last executing test programs: 3m50.305250091s ago: executing program 0 (id=481): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 3m48.992092424s ago: executing program 0 (id=482): fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) setrlimit(0x0, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) io_setup(0x3fe, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) 3m47.752960004s ago: executing program 0 (id=485): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r2], 0x44}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m46.603490853s ago: executing program 0 (id=489): r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x13220c28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) 3m44.068810756s ago: executing program 0 (id=491): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) kcmp(r2, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x2000800) 3m43.556116749s ago: executing program 0 (id=493): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x6, 0x2f6, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f00000002c0), 0x2000000}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000380)={0x9, 0x615, 0x7, 0xffffffff, 0x27, "972c700500141000000000002000052c707400"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38) 3m27.153854057s ago: executing program 32 (id=493): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x6, 0x2f6, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f00000002c0), 0x2000000}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000380)={0x9, 0x615, 0x7, 0xffffffff, 0x27, "972c700500141000000000002000052c707400"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38) 29.779780929s ago: executing program 4 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$netlink(0xffffffffffffffff, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 25.188264763s ago: executing program 4 (id=975): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000140)=0xe996) r4 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) shutdown(r4, 0x1) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) r6 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) connect$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 24.262183517s ago: executing program 4 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 22.387111623s ago: executing program 2 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 21.819204037s ago: executing program 1 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x24044800) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 19.939100414s ago: executing program 4 (id=985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.910866665s ago: executing program 2 (id=986): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x80}, 0x24040040) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x9, 0x0, 0x800, {0x3}}, 0x14}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa40, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) syz_open_dev$vim2m(&(0x7f0000000280), 0xb, 0x2) 18.632743906s ago: executing program 4 (id=988): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)='\b', 0x1) userfaultfd(0x80001) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, ','}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x9, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x793, 0xfffff801, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}}]}, 0x80}, 0x1, 0x7}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x100000000) pipe2$watch_queue(&(0x7f0000000100), 0x80) 18.625765357s ago: executing program 5 (id=989): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0xc12, &(0x7f0000000740)={[{@check_relaxed}, {@session={'session', 0x3d, 0x13}}, {@unhide}, {@cruft}, {@check_strict}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@hide}, {@unhide}, {}, {@hide}, {@session={'session', 0x3d, 0x5d}}]}, 0x4, 0xa09, &(0x7f0000003280)="$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") sendmsg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 16.581168518s ago: executing program 3 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 16.276424005s ago: executing program 1 (id=991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 15.412648167s ago: executing program 3 (id=992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480), 0x0, 0x40800, &(0x7f0000000240)={0x11, 0x2, r6, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 15.327106849s ago: executing program 2 (id=993): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0xc12, &(0x7f0000000740)={[{@check_relaxed}, {@session={'session', 0x3d, 0x13}}, {@unhide}, {@cruft}, {@check_strict}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@hide}, {@unhide}, {}, {@hide}, {@session={'session', 0x3d, 0x5d}}]}, 0x4, 0xa09, &(0x7f0000003280)="$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") sendmsg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 15.218244231s ago: executing program 4 (id=994): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000140)=0xe996) r4 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) shutdown(r4, 0x1) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) connect$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 14.09317063s ago: executing program 1 (id=995): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x80}, 0x24040040) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x9, 0x0, 0x800, {0x3}}, 0x14}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa40, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) syz_open_dev$vim2m(&(0x7f0000000280), 0xb, 0x2) 11.448519965s ago: executing program 2 (id=996): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x80}, 0x24040040) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x9, 0x0, 0x800, {0x3}}, 0x14}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa40, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) syz_open_dev$vim2m(&(0x7f0000000280), 0xb, 0x2) 9.601010901s ago: executing program 5 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 9.529408373s ago: executing program 3 (id=998): syz_open_dev$sg(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=\f', @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c76133", 0xc5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a034"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef", 0x5a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae", 0xb}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1}, @ringbuf_query, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8c}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.914681378s ago: executing program 1 (id=999): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x1800) socket$inet6(0xa, 0x802, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r3 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x30000009}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x10000, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) 6.787529811s ago: executing program 5 (id=1000): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, 0x0}, 0x0) 6.651948824s ago: executing program 3 (id=1001): r0 = socket$key(0xf, 0x3, 0x2) getsockname(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) unshare(0x2000400) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x1, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x4, {0x2, 0x8, 0x0, 0x1, 0x10000, 0x0, 0x5, 0x0, 0x9, 0xc000, 0x0, r5, r6, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x4, 0x1001a, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000500)='./file0/../file0/file0\x00', &(0x7f0000000540)={0x1418c0, 0x88, 0x8}, 0x18) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x2, 0x13, 0x10, 0xf, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x4000) 6.514375758s ago: executing program 3 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 6.450141649s ago: executing program 5 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.518228183s ago: executing program 1 (id=1004): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x80}, 0x24040040) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x9, 0x0, 0x800, {0x3}}, 0x14}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa40, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) syz_open_dev$vim2m(&(0x7f0000000280), 0xb, 0x2) 4.81748024s ago: executing program 2 (id=1005): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 3.274885199s ago: executing program 5 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21", 0x7, 0x40800, &(0x7f0000000240)={0x11, 0x2, r6, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 3.273823489s ago: executing program 3 (id=1007): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1}, @ringbuf_query, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8c}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.81461499s ago: executing program 2 (id=1008): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x80}, 0x24040040) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x9, 0x0, 0x800, {0x3}}, 0x14}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa40, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) syz_open_dev$vim2m(&(0x7f0000000280), 0xb, 0x2) 472.771148ms ago: executing program 1 (id=1009): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0xc12, &(0x7f0000000740)={[{@check_relaxed}, {@session={'session', 0x3d, 0x13}}, {@unhide}, {@cruft}, {@check_strict}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@hide}, {@unhide}, {}, {@hide}, {@session={'session', 0x3d, 0x5d}}]}, 0x4, 0xa09, &(0x7f0000003280)="$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") sendmsg(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 0s ago: executing program 5 (id=1010): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=\f']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c76133", 0xc5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a034"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef", 0x5a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae", 0xb}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1}, @ringbuf_query, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8c}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): illegal pblock 11 (length 1) [ 134.172521][ T5448] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 134.204269][ T5448] EXT4-fs error (device loop3): ext4_write_dquot:6216: comm syz.3.300: Failed to commit dquot type 1 [ 134.244055][ T5448] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.300: Invalid inode table block 34 in block_group 0 [ 134.276921][ T5448] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 134.321355][ T5473] loop4: detected capacity change from 0 to 32768 [ 134.321415][ T5448] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.300: mark_inode_dirty error [ 134.357343][ T5448] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 134.390328][ T5448] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 134.415655][ T5473] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 134.452586][ T5448] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 134.479664][ T5448] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.479664][ T5448] [ 134.481098][ T5486] loop2: detected capacity change from 0 to 128 [ 134.575160][ T5486] FAT-fs (loop2): bogus number of reserved sectors [ 134.614461][ T5486] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 134.617512][ T5473] syz.4.308 (5473) used greatest stack depth: 18304 bytes left [ 134.643072][ T5486] FAT-fs (loop2): Can't find a valid FAT filesystem [ 134.649930][ T5488] configfs-gadget gadget: afunc_bind:1164 Error! [ 134.656667][ T5488] udc dummy_udc.0: failed to start g1: -19 [ 134.666424][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 134.756003][ T5486] loop2: detected capacity change from 0 to 512 [ 134.767302][ T5492] binder: 5491:5492 unknown command 0 [ 134.779930][ T5492] binder: 5491:5492 ioctl c0306201 200000000080 returned -22 [ 134.837044][ T5486] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 134.891315][ T5486] FAT-fs (loop2): Filesystem has been set read-only [ 134.910865][ T5486] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000103) [ 135.051107][ T5503] loop0: detected capacity change from 0 to 2048 [ 135.407373][ T5360] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.492330][ T5503] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 135.671250][ T5503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.393039][ T5357] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.416167][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.422496][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.490630][ T5360] usb 2-1: Using ep0 maxpacket: 32 [ 136.506100][ T5516] loop2: detected capacity change from 0 to 512 [ 136.506226][ T5517] loop3: detected capacity change from 0 to 512 [ 136.536690][ T5516] EXT4-fs (loop2): Ignoring removed bh option [ 136.566522][ T5511] loop0: detected capacity change from 0 to 40427 [ 136.575345][ T5516] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.324: corrupted in-inode xattr [ 136.587703][ T5516] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.324: couldn't read orphan inode 15 (err -117) [ 136.600218][ T5516] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 136.628381][ T5360] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 136.628403][ T5360] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 136.660792][ T5511] F2FS-fs (loop0): invalid crc value [ 136.692818][ T5511] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.699320][ T5357] usb 5-1: Using ep0 maxpacket: 32 [ 136.708712][ T5516] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.324: Unrecognised inode hash code 4 [ 136.712055][ T5360] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 136.721162][ T5516] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.324: Corrupt directory, running e2fsck is recommended [ 136.767712][ T5517] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 136.794600][ T5360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.799527][ T5517] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.809975][ T5360] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.824355][ T5360] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.835809][ T5511] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 136.843190][ T5357] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 136.866777][ T5511] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 136.887938][ T5357] usb 5-1: config 0 has no interface number 0 [ 136.892460][ T5517] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.325: corrupted inode contents [ 136.906262][ T5517] EXT4-fs (loop3): Remounting filesystem read-only [ 136.912794][ T5517] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.325: mark_inode_dirty error [ 136.934469][ T5357] usb 5-1: config 0 interface 12 has no altsetting 0 [ 136.953118][ T5360] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 136.979281][ T5360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.995351][ T5517] EXT4-fs (loop3): Remounting filesystem read-only [ 137.006652][ T5517] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.325: corrupted inode contents [ 137.027850][ T5360] usb 2-1: config 0 descriptor?? [ 137.059989][ T5517] EXT4-fs (loop3): Remounting filesystem read-only [ 137.085659][ T5527] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.325: corrupted inode contents [ 137.150768][ T5527] EXT4-fs (loop3): Remounting filesystem read-only [ 137.157512][ T5527] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.325: mark_inode_dirty error [ 137.157647][ T5357] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 137.182100][ T5527] EXT4-fs (loop3): Remounting filesystem read-only [ 137.188738][ T5357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.204234][ T5527] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.325: corrupted inode contents [ 137.205448][ T5357] usb 5-1: Product: syz [ 137.220419][ T5527] EXT4-fs (loop3): Remounting filesystem read-only [ 137.237636][ T5357] usb 5-1: Manufacturer: syz [ 137.237928][ T5527] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.325: mark_inode_dirty error [ 137.253394][ T5357] usb 5-1: SerialNumber: syz [ 137.258353][ T5527] EXT4-fs (loop3): Remounting filesystem read-only [ 137.273336][ T5527] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.325: corrupted inode contents [ 137.278646][ T5357] usb 5-1: config 0 descriptor?? [ 137.298262][ T4189] handle_bad_sector: 8 callbacks suppressed [ 137.298275][ T4189] attempt to access beyond end of device [ 137.298275][ T4189] loop0: rw=2049, want=45104, limit=40427 [ 137.306669][ T5527] EXT4-fs (loop3): Remounting filesystem read-only [ 137.326262][ T5527] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.325: mark_inode_dirty error [ 137.337793][ T5360] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 137.366336][ T5527] EXT4-fs (loop3): Remounting filesystem read-only [ 137.423357][ T5517] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.325: corrupted inode contents [ 137.438818][ T5517] EXT4-fs (loop3): Remounting filesystem read-only [ 137.444518][ T5532] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.577330][ T1324] usb 2-1: USB disconnect, device number 2 [ 138.309691][ T1324] usblp0: removed [ 138.388032][ T5543] binder: 5542:5543 ioctl c0306201 200000000080 returned -14 [ 138.419098][ T5543] binder: 5542:5543 ioctl c0306201 2000000003c0 returned -14 [ 138.525644][ T5553] binder: 5552:5553 unknown command 0 [ 138.531384][ T5553] binder: 5552:5553 ioctl c0306201 200000004a40 returned -22 [ 139.122942][ T4176] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.152176][ T1324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.404310][ T4176] usb 1-1: Using ep0 maxpacket: 32 [ 139.599546][ T4176] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.611554][ T4176] usb 1-1: config 0 has no interface number 0 [ 139.613878][ T5578] loop2: detected capacity change from 0 to 512 [ 139.617658][ T4176] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 139.617682][ T4176] usb 1-1: config 0 interface 1 has no altsetting 0 [ 139.816314][ T4176] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 139.822127][ T5576] loop3: detected capacity change from 0 to 40427 [ 139.837106][ T4176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.864357][ T4176] usb 1-1: Product: syz [ 139.868569][ T4176] usb 1-1: Manufacturer: syz [ 139.873610][ T5576] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 139.897204][ T4176] usb 1-1: SerialNumber: syz [ 139.904833][ T5576] F2FS-fs (loop3): invalid crc value [ 139.939372][ T5357] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 139.947940][ T5357] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 139.955235][ T5357] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 139.964173][ T4176] usb 1-1: config 0 descriptor?? [ 139.974522][ T5576] F2FS-fs (loop3): invalid crc value [ 139.985910][ T5576] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 139.990543][ T5357] f81534: probe of 5-1:0.12 failed with error -71 [ 140.011367][ T1324] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 140.030674][ T5357] usb 5-1: USB disconnect, device number 5 [ 140.031776][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.058921][ T1324] usb 2-1: config 0 descriptor?? [ 140.127873][ T1324] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 140.278985][ T4176] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 140.309862][ T4176] cx231xx 1-1:0.1: Failed to read PCB config [ 140.316079][ T4176] cx231xx: probe of 1-1:0.1 failed with error -71 [ 140.370431][ T4176] usb 1-1: USB disconnect, device number 4 [ 140.879701][ T5595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.349'. [ 141.117567][ T4176] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.630159][ T4176] usb 1-1: Using ep0 maxpacket: 32 [ 141.743088][ T5609] Bluetooth: Error in BCSP hdr checksum [ 141.767595][ T4176] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.794512][ T4176] usb 1-1: config 0 has no interface number 0 [ 141.824113][ T4176] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 141.865749][ T4176] usb 1-1: config 0 interface 1 has no altsetting 0 [ 142.116528][ T1324] gspca_stv06xx: I2C: Read error writing address: -71 [ 142.134283][ T4176] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 142.150691][ T4176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.250259][ T1324] usb 2-1: USB disconnect, device number 3 [ 142.285786][ T4176] usb 1-1: Product: syz [ 142.992221][ T4176] usb 1-1: config 0 descriptor?? [ 143.037553][ T4176] usb 1-1: can't set config #0, error -71 [ 143.143342][ T4176] usb 1-1: USB disconnect, device number 5 [ 143.942879][ T4766] Bluetooth: hci5: command 0x1003 tx timeout [ 143.949181][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 144.216941][ T5655] 9pnet: p9_client_clunk (5655): Trying to clunk with invalid fid [ 144.269467][ T5655] CPU: 1 PID: 5655 Comm: syz.0.370 Not tainted syzkaller #0 [ 144.276796][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 144.286854][ T5655] Call Trace: [ 144.290136][ T5655] [ 144.293065][ T5655] dump_stack_lvl+0x188/0x250 [ 144.297749][ T5655] ? __rwlock_init+0x140/0x140 [ 144.302526][ T5655] ? show_regs_print_info+0x20/0x20 [ 144.307736][ T5655] ? load_image+0x410/0x410 [ 144.312251][ T5655] ? do_raw_spin_unlock+0x11d/0x230 [ 144.317462][ T5655] ? _raw_spin_unlock+0x24/0x40 [ 144.322327][ T5655] p9_client_clunk+0x2a9/0x380 [ 144.327102][ T5655] ? v9fs_statfs+0xb4/0x380 [ 144.331619][ T5655] v9fs_statfs+0x1b7/0x380 [ 144.336043][ T5655] ? v9fs_drop_inode+0x130/0x130 [ 144.341000][ T5655] ? ovl_mount_dir+0x1f6/0x2b0 [ 144.345772][ T5655] ? kfree+0xef/0x2a0 [ 144.349765][ T5655] vfs_statfs+0x13d/0x2c0 [ 144.354117][ T5655] ovl_get_upper+0x1c0/0x600 [ 144.358715][ T5655] ? ovl_fill_super+0x42a0/0x42a0 [ 144.363758][ T5655] ovl_fill_super+0x152c/0x42a0 [ 144.368641][ T5655] ? ovl_mount+0x30/0x30 [ 144.372897][ T5655] ? __lock_acquire+0x7b50/0x7b50 [ 144.377931][ T5655] ? rwsem_write_trylock+0x135/0x1c0 [ 144.383217][ T5655] ? clear_nonspinnable+0x60/0x60 [ 144.388227][ T5655] ? __lock_acquire+0x7b50/0x7b50 [ 144.393236][ T5655] ? __rwlock_init+0x140/0x140 [ 144.397978][ T5655] ? strlcpy+0x83/0xc0 [ 144.402040][ T5655] ? free_anon_bdev+0x20/0x20 [ 144.406701][ T5655] ? ovl_mount+0x30/0x30 [ 144.410922][ T5655] mount_nodev+0x52/0xe0 [ 144.415147][ T5655] legacy_get_tree+0xe6/0x180 [ 144.419802][ T5655] ? virtio_fs_zero_page_range+0x120/0x120 [ 144.425587][ T5655] vfs_get_tree+0x88/0x270 [ 144.429985][ T5655] do_new_mount+0x247/0xa40 [ 144.434470][ T5655] __se_sys_mount+0x2e3/0x3d0 [ 144.439131][ T5655] ? __x64_sys_mount+0xc0/0xc0 [ 144.443897][ T5655] ? lockdep_hardirqs_on+0x94/0x140 [ 144.449076][ T5655] ? __x64_sys_mount+0x1c/0xc0 [ 144.453824][ T5655] do_syscall_64+0x4c/0xa0 [ 144.458223][ T5655] ? clear_bhb_loop+0x30/0x80 [ 144.462882][ T5655] ? clear_bhb_loop+0x30/0x80 [ 144.467538][ T5655] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.473411][ T5655] RIP: 0033:0x7f619df2af99 [ 144.477806][ T5655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.497403][ T5655] RSP: 002b:00007f619c183028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.505817][ T5655] RAX: ffffffffffffffda RBX: 00007f619e1b2fa0 RCX: 00007f619df2af99 [ 144.513781][ T5655] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 144.521748][ T5655] RBP: 00007f619dfc1ec4 R08: 0000200000000200 R09: 0000000000000000 [ 144.529698][ T5655] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 144.537647][ T5655] R13: 00007f619e1b3038 R14: 00007f619e1b2fa0 R15: 00007fff363b56f8 [ 144.545611][ T5655] [ 144.978109][ T5655] overlayfs: statfs failed on './file0' [ 145.932770][ T5684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.379'. [ 146.226236][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 146.239929][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 148.469627][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 148.699543][ T4766] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 149.478057][ T4766] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 149.488996][ T4766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.497006][ T4766] usb 2-1: Product: syz [ 149.527838][ T4766] usb 2-1: Manufacturer: syz [ 149.539578][ T4766] usb 2-1: SerialNumber: syz [ 149.565574][ T4766] usb 2-1: config 0 descriptor?? [ 149.887320][ T4766] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 150.186365][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.211421][ T4176] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.664146][ T4176] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.669533][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.675554][ T4176] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.707623][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.725813][ T4176] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.749813][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.764723][ T4176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.790505][ T7] usb 5-1: config 0 descriptor?? [ 150.933092][ T4176] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.961895][ T4176] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.987151][ T4176] usb 1-1: Product: syz [ 150.991360][ T4176] usb 1-1: Manufacturer: syz [ 151.074552][ T4176] cdc_wdm 1-1:1.0: skipping garbage [ 151.079792][ T4176] cdc_wdm 1-1:1.0: skipping garbage [ 151.141425][ T4176] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 151.170860][ T4176] cdc_wdm 1-1:1.0: Unknown control protocol [ 151.213743][ T5356] usb 5-1: USB disconnect, device number 6 [ 151.344453][ T4765] usb 1-1: USB disconnect, device number 6 [ 151.435080][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f58e400: rx timeout, send abort [ 151.910796][ T5356] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.977108][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f58ec00: rx timeout, send abort [ 151.994663][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f58e400: abort rx timeout. Force session deactivation [ 152.120159][ T4766] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 152.208332][ T4766] usb 2-1: USB disconnect, device number 4 [ 152.241346][ T5356] usb 5-1: Using ep0 maxpacket: 32 [ 152.399162][ T5356] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.414398][ T5356] usb 5-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice= 0.40 [ 152.434855][ T5356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.462447][ T5356] usb 5-1: config 0 descriptor?? [ 152.521594][ T5356] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 152.534959][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f58ec00: abort rx timeout. Force session deactivation [ 152.560185][ T5356] dvb-usb: bulk message failed: -22 (2/0) [ 152.566877][ T5356] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 152.621833][ T5356] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 152.650917][ T5356] usb 5-1: media controller created [ 152.675241][ T5356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.724309][ T5356] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 152.748954][ T5709] udc-core: couldn't find an available UDC or it's busy [ 152.760846][ T5709] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 152.783349][ T5709] udc-core: couldn't find an available UDC or it's busy [ 152.789839][ T5356] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 152.790302][ T5709] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.083532][ T5356] rc_core: IR keymap rc-dtt200u not found [ 153.121800][ T5356] Registered IR keymap rc-empty [ 153.216248][ T5356] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 153.245638][ T5709] udc-core: couldn't find an available UDC or it's busy [ 153.265132][ T5749] ffs_data_put(): freeing [ 153.271020][ T5709] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.391315][ T5356] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 153.493530][ T5356] dvb-usb: schedule remote query interval to 300 msecs. [ 153.537157][ T5356] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 153.714734][ T5356] usb 5-1: USB disconnect, device number 7 [ 153.930362][ T5356] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 154.065585][ T5761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.402'. [ 154.882234][ T25] audit: type=1804 audit(1785354969.321:12): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.406" name="/newroot/82/file0" dev="fuse" ino=1 res=1 errno=0 [ 155.108380][ T5775] FAULT_INJECTION: forcing a failure. [ 155.108380][ T5775] name fail_page_alloc, interval 1, probability 10, space 0, times 10 [ 155.111019][ T5771] FAULT_INJECTION: forcing a failure. [ 155.111019][ T5771] name fail_page_alloc, interval 1, probability 10, space 0, times 10 [ 155.122793][ T5745] FAULT_INJECTION: forcing a failure. [ 155.122793][ T5745] name fail_page_alloc, interval 1, probability 10, space 0, times 10 [ 155.136870][ T5771] CPU: 1 PID: 5771 Comm: syz.3.408 Not tainted syzkaller #0 [ 155.136891][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.136901][ T5771] Call Trace: [ 155.136908][ T5771] [ 155.136916][ T5771] dump_stack_lvl+0x188/0x250 [ 155.136939][ T5771] ? show_regs_print_info+0x20/0x20 [ 155.157988][ C0] FAULT_INJECTION: forcing a failure. [ 155.157988][ C0] name fail_page_alloc, interval 1, probability 10, space 0, times 10 [ 155.168010][ T5771] ? load_image+0x410/0x410 [ 155.168036][ T5771] ? prandom_u32+0x217/0x250 [ 155.168062][ T5771] should_fail+0x383/0x4b0 [ 155.210815][ T5771] prepare_alloc_pages+0x1e3/0x5b0 [ 155.215925][ T5771] __alloc_pages+0x11b/0x480 [ 155.220509][ T5771] ? zone_statistics+0x170/0x170 [ 155.225446][ T5771] ? rcu_lock_acquire+0x30/0x30 [ 155.230291][ T5771] ? alloc_pages+0x452/0x560 [ 155.234873][ T5771] __get_free_pages+0x8/0x30 [ 155.239451][ T5771] __tlb_remove_page_size+0x1f2/0x3f0 [ 155.244816][ T5771] unmap_page_range+0xfcf/0x2410 [ 155.249764][ T5771] unmap_vmas+0x131/0x250 [ 155.254087][ T5771] ? unmap_page_range+0x2410/0x2410 [ 155.259269][ T5771] ? __mutex_lock_common+0x435/0x2400 [ 155.264631][ T5771] ? exit_mm_release+0x16/0x30 [ 155.269391][ T5771] exit_mmap+0x3b9/0x640 [ 155.273638][ T5771] ? vm_brk+0x20/0x20 [ 155.277618][ T5771] ? uprobe_clear_state+0x2f6/0x460 [ 155.282815][ T5771] __mmput+0x115/0x390 [ 155.286874][ T5771] exit_mm+0x632/0x7b0 [ 155.290928][ T5771] ? perf_pmu_migrate_context+0xb70/0xb70 [ 155.296638][ T5771] ? acct_collect+0x547/0x710 [ 155.301306][ T5771] ? do_exit+0x2110/0x2110 [ 155.305711][ T5771] ? taskstats_exit+0x451/0xae0 [ 155.310561][ T5771] do_exit+0x5b8/0x2110 [ 155.314708][ T5771] ? put_task_struct+0x80/0x80 [ 155.319459][ T5771] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 155.325433][ T5771] ? _raw_spin_lock_irq+0xb7/0xf0 [ 155.330448][ T5771] do_group_exit+0x12c/0x2f0 [ 155.335026][ T5771] ? lockdep_hardirqs_on+0x94/0x140 [ 155.340212][ T5771] get_signal+0x7eb/0x12e0 [ 155.344629][ T5771] arch_do_signal_or_restart+0xe6/0x12a0 [ 155.350262][ T5771] ? futex_exit_release+0x1c0/0x1c0 [ 155.355451][ T5771] ? get_sigframe_size+0x10/0x10 [ 155.360375][ T5771] ? __context_tracking_exit+0x4c/0x80 [ 155.365831][ T5771] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 155.371803][ T5771] ? exit_to_user_mode_loop+0x3b/0x130 [ 155.377251][ T5771] exit_to_user_mode_loop+0x9e/0x130 [ 155.382522][ T5771] exit_to_user_mode_prepare+0xee/0x180 [ 155.388056][ T5771] syscall_exit_to_user_mode+0x16/0x40 [ 155.393506][ T5771] do_syscall_64+0x58/0xa0 [ 155.397907][ T5771] ? clear_bhb_loop+0x30/0x80 [ 155.402570][ T5771] ? clear_bhb_loop+0x30/0x80 [ 155.407233][ T5771] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.413116][ T5771] RIP: 0033:0x7f7d146aaf99 [ 155.417522][ T5771] Code: Unable to access opcode bytes at RIP 0x7f7d146aaf6f. [ 155.424875][ T5771] RSP: 002b:00007f7d129030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.433275][ T5771] RAX: fffffffffffffe00 RBX: 00007f7d14932fa8 RCX: 00007f7d146aaf99 [ 155.441233][ T5771] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7d14932fa8 [ 155.449193][ T5771] RBP: 00007f7d14932fa0 R08: 0000000000000000 R09: 0000000000000000 [ 155.457149][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.465105][ T5771] R13: 00007f7d14933038 R14: 00007ffe68110cd0 R15: 00007ffe68110db8 [ 155.473072][ T5771] [ 155.476079][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 155.480814][ C1] FAULT_INJECTION: forcing a failure. [ 155.480814][ C1] name fail_page_alloc, interval 1, probability 10, space 0, times 9 [ 155.483363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.506650][ C0] Call Trace: [ 155.509920][ C0] [ 155.512844][ C0] dump_stack_lvl+0x188/0x250 [ 155.517515][ C0] ? ret_from_fork+0x1f/0x30 [ 155.522098][ C0] ? show_regs_print_info+0x20/0x20 [ 155.527311][ C0] ? load_image+0x410/0x410 [ 155.531804][ C0] ? stack_trace_save+0xa6/0xf0 [ 155.536643][ C0] ? prandom_u32+0x217/0x250 [ 155.541235][ C0] should_fail+0x383/0x4b0 [ 155.545648][ C0] prepare_alloc_pages+0x1e3/0x5b0 [ 155.550756][ C0] __alloc_pages+0x11b/0x480 [ 155.555337][ C0] ? zone_statistics+0x170/0x170 [ 155.560277][ C0] ? alloc_pages+0x452/0x560 [ 155.564862][ C0] new_slab+0xc0/0x4b0 [ 155.568923][ C0] ___slab_alloc+0x807/0xdd0 [ 155.573503][ C0] ? synproxy_send_client_synack+0x16c/0xd90 [ 155.579478][ C0] __kmalloc_node_track_caller+0x13d/0x3a0 [ 155.585271][ C0] ? synproxy_send_client_synack+0x16c/0xd90 [ 155.591238][ C0] ? __alloc_skb+0xf4/0x750 [ 155.595729][ C0] ? synproxy_send_client_synack+0x16c/0xd90 [ 155.601697][ C0] __alloc_skb+0x22c/0x750 [ 155.606106][ C0] synproxy_send_client_synack+0x16c/0xd90 [ 155.611903][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 155.616921][ C0] ? synproxy_init_timestamp_cookie+0x2c0/0x2c0 [ 155.623159][ C0] nft_synproxy_eval_v4+0x35f/0x4e0 [ 155.628353][ C0] ? nft_synproxy_do_eval+0x550/0x550 [ 155.633723][ C0] nft_synproxy_do_eval+0x32e/0x550 [ 155.638910][ C0] ? nft_synproxy_validate+0xc0/0xc0 [ 155.644182][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 155.649545][ C0] ? _local_bh_enable+0xa0/0xa0 [ 155.654392][ C0] nft_do_chain+0x491/0x14d0 [ 155.658982][ C0] ? mark_lock+0x94/0x320 [ 155.663298][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 155.669185][ C0] ? lock_chain_count+0x20/0x20 [ 155.674048][ C0] ? nf_nat_inet_fn+0x8a0/0xad0 [ 155.678899][ C0] nft_do_chain_inet+0x25c/0x340 [ 155.683828][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 155.688676][ C0] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 155.694042][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 155.698882][ C0] nf_hook_slow+0xb9/0x200 [ 155.703289][ C0] ? NF_HOOK+0x390/0x390 [ 155.707520][ C0] NF_HOOK+0x1f2/0x390 [ 155.711575][ C0] ? NF_HOOK+0x390/0x390 [ 155.715806][ C0] ? ip_local_deliver+0x180/0x180 [ 155.720820][ C0] ? NF_HOOK+0x390/0x390 [ 155.725056][ C0] ? ip_local_deliver+0x107/0x180 [ 155.730073][ C0] ? ip_rcv_core+0xb30/0xb30 [ 155.734655][ C0] NF_HOOK+0x303/0x390 [ 155.738710][ C0] ? ip_rcv_core+0xb30/0xb30 [ 155.743295][ C0] ? ip_local_deliver+0x180/0x180 [ 155.748309][ C0] ? ip_rcv_core+0xb30/0xb30 [ 155.752888][ C0] ? ip_rcv_core+0x72c/0xb30 [ 155.757469][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 155.763096][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 155.768718][ C0] __netif_receive_skb+0xcc/0x290 [ 155.773742][ C0] process_backlog+0x366/0x770 [ 155.778506][ C0] ? rps_trigger_softirq+0x210/0x210 [ 155.783777][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 155.789757][ C0] ? lock_chain_count+0x20/0x20 [ 155.794600][ C0] __napi_poll+0xbb/0x430 [ 155.798924][ C0] net_rx_action+0x522/0xa80 [ 155.803509][ C0] ? net_tx_action+0x880/0x880 [ 155.808257][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 155.814228][ C0] ? lock_chain_count+0x20/0x20 [ 155.819081][ C0] handle_softirqs+0x336/0x830 [ 155.823837][ C0] ? run_ksoftirqd+0xa4/0x100 [ 155.828508][ C0] ? do_softirq+0x210/0x210 [ 155.832998][ C0] ? run_ksoftirqd+0x81/0x100 [ 155.837662][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 155.842846][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 155.848124][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 155.853306][ C0] run_ksoftirqd+0xa4/0x100 [ 155.857798][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 155.862988][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 155.868352][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 155.873456][ C0] smpboot_thread_fn+0x520/0x990 [ 155.878392][ C0] kthread+0x42e/0x520 [ 155.882450][ C0] ? cpu_report_death+0x180/0x180 [ 155.887468][ C0] ? kthread_blkcg+0xd0/0xd0 [ 155.892047][ C0] ret_from_fork+0x1f/0x30 [ 155.896462][ C0] [ 155.899470][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 155.899511][ C0] FAULT_INJECTION: forcing a failure. [ 155.899511][ C0] name fail_page_alloc, interval 1, probability 10, space 0, times 8 [ 155.906753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.906765][ C1] Call Trace: [ 155.906773][ C1] [ 155.906780][ C1] dump_stack_lvl+0x188/0x250 [ 155.940868][ C1] ? ret_from_fork+0x1f/0x30 [ 155.945456][ C1] ? show_regs_print_info+0x20/0x20 [ 155.950653][ C1] ? load_image+0x410/0x410 [ 155.955157][ C1] ? stack_trace_save+0xa6/0xf0 [ 155.959999][ C1] ? prandom_u32+0x217/0x250 [ 155.964585][ C1] should_fail+0x383/0x4b0 [ 155.968994][ C1] prepare_alloc_pages+0x1e3/0x5b0 [ 155.974104][ C1] __alloc_pages+0x11b/0x480 [ 155.978691][ C1] ? zone_statistics+0x170/0x170 [ 155.983631][ C1] ? alloc_pages+0x452/0x560 [ 155.988216][ C1] new_slab+0xc0/0x4b0 [ 155.992292][ C1] ___slab_alloc+0x807/0xdd0 [ 155.996873][ C1] ? synproxy_send_client_synack+0x16c/0xd90 [ 156.002851][ C1] __kmalloc_node_track_caller+0x13d/0x3a0 [ 156.008651][ C1] ? synproxy_send_client_synack+0x16c/0xd90 [ 156.014624][ C1] ? __alloc_skb+0xf4/0x750 [ 156.019120][ C1] ? synproxy_send_client_synack+0x16c/0xd90 [ 156.025092][ C1] __alloc_skb+0x22c/0x750 [ 156.029506][ C1] synproxy_send_client_synack+0x16c/0xd90 [ 156.035309][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 156.040331][ C1] ? synproxy_init_timestamp_cookie+0x2c0/0x2c0 [ 156.046569][ C1] nft_synproxy_eval_v4+0x35f/0x4e0 [ 156.051767][ C1] ? nft_synproxy_do_eval+0x550/0x550 [ 156.057137][ C1] nft_synproxy_do_eval+0x32e/0x550 [ 156.062327][ C1] ? nft_synproxy_validate+0xc0/0xc0 [ 156.067598][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 156.072634][ C1] nft_do_chain+0x491/0x14d0 [ 156.077244][ C1] ? mark_lock+0x94/0x320 [ 156.081565][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 156.087454][ C1] ? lock_chain_count+0x20/0x20 [ 156.092324][ C1] ? nf_nat_inet_fn+0x8a0/0xad0 [ 156.097178][ C1] nft_do_chain_inet+0x25c/0x340 [ 156.102112][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 156.106966][ C1] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 156.112338][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 156.117182][ C1] nf_hook_slow+0xb9/0x200 [ 156.121588][ C1] ? NF_HOOK+0x390/0x390 [ 156.125826][ C1] NF_HOOK+0x1f2/0x390 [ 156.129884][ C1] ? NF_HOOK+0x390/0x390 [ 156.134121][ C1] ? ip_local_deliver+0x180/0x180 [ 156.139139][ C1] ? NF_HOOK+0x390/0x390 [ 156.143373][ C1] ? ip_local_deliver+0x107/0x180 [ 156.148386][ C1] ? ip_rcv_core+0xb30/0xb30 [ 156.152972][ C1] NF_HOOK+0x303/0x390 [ 156.157028][ C1] ? ip_rcv_core+0xb30/0xb30 [ 156.161608][ C1] ? ip_local_deliver+0x180/0x180 [ 156.166638][ C1] ? ip_rcv_core+0xb30/0xb30 [ 156.171218][ C1] ? ip_rcv_core+0x72c/0xb30 [ 156.175798][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 156.181427][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 156.187050][ C1] __netif_receive_skb+0xcc/0x290 [ 156.192071][ C1] process_backlog+0x366/0x770 [ 156.196834][ C1] ? rps_trigger_softirq+0x210/0x210 [ 156.202105][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.208075][ C1] ? __rwlock_init+0x140/0x140 [ 156.212825][ C1] ? lock_chain_count+0x20/0x20 [ 156.217665][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 156.222855][ C1] __napi_poll+0xbb/0x430 [ 156.227174][ C1] net_rx_action+0x522/0xa80 [ 156.231759][ C1] ? net_tx_action+0x880/0x880 [ 156.236512][ C1] ? detach_timer+0x2b0/0x2b0 [ 156.241190][ C1] handle_softirqs+0x336/0x830 [ 156.245946][ C1] ? run_ksoftirqd+0xa4/0x100 [ 156.250612][ C1] ? do_softirq+0x210/0x210 [ 156.255108][ C1] ? run_ksoftirqd+0x81/0x100 [ 156.259771][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 156.264957][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 156.270235][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 156.275419][ C1] run_ksoftirqd+0xa4/0x100 [ 156.279910][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 156.285095][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 156.290462][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 156.295565][ C1] smpboot_thread_fn+0x520/0x990 [ 156.300502][ C1] kthread+0x42e/0x520 [ 156.304562][ C1] ? cpu_report_death+0x180/0x180 [ 156.309578][ C1] ? kthread_blkcg+0xd0/0xd0 [ 156.314159][ C1] ret_from_fork+0x1f/0x30 [ 156.318576][ C1] [ 156.321584][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 156.326543][ C1] FAULT_INJECTION: forcing a failure. [ 156.326543][ C1] name fail_page_alloc, interval 1, probability 10, space 0, times 7 [ 156.328870][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 156.352159][ C0] Call Trace: [ 156.355427][ C0] [ 156.358345][ C0] dump_stack_lvl+0x188/0x250 [ 156.363018][ C0] ? ret_from_fork+0x1f/0x30 [ 156.367600][ C0] ? show_regs_print_info+0x20/0x20 [ 156.372788][ C0] ? load_image+0x410/0x410 [ 156.377279][ C0] ? stack_trace_save+0xa6/0xf0 [ 156.382121][ C0] ? prandom_u32+0x217/0x250 [ 156.386710][ C0] should_fail+0x383/0x4b0 [ 156.391124][ C0] prepare_alloc_pages+0x1e3/0x5b0 [ 156.396232][ C0] __alloc_pages+0x11b/0x480 [ 156.400813][ C0] ? zone_statistics+0x170/0x170 [ 156.405752][ C0] ? alloc_pages+0x452/0x560 [ 156.410333][ C0] new_slab+0x2dc/0x4b0 [ 156.414480][ C0] ___slab_alloc+0x807/0xdd0 [ 156.419062][ C0] ? synproxy_send_client_synack+0x16c/0xd90 [ 156.425042][ C0] __kmalloc_node_track_caller+0x13d/0x3a0 [ 156.430836][ C0] ? synproxy_send_client_synack+0x16c/0xd90 [ 156.436805][ C0] ? __alloc_skb+0xf4/0x750 [ 156.441295][ C0] ? synproxy_send_client_synack+0x16c/0xd90 [ 156.447268][ C0] __alloc_skb+0x22c/0x750 [ 156.451674][ C0] synproxy_send_client_synack+0x16c/0xd90 [ 156.457472][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 156.462491][ C0] ? synproxy_init_timestamp_cookie+0x2c0/0x2c0 [ 156.468729][ C0] nft_synproxy_eval_v4+0x35f/0x4e0 [ 156.473923][ C0] ? nft_synproxy_do_eval+0x550/0x550 [ 156.479291][ C0] nft_synproxy_do_eval+0x32e/0x550 [ 156.484479][ C0] ? nft_synproxy_validate+0xc0/0xc0 [ 156.489752][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 156.495114][ C0] ? _local_bh_enable+0xa0/0xa0 [ 156.499964][ C0] nft_do_chain+0x491/0x14d0 [ 156.504552][ C0] ? mark_lock+0x94/0x320 [ 156.508865][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 156.514750][ C0] ? lock_chain_count+0x20/0x20 [ 156.519612][ C0] ? nf_nat_inet_fn+0x8a0/0xad0 [ 156.524463][ C0] nft_do_chain_inet+0x25c/0x340 [ 156.529396][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 156.534247][ C0] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 156.539612][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 156.544451][ C0] nf_hook_slow+0xb9/0x200 [ 156.548859][ C0] ? NF_HOOK+0x390/0x390 [ 156.553097][ C0] NF_HOOK+0x1f2/0x390 [ 156.557157][ C0] ? NF_HOOK+0x390/0x390 [ 156.561388][ C0] ? ip_local_deliver+0x180/0x180 [ 156.566404][ C0] ? NF_HOOK+0x390/0x390 [ 156.570642][ C0] ? ip_local_deliver+0x107/0x180 [ 156.575655][ C0] ? ip_rcv_core+0xb30/0xb30 [ 156.580237][ C0] NF_HOOK+0x303/0x390 [ 156.584293][ C0] ? ip_rcv_core+0xb30/0xb30 [ 156.588873][ C0] ? ip_local_deliver+0x180/0x180 [ 156.593890][ C0] ? ip_rcv_core+0xb30/0xb30 [ 156.598467][ C0] ? ip_rcv_core+0x72c/0xb30 [ 156.603049][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 156.608676][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 156.614300][ C0] __netif_receive_skb+0xcc/0x290 [ 156.619320][ C0] process_backlog+0x366/0x770 [ 156.624093][ C0] ? rps_trigger_softirq+0x210/0x210 [ 156.629367][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.635340][ C0] ? lock_chain_count+0x20/0x20 [ 156.640184][ C0] __napi_poll+0xbb/0x430 [ 156.644507][ C0] net_rx_action+0x522/0xa80 [ 156.649093][ C0] ? net_tx_action+0x880/0x880 [ 156.653843][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.659813][ C0] ? lock_chain_count+0x20/0x20 [ 156.664667][ C0] handle_softirqs+0x336/0x830 [ 156.669421][ C0] ? run_ksoftirqd+0xa4/0x100 [ 156.674094][ C0] ? do_softirq+0x210/0x210 [ 156.678585][ C0] ? run_ksoftirqd+0x81/0x100 [ 156.683248][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 156.688431][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 156.693705][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 156.698890][ C0] run_ksoftirqd+0xa4/0x100 [ 156.703380][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 156.708572][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 156.713934][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 156.719050][ C0] smpboot_thread_fn+0x520/0x990 [ 156.724013][ C0] kthread+0x42e/0x520 [ 156.728078][ C0] ? cpu_report_death+0x180/0x180 [ 156.733094][ C0] ? kthread_blkcg+0xd0/0xd0 [ 156.737676][ C0] ret_from_fork+0x1f/0x30 [ 156.742093][ C0] [ 156.745098][ C1] CPU: 1 PID: 5356 Comm: kworker/1:16 Not tainted syzkaller #0 [ 156.747279][ T4174] FAULT_INJECTION: forcing a failure. [ 156.747279][ T4174] name fail_page_alloc, interval 1, probability 10, space 0, times 6 [ 156.752635][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 156.775925][ C1] Workqueue: events nsim_dev_trap_report_work [ 156.782007][ C1] Call Trace: [ 156.785286][ C1] [ 156.786116][ T3548] FAULT_INJECTION: forcing a failure. [ 156.786116][ T3548] name fail_page_alloc, interval 1, probability 10, space 0, times 6 [ 156.788127][ C1] dump_stack_lvl+0x188/0x250 [ 156.788155][ C1] ? show_regs_print_info+0x20/0x20 [ 156.811250][ C1] ? load_image+0x410/0x410 [ 156.815755][ C1] ? prandom_u32+0x217/0x250 [ 156.820349][ C1] should_fail+0x383/0x4b0 [ 156.824763][ C1] prepare_alloc_pages+0x1e3/0x5b0 [ 156.829886][ C1] __alloc_pages+0x11b/0x480 [ 156.834479][ C1] ? zone_statistics+0x170/0x170 [ 156.839413][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 156.843616][ T5776] FAULT_INJECTION: forcing a failure. [ 156.843616][ T5776] name fail_page_alloc, interval 1, probability 10, space 0, times 6 [ 156.844434][ C1] new_slab+0xc0/0x4b0 [ 156.844459][ C1] ___slab_alloc+0x807/0xdd0 [ 156.844480][ C1] ? __alloc_skb+0xf4/0x750 [ 156.844502][ C1] kmem_cache_alloc_node+0x118/0x2c0 [ 156.876822][ C1] ? __alloc_skb+0xf4/0x750 [ 156.881334][ C1] __alloc_skb+0xf4/0x750 [ 156.885655][ C1] synproxy_send_client_synack+0x16c/0xd90 [ 156.891458][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 156.896478][ C1] ? synproxy_init_timestamp_cookie+0x2c0/0x2c0 [ 156.902715][ C1] nft_synproxy_eval_v4+0x35f/0x4e0 [ 156.907912][ C1] ? nft_synproxy_do_eval+0x550/0x550 [ 156.913281][ C1] nft_synproxy_do_eval+0x32e/0x550 [ 156.918471][ C1] ? deref_stack_reg+0xd0/0x120 [ 156.923317][ C1] ? nft_synproxy_validate+0xc0/0xc0 [ 156.928600][ C1] ? deref_stack_reg+0xd0/0x120 [ 156.933451][ C1] nft_do_chain+0x491/0x14d0 [ 156.938032][ C1] ? stack_trace_save+0xf0/0xf0 [ 156.942876][ C1] ? mark_lock+0x94/0x320 [ 156.947195][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 156.953091][ C1] ? lock_chain_count+0x20/0x20 [ 156.957972][ C1] ? nf_nat_inet_fn+0x8a0/0xad0 [ 156.962841][ C1] nft_do_chain_inet+0x25c/0x340 [ 156.967784][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 156.972644][ C1] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 156.978017][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 156.982866][ C1] nf_hook_slow+0xb9/0x200 [ 156.987272][ C1] ? NF_HOOK+0x390/0x390 [ 156.991506][ C1] NF_HOOK+0x1f2/0x390 [ 156.995562][ C1] ? NF_HOOK+0x390/0x390 [ 156.999798][ C1] ? ip_local_deliver+0x180/0x180 [ 157.004827][ C1] ? NF_HOOK+0x390/0x390 [ 157.009072][ C1] ? ip_local_deliver+0x107/0x180 [ 157.010100][ T4196] FAULT_INJECTION: forcing a failure. [ 157.010100][ T4196] name fail_page_alloc, interval 1, probability 10, space 0, times 6 [ 157.014098][ C1] ? ip_rcv_core+0xb30/0xb30 [ 157.014121][ C1] NF_HOOK+0x303/0x390 [ 157.014141][ C1] ? ip_rcv_core+0xb30/0xb30 [ 157.040570][ C1] ? ip_local_deliver+0x180/0x180 [ 157.045593][ C1] ? ip_rcv_core+0xb30/0xb30 [ 157.050173][ C1] ? ip_rcv_core+0x72c/0xb30 [ 157.054756][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 157.060380][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 157.066010][ C1] __netif_receive_skb+0xcc/0x290 [ 157.071037][ C1] process_backlog+0x366/0x770 [ 157.075811][ C1] ? rps_trigger_softirq+0x210/0x210 [ 157.081094][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.087070][ C1] ? __rwlock_init+0x140/0x140 [ 157.091841][ C1] ? lock_chain_count+0x20/0x20 [ 157.096686][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 157.101880][ C1] __napi_poll+0xbb/0x430 [ 157.106208][ C1] net_rx_action+0x522/0xa80 [ 157.110797][ C1] ? net_tx_action+0x880/0x880 [ 157.115554][ C1] ? detach_timer+0x2b0/0x2b0 [ 157.120241][ C1] handle_softirqs+0x336/0x830 [ 157.125008][ C1] ? do_softirq+0x142/0x210 [ 157.129506][ C1] ? do_softirq+0x210/0x210 [ 157.134007][ C1] do_softirq+0x142/0x210 [ 157.138330][ C1] [ 157.141253][ C1] [ 157.144180][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 157.149545][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 157.155520][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 157.160795][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 157.166072][ C1] ? nsim_dev_trap_report_work+0x769/0xab0 [ 