last executing test programs: 31m20.877516715s ago: executing program 32 (id=67): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x50000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 31m0.258226657s ago: executing program 1 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x8c9e1000) 30m59.403528028s ago: executing program 1 (id=136): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2d1, &(0x7f0000000740)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write(r1, &(0x7f0000000080)="7009d8", 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "feb78fbaf888a34a69e00d96072000e60080b8785d96020100014a0000000003000000000000000036c447eb00000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0xfffffffffffffffa]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1000000, 0x17, 0x14, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c809cda49a11ff76e906b13a0c26ef2f2b08d4dcaffbc3200f99d6f328ccecaf9ec49aa55fba663c523", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56229263b3", [0xa2, 0x3562]}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x5, 0x1, 0x1a, 0x8, "239f5f357221692bf8f1129c45a378b6aee4794881784f29a10510470e6981c6a22f2f99e7bca0b0aad316b714967cddaec3cf58ec3fb913552cbb793a7c1d85", "f28aa80ce766b90c9fca635e8a542e187f6f3e7f19a8ed98a17b80ff5f25300d", [0x40000000000000, 0xf]}) socket$nl_generic(0x10, 0x3, 0x10) 30m58.416836994s ago: executing program 1 (id=140): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) 30m57.196823182s ago: executing program 2 (id=142): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)=@x86={0x7b, 0x40, 0x5, 0x0, 0x2, 0x5, 0x7, 0x7, 0x8, 0x9, 0x8, 0x7, 0x0, 0x96a3, 0x8, 0x48, 0x26, 0xfa, 0x3, '\x00', 0xa, 0x8}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz2\xc3O6\x91\x93\xf00\x83\x1c\xac\x19\xa8\xffj\x8b\xc2\xeb\xd9\x8f\xbf40\x1f\xde\x1e\xcd\x18L\x0eC\xd7\xafe\x81?\r\xf1\x0e\x8e5fC?\xfa+#\xe7\xb6\x1f\xde!\xf1\x97\xd5@N\xb4\xee(\xa3\x1a\xe5\xc2\x83\xf6\x18U\x86\xea\xc7\xccR\x11\xf9\xa7f\xca\x93\x17\x85\x96\xb3c\xdc\xc4\xdcz\xeb\xd0\x14\x92\x13\x8dg\x11\xa0\xbe\xa2Xj\x97\x83\xeby\xa4;S\x04\xc7\xd37\xd24\x98@\x8cD\x92', 0x20, 0x100ffd}, 0xffffffffffffffb0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000000200)="c7", 0x1) sendfile(r5, r0, 0x0, 0x3ffff) 30m55.870223954s ago: executing program 1 (id=145): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0xaf2e271ff2101666) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) 30m55.139657638s ago: executing program 33 (id=145): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0xaf2e271ff2101666) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) 30m53.601572441s ago: executing program 2 (id=157): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) 30m52.251846925s ago: executing program 2 (id=164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x20000848, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6002d3030303030302b3030303030303135322c696f43316172030000ae96de0069736f380000000000", @ANYRES16=r3, @ANYRESHEX=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000001580)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000) 30m51.340261048s ago: executing program 2 (id=172): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES64, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="2c736d61636b667364656630234f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3ff33e07b480ad2f41c04cd7956530c3be5c0d1830700000040d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776bde1479f97c773fd904da89481def7b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc27, &(0x7f0000003180)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) socket$inet_tcp(0x2, 0x1, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 30m50.541059775s ago: executing program 2 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) readv(r1, &(0x7f00000052c0)=[{&(0x7f00000005c0)=""/160, 0xa0}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x0, 0x3f00, 0xfffffff8, 'syz1\x00', 0xfffe}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x3, 'syz0\x00', 0x0}) 30m49.067329355s ago: executing program 2 (id=169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) wait4(0x0, 0x0, 0x2, 0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r2 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x82, 0x0, 0x0) 30m48.359183898s ago: executing program 34 (id=169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) wait4(0x0, 0x0, 0x2, 0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r2 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x82, 0x0, 0x0) 30m19.836457574s ago: executing program 4 (id=273): prlimit64(0x0, 0x9, &(0x7f0000000140)={0x9, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 30m19.48747778s ago: executing program 4 (id=274): syz_usb_connect$uac2(0x5, 0x92, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002000000401e04df30400001020301090280000301070008080b00010100200f0904000000010120000924010900032000030b240604060a00030009000c24030100000902047f7f0009040100000102200009040101010102200009050109200005000d082501800305040009"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 30m16.926699401s ago: executing program 4 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000000c0)="080211000000cbc2ed40000188487aab5e1a", 0x12, 0x0, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="080208486f57"}, 0x14) 30m16.647684514s ago: executing program 4 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) sched_setscheduler(0x0, 0x1, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 30m15.191762122s ago: executing program 4 (id=295): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3000048, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80400a, &(0x7f0000000280)=ANY=[], 0x2, 0x6c5, &(0x7f0000000b00)="$eJzs3U2IXWf9B/DvuZncyc0f0mmbpvmLkKGBog0mM7nURBAaRSSLIEE33Q7JpBlyk5bJVNIi5katgitX0oWLisRFVyIi1JVY14LgxlX2AXcuslBHzsuduTNzM7mTl7lp/HzgzHnOPOd5nt/55Tzn3JcJJ8D/rLNvZm8/Rc4eO3ej3L5zu9u7c7t7dVBOMp2klUzVqxSdpPg0OZN6yf+Xv2y6K+43zut3PymmPvy4W29NNUu1f2u7dluM3LOf7Fvb2JNkti7+a4wOW6P7q5aqnwvr/T2kYi3uMmFHB4mDSVvdor9eOWpqbDT+vAWeWjfr++YWM8n+1HfX8nVAmqvDg68Mk7fttam/e3EAAADAkzLyvfyw5+7lXm7kwO6EAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+Gon5mYNEsrUF5NsXg+f/toWfqtycc7iP64FK1+vZzkw4EAAAAAAAAAB7JkXu5lxs5MNheLarv/F+pNg5WP/8v7+Z6FrOc47mRhaxkJcuZTzIz1FH7xsLKyvL81pY/T9lydXX1ZtPy5MiWJzfG1d8c6Ja/NPiM/+kBAAAAAAAAADxeP8jZ9e//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaVAke+pVtRwclGfSmkqyL0m7mF3bvT3RYB+DP046AAAAAHjyOs36QPGfurBaVO/5D1Xv+/fl3VzLSpaykl4Wc7H6LKB+19/6a7/bu3O7e7Vctnb8tX/sKI6qx9SfPYweea7a46W1FmfzzXwnxzKb81nOUr6bhaxkMbP5RlVaSJGZ5tOLmTu3OxnEujXeMxu2zm+O7chQuYzvcBVJJ5eyVMV2PBfag9BbzX6Hh0b7fTvZNOKtMjvFG40xc3SxWZdH9LNm/XSYqY5871pG5prcl9l4fjjvW3O/w/Nk80jzaa19BnVwfZRyc/NID5Xz/c26zPWPn2zOd/hR2lomiiK99H9abg3OvkPb5zz54t/+dP5y69qVy5euH3t6TqOHtPmc6A5l4uWxMtErM9F/hEzse5T4H592k436Krqzq+UrVdsDWcq38nYuZjGnMpf5nM5cvpKT6ebkUF5f2j6v1Vxr7WyuHf1CUyjvST8Zujftmun7VZR5fX4or8NXupmqbvg361l6YYwsFe2MztLfR4Yy9bmmUI7xw6E7zuRtzsT8UCZe3D4Tv/z3apLrvWtXli8vvDPmeK8263LafrDx2vyrx3JAO9ccbnm+vFD+Y6W+bQyfHWXdi4O6TflqN9+4TDWdbahrp5rPdd2DZmrZ06Fbo3qq614eOUq3qjs8VLfhVU7eTm/tVUhj1ycpAGPY/9r+dudu5y+djzo/6lzunNv39enT059vZ++fp/6w5zetX7e+WryWj/L9HJh0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cy4/t77VxZ6vcXlnRY6D9VqR4W0HnOHt0ZWDVJR/6Y9Yp8jecJH+uwUprc7o36b+nFN92nenkTMndw3nt0tZGoXxprOiKpz65M6aa3Fk+TKyAfcTe3i9Ql4ck6sXH3nxPX33v/S0tWFtxbfWrx28vSpN051vzx/88Slpd7iXP2z2dnEh2fK+suASUcCAAAAAAAAAAAAjGs3/nvDiGGL/gSOFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhsOvtm9vZTZH7u+Fy5fed2t1cug3KSdr3nVJJWkuJ7SfFpcib1kpmh7or7jfP63U9+8eqHH3fX+5oa7N/a1O53/1xdrUudcY+i3yyZTbKnWT/Y9Fj9XRjqrz9uRBsUa0dYJuzoIHEwaf8NAAD//6liBFc=") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 