program 3 (id=682): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r2, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 3.020313993s ago: executing program 3 (id=683): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) socket$packet(0x11, 0x2, 0x300) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = io_uring_setup(0x28fb, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x9, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r1, r2, 0x0) 2.944610939s ago: executing program 4 (id=684): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) bpf$PROG_LOAD(0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) 2.374613079s ago: executing program 3 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0000520006000500", @ANYRES32=r3], 0x2c}}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0x92, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x700, 0x80, 0x4, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @remote}, &(0x7f0000000300)=0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x10000008ebc, 0x0) 2.295686745s ago: executing program 0 (id=686): syz_emit_ethernet(0x42, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xe, @broadcast, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x42}}}}}, 0x0) 2.27424285s ago: executing program 1 (id=687): setns(0xc9, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x4009) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @broadcast}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='-v\x00\xda\x13B\xbfi\xcd\x966\x00\x00\x00\x00\x15\xf5\x9b=\xd0\xb80\xd7w5Oa\xbdv\xa6\x8aM\xcffvT\xaa\x84\xf0\x82\x05\xddUc\xcd\xea4.\x8f\xa4`\'\xc5\xe3~\x8c\x80\x88.\x1f)d\x03\xa58F\x83\x11\xe3\x0e\x80\x1c\xfe\x06d\x9a.\x9aC]\xb5B\xc0\x10\xe2aS4\xf3OuE|\xe3\x1dn\xe1\xd1\x842\xaf\ncK\xba\x82\x88\xdfN` \xec\xff;\x00'/127, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4c040) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2.253820225s ago: executing program 0 (id=688): fsopen(&(0x7f0000000680)='configfs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1], 0x0) 2.100397697s ago: executing program 3 (id=689): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xffff}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r4, &(0x7f0000000340)=""/133, 0xfdef) 2.03987362s ago: executing program 2 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000000, 0x9, 0x7, 0x0, 0x5, 0x800, 0x401}]}) 1.906402758s ago: executing program 4 (id=691): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xd, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000c00)="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", 0x1c5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db0c564b01632a5f91d13ca786bc41ebeb64461f36154e392b7b547aef90734844c0eb73e91db70d5158d7ab57c27453b5130b2f7caa21eab57fe93fb63082b47498c60df4b211e48bd1904131fa5f42b3d3761ab6b995fb8890373aad2b8c06f5005771e07d98f76ab21fab6295ccc658883a0f2a3fef32b93c16d4dcaceeb4fb4d6f39ba860e3c157018ad6efb0b3628c838", 0xef}, {&(0x7f0000000940)="6cb9b5ed91ee06b8c1f742714fe71e004f3574425077e31b329aaaa4a64f8fa6270166d3bc30904b759c88abab7238eaa063fa30bb668dce79bcf9fb8acf55e27667a4ff5ad320fe390e13505bae1de7881f4104e5decd17d3f114552b2a6d3f4517296b8aa17bb5e26a0fe8046927833805834292581179f616d92dbefb90d76f9f7fea0391b305c1cb1ee06648ef3830ed26ddc63439afef93447e99e2d747cf37513deac72718a3d3d8087578a3dae42244248a398db533031d31127500000000000000b7c3e4e86de74c2b1d7de58d6722e6fa2263d79f9ba6bb4a742a5676164e6c1c256983eec5b823b19938fcbb9679528aca40a6a6c07e179a640d6c53c0e9274e8e9012d82828486dd2cce355a6200b9991fdeb00f238d610278434ce85974fb9f7bca547e6acae11ed30487f233b3dfc67c76e8325feb3cce574d683303aadb08aa8de9bb1e7b8313cd1132f165127c81ca3852f2fc918ab0b9121e815e316f9cd2d38e5e449d1d394c91e8bd17de9", 0x174}, {&(0x7f00000006c0)="92933ae6adb1fbe9f93f904b11157cbe3d27e7dbdc7f9cccef5f06a85d3511526419362ad07778698bcebc880c5e77b2b383be1189b362000797b666", 0x3c}, {&(0x7f0000000880)="e7563d3bb5ebdd5911d6455ec077369c67edc049c04cedaa94a80fda6648457f7a33c1a416dc225c16532d", 0x2b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="ef008f", 0x3}], 0x1}}], 0x3, 0xc8c0) 1.559926431s ago: executing program 4 (id=692): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x4b4}], 0x1, 0x0, 0x0) 1.295529427s ago: executing program 1 (id=693): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)='.', 0x1}], 0x1, &(0x7f0000000740)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x41, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xaa}}], 0x38, 0x4048800}, 0x10) 1.293121577s ago: executing program 2 (id=694): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) ftruncate(r0, 0xf4ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.120261764s ago: executing program 4 (id=695): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = io_uring_setup(0x28fb, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x9, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r1, r2, 0x0) 1.014251656s ago: executing program 1 (id=696): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 952.478589ms ago: executing program 1 (id=697): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 288.440399ms ago: executing program 2 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000280)) 187.321801ms ago: executing program 4 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0000520006000500", @ANYRES32=r3], 0x2c}}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0x92, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x700, 0x80, 0x4, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @remote}, &(0x7f0000000300)=0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x10000008ebc, 0x0) 158.464336ms ago: executing program 2 (id=700): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x5, 0x5, 0xdd}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000280)=0x8) 64.139036ms ago: executing program 3 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 245.58µs ago: executing program 4 (id=702): r0 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=703): setns(0xc9, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x4009) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @broadcast}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='-v\x00\xda\x13B\xbfi\xcd\x966\x00\x00\x00\x00\x15\xf5\x9b=\xd0\xb80\xd7w5Oa\xbdv\xa6\x8aM\xcffvT\xaa\x84\xf0\x82\x05\xddUc\xcd\xea4.\x8f\xa4`\'\xc5\xe3~\x8c\x80\x88.\x1f)d\x03\xa58F\x83\x11\xe3\x0e\x80\x1c\xfe\x06d\x9a.\x9aC]\xb5B\xc0\x10\xe2aS4\xf3OuE|\xe3\x1dn\xe1\xd1\x842\xaf\ncK\xba\x82\x88\xdfN` \xec\xff;\x00'/127, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4c040) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) kernel console output (not intermixed with test programs): :50:50 [ 66.811445][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.839493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.854698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.890237][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.910134][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.937617][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.939585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.959635][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.988359][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.022784][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.049978][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.065627][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.097544][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.119357][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.136685][ T4274] loop2: detected capacity change from 0 to 8192 [ 67.153832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.523065][ T4288] loop1: detected capacity change from 0 to 128 [ 67.619791][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 67.636450][ T4291] device bridge_slave_1 left promiscuous mode [ 67.686454][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.743125][ T4291] device bridge_slave_0 left promiscuous mode [ 67.750329][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.942173][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 67.962170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 67.972160][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 67.982160][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 67.992156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.106578][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.115055][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.175660][ T4297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.247375][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 68.414196][ T3828] Bluetooth: hci4: command 0x0419 tx timeout [ 68.431893][ T3828] Bluetooth: hci2: command 0x0419 tx timeout [ 68.453710][ T3828] Bluetooth: hci0: command 0x0419 tx timeout [ 68.466194][ T3828] Bluetooth: hci1: command 0x0419 tx timeout [ 68.494513][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 68.929759][ T4312] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.167370][ T25] audit: type=1326 audit(1790735469.804:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.4.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 69.382894][ T25] audit: type=1326 audit(1790735469.804:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.4.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 69.488498][ T25] audit: type=1326 audit(1790735469.804:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.4.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 69.608966][ T25] audit: type=1326 audit(1790735469.804:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.4.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 69.655179][ T25] audit: type=1326 audit(1790735469.814:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.4.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 71.220858][ T4341] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 71.296189][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.310889][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.677098][ T4365] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) getty: ttyS0: read error: Resource temporarily unavailable [ 72.168883][ T4201] Bluetooth: hci5: setting up ROME/QCA6390 Hü[ 72.370104][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. ü[ 75.322136][ C0] sched: RT throttling activated [ 75.329471][ T13] Bluetooth: hci5: command 0xfc00 tx timeout [ 75.393159][ T25] audit: type=1326 audit(1790735476.224:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 75.508254][ T25] audit: type=1326 audit(1790735476.254:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 75.559503][ T25] audit: type=1326 audit(1790735476.254:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 75.632569][ T25] audit: type=1326 audit(1790735476.254:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 75.718186][ T25] audit: type=1326 audit(1790735476.254:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 75.735743][ T4434] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.759031][ T4435] loop2: detected capacity change from 0 to 1024 [ 75.784838][ T25] audit: type=1326 audit(1790735476.254:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 75.839827][ T25] audit: type=1326 audit(1790735476.254:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 75.877397][ T4435] EXT4-fs (loop2): Ignoring removed orlov option [ 75.923674][ T25] audit: type=1326 audit(1790735476.254:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 75.983914][ T25] audit: type=1326 audit(1790735476.254:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 76.030433][ T4435] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 76.060873][ T25] audit: type=1326 audit(1790735476.254:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.45" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 76.216059][ T4463] FAULT_INJECTION: forcing a failure. [ 76.216059][ T4463] name failslab, interval 1, probability 0, space 0, times 1 [ 76.229003][ T4463] CPU: 0 PID: 4463 Comm: syz.1.61 Not tainted syzkaller #0 [ 76.236221][ T4463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.246308][ T4463] Call Trace: [ 76.249633][ T4463] [ 76.252572][ T4463] dump_stack_lvl+0x188/0x250 [ 76.257288][ T4463] ? show_regs_print_info+0x20/0x20 [ 76.262497][ T4463] ? load_image+0x410/0x410 [ 76.267016][ T4463] ? __rwlock_init+0x140/0x140 [ 76.271802][ T4463] should_fail+0x383/0x4b0 [ 76.276293][ T4463] should_failslab+0x5/0x20 [ 76.280808][ T4463] slab_pre_alloc_hook+0x51/0xc0 [ 76.285766][ T4463] kmem_cache_alloc_trace+0x47/0x290 [ 76.291071][ T4463] ? __hw_addr_add_ex+0x1ed/0x780 [ 76.296116][ T4463] __hw_addr_add_ex+0x1ed/0x780 [ 76.300990][ T4463] dev_mc_add+0x91/0x110 [ 76.305245][ T4463] igmp6_group_added+0x228/0x7c0 [ 76.310212][ T4463] ? mld_del_delrec+0xc90/0xc90 [ 76.315070][ T4463] ? mld_del_delrec+0x1af/0xc90 [ 76.319931][ T4463] ? __ipv6_dev_mc_inc+0x571/0xb20 [ 76.325056][ T4463] __ipv6_dev_mc_inc+0x959/0xb20 [ 76.330011][ T4463] addrconf_join_solict+0x101/0x180 [ 76.335217][ T4463] ? addrconf_mod_dad_work+0x120/0x120 [ 76.340695][ T4463] ? do_raw_spin_unlock+0x11d/0x230 [ 76.345908][ T4463] __ipv6_dev_ac_inc+0x644/0x820 [ 76.350863][ T4463] ipv6_sock_ac_join+0x4a3/0x6b0 [ 76.355817][ T4463] ipv6_setsockopt+0x236d/0x3cc0 [ 76.360776][ T4463] ? futex_wait_queue_me+0x16e/0x440 [ 76.366072][ T4463] ? ipv6_update_options+0x400/0x400 [ 76.371367][ T4463] ? __lock_acquire+0x7b50/0x7b50 [ 76.376411][ T4463] ? mark_lock+0x94/0x320 [ 76.380752][ T4463] ? __lock_acquire+0x1305/0x7b50 [ 76.385791][ T4463] ? mark_lock+0x94/0x320 [ 76.390138][ T4463] ? verify_lock_unused+0x140/0x140 [ 76.395351][ T4463] ? aa_label_sk_perm+0x3e6/0x540 [ 76.400395][ T4463] ? aa_sk_perm+0x910/0x910 [ 76.404927][ T4463] ? __might_sleep+0xf0/0xf0 [ 76.409531][ T4463] ? rcu_lock_release+0x9/0x20 [ 76.414306][ T4463] ? __lock_acquire+0x7b50/0x7b50 [ 76.419346][ T4463] ? aa_sk_perm+0x7dc/0x910 [ 76.423869][ T4463] ? aa_af_perm+0x340/0x340 [ 76.428380][ T4463] ? __fget_files+0x402/0x470 [ 76.433068][ T4463] ? aa_sock_opt_perm+0x74/0x100 [ 76.438019][ T4463] ? udpv6_setsockopt+0x7a/0xa0 [ 76.442881][ T4463] ? sock_common_recvmsg+0x1c0/0x1c0 [ 76.448175][ T4463] __sys_setsockopt+0x2bf/0x3d0 [ 76.453042][ T4463] __x64_sys_setsockopt+0xb1/0xc0 [ 76.458081][ T4463] do_syscall_64+0x4c/0xa0 [ 76.462505][ T4463] ? clear_bhb_loop+0x30/0x80 [ 76.467200][ T4463] ? clear_bhb_loop+0x30/0x80 [ 76.471886][ T4463] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.477811][ T4463] RIP: 0033:0x7f89beb40159 [ 76.482236][ T4463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.501854][ T4463] RSP: 002b:00007f89bcd98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.510287][ T4463] RAX: ffffffffffffffda RBX: 00007f89bedc7fa0 RCX: 00007f89beb40159 [ 76.518273][ T4463] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 76.526256][ T4463] RBP: 00007f89bebd706b R08: 0000000000000014 R09: 0000000000000000 [ 