157.171870][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 157.177059][ C1] ? _local_bh_enable+0xa0/0xa0 [ 157.181899][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 157.187089][ C1] ? nsim_dev_trap_report_work+0x769/0xab0 [ 157.192886][ C1] nsim_dev_trap_report_work+0x769/0xab0 [ 157.198522][ C1] process_one_work+0x867/0xff0 [ 157.203377][ C1] ? worker_detach_from_pool+0x240/0x240 [ 157.208998][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 157.214275][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 157.219292][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 157.224831][ C1] ? wq_worker_running+0x97/0x170 [ 157.229846][ C1] worker_thread+0xad7/0x12a0 [ 157.234530][ C1] kthread+0x42e/0x520 [ 157.238589][ C1] ? rcu_lock_release+0x20/0x20 [ 157.243425][ C1] ? kthread_blkcg+0xd0/0xd0 [ 157.248000][ C1] ret_from_fork+0x1f/0x30 [ 157.252417][ C1] [ 157.255424][ T3548] CPU: 0 PID: 3548 Comm: klogd Not tainted syzkaller #0 [ 157.262364][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.271536][ T5356] FAULT_INJECTION: forcing a failure. [ 157.271536][ T5356] name fail_page_alloc, interval 1, probability 10, space 0, times 5 [ 157.272413][ T3548] Call Trace: [ 157.272422][ T3548] [ 157.272430][ T3548] dump_stack_lvl+0x188/0x250 [ 157.296510][ T3548] ? show_regs_print_info+0x20/0x20 [ 157.301696][ T3548] ? load_image+0x410/0x410 [ 157.306192][ T3548] ? prandom_u32+0x217/0x250 [ 157.310777][ T3548] should_fail+0x383/0x4b0 [ 157.315188][ T3548] prepare_alloc_pages+0x1e3/0x5b0 [ 157.320294][ T3548] __alloc_pages+0x11b/0x480 [ 157.324872][ T3548] ? zone_statistics+0x170/0x170 [ 157.329804][ T3548] ? alloc_pages+0x452/0x560 [ 157.334382][ T3548] new_slab+0xc0/0x4b0 [ 157.338440][ T3548] ___slab_alloc+0x807/0xdd0 [ 157.343016][ T3548] ? __alloc_skb+0xf4/0x750 [ 157.347507][ T3548] kmem_cache_alloc_node+0x118/0x2c0 [ 157.352778][ T3548] ? __alloc_skb+0xf4/0x750 [ 157.357278][ T3548] __alloc_skb+0xf4/0x750 [ 157.361596][ T3548] alloc_skb_with_frags+0xa7/0x720 [ 157.366699][ T3548] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 157.372667][ T3548] sock_alloc_send_pskb+0x87f/0x9a0 [ 157.377863][ T3548] ? sock_kzfree_s+0x50/0x50 [ 157.382436][ T3548] ? do_raw_spin_lock+0x128/0x2f0 [ 157.387457][ T3548] ? __rwlock_init+0x140/0x140 [ 157.392207][ T3548] ? mark_lock+0x94/0x320 [ 157.396520][ T3548] ? do_raw_spin_unlock+0x11d/0x230 [ 157.401712][ T3548] unix_dgram_sendmsg+0x6f8/0x19c0 [ 157.406818][ T3548] ? aa_sk_perm+0x7dc/0x910 [ 157.411317][ T3548] ? aa_af_perm+0x340/0x340 [ 157.415807][ T3548] ? unix_dgram_poll+0x680/0x680 [ 157.420727][ T3548] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 157.427136][ T3548] ? apparmor_socket_sendmsg+0x88/0x230 [ 157.432665][ T3548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 157.437935][ T3548] ? security_socket_sendmsg+0x7c/0xa0 [ 157.443382][ T3548] __sys_sendto+0x46d/0x620 [ 157.447873][ T3548] ? __ia32_sys_getpeername+0x80/0x80 [ 157.453251][ T3548] ? lock_chain_count+0x20/0x20 [ 157.458094][ T3548] __x64_sys_sendto+0xda/0xf0 [ 157.462766][ T3548] do_syscall_64+0x4c/0xa0 [ 157.467172][ T3548] ? clear_bhb_loop+0x30/0x80 [ 157.471837][ T3548] ? clear_bhb_loop+0x30/0x80 [ 157.476501][ T3548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.482380][ T3548] RIP: 0033:0x7fc0d71fc407 [ 157.486795][ T3548] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 157.506394][ T3548] RSP: 002b:00007ffcfb2f1f40 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 157.514795][ T3548] RAX: ffffffffffffffda RBX: 00007fc0d70acc80 RCX: 00007fc0d71fc407 [ 157.522755][ T3548] RDX: 0000000000000052 RSI: 00007ffcfb2f2080 RDI: 0000000000000003 [ 157.530718][ T3548] RBP: 00007ffcfb2f24b0 R08: 0000000000000000 R09: 0000000000000000 [ 157.538673][ T3548] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffcfb2f24c8 [ 157.546628][ T3548] R13: 00007ffcfb2f2080 R14: 0000000000000037 R15: 00007ffcfb2f2080 [ 157.554596][ T3548] [ 157.557601][ T5356] CPU: 1 PID: 5356 Comm: kworker/1:16 Not tainted syzkaller #0 [ 157.559755][ T3852] FAULT_INJECTION: forcing a failure. [ 157.559755][ T3852] name fail_page_alloc, interval 1, probability 10, space 0, times 5 [ 157.565142][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.565156][ T5356] Workqueue: events nsim_dev_trap_report_work [ 157.565180][ T5356] Call Trace: [ 157.565186][ T5356] [ 157.565193][ T5356] dump_stack_lvl+0x188/0x250 [ 157.606281][ T5356] ? show_regs_print_info+0x20/0x20 [ 157.611477][ T5356] ? load_image+0x410/0x410 [ 157.615969][ T5356] ? mark_lock+0x94/0x320 [ 157.620286][ T5356] ? prandom_u32+0x217/0x250 [ 157.624871][ T5356] should_fail+0x383/0x4b0 [ 157.629283][ T5356] prepare_alloc_pages+0x1e3/0x5b0 [ 157.634390][ T5356] __alloc_pages+0x11b/0x480 [ 157.638973][ T5356] ? zone_statistics+0x170/0x170 [ 157.643901][ T5356] ? __lock_acquire+0x7b50/0x7b50 [ 157.648923][ T5356] new_slab+0xc0/0x4b0 [ 157.652982][ T5356] ___slab_alloc+0x807/0xdd0 [ 157.657563][ T5356] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 157.663363][ T5356] __kmalloc_node_track_caller+0x13d/0x3a0 [ 157.669156][ T5356] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 157.674948][ T5356] ? __alloc_skb+0xf4/0x750 [ 157.679438][ T5356] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 157.685235][ T5356] __alloc_skb+0x22c/0x750 [ 157.689654][ T5356] nsim_dev_trap_report_work+0x25c/0xab0 [ 157.695289][ T5356] process_one_work+0x867/0xff0 [ 157.700144][ T5356] ? worker_detach_from_pool+0x240/0x240 [ 157.705766][ T5356] ? lockdep_hardirqs_off+0x70/0x100 [ 157.711043][ T5356] ? _raw_spin_lock_irq+0xb7/0xf0 [ 157.716056][ T5356] ? _raw_spin_lock_irqsave+0x100/0x100 [ 157.721591][ T5356] ? wq_worker_running+0x97/0x170 [ 157.726607][ T5356] worker_thread+0xad7/0x12a0 [ 157.731295][ T5356] kthread+0x42e/0x520 [ 157.735349][ T5356] ? rcu_lock_release+0x20/0x20 [ 157.740186][ T5356] ? kthread_blkcg+0xd0/0xd0 [ 157.744776][ T5356] ret_from_fork+0x1f/0x30 [ 157.749191][ T5356] [ 157.752196][ T3852] CPU: 0 PID: 3852 Comm: dhcpcd Not tainted syzkaller #0 [ 157.753116][ T5356] FAULT_INJECTION: forcing a failure. [ 157.753116][ T5356] name fail_page_alloc, interval 1, probability 10, space 0, times 4 [ 157.759217][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.759229][ T3852] Call Trace: [ 157.759236][ T3852] [ 157.759242][ T3852] dump_stack_lvl+0x188/0x250 [ 157.759267][ T3852] ? show_regs_print_info+0x20/0x20 [ 157.798548][ T3852] ? load_image+0x410/0x410 [ 157.803044][ T3852] ? prandom_u32+0x217/0x250 [ 157.807629][ T3852] should_fail+0x383/0x4b0 [ 157.812040][ T3852] prepare_alloc_pages+0x1e3/0x5b0 [ 157.817145][ T3852] __alloc_pages+0x11b/0x480 [ 157.821723][ T3852] ? zone_statistics+0x170/0x170 [ 157.826666][ T3852] get_zeroed_page+0x13/0x30 [ 157.831242][ T3852] __pud_alloc+0x31/0x140 [ 157.835558][ T3852] ? copy_page_range+0x62b/0x32c0 [ 157.840574][ T3852] copy_page_range+0x2d19/0x32c0 [ 157.845503][ T3852] ? verify_lock_unused+0x140/0x140 [ 157.850712][ T3852] ? copy_mm+0xb54/0x13d0 [ 157.855037][ T3852] ? pfn_valid+0x380/0x380 [ 157.859443][ T3852] ? validate_mm_rb+0x201/0x230 [ 157.864283][ T3852] ? validate_mm_rb+0x230/0x230 [ 157.869123][ T3852] ? vma_gap_callbacks_rotate+0x196/0x1f0 [ 157.874833][ T3852] copy_mm+0xc61/0x13d0 [ 157.878985][ T3852] ? copy_signal+0x610/0x610 [ 157.883563][ T3852] ? __init_rwsem+0x11e/0x160 [ 157.888230][ T3852] ? copy_signal+0x501/0x610 [ 157.892809][ T3852] copy_process+0x17fb/0x3ec0 [ 157.897490][ T3852] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 157.903461][ T3852] ? __pidfd_prepare+0x140/0x140 [ 157.908386][ T3852] ? verify_lock_unused+0x140/0x140 [ 157.913579][ T3852] kernel_clone+0x23f/0x990 [ 157.918073][ T3852] ? create_io_thread+0x180/0x180 [ 157.923098][ T3852] __x64_sys_clone+0x19a/0x210 [ 157.927851][ T3852] ? __ia32_sys_vfork+0x130/0x130 [ 157.932885][ T3852] ? lockdep_hardirqs_on+0x94/0x140 [ 157.938084][ T3852] do_syscall_64+0x4c/0xa0 [ 157.942495][ T3852] ? clear_bhb_loop+0x30/0x80 [ 157.947160][ T3852] ? clear_bhb_loop+0x30/0x80 [ 157.951826][ T3852] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.957711][ T3852] RIP: 0033:0x7f5eca334636 [ 157.962120][ T3852] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 157.981717][ T3852] RSP: 002b:00007ffd2f6a77b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 157.990124][ T3852] RAX: ffffffffffffffda RBX: 00007ffd2f6a77b8 RCX: 00007f5eca334636 [ 157.998087][ T3852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 158.006047][ T3852] RBP: 00007ffd2f6c7d00 R08: 0000000000000000 R09: 0000000000000001 [ 158.014005][ T3852] R10: 00007f5eca260a10 R11: 0000000000000246 R12: 00007ffd2f6a78f0 [ 158.021964][ T3852] R13: 0000000000000000 R14: 0000000000000000 R15: 000055b69b82aac0 [ 158.029934][ T3852] [ 158.032940][ T5356] CPU: 1 PID: 5356 Comm: kworker/1:16 Not tainted syzkaller #0 [ 158.040493][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.050541][ T5356] Workqueue: events nsim_dev_trap_report_work [ 158.056606][ T5356] Call Trace: [ 158.059875][ T5356] [ 158.062797][ T5356] dump_stack_lvl+0x188/0x250 [ 158.067473][ T5356] ? ret_from_fork+0x1f/0x30 [ 158.072054][ T5356] ? show_regs_print_info+0x20/0x20 [ 158.077242][ T5356] ? load_image+0x410/0x410 [ 158.081740][ T5356] ? stack_trace_save+0xa6/0xf0 [ 158.086587][ T5356] ? prandom_u32+0x217/0x250 [ 158.091176][ T5356] should_fail+0x383/0x4b0 [ 158.095589][ T5356] prepare_alloc_pages+0x1e3/0x5b0 [ 158.100700][ T5356] __alloc_pages+0x11b/0x480 [ 158.105291][ T5356] ? zone_statistics+0x170/0x170 [ 158.110227][ T5356] ? alloc_pages+0x452/0x560 [ 158.114810][ T5356] new_slab+0xc0/0x4b0 [ 158.118872][ T5356] ___slab_alloc+0x807/0xdd0 [ 158.123453][ T5356] ? __alloc_skb+0xf4/0x750 [ 158.127955][ T5356] kmem_cache_alloc_node+0x118/0x2c0 [ 158.133231][ T5356] ? __alloc_skb+0xf4/0x750 [ 158.137732][ T5356] __alloc_skb+0xf4/0x750 [ 158.142058][ T5356] nsim_dev_trap_report_work+0x25c/0xab0 [ 158.147693][ T5356] process_one_work+0x867/0xff0 [ 158.152558][ T5356] ? worker_detach_from_pool+0x240/0x240 [ 158.158181][ T5356] ? lockdep_hardirqs_off+0x70/0x100 [ 158.163463][ T5356] ? _raw_spin_lock_irq+0xb7/0xf0 [ 158.168478][ T5356] ? _raw_spin_lock_irqsave+0x100/0x100 [ 158.174023][ T5356] ? wq_worker_running+0x97/0x170 [ 158.179042][ T5356] worker_thread+0xad7/0x12a0 [ 158.183736][ T5356] kthread+0x42e/0x520 [ 158.187791][ T5356] ? rcu_lock_release+0x20/0x20 [ 158.192629][ T5356] ? kthread_blkcg+0xd0/0xd0 [ 158.197206][ T5356] ret_from_fork+0x1f/0x30 [ 158.201626][ T5356] [ 158.204635][ T4196] CPU: 0 PID: 4196 Comm: syz-executor Not tainted syzkaller #0 [ 158.204672][ T5356] FAULT_INJECTION: forcing a failure. [ 158.204672][ T5356] name fail_page_alloc, interval 1, probability 10, space 0, times 3 [ 158.212172][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.212183][ T4196] Call Trace: [ 158.212190][ T4196] [ 158.212198][ T4196] dump_stack_lvl+0x188/0x250 [ 158.246297][ T4196] ? show_regs_print_info+0x20/0x20 [ 158.251482][ T4196] ? load_image+0x410/0x410 [ 158.255977][ T4196] ? prandom_u32+0x217/0x250 [ 158.260562][ T4196] should_fail+0x383/0x4b0 [ 158.264966][ T4196] prepare_alloc_pages+0x1e3/0x5b0 [ 158.270069][ T4196] __alloc_pages+0x11b/0x480 [ 158.274647][ T4196] ? zone_statistics+0x170/0x170 [ 158.279579][ T4196] ? alloc_pages+0x452/0x560 [ 158.284160][ T4196] __vmalloc_node_range+0x4b1/0x8b0 [ 158.289355][ T4196] ? __do_replace+0xa8/0x9f0 [ 158.293934][ T4196] vzalloc+0x75/0x80 [ 158.297813][ T4196] ? __do_replace+0xa8/0x9f0 [ 158.302388][ T4196] __do_replace+0xa8/0x9f0 [ 158.306806][ T4196] ? translate_compat_table+0x20a0/0x20a0 [ 158.312514][ T4196] ? _copy_from_user+0x111/0x170 [ 158.317445][ T4196] do_ipt_set_ctl+0xa9b/0xd70 [ 158.322115][ T4196] ? nf_setsockopt+0x218/0x280 [ 158.326863][ T4196] ? ipt_unregister_table_exit+0x220/0x220 [ 158.332654][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 158.337670][ T4196] ? __mutex_lock_common+0x435/0x2400 [ 158.343037][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 158.348663][ T4196] ? mutex_unlock+0x10/0x10 [ 158.353154][ T4196] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.358513][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 158.363697][ T4196] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.369071][ T4196] nf_setsockopt+0x25f/0x280 [ 158.373653][ T4196] ip_setsockopt+0x29c3/0x31e0 [ 158.378411][ T4196] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 158.383777][ T4196] ? __might_sleep+0xf0/0xf0 [ 158.388353][ T4196] ? handle_mm_fault+0x2be3/0x4440 [ 158.393457][ T4196] tcp_setsockopt+0x229/0x1e60 [ 158.398211][ T4196] ? aa_sk_perm+0x7dc/0x910 [ 158.402705][ T4196] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 158.408068][ T4196] ? aa_af_perm+0x340/0x340 [ 158.412555][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 158.417571][ T4196] ? aa_sock_opt_perm+0x74/0x100 [ 158.422492][ T4196] ? sock_common_setsockopt+0x32/0xb0 [ 158.427851][ T4196] ? sock_common_recvmsg+0x1c0/0x1c0 [ 158.433122][ T4196] __sys_setsockopt+0x2bf/0x3d0 [ 158.437962][ T4196] __x64_sys_setsockopt+0xb1/0xc0 [ 158.442975][ T4196] do_syscall_64+0x4c/0xa0 [ 158.447379][ T4196] ? clear_bhb_loop+0x30/0x80 [ 158.452044][ T4196] ? clear_bhb_loop+0x30/0x80 [ 158.456706][ T4196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.462584][ T4196] RIP: 0033:0x7f106b2e97da [ 158.467012][ T4196] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 158.486619][ T4196] RSP: 002b:00007fff6606ed08 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 158.495019][ T4196] RAX: ffffffffffffffda RBX: 00007fff6606ed90 RCX: 00007f106b2e97da [ 158.502980][ T4196] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 158.510938][ T4196] RBP: 0000000000000003 R08: 0000000000000408 R09: 0000000000000000 [ 158.518890][ T4196] R10: 00007f106b539da0 R11: 0000000000000206 R12: 00007f106b539d40 [ 158.526847][ T4196] R13: 00007fff6606ed2c R14: 0000000000000000 R15: 00007f106b53b180 [ 158.534817][ T4196] [ 158.537822][ T5356] CPU: 1 PID: 5356 Comm: kworker/1:16 Not tainted syzkaller #0 [ 158.545368][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.555410][ T5356] Workqueue: events nsim_dev_trap_report_work [ 158.561477][ T5356] Call Trace: [ 158.564746][ T5356] [ 158.567675][ T5356] dump_stack_lvl+0x188/0x250 [ 158.572344][ T5356] ? ret_from_fork+0x1f/0x30 [ 158.576927][ T5356] ? show_regs_print_info+0x20/0x20 [ 158.582117][ T5356] ? load_image+0x410/0x410 [ 158.586610][ T5356] ? stack_trace_save+0xa6/0xf0 [ 158.591453][ T5356] ? prandom_u32+0x217/0x250 [ 158.596040][ T5356] should_fail+0x383/0x4b0 [ 158.600451][ T5356] prepare_alloc_pages+0x1e3/0x5b0 [ 158.605565][ T5356] __alloc_pages+0x11b/0x480 [ 158.610150][ T5356] ? zone_statistics+0x170/0x170 [ 158.615088][ T5356] ? alloc_pages+0x452/0x560 [ 158.619675][ T5356] new_slab+0x2dc/0x4b0 [ 158.623825][ T5356] ___slab_alloc+0x807/0xdd0 [ 158.628405][ T5356] ? __alloc_skb+0xf4/0x750 [ 158.632903][ T5356] kmem_cache_alloc_node+0x118/0x2c0 [ 158.638175][ T5356] ? __alloc_skb+0xf4/0x750 [ 158.642676][ T5356] __alloc_skb+0xf4/0x750 [ 158.646998][ T5356] nsim_dev_trap_report_work+0x25c/0xab0 [ 158.652637][ T5356] process_one_work+0x867/0xff0 [ 158.657500][ T5356] ? worker_detach_from_pool+0x240/0x240 [ 158.663122][ T5356] ? lockdep_hardirqs_off+0x70/0x100 [ 158.668399][ T5356] ? _raw_spin_lock_irq+0xb7/0xf0 [ 158.673409][ T5356] ? _raw_spin_lock_irqsave+0x100/0x100 [ 158.678946][ T5356] ? wq_worker_running+0x97/0x170 [ 158.683960][ T5356] worker_thread+0xad7/0x12a0 [ 158.688650][ T5356] kthread+0x42e/0x520 [ 158.692712][ T5356] ? rcu_lock_release+0x20/0x20 [ 158.697550][ T5356] ? kthread_blkcg+0xd0/0xd0 [ 158.702129][ T5356] ret_from_fork+0x1f/0x30 [ 158.706546][ T5356] [ 158.709558][ T5776] CPU: 0 PID: 5776 Comm: syz.4.410 Not tainted syzkaller #0 [ 158.709855][ T5356] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 158.716837][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.724828][ T5356] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 158.734824][ T5776] Call Trace: [ 158.734833][ T5776] [ 158.734841][ T5776] dump_stack_lvl+0x188/0x250 [ 158.745336][ T5356] node 0: slabs: 5093, objs: 61116, free: 0 [ 158.748581][ T5776] ? show_regs_print_info+0x20/0x20 [ 158.751517][ T5356] node 1: slabs: 4, objs: 48, free: 48 [ 158.756145][ T5776] ? load_image+0x410/0x410 [ 158.762897][ T3559] FAULT_INJECTION: forcing a failure. [ 158.762897][ T3559] name fail_page_alloc, interval 1, probability 10, space 0, times 2 [ 158.767358][ T5776] ? prandom_u32+0x217/0x250 [ 158.767388][ T5776] should_fail+0x383/0x4b0 [ 158.799681][ T5776] prepare_alloc_pages+0x1e3/0x5b0 [ 