30m1.133811435s ago: executing program 4 (id=340): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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") mknod$loop(0x0, 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x9}, 0x8) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x10800, &(0x7f0000000040)=ANY=[], 0xff, 0x18c, &(0x7f0000000200)="$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") setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400004}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) socket$inet(0x2, 0x4000000000000001, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 30m0.141012272s ago: executing program 35 (id=340): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$eJzs3c9vG1UeAPDv2EmaNNUmjVa72z1sI61WrbTbpEnbVYQ4tFdUReWHuMCB0KSlNG2jJghSkJpK5YKEuCCExIkD5b+Ail57ghMHLpxQpQhQuSFhZHsmiRM7P5zEU3U+H8n1zHuevO80+Xpmnt8bB1BYw9V/ShFHImIuiRhIllbquiKtHK6/7vGv712sPpKoVF78eSiStCx7fZI+96cb90bEt98kMVTe2O784q2rU7OzMzfT9dGFa3Oj84u3Tly5NnV55vLM9fH/j0+cOX1mYuxkW/t1e2PRb+fvvvn2wAeTr3zx2e/J2Jc/TCZxNp5LX7h2P/bKcAzX/k+SjVX9E3vdWE7K6d9JpVKpZGVJV74xsX3Z7687Iv4eA1GO1V/eQLz/fK7BAfuqktTfu4EiStrK/769DwTosOw8ILu2X38dXMrlrATohOVz9Q6AjfnfVe8bjN5a38DBx0ms7dZJIqK9nrlGhyLi4YPJu5ceTN6NfeqHA5pbuhMR/2iW/0kt/wejNwZr+V9qyP/qecGF9Lla/kKb7a/vKpb/0Dn1/O/dNP+jRf6/Vn2+Xc/h19tqvXftyht9Dfnf1+4uAQAAAAAAQGHdPxcR/1v5/L9n9fO30sr4n2gy/qc/Is7uQfvD69Y3fv5ferQHzQBNLJ+LeLbp+N9SNvp3sLxmCutgdCeXrszOnIyIv0TE8eg+UF0f26SNEx8Ofdqqbjgd/5c9qu0/TMcCpnE86jrQuM301MLULnYZSC3fifI/m47/TVaO/0mT43/1nWFum20M/efehVZ1W+c/sF8qn0cca3r8X71rRbL5/TlGa+cDo9lZwUb/evejr1q1327+u8UE7N7ynYiDm+f/YLL2fj3zO2/j1GJXpVVdu+f/PclLtbsK9aRl70wtLNwci+hJzperpQ3l4zuPGZ5GWT5k+VLN/+P/Xs3/cpP+v2bn/30RsbTuZye/NM4pzvztj/4fW8Xj/B/yU83/6R0d/3e+MH5v8OtW7W/v+H+6dqw/npbo/4O6T7I07eluKG+Sjl3NqjoeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BUoRcSiS0sjKcqk0MhLRHxF/jYOl2RvzC/+9dOOt69PVutr3/5eyb/odqK8n2ff/D65ZH1+3fioiDkfEx+W+2vrIxRuz03nvPAAAAAAAAAAAAAAAAAAAADwh+lvM/6/6qZx3dMC+68o7ACA3TfL/uzziADrP8R+KS/5Dccl/KC75D8Ul/6G4Ns//Vyc6FgjQcY7/UFzyHwAAAAAAniqHj97/PomIpWf6ao+qnrSuO9fIgP1WyjsAIDdu8QPFZegPFJdrfCDZor635UZbbbmZuYu72BgAAAAAAAAAAAAACufYEfP/oajM/4fiMv8fiiub/3805ziAznOND8QWM/mbzv/fcqs1XGgAAAAAAAAAAAAAwK7NL966OjU7O3PTwsttbJWNas49+PYWKpXK7Wr4T0o8e7+QpCPUO9JoNhS+83vas50dzOb6be8nb3yvONCh9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDRnwEAAP//4Fgg0g==") mknod$loop(0x0, 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x9}, 0x8) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x10800, &(0x7f0000000040)=ANY=[], 0xff, 0x18c, &(0x7f0000000200)="$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") setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400004}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) socket$inet(0x2, 0x4000000000000001, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 21m39.715937039s ago: executing program 5 (id=1648): timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) 21m39.405508743s ago: executing program 5 (id=1650): r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 21m39.130808366s ago: executing program 5 (id=1653): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x40) dup3(r1, r0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21m38.028042379s ago: executing program 5 (id=1664): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 21m37.615977008s ago: executing program 5 (id=1669): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 21m33.862983615s ago: executing program 5 (id=1681): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f000055c000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 21m32.988356476s ago: executing program 36 (id=1681): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f000055c000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 20m4.424061892s ago: executing program 8 (id=1966): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x1f0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c4, 0x2, [@TCA_BPF_ACT={0x1c0, 0x1, [@m_bpf={0x9c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x74, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x120, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0xf2, 0x6, "0f8517cdb35f1b62907fa6d1a77493bb0a783b422d480656df16250d894b5b65a8a5af1b34ad19645c29af5852c86d9ba3acc18602002ed6e0e81622d52840fbaaec37949fd2c7a71cce0b88974ba0ea2a6553e913bb65a83b663269afddf63ae637694a3b57bd584883453a5a9b49c5c95b3771fa150f88d2bb8816ea70623b7899523c783292debdaf5cb974ff6aaabf60e5907aec365905ab043984ec9f9476a9ee9cf1de21fe83a13e7d8342764ae9ba448ae8f0684a372dc21fa8d2bece62efc3c6637e8ae834ffd2204f9ec7d2ce9d9e9fd00e0a02beac8c3442e795637afbb2bf78fc8a7dc72919b82cc1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 20m2.446391555s ago: executing program 8 (id=1968): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) lseek(r0, 0x0, 0x1) 20m2.096095192s ago: executing program 8 (id=1969): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="a8", 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000082, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 20m1.70608677s ago: executing program 8 (id=1972): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1a08450, &(0x7f0000000000)=ANY=[], 0x2, 0x58b, &(0x7f00000000c0)="$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") r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_clone3(&(0x7f0000000c40)={0xa3800000, 0x0, 0x0, 0x0, {0x80021}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20m0.87403854s ago: executing program 8 (id=1974): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 20m0.695533948s ago: executing program 7 (id=1975): r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) 20m0.328086825s ago: executing program 7 (id=1977): r0 = fanotify_init(0x40, 0x40000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x48001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xfe1, 0x0, &(0x7f0000000c80), 0x0, 0x0) getdents64(r2, 0x0, 0x0) 20m0.183930882s ago: executing program 8 (id=1979): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_create_resource$binfmt(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x824, 0x6361, 0x7, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1, 0x8, 0x3, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 19m59.422764268s ago: executing program 37 (id=1979): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_create_resource$binfmt(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x824, 0x6361, 0x7, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1, 0x8, 0x3, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 19m59.394982779s ago: executing program 7 (id=1981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x36, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x0, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0x8, 