76.534242][ T4463] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 76.542229][ T4463] R13: 00007f89bedc8038 R14: 00007f89bedc7fa0 R15: 00007fff30c5f8a8 [ 76.550237][ T4463] [ 76.740856][ T4469] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 76.769800][ T4473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 77.115877][ T4497] loop1: detected capacity change from 0 to 512 [ 77.180708][ T4497] ======================================================= [ 77.180708][ T4497] WARNING: The mand mount option has been deprecated and [ 77.180708][ T4497] and is ignored by this kernel. Remove the mand [ 77.180708][ T4497] option from the mount to silence this warning. [ 77.180708][ T4497] ======================================================= [ 77.278652][ T4499] FAULT_INJECTION: forcing a failure. [ 77.278652][ T4499] name fail_futex, interval 1, probability 0, space 0, times 1 [ 77.320769][ T4499] CPU: 1 PID: 4499 Comm: syz.3.79 Not tainted syzkaller #0 [ 77.328002][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.338079][ T4499] Call Trace: [ 77.341368][ T4499] [ 77.344312][ T4499] dump_stack_lvl+0x188/0x250 [ 77.349015][ T4499] ? show_regs_print_info+0x20/0x20 [ 77.354240][ T4499] ? load_image+0x410/0x410 [ 77.358762][ T4499] should_fail+0x383/0x4b0 [ 77.363202][ T4499] get_futex_key+0x1cf/0x12d0 [ 77.367904][ T4499] ? futex_wait_restart+0x250/0x250 [ 77.373121][ T4499] futex_wake+0x101/0x540 [ 77.377510][ T4499] ? verify_lock_unused+0x140/0x140 [ 77.382721][ T4499] ? verify_lock_unused+0x140/0x140 [ 77.387936][ T4499] ? futex_wait+0x680/0x680 [ 77.392459][ T4499] do_futex+0xd83/0x12b0 [ 77.396724][ T4499] ? __might_sleep+0xf0/0xf0 [ 77.401323][ T4499] ? __might_fault+0xb7/0x110 [ 77.406011][ T4499] ? futex_exit_release+0x1c0/0x1c0 [ 77.411215][ T4499] ? __lock_acquire+0x7b50/0x7b50 [ 77.416260][ T4499] mm_release+0x278/0x3c0 [ 77.420601][ T4499] ? exit_mm_release+0x30/0x30 [ 77.425371][ T4499] ? lockdep_hardirqs_on+0x94/0x140 [ 77.430601][ T4499] exit_mm+0xaf/0x7b0 [ 77.434593][ T4499] ? perf_pmu_migrate_context+0xb70/0xb70 [ 77.440337][ T4499] ? do_exit+0x2110/0x2110 [ 77.444768][ T4499] ? __ia32_sys_timer_delete+0x40/0x40 [ 77.450244][ T4499] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 77.455729][ T4499] ? tty_audit_exit+0x149/0x1f0 [ 77.460593][ T4499] do_exit+0x5b8/0x2110 [ 77.464767][ T4499] ? put_task_struct+0x80/0x80 [ 77.469538][ T4499] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.475535][ T4499] ? _raw_spin_lock_irq+0xb7/0xf0 [ 77.480574][ T4499] do_group_exit+0x12c/0x2f0 [ 77.485160][ T4499] ? lockdep_hardirqs_on+0x94/0x140 [ 77.490354][ T4499] get_signal+0x7eb/0x12e0 [ 77.494785][ T4499] arch_do_signal_or_restart+0xe6/0x12a0 [ 77.500434][ T4499] ? futex_exit_release+0x1c0/0x1c0 [ 77.505635][ T4499] ? get_sigframe_size+0x10/0x10 [ 77.510600][ T4499] ? __context_tracking_exit+0x4c/0x80 [ 77.516071][ T4499] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.522099][ T4499] ? exit_to_user_mode_loop+0x3b/0x130 [ 77.527563][ T4499] exit_to_user_mode_loop+0x9e/0x130 [ 77.532850][ T4499] exit_to_user_mode_prepare+0xee/0x180 [ 77.538412][ T4499] syscall_exit_to_user_mode+0x16/0x40 [ 77.543889][ T4499] do_syscall_64+0x58/0xa0 [ 77.548318][ T4499] ? clear_bhb_loop+0x30/0x80 [ 77.553000][ T4499] ? clear_bhb_loop+0x30/0x80 [ 77.557693][ T4499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.563586][ T4499] RIP: 0033:0x7f06f7c88159 [ 77.568012][ T4499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.587612][ T4499] RSP: 002b:00007f06f5ee00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.596047][ T4499] RAX: fffffffffffffe00 RBX: 00007f06f7f0ffa8 RCX: 00007f06f7c88159 [ 77.604038][ T4499] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06f7f0ffa8 [ 77.612081][ T4499] RBP: 00007f06f7f0ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 77.620068][ T4499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.628103][ T4499] R13: 00007f06f7f10038 R14: 00007ffe7ea78ec0 R15: 00007ffe7ea78fa8 [ 77.636105][ T4499] [ 77.725698][ T4504] autofs4:pid:4504:autofs_fill_super: called with bogus options [ 77.768540][ T4497] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: comm syz.1.77: inode #2147418112: comm syz.1.77: iget: illegal inode # [ 77.842541][ T4497] EXT4-fs (loop1): no journal found [ 77.898777][ T4497] EXT4-fs (loop1): can't get journal size [ 77.949164][ T4497] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 78.018270][ T4517] loop2: detected capacity change from 0 to 1024 [ 78.052094][ T4497] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 78.092264][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 78.184474][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 78.204735][ T4517] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 78.218706][ T4497] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.77: Invalid inode bitmap blk 4 in block_group 0 [ 78.231676][ T4517] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 78.267914][ T4524] FAULT_INJECTION: forcing a failure. [ 78.267914][ T4524] name failslab, interval 1, probability 0, space 0, times 0 [ 78.280669][ T4517] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.84: unexpected bad inode w/o EXT4_IGET_BAD [ 78.335994][ T4524] CPU: 1 PID: 4524 Comm: syz.0.87 Not tainted syzkaller #0 [ 78.343247][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.353313][ T4524] Call Trace: [ 78.356602][ T4524] [ 78.359529][ T4524] dump_stack_lvl+0x188/0x250 [ 78.364200][ T4524] ? show_regs_print_info+0x20/0x20 [ 78.369389][ T4524] ? load_image+0x410/0x410 [ 78.373897][ T4524] ? __lock_acquire+0x7b50/0x7b50 [ 78.378922][ T4524] should_fail+0x383/0x4b0 [ 78.383385][ T4524] should_failslab+0x5/0x20 [ 78.387887][ T4524] slab_pre_alloc_hook+0x51/0xc0 [ 78.392824][ T4524] ? __alloc_file+0x25/0x240 [ 78.397403][ T4524] kmem_cache_alloc+0x3d/0x280 [ 78.402163][ T4524] __alloc_file+0x25/0x240 [ 78.406574][ T4524] alloc_empty_file+0x90/0x180 [ 78.411352][ T4524] alloc_file+0x5c/0x510 [ 78.415581][ T4524] ? do_raw_spin_unlock+0x11d/0x230 [ 78.420770][ T4524] alloc_file_pseudo+0x180/0x200 [ 78.425701][ T4524] ? alloc_empty_file_noaccount+0x80/0x80 [ 78.431423][ T4524] ? _raw_spin_unlock+0x24/0x40 [ 78.436355][ T4524] __anon_inode_getfd+0x26b/0x3d0 [ 78.441370][ T4524] ? __local_bh_enable_ip+0x136/0x1c0 [ 78.446755][ T4524] ? anon_inode_getfd+0x40/0x40 [ 78.451591][ T4524] ? do_raw_spin_unlock+0x11d/0x230 [ 78.456781][ T4524] btf_new_fd+0x77b/0x910 [ 78.461106][ T4524] __sys_bpf+0x58c/0x6f0 [ 78.465337][ T4524] ? bpf_link_show_fdinfo+0x380/0x380 [ 78.470731][ T4524] __x64_sys_bpf+0x78/0x90 [ 78.475142][ T4524] do_syscall_64+0x4c/0xa0 [ 78.479546][ T4524] ? clear_bhb_loop+0x30/0x80 [ 78.484214][ T4524] ? clear_bhb_loop+0x30/0x80 [ 78.488882][ T4524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.494768][ T4524] RIP: 0033:0x7f598a634159 [ 78.499195][ T4524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.518794][ T4524] RSP: 002b:00007f598888c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.527205][ T4524] RAX: ffffffffffffffda RBX: 00007f598a8bbfa0 RCX: 00007f598a634159 [ 78.535169][ T4524] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 78.543127][ T4524] RBP: 00007f598a6cb06b R08: 0000000000000000 R09: 0000000000000000 [ 78.551086][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.559048][ T4524] R13: 00007f598a8bc038 R14: 00007f598a8bbfa0 R15: 00007ffd43348628 [ 78.567019][ T4524] [ 78.570782][ T4517] EXT4-fs (loop2): no journal found [ 78.593946][ T4517] EXT4-fs (loop2): can't get journal size [ 78.614032][ T4517] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 78.648997][ T4517] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 16: comm syz.2.84: path /14/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 78.950095][ T4533] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 80.061998][ T4267] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 80.104303][ T4267] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.304471][ T4566] fido_id[4566]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.321207][ T4571] loop4: detected capacity change from 0 to 128 [ 80.365637][ T4571] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.437485][ T4571] FAULT_INJECTION: forcing a failure. [ 80.437485][ T4571] name failslab, interval 1, probability 0, space 0, times 0 [ 80.468247][ T4571] CPU: 1 PID: 4571 Comm: syz.4.103 Not tainted syzkaller #0 [ 80.475572][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.485620][ T4571] Call Trace: [ 80.488902][ T4571] [ 80.491830][ T4571] dump_stack_lvl+0x188/0x250 [ 80.496511][ T4571] ? show_regs_print_info+0x20/0x20 [ 80.501694][ T4571] ? load_image+0x410/0x410 [ 80.506191][ T4571] ? __might_sleep+0xf0/0xf0 [ 80.510771][ T4571] ? __lock_acquire+0x7b50/0x7b50 [ 80.515789][ T4571] should_fail+0x383/0x4b0 [ 80.520200][ T4571] should_failslab+0x5/0x20 [ 80.524693][ T4571] slab_pre_alloc_hook+0x51/0xc0 [ 80.529621][ T4571] __kmalloc_node_track_caller+0x68/0x3a0 [ 80.535325][ T4571] ? tc_ctl_action+0x785/0xba0 [ 80.540071][ T4571] ? __alloc_skb+0xf4/0x750 [ 80.544578][ T4571] ? tc_ctl_action+0x785/0xba0 [ 80.549333][ T4571] __alloc_skb+0x22c/0x750 [ 80.553745][ T4571] tc_ctl_action+0x785/0xba0 [ 80.558329][ T4571] ? tcf_free_cookie_rcu+0x40/0x40 [ 80.563424][ T4571] ? __dev_queue_xmit+0x195d/0x2e50 [ 80.568640][ T4571] ? ___sys_sendmsg+0x236/0x2e0 [ 80.573536][ T4571] ? tcf_free_cookie_rcu+0x40/0x40 [ 80.578638][ T4571] rtnetlink_rcv_msg+0x7f1/0xf10 [ 80.583574][ T4571] ? lock_chain_count+0x20/0x20 [ 80.588415][ T4571] ? rtnetlink_bind+0x80/0x80 [ 80.593079][ T4571] ? __local_bh_enable_ip+0x136/0x1c0 [ 80.598432][ T4571] ? lockdep_hardirqs_on+0x94/0x140 [ 80.603649][ T4571] ? __local_bh_enable_ip+0x136/0x1c0 [ 80.609008][ T4571] ? _local_bh_enable+0xa0/0xa0 [ 80.613864][ T4571] ? __dev_queue_xmit+0x1b64/0x2e50 [ 80.619068][ T4571] ? dev_queue_xmit+0x20/0x20 [ 80.623726][ T4571] ? memcpy+0x3c/0x60 [ 80.627706][ T4571] ? __copy_skb_header+0x3ba/0x4f0 [ 80.632832][ T4571] netlink_rcv_skb+0x1e9/0x430 [ 80.637585][ T4571] ? rtnetlink_bind+0x80/0x80 [ 80.642245][ T4571] ? netlink_ack+0xb10/0xb10 [ 80.646845][ T4571] netlink_unicast+0x78f/0x940 [ 80.651599][ T4571] netlink_sendmsg+0x8ba/0xbe0 [ 80.656348][ T4571] ? netlink_getsockopt+0x570/0x570 [ 80.661527][ T4571] ? aa_sock_msg_perm+0x94/0x150 [ 80.666454][ T4571] ? apparmor_socket_sendmsg+0x88/0x230 [ 80.671997][ T4571] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 80.677298][ T4571] ? security_socket_sendmsg+0x7c/0xa0 [ 80.682785][ T4571] ? netlink_getsockopt+0x570/0x570 [ 80.688002][ T4571] ____sys_sendmsg+0x5be/0x8f0 [ 80.692766][ T4571] ? __sys_sendmsg_sock+0x30/0x30 [ 80.697781][ T4571] ? import_iovec+0x6f/0xa0 [ 80.702269][ T4571] ___sys_sendmsg+0x236/0x2e0 [ 80.706947][ T4571] ? __sys_sendmsg+0x290/0x290 [ 80.711762][ T4571] __se_sys_sendmsg+0x1b7/0x2a0 [ 80.716615][ T4571] ? __x64_sys_sendmsg+0x80/0x80 [ 80.721568][ T4571] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.727589][ T4571] ? lockdep_hardirqs_on+0x94/0x140 [ 80.732814][ T4571] do_syscall_64+0x4c/0xa0 [ 80.737244][ T4571] ? clear_bhb_loop+0x30/0x80 [ 80.741925][ T4571] ? clear_bhb_loop+0x30/0x80 [ 80.746601][ T4571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.752518][ T4571] RIP: 0033:0x7f3b083eb159 [ 80.756920][ T4571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.776506][ T4571] RSP: 002b:00007f3b06643028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.784910][ T4571] RAX: ffffffffffffffda RBX: 00007f3b08672fa0 RCX: 00007f3b083eb159 [ 80.792862][ T4571] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 80.800812][ T4571] RBP: 00007f3b0848206b R08: 0000000000000000 R09: 0000000000000000 [ 80.808760][ T4571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.816716][ T4571] R13: 00007f3b08673038 R14: 00007f3b08672fa0 R15: 00007ffd7ab0a288 [ 80.824706][ T4571] [ 80.929487][ T4576] loop3: detected capacity change from 0 to 512 [ 80.939288][ T4577] loop0: detected capacity change from 0 to 128 [ 80.995503][ T4576] EXT4-fs (loop3): Ignoring removed nobh option [ 81.012264][ T4576] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.058009][ T4576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.542195][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 81.552172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 81.562170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 81.572169][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 81.582183][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 81.781205][ T7] cfg80211: failed to load regulatory.db [ 81.823777][ T4576] EXT4-fs (loop3): orphan file too big: 8590458880 [ 81.842437][ T4576] EXT4-fs (loop3): mount failed [ 82.106310][ T4185] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000) [ 82.209479][ T4588] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 82.216238][ T4588] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.224525][ T4588] vhci_hcd vhci_hcd.0: Device attached [ 82.262865][ T4185] FAT-fs (loop4): Filesystem has been set read-only [ 82.292059][ T4185] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.306405][ T4589] vhci_hcd: connection closed [ 82.308227][ T4242] vhci_hcd: stop threads [ 82.349030][ T4242] vhci_hcd: release socket [ 82.368901][ T4242] vhci_hcd: disconnect device [ 82.422685][ T4267] vhci_hcd: vhci_device speed not set [ 82.545161][ T4597] loop4: detected capacity change from 0 to 512 [ 82.562347][ T3828] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.730908][ T4597] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 82.794389][ T4597] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.832336][ T4201] Bluetooth: hci5: Reading QCA version information failed (-110) [ 82.840212][ T4201] Bluetooth: hci5: Retry BT power ON:0 [ 82.903485][ T3828] usb 3-1: Using ep0 maxpacket: 32 [ 83.042403][ T3828] usb 3-1: config 0 has no interfaces? [ 83.048285][ T3828] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.118072][ T3828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.131650][ T4604] FAULT_INJECTION: forcing a failure. [ 83.131650][ T4604] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 83.145688][ T4604] CPU: 0 PID: 4604 Comm: syz.1.108 Not tainted syzkaller #0 [ 83.152995][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.163062][ T4604] Call Trace: [ 83.166351][ T4604] [ 83.169287][ T4604] dump_stack_lvl+0x188/0x250 [ 83.173979][ T4604] ? show_regs_print_info+0x20/0x20 [ 83.179187][ T4604] ? load_image+0x410/0x410 [ 83.183707][ T4604] ? uncharge_page+0x490/0x490 [ 83.188488][ T4604] should_fail+0x383/0x4b0 [ 83.192922][ T4604] prepare_alloc_pages+0x1e3/0x5b0 [ 83.198078][ T4604] __alloc_pages+0x11b/0x480 [ 83.202660][ T4604] ? zone_statistics+0x170/0x170 [ 83.207611][ T4604] ? rcu_lock_acquire+0x30/0x30 [ 83.212454][ T4604] ? alloc_pages+0x452/0x560 [ 83.217051][ T4604] __get_free_pages+0x8/0x30 [ 83.221634][ T4604] __tlb_remove_page_size+0x1f2/0x3f0 [ 