158.804797][ T5776] __alloc_pages+0x11b/0x480 [ 158.809389][ T5776] ? zone_statistics+0x170/0x170 [ 158.814332][ T5776] ? count_memcg_event_mm+0x324/0x370 [ 158.819702][ T5776] ? remove_device_exclusive_entry+0xac0/0xac0 [ 158.825852][ T5776] alloc_pages_vma+0x2bc/0x790 [ 158.830610][ T5776] handle_mm_fault+0x23be/0x4440 [ 158.835547][ T5776] ? get_page+0xe0/0xe0 [ 158.839703][ T5776] ? vmacache_find+0x4f0/0x590 [ 158.844453][ T5776] ? vmacache_update+0xa0/0x100 [ 158.849293][ T5776] ? find_vma+0x1df/0x230 [ 158.853612][ T5776] do_user_addr_fault+0x494/0xc90 [ 158.858635][ T5776] exc_page_fault+0x60/0x100 [ 158.863219][ T5776] asm_exc_page_fault+0x22/0x30 [ 158.868060][ T5776] RIP: 0033:0x7f2c76e294df [ 158.872465][ T5776] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 158.892057][ T5776] RSP: 002b:00007f2c750b1ff0 EFLAGS: 00010246 [ 158.898116][ T5776] RAX: 00007f2c750b20d0 RBX: 0000000000020000 RCX: 00007f2c750b1ff0 [ 158.906087][ T5776] RDX: 00007f2c76f2e5cb RSI: 0000000000000023 RDI: 00007f2c750b20d0 [ 158.914046][ T5776] RBP: 00007f2c75093000 R08: 0000000000000000 R09: 00007ffe0b1c7657 [ 158.922003][ T5776] R10: 0000000000000008 R11: 0000000000000202 R12: 00007f2c750b20d0 [ 158.929957][ T5776] R13: 000000000000006e R14: 00007ffe0b1c7570 R15: 00007ffe0b1c7658 [ 158.937929][ T5776] [ 158.940934][ T3559] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 158.941292][ T4179] FAULT_INJECTION: forcing a failure. [ 158.941292][ T4179] name fail_page_alloc, interval 1, probability 10, space 0, times 2 [ 158.947869][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.947881][ T3559] Call Trace: [ 158.947888][ T3559] [ 158.947896][ T3559] dump_stack_lvl+0x188/0x250 [ 158.947922][ T3559] ? show_regs_print_info+0x20/0x20 [ 158.947938][ T3559] ? load_image+0x410/0x410 [ 158.947956][ T3559] ? prandom_u32+0x217/0x250 [ 158.947978][ T3559] should_fail+0x383/0x4b0 [ 158.947997][ T3559] prepare_alloc_pages+0x1e3/0x5b0 [ 158.948020][ T3559] __alloc_pages+0x11b/0x480 [ 158.948037][ T3559] ? zone_statistics+0x170/0x170 [ 158.948058][ T3559] ? alloc_pages+0x452/0x560 [ 158.948076][ T3559] new_slab+0xc0/0x4b0 [ 158.948092][ T3559] ___slab_alloc+0x807/0xdd0 [ 158.948108][ T3559] ? getname_flags+0xb7/0x4f0 [ 158.948127][ T3559] ? getname_flags+0xb7/0x4f0 [ 158.948141][ T3559] kmem_cache_alloc+0xf0/0x280 [ 158.948158][ T3559] getname_flags+0xb7/0x4f0 [ 159.047718][ T3559] ? cp_new_stat+0x3d0/0x540 [ 159.052305][ T3559] user_path_at_empty+0x2a/0x190 [ 159.057232][ T3559] vfs_statx+0x107/0x4c0 [ 159.061467][ T3559] ? vfs_fstatat+0x40/0x40 [ 159.065875][ T3559] __x64_sys_newfstatat+0x15f/0x200 [ 159.071063][ T3559] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 159.076343][ T3559] ? lock_chain_count+0x20/0x20 [ 159.081188][ T3559] ? lockdep_hardirqs_on+0x94/0x140 [ 159.086377][ T3559] do_syscall_64+0x4c/0xa0 [ 159.090779][ T3559] ? clear_bhb_loop+0x30/0x80 [ 159.095442][ T3559] ? clear_bhb_loop+0x30/0x80 [ 159.100113][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.105998][ T3559] RIP: 0033:0x7fa28b09bb0a [ 159.110398][ T3559] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 159.129988][ T3559] RSP: 002b:00007ffeb39bfa58 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 159.138386][ T3559] RAX: ffffffffffffffda RBX: 000055f01dc51408 RCX: 00007fa28b09bb0a [ 159.146345][ T3559] RDX: 00007ffeb39bfa60 RSI: 000055f01dc3fef3 RDI: 00000000ffffff9c [ 159.154301][ T3559] RBP: 000055f04db5d148 R08: 00063489548db180 R09: 000b06fe674af93c [ 159.162256][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.170212][ T3559] R13: 00007ffeb39bfa60 R14: 0000000000000000 R15: 00063489548db180 [ 159.178182][ T3559] [ 159.181191][ T4179] CPU: 0 PID: 4179 Comm: udevd Not tainted syzkaller #0 [ 159.186386][ C1] FAULT_INJECTION: forcing a failure. [ 159.186386][ C1] name fail_page_alloc, interval 1, probability 10, space 0, times 2 [ 159.188124][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.188137][ T4179] Call Trace: [ 159.214677][ T4179] [ 159.217597][ T4179] dump_stack_lvl+0x188/0x250 [ 159.222270][ T4179] ? verify_lock_unused+0x140/0x140 [ 159.227456][ T4179] ? show_regs_print_info+0x20/0x20 [ 159.232642][ T4179] ? load_image+0x410/0x410 [ 159.237137][ T4179] ? prandom_u32+0x217/0x250 [ 159.241722][ T4179] should_fail+0x383/0x4b0 [ 159.246131][ T4179] prepare_alloc_pages+0x1e3/0x5b0 [ 159.251236][ T4179] __alloc_pages+0x11b/0x480 [ 159.255817][ T4179] ? zone_statistics+0x170/0x170 [ 159.260745][ T4179] ? rcu_lock_acquire+0x30/0x30 [ 159.265585][ T4179] ? alloc_pages+0x452/0x560 [ 159.270178][ T4179] __get_free_pages+0x8/0x30 [ 159.274755][ T4179] __tlb_remove_page_size+0x1f2/0x3f0 [ 159.280117][ T4179] unmap_page_range+0xfcf/0x2410 [ 159.285068][ T4179] unmap_vmas+0x131/0x250 [ 159.289385][ T4179] ? unmap_page_range+0x2410/0x2410 [ 159.294583][ T4179] ? tlb_gather_mmu+0x22a/0x2f0 [ 159.299429][ T4179] unmap_region+0x231/0x3b0 [ 159.303927][ T4179] ? mmap_write_downgrade+0x40/0x40 [ 159.309121][ T4179] ? vmacache_find+0x53c/0x590 [ 159.313870][ T4179] ? vmacache_update+0xa0/0x100 [ 159.318706][ T4179] ? __vma_rb_erase+0x9c6/0xa30 [ 159.323544][ T4179] ? validate_mm_rb+0x230/0x230 [ 159.328382][ T4179] ? vma_gap_callbacks_rotate+0x196/0x1f0 [ 159.334093][ T4179] __do_munmap+0xa29/0xe10 [ 159.338504][ T4179] __vm_munmap+0x13f/0x240 [ 159.342912][ T4179] ? vm_munmap+0x20/0x20 [ 159.347142][ T4179] ? blocking_notifier_call_chain+0x16a/0x1b0 [ 159.353202][ T4179] __x64_sys_munmap+0x67/0x70 [ 159.357869][ T4179] do_syscall_64+0x4c/0xa0 [ 159.362272][ T4179] ? clear_bhb_loop+0x30/0x80 [ 159.366937][ T4179] ? clear_bhb_loop+0x30/0x80 [ 159.371600][ T4179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.377572][ T4179] RIP: 0033:0x7fa28b0a8097 [ 159.381977][ T4179] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 159.401567][ T4179] RSP: 002b:00007ffeb39bf938 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 159.409975][ T4179] RAX: ffffffffffffffda RBX: 000055f04db4abf0 RCX: 00007fa28b0a8097 [ 159.417933][ T4179] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007fa28a5fa000 [ 159.425891][ T4179] RBP: 000055f04db4a910 R08: 000055f04db5d140 R09: 0000000000000006 [ 159.433847][ T4179] R10: 0000000000000000 R11: 0000000000000206 R12: 000055f01dc59588 [ 159.441806][ T4179] R13: 00007ffeb39bf9c0 R14: 0000000000000000 R15: 0000000000000000 [ 159.449778][ T4179] [ 159.452786][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 159.460071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.470139][ C1] Call Trace: [ 159.473414][ C1] [ 159.476335][ C1] dump_stack_lvl+0x188/0x250 [ 159.481005][ C1] ? ret_from_fork+0x1f/0x30 [ 159.485587][ C1] ? show_regs_print_info+0x20/0x20 [ 159.490774][ C1] ? load_image+0x410/0x410 [ 159.495262][ C1] ? stack_trace_save+0xa6/0xf0 [ 159.500103][ C1] ? prandom_u32+0x217/0x250 [ 159.504688][ C1] should_fail+0x383/0x4b0 [ 159.509100][ C1] prepare_alloc_pages+0x1e3/0x5b0 [ 159.514204][ C1] __alloc_pages+0x11b/0x480 [ 159.518781][ C1] ? zone_statistics+0x170/0x170 [ 159.523718][ C1] ? alloc_pages+0x452/0x560 [ 159.528299][ C1] new_slab+0xc0/0x4b0 [ 159.532358][ C1] ___slab_alloc+0x807/0xdd0 [ 159.536934][ C1] ? synproxy_send_client_synack+0x16c/0xd90 [ 159.542907][ C1] __kmalloc_node_track_caller+0x13d/0x3a0 [ 159.548700][ C1] ? synproxy_send_client_synack+0x16c/0xd90 [ 159.554668][ C1] ? __alloc_skb+0xf4/0x750 [ 159.559156][ C1] ? synproxy_send_client_synack+0x16c/0xd90 [ 159.565125][ C1] __alloc_skb+0x22c/0x750 [ 159.569530][ C1] synproxy_send_client_synack+0x16c/0xd90 [ 159.575332][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 159.580369][ C1] ? synproxy_init_timestamp_cookie+0x2c0/0x2c0 [ 159.586626][ C1] nft_synproxy_eval_v4+0x35f/0x4e0 [ 159.591837][ C1] ? nft_synproxy_do_eval+0x550/0x550 [ 159.597222][ C1] nft_synproxy_do_eval+0x32e/0x550 [ 159.602426][ C1] ? nft_synproxy_validate+0xc0/0xc0 [ 159.607707][ C1] ? nft_synproxy_eval+0x13/0x30 [ 159.612654][ C1] nft_do_chain+0x491/0x14d0 [ 159.617242][ C1] ? stack_trace_save+0xf0/0xf0 [ 159.622091][ C1] ? mark_lock+0x94/0x320 [ 159.626404][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 159.632294][ C1] ? lock_chain_count+0x20/0x20 [ 159.637176][ C1] ? nf_nat_inet_fn+0x8a0/0xad0 [ 159.642042][ C1] nft_do_chain_inet+0x25c/0x340 [ 159.646990][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 159.651845][ C1] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 159.657226][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 159.662082][ C1] nf_hook_slow+0xb9/0x200 [ 159.666506][ C1] ? NF_HOOK+0x390/0x390 [ 159.670754][ C1] NF_HOOK+0x1f2/0x390 [ 159.674825][ C1] ? NF_HOOK+0x390/0x390 [ 159.679061][ C1] ? ip_local_deliver+0x180/0x180 [ 159.684094][ C1] ? NF_HOOK+0x390/0x390 [ 159.688348][ C1] ? ip_local_deliver+0x107/0x180 [ 159.693381][ C1] ? ip_rcv_core+0xb30/0xb30 [ 159.697977][ C1] NF_HOOK+0x303/0x390 [ 159.702039][ C1] ? ip_rcv_core+0xb30/0xb30 [ 159.706623][ C1] ? ip_local_deliver+0x180/0x180 [ 159.711639][ C1] ? ip_rcv_core+0xb30/0xb30 [ 159.716214][ C1] ? ip_rcv_core+0x72c/0xb30 [ 159.720800][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 159.726419][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 159.732041][ C1] __netif_receive_skb+0xcc/0x290 [ 159.737063][ C1] process_backlog+0x366/0x770 [ 159.741834][ C1] ? rps_trigger_softirq+0x210/0x210 [ 159.747104][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.753081][ C1] ? lock_chain_count+0x20/0x20 [ 159.757924][ C1] __napi_poll+0xbb/0x430 [ 159.762245][ C1] net_rx_action+0x522/0xa80 [ 159.766835][ C1] ? net_tx_action+0x880/0x880 [ 159.771583][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.777552][ C1] ? detach_timer+0x2b0/0x2b0 [ 159.782228][ C1] handle_softirqs+0x336/0x830 [ 159.786982][ C1] ? run_ksoftirqd+0xa4/0x100 [ 159.791651][ C1] ? do_softirq+0x210/0x210 [ 159.796138][ C1] ? run_ksoftirqd+0x81/0x100 [ 159.800805][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 159.805989][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 159.811265][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 159.816447][ C1] run_ksoftirqd+0xa4/0x100 [ 159.820936][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 159.826122][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 159.831483][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 159.836584][ C1] smpboot_thread_fn+0x520/0x990 [ 159.841518][ C1] kthread+0x42e/0x520 [ 159.845570][ C1] ? cpu_report_death+0x180/0x180 [ 159.850579][ C1] ? kthread_blkcg+0xd0/0xd0 [ 159.855154][ C1] ret_from_fork+0x1f/0x30 [ 159.859569][ C1] [ 159.862573][ T4174] CPU: 0 PID: 4174 Comm: syz-executor Not tainted syzkaller #0 [ 159.870120][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.880171][ T4174] Call Trace: [ 159.883448][ T4174] [ 159.886374][ T4174] dump_stack_lvl+0x188/0x250 [ 159.891055][ T4174] ? show_regs_print_info+0x20/0x20 [ 159.896258][ T4174] ? load_image+0x410/0x410 [ 159.900768][ T4174] ? prandom_u32+0x217/0x250 [ 159.905371][ T4174] should_fail+0x383/0x4b0 [ 159.909794][ T4174] prepare_alloc_pages+0x1e3/0x5b0 [ 159.914916][ T4174] __alloc_pages+0x11b/0x480 [ 159.919511][ T4174] ? zone_statistics+0x170/0x170 [ 159.924457][ T4174] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 159.930355][ T4174] ? alloc_pages+0x452/0x560 [ 159.934952][ T4174] __get_free_pages+0x8/0x30 [ 159.939549][ T4174] __pollwait+0x116/0x3e0 [ 159.943881][ T4174] ? poll_initwait+0x150/0x150 [ 159.948644][ T4174] pipe_poll+0xe0/0x4a0 [ 159.952808][ T4174] ? pipe_write+0x1b40/0x1b40 [ 159.957487][ T4174] do_select+0x1009/0x1780 [ 159.961928][ T4174] ? core_sys_select+0x8f0/0x8f0 [ 159.966871][ T4174] ? poll_initwait+0x150/0x150 [ 159.971636][ T4174] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 159.977882][ T4174] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 159.984131][ T4174] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 159.990383][ T4174] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 159.996634][ T4174] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 160.002873][ T4174] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 160.009115][ T4174] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 160.015348][ T4174] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 160.021585][ T4174] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 160.027827][ T4174] ? __lock_acquire+0x7b50/0x7b50 [ 160.032859][ T4174] ? __lock_acquire+0x7b50/0x7b50 [ 160.037889][ T4174] ? __might_fault+0xb3/0x110 [ 160.042577][ T4174] core_sys_select+0x6eb/0x8f0 [ 160.047354][ T4174] ? poll_select_set_timeout+0x150/0x150 [ 160.053008][ T4174] ? sigprocmask+0x190/0x190 [ 160.057604][ T4174] ? __context_tracking_exit+0x4c/0x80 [ 160.063067][ T4174] __se_sys_pselect6+0x2f4/0x3c0 [ 160.068009][ T4174] ? __x64_sys_pselect6+0xf0/0xf0 [ 160.073033][ T4174] ? __x64_sys_pselect6+0x1d/0xf0 [ 160.078051][ T4174] do_syscall_64+0x4c/0xa0 [ 160.082456][ T4174] ? clear_bhb_loop+0x30/0x80 [ 160.087134][ T4174] ? clear_bhb_loop+0x30/0x80 [ 160.091812][ T4174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.097708][ T4174] RIP: 0033:0x7f5b02cdc117 [ 160.102125][ T4174] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 160.121734][ T4174] RSP: 002b:00007ffda3285020 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 160.130145][ T4174] RAX: ffffffffffffffda RBX: 000055557b6f4500 RCX: 00007f5b02cdc117 [ 160.138119][ T4174] RDX: 0000000000000000 RSI: 00007ffda3285140 RDI: 0000000000000023 [ 160.146090][ T4174] RBP: 00007ffda32855a0 R08: 00007ffda3285060 R09: 00007ffda3285070 [ 160.154061][ T4174] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffda32853e0 [ 160.162020][ T4174] R13: 00007ffda32851d0 R14: 585858582e7a7973 R15: 00007ffda3285610 [ 160.169998][ T4174] [ 160.179832][ T5745] CPU: 0 PID: 5745 Comm: syz.2.400 Not tainted syzkaller #0 [ 160.187130][ T5745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.197183][ T5745] Call Trace: [ 160.200461][ T5745] [ 160.203396][ T5745] dump_stack_lvl+0x188/0x250 [ 160.208085][ T5745] ? show_regs_print_info+0x20/0x20 [ 160.213289][ T5745] ? load_image+0x410/0x410 [ 160.217796][ T5745] ? prandom_u32+0x217/0x250 [ 160.222385][ T5745] should_fail+0x383/0x4b0 [ 160.226799][ T5745] prepare_alloc_pages+0x1e3/0x5b0 [ 160.231924][ T5745] __alloc_pages+0x11b/0x480 [ 160.236523][ T5745] ? zone_statistics+0x170/0x170 [ 160.241464][ T5745] ? mark_lock+0x94/0x320 [ 160.245814][ T5745] alloc_pages_vma+0x2bc/0x790 [ 160.250577][ T5745] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 160.256376][ T5745] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 160.262004][ T5745] ? shmem_swapin_page+0x22f0/0x22f0 [ 160.267298][ T5745] ? __lock_acquire+0x7b50/0x7b50 [ 160.272322][ T5745] ? xas_descend+0x210/0x3b0 [ 160.276920][ T5745] ? xas_load+0x127/0x140 [ 160.281257][ T5745] ? pagecache_get_page+0xc32/0xf20 [ 160.286464][ T5745] ? page_cache_prev_miss+0x380/0x380 [ 160.291845][ T5745] ? mark_lock+0x94/0x320 [ 160.296166][ T5745] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.302147][ T5745] shmem_getpage_gfp+0x14be/0x2c10 [ 160.307291][ T5745] shmem_write_begin+0xcd/0x1a0 [ 160.312148][ T5745] generic_perform_write+0x2b6/0x550 [ 160.317452][ T5745] ? grab_cache_page_write_begin+0xa0/0xa0 [ 160.323260][ T5745] ? file_remove_privs+0x5d0/0x5d0 [ 160.328370][ T5745] ? rwsem_write_trylock+0x135/0x1c0 [ 160.333646][ T5745] ? clear_nonspinnable+0x60/0x60 [ 160.338677][ T5745] __generic_file_write_iter+0x261/0x4e0 [ 160.344307][ T5745] ? generic_write_checks+0x3be/0x460 [ 160.349688][ T5745] generic_file_write_iter+0xa6/0x1b0 [ 160.355066][ T5745] __kernel_write+0x522/0x980 [ 160.359750][ T5745] ? vfs_read+0xd50/0xd50 [ 160.364091][ T5745] ? get_dump_page+0xee/0x670 [ 160.368773][ T5745] ? down_read_killable+0x1ce/0x340 [ 160.373978][ T5745] __dump_emit+0x258/0x380 [ 160.378404][ T5745] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 160.383861][ T5745] ? dump_emit+0x145/0x3d0 [ 160.388270][ T5745] ? dump_emit+0x145/0x3d0 [ 160.392688][ T5745] dump_user_range+0x84/0x340 [ 160.397366][ T5745] elf_core_dump+0x2fe0/0x3530 [ 160.402136][ T5745] ? load_elf_library+0x980/0x980 [ 160.407158][ T5745] ? verify_lock_unused+0x140/0x140 [ 160.412355][ T5745] ? dump_vma_snapshot+0xaf1/0xe40 [ 160.417506][ T5745] ? rcu_read_lock_any_held+0xb0/0x130 [ 160.422970][ T5745] ? do_raw_spin_unlock+0x11d/0x230 [ 160.428168][ T5745] do_coredump+0x14e8/0x2a40 [ 160.432768][ T5745] ? nfs_stat_to_errno+0x170/0x170 [ 160.437903][ T5745] ? lock_chain_count+0x20/0x20 [ 160.442764][ T5745] ? _raw_spin_unlock_irq+0x1f/0x40 [ 160.447960][ T5745] ? lockdep_hardirqs_on+0x94/0x140 [ 160.453157][ T5745] get_signal+0x531/0x12e0 [ 160.457577][ T5745] arch_do_signal_or_restart+0xe6/0x12a0 [ 160.463206][ T5745] ? _raw_spin_unlock+0x40/0x40 [ 160.468064][ T5745] ? force_sig_info_to_task+0x318/0x3c0 [ 160.473619][ T5745] ? get_sigframe_size+0x10/0x10 [ 160.478564][ T5745] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.484557][ T5745] ? exit_to_user_mode_loop+0x3b/0x130 [ 160.490020][ T5745] exit_to_user_mode_loop+0x9e/0x130 [ 160.495308][ T5745] exit_to_user_mode_prepare+0xee/0x180 [ 160.500851][ T5745] irqentry_exit_to_user_mode+0x5/0x30 [ 160.506302][ T5745] exc_page_fault+0x88/0x100 [ 160.510904][ T5745] asm_exc_page_fault+0x22/0x30 [ 160.515750][ T5745] RIP: 0033:0x7f106b19db47 [ 160.520167][ T5745] Code: e8 8e fa ff ff 89 f2 48 8d 3d a5 4e 1b 00 48 8d 35 f3 09 1e 00 31 c0 e8 c7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 160.539770][ T5745] RSP: 002b:00007f1069521120 EFLAGS: 00010202 [ 160.545836][ T5745] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f106b2e7f99 [ 160.553805][ T5745] RDX: 00007f1069521140 RSI: 00007f1069521270 RDI: 000000000000000b [ 160.561774][ T5745] RBP: 00007f106b37eec4 R08: 0000000000000000 R09: 0000000000000000 [ 160.569747][ T5745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.577713][ T5745] R13: 00007f106b570038 R14: 00007f106b56ffa0 R15: 00007fff6606f098 [ 160.585693][ T5745] [ 160.588702][ T5775] CPU: 1 PID: 5775 Comm: syz.4.410 Not tainted syzkaller #0 [ 160.595989][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.606044][ T5775] Call Trace: [ 160.609323][ T5775] [ 160.612257][ T5775] dump_stack_lvl+0x188/0x250 [ 160.616943][ T5775] ? show_regs_print_info+0x20/0x20 [ 160.622151][ T5775] ? load_image+0x410/0x410 [ 160.626676][ T5775] ? prandom_u32+0x217/0x250 [ 160.631284][ T5775] should_fail+0x383/0x4b0 [ 160.635713][ T5775] prepare_alloc_pages+0x1e3/0x5b0 [ 160.640837][ T5775] __alloc_pages+0x11b/0x480 [ 160.645430][ T5775] ? zone_statistics+0x170/0x170 [ 160.650359][ T5775] ? mark_lock+0x94/0x320 [ 160.654672][ T5775] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.660636][ T5775] ? __lock_acquire+0x7b50/0x7b50 [ 160.665646][ T5775] ? alloc_pages+0x452/0x560 [ 160.670223][ T5775] new_slab+0xc0/0x4b0 [ 160.674274][ T5775] ___slab_alloc+0x807/0xdd0 [ 160.678846][ T5775] ? fuse_dev_alloc+0x8e/0x2b0 [ 160.683597][ T5775] kmem_cache_alloc_trace+0xf9/0x290 [ 160.688864][ T5775] ? fuse_dev_alloc+0x8e/0x2b0 [ 160.693614][ T5775] fuse_dev_alloc+0x8e/0x2b0 [ 160.698188][ T5775] fuse_fill_super_common+0x4b2/0x10a0 [ 160.703631][ T5775] ? strlcpy+0x83/0xc0 [ 160.707686][ T5775] ? up_write+0x1b6/0x410 [ 160.712004][ T5775] fuse_fill_super+0x173/0x1f0 [ 160.716751][ T5775] ? fuse_reconfigure+0xb0/0xb0 [ 160.721587][ T5775] get_tree_nodev+0xb0/0x160 [ 160.726165][ T5775] fuse_get_tree+0x2d7/0x4d0 [ 160.730743][ T5775] vfs_get_tree+0x88/0x270 [ 160.735145][ T5775] do_new_mount+0x247/0xa40 [ 160.739636][ T5775] __se_sys_mount+0x2e3/0x3d0 [ 160.744304][ T5775] ? __x64_sys_mount+0xc0/0xc0 [ 160.749055][ T5775] ? lockdep_hardirqs_on+0x94/0x140 [ 160.754234][ T5775] ? __x64_sys_mount+0x1c/0xc0 [ 160.758983][ T5775] do_syscall_64+0x4c/0xa0 [ 160.763378][ T5775] ? clear_bhb_loop+0x30/0x80 [ 160.768037][ T5775] ? clear_bhb_loop+0x30/0x80 [ 160.772700][ T5775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.778581][ T5775] RIP: 0033:0x7f2c76e7af99 [ 160.782982][ T5775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.802569][ T5775] RSP: 002b:00007f2c750d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.810968][ T5775] RAX: ffffffffffffffda RBX: 00007f2c77102fa0 RCX: 00007f2c76e7af99 [ 160.818922][ T5775] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 160.826880][ T5775] RBP: 00007f2c76f11ec4 R08: 0000200000002140 R09: 0000000000000000 [ 160.834838][ T5775] R10: 0000000000000404 R11: 0000000000000246 R12: 0000000000000000 [ 160.842789][ T5775] R13: 00007f2c77103038 R14: 00007f2c77102fa0 R15: 00007ffe0b1c7658 [ 160.850756][ T5775] [ 161.122716][ T5792] usbip-vudc usbip-vudc.0: gadget not bound [ 161.185999][ T5793] Trying to write to read-only block-device nullb0 [ 161.256589][ T5793] Trying to write to read-only block-device nullb0 [ 161.416445][ T5795] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 161.436432][ T5795] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 163.349761][ T5827] MPTCP: addr_signal error, rm_addr=1 [ 164.267825][ T4920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.367745][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 164.414704][ T4920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.528773][ T4920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.614799][ T4920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.714579][ T5852] syzkaller0: create flow: hash 2942057766 index 1 [ 164.734379][ T4176] syzkaller0: tun_net_xmit 76 [ 164.741986][ T4176] syzkaller0: tun_net_xmit 48 [ 164.761900][ T5360] syzkaller0: tun_net_xmit 76 [ 164.811922][ T5849] syzkaller0: delete flow: hash 2942057766 index 1 [ 165.326770][ T5860] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 165.340180][ T4920] tipc: Left network mode [ 165.356549][ T5860] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 165.548773][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 165.646613][ T5884] device syzkaller0 entered promiscuous mode [ 165.894766][ T5907] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 165.945774][ T5907] loop0: detected capacity change from 0 to 164 [ 165.964535][ T5896] loop1: detected capacity change from 0 to 4096 [ 165.974230][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.030302][ T5896] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 166.064100][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.071811][ T5854] device bridge_slave_0 entered promiscuous mode [ 166.148378][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.155467][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.251576][ T5896] EXT4-fs (loop1): Test dummy encryption mode enabled [ 166.305577][ T5854] device bridge_slave_1 entered promiscuous mode [ 166.340188][ T5896] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 167.035622][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.069567][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.079961][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 167.412192][ T5854] team0: Port device team_slave_0 added [ 168.031865][ T5854] team0: Port device team_slave_1 added [ 169.563842][ T5967] usb usb8: usbfs: process 5967 (syz.1.453) did not claim interface 0 before use [ 170.385770][ T4765] Bluetooth: hci3: command 0x041b tx timeout [ 170.420241][ T5970] usbip-vudc usbip-vudc.0: Device not connected [ 170.495265][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.557717][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.648943][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.673079][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.681181][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.735176][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.839103][ T5854] device hsr_slave_0 entered promiscuous mode [ 170.968242][ T5984] loop3: detected capacity change from 0 to 4096 [ 170.983616][ T5854] device hsr_slave_1 entered promiscuous mode [ 171.128281][ T5984] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 171.163278][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.230545][ T5984] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.286292][ T5854] Cannot create hsr debugfs directory [ 171.730648][ T5984] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 172.149151][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.468'. [ 173.163306][ T4765] Bluetooth: hci3: command 0x040f tx timeout [ 173.714200][ T4920] device hsr_slave_0 left promiscuous mode [ 173.746613][ T4920] device hsr_slave_1 left promiscuous mode [ 173.775898][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.783801][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.805423][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.823491][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.841809][ T4920] device bridge_slave_1 left promiscuous mode [ 173.849754][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.865155][ T4176] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 173.894571][ T4920] device bridge_slave_0 left promiscuous mode [ 173.908435][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.934978][ T4920] device veth1_macvtap left promiscuous mode [ 173.942807][ T4920] device veth0_macvtap left promiscuous mode [ 173.951638][ T4920] device veth1_vlan left promiscuous mode [ 173.958423][ T4920] device veth0_vlan left promiscuous mode [ 174.055663][ T5359] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.224612][ T4176] usb 2-1: not running at top speed; connect to a high speed hub [ 174.318626][ T4176] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 174.329761][ T5359] usb 4-1: Using ep0 maxpacket: 16 [ 174.424462][ T4920] team0 (unregistering): Port device team_slave_1 removed [ 174.440836][ T4920] team0 (unregistering): Port device team_slave_0 removed [ 174.456769][ T5359] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 174.500124][ T4920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.522275][ T4176] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 174.546556][ T4176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.555900][ T4176] usb 2-1: Product: syz [ 174.564839][ T4176] usb 2-1: Manufacturer: syz [ 174.569893][ T4176] usb 2-1: SerialNumber: syz [ 174.583954][ T4920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.619772][ T4176] oti6858 2-1:1.0: oti6858 converter detected [ 174.637196][ T4176] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 174.662321][ T5359] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.715318][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.743553][ T5359] usb 4-1: Product: syz [ 174.747748][ T5359] usb 4-1: Manufacturer: syz [ 174.752980][ T5359] usb 4-1: SerialNumber: syz [ 174.775007][ T5359] usb 4-1: config 0 descriptor?? [ 174.806159][ T4920] bond0 (unregistering): Released all slaves [ 174.994706][ T6032] usbip-vudc usbip-vudc.0: Device not connected [ 175.467326][ T7] usb 2-1: USB disconnect, device number 5 [ 177.489527][ T4765] Bluetooth: hci3: command 0x0419 tx timeout [ 177.497751][ T7] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 177.522872][ T7] oti6858 2-1:1.0: device disconnected [ 177.529684][ T4765] Bluetooth: hci1: command 0x0406 tx timeout [ 177.536512][ T4765] Bluetooth: hci2: command 0x0406 tx timeout [ 177.588878][ T5356] usb 4-1: USB disconnect, device number 5 [ 179.473997][ T6065] loop0: detected capacity change from 0 to 4096 [ 179.535857][ T6065] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 179.573710][ T6065] EXT4-fs (loop0): Test dummy encryption mode enabled [ 179.669149][ T4765] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 179.679005][ T6065] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 179.792684][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.885356][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.913585][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.915413][ T6084] loop3: detected capacity change from 0 to 256 [ 179.958935][ T4765] usb 2-1: Using ep0 maxpacket: 16 [ 179.966605][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.083264][ T6084] FAT-fs (loop3): Unrecognized mount option "uU 鎰#M Di 9!;lN9A\>{CJdV0" or missing value [ 180.110725][ T4765] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.301404][ T4765] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.602602][ T6102] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.623667][ T4765] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.726535][ T6102] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 183.035958][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.056047][ T4765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.090804][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.098526][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.121631][ T4765] usb 2-1: Product: syz [ 183.149369][ T4765] usb 2-1: Manufacturer: syz [ 183.175524][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.187393][ T6110] device syzkaller0 entered promiscuous mode [ 183.208550][ T4765] usb 2-1: can't set config #1, error -71 [ 183.349255][ T4765] usb 2-1: USB disconnect, device number 6 [ 183.656242][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.667184][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.677997][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.685109][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.693380][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.377647][ T6125] autofs4:pid:6125:autofs_fill_super: called with bogus options [ 184.400909][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.588596][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.603235][ T6129] loop1: detected capacity change from 0 to 1024 [ 186.431061][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.438208][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.555099][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.609702][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.643411][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.652609][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.677489][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.698566][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.743243][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.840788][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.265364][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.276932][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.307679][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.362302][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.429298][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.473764][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.285068][ T6187] syzkaller0: create flow: hash 2942057766 index 1 [ 190.319837][ T1324] syzkaller0: tun_net_xmit 76 [ 190.324661][ T1324] syzkaller0: tun_net_xmit 48 [ 190.356323][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.363393][ T4766] syzkaller0: tun_net_xmit 76 [ 190.391379][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.448073][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.557816][ T6187] syzkaller0: delete flow: hash 2942057766 index 1 [ 191.486085][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.560141][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.994453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.003229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.118883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.159056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.255474][ T5854] device veth0_vlan entered promiscuous mode [ 194.287584][ T6217] loop1: detected capacity change from 0 to 4096 [ 195.107879][ T5854] device veth1_vlan entered promiscuous mode [ 195.231989][ T6217] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 195.862957][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.214330][ T6221] loop6: detected capacity change from 0 to 1 [ 196.228422][ T6221] Dev loop6: unable to read RDB block 1 [ 196.234094][ T6221] loop6: unable to read partition table [ 196.239918][ T6221] loop6: partition table beyond EOD, truncated [ 196.246259][ T6221] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 196.250757][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.377271][ T5854] device veth0_macvtap entered promiscuous mode [ 196.405748][ T5854] device veth1_macvtap entered promiscuous mode [ 196.534332][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.601300][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.688702][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.726698][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.736565][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.747120][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.765099][ T6224] loop3: detected capacity change from 0 to 32768 [ 196.796869][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.856611][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.973656][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.042221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.051021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.067625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.079444][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.096348][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.107028][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.117712][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.125087][ T6224] XFS (loop3): Mounting V5 Filesystem [ 197.130999][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.158156][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.467770][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.481200][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.493766][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.518603][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.537288][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.602505][ T7] libceph: connect (1)[c::]:6789 error -101 [ 197.624799][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 197.632672][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.641821][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.657586][ T6248] ceph: No mds server is up or the cluster is laggy [ 197.665475][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.670735][ T4765] libceph: connect (1)[c::]:6789 error -101 [ 197.690748][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.710282][ T4765] libceph: mon0 (1)[c::]:6789 connect error [ 197.802661][ T6224] XFS (loop3): Ending clean mount [ 197.854452][ T6224] XFS (loop3): Quotacheck needed: Please wait. [ 197.912948][ T6224] XFS (loop3): Quotacheck: Done. [ 198.016558][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.061290][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.107630][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.136731][ T6263] loop4: detected capacity change from 0 to 2048 [ 198.162330][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.191212][ T6263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.204033][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.241834][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.485512][ T6267] device syzkaller0 entered promiscuous mode [ 198.879284][ T4197] XFS (loop3): Unmounting Filesystem [ 199.174027][ T6286] loop1: detected capacity change from 0 to 32768 [ 199.239271][ T6286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.512 (6286) [ 199.257949][ T6286] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 199.266702][ T6286] BTRFS info (device loop1): metadata ratio 65537 [ 199.273463][ T6286] BTRFS info (device loop1): turning on sync discard [ 199.280283][ T6286] BTRFS info (device loop1): using free space tree [ 199.286837][ T6286] BTRFS info (device loop1): has skinny extents [ 200.614443][ T6286] BTRFS info (device loop1): enabling ssd optimizations [ 202.957027][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.963346][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.148533][ T5791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5791) [ 204.542162][ T6360] netlink: 132 bytes leftover after parsing attributes in process `syz.4.521'. [ 207.783921][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 208.044218][ T6361] chnl_net:caif_netlink_parms(): no params data found [ 210.148438][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 210.318198][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.504838][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.571103][ T6414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.532'. [ 210.685172][ T6361] device bridge_slave_0 entered promiscuous mode [ 211.079505][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.480380][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.488394][ T6361] device bridge_slave_1 entered promiscuous mode [ 212.442395][ T4766] Bluetooth: hci5: command 0x040f tx timeout [ 212.477343][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.337411][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.454049][ T6450] futex_wake_op: syz.4.539 tries to shift op by 144; fix this program [ 213.609174][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.755082][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 214.765599][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.853746][ T6361] team0: Port device team_slave_0 added [ 214.885368][ T6361] team0: Port device team_slave_1 added [ 214.953335][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.077552][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.118299][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.203292][ T6467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.544'. [ 215.266536][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.309172][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.318571][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.351100][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.421858][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.664054][ T6361] device hsr_slave_0 entered promiscuous mode [ 215.698521][ T6361] device hsr_slave_1 entered promiscuous mode [ 215.727149][ T6361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.734734][ T6361] Cannot create hsr debugfs directory [ 216.364771][ T6361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.422440][ T6361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.540418][ T6361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.575468][ T6361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.409457][ T6512] [U] V3Fپ"S/4:XTZWTLW= [ 217.418324][ T6512] [U] J"E:" [ 217.586456][ T6509] loop2: detected capacity change from 0 to 32768 [ 217.674483][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.694079][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.701374][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.808581][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.974017][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.046095][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.216219][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.223406][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.377465][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.400512][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.417237][ T6509] XFS (loop2): Mounting V5 Filesystem [ 218.432566][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.451065][ T4920] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.458177][ T4920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.471721][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.510619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.533644][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.551495][ T6509] XFS (loop2): Ending clean mount [ 218.576202][ T6509] XFS (loop2): Quotacheck needed: Please wait. [ 218.612154][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.640854][ T6509] XFS (loop2): Quotacheck: Done. [ 218.717263][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.262430][ T6361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.280865][ T6361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.275465][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.288026][ T5854] XFS (loop2): Unmounting Filesystem [ 220.320406][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.379431][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.412182][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.460322][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.474259][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.503491][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.648996][ T6566] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 220.717333][ T6569] device syzkaller0 entered promiscuous mode [ 220.913359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.925640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.997738][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.073527][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.566'. [ 221.094009][ T144] device hsr_slave_0 left promiscuous mode [ 221.130655][ T144] device hsr_slave_1 left promiscuous mode [ 221.148852][ T6580] [U] V3Fپ"S/4:XTZWTLW= [ 221.179372][ T6580] [U] J"E:" [ 221.216661][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.226665][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.249214][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.296035][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.325695][ T144] device bridge_slave_1 left promiscuous mode [ 221.345269][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.460006][ T144] device bridge_slave_0 left promiscuous mode [ 221.516140][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.783319][ T144] device batadv_slave_0 left promiscuous mode [ 221.874596][ T144] device veth1_macvtap left promiscuous mode [ 221.938093][ T144] device veth0_macvtap left promiscuous mode [ 221.973809][ T144] device veth1_vlan left promiscuous mode [ 221.983329][ T144] device veth0_vlan left promiscuous mode [ 222.155700][ T144] bond1 (unregistering): Released all slaves [ 222.178333][ T144] team0 (unregistering): Port device macvlan2 removed [ 222.317776][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.568'. [ 222.330609][ T6605] [U] V3Fپ"S/4:XTZWTLW= [ 222.334302][ T144] team0 (unregistering): Port device team_slave_1 removed [ 222.339469][ T6605] [U] J"E:" [ 222.365019][ T144] team0 (unregistering): Port device team_slave_0 removed [ 222.385957][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.399313][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.453796][ T144] bond0 (unregistering): Released all slaves [ 222.717124][ T6618] device syzkaller0 entered promiscuous mode [ 222.736366][ T6614] device syzkaller0 entered promiscuous mode [ 222.767127][ T6617] device syzkaller0 entered promiscuous mode [ 222.888409][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.575'. [ 222.900855][ T6630] [U] V3Fپ"S/4:XTZWTLW= [ 222.910011][ T6630] [U] J"E:" [ 222.910956][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.930437][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.032912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.053319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.077709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.090217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.116025][ T6361] device veth0_vlan entered promiscuous mode [ 224.305035][ T6361] device veth1_vlan entered promiscuous mode [ 224.406470][ T6654] afs: Bad value for 'source' [ 224.430416][ T6654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.580'. [ 225.451502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.471499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.530752][ T6361] device veth0_macvtap entered promiscuous mode [ 225.571292][ T6361] device veth1_macvtap entered promiscuous mode [ 225.678595][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.745712][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.755562][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.781751][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.886675][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.933243][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.976548][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.027698][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.081876][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.702489][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.823856][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.996049][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.023017][ T6681] loop3: detected capacity change from 0 to 4096 [ 227.100780][ T6681] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 229.795278][ T6689] device syzkaller0 entered promiscuous mode [ 229.855465][ T6683] loop2: detected capacity change from 0 to 131072 [ 229.868646][ T1324] Bluetooth: hci4: command 0x0406 tx timeout [ 229.884400][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.904685][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.914498][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.953641][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.980552][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.001880][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.022875][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.044961][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.067895][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.087411][ T6361] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.129844][ T6361] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.158808][ T6361] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.182352][ T6361] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.202936][ T6683] F2FS-fs (loop2): invalid crc value [ 230.208757][ T6683] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 230.278144][ T6700] IPVS: dh: FWM 3 0x00000003 - no destination available [ 230.926804][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.979084][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.241161][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.267567][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.315228][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.338105][ T4678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.407572][ T4678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.705693][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'. [ 232.227075][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.642315][ T6716] [U] V3Fپ"S/4:XTZWTLW= [ 232.691220][ T6716] [U] J"E:" [ 232.697286][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.593'. [ 232.708113][ T6717] [U] V3Fپ"S/4:XTZWTLW= [ 232.721670][ T6717] [U] J"E:" [ 232.759426][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.594'. [ 232.770797][ T6719] [U] V3Fپ"S/4:XTZWTLW= [ 232.779661][ T6719] [U] J"E:" [ 233.859617][ T6746] IPVS: dh: FWM 3 0x00000003 - no destination available [ 236.215750][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.604'. [ 236.504812][ T6768] [U] V3Fپ"S/4:XTZWTLW= [ 236.513134][ T6768] [U] J"E:" [ 236.690170][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'. [ 236.807589][ T6775] device syzkaller0 entered promiscuous mode [ 237.093008][ T6773] [U] V3Fپ"S/4:XTZWTLW= [ 237.243070][ T6773] [U] J"E:" [ 239.125139][ T6810] IPVS: dh: FWM 3 0x00000003 - no destination available [ 240.300622][ T6820] device syzkaller0 entered promiscuous mode [ 240.908951][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'. [ 240.947285][ T6833] [U] V3Fپ"S/4:XTZWTLW= [ 240.955492][ T6833] [U] J"E:" [ 243.056956][ T6852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.627'. [ 243.716261][ T6852] [U] V3Fپ"S/4:XTZWTLW= [ 244.094157][ T6852] [U] J"E:" [ 244.558930][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.628'. [ 244.572561][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'. [ 244.589767][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'. [ 244.614622][ T6867] [U] V3Fپ"S/4:XTZWTLW= [ 244.633167][ T6867] [U] J"E:" [ 244.655267][ T6869] [U] V3Fپ"S/4:XTZWTLW= [ 244.682543][ T6869] [U] J"E:" [ 244.686540][ T6864] [U] V3Fپ"S/4:XTZWTLW= [ 244.711247][ T6864] [U] J"E:" [ 244.784684][ T6876] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 245.313619][ T6897] se_dev->se_dev_ptr already set for storage object [ 247.769045][ T6923] device syzkaller0 entered promiscuous mode [ 248.074948][ T6932] se_dev->se_dev_ptr already set for storage object [ 248.304693][ T6940] se_dev->se_dev_ptr already set for storage object [ 249.459621][ T6950] [U] V3Fپ"S/4:XTZWTLW= [ 249.551485][ T6950] [U] J"E:" [ 251.495652][ T6991] [U] V3Fپ"S/4:XTZWTLW= [ 251.502879][ T6990] se_dev->se_dev_ptr already set for storage object [ 251.541953][ T6991] [U] J"E:" [ 252.709956][ T7019] loop5: detected capacity change from 0 to 32768 [ 252.817142][ T7032] IPVS: dh: FWM 3 0x00000003 - no destination available [ 253.545071][ T7019] XFS (loop5): Mounting V5 Filesystem [ 254.131576][ T7019] XFS (loop5): Ending clean mount [ 254.142067][ T7019] XFS (loop5): Quotacheck needed: Please wait. [ 254.621831][ T7048] se_dev->se_dev_ptr already set for storage object [ 254.650103][ T7019] XFS (loop5): Quotacheck: Done. [ 255.752464][ T6361] XFS (loop5): Unmounting Filesystem [ 256.136939][ T7071] fuse: Unknown parameter 'group_i00000000000000000000' [ 256.265306][ T7077] se_dev->se_dev_ptr already set for storage object [ 257.480202][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 258.256890][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.684'. [ 258.375246][ T7108] [U] V3Fپ"S/4:XTZWTLW= [ 258.611334][ T7108] [U] J"E:" [ 259.267037][ T7119] [U] V3Fپ"S/4:XTZWTLW= [ 