0x7, 0x4, 0x2, 0x8000, 0x0, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x8fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x6, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x38000000, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x7, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0x8, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x3, 0x1000, 0x2, 0x10, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0x358, 0x274, 0x7, 0x8, 0x4, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 19m58.191527236s ago: executing program 7 (id=1982): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1a08450, &(0x7f0000000000)=ANY=[], 0x2, 0x58b, &(0x7f00000000c0)="$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") r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_clone3(&(0x7f0000000c40)={0xa3800000, 0x0, 0x0, 0x0, {0x80021}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19m57.382219894s ago: executing program 7 (id=1984): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000140), 0x0, 0x0, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 19m56.820081651s ago: executing program 7 (id=1985): r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) 19m56.159043962s ago: executing program 38 (id=1985): r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) 1m24.815361238s ago: executing program 6 (id=8309): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x7d64884cba6ba51f) 1m24.495922313s ago: executing program 6 (id=8310): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000740), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0) write$sndseq(r4, &(0x7f00000000c0), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000740)="40f0538ef047b21fb60068", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x45}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000088d000/0x3000)=nil, 0x0}, 0x68) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4040004) io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xcc8f, 0xc000, 0x2000008, 0xc1}) pselect6(0x0, 0x0, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r7, &(0x7f00000002c0)=""/12, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1m21.695925325s ago: executing program 6 (id=8313): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2c, 0x0, {{{@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x2, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0x2}}, 0xf8}}, 0x0) 1m16.443886405s ago: executing program 6 (id=8317): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x34, &(0x7f0000000040)={0x0, 0xea60}, 0x10) 1m14.088174717s ago: executing program 6 (id=8321): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x80040, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x141000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x1}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m13.849011049s ago: executing program 6 (id=8322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x9000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0xb000, 0x103000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xb000, 0x10000, 0x1}) 58.651358511s ago: executing program 39 (id=8322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x9000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0xb000, 0x103000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xb000, 0x10000, 0x1}) 10.890589542s ago: executing program 9 (id=8420): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) prctl$PR_SET_SECUREBITS(0x1c, 0x14) setuid(0xee01) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000003c0)=0xe6) 10.496017931s ago: executing program 0 (id=8421): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0b06c90000080800"], 0xe) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) 10.045299293s ago: executing program 9 (id=8423): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000100)) 9.501526639s ago: executing program 9 (id=8425): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4002014) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) setresuid(0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8.968779304s ago: executing program 9 (id=8426): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x481, &(0x7f0000000600)="$eJzs3M2PU1UbAPDntjPDy9c7o+IHiIKikWicYQZUlmA0caGJiS5wOXYGghTGMKMRQrS6wKUhcW9cmvAXuNKNUVcmbnVvSIhhA7q65rb3Dm2nrczQWsf+fknpOT23Pefh3NOec8+0AYys/dk/ScSOiPglIiYb2dYD9jfubt24VPnjxqVKEmn6xu9J/bibNy5VikOL520vMrXWx5stX7h4Zr5aXTyf52dWzr47s3zh4rOnz86fWjy1eG7u6NEjh2dfeH7uub7EmbXp5p4Pl/bufuWtK69VTlx5+4erSRF/Sxzv96W+ppduVi4ST/arln+JnU3pZGyIDWFdshMy667x+vifjHLc7rzJePmToTYOGKg0TdMt3YtrKfAflsSwWwAMR/45n0TUKtkauHk9PwquH28sgLK4b+W3RslYlPJjxtvWt/2UrbZO1P78IrtF2/UUAIBB+OZ4476Y+92ef5RaruIfy/eGpiLinoi4NyLui4hdEXF/RDwQEQ9GxENNz+m079OufZNk7fyndG1Dgd2h6xN5Ys38r5j9xVQ5z+2sxz+enDxdXTwUEf+PiIMxviXLz/ao49uXfv6sW9n+pvlfdsvqL+aCeTuujbVdoFuYX5nfaLztrn8csWessbfXGn+yuhOQ9ePuiNizb2N1nH76q73dyv4+/h76sM+UfhnxVGNvsxZt8Uc+909670/O/C+qi4dmirNirR9/uvx6U7Yy2ZS5q/j7IOv/bdG5/3NTSfN+7fL667j866dd1zR3eP5PND8nO/8nkjfr6aLgg/mVlfOzERPJq/njx/LHW+urHzd3+/gs/oMHOsVfqr/HFf8TD0dEdhI/EhGPRsS+vO2PRcTjEXGgR/zfv/jEOxuPf7Cy+BfW1f9dE8Xe9pqi8pnvvq6XFJ011SP+JDr0/5F66mD+SKf3v8nWUyR6tvT83ZzNAAAAsPmUImJHJKXp1XSpND3d+Hv5XbGtVF1aXnnm5NJ75xYa3xGYivFScaVrcvV6aNRm82X91XJEVj6X54vrpYfz68afl7fW89OVperCsIOHEbe9y/jP/FYeduuAgfN9LRhdGx3/aZp+1OemAP8wn/8wuox/GF0dxv/WtnyP3wgANrNOn/8W9jAazP9hdBn/MLqMfxhdxj+MpPyb8GN38gX/gSWy95/h1b7+RJoOqfaJ4ce+mojS0GqPYce+vkSS/5ZGOvC6il+W6ccL1l/ILgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDp/RUAAP//S+LZpQ==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 7.130461971s ago: executing program 3 (id=8428): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) iopl(0x3) keyctl$get_persistent(0x10, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) eventfd(0x0) pselect6(0x40, &(0x7f0000000100)={0x8, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100201}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffefffffe, 0x0, 0x0, 0x2000000a}, 0x0, 0x0) 5.878737101s ago: executing program 9 (id=8429): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) read$FUSE(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x0, 0x1c0, 0xfeffffff, 0x268, 0x268, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 'veth0_to_bond\x00', 'pim6reg0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x4], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2, @icmp_id}}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x2}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @port=0x4}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@private2, @gre_key=0x8, @gre_key=0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 5.727975518s ago: executing program 0 (id=8430): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000c40)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r2, 0x101}, 0x0, &(0x7f0000000880)="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", 0x0) 4.402939601s ago: executing program 1 (id=8347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f4}]}) 3.980466731s ago: executing program 9 (id=8431): keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x801, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 