83.226997][ T4604] unmap_page_range+0xfcf/0x2410 [ 83.231940][ T4604] unmap_vmas+0x131/0x250 [ 83.236253][ T4604] ? unmap_page_range+0x2410/0x2410 [ 83.241434][ T4604] ? __mutex_lock_common+0x435/0x2400 [ 83.246793][ T4604] ? exit_mm_release+0x16/0x30 [ 83.251546][ T4604] exit_mmap+0x3b9/0x640 [ 83.255775][ T4604] ? vm_brk+0x20/0x20 [ 83.259750][ T4604] ? uprobe_clear_state+0x2f6/0x460 [ 83.264935][ T4604] __mmput+0x115/0x390 [ 83.268988][ T4604] exit_mm+0x632/0x7b0 [ 83.273040][ T4604] ? perf_pmu_migrate_context+0xb70/0xb70 [ 83.278750][ T4604] ? do_exit+0x2110/0x2110 [ 83.283148][ T4604] ? __ia32_sys_timer_delete+0x40/0x40 [ 83.288589][ T4604] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 83.294069][ T4604] ? tty_audit_exit+0x149/0x1f0 [ 83.298906][ T4604] do_exit+0x5b8/0x2110 [ 83.303048][ T4604] ? put_task_struct+0x80/0x80 [ 83.307797][ T4604] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.313767][ T4604] ? _raw_spin_lock_irq+0xb7/0xf0 [ 83.318781][ T4604] do_group_exit+0x12c/0x2f0 [ 83.323361][ T4604] ? lockdep_hardirqs_on+0x94/0x140 [ 83.328548][ T4604] get_signal+0x7eb/0x12e0 [ 83.332968][ T4604] arch_do_signal_or_restart+0xe6/0x12a0 [ 83.338590][ T4604] ? rcu_lock_release+0x9/0x20 [ 83.343368][ T4604] ? futex_exit_release+0x1c0/0x1c0 [ 83.348557][ T4604] ? get_sigframe_size+0x10/0x10 [ 83.353480][ T4604] ? __context_tracking_exit+0x4c/0x80 [ 83.358937][ T4604] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.364906][ T4604] ? exit_to_user_mode_loop+0x3b/0x130 [ 83.370350][ T4604] exit_to_user_mode_loop+0x9e/0x130 [ 83.375619][ T4604] exit_to_user_mode_prepare+0xee/0x180 [ 83.381151][ T4604] syscall_exit_to_user_mode+0x16/0x40 [ 83.386596][ T4604] do_syscall_64+0x58/0xa0 [ 83.390998][ T4604] ? clear_bhb_loop+0x30/0x80 [ 83.395661][ T4604] ? clear_bhb_loop+0x30/0x80 [ 83.400325][ T4604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.406203][ T4604] RIP: 0033:0x7f89beb40159 [ 83.410601][ T4604] Code: Unable to access opcode bytes at RIP 0x7f89beb4012f. [ 83.417945][ T4604] RSP: 002b:00007f89bcd980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 83.426349][ T4604] RAX: 0000000000000001 RBX: 00007f89bedc7fa8 RCX: 00007f89beb40159 [ 83.434308][ T4604] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f89bedc7fac [ 83.442260][ T4604] RBP: 00007f89bedc7fa0 R08: 000567b0764629c8 R09: 0000000000000000 [ 83.450217][ T4604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.458190][ T4604] R13: 00007f89bedc8038 R14: 00007fff30c5f7c0 R15: 00007fff30c5f8a8 [ 83.466158][ T4604] [ 83.757948][ T3828] usb 3-1: config 0 descriptor?? [ 83.940194][ T4614] autofs4:pid:4614:autofs_fill_super: called with bogus options [ 84.047086][ T4624] FAULT_INJECTION: forcing a failure. [ 84.047086][ T4624] name failslab, interval 1, probability 0, space 0, times 0 [ 84.060443][ T4624] CPU: 1 PID: 4624 Comm: syz.1.121 Not tainted syzkaller #0 [ 84.067752][ T4624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.077817][ T4624] Call Trace: [ 84.081105][ T4624] [ 84.084041][ T4624] dump_stack_lvl+0x188/0x250 [ 84.088730][ T4624] ? show_regs_print_info+0x20/0x20 [ 84.093943][ T4624] ? load_image+0x410/0x410 [ 84.098462][ T4624] ? __might_sleep+0xf0/0xf0 [ 84.103055][ T4624] ? __lock_acquire+0x7b50/0x7b50 [ 84.108135][ T4624] should_fail+0x383/0x4b0 [ 84.112566][ T4624] should_failslab+0x5/0x20 [ 84.117075][ T4624] slab_pre_alloc_hook+0x51/0xc0 [ 84.122024][ T4624] kmem_cache_alloc_trace+0x47/0x290 [ 84.127315][ T4624] ? apply_subsystem_event_filter+0x34a/0x16b0 [ 84.133531][ T4624] apply_subsystem_event_filter+0x34a/0x16b0 [ 84.139545][ T4624] ? apply_event_filter+0x590/0x590 [ 84.144839][ T4624] ? _copy_from_user+0x111/0x170 [ 84.149784][ T4624] subsystem_filter_write+0x95/0xf0 [ 84.154991][ T4624] ? subsystem_filter_read+0x1e0/0x1e0 [ 84.160451][ T4624] vfs_write+0x304/0xd70 [ 84.164719][ T4624] ? file_end_write+0x250/0x250 [ 84.169600][ T4624] ? mutex_lock_nested+0x17/0x20 [ 84.174545][ T4624] ? __fdget_pos+0x2bf/0x370 [ 84.179123][ T4624] ? ksys_write+0x70/0x260 [ 84.183524][ T4624] ksys_write+0x153/0x260 [ 84.187860][ T4624] ? __ia32_sys_read+0x80/0x80 [ 84.192611][ T4624] ? lockdep_hardirqs_on+0x94/0x140 [ 84.197798][ T4624] do_syscall_64+0x4c/0xa0 [ 84.202196][ T4624] ? clear_bhb_loop+0x30/0x80 [ 84.206854][ T4624] ? clear_bhb_loop+0x30/0x80 [ 84.211510][ T4624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.217384][ T4624] RIP: 0033:0x7f89beb40159 [ 84.221788][ T4624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.241403][ T4624] RSP: 002b:00007f89bcd98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.249804][ T4624] RAX: ffffffffffffffda RBX: 00007f89bedc7fa0 RCX: 00007f89beb40159 [ 84.257758][ T4624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 84.265713][ T4624] RBP: 00007f89bebd706b R08: 0000000000000000 R09: 0000000000000000 [ 84.273681][ T4624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.281636][ T4624] R13: 00007f89bedc8038 R14: 00007f89bedc7fa0 R15: 00007fff30c5f8a8 [ 84.289601][ T4624] [ 84.296833][ T13] usb 3-1: USB disconnect, device number 2 [ 84.436336][ T4628] atomic_op ffff88802381f998 conn xmit_atomic 0000000000000000 [ 84.982286][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 85.711838][ T4642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.772431][ T25] kauditd_printk_skb: 15 callbacks suppressed [ 85.772532][ T25] audit: type=1326 audit(1790735486.584:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7c88159 code=0x7ffc0000 [ 85.950413][ T25] audit: type=1326 audit(1790735486.584:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7c88159 code=0x7ffc0000 [ 86.008792][ T4647] loop1: detected capacity change from 0 to 1024 [ 86.096212][ T4647] EXT4-fs (loop1): Ignoring removed orlov option [ 86.212259][ T4345] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.234622][ T25] audit: type=1326 audit(1790735486.594:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f06f7c88159 code=0x7ffc0000 [ 86.308700][ T4647] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 86.379174][ T25] audit: type=1326 audit(1790735486.594:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7c88159 code=0x7ffc0000 [ 86.405939][ T25] audit: type=1326 audit(1790735486.594:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7c88159 code=0x7ffc0000 [ 86.431081][ T25] audit: type=1326 audit(1790735486.594:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f06f7c88159 code=0x7ffc0000 [ 86.457259][ T25] audit: type=1326 audit(1790735486.594:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7c88159 code=0x7ffc0000 [ 86.483542][ T4345] usb 5-1: Using ep0 maxpacket: 16 [ 86.608799][ T25] audit: type=1326 audit(1790735486.594:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7c88159 code=0x7ffc0000 [ 86.638030][ T4664] netlink: 'syz.0.133': attribute type 4 has an invalid length. [ 86.646863][ T4345] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.660401][ T4664] netlink: 17 bytes leftover after parsing attributes in process `syz.0.133'. [ 86.670179][ T4345] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.683684][ T4345] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.690463][ T4345] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 86.700681][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.715002][ T4345] usb 5-1: config 0 descriptor?? [ 86.967296][ T4644] loop4: detected capacity change from 0 to 164 [ 87.286976][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 87.293164][ T4345] usbhid 5-1:0.0: can't add hid device: -71 [ 87.306325][ T4345] usbhid: probe of 5-1:0.0 failed with error -71 [ 87.313784][ T4681] loop0: detected capacity change from 0 to 128 [ 87.315911][ T4345] usb 5-1: USB disconnect, device number 2 [ 87.550496][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 87.572374][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 87.634537][ T4685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 87.748977][ T4685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 87.868547][ T4688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 87.875160][ T4688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.884267][ T4688] vhci_hcd vhci_hcd.0: Device attached [ 88.188094][ T4692] vhci_hcd: connection closed [ 88.190008][ T4701] vhci_hcd: stop threads [ 88.224311][ T4701] vhci_hcd: release socket [ 88.243975][ T4701] vhci_hcd: disconnect device [ 88.272376][ T4345] vhci_hcd: vhci_device speed not set [ 88.445581][ T25] audit: type=1326 audit(1790735489.154:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.146" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 88.577017][ T25] audit: type=1326 audit(1790735489.164:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.146" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89beb40159 code=0x7ffc0000 [ 89.608396][ T4733] FAULT_INJECTION: forcing a failure. [ 89.608396][ T4733] name failslab, interval 1, probability 0, space 0, times 0 [ 89.689722][ T4742] loop0: detected capacity change from 0 to 128 [ 89.701708][ T4733] CPU: 0 PID: 4733 Comm: syz.2.155 Not tainted syzkaller #0 [ 89.709032][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.719098][ T4733] Call Trace: [ 89.722380][ T4733] [ 89.725319][ T4733] dump_stack_lvl+0x188/0x250 [ 89.730016][ T4733] ? show_regs_print_info+0x20/0x20 [ 89.735219][ T4733] ? load_image+0x410/0x410 [ 89.739723][ T4733] ? __might_sleep+0xf0/0xf0 [ 89.744322][ T4733] ? __lock_acquire+0x7b50/0x7b50 [ 89.749368][ T4733] should_fail+0x383/0x4b0 [ 89.753795][ T4733] should_failslab+0x5/0x20 [ 89.758322][ T4733] slab_pre_alloc_hook+0x51/0xc0 [ 89.763266][ T4733] ? __d_alloc+0x27/0x6d0 [ 89.767601][ T4733] kmem_cache_alloc+0x3d/0x280 [ 89.772372][ T4733] __d_alloc+0x27/0x6d0 [ 89.776527][ T4733] ? d_alloc_pseudo+0xe/0x70 [ 89.781154][ T4733] d_alloc_pseudo+0x19/0x70 [ 89.785664][ T4733] alloc_file_pseudo+0xe0/0x200 [ 89.790521][ T4733] ? alloc_empty_file_noaccount+0x80/0x80 [ 89.796245][ T4733] ? tipc_node_get_capabilities+0xea/0x120 [ 89.802099][ T4733] sock_alloc_file+0xb3/0x240 [ 89.806795][ T4733] __sys_socketpair+0x2cc/0x540 [ 89.811667][ T4733] __x64_sys_socketpair+0x97/0xb0 [ 89.816695][ T4733] do_syscall_64+0x4c/0xa0 [ 89.821119][ T4733] ? clear_bhb_loop+0x30/0x80 [ 89.825815][ T4733] ? clear_bhb_loop+0x30/0x80 [ 89.830501][ T4733] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.836404][ T4733] RIP: 0033:0x7f88e1aaf159 [ 89.840826][ T4733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.860437][ T4733] RSP: 002b:00007f88dfd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 89.868866][ T4733] RAX: ffffffffffffffda RBX: 00007f88e1d36fa0 RCX: 00007f88e1aaf159 [ 89.876842][ T4733] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 89.884814][ T4733] RBP: 00007f88e1b4606b R08: 0000000000000000 R09: 0000000000000000 [ 89.892786][ T4733] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.900758][ T4733] R13: 00007f88e1d37038 R14: 00007f88e1d36fa0 R15: 00007ffe8df444b8 [ 89.908801][ T4733] [ 90.475268][ T4746] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 90.475325][ T4746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.475400][ T4746] vhci_hcd vhci_hcd.0: Device attached [ 90.576420][ T4752] vhci_hcd: connection closed [ 90.586439][ T144] vhci_hcd: stop threads [ 90.620741][ T144] vhci_hcd: release socket [ 90.639636][ T144] vhci_hcd: disconnect device [ 90.682323][ T13] vhci_hcd: vhci_device speed not set [ 92.009711][ T4773] loop3: detected capacity change from 0 to 128 [ 92.243848][ T4784] loop4: detected capacity change from 0 to 512 [ 92.286653][ T4792] loop1: detected capacity change from 0 to 512 [ 92.325778][ T4784] EXT4-fs (loop4): Ignoring removed oldalloc option [ 92.334214][ T4784] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 92.367059][ T4784] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.171: invalid indirect mapped block 4294967295 (level 1) [ 92.396585][ T4792] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.397305][ T4784] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.171: invalid indirect mapped block 4294967295 (level 1) [ 92.460367][ T4784] EXT4-fs (loop4): 2 truncates cleaned up [ 92.468837][ T4784] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,oldalloc,jqfmt=vfsv0,i_version,,errors=continue. Quota mode: writeback. [ 92.559716][ T4802] loop1: detected capacity change from 0 to 128 [ 92.584106][ T4784] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 93.117347][ T4809] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 93.123910][ T4809] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.131552][ T4809] vhci_hcd vhci_hcd.0: Device attached [ 93.386154][ T4810] vhci_hcd: connection closed [ 93.386718][ T4242] vhci_hcd: stop threads [ 93.396576][ T4230] vhci_hcd: vhci_device speed not set [ 93.415549][ T4242] vhci_hcd: release socket [ 93.441189][ T4242] vhci_hcd: disconnect device [ 93.472382][ T4230] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 93.486520][ T4230] usb 35-1: enqueue for inactive port 0 [ 93.527492][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 93.592287][ T4230] vhci_hcd: vhci_device speed not set [ 93.651353][ T4817] loop0: detected capacity change from 0 to 128 [ 93.728820][ T4817] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.741813][ T4817] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.878843][ T4827] loop2: detected capacity change from 0 to 512 [ 93.896722][ T4830] loop3: detected capacity change from 0 to 512 [ 94.014626][ T4827] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.296169][ T4847] FAULT_INJECTION: forcing a failure. [ 94.296169][ T4847] name failslab, interval 1, probability 0, space 0, times 0 [ 94.316755][ T4847] CPU: 1 PID: 4847 Comm: syz.1.192 Not tainted syzkaller #0 [ 94.324094][ T4847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.334167][ T4847] Call Trace: [ 94.337459][ T4847] [ 94.340406][ T4847] dump_stack_lvl+0x188/0x250 [ 94.345111][ T4847] ? show_regs_print_info+0x20/0x20 [ 94.350324][ T4847] ? load_image+0x410/0x410 [ 94.354840][ T4847] ? __might_sleep+0xf0/0xf0 [ 94.359433][ T4847] ? __lock_acquire+0x7b50/0x7b50 [ 94.364471][ T4847] should_fail+0x383/0x4b0 [ 94.368909][ T4847] should_failslab+0x5/0x20 [ 94.373423][ T4847] slab_pre_alloc_hook+0x51/0xc0 [ 94.378369][ T4847] ? key_alloc+0x346/0x1030 [ 94.382881][ T4847] __kmalloc_track_caller+0x69/0x330 [ 94.388621][ T4847] ? key_alloc+0x346/0x1030 [ 94.393150][ T4847] kmemdup+0x22/0x50 [ 94.397059][ T4847] key_alloc+0x346/0x1030 [ 94.401401][ T4847] ? memcpy+0x3c/0x60 [ 94.405390][ T4847] request_key_auth_new+0x6b3/0x920 [ 94.410604][ T4847] ? request_key_auth_rcu_disposal+0x20/0x20 [ 94.416595][ T4847] ? up_write+0x1b6/0x410 [ 94.420934][ T4847] request_key_and_link+0xd26/0x13b0 [ 94.426228][ T4847] ? complete_request_key+0xa0/0xa0 [ 94.431442][ T4847] ? __might_sleep+0xf0/0xf0 [ 94.436042][ T4847] ? restrict_link_reject+0x10/0x10 [ 94.441241][ T4847] ? keyring_search_rcu+0x280/0x280 [ 94.446447][ T4847] ? down_read+0x1aa/0x2e0 [ 94.450867][ T4847] __se_sys_request_key+0x293/0x350 [ 94.456076][ T4847] ? __x64_sys_request_key+0xa0/0xa0 [ 94.461368][ T4847] ? lockdep_hardirqs_on+0x94/0x140 [ 94.466592][ T4847] do_syscall_64+0x4c/0xa0 [ 94.471018][ T4847] ? clear_bhb_loop+0x30/0x80 [ 94.475693][ T4847] ? clear_bhb_loop+0x30/0x80 [ 94.480425][ T4847] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.486320][ T4847] RIP: 0033:0x7f89beb40159 [ 94.490735][ T4847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.510343][ T4847] RSP: 002b:00007f89bcd98028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 94.518765][ T4847] RAX: ffffffffffffffda RBX: 00007f89bedc7fa0 RCX: 00007f89beb40159 [ 94.526740][ T4847] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 94.534718][ T4847] RBP: 00007f89bebd706b R08: 0000000000000000 R09: 0000000000000000 [ 94.542694][ T4847] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 94.550670][ T4847] R13: 00007f89bedc8038 R14: 00007f89bedc7fa0 R15: 00007fff30c5f8a8 [ 94.558679][ T4847] [ 94.980994][ T4859] program syz.2.