259.329093][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.686'. [ 259.362149][ T7119] [U] J"E:" [ 259.366567][ T7120] [U] V3Fپ"S/4:XTZWTLW= [ 259.375272][ T7120] [U] J"E:" [ 263.141535][ T7165] device syzkaller0 entered promiscuous mode [ 267.031433][ T7222] device syzkaller0 entered promiscuous mode [ 267.717657][ T7229] device syzkaller0 entered promiscuous mode [ 267.757328][ T7235] fuse: Unknown parameter 'group_id00000000000000000000' [ 269.508180][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.514530][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.523034][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 272.543662][ T7283] fuse: Bad value for 'user_id' [ 273.720140][ T7300] device syzkaller0 entered promiscuous mode [ 278.091902][ T7361] device syzkaller0 entered promiscuous mode [ 279.313269][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 279.542378][ T7376] [U] V3Fپ"S/4:XTZWTLW= [ 279.747500][ T7376] [U] J"E:" [ 281.964957][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.745'. [ 283.437100][ T7420] fuse: Unknown parameter 'user00000000000000000000' [ 286.506597][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'. [ 295.619250][ T7591] device syzkaller0 entered promiscuous mode [ 300.442135][ T4176] Bluetooth: hci3: command 0x0406 tx timeout [ 300.782080][ T7638] device syzkaller0 entered promiscuous mode [ 300.816184][ T7644] fuse: root generation should be zero [ 301.005590][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.803'. [ 301.021258][ T7653] [U] V3Fپ"S/4:XTZWTLW= [ 301.086549][ T7657] device syzkaller0 entered promiscuous mode [ 301.132274][ T7650] [U] J"E:" [ 305.994175][ C0] hrtimer: interrupt took 31489 ns [ 309.697959][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.835'. [ 310.227584][ T7771] [U] V3Fپ"S/4:XTZWTLW= [ 310.263636][ T7770] [U] J"E:" [ 311.452395][ T7789] ksmbd: Unknown IPC event: 3, ignore. [ 312.291624][ T7799] device syzkaller0 entered promiscuous mode [ 314.530658][ T7811] device syzkaller0 entered promiscuous mode [ 316.047328][ T7836] netlink: 132 bytes leftover after parsing attributes in process `syz.1.854'. [ 317.097123][ T7849] ksmbd: Unknown IPC event: 3, ignore. [ 319.803387][ T6536] udevd[6536]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 320.975418][ T7871] loop3: detected capacity change from 0 to 1024 [ 323.706337][ T7889] device syzkaller0 entered promiscuous mode [ 323.840680][ T7895] ksmbd: Unknown IPC event: 3, ignore. [ 323.970819][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.868'. [ 324.224961][ T7897] [U] V3Fپ"S/4:XTZWTLW= [ 324.730985][ T7894] [U] J"E:" [ 326.921071][ T7912] ksmbd: Unknown IPC event: 3, ignore. [ 329.930979][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 331.771831][ T7944] loop5: detected capacity change from 0 to 1024 [ 331.782997][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 332.093292][ T7953] ksmbd: Unknown IPC event: 3, ignore. [ 333.525489][ T7948] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 333.550467][ T7946] loop3: detected capacity change from 0 to 1764 [ 333.951682][ T7961] device syzkaller0 entered promiscuous mode [ 334.001499][ T7959] device syzkaller0 entered promiscuous mode [ 334.016218][ T6536] udevd[6536]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 334.515830][ T7972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.891'. [ 334.828019][ T7977] ksmbd: Unknown IPC event: 3, ignore. [ 336.061190][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.072358][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.362398][ T4263] Bluetooth: hci5: command 0x0406 tx timeout [ 340.240679][ T8005] ksmbd: Unknown IPC event: 3, ignore. [ 342.641099][ T8020] device syzkaller0 entered promiscuous mode [ 343.616869][ T8027] ksmbd: Unknown IPC event: 3, ignore. [ 347.347242][ T8046] se_dev->se_dev_ptr already set for storage object [ 347.444500][ T8047] ksmbd: Unknown IPC event: 3, ignore. [ 349.354130][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 351.198281][ T8077] loop3: detected capacity change from 0 to 1764 [ 352.609200][ T8065] loop1: detected capacity change from 0 to 1024 [ 352.773337][ T8085] loop2: detected capacity change from 0 to 1024 [ 354.584182][ T8089] ksmbd: Unknown IPC event: 3, ignore. [ 356.343239][ T8097] ksmbd: Unknown IPC event: 3, ignore. [ 358.968184][ T8110] loop2: detected capacity change from 0 to 1764 [ 360.785230][ T8114] se_dev->se_dev_ptr already set for storage object [ 363.921447][ T8127] udevd[8127]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 363.973827][ T8133] udevd[8133]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 364.048720][ T8143] loop1: detected capacity change from 0 to 1024 [ 369.150385][ T8185] ksmbd: Unknown IPC event: 3, ignore. [ 370.418438][ T8182] loop5: detected capacity change from 0 to 1764 [ 371.775780][ T8197] fuse: Unknown parameter 'grou00000000000000000000' [ 371.829353][ T6536] udevd[6536]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 372.384968][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.956'. [ 372.455290][ T8211] [U] V3Fپ"S/4:XTZWTLW= [ 372.519932][ T8211] [U] J"E:" [ 372.529084][ T8215] ksmbd: Unknown IPC event: 3, ignore. [ 375.025017][ T8227] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 376.858332][ T8241] loop5: detected capacity change from 0 to 1764 [ 381.061249][ T8264] fuse: Bad value for 'fd' [ 383.676896][ T8278] ksmbd: Unknown IPC event: 3, ignore. [ 385.293567][ T6536] udevd[6536]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 386.020091][ T8294] ksmbd: Unknown IPC event: 3, ignore. [ 389.840582][ T8322] loop5: detected capacity change from 0 to 1024 [ 391.613224][ T8331] ksmbd: Unknown IPC event: 3, ignore. [ 392.539118][ T8337] loop4: detected capacity change from 0 to 1024 [ 395.911043][ T8357] loop5: detected capacity change from 0 to 1764 [ 398.923602][ T8364] ksmbd: Unknown IPC event: 3, ignore. [ 400.777588][ T8371] ksmbd: Unknown IPC event: 3, ignore. [ 402.310741][ T8133] udevd[8133]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 403.313705][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.327848][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.410962][ T6536] udevd[6536]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 405.666001][ T8402] ksmbd: Unknown IPC event: 3, ignore. [ 407.308459][ T8408] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 408.517819][ T8422] ksmbd: Unknown IPC event: 3, ignore. [ 410.345899][ T8431] ================================================================== [ 410.355055][ T8431] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 410.362285][ T8431] Read of size 8 at addr ffff88814bf0ba18 by task syz.1.1009/8431 [ 410.370179][ T8431] [ 410.372506][ T8431] CPU: 0 PID: 8431 Comm: syz.1.1009 Not tainted syzkaller #0 [ 410.379878][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 410.389936][ T8431] Call Trace: [ 410.393214][ T8431] [ 410.396148][ T8431] dump_stack_lvl+0x188/0x250 [ 410.400836][ T8431] ? show_regs_print_info+0x20/0x20 [ 410.406035][ T8431] ? _printk+0xda/0x130 [ 410.410195][ T8431] ? dvb_device_open+0xc5/0x360 [ 410.415052][ T8431] ? load_image+0x410/0x410 [ 410.419554][ T8431] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 410.425022][ T8431] print_address_description+0x60/0x2d0 [ 410.430569][ T8431] ? dvb_device_open+0xc5/0x360 [ 410.435421][ T8431] kasan_report+0xdf/0x130 [ 410.439844][ T8431] ? dvb_device_open+0xc5/0x360 [ 410.444700][ T8431] dvb_device_open+0xc5/0x360 [ 410.449392][ T8431] chrdev_open+0x585/0x5f0 [ 410.453831][ T8431] ? cd_forget+0x160/0x160 [ 410.458272][ T8431] ? fsnotify_perm+0x3a7/0x560 [ 410.463043][ T8431] ? cd_forget+0x160/0x160 [ 410.467466][ T8431] do_dentry_open+0x7f7/0xf90 [ 410.472156][ T8431] ? vfs_open+0x2b/0x80 [ 410.476327][ T8431] path_openat+0x2718/0x2fb0 [ 410.481301][ T8431] ? __kasan_slab_alloc+0xa9/0xc0 [ 410.486337][ T8431] ? do_filp_open+0x400/0x400 [ 410.491038][ T8431] do_filp_open+0x1df/0x400 [ 410.495551][ T8431] ? vfs_tmpfile+0x300/0x300 [ 410.500174][ T8431] ? _raw_spin_unlock+0x24/0x40 [ 410.505042][ T8431] ? alloc_fd+0x59e/0x650 [ 410.509385][ T8431] do_sys_openat2+0x14b/0x500 [ 410.514070][ T8431] ? __lock_acquire+0x7b50/0x7b50 [ 410.519101][ T8431] ? do_sys_open+0xe0/0xe0 [ 410.523518][ T8431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 410.529506][ T8431] ? lock_chain_count+0x20/0x20 [ 410.534366][ T8431] __x64_sys_openat+0x135/0x160 [ 410.539230][ T8431] do_syscall_64+0x4c/0xa0 [ 410.543647][ T8431] ? clear_bhb_loop+0x30/0x80 [ 410.548324][ T8431] ? clear_bhb_loop+0x30/0x80 [ 410.553006][ T8431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.558900][ T8431] RIP: 0033:0x7f25505867ce [ 410.563317][ T8431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 410.582923][ T8431] RSP: 002b:00007f254e7fcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 410.591347][ T8431] RAX: ffffffffffffffda RBX: 00007f254e7fd6c0 RCX: 00007f25505867ce [ 410.599318][ T8431] RDX: 0000000000040002 RSI: 00007f254e7fcc00 RDI: ffffffffffffff9c [ 410.607292][ T8431] RBP: 00007f254e7fcc00 R08: 0000000000000000 R09: 0000000000000000 [ 410.615267][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 410.623239][ T8431] R13: 00007f255084e128 R14: 00007f255084e090 R15: 00007ffe27a73fd8 [ 410.631231][ T8431] [ 410.634244][ T8431] [ 410.636564][ T8431] Allocated by task 1: [ 410.640622][ T8431] __kasan_kmalloc+0xaf/0xe0 [ 410.645217][ T8431] dvb_register_device+0x300/0x1dc0 [ 410.650419][ T8431] dvb_register_frontend+0x629/0x900 [ 410.655703][ T8431] vidtv_bridge_probe+0x9c1/0xf30 [ 410.660734][ T8431] platform_probe+0x137/0x1c0 [ 410.665418][ T8431] really_probe+0x276/0xc70 [ 410.669920][ T8431] __driver_probe_device+0x1f5/0x390 [ 410.675203][ T8431] driver_probe_device+0x4f/0x420 [ 410.680227][ T8431] __driver_attach+0x45d/0x660 [ 410.684986][ T8431] bus_for_each_dev+0x182/0x1f0 [ 410.689838][ T8431] bus_add_driver+0x324/0x5d0 [ 410.694515][ T8431] driver_register+0x32d/0x430 [ 410.699282][ T8431] vidtv_bridge_init+0x39/0x70 [ 410.704048][ T8431] do_one_initcall+0x272/0x730 [ 410.708821][ T8431] do_initcall_level+0x13d/0x1f0 [ 410.713758][ T8431] do_initcalls+0x4b/0x90 [ 410.718091][ T8431] kernel_init_freeable+0x3d5/0x560 [ 410.723289][ T8431] kernel_init+0x19/0x1b0 [ 410.727619][ T8431] ret_from_fork+0x1f/0x30 [ 410.732034][ T8431] [ 410.734351][ T8431] Freed by task 8408: [ 410.738331][ T8431] kasan_set_track+0x4b/0x70 [ 410.742919][ T8431] kasan_set_free_info+0x1f/0x40 [ 410.747855][ T8431] ____kasan_slab_free+0xd5/0x110 [ 410.752876][ T8431] slab_free_freelist_hook+0xec/0x170 [ 410.758244][ T8431] kfree+0xef/0x2a0 [ 410.762060][ T8431] dvb_device_open+0x2d2/0x360 [ 410.766817][ T8431] chrdev_open+0x585/0x5f0 [ 410.771230][ T8431] do_dentry_open+0x7f7/0xf90 [ 410.775905][ T8431] path_openat+0x2718/0x2fb0 [ 410.780489][ T8431] do_filp_open+0x1df/0x400 [ 410.784989][ T8431] do_sys_openat2+0x14b/0x500 [ 410.789658][ T8431] __x64_sys_openat+0x135/0x160 [ 410.794502][ T8431] do_syscall_64+0x4c/0xa0 [ 410.798913][ T8431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.804810][ T8431] [ 410.807134][ T8431] The buggy address belongs to the object at ffff88814bf0ba00 [ 410.807134][ T8431] which belongs to the cache kmalloc-256 of size 256 [ 410.821183][ T8431] The buggy address is located 24 bytes inside of [ 410.821183][ T8431] 256-byte region [ffff88814bf0ba00, ffff88814bf0bb00) [ 410.834367][ T8431] The buggy address belongs to the page: [ 410.840005][ T8431] page:ffffea00052fc280 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814bf0b000 pfn:0x14bf0a [ 410.851542][ T8431] head:ffffea00052fc280 order:1 compound_mapcount:0 [ 410.858126][ T8431] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 410.866199][ T8431] raw: 057ff00000010200 ffffea0005218408 ffff888140000708 ffff888016c41b40 [ 410.874782][ T8431] raw: ffff88814bf0b000 0000000000100007 00000001ffffffff 0000000000000000 [ 410.883353][ T8431] page dumped because: kasan: bad access detected [ 410.889769][ T8431] page_owner tracks the page as allocated [ 410.895474][ T8431] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 9635223926, free_ts 0 [ 410.913364][ T8431] get_page_from_freelist+0x24f6/0x2670 [ 410.918932][ T8431] __alloc_pages+0x1ee/0x480 [ 410.923533][ T8431] alloc_page_interleave+0x24/0x1e0 [ 410.928734][ T8431] new_slab+0xc0/0x4b0 [ 410.932807][ T8431] ___slab_alloc+0x807/0xdd0 [ 410.937409][ T8431] __kmalloc_node+0x142/0x3a0 [ 410.942089][ T8431] kvmalloc_node+0x84/0x130 [ 410.946598][ T8431] v4l2_ctrl_new+0x70f/0x1310 [ 410.951279][ T8431] v4l2_ctrl_new_std+0x247/0x300 [ 410.956215][ T8431] handler_new_ref+0x14f/0x8d0 [ 410.960984][ T8431] v4l2_ctrl_add_handler+0x197/0x280 [ 410.966274][ T8431] vivid_create_controls+0x2411/0x3380 [ 410.971740][ T8431] vivid_probe+0x39ff/0x6240 [ 410.976339][ T8431] platform_probe+0x137/0x1c0 [ 410.981018][ T8431] really_probe+0x276/0xc70 [ 410.985521][ T8431] __driver_probe_device+0x1f5/0x390 [ 410.990807][ T8431] page_owner free stack trace missing [ 410.996165][ T8431] [ 410.998500][ T8431] Memory state around the buggy address: [ 411.004123][ T8431] ffff88814bf0b900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.012180][ T8431] ffff88814bf0b980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.020240][ T8431] >ffff88814bf0ba00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.028383][ T8431] ^ [ 411.033234][ T8431] ffff88814bf0ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.041293][ T8431] ffff88814bf0bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.049348][ T8431] ================================================================== [ 411.057404][ T8431] Disabling lock debugging due to kernel taint [ 411.068896][ T8431] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 411.076101][ T8431] CPU: 0 PID: 8431 Comm: syz.1.1009 Tainted: G B syzkaller #0 [ 411.084855][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 411.094900][ T8431] Call Trace: [ 411.098174][ T8431] [ 411.101098][ T8431] dump_stack_lvl+0x188/0x250 [ 411.105777][ T8431] ? show_regs_print_info+0x20/0x20 [ 411.110973][ T8431] ? load_image+0x410/0x410 [ 411.115477][ T8431] panic+0x2f8/0x850 [ 411.119371][ T8431] ? bpf_jit_dump+0xd0/0xd0 [ 411.123874][ T8431] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 411.129514][ T8431] ? check_panic_on_warn+0x6c/0xa0 [ 411.134628][ T8431] ? dvb_device_open+0xc5/0x360 [ 411.139485][ T8431] check_panic_on_warn+0x80/0xa0 [ 411.144421][ T8431] ? dvb_device_open+0xc5/0x360 [ 411.149268][ T8431] end_report+0x6d/0xf0 [ 411.153420][ T8431] kasan_report+0x102/0x130 [ 411.157928][ T8431] ? dvb_device_open+0xc5/0x360 [ 411.162785][ T8431] dvb_device_open+0xc5/0x360 [ 411.167462][ T8431] chrdev_open+0x585/0x5f0 [ 411.171878][ T8431] ? cd_forget+0x160/0x160 [ 411.176380][ T8431] ? fsnotify_perm+0x3a7/0x560 [ 411.181147][ T8431] ? cd_forget+0x160/0x160 [ 411.185566][ T8431] do_dentry_open+0x7f7/0xf90 [ 411.190241][ T8431] ? vfs_open+0x2b/0x80 [ 411.194392][ T8431] path_openat+0x2718/0x2fb0 [ 411.198989][ T8431] ? __kasan_slab_alloc+0xa9/0xc0 [ 411.204015][ T8431] ? do_filp_open+0x400/0x400 [ 411.208692][ T8431] do_filp_open+0x1df/0x400 [ 411.213201][ T8431] ? vfs_tmpfile+0x300/0x300 [ 411.217975][ T8431] ? _raw_spin_unlock+0x24/0x40 [ 411.222822][ T8431] ? alloc_fd+0x59e/0x650 [ 411.227147][ T8431] do_sys_openat2+0x14b/0x500 [ 411.231823][ T8431] ? __lock_acquire+0x7b50/0x7b50 [ 411.236845][ T8431] ? do_sys_open+0xe0/0xe0 [ 411.241255][ T8431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 411.247241][ T8431] ? lock_chain_count+0x20/0x20 [ 411.252093][ T8431] __x64_sys_openat+0x135/0x160 [ 411.256943][ T8431] do_syscall_64+0x4c/0xa0 [ 411.261357][ T8431] ? clear_bhb_loop+0x30/0x80 [ 411.266027][ T8431] ? clear_bhb_loop+0x30/0x80 [ 411.270700][ T8431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.276601][ T8431] RIP: 0033:0x7f25505867ce [ 411.281015][ T8431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 411.300705][ T8431] RSP: 002b:00007f254e7fcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 411.309118][ T8431] RAX: ffffffffffffffda RBX: 00007f254e7fd6c0 RCX: 00007f25505867ce [ 411.317087][ T8431] RDX: 0000000000040002 RSI: 00007f254e7fcc00 RDI: ffffffffffffff9c [ 411.325056][ T8431] RBP: 00007f254e7fcc00 R08: 0000000000000000 R09: 0000000000000000 [ 411.333021][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 411.340987][ T8431] R13: 00007f255084e128 R14: 00007f255084e090 R15: 00007ffe27a73fd8 [ 411.348958][ T8431] [ 411.352198][ T8431] Kernel Offset: disabled [ 411.356512][ T8431] Rebooting in 86400 seconds..