3.851966207s ago: executing program 0 (id=8432): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000500)=0x809, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) 3.528484072s ago: executing program 0 (id=8433): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0xffe0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44894) 3.175957159s ago: executing program 0 (id=8434): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) socket$packet(0x11, 0x3, 0x300) 2.991903868s ago: executing program 1 (id=8435): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c403000200092100105c0122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x9, '<'}, @global=@item_4={0x3, 0x1, 0x4, "64ff9171"}]}}, 0x0}, 0x0) 1.48021447s ago: executing program 0 (id=8436): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f0000000bc0)={[{@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0x1, 0x516, &(0x7f00000005c0)="$eJzs3c9vI1cdAPDveNeJd5M2aekBELRLW1jQap3E20ZVD1BOCKFKiB5B2obEG0Wx4yh2ShP2kJ65IlGJExw48Adwrjhw54LgxqUckPgRgRokDoNmPEm9WXsTmsRO489HGs1782bn+95a857nOfYLYGzdioi9iJiIiLcjYqY4nhRbvNHdsvM+2n+4fLD/cDmJNH3rH0lenh2Lnn+TmSquWYmI730r4ofJ43HbO7vrS41GfavIz3Wam3Ptnd27a82l1fpqfaNWW1xYnH/t3qu1c2vrC82JIvXFD3+/97UfZ9WaLo70tuM8dZtePoqTuR4R37mIYCNwrWjPxKgrwidSiohnI+LF/P6fiWv5qwkAXGVpOhPpTG8eALjqSvkcWFKqFnMB01EqVasRU5HEc3Gz1Gi1O3cetLY3VrpzZbNRLj1Ya9Tni7nC2SgnWX4hT3+crx3L34uIZyLip5M38nx1udVYGeUbHwAYY1PHxv9/T3bHfwDgiquMugIAwNAZ/wFg/Bj/AWD8GP8BYPx0x/8bo64GADBEnv8BYPwY/wFgrHz3zTezLT0ofv965Z2d7fXWO3dX6u31anN7ubrc2tqsrrZaq/lv9jRPul6j1dpceCW23539+ma7M9fe2b3fbG1vdO7nv+t9v17Oz9obQssAgEGeeeGDPyXZiPz6jXyLnrUcyiOtGXDRSqOuADAy10ZdAWBk/s/VviwOBlfIGZ7xTQ/AFdFnid5HVPp9QShN0/TiqgRcsNufM/8P46pn/t9fAcOYMf8P48uEPoyvNE1Ou+Z/nPZEAOByM8cPDPj8/9li/+viw4EfrBw/4/2Tr+07BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxVh+v/Vot1OqajVKpWI56KiNkoJw/WGvX5iHg6Iv44WZ7M8gsjrjMAcFalvybF+l+3Z16efqTo+amj5ERE/Ojnb/3s3aVOZ+sPERPJPycPj3feL47Xhl97AOBkh+N0vu95kP9o/+Hy4TbM+vztmxFR6cY/2J+Ig6P41+N6vq9EOSJu/isp8l1Jz9zFWey9FxGf7df+JKbzOZDuyqfH42exnxpq/NIj8Ut5WXef/V985hzqAuPmg6z/eaPf/VeKW/m+//1fyXuosyv6v+xSywd5H/hx/MP+79qA/u/WaWO88rtvd1M3Hi97L+Lz1yMOYx/09D+H8ZMB8V8+Zfw/f+H5FweVpb+IuB394/fGmus0N+faO7t315pLq/XV+kattriwOP/avVdrc/kc9Vx3NEj7DAp/f/3O04PiZ+2/OSB+5YT2f/mU7f/lf9/+/peeEP+rL/WLX4rnnhA/ezL/yinjL938TWVQWRZ/ZUD7T3r975widjY+ffiX3ceWDQcARqe9s7u+1GjUtz6tiV/9ttuQJ5yTvVe5DFWVOHMiLvFL+Y1hxZqI/kU/eal7KxwrStNPFGtQj3Ees27AZXB000fEf0ZdGQAAAAAAAAAAAAAAoK9hfGNp1G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vpfAAAA//9BBsyD") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000400)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x8000000001, 0xfff000000000004, 0x40000000000f0, 0x6, 0xfffffffffffffff8, 0x1, 0x100000000000002, 0x400f6b}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.230386592s ago: executing program 3 (id=8437): ioperm(0x0, 0x62ee, 0x2000000000000006) syslog(0xa, 0x0, 0x0) 943.998825ms ago: executing program 3 (id=8438): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="7f512dbb36e9", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x1, 0x10001, 0x0, 0x65}}}}}, 0x0) 735.198965ms ago: executing program 3 (id=8439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 375.510332ms ago: executing program 3 (id=8440): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x400000000000032e, 0xe, 0x7, 0x0, 0x3}}}}}}}, 0x0) 0s ago: executing program 3 (id=8441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) kernel console output (not intermixed with test programs): [ 1571.926178][T28461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1571.981368][T28461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.044059][T28461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1572.121538][T28461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.176770][T28461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1572.225629][T28461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.269485][T28461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1572.323771][T28461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.369405][T28461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.454639][T28461] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.494176][T28461] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.546281][T28461] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.571951][T28461] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.943000][ T7871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.028177][ T7871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.175065][ T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.234580][ T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.973571][ T788] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1574.210429][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 1574.250787][T28718] kvm: apic: phys broadcast and lowest prio [ 1574.257131][ T788] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1574.296204][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.364771][ T788] usb 4-1: config 0 has no interface number 0 [ 1574.405993][ T788] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1574.472463][ T788] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1574.512255][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.600405][ T788] usb 4-1: Product: syz [ 1574.604648][ T788] usb 4-1: Manufacturer: syz [ 1574.647362][ T788] usb 4-1: SerialNumber: syz [ 1574.690986][ T788] usb 4-1: config 0 descriptor?? [ 1574.743612][ T788] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input88 [ 1575.053093][T28703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.135951][T28703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.536331][ T788] usb 4-1: USB disconnect, device number 29 [ 1577.470490][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1577.632164][T28785] netlink: 'syz.9.6772': attribute type 4 has an invalid length. [ 1577.680475][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1577.722337][ T9] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1577.744718][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.789112][T28786] netlink: 'syz.9.6772': attribute type 4 has an invalid length. [ 1577.807087][ T9] usb 7-1: config 0 has no interface number 0 [ 1577.840538][ T9] usb 7-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1577.917224][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1577.960548][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.019377][ T9] usb 7-1: Product: syz [ 1578.044494][ T9] usb 7-1: Manufacturer: syz [ 1578.049248][ T9] usb 7-1: SerialNumber: syz [ 1578.160421][ T9] usb 7-1: config 0 descriptor?? [ 1578.204343][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input89 [ 1578.538012][T28777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.626050][T28777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.252164][T13604] usb 7-1: USB disconnect, device number 42 [ 1580.073558][T28836] FAULT_INJECTION: forcing a failure. [ 1580.073558][T28836] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.128131][T28836] CPU: 0 PID: 28836 Comm: syz.3.6789 Not tainted syzkaller #0 [ 