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.002310][ T4699] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.087763][ T4345] kernel write not supported for file /sg0 (pid: 4345 comm: kworker/1:5) [ 95.125549][ T4863] loop4: detected capacity change from 0 to 128 [ 95.212398][ T4699] usb 1-1: device descriptor read/64, error -71 [ 95.564697][ T4199] Bluetooth: hci4: command 0x0405 tx timeout [ 95.610190][ T4699] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 95.708724][ T4869] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 95.715285][ T4869] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.723020][ T4869] vhci_hcd vhci_hcd.0: Device attached [ 95.870226][ T4699] usb 1-1: device descriptor read/64, error -71 [ 96.034731][ T4872] vhci_hcd: connection closed [ 96.359413][ T9] vhci_hcd: stop threads [ 96.383292][ T9] vhci_hcd: release socket [ 96.388972][ T9] vhci_hcd: disconnect device [ 96.496013][ T4267] vhci_hcd: vhci_device speed not set [ 96.501672][ T4699] usb usb1-port1: attempt power cycle [ 96.624822][ T4884] loop4: detected capacity change from 0 to 512 [ 96.722986][ T4890] hugetlbfs: syz.2.207 (4890): Using mlock ulimits for SHM_HUGETLB is deprecated [ 96.773163][ T4893] loop3: detected capacity change from 0 to 1024 [ 96.815148][ T4893] EXT4-fs (loop3): inline encryption not supported [ 96.823600][ T4893] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 96.867823][ T4893] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 96.887915][ T4893] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.919443][ T4901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 96.935882][ T4699] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 96.945698][ T4893] EXT4-fs error (device loop3): ext4_quota_enable:6440: comm syz.3.211: Bad quota inum: 9, type: 2 [ 96.972688][ T4893] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 96.990008][ T4893] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 96.997348][ T4893] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,noload,nobarrier,stripe=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 97.063024][ T4699] usb 1-1: device descriptor read/8, error -71 [ 97.143675][ T4912] loop3: detected capacity change from 0 to 128 [ 97.402298][ T4699] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 97.506679][ T4916] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 97.513244][ T4916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.520826][ T4916] vhci_hcd vhci_hcd.0: Device attached [ 97.547076][ T4925] FAULT_INJECTION: forcing a failure. [ 97.547076][ T4925] name failslab, interval 1, probability 0, space 0, times 0 [ 97.559800][ T4925] CPU: 0 PID: 4925 Comm: syz.0.220 Not tainted syzkaller #0 [ 97.567103][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.577169][ T4925] Call Trace: [ 97.580444][ T4925] [ 97.583381][ T4925] dump_stack_lvl+0x188/0x250 [ 97.588067][ T4925] ? show_regs_print_info+0x20/0x20 [ 97.593270][ T4925] ? load_image+0x410/0x410 [ 97.597782][ T4925] ? __might_sleep+0xf0/0xf0 [ 97.602389][ T4925] ? __lock_acquire+0x7b50/0x7b50 [ 97.607408][ T4925] should_fail+0x383/0x4b0 [ 97.611832][ T4925] should_failslab+0x5/0x20 [ 97.616351][ T4925] slab_pre_alloc_hook+0x51/0xc0 [ 97.621305][ T4925] __kmalloc+0x6b/0x340 [ 97.625452][ T4925] ? tomoyo_encode+0x28a/0x550 [ 97.630214][ T4925] tomoyo_encode+0x28a/0x550 [ 97.634796][ T4925] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 97.640439][ T4925] tomoyo_mount_permission+0x3b8/0x9b0 [ 97.645906][ T4925] ? ____kasan_slab_free+0xd5/0x110 [ 97.651096][ T4925] ? slab_free_freelist_hook+0xec/0x170 [ 97.656677][ T4925] ? tomoyo_get_name+0x520/0x520 [ 97.661697][ T4925] security_sb_mount+0x83/0xb0 [ 97.666469][ T4925] path_mount+0xb8/0xfe0 [ 97.670731][ T4925] ? user_path_at_empty+0x13e/0x190 [ 97.675943][ T4925] __se_sys_mount+0x2e3/0x3d0 [ 97.680635][ T4925] ? __x64_sys_mount+0xc0/0xc0 [ 97.685670][ T4925] ? lockdep_hardirqs_on+0x94/0x140 [ 97.690883][ T4925] ? __x64_sys_mount+0x1c/0xc0 [ 97.695687][ T4925] do_syscall_64+0x4c/0xa0 [ 97.700121][ T4925] ? clear_bhb_loop+0x30/0x80 [ 97.704807][ T4925] ? clear_bhb_loop+0x30/0x80 [ 97.709483][ T4925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.712436][ T4699] usb 1-1: device not accepting address 5, error -71 [ 97.715385][ T4925] RIP: 0033:0x7f598a634159 [ 97.715416][ T4925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.715430][ T4925] RSP: 002b:00007f598888c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.727175][ T4699] usb usb1-port1: unable to enumerate USB device [ 97.746110][ T4925] RAX: ffffffffffffffda RBX: 00007f598a8bbfa0 RCX: 00007f598a634159 [ 97.746133][ T4925] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 97.746142][ T4925] RBP: 00007f598a6cb06b R08: 0000000000000000 R09: 0000000000000000 [ 97.746152][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.746161][ T4925] R13: 00007f598a8bc038 R14: 00007f598a8bbfa0 R15: 00007ffd43348628 [ 97.746186][ T4925] [ 97.804696][ T4925] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.882279][ T4230] vhci_hcd: vhci_device speed not set [ 97.942387][ T3828] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.957397][ T4230] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 97.972086][ T4933] loop0: detected capacity change from 0 to 512 [ 97.979042][ T4922] vhci_hcd: connection reset by peer [ 97.994963][ T4368] vhci_hcd: stop threads [ 97.999282][ T4368] vhci_hcd: release socket [ 98.012072][ T4368] vhci_hcd: disconnect device [ 98.084510][ T4933] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 98.108620][ T4933] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.125805][ T4933] Zero length message leads to an empty skb [ 98.322901][ T3828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.336342][ T3828] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.424965][ T3828] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.425571][ T4960] tipc: Started in network mode [ 98.440472][ T4960] tipc: Node identity _, cluster identity 4711 [ 98.443316][ T3828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 98.447132][ T4960] tipc: Enabling of bearer rejected, failed to enable media [ 98.455768][ T3828] usb 2-1: SerialNumber: syz [ 98.754371][ T4973] FAULT_INJECTION: forcing a failure. [ 98.754371][ T4973] name fail_futex, interval 1, probability 0, space 0, times 0 [ 98.799373][ T4973] CPU: 0 PID: 4973 Comm: syz.3.238 Not tainted syzkaller #0 [ 98.806719][ T4973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.816785][ T4973] Call Trace: [ 98.820075][ T4973] [ 98.822995][ T4973] dump_stack_lvl+0x188/0x250 [ 98.827676][ T4973] ? show_regs_print_info+0x20/0x20 [ 98.832867][ T4973] ? load_image+0x410/0x410 [ 98.837393][ T4973] should_fail+0x383/0x4b0 [ 98.841847][ T4973] get_futex_key+0x1a1/0x12d0 [ 98.846534][ T4973] ? futex_wait_restart+0x250/0x250 [ 98.851723][ T4973] ? __lock_acquire+0x13dc/0x7b50 [ 98.856767][ T4973] futex_wake+0x101/0x540 [ 98.861109][ T4973] ? rcu_lock_release+0x9/0x20 [ 98.865876][ T4973] ? futex_wait+0x680/0x680 [ 98.870374][ T4973] ? verify_lock_unused+0x140/0x140 [ 98.875598][ T4973] ? verify_lock_unused+0x140/0x140 [ 98.880824][ T4973] do_futex+0xd83/0x12b0 [ 98.885084][ T4973] ? __fget_files+0x402/0x470 [ 98.889768][ T4973] ? __lock_acquire+0x7b50/0x7b50 [ 98.894799][ T4973] ? futex_exit_release+0x1c0/0x1c0 [ 98.900004][ T4973] ? __context_tracking_exit+0x4c/0x80 [ 98.905485][ T4973] __se_sys_futex+0x389/0x420 [ 98.910184][ T4973] ? __x64_sys_futex+0xf0/0xf0 [ 98.914960][ T4973] ? __x64_sys_futex+0x1d/0xf0 [ 98.919733][ T4973] do_syscall_64+0x4c/0xa0 [ 98.924147][ T4973] ? clear_bhb_loop+0x30/0x80 [ 98.928825][ T4973] ? clear_bhb_loop+0x30/0x80 [ 98.933514][ T4973] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.939414][ T4973] RIP: 0033:0x7f06f7c88159 [ 98.943835][ T4973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.963435][ T4973] RSP: 002b:00007f06f5ee00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.971868][ T4973] RAX: ffffffffffffffda RBX: 00007f06f7f0ffa8 RCX: 00007f06f7c88159 [ 98.979865][ T4973] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f06f7f0ffac [ 98.987843][ T4973] RBP: 00007f06f7f0ffa0 R08: 002af4b8f19932f0 R09: 0000000000000000 [ 98.995872][ T4973] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 99.003862][ T4973] R13: 00007f06f7f10038 R14: 00007ffe7ea78ec0 R15: 00007ffe7ea78fa8 [ 99.011866][ T4973] [ 99.021757][ T3828] usb 2-1: 0:2 : does not exist [ 99.156215][ T3828] usb 2-1: USB disconnect, device number 2 [ 99.322709][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.785038][ T4991] loop1: detected capacity change from 0 to 1024 [ 100.095345][ T4998] loop2: detected capacity change from 0 to 128 [ 100.104969][ T4991] EXT4-fs (loop1): Ignoring removed bh option [ 100.133625][ T4991] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.374230][ T4987] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 100.406276][ T4991] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 100.542719][ T4987] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 100.721360][ T4991] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.724263][ T5025] loop4: detected capacity change from 0 to 128 [ 100.741955][ T5017] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 100.748474][ T5017] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.756447][ T5017] vhci_hcd vhci_hcd.0: Device attached [ 100.810396][ T5021] vhci_hcd: connection closed [ 100.811712][ T144] vhci_hcd: stop threads [ 100.832870][ T144] vhci_hcd: release socket [ 100.837339][ T144] vhci_hcd: disconnect device [ 100.878148][ T5025] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.923604][ T5025] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.231764][ T5046] FAULT_INJECTION: forcing a failure. [ 101.231764][ T5046] name failslab, interval 1, probability 0, space 0, times 0 [ 101.246407][ T5046] CPU: 0 PID: 5046 Comm: syz.0.252 Not tainted syzkaller #0 [ 101.253732][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.263802][ T5046] Call Trace: [ 101.267108][ T5046] [ 101.270053][ T5046] dump_stack_lvl+0x188/0x250 [ 101.274747][ T5046] ? show_regs_print_info+0x20/0x20 [ 101.279958][ T5046] ? load_image+0x410/0x410 [ 101.284738][ T5046] ? __might_sleep+0xf0/0xf0 [ 101.289342][ T5046] ? __lock_acquire+0x7b50/0x7b50 [ 101.294388][ T5046] should_fail+0x383/0x4b0 [ 101.298829][ T5046] should_failslab+0x5/0x20 [ 101.303402][ T5046] slab_pre_alloc_hook+0x51/0xc0 [ 101.308352][ T5046] kmem_cache_alloc_trace+0x47/0x290 [ 101.313643][ T5046] ? __list_lru_init+0x535/0xac0 [ 101.318605][ T5046] __list_lru_init+0x535/0xac0 [ 101.323408][ T5046] alloc_super+0x7b6/0x970 [ 101.327848][ T5046] ? kill_litter_super+0xa0/0xa0 [ 101.332801][ T5046] sget_fc+0x2d4/0x6f0 [ 101.336892][ T5046] ? kill_litter_super+0xa0/0xa0 [ 101.341842][ T5046] ? mqueue_get_tree+0xe0/0xe0 [ 101.346609][ T5046] get_tree_nodev+0x26/0x160 [ 101.351208][ T5046] vfs_get_tree+0x88/0x270 [ 101.355638][ T5046] fc_mount+0x18/0xa0 [ 101.359637][ T5046] mq_init_ns+0x39d/0x510 [ 101.363987][ T5046] copy_ipcs+0x2ea/0x4b0 [ 101.368258][ T5046] create_new_namespaces+0x212/0x700 [ 101.373567][ T5046] unshare_nsproxy_namespaces+0x116/0x160 [ 101.379295][ T5046] ksys_unshare+0x4f6/0x8e0 [ 101.383803][ T5046] ? __lock_acquire+0x7b50/0x7b50 [ 101.388845][ T5046] ? sighand_ctor+0x40/0x40 [ 101.393360][ T5046] ? lock_chain_count+0x20/0x20 [ 101.398228][ T5046] ? syscall_enter_from_user_mode+0x21/0x70 [ 101.404161][ T5046] __x64_sys_unshare+0x34/0x40 [ 101.408942][ T5046] do_syscall_64+0x4c/0xa0 [ 101.413365][ T5046] ? clear_bhb_loop+0x30/0x80 [ 101.418044][ T5046] ? clear_bhb_loop+0x30/0x80 [ 101.422724][ T5046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.428620][ T5046] RIP: 0033:0x7f598a634159 [ 101.433037][ T5046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.452646][ T5046] RSP: 002b:00007f598888c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 101.461073][ T5046] RAX: ffffffffffffffda RBX: 00007f598a8bbfa0 RCX: 00007f598a634159 [ 101.469052][ T5046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 101.477026][ T5046] RBP: 00007f598a6cb06b R08: 0000000000000000 R09: 0000000000000000 [ 101.485001][ T5046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.492975][ T5046] R13: 00007f598a8bc038 R14: 00007f598a8bbfa0 R15: 00007ffd43348628 [ 101.500968][ T5046] [ 101.697225][ T5050] capability: warning: `syz.2.255' uses deprecated v2 capabilities in a way that may be insecure [ 101.730128][ T5052] loop4: detected capacity change from 0 to 512 [ 103.433773][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.468170][ T5080] loop4: detected capacity change from 0 to 128 [ 103.522278][ T4230] vhci_hcd: vhci_device speed not set [ 103.570518][ T5078] FAULT_INJECTION: forcing a failure. [ 103.570518][ T5078] name failslab, interval 1, probability 0, space 0, times 0 [ 103.632974][ T5078] CPU: 1 PID: 5078 Comm: syz.2.264 Not tainted syzkaller #0 [ 103.640311][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.650376][ T5078] Call Trace: [ 103.653666][ T5078] [ 103.656596][ T5078] dump_stack_lvl+0x188/0x250 [ 103.661281][ T5078] ? show_regs_print_info+0x20/0x20 [ 103.666481][ T5078] ? load_image+0x410/0x410 [ 103.671002][ T5078] ? __might_sleep+0xf0/0xf0 [ 103.675605][ T5078] ? __lock_acquire+0x7b50/0x7b50 [ 103.680652][ T5078] should_fail+0x383/0x4b0 [ 103.685094][ T5078] should_failslab+0x5/0x20 [ 103.689611][ T5078] slab_pre_alloc_hook+0x51/0xc0 [ 103.694566][ T5078] kmem_cache_alloc_trace+0x47/0x290 [ 103.699863][ T5078] ? call_usermodehelper_setup+0x8a/0x260 [ 103.705602][ T5078] call_usermodehelper_setup+0x8a/0x260 [ 103.711156][ T5078] ? __request_module+0x980/0x980 [ 103.716187][ T5078] __request_module+0x3ea/0x980 [ 103.721047][ T5078] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 103.725925][ T5078] ? umd_cleanup+0x110/0x110 [ 103.730529][ T5078] ? aa_get_newest_label+0xf5/0x5a0 [ 103.735748][ T5078] ? end_current_label_crit_section+0x170/0x170 [ 103.742007][ T5078] ? apparmor_capable+0x12c/0x190 [ 103.747047][ T5078] ? bpf_lsm_capable+0x5/0x10 [ 103.751745][ T5078] ? security_capable+0x85/0xb0 [ 103.756609][ T5078] ? capable+0x84/0xe0 [ 103.760693][ T5078] dev_ioctl+0x3c0/0xe30 [ 103.764953][ T5078] ? _copy_from_user+0x111/0x170 [ 103.769900][ T5078] sock_do_ioctl+0x245/0x320 [ 103.774502][ T5078] ? sock_show_fdinfo+0xb0/0xb0 [ 103.779375][ T5078] sock_ioctl+0x48a/0x700 [ 103.783713][ T5078] ? sock_poll+0x420/0x420 [ 103.788139][ T5078] ? bpf_lsm_file_ioctl+0x5/0x10 [ 103.793084][ T5078] ? security_file_ioctl+0x7c/0xa0 [ 103.797055][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.798197][ T5078] ? sock_poll+0x420/0x420 [ 103.812677][ T5078] __se_sys_ioctl+0xfa/0x170 [ 103.817283][ T5078] do_syscall_64+0x4c/0xa0 [ 103.821710][ T5078] ? clear_bhb_loop+0x30/0x80 [ 103.826404][ T5078] ? clear_bhb_loop+0x30/0x80 [ 103.828782][ T4229] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.831092][ T5078] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.845807][ T5078] RIP: 0033:0x7f88e1aaf159 [ 103.850233][ T5078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.869843][ T5078] RSP: 002b:00007f88dfd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.878268][ T5078] RAX: ffffffffffffffda RBX: 00007f88e1d36fa0 RCX: 00007f88e1aaf159 [ 103.886246][ T5078] RDX: 0000200000000100 RSI: 0000000000008933 RDI: 0000000000000007 [ 103.894224][ T5078] RBP: 00007f88e1b4606b R08: 0000000000000000 R09: 0000000000000000 [ 103.902199][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.910167][ T5078] R13: 00007f88e1d37038 R14: 00007f88e1d36fa0 R15: 00007ffe8df444b8 [ 103.918158][ T5078] [ 104.062567][ T4229] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.071651][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 104.138001][ T4229] usb 2-1: SerialNumber: syz [ 104.162905][ T5091] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 104.169462][ T5091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.177115][ T5091] vhci_hcd vhci_hcd.0: Device attached [ 104.300634][ T5093] vhci_hcd: connection closed [ 104.424738][ T3031] vhci_hcd: stop threads [ 104.491058][ T3031] vhci_hcd: release socket [ 104.580491][ T3031] vhci_hcd: disconnect device [ 104.879261][ T4229] usb 2-1: can't set config #1, error -71 [ 104.889266][ T4229] usb 2-1: USB disconnect, device number 3 [ 105.737385][ T5110] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 105.759147][ T5112] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 105.768634][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.768804][ T5112] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 105.776106][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.918596][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.925808][ T5110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.934172][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.941274][ T5110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.977696][ T5110] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.164352][ T5132] loop3: detected capacity change from 0 to 512 [ 107.051967][ T5138] loop1: detected capacity change from 0 to 128 [ 107.545365][ T5145] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 107.551929][ T5145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.559472][ T5145] vhci_hcd vhci_hcd.0: Device attached [ 107.586452][ T5147] batman_adv: batadv0: Adding interface: syzkaller0 [ 107.621883][ T5147] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.637635][ T5151] loop2: detected capacity change from 0 to 2048 [ 107.702202][ T5147] batman_adv: batadv0: Interface activated: syzkaller0 [ 107.735571][ T5151] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 107.748860][ T5146] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 107.762470][ T4230] vhci_hcd: vhci_device speed not set [ 107.816572][ T5146] batman_adv: batadv0: Removing interface: syzkaller0 [ 107.832327][ T4230] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 107.883208][ T5148] vhci_hcd: connection reset by peer [ 107.892599][ T4719] vhci_hcd: stop threads [ 107.896884][ T4719] vhci_hcd: release socket [ 107.916380][ T4719] vhci_hcd: disconnect device [ 107.943853][ T25] kauditd_printk_skb: 21 callbacks suppressed [ 107.943867][ T25] audit: type=1800 audit(1790735508.774:63): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.279" name="proc" dev="loop2" ino=18 res=0 errno=0 [ 108.139103][ T5161] netlink: 48 bytes leftover after parsing attributes in process `syz.0.292'. [ 109.185698][ T5174] process 'syz.0.296' launched './file1' with NULL argv: empty string added [ 109.200595][ T5180] netlink: 68 bytes leftover after parsing attributes in process `syz.3.298'. [ 109.263068][ T5174] FAULT_INJECTION: forcing a failure. [ 109.263068][ T5174] name failslab, interval 1, probability 0, space 0, times 0 [ 109.305446][ T5169] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 109.333059][ T5169] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 109.345462][ T5174] CPU: 0 PID: 5174 Comm: syz.0.296 Not tainted syzkaller #0 [ 109.352764][ T5174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.362812][ T5174] Call Trace: [ 109.366086][ T5174] [ 109.369015][ T5174] dump_stack_lvl+0x188/0x250 [ 109.373698][ T5174] ? show_regs_print_info+0x20/0x20 [ 109.378909][ T5174] ? load_image+0x410/0x410 [ 109.383437][ T5174] ? __might_sleep+0xf0/0xf0 [ 109.388047][ T5174] ? __lock_acquire+0x7b50/0x7b50 [ 109.393088][ T5174] ? rcu_is_watching+0x11/0xa0 [ 109.397867][ T5174] should_fail+0x383/0x4b0 [ 109.402308][ T5174] should_failslab+0x5/0x20 [ 109.406819][ T5174] slab_pre_alloc_hook+0x51/0xc0 [ 109.411762][ T5174] ? __pmd_alloc+0x116/0x750 [ 109.416349][ T5174] kmem_cache_alloc+0x3d/0x280 [ 109.421163][ T5174] __pmd_alloc+0x116/0x750 [ 109.425598][ T5174] ? __lock_acquire+0x7b50/0x7b50 [ 109.430646][ T5174] ? do_raw_spin_lock+0x128/0x2f0 [ 109.435679][ T5174] ? __pud_alloc+0x140/0x140 [ 109.440266][ T5174] ? __rwlock_init+0x140/0x140 [ 109.445032][ T5174] ? count_memcg_event_mm+0x324/0x370 [ 109.450405][ T5174] ? do_raw_spin_unlock+0x11d/0x230 [ 109.455609][ T5174] ? _raw_spin_unlock+0x24/0x40 [ 109.460452][ T5174] ? __pud_alloc+0x122/0x140 [ 109.465044][ T5174] handle_mm_fault+0xbd3/0x4440 [ 109.469889][ T5174] ? get_page+0xe0/0xe0 [ 109.474040][ T5174] ? follow_page_mask+0x272/0x12b0 [ 109.479135][ T5174] ? vma_is_secretmem+0x9/0x40 [ 109.483881][ T5174] ? check_vma_flags+0x359/0x470 [ 109.488812][ T5174] __get_user_pages+0x952/0x11e0 [ 109.493746][ T5174] ? populate_vma_page_range+0x290/0x290 [ 109.499366][ T5174] ? preempt_schedule+0xbc/0xd0 [ 109.504210][ T5174] ? __might_sleep+0xf0/0xf0 [ 109.508786][ T5174] ? read_lock_is_recursive+0x10/0x10 [ 109.514140][ T5174] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 109.519524][ T5174] __get_user_pages_remote+0x1c2/0x730 [ 109.524970][ T5174] ? irq_work_queue+0xb8/0x140 [ 109.529723][ T5174] ? get_user_pages_remote+0x55/0xa0 [ 109.534992][ T5174] get_arg_page+0x11b/0x350 [ 109.539481][ T5174] ? copy_string_kernel+0x280/0x280 [ 109.544667][ T5174] ? load_image+0x410/0x410 [ 109.549156][ T5174] copy_string_kernel+0x14d/0x280 [ 109.554166][ T5174] do_execveat_common+0x360/0x6b0 [ 109.559177][ T5174] __x64_sys_execveat+0xc0/0xe0 [ 109.564012][ T5174] do_syscall_64+0x4c/0xa0 [ 109.568422][ T5174] ? clear_bhb_loop+0x30/0x80 [ 109.573082][ T5174] ? clear_bhb_loop+0x30/0x80 [ 109.577743][ T5174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.583622][ T5174] RIP: 0033:0x7f598a634159 [ 109.588022][ T5174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.607614][ T5174] RSP: 002b:00007f598888c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 109.616016][ T5174] RAX: ffffffffffffffda RBX: 00007f598a8bbfa0 RCX: 00007f598a634159 [ 109.623970][ T5174] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 109.631923][ T5174] RBP: 00007f598a6cb06b R08: 0000000000000000 R09: 0000000000000000 [ 109.639878][ T5174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.647836][ T5174] R13: 00007f598a8bc038 R14: 00007f598a8bbfa0 R15: 00007ffd43348628 [ 109.655808][ T5174] [ 109.680516][ T5195] loop3: detected capacity change from 0 to 128 [ 110.722971][ T5215] FAULT_INJECTION: forcing a failure. [ 110.722971][ T5215] name failslab, interval 1, probability 0, space 0, times 0 [ 110.755078][ T25] audit: type=1326 audit(1790735511.584:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.0.313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598a634159 code=0x7ffc0000 [ 110.755856][ T5213] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 110.779476][ T25] audit: type=1326 audit(1790735511.614:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.0.313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598a634159 code=0x7ffc0000 [ 110.785494][ T5213] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.785935][ T5213] vhci_hcd vhci_hcd.0: Device attached [ 110.838784][ T5215] CPU: 1 PID: 5215 Comm: syz.4.312 Not tainted syzkaller #0 [ 110.846141][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.856208][ T5215] Call Trace: [ 110.859486][ T5215] [ 110.862417][ T5215] dump_stack_lvl+0x188/0x250 [ 110.867092][ T5215] ? show_regs_print_info+0x20/0x20 [ 110.872314][ T5215] ? load_image+0x410/0x410 [ 110.876810][ T5215] ? __might_sleep+0xf0/0xf0 [ 110.881399][ T5215] ? __lock_acquire+0x7b50/0x7b50 [ 110.886423][ T5215] ? lockdep_init_map_type+0x98/0x900 [ 110.890187][ T25] audit: type=1326 audit(1790735511.714:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.0.313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598a634159 code=0x7ffc0000 [ 110.891809][ T5215] should_fail+0x383/0x4b0 [ 110.891838][ T5215] should_failslab+0x5/0x20 [ 110.924609][ T5215] slab_pre_alloc_hook+0x51/0xc0 [ 110.929566][ T5215] ? posix_lock_inode+0x365/0x3270 [ 110.934680][ T5215] kmem_cache_alloc+0x3d/0x280 [ 110.939432][ T5215] ? __init_waitqueue_head+0xa4/0x140 [ 110.944795][ T5215] posix_lock_inode+0x365/0x3270 [ 110.949723][ T5215] ? aa_path_link+0x8a0/0x8a0 [ 110.954389][ T5215] ? lockdep_softirqs_off+0x430/0x430 [ 110.959754][ T5215] ? posix_lock_file+0x50/0x50 [ 110.964506][ T5215] ? bpf_lsm_file_lock+0x5/0x10 [ 110.969348][ T5215] fcntl_setlk+0xa7f/0x1060 [ 110.973935][ T5215] ? vfs_lock_file+0xd0/0xd0 [ 110.978514][ T5215] ? __might_fault+0xb3/0x110 [ 110.983179][ T5215] ? _copy_from_user+0x111/0x170 [ 110.988111][ T5215] do_fcntl+0x533/0x1360 [ 110.992341][ T5215] ? __context_tracking_exit+0x4c/0x80 [ 110.997787][ T5215] ? rcu_lock_release+0x20/0x20 [ 111.002624][ T5215] ? __fget_files+0x402/0x470 [ 111.007289][ T5215] ? tomoyo_file_fcntl+0x77/0x210 [ 111.012303][ T5215] ? bpf_lsm_file_fcntl+0x5/0x10 [ 111.017224][ T5215] ? security_file_fcntl+0x7c/0xa0 [ 111.022328][ T5215] __se_sys_fcntl+0xcc/0x190 [ 111.026910][ T5215] do_syscall_64+0x4c/0xa0 [ 111.031310][ T5215] ? clear_bhb_loop+0x30/0x80 [ 111.035971][ T5215] ? clear_bhb_loop+0x30/0x80 [ 111.040653][ T5215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.046556][ T5215] RIP: 0033:0x7f3b083eb159 [ 111.050969][ T5215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.070562][ T5215] RSP: 002b:00007f3b06643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 111.078965][ T5215] RAX: ffffffffffffffda RBX: 00007f3b08672fa0 RCX: 00007f3b083eb159 [ 111.086926][ T5215] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 111.094882][ T5215] RBP: 00007f3b0848206b R08: 0000000000000000 R09: 0000000000000000 [ 111.102840][ T5215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.110801][ T5215] R13: 00007f3b08673038 R14: 00007f3b08672fa0 R15: 00007ffd7ab0a288 [ 111.118771][ T5215] [ 111.123064][ T5218] vhci_hcd: connection closed [ 111.132989][ T5098] vhci_hcd: stop threads [ 111.143249][ T5098] vhci_hcd: release socket [ 111.147846][ T5098] vhci_hcd: disconnect device [ 111.173304][ T25] audit: type=1326 audit(1790735511.714:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.0.313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f598a634159 code=0x7ffc0000 [ 111.202430][ T1107] vhci_hcd: vhci_device speed not set [ 111.239775][ T5230] FAULT_INJECTION: forcing a failure. [ 111.239775][ T5230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.253193][ T5230] CPU: 0 PID: 5230 Comm: syz.4.317 Not tainted syzkaller #0 [ 111.253260][ T25] audit: type=1326 audit(1790735511.714:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.0.313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598a634159 code=0x7ffc0000 [ 111.260483][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.294431][ T5230] Call Trace: [ 111.297718][ T5230] [ 111.300657][ T5230] dump_stack_lvl+0x188/0x250 [ 111.305351][ T5230] ? show_regs_print_info+0x20/0x20 [ 111.310564][ T5230] ? load_image+0x410/0x410 [ 111.315093][ T5230] should_fail+0x383/0x4b0 [ 111.319529][ T5230] prepare_alloc_pages+0x1e3/0x5b0 [ 111.324664][ T5230] __alloc_pages+0x11b/0x480 [ 111.329280][ T5230] ? zone_statistics+0x170/0x170 [ 111.334235][ T5230] ? rcu_lock_acquire+0x30/0x30 [ 111.339109][ T5230] ? alloc_pages+0x452/0x560 [ 111.343716][ T5230] __get_free_pages+0x8/0x30 [ 111.348312][ T5230] __tlb_remove_page_size+0x1f2/0x3f0 [ 111.353698][ T5230] unmap_page_range+0xfcf/0x2410 [ 111.358674][ T5230] unmap_vmas+0x131/0x250 [ 111.359373][ T25] audit: type=1326 audit(1790735511.714:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.0.313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598a634159 code=0x7ffc0000 [ 111.363005][ T5230] ? unmap_page_range+0x2410/0x2410 [ 111.363026][ T5230] ? __mutex_lock_common+0x435/0x2400 [ 111.363044][ T5230] ? exit_mm_release+0x16/0x30 [ 111.363068][ T5230] exit_mmap+0x3b9/0x640 [ 111.406431][ T5230] ? vm_brk+0x20/0x20 [ 111.410443][ T5230] ? uprobe_clear_state+0x2f6/0x460 [ 111.415656][ T5230] __mmput+0x115/0x390 [ 111.419738][ T5230] exit_mm+0x632/0x7b0 [ 111.423817][ T5230] ? perf_pmu_migrate_context+0xb70/0xb70 [ 111.429557][ T5230] ? do_exit+0x2110/0x2110 [ 111.433988][ T5230] ? __ia32_sys_timer_delete+0x40/0x40 [ 111.439461][ T5230] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 111.444942][ T5230] ? tty_audit_exit+0x149/0x1f0 [ 111.447853][ T25] audit: type=1326 audit(1790735511.714:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.0.313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598a634159 code=0x7ffc0000 [ 111.449805][ T5230] do_exit+0x5b8/0x2110 [ 111.449832][ T5230] ? put_task_struct+0x80/0x80 [ 111.482588][ T5230] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.488592][ T5230] ? _raw_spin_lock_irq+0xb7/0xf0 [ 111.493634][ T5230] do_group_exit+0x12c/0x2f0 [ 111.498233][ T5230] ? lockdep_hardirqs_on+0x94/0x140 [ 111.503460][ T5230] get_signal+0x7eb/0x12e0 [ 111.507904][ T5230] arch_do_signal_or_restart+0xe6/0x12a0 [ 111.513550][ T5230] ? __lock_acquire+0x7b50/0x7b50 [ 111.518594][ T5230] ? futex_exit_release+0x1c0/0x1c0 [ 111.521049][ T25] audit: type=1326 audit(1790735511.714:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.0.313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f598a634159 code=0x7ffc0000 [ 111.523794][ T5230] ? get_sigframe_size+0x10/0x10 [ 111.523817][ T5230] ? __context_tracking_exit+0x4c/0x80 [ 111.523849][ T5230] ? exit_to_user_mode_loop+0x3b/0x130 [ 111.563501][ T5230] exit_to_user_mode_loop+0x9e/0x130 [ 111.568806][ T5230] exit_to_user_mode_prepare+0xee/0x180 [ 111.574364][ T5230] syscall_exit_to_user_mode+0x16/0x40 [ 111.579837][ T5230] do_syscall_64+0x58/0xa0 [ 111.584262][ T5230] ? clear_bhb_loop+0x30/0x80 [ 111.588944][ T5230] ? clear_bhb_loop+0x30/0x80 [ 111.591522][ T25] audit: type=1326 audit(1790735511.714:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.0.313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f598a634159 code=0x7ffc0000 [ 111.593625][ T5230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.593649][ T5230] RIP: 0033:0x7f3b083eb159 [ 111.593664][ T5230] Code: Unable to access opcode bytes at RIP 0x7f3b083eb12f. [ 111.593672][ T5230] RSP: 002b:00007f3b066430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.643566][ T5230] RAX: 0000000000000001 RBX: 00007f3b08672fa8 RCX: 00007f3b083eb159 [ 111.651549][ T5230] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3b08672fac [ 111.659539][ T5230] RBP: 00007f3b08672fa0 R08: 000bf62621754bf0 R09: 0000000000000000 [ 111.667526][ T5230] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 111.675517][ T5230] R13: 00007f3b08673038 R14: 00007ffd7ab0a1a0 R15: 00007ffd7ab0a288 [ 111.683525][ T5230] [ 111.980896][ T5242] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 111.988974][ T5242] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 112.972845][ T4230] vhci_hcd: vhci_device speed not set [ 113.474086][ T5266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 113.534290][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.589652][ T5257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.790226][ T5284] loop2: detected capacity change from 0 to 512 [ 114.228867][ T5302] loop2: detected capacity change from 0 to 512 [ 114.250073][ T5303] FAULT_INJECTION: forcing a failure. [ 114.250073][ T5303] name failslab, interval 1, probability 0, space 0, times 0 [ 114.357279][ T5303] CPU: 0 PID: 5303 Comm: syz.1.340 Not tainted syzkaller #0 [ 114.364707][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.374768][ T5303] Call Trace: [ 114.378056][ T5303] [ 114.380988][ T5303] dump_stack_lvl+0x188/0x250 [ 114.385675][ T5303] ? show_regs_print_info+0x20/0x20 [ 114.390934][ T5303] ? load_image+0x410/0x410 [ 114.395449][ T5303] ? __might_sleep+0xf0/0xf0 [ 114.400053][ T5303] ? __lock_acquire+0x7b50/0x7b50 [ 114.405093][ T5303] should_fail+0x383/0x4b0 [ 114.409524][ T5303] should_failslab+0x5/0x20 [ 114.414034][ T5303] slab_pre_alloc_hook+0x51/0xc0 [ 114.418993][ T5303] kmem_cache_alloc_trace+0x47/0x290 [ 114.424293][ T5303] ? request_key_auth_new+0x101/0x920 [ 114.429687][ T5303] request_key_auth_new+0x101/0x920 [ 114.434911][ T5303] ? request_key_auth_rcu_disposal+0x20/0x20 [ 114.440900][ T5303] ? up_write+0x1b6/0x410 [ 114.445247][ T5303] request_key_and_link+0xd26/0x13b0 [ 114.448748][ T5286] ODEBUG: Out of memory. ODEBUG disabled [ 114.450545][ T5303] ? complete_request_key+0xa0/0xa0 [ 114.462056][ T5303] ? __might_sleep+0xf0/0xf0 [ 114.466665][ T5303] ? restrict_link_reject+0x10/0x10 [ 114.471875][ T5303] ? keyring_search_rcu+0x280/0x280 [ 114.477137][ T5303] ? down_read+0x1aa/0x2e0 [ 114.481564][ T5303] __se_sys_request_key+0x293/0x350 [ 114.486774][ T5303] ? __x64_sys_request_key+0xa0/0xa0 [ 114.492078][ T5303] ? lockdep_hardirqs_on+0x94/0x140 [ 114.497303][ T5303] do_syscall_64+0x4c/0xa0 [ 114.501726][ T5303] ? clear_bhb_loop+0x30/0x80 [ 114.506416][ T5303] ? clear_bhb_loop+0x30/0x80 [ 114.511119][ T5303] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.517019][ T5303] RIP: 0033:0x7f89beb40159 [ 114.521439][ T5303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.541057][ T5303] RSP: 002b:00007f89bcd98028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 114.549487][ T5303] RAX: ffffffffffffffda RBX: 00007f89bedc7fa0 RCX: 00007f89beb40159 [ 114.557469][ T5303] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 114.565460][ T5303] RBP: 00007f89bebd706b R08: 0000000000000000 R09: 0000000000000000 [ 114.573443][ T5303] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 114.581471][ T5303] R13: 00007f89bedc8038 R14: 00007f89bedc7fa0 R15: 00007fff30c5f8a8 [ 114.589473][ T5303] [ 114.650093][ T5302] EXT4-fs (loop2): Ignoring removed bh option [ 114.670271][ T5302] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.398348][ T5315] loop4: detected capacity change from 0 to 512 [ 115.408599][ T5302] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 115.488872][ T5318] WARNING! power/level is deprecated; use power/control instead [ 115.533344][ T5322] loop1: detected capacity change from 0 to 1024 [ 115.546986][ T5322] EXT4-fs (loop1): Ignoring removed bh option [ 115.560353][ T5302] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.628354][ T5322] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.803686][ T5333] capability: warning: `syz.4.352' uses 32-bit capabilities (legacy support in use) [ 115.817209][ T5333] program syz.4.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.838735][ T5322] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 116.135844][ T5344] loop3: detected capacity change from 0 to 512 [ 116.885274][ T5356] loop1: detected capacity change from 0 to 128 [ 116.898021][ T5351] loop2: detected capacity change from 0 to 128 [ 116.909551][ T5354] fuse: Bad value for 'group_id' [ 116.909789][ T5353] tun0: tun_chr_ioctl cmd 2147767517 [ 117.092917][ T5362] loop4: detected capacity change from 0 to 1024 [ 117.214518][ T5362] EXT4-fs (loop4): Ignoring removed bh option [ 117.220637][ T5362] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.289145][ T5367] loop0: detected capacity change from 0 to 164 [ 117.753293][ T5362] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 117.827795][ T5383] Cannot find del_set index 2 as target [ 117.833845][ T5379] xt_CT: No such helper "snmp_trap" [ 117.918038][ T5386] loop0: detected capacity change from 0 to 512 [ 117.948562][ T5389] netlink: 72 bytes leftover after parsing attributes in process `syz.1.371'. [ 117.958575][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 118.004619][ T5386] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.058081][ T5392] fuse: Bad value for 'group_id' [ 118.277825][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 118.452005][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 118.482824][ T5408] bond0: option resend_igmp: invalid value (256) [ 118.495800][ T5408] bond0: option resend_igmp: allowed values 0 - 255 [ 118.537887][ T5412] device syzkaller0 entered promiscuous mode [ 118.557441][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 118.571231][ T5416] loop4: detected capacity change from 0 to 164 [ 118.593096][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.606922][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.617538][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.862515][ T5429] fuse: Bad value for 'group_id' [ 118.907913][ T5434] loop4: detected capacity change from 0 to 128 [ 119.764387][ T5461] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 119.770948][ T5461] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.778618][ T5461] vhci_hcd vhci_hcd.0: Device attached [ 119.889548][ T5462] vhci_hcd: connection closed [ 119.972494][ T154] vhci_hcd: stop threads [ 120.037691][ T154] vhci_hcd: release socket [ 120.081123][ T154] vhci_hcd: disconnect device [ 120.086955][ T25] audit: type=1326 audit(1790735520.914:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5466 comm="syz.0.400" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598a634159 code=0x0 [ 120.187274][ T4699] vhci_hcd: vhci_device speed not set [ 120.768490][ T5477] EXT4-fs (loop3): Ignoring removed orlov option [ 121.138603][ T5477] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 121.208999][ T5485] set_capacity_and_notify: 2 callbacks suppressed [ 121.209014][ T5485] loop0: detected capacity change from 0 to 512 [ 122.311431][ T5505] loop4: detected capacity change from 0 to 512 [ 122.408332][ T5505] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.457551][ T5505] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.987908][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.997205][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.030330][ T5523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.563454][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 123.848913][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.496956][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.532244][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.632419][ T13] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.776078][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 125.533433][ T13] usb 5-1: SerialNumber: syz [ 125.569181][ T25] audit: type=1400 audit(1790735526.394:74): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5542 comm="syz.3.425" [ 125.598191][ T5546] FAULT_INJECTION: forcing a failure. [ 125.598191][ T5546] name failslab, interval 1, probability 0, space 0, times 0 [ 125.611721][ T5546] CPU: 0 PID: 5546 Comm: syz.0.426 Not tainted syzkaller #0 [ 125.619031][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.629099][ T5546] Call Trace: [ 125.632398][ T5546] [ 125.635326][ T5546] dump_stack_lvl+0x188/0x250 [ 125.640000][ T5546] ? verify_lock_unused+0x140/0x140 [ 125.645191][ T5546] ? show_regs_print_info+0x20/0x20 [ 125.650404][ T5546] ? load_image+0x410/0x410 [ 125.654944][ T5546] ? rcu_lock_release+0x9/0x20 [ 125.659726][ T5546] should_fail+0x383/0x4b0 [ 125.664160][ T5546] should_failslab+0x5/0x20 [ 125.668851][ T5546] slab_pre_alloc_hook+0x51/0xc0 [ 125.673802][ T5546] __kmalloc+0x6b/0x340 [ 125.677959][ T5546] ? fib6_info_alloc+0x2e/0xe0 [ 125.682733][ T5546] fib6_info_alloc+0x2e/0xe0 [ 125.687323][ T5546] ip6_route_info_create+0x455/0x1220 [ 125.692718][ T5546] addrconf_f6i_alloc+0x1ec/0x430 [ 125.697756][ T5546] ? ip6_route_del+0x14f0/0x14f0 [ 125.702722][ T5546] ? do_raw_read_unlock+0x70/0x70 [ 125.707747][ T5546] ? __ipv6_dev_ac_inc+0x5f/0x820 [ 125.712766][ T5546] __ipv6_dev_ac_inc+0x248/0x820 [ 125.717722][ T5546] ipv6_sock_ac_join+0x4a3/0x6b0 [ 125.722681][ T5546] ipv6_setsockopt+0x236d/0x3cc0 [ 125.727644][ T5546] ? futex_wait_queue_me+0x16e/0x440 [ 125.732945][ T5546] ? ipv6_update_options+0x400/0x400 [ 125.738249][ T5546] ? __lock_acquire+0x7b50/0x7b50 [ 125.743303][ T5546] ? mark_lock+0x94/0x320 [ 125.747653][ T5546] ? __lock_acquire+0x1305/0x7b50 [ 125.752708][ T5546] ? mark_lock+0x94/0x320 [ 125.757061][ T5546] ? verify_lock_unused+0x140/0x140 [ 125.762277][ T5546] ? aa_label_sk_perm+0x3e6/0x540 [ 125.767322][ T5546] ? aa_sk_perm+0x910/0x910 [ 125.771855][ T5546] ? __might_sleep+0xf0/0xf0 [ 125.776462][ T5546] ? rcu_lock_release+0x9/0x20 [ 125.781240][ T5546] ? __lock_acquire+0x7b50/0x7b50 [ 125.786284][ T5546] ? aa_sk_perm+0x7dc/0x910 [ 125.790802][ T5546] ? aa_af_perm+0x340/0x340 [ 125.795312][ T5546] ? __fget_files+0x402/0x470 [ 125.799996][ T5546] ? aa_sock_opt_perm+0x74/0x100 [ 125.804944][ T5546] ? udpv6_setsockopt+0x7a/0xa0 [ 125.809809][ T5546] ? sock_common_recvmsg+0x1c0/0x1c0 [ 125.815097][ T5546] __sys_setsockopt+0x2bf/0x3d0 [ 125.819966][ T5546] __x64_sys_setsockopt+0xb1/0xc0 [ 125.825001][ T5546] do_syscall_64+0x4c/0xa0 [ 125.829432][ T5546] ? clear_bhb_loop+0x30/0x80 [ 125.834127][ T5546] ? clear_bhb_loop+0x30/0x80 [ 125.838825][ T5546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.844738][ T5546] RIP: 0033:0x7f598a634159 [ 125.849185][ T5546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.868802][ T5546] RSP: 002b:00007f598888c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.877230][ T5546] RAX: ffffffffffffffda RBX: 00007f598a8bbfa0 RCX: 00007f598a634159 [ 125.885219][ T5546] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 125.893205][ T5546] RBP: 00007f598a6cb06b R08: 0000000000000014 R09: 0000000000000000 [ 125.901193][ T5546] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 125.909178][ T5546] R13: 00007f598a8bc038 R14: 00007f598a8bbfa0 R15: 00007ffd43348628 [ 125.917181][ T5546] [ 127.564489][ T13] usb 5-1: 0:2 : does not exist [ 127.608867][ T5577] loop3: detected capacity change from 0 to 128 [ 128.229296][ T5579] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 128.235862][ T5579] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 128.243937][ T5579] vhci_hcd vhci_hcd.0: Device attached [ 128.435125][ T5581] vhci_hcd: connection closed [ 128.585156][ T154] vhci_hcd: stop threads [ 128.612593][ T13] usb 5-1: USB disconnect, device number 3 [ 128.626339][ T154] vhci_hcd: release socket [ 128.662481][ T154] vhci_hcd: disconnect device [ 130.552837][ T5637] loop4: detected capacity change from 0 to 128 [ 130.663148][ T5630] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 130.671290][ T5630] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 131.132707][ T5643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 131.139273][ T5643] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 131.146920][ T5643] vhci_hcd vhci_hcd.0: Device attached [ 131.368271][ T1107] vhci_hcd: vhci_device speed not set [ 131.381977][ T5644] vhci_hcd: connection closed [ 131.382405][ T4720] vhci_hcd: stop threads [ 131.418008][ T4720] vhci_hcd: release socket [ 131.452980][ T4720] vhci_hcd: disconnect device [ 131.472435][ T1107] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 131.484193][ T1107] usb 41-1: enqueue for inactive port 0 [ 131.582248][ T1107] vhci_hcd: vhci_device speed not set [ 131.615638][ T5651] loop1: detected capacity change from 0 to 2368 [ 132.597975][ T5678] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 132.611657][ T5678] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 132.763269][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778602][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.846708][ T5715] loop4: detected capacity change from 0 to 2048 [ 135.263328][ T5715] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.174765][ T5732] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 136.217074][ T5732] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 136.510287][ T5747] loop0: detected capacity change from 0 to 512 [ 136.625514][ T5747] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.653900][ T5747] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.617394][ T5760] loop2: detected capacity change from 0 to 512 [ 137.733135][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 137.735069][ T5764] loop3: detected capacity change from 0 to 512 [ 137.877852][ T5760] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.495: inode #1: comm syz.2.495: iget: illegal inode # [ 137.981731][ T5760] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.495: error while reading EA inode 1 err=-117 [ 137.996055][ T5760] EXT4-fs (loop2): 1 orphan inode deleted [ 138.001911][ T5760] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.019697][ T5759] device gretap0 entered promiscuous mode [ 138.073424][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 138.386349][ T5759] device gretap0 left promiscuous mode [ 138.904853][ T5786] netlink: 68 bytes leftover after parsing attributes in process `syz.3.506'. [ 139.206983][ T5784] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 139.239997][ T5802] loop1: detected capacity change from 0 to 512 [ 139.264202][ T5784] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 139.606862][ T5808] loop2: detected capacity change from 0 to 164 [ 140.465252][ T5820] netlink: 72 bytes leftover after parsing attributes in process `syz.1.517'. [ 141.166455][ T5829] loop3: detected capacity change from 0 to 512 [ 141.709586][ T5829] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.821277][ T5832] loop0: detected capacity change from 0 to 512 [ 142.460290][ T5857] loop4: detected capacity change from 0 to 512 [ 143.331805][ T5857] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.433870][ T5857] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.552946][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 143.876843][ T5877] netlink: 76 bytes leftover after parsing attributes in process `syz.4.533'. [ 143.936246][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 144.189582][ T5883] loop2: detected capacity change from 0 to 512 [ 144.402723][ T5888] loop0: detected capacity change from 0 to 512 [ 144.461686][ T5888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c01c, mo2=0002] [ 144.484730][ T5888] System zones: 1-12 [ 144.490309][ T5888] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.538: corrupted inode contents [ 144.533497][ T5888] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 144.551008][ T5888] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.538: corrupted inode contents [ 144.612935][ T5888] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.538: mark_inode_dirty error [ 144.639600][ T5888] EXT4-fs (loop0): 1 orphan inode deleted [ 144.647223][ T5888] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,bsdgroups,prjquota,,errors=continue. Quota mode: writeback. [ 144.740466][ T5891] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 144.769150][ T5891] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 144.791905][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 144.854361][ T5895] FAULT_INJECTION: forcing a failure. [ 144.854361][ T5895] name failslab, interval 1, probability 0, space 0, times 0 [ 144.867670][ T5895] CPU: 1 PID: 5895 Comm: syz.0.540 Not tainted syzkaller #0 [ 144.874977][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.885085][ T5895] Call Trace: [ 144.888372][ T5895] [ 144.891313][ T5895] dump_stack_lvl+0x188/0x250 [ 144.896003][ T5895] ? show_regs_print_info+0x20/0x20 [ 144.901267][ T5895] ? load_image+0x410/0x410 [ 144.905836][ T5895] ? __might_sleep+0xf0/0xf0 [ 144.910435][ T5895] ? __lock_acquire+0x7b50/0x7b50 [ 144.915480][ T5895] should_fail+0x383/0x4b0 [ 144.919920][ T5895] should_failslab+0x5/0x20 [ 144.924455][ T5895] slab_pre_alloc_hook+0x51/0xc0 [ 144.929413][ T5895] __kmalloc_node+0x6d/0x3a0 [ 144.934017][ T5895] ? kvmalloc_node+0x84/0x130 [ 144.938699][ T5895] kvmalloc_node+0x84/0x130 [ 144.943214][ T5895] __se_sys_add_key+0x27b/0x410 [ 144.948076][ T5895] ? __x64_sys_add_key+0xc0/0xc0 [ 144.953026][ T5895] ? lockdep_hardirqs_on+0x94/0x140 [ 144.958236][ T5895] ? __x64_sys_add_key+0x1c/0xc0 [ 144.963243][ T5895] do_syscall_64+0x4c/0xa0 [ 144.967674][ T5895] ? clear_bhb_loop+0x30/0x80 [ 144.972343][ T5895] ? clear_bhb_loop+0x30/0x80 [ 144.977015][ T5895] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.982894][ T5895] RIP: 0033:0x7f598a634159 [ 144.987298][ T5895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.006892][ T5895] RSP: 002b:00007f598888c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 145.015302][ T5895] RAX: ffffffffffffffda RBX: 00007f598a8bbfa0 RCX: 00007f598a634159 [ 145.023265][ T5895] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 145.031226][ T5895] RBP: 00007f598a6cb06b R08: ffffffffffffffff R09: 0000000000000000 [ 145.039186][ T5895] R10: 00000000000004a9 R11: 0000000000000246 R12: 0000000000000000 [ 145.047152][ T5895] R13: 00007f598a8bc038 R14: 00007f598a8bbfa0 R15: 00007ffd43348628 [ 145.055126][ T5895] [ 146.835270][ T5919] loop1: detected capacity change from 0 to 512 [ 147.192532][ T25] audit: type=1800 audit(1790735548.024:75): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.549" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 147.664583][ T5934] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 147.673204][ T5934] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 148.643939][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 148.796913][ T5951] FAULT_INJECTION: forcing a failure. [ 148.796913][ T5951] name failslab, interval 1, probability 0, space 0, times 0 [ 148.810385][ T5951] CPU: 1 PID: 5951 Comm: syz.4.559 Not tainted syzkaller #0 [ 148.817702][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.827769][ T5951] Call Trace: [ 148.831061][ T5951] [ 148.834004][ T5951] dump_stack_lvl+0x188/0x250 [ 148.838712][ T5951] ? show_regs_print_info+0x20/0x20 [ 148.843926][ T5951] ? load_image+0x410/0x410 [ 148.848444][ T5951] ? __might_sleep+0xf0/0xf0 [ 148.853050][ T5951] ? __lock_acquire+0x7b50/0x7b50 [ 148.858096][ T5951] ? __lock_acquire+0x7b50/0x7b50 [ 148.863151][ T5951] should_fail+0x383/0x4b0 [ 148.867583][ T5951] should_failslab+0x5/0x20 [ 148.872093][ T5951] slab_pre_alloc_hook+0x51/0xc0 [ 148.877054][ T5951] ? __d_alloc+0x27/0x6d0 [ 148.881451][ T5951] kmem_cache_alloc+0x3d/0x280 [ 148.886231][ T5951] __d_alloc+0x27/0x6d0 [ 148.890401][ T5951] ? d_alloc_pseudo+0xe/0x70 [ 148.895006][ T5951] d_alloc_pseudo+0x19/0x70 [ 148.899524][ T5951] alloc_file_pseudo+0xe0/0x200 [ 148.904415][ T5951] ? alloc_empty_file_noaccount+0x80/0x80 [ 148.910178][ T5951] ? alloc_fd+0x59e/0x650 [ 148.914528][ T5951] sock_alloc_file+0xb3/0x240 [ 148.919226][ T5951] __sys_socket+0x11d/0x170 [ 148.923748][ T5951] __x64_sys_socket+0x76/0x80 [ 148.928435][ T5951] do_syscall_64+0x4c/0xa0 [ 148.932860][ T5951] ? clear_bhb_loop+0x30/0x80 [ 148.937547][ T5951] ? clear_bhb_loop+0x30/0x80 [ 148.942241][ T5951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.948154][ T5951] RIP: 0033:0x7f3b083eb159 [ 148.952585][ T5951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.972265][ T5951] RSP: 002b:00007f3b06643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 148.980701][ T5951] RAX: ffffffffffffffda RBX: 00007f3b08672fa0 RCX: 00007f3b083eb159 [ 148.988692][ T5951] RDX: 0000000000000000 RSI: 0000000800000003 RDI: 0000000000000011 [ 148.996682][ T5951] RBP: 00007f3b0848206b R08: 0000000000000000 R09: 0000000000000000 [ 149.004682][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.012669][ T5951] R13: 00007f3b08673038 R14: 00007f3b08672fa0 R15: 00007ffd7ab0a288 [ 149.020671][ T5951] [ 149.807243][ T5963] blk_update_request: I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.852899][ T5963] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 149.897117][ T5965] loop0: detected capacity change from 0 to 128 [ 150.081747][ T5974] netlink: 14 bytes leftover after parsing attributes in process `syz.4.566'. [ 150.167095][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.191404][ T5971] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 150.228224][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.241969][ T5971] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 150.272923][ T5974] bond0 (unregistering): Released all slaves [ 150.342112][ T5977] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 150.348675][ T5977] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 150.356397][ T5977] vhci_hcd vhci_hcd.0: Device attached [ 150.562288][ T5813] vhci_hcd: vhci_device speed not set [ 150.637145][ T5813] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 150.693476][ T5978] vhci_hcd: connection reset by peer [ 150.704379][ T154] vhci_hcd: stop threads [ 150.711054][ T154] vhci_hcd: release socket [ 150.717945][ T154] vhci_hcd: disconnect device [ 151.880946][ T5995] FAULT_INJECTION: forcing a failure. [ 151.880946][ T5995] name failslab, interval 1, probability 0, space 0, times 0 [ 151.956070][ T5995] CPU: 0 PID: 5995 Comm: syz.4.572 Not tainted syzkaller #0 [ 151.956107][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.956117][ T5995] Call Trace: [ 151.956125][ T5995] [ 151.956133][ T5995] dump_stack_lvl+0x188/0x250 [ 151.956160][ T5995] ? show_regs_print_info+0x20/0x20 [ 151.956179][ T5995] ? load_image+0x410/0x410 [ 151.956208][ T5995] should_fail+0x383/0x4b0 [ 151.956229][ T5995] ? bpf_clone_redirect+0x1c2/0x460 [ 151.956247][ T5995] should_failslab+0x5/0x20 [ 151.956265][ T5995] slab_pre_alloc_hook+0x51/0xc0 [ 151.956284][ T5995] ? bpf_clone_redirect+0x1c2/0x460 [ 151.956302][ T5995] __kmalloc_node_track_caller+0x68/0x3a0 [ 151.956321][ T5995] ? bpf_clone_redirect+0x1c2/0x460 [ 151.956340][ T5995] ? bpf_clone_redirect+0x1c2/0x460 [ 151.956357][ T5995] pskb_expand_head+0x128/0x1100 [ 151.956388][ T5995] bpf_clone_redirect+0x1c2/0x460 [ 151.956414][ T5995] bpf_prog_b36a1f39e2fdd4f4+0x56/0x2b8 [ 151.956433][ T5995] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.956457][ T5995] ? lock_chain_count+0x20/0x20 [ 151.956475][ T5995] ? __kasan_slab_alloc+0xa9/0xc0 [ 151.956500][ T5995] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 151.956519][ T5995] ? lockdep_hardirqs_on+0x94/0x140 [ 151.956541][ T5995] ? ktime_get+0x7b/0x270 [ 151.956556][ T5995] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 151.956574][ T5995] ? ktime_get_real_ts64+0x440/0x440 [ 151.956592][ T5995] ? read_lock_is_recursive+0x10/0x10 [ 151.956616][ T5995] ? __cant_sleep+0x220/0x220 [ 151.956639][ T5995] ? bpf_test_timer_continue+0x13d/0x380 [ 151.956662][ T5995] bpf_test_run+0x2a8/0x800 [ 151.956696][ T5995] ? convert___skb_to_skb+0x4c0/0x4c0 [ 151.956717][ T5995] ? eth_get_headlen+0x200/0x200 [ 151.956741][ T5995] ? convert___skb_to_skb+0x3d/0x4c0 [ 151.956761][ T5995] bpf_prog_test_run_skb+0x9fb/0x1190 [ 151.956794][ T5995] ? cpu_online+0x60/0x60 [ 151.956812][ T5995] bpf_prog_test_run+0x31c/0x390 [ 151.956835][ T5995] __sys_bpf+0x5a5/0x6f0 [ 151.956864][ T5995] ? bpf_link_show_fdinfo+0x380/0x380 [ 151.956904][ T5995] __x64_sys_bpf+0x78/0x90 [ 151.956924][ T5995] do_syscall_64+0x4c/0xa0 [ 151.956941][ T5995] ? clear_bhb_loop+0x30/0x80 [ 151.956959][ T5995] ? clear_bhb_loop+0x30/0x80 [ 151.956979][ T5995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.956998][ T5995] RIP: 0033:0x7f3b083eb159 [ 151.957014][ T5995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.957030][ T5995] RSP: 002b:00007f3b06643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.957051][ T5995] RAX: ffffffffffffffda RBX: 00007f3b08672fa0 RCX: 00007f3b083eb159 [ 151.957065][ T5995] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 151.957077][ T5995] RBP: 00007f3b0848206b R08: 0000000000000000 R09: 0000000000000000 [ 151.957089][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.957101][ T5995] R13: 00007f3b08673038 R14: 00007f3b08672fa0 R15: 00007ffd7ab0a288 [ 151.957128][ T5995] [ 153.548733][ T6022] loop2: detected capacity change from 0 to 128 [ 153.598319][ T6026] loop3: detected capacity change from 0 to 512 [ 153.847757][ T6015] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 153.856010][ T6015] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 154.637903][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 154.695167][ T6042] netlink: 36 bytes leftover after parsing attributes in process `syz.4.586'. [ 154.721631][ T6045] loop1: detected capacity change from 0 to 512 [ 154.736134][ T6045] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.746627][ T6040] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 154.753172][ T6040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.760719][ T6040] vhci_hcd vhci_hcd.0: Device attached [ 154.769547][ T6045] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 154.788325][ T6045] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.587: inode #15: comm syz.1.587: iget: illegal inode # [ 154.802030][ T6045] EXT4-fs (loop1): Remounting filesystem read-only [ 154.814831][ T6045] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.587: couldn't read orphan inode 15 (err -117) [ 154.832850][ T6045] EXT4-fs (loop1): Remounting filesystem read-only [ 154.839582][ T6045] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 154.865551][ T6045] EXT4-fs error (device loop1): ext4_lookup:1860: comm syz.1.587: inode #15: comm syz.1.587: iget: illegal inode # [ 154.867980][ T6047] vhci_hcd: connection closed [ 154.881742][ T6045] EXT4-fs (loop1): Remounting filesystem read-only [ 154.912466][ T6054] loop3: detected capacity change from 0 to 256 [ 154.914297][ T154] vhci_hcd: stop threads [ 154.934750][ T154] vhci_hcd: release socket [ 154.951927][ T154] vhci_hcd: disconnect device [ 154.985822][ T4230] vhci_hcd: vhci_device speed not set [ 155.019282][ T6058] loop1: detected capacity change from 0 to 512 [ 155.161601][ T6058] EXT4-fs (loop1): Ignoring removed oldalloc option [ 155.250619][ T6058] EXT4-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 155.435447][ T6062] loop0: detected capacity change from 0 to 512 [ 155.783028][ T5813] vhci_hcd: vhci_device speed not set [ 156.659561][ T6090] loop3: detected capacity change from 0 to 512 [ 156.667796][ T6092] netlink: 200 bytes leftover after parsing attributes in process `syz.0.601'. [ 156.863330][ T6092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.601'. [ 156.881914][ T6090] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.912442][ T6090] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.937511][ T6092] loop0: detected capacity change from 0 to 512 [ 157.048510][ T6092] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.601: bg 0: block 385: padding at end of block bitmap is not set [ 157.164578][ T6092] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 157.259215][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 157.269259][ T6092] EXT4-fs (loop0): 2 truncates cleaned up [ 157.289322][ T6092] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.351984][ T6114] loop3: detected capacity change from 0 to 512 [ 157.623886][ T6118] loop1: detected capacity change from 0 to 2048 [ 157.737414][ T6118] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 157.752314][ T6118] FAT-fs (loop1): Filesystem has been set read-only [ 158.328425][ T6127] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.338979][ T6127] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 158.346867][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 158.559836][ T6139] FAULT_INJECTION: forcing a failure. [ 158.559836][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 158.578428][ T6139] CPU: 1 PID: 6139 Comm: syz.4.615 Not tainted syzkaller #0 [ 158.585748][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.595788][ T6139] Call Trace: [ 158.599072][ T6139] [ 158.602000][ T6139] dump_stack_lvl+0x188/0x250 [ 158.606664][ T6139] ? show_regs_print_info+0x20/0x20 [ 158.611841][ T6139] ? load_image+0x410/0x410 [ 158.616322][ T6139] ? __might_sleep+0xf0/0xf0 [ 158.620893][ T6139] ? __lock_acquire+0x7b50/0x7b50 [ 158.625901][ T6139] should_fail+0x383/0x4b0 [ 158.630298][ T6139] should_failslab+0x5/0x20 [ 158.634782][ T6139] slab_pre_alloc_hook+0x51/0xc0 [ 158.639707][ T6139] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 158.645409][ T6139] ? blk_throtl_init+0x6f/0x460 [ 158.650244][ T6139] blk_throtl_init+0x6f/0x460 [ 158.654959][ T6139] blkcg_init_queue+0x37b/0x430 [ 158.659793][ T6139] blk_alloc_queue+0x427/0x580 [ 158.664537][ T6139] __blk_alloc_disk+0x15/0x60 [ 158.669211][ T6139] dm_create+0x57f/0xf90 [ 158.673453][ T6139] dev_create+0x12e/0x2c0 [ 158.677763][ T6139] ? list_devices+0x820/0x820 [ 158.682435][ T6139] ? __might_fault+0xb3/0x110 [ 158.687099][ T6139] ? _copy_from_user+0x111/0x170 [ 158.692013][ T6139] dm_ctl_ioctl+0x947/0xd00 [ 158.696498][ T6139] ? list_devices+0x820/0x820 [ 158.701182][ T6139] ? dm_poll+0x120/0x120 [ 158.705419][ T6139] ? bpf_lsm_file_ioctl+0x5/0x10 [ 158.710340][ T6139] ? security_file_ioctl+0x7c/0xa0 [ 158.715448][ T6139] ? dm_poll+0x120/0x120 [ 158.719673][ T6139] __se_sys_ioctl+0xfa/0x170 [ 158.724256][ T6139] do_syscall_64+0x4c/0xa0 [ 158.728657][ T6139] ? clear_bhb_loop+0x30/0x80 [ 158.733316][ T6139] ? clear_bhb_loop+0x30/0x80 [ 158.737979][ T6139] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.743866][ T6139] RIP: 0033:0x7f3b083eb159 [ 158.748264][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.767850][ T6139] RSP: 002b:00007f3b06643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.776265][ T6139] RAX: ffffffffffffffda RBX: 00007f3b08672fa0 RCX: 00007f3b083eb159 [ 158.784222][ T6139] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 158.792178][ T6139] RBP: 00007f3b0848206b R08: 0000000000000000 R09: 0000000000000000 [ 158.800133][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.808092][ T6139] R13: 00007f3b08673038 R14: 00007f3b08672fa0 R15: 00007ffd7ab0a288 [ 158.816088][ T6139] [ 158.830753][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 159.078201][ T6146] loop0: detected capacity change from 0 to 512 [ 159.932155][ C0] hrtimer: interrupt took 38702 ns [ 160.648058][ T6169] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 160.656387][ T6169] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 160.679908][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 160.860649][ T6194] fuse: Bad value for 'fd' [ 160.903655][ T6196] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 160.910214][ T6196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.927289][ T6196] vhci_hcd vhci_hcd.0: Device attached [ 160.965650][ T6199] loop4: detected capacity change from 0 to 512 [ 160.976856][ T6196] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 160.983427][ T6196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.997244][ T6196] vhci_hcd vhci_hcd.0: Device attached [ 161.002917][ T6203] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 161.009458][ T6203] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.017493][ T6203] vhci_hcd vhci_hcd.0: Device attached [ 161.026865][ T6196] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(7) [ 161.033422][ T6196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.062341][ T6196] vhci_hcd vhci_hcd.0: Device attached [ 161.076003][ T6196] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 161.082640][ T6196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.090597][ T6196] vhci_hcd vhci_hcd.0: Device attached [ 161.100296][ T6196] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 161.106925][ T6196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.152396][ T6196] vhci_hcd vhci_hcd.0: Device attached [ 161.165078][ T6203] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(16) [ 161.171726][ T6203] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.205399][ T6203] vhci_hcd vhci_hcd.0: Device attached [ 161.212559][ T4229] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 161.228817][ T6210] vhci_hcd: connection closed [ 161.229128][ T4701] vhci_hcd: stop threads [ 161.240539][ T6208] vhci_hcd: connection closed [ 161.241318][ T4701] vhci_hcd: release socket [ 161.242733][ T6197] vhci_hcd: connection reset by peer [ 161.246190][ T6206] vhci_hcd: connection closed [ 161.250986][ T6212] vhci_hcd: connection closed [ 161.255905][ T6204] vhci_hcd: connection closed [ 161.256071][ T6200] vhci_hcd: connection closed [ 161.276582][ T4701] vhci_hcd: disconnect device [ 161.287157][ T4701] vhci_hcd: stop threads [ 161.291602][ T4701] vhci_hcd: release socket [ 161.297441][ T4701] vhci_hcd: disconnect device [ 161.362403][ T4701] vhci_hcd: stop threads [ 161.366894][ T4701] vhci_hcd: release socket [ 161.376744][ T4701] vhci_hcd: disconnect device [ 161.388179][ T4701] vhci_hcd: stop threads [ 161.398857][ T4701] vhci_hcd: release socket [ 161.409530][ T4701] vhci_hcd: disconnect device [ 161.418507][ T4701] vhci_hcd: stop threads [ 161.424095][ T4701] vhci_hcd: release socket [ 161.430282][ T4701] vhci_hcd: disconnect device [ 161.439312][ T4701] vhci_hcd: stop threads [ 161.448037][ T4701] vhci_hcd: release socket [ 161.458223][ T4701] vhci_hcd: disconnect device [ 161.466571][ T4701] vhci_hcd: stop threads [ 161.476112][ T4701] vhci_hcd: release socket [ 161.480776][ T4701] vhci_hcd: disconnect device [ 163.456897][ T6247] fuse: Bad value for 'fd' [ 165.262227][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 165.307463][ T6312] EXT4-fs warning (device sda1): __ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 165.812448][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.829446][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.912408][ T21] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.922272][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 165.930553][ T21] usb 3-1: SerialNumber: syz [ 166.320184][ T21] usb 3-1: 0:2 : does not exist [ 166.379506][ T4229] vhci_hcd: vhci_device speed not set [ 166.391923][ T21] usb 3-1: USB disconnect, device number 3 [ 166.393567][ T25] audit: type=1326 audit(1790735567.214:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 166.463443][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 166.542095][ T25] audit: type=1326 audit(1790735567.244:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 166.571439][ T25] audit: type=1326 audit(1790735567.244:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 166.650123][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.691191][ T25] audit: type=1326 audit(1790735567.244:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 166.765564][ T6345] loop2: detected capacity change from 0 to 128 [ 166.877090][ T25] audit: type=1326 audit(1790735567.244:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 167.061737][ T25] audit: type=1326 audit(1790735567.244:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 167.103936][ T25] audit: type=1326 audit(1790735567.244:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 167.137694][ T25] audit: type=1326 audit(1790735567.244:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 167.327033][ T25] audit: type=1326 audit(1790735567.244:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3b083eb159 code=0x7ffc0000 [ 167.353028][ T6359] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 167.359579][ T6359] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 167.367133][ T6359] vhci_hcd vhci_hcd.0: Device attached [ 167.860389][ T6363] vhci_hcd: connection closed [ 167.861161][ T154] vhci_hcd: stop threads [ 167.904176][ T154] vhci_hcd: release socket [ 167.912669][ T4233] vhci_hcd: vhci_device speed not set [ 167.934346][ T154] vhci_hcd: disconnect device [ 167.982316][ T4233] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 167.990978][ T4233] usb 37-1: enqueue for inactive port 0 [ 168.007671][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 168.072253][ T4233] vhci_hcd: vhci_device speed not set [ 168.382516][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.987262][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.034497][ T4230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.278257][ T4230] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.885596][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 169.922929][ T4230] usb 1-1: SerialNumber: syz [ 170.086440][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 170.244638][ T4230] usb 1-1: 0:2 : does not exist [ 170.247692][ T6417] ------------[ cut here ]------------ [ 170.255460][ T6417] WARNING: CPU: 1 PID: 6417 at arch/x86/kvm/x86.c:10384 kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 170.266115][ T6417] Modules linked in: [ 170.270103][ T6417] CPU: 1 PID: 6417 Comm: syz.3.701 Not tainted syzkaller #0 [ 170.277682][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.288020][ T6417] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 170.294600][ T6417] Code: e8 a1 11 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 86 11 af 00 e9 e4 f7 ff ff e8 ec dd 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 170.316856][ T6417] RSP: 0018:ffffc90002f7fca0 EFLAGS: 00010283 [ 170.323092][ T6417] RAX: ffffffff810f36b4 RBX: 1ffff1100466f862 RCX: 0000000000080000 [ 170.323616][ T4230] usb 1-1: USB disconnect, device number 6 [ 170.331275][ T6417] RDX: ffffc9000d619000 RSI: 0000000000000425 RDI: 0000000000000426 [ 170.350631][ T6417] RBP: 0000000000000000 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd [ 170.358946][ T6417] R10: dffffc0000000000 R11: fffffbfff1b163de R12: ffff888074fa6001 [ 170.367078][ T6417] R13: ffff88802337c0f0 R14: ffff88802337c000 R15: ffff888074fa6000 [ 170.376195][ T6417] FS: 00007f06f5ee06c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 170.385498][ T6417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.415870][ T6417] CR2: 00007f06f5e9ed58 CR3: 000000001e449000 CR4: 00000000003526e0 [ 170.448101][ T6417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.472259][ T6417] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.505593][ T6417] Call Trace: [ 170.522372][ T6417] [ 170.525596][ T6417] kvm_vcpu_ioctl+0x8f2/0xc10 [ 170.549975][ T6417] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 170.557858][ T6417] ? bpf_lsm_file_ioctl+0x5/0x10 [ 170.563382][ T6417] ? security_file_ioctl+0x7c/0xa0 [ 170.568667][ T6417] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 170.575093][ T6417] __se_sys_ioctl+0xfa/0x170 [ 170.579861][ T6417] do_syscall_64+0x4c/0xa0 [ 170.584775][ T6417] ? clear_bhb_loop+0x30/0x80 [ 170.589689][ T6417] ? clear_bhb_loop+0x30/0x80 [ 170.595082][ T6417] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.601236][ T6417] RIP: 0033:0x7f06f7c88159 [ 170.606101][ T6417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.617618][ T6425] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 170.634573][ T6417] RSP: 002b:00007f06f5ee0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.639945][ T6425] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 170.644432][ T6417] RAX: ffffffffffffffda RBX: 00007f06f7f0ffa0 RCX: 00007f06f7c88159 [ 170.659877][ T6417] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 170.667971][ T6417] RBP: 00007f06f7d1f06b R08: 0000000000000000 R09: 0000000000000000 [ 170.676011][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.684072][ T6417] R13: 00007f06f7f10038 R14: 00007f06f7f0ffa0 R15: 00007ffe7ea78fa8 [ 170.692062][ T6417] [ 170.700069][ T6417] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.707394][ T6417] CPU: 1 PID: 6417 Comm: syz.3.701 Not tainted syzkaller #0 [ 170.714672][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.724739][ T6417] Call Trace: [ 170.728026][ T6417] [ 170.730966][ T6417] dump_stack_lvl+0x188/0x250 [ 170.735665][ T6417] ? show_regs_print_info+0x20/0x20 [ 170.740870][ T6417] ? load_image+0x410/0x410 [ 170.745370][ T6417] panic+0x2f8/0x850 [ 170.749264][ T6417] ? bpf_jit_dump+0xd0/0xd0 [ 170.753769][ T6417] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 170.759587][ T6417] __warn+0x248/0x2b0 [ 170.763584][ T6417] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 170.769384][ T6417] report_bug+0x1b9/0x2e0 [ 170.773710][ T6417] handle_bug+0x3a/0x70 [ 170.777859][ T6417] exc_invalid_op+0x16/0x40 [ 170.782364][ T6417] asm_exc_invalid_op+0x16/0x20 [ 170.787221][ T6417] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 170.793644][ T6417] Code: e8 a1 11 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 86 11 af 00 e9 e4 f7 ff ff e8 ec dd 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 170.813278][ T6417] RSP: 0018:ffffc90002f7fca0 EFLAGS: 00010283 [ 170.819339][ T6417] RAX: ffffffff810f36b4 RBX: 1ffff1100466f862 RCX: 0000000000080000 [ 170.827322][ T6417] RDX: ffffc9000d619000 RSI: 0000000000000425 RDI: 0000000000000426 [ 170.835303][ T6417] RBP: 0000000000000000 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd [ 170.843275][ T6417] R10: dffffc0000000000 R11: fffffbfff1b163de R12: ffff888074fa6001 [ 170.851237][ T6417] R13: ffff88802337c0f0 R14: ffff88802337c000 R15: ffff888074fa6000 [ 170.859217][ T6417] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 170.865037][ T6417] kvm_vcpu_ioctl+0x8f2/0xc10 [ 170.869726][ T6417] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 170.875373][ T6417] ? bpf_lsm_file_ioctl+0x5/0x10 [ 170.880296][ T6417] ? security_file_ioctl+0x7c/0xa0 [ 170.885401][ T6417] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 170.891021][ T6417] __se_sys_ioctl+0xfa/0x170 [ 170.895616][ T6417] do_syscall_64+0x4c/0xa0 [ 170.900036][ T6417] ? clear_bhb_loop+0x30/0x80 [ 170.904701][ T6417] ? clear_bhb_loop+0x30/0x80 [ 170.909384][ T6417] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.915282][ T6417] RIP: 0033:0x7f06f7c88159 [ 170.919721][ T6417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.939328][ T6417] RSP: 002b:00007f06f5ee0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.947733][ T6417] RAX: ffffffffffffffda RBX: 00007f06f7f0ffa0 RCX: 00007f06f7c88159 [ 170.955735][ T6417] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 170.963712][ T6417] RBP: 00007f06f7d1f06b R08: 0000000000000000 R09: 0000000000000000 [ 170.971673][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.979646][ T6417] R13: 00007f06f7f10038 R14: 00007f06f7f0ffa0 R15: 00007ffe7ea78fa8 [ 170.987623][ T6417] [ 170.990867][ T6417] Kernel Offset: disabled [ 170.995559][ T6417] Rebooting in 86400 seconds..