1580.135754][T28836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1580.145833][T28836] Call Trace: [ 1580.149156][T28836] [ 1580.152138][T28836] dump_stack_lvl+0x18c/0x250 [ 1580.156933][T28836] ? show_regs_print_info+0x20/0x20 [ 1580.162158][T28836] ? load_image+0x420/0x420 [ 1580.166685][T28836] ? __might_sleep+0xe0/0xe0 [ 1580.171296][T28836] ? __lock_acquire+0x7d80/0x7d80 [ 1580.176337][T28836] ? mtree_load+0x109/0x840 [ 1580.180918][T28836] should_fail_ex+0x394/0x4c0 [ 1580.185643][T28836] should_failslab+0x9/0x20 [ 1580.190171][T28836] slab_pre_alloc_hook+0x59/0x300 [ 1580.195228][T28836] ? can_vma_merge_before+0x6e/0x280 [ 1580.200543][T28836] kmem_cache_alloc+0x5a/0x2c0 [ 1580.205349][T28836] ? vm_area_dup+0x27/0x270 [ 1580.209899][T28836] vm_area_dup+0x27/0x270 [ 1580.214249][T28836] __split_vma+0x1a8/0xc20 [ 1580.218702][T28836] ? mmap_write_unlock+0x160/0x160 [ 1580.223949][T28836] ? split_vma+0x8f/0x110 [ 1580.228302][T28836] madvise_update_vma+0x44e/0xda0 [ 1580.233376][T28836] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 1580.239136][T28836] ? down_write_killable+0x181/0x230 [ 1580.244456][T28836] do_madvise+0x145c/0x3790 [ 1580.249040][T28836] ? madvise_set_anon_name+0x440/0x440 [ 1580.254528][T28836] ? schedule+0xc7/0x170 [ 1580.258795][T28836] ? futex_wait_queue+0x27/0x1b0 [ 1580.263749][T28836] ? futex_wait_queue+0x138/0x1b0 [ 1580.268793][T28836] ? futex_unqueue+0xcb/0xf0 [ 1580.273399][T28836] ? futex_wait+0x4a7/0x5c0 [ 1580.277948][T28836] ? futex_setup_timer+0xc0/0xc0 [ 1580.282928][T28836] ? futex_wait_setup+0x270/0x270 [ 1580.287989][T28836] ? file_end_write+0x159/0x250 [ 1580.292871][T28836] ? vfs_write+0x5de/0x9a0 [ 1580.297399][T28836] ? do_futex+0x2ff/0x3e0 [ 1580.301759][T28836] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1580.307687][T28836] ? lock_chain_count+0x20/0x20 [ 1580.312563][T28836] __x64_sys_madvise+0xa6/0xc0 [ 1580.317365][T28836] do_syscall_64+0x55/0xb0 [ 1580.321802][T28836] ? clear_bhb_loop+0x40/0x90 [ 1580.326505][T28836] ? clear_bhb_loop+0x40/0x90 [ 1580.331205][T28836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1580.337206][T28836] RIP: 0033:0x7f76e6d9e159 [ 1580.341641][T28836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.361355][T28836] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1580.369807][T28836] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1580.377794][T28836] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 1580.385798][T28836] RBP: 00007f76e6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1580.393802][T28836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.401892][T28836] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1580.409893][T28836] [ 1581.501774][T23324] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1581.715077][T23324] usb 10-1: Using ep0 maxpacket: 32 [ 1581.756824][T23324] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 1581.788442][T23324] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.854065][T23324] usb 10-1: config 0 has no interface number 0 [ 1581.898959][T23324] usb 10-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1581.984942][T23324] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1582.014602][T23324] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.060057][T23324] usb 10-1: Product: syz [ 1582.070853][T23324] usb 10-1: Manufacturer: syz [ 1582.100506][T23324] usb 10-1: SerialNumber: syz [ 1582.158368][T23324] usb 10-1: config 0 descriptor?? [ 1582.228221][T23324] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.119/input/input90 [ 1582.542795][T28856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.637821][T28856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.107601][ T9] usb 10-1: USB disconnect, device number 14 [ 1583.349905][T28888] FAULT_INJECTION: forcing a failure. [ 1583.349905][T28888] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.412711][T28888] CPU: 0 PID: 28888 Comm: syz.0.6805 Not tainted syzkaller #0 [ 1583.420249][T28888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1583.430328][T28888] Call Trace: [ 1583.433618][T28888] [ 1583.436562][T28888] dump_stack_lvl+0x18c/0x250 [ 1583.441276][T28888] ? show_regs_print_info+0x20/0x20 [ 1583.446497][T28888] ? load_image+0x420/0x420 [ 1583.451032][T28888] ? __might_sleep+0xe0/0xe0 [ 1583.455653][T28888] ? __lock_acquire+0x7d80/0x7d80 [ 1583.460694][T28888] ? mtree_load+0x109/0x840 [ 1583.465219][T28888] should_fail_ex+0x394/0x4c0 [ 1583.469933][T28888] should_failslab+0x9/0x20 [ 1583.474461][T28888] slab_pre_alloc_hook+0x59/0x300 [ 1583.479535][T28888] ? can_vma_merge_before+0x6e/0x280 [ 1583.484861][T28888] kmem_cache_alloc+0x5a/0x2c0 [ 1583.489655][T28888] ? vm_area_dup+0x27/0x270 [ 1583.494186][T28888] vm_area_dup+0x27/0x270 [ 1583.498541][T28888] __split_vma+0x1a8/0xc20 [ 1583.502986][T28888] ? mmap_write_unlock+0x160/0x160 [ 1583.508129][T28888] ? split_vma+0x8f/0x110 [ 1583.512478][T28888] madvise_update_vma+0x44e/0xda0 [ 1583.517539][T28888] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 1583.523299][T28888] ? down_write_killable+0x181/0x230 [ 1583.528639][T28888] do_madvise+0x145c/0x3790 [ 1583.533187][T28888] ? madvise_set_anon_name+0x440/0x440 [ 1583.538670][T28888] ? schedule+0xc7/0x170 [ 1583.542937][T28888] ? futex_wait_queue+0x27/0x1b0 [ 1583.547889][T28888] ? futex_wait_queue+0x138/0x1b0 [ 1583.552927][T28888] ? futex_unqueue+0xcb/0xf0 [ 1583.557529][T28888] ? futex_wait+0x4a7/0x5c0 [ 1583.562052][T28888] ? futex_setup_timer+0xc0/0xc0 [ 1583.567059][T28888] ? futex_wait_setup+0x270/0x270 [ 1583.572140][T28888] ? file_end_write+0x159/0x250 [ 1583.577028][T28888] ? vfs_write+0x5de/0x9a0 [ 1583.581472][T28888] ? do_futex+0x2ff/0x3e0 [ 1583.585828][T28888] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1583.591752][T28888] ? lock_chain_count+0x20/0x20 [ 1583.596631][T28888] __x64_sys_madvise+0xa6/0xc0 [ 1583.601442][T28888] do_syscall_64+0x55/0xb0 [ 1583.605969][T28888] ? clear_bhb_loop+0x40/0x90 [ 1583.610666][T28888] ? clear_bhb_loop+0x40/0x90 [ 1583.615363][T28888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.621277][T28888] RIP: 0033:0x7f2875b9e159 [ 1583.625709][T28888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.645439][T28888] RSP: 002b:00007f2876abc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1583.653888][T28888] RAX: ffffffffffffffda RBX: 00007f2875e25fa0 RCX: 00007f2875b9e159 [ 1583.661874][T28888] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 1583.669860][T28888] RBP: 00007f2875c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1583.677876][T28888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.685879][T28888] R13: 00007f2875e26038 R14: 00007f2875e25fa0 R15: 00007ffe6f9d9688 [ 1583.693888][T28888] [ 1585.450611][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1585.661970][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1585.700642][ T9] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 1585.742425][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.809595][ T9] usb 10-1: config 0 has no interface number 0 [ 1585.860728][ T9] usb 10-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1585.946187][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1585.971385][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.015743][ T9] usb 10-1: Product: syz [ 1586.055061][ T9] usb 10-1: Manufacturer: syz [ 1586.081993][ T9] usb 10-1: SerialNumber: syz [ 1586.141159][ T9] usb 10-1: config 0 descriptor?? [ 1586.183258][ T9] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.119/input/input91 [ 1586.532253][T28947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.622552][T28947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1587.171974][ T5761] usb 10-1: USB disconnect, device number 15 [ 1589.220301][T23324] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1589.440405][T23324] usb 7-1: Using ep0 maxpacket: 32 [ 1589.455347][T23324] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1589.485260][T23324] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.549546][T23324] usb 7-1: config 0 has no interface number 0 [ 1589.571423][T23324] usb 7-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1589.618432][T23324] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1589.664102][T23324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.714194][T23324] usb 7-1: Product: syz [ 1589.739110][T23324] usb 7-1: Manufacturer: syz [ 1589.767521][T23324] usb 7-1: SerialNumber: syz [ 1589.799403][T23324] usb 7-1: config 0 descriptor?? [ 1589.856479][T23324] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input92 [ 1590.213948][T29023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.272886][T29023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.851685][T23324] usb 7-1: USB disconnect, device number 43 [ 1592.844415][T29089] netlink: 'syz.3.6872': attribute type 4 has an invalid length. [ 1596.390844][ T5761] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1596.600199][ T5761] usb 7-1: Using ep0 maxpacket: 32 [ 1596.629940][ T5761] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1596.674373][ T5761] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.758597][ T5761] usb 7-1: config 0 has no interface number 0 [ 1596.820261][ T5761] usb 7-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1596.900214][ T5761] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1596.944586][ T5761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.993891][ T5761] usb 7-1: Product: syz [ 1597.021313][ T5761] usb 7-1: Manufacturer: syz [ 1597.046848][ T5761] usb 7-1: SerialNumber: syz [ 1597.081865][ T5761] usb 7-1: config 0 descriptor?? [ 1597.104193][T29170] kvm: pic: non byte write [ 1597.129343][ T5761] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input93 [ 1597.512840][T29160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.550975][T29179] netlink: 'syz.9.6902': attribute type 4 has an invalid length. [ 1597.570636][T29160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.649556][T29180] netlink: 'syz.9.6902': attribute type 4 has an invalid length. [ 1598.024877][ T9] usb 7-1: USB disconnect, device number 44 [ 1600.091338][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1600.340761][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1600.362648][ T9] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1600.406533][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.469747][ T9] usb 7-1: config 0 has no interface number 0 [ 1600.500347][ T9] usb 7-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1600.583659][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1600.627735][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.674249][ T9] usb 7-1: Product: syz [ 1600.696751][ T9] usb 7-1: Manufacturer: syz [ 1600.726182][ T9] usb 7-1: SerialNumber: syz [ 1600.758903][ T9] usb 7-1: config 0 descriptor?? [ 1600.833328][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input94 [ 1601.161804][T29229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.232357][T29229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.681594][ T9] usb 7-1: USB disconnect, device number 45 [ 1603.049100][T29295] netlink: 'syz.6.6941': attribute type 4 has an invalid length. [ 1603.131106][T29296] netlink: 'syz.6.6941': attribute type 4 has an invalid length. [ 1604.403533][T29326] netlink: 'syz.3.6951': attribute type 4 has an invalid length. [ 1604.510601][T29319] kvm: apic: phys broadcast and lowest prio [ 1604.574779][T29329] netlink: 'syz.3.6951': attribute type 4 has an invalid length. [ 1607.415120][T29384] gretap1: entered allmulticast mode [ 1607.474853][T29384] team0: Port device gretap1 added [ 1607.544376][T29389] bridge0: port 3(team0) entered blocking state [ 1607.643658][T29389] bridge0: port 3(team0) entered disabled state [ 1607.719910][T29389] team0: entered allmulticast mode [ 1607.745140][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.751680][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.775162][T29389] team_slave_0: entered allmulticast mode [ 1607.827948][T29389] team_slave_1: entered allmulticast mode [ 1607.895065][T29389] team0: entered promiscuous mode [ 1607.929776][T29389] team_slave_0: entered promiscuous mode [ 1607.971703][T29389] team_slave_1: entered promiscuous mode [ 1607.990433][T29389] gretap1: entered promiscuous mode [ 1608.014944][T29389] bridge0: port 3(team0) entered blocking state [ 1608.021470][T29389] bridge0: port 3(team0) entered forwarding state [ 1609.839608][T29432] kvm: apic: phys broadcast and lowest prio [ 1610.278424][T29437] netlink: 'syz.3.6985': attribute type 4 has an invalid length. [ 1610.398901][T29442] netlink: 'syz.3.6985': attribute type 4 has an invalid length. [ 1611.250738][T29462] device-mapper: thin metadata: sb_check failed: blocknr 4295233281: wanted 0 [ 1611.313556][T29462] device-mapper: block manager: superblock validator check failed for block 0 [ 1611.380733][T29462] device-mapper: thin metadata: couldn't read superblock [ 1611.540453][T29462] device-mapper: table: 248:2: thin-pool: Error creating metadata object (-ENOTBLK) [ 1611.583533][T29462] device-mapper: ioctl: error adding target to table [ 1612.013260][T29477] netlink: 'syz.9.6999': attribute type 4 has an invalid length. [ 1612.128364][T29478] netlink: 'syz.9.6999': attribute type 4 has an invalid length. [ 1613.902244][T29507] netlink: 'syz.3.7008': attribute type 4 has an invalid length. [ 1614.015173][T29508] netlink: 'syz.3.7008': attribute type 4 has an invalid length. [ 1615.219522][T29534] netlink: 'syz.6.7018': attribute type 4 has an invalid length. [ 1615.321359][T29536] netlink: 'syz.6.7018': attribute type 4 has an invalid length. [ 1616.658949][T29564] netlink: 'syz.3.7029': attribute type 4 has an invalid length. [ 1617.968817][T29593] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1618.028211][T29593] device-mapper: ioctl: error adding target to table [ 1618.068569][T29594] netlink: 'syz.3.7039': attribute type 4 has an invalid length. [ 1618.593138][T29604] FAULT_INJECTION: forcing a failure. [ 1618.593138][T29604] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.695074][T29604] CPU: 0 PID: 29604 Comm: syz.3.7042 Not tainted syzkaller #0 [ 1618.702892][T29604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1618.712990][T29604] Call Trace: [ 1618.716284][T29604] [ 1618.719228][T29604] dump_stack_lvl+0x18c/0x250 [ 1618.723933][T29604] ? show_regs_print_info+0x20/0x20 [ 1618.729152][T29604] ? load_image+0x420/0x420 [ 1618.733674][T29604] ? __might_sleep+0xe0/0xe0 [ 1618.738306][T29604] ? __lock_acquire+0x7d80/0x7d80 [ 1618.743528][T29604] should_fail_ex+0x394/0x4c0 [ 1618.748253][T29604] should_failslab+0x9/0x20 [ 1618.752783][T29604] slab_pre_alloc_hook+0x59/0x300 [ 1618.757839][T29604] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1618.763581][T29604] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1618.769332][T29604] __kmem_cache_alloc_node+0x53/0x250 [ 1618.774762][T29604] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1618.780542][T29604] __kmalloc+0xa7/0x240 [ 1618.784759][T29604] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1618.790349][T29604] ? tomoyo_domain+0xd6/0x120 [ 1618.795075][T29604] tomoyo_path_number_perm+0x248/0x5e0 [ 1618.800593][T29604] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1618.806252][T29604] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1618.811799][T29604] ? __fget_files+0x28/0x460 [ 1618.816448][T29604] security_file_ioctl+0x70/0xa0 [ 1618.821431][T29604] __se_sys_ioctl+0x48/0x170 [ 1618.826052][T29604] do_syscall_64+0x55/0xb0 [ 1618.830535][T29604] ? clear_bhb_loop+0x40/0x90 [ 1618.835521][T29604] ? clear_bhb_loop+0x40/0x90 [ 1618.840241][T29604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1618.846176][T29604] RIP: 0033:0x7f76e6d9e159 [ 1618.850717][T29604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.870346][T29604] RSP: 002b:00007f76e4ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1618.878788][T29604] RAX: ffffffffffffffda RBX: 00007f76e7026090 RCX: 00007f76e6d9e159 [ 1618.886776][T29604] RDX: 0000200000000200 RSI: 0000000000003b81 RDI: 0000000000000003 [ 1618.894780][T29604] RBP: 00007f76e6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1618.902783][T29604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1618.910786][T29604] R13: 00007f76e7026128 R14: 00007f76e7026090 R15: 00007ffdfe30eec8 [ 1618.918805][T29604] [ 1619.151738][T29607] device-mapper: table: 248:1: thi: unknown target type [ 1619.190338][T29607] device-mapper: ioctl: error adding target to table [ 1619.848820][T29604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1620.142994][T29632] netlink: 'syz.6.7050': attribute type 4 has an invalid length. [ 1620.637667][T29644] kvm: apic: phys broadcast and lowest prio [ 1621.570498][T29661] netlink: 'syz.6.7060': attribute type 4 has an invalid length. [ 1622.873728][T29697] netlink: 'syz.6.7070': attribute type 4 has an invalid length. [ 1623.122779][T29701] device-mapper: ioctl: populate_table: no targets specified [ 1623.806490][T29725] FAULT_INJECTION: forcing a failure. [ 1623.806490][T29725] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.885035][T29725] CPU: 0 PID: 29725 Comm: syz.9.7077 Not tainted syzkaller #0 [ 1623.892562][T29725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1623.902648][T29725] Call Trace: [ 1623.905961][T29725] [ 1623.908905][T29725] dump_stack_lvl+0x18c/0x250 [ 1623.913611][T29725] ? show_regs_print_info+0x20/0x20 [ 1623.918831][T29725] ? load_image+0x420/0x420 [ 1623.923351][T29725] ? __might_sleep+0xe0/0xe0 [ 1623.927984][T29725] ? __lock_acquire+0x7d80/0x7d80 [ 1623.933026][T29725] ? percpu_ref_put+0x12/0x100 [ 1623.937803][T29725] should_fail_ex+0x394/0x4c0 [ 1623.942504][T29725] should_failslab+0x9/0x20 [ 1623.947053][T29725] slab_pre_alloc_hook+0x59/0x300 [ 1623.952108][T29725] kmem_cache_alloc+0x5a/0x2c0 [ 1623.956981][T29725] ? vm_area_dup+0x61/0x270 [ 1623.961848][T29725] vm_area_dup+0x61/0x270 [ 1623.966207][T29725] __split_vma+0x1a8/0xc20 [ 1623.970656][T29725] ? mmap_write_unlock+0x160/0x160 [ 1623.975797][T29725] ? split_vma+0x8f/0x110 [ 1623.980148][T29725] madvise_update_vma+0x44e/0xda0 [ 1623.985220][T29725] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 1623.990961][T29725] ? down_write_killable+0x181/0x230 [ 1623.996368][T29725] do_madvise+0x145c/0x3790 [ 1624.000899][T29725] ? __lock_acquire+0x7d80/0x7d80 [ 1624.005984][T29725] ? madvise_set_anon_name+0x440/0x440 [ 1624.011483][T29725] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1624.017407][T29725] ? _raw_spin_unlock+0x40/0x40 [ 1624.022284][T29725] ? preempt_schedule_thunk+0x1a/0x30 [ 1624.027748][T29725] ? try_to_wake_up+0x6f5/0x10e0 [ 1624.032874][T29725] ? wake_up_q+0xca/0x100 [ 1624.037287][T29725] ? futex_wake+0x42a/0x4f0 [ 1624.041835][T29725] ? futex_wake_mark+0x150/0x150 [ 1624.046799][T29725] ? __lock_acquire+0x7d80/0x7d80 [ 1624.051845][T29725] ? file_end_write+0x159/0x250 [ 1624.056742][T29725] ? vfs_write+0x5de/0x9a0 [ 1624.061197][T29725] ? do_futex+0x35d/0x3e0 [ 1624.065563][T29725] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1624.071508][T29725] ? lock_chain_count+0x20/0x20 [ 1624.076399][T29725] __x64_sys_madvise+0xa6/0xc0 [ 1624.081191][T29725] do_syscall_64+0x55/0xb0 [ 1624.085627][T29725] ? clear_bhb_loop+0x40/0x90 [ 1624.090329][T29725] ? clear_bhb_loop+0x40/0x90 [ 1624.095064][T29725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1624.101000][T29725] RIP: 0033:0x7f0b60f9e159 [ 1624.105487][T29725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.125128][T29725] RSP: 002b:00007f0b61f2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1624.133562][T29725] RAX: ffffffffffffffda RBX: 00007f0b61225fa0 RCX: 00007f0b60f9e159 [ 1624.141553][T29725] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 1624.149561][T29725] RBP: 00007f0b6103506b R08: 0000000000000000 R09: 0000000000000000 [ 1624.157553][T29725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1624.165534][T29725] R13: 00007f0b61226038 R14: 00007f0b61225fa0 R15: 00007fffd403b878 [ 1624.173552][T29725] [ 1624.891418][T29735] kvm: apic: phys broadcast and lowest prio [ 1624.971937][T29741] netlink: 'syz.3.7082': attribute type 4 has an invalid length. [ 1625.835769][T29751] device-mapper: table: 248:1: : unknown target type [ 1625.853779][T29751] device-mapper: ioctl: error adding target to table [ 1627.233171][T29781] kvm: pic: non byte write [ 1628.332457][T29808] device-mapper: thin metadata: sb_check failed: blocknr 4295233281: wanted 0 [ 1628.381450][T29808] device-mapper: block manager: superblock validator check failed for block 0 [ 1628.440779][T29808] device-mapper: thin metadata: couldn't read superblock [ 1628.569770][T29808] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-ENOTBLK) [ 1628.620819][T29808] device-mapper: ioctl: error adding target to table [ 1629.704664][T29830] kvm: apic: phys broadcast and lowest prio [ 1630.075641][T29845] netlink: 'syz.6.7114': attribute type 4 has an invalid length. [ 1630.175101][T29848] netlink: 'syz.6.7114': attribute type 4 has an invalid length. [ 1631.121285][T29866] netlink: 'syz.6.7121': attribute type 4 has an invalid length. [ 1631.281436][T29867] netlink: 'syz.6.7121': attribute type 4 has an invalid length. [ 1632.137333][T29880] netlink: 'syz.3.7125': attribute type 4 has an invalid length. [ 1632.443377][T29885] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(2037591854.115.0), cmd(9) [ 1632.608037][T29889] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1632.670368][T29889] device-mapper: ioctl: error adding target to table [ 1634.022320][T29909] kvm: apic: phys broadcast and lowest prio [ 1634.044979][T29912] netlink: 'syz.9.7136': attribute type 4 has an invalid length. [ 1634.490946][T29919] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(2037591854.115.0), cmd(9) [ 1635.176105][T29937] netlink: 'syz.0.7145': attribute type 4 has an invalid length. [ 1635.751920][T29947] kvm: apic: phys broadcast and lowest prio [ 1636.170452][T29953] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(2037591854.115.0), cmd(9) [ 1636.717529][T29965] netlink: 'syz.0.7155': attribute type 4 has an invalid length. [ 1638.632583][T30007] kvm: apic: phys broadcast and lowest prio [ 1639.343231][T30024] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1639.353232][T30021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1639.391964][T30023] kvm: apic: phys broadcast and lowest prio [ 1639.402014][T30021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1639.418423][T30021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1639.427507][T30021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1639.435720][T30021] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1639.446676][T30021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1639.499943][T30024] device-mapper: ioctl: error adding target to table [ 1640.219791][T21812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.284175][T30041] 9pnet_fd: Insufficient options for proto=fd [ 1640.579634][T21812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.826873][T21812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.869668][T30050] kvm: apic: phys broadcast and lowest prio [ 1641.124092][T21812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.500303][T30021] Bluetooth: hci3: command tx timeout [ 1641.696628][T30019] chnl_net:caif_netlink_parms(): no params data found [ 1643.318881][T30019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.359158][T30019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.395051][T30019] bridge_slave_0: entered allmulticast mode [ 1643.429925][T30019] bridge_slave_0: entered promiscuous mode [ 1643.589289][T30021] Bluetooth: hci3: command tx timeout [ 1643.699091][T30019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.779746][T30019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.827121][T30019] bridge_slave_1: entered allmulticast mode [ 1643.875517][T30019] bridge_slave_1: entered promiscuous mode [ 1644.040806][T30116] kvm: apic: phys broadcast and lowest prio [ 1644.507357][T30019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.569213][T30019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.051413][T21812] gretap1 (unregistering): left promiscuous mode [ 1645.169518][T21812] team0: Port device gretap1 removed [ 1645.396047][T30019] team0: Port device team_slave_0 added [ 1645.474731][T30019] team0: Port device team_slave_1 added [ 1645.666909][T30021] Bluetooth: hci3: command tx timeout [ 1645.807406][T30019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.866389][T30019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.054288][T30019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.148034][T30019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.200304][T30019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.367341][T30019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.738041][T30019] hsr_slave_0: entered promiscuous mode [ 1646.810658][T30019] hsr_slave_1: entered promiscuous mode [ 1646.875798][T30019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1646.914026][T30019] Cannot create hsr debugfs directory [ 1647.740540][T30021] Bluetooth: hci3: command tx timeout [ 1648.237652][T21812] hsr_slave_0: left promiscuous mode [ 1648.271958][T21812] hsr_slave_1: left promiscuous mode [ 1648.317509][T21812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1648.360335][T21812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.444696][T21812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.486006][T21812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.539465][T21812] team0: left allmulticast mode [ 1648.567782][T21812] team_slave_0: left allmulticast mode [ 1648.608875][T21812] team_slave_1: left allmulticast mode [ 1648.647743][T21812] team0: left promiscuous mode [ 1648.691195][T21812] team_slave_0: left promiscuous mode [ 1648.714334][T21812] team_slave_1: left promiscuous mode [ 1648.743091][T21812] bridge0: port 3(team0) entered disabled state [ 1648.793717][T21812] bridge_slave_1: left allmulticast mode [ 1648.816969][T21812] bridge_slave_1: left promiscuous mode [ 1648.845872][T21812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.918678][T21812] bridge_slave_0: left allmulticast mode [ 1648.947081][T21812] bridge_slave_0: left promiscuous mode [ 1648.973109][T21812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.155126][T21812] veth1_macvtap: left promiscuous mode [ 1649.175354][T21812] veth0_macvtap: left promiscuous mode [ 1649.194711][T21812] veth1_vlan: left promiscuous mode [ 1649.226353][T21812] veth0_vlan: left promiscuous mode [ 1649.416512][T30232] kvm: pic: non byte write [ 1650.055679][T30244] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1650.109784][T30244] device-mapper: ioctl: error adding target to table [ 1650.721705][T30254] kvm: pic: non byte write [ 1650.967661][T30257] FAULT_INJECTION: forcing a failure. [ 1650.967661][T30257] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.007250][T30257] CPU: 0 PID: 30257 Comm: syz.3.7236 Not tainted syzkaller #0 [ 1651.014794][T30257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1651.024964][T30257] Call Trace: [ 1651.028439][T30257] [ 1651.032108][T30257] dump_stack_lvl+0x18c/0x250 [ 1651.037015][T30257] ? show_regs_print_info+0x20/0x20 [ 1651.042394][T30257] ? load_image+0x420/0x420 [ 1651.047132][T30257] ? __might_sleep+0xe0/0xe0 [ 1651.051776][T30257] ? __lock_acquire+0x7d80/0x7d80 [ 1651.056872][T30257] ? percpu_ref_put+0x12/0x100 [ 1651.061678][T30257] should_fail_ex+0x394/0x4c0 [ 1651.066415][T30257] should_failslab+0x9/0x20 [ 1651.070973][T30257] slab_pre_alloc_hook+0x59/0x300 [ 1651.076083][T30257] kmem_cache_alloc+0x5a/0x2c0 [ 1651.080991][T30257] ? vm_area_dup+0x61/0x270 [ 1651.085640][T30257] vm_area_dup+0x61/0x270 [ 1651.090007][T30257] __split_vma+0x1a8/0xc20 [ 1651.094551][T30257] ? mmap_write_unlock+0x160/0x160 [ 1651.100249][T30257] ? split_vma+0x8f/0x110 [ 1651.104636][T30257] madvise_update_vma+0x44e/0xda0 [ 1651.109838][T30257] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 1651.115604][T30257] ? down_write_killable+0x181/0x230 [ 1651.120945][T30257] do_madvise+0x145c/0x3790 [ 1651.125500][T30257] ? __lock_acquire+0x7d80/0x7d80 [ 1651.130649][T30257] ? madvise_set_anon_name+0x440/0x440 [ 1651.136136][T30257] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1651.142065][T30257] ? _raw_spin_unlock+0x40/0x40 [ 1651.146960][T30257] ? preempt_schedule_thunk+0x1a/0x30 [ 1651.152372][T30257] ? try_to_wake_up+0x6f5/0x10e0 [ 1651.157359][T30257] ? wake_up_q+0xca/0x100 [ 1651.161718][T30257] ? futex_wake+0x42a/0x4f0 [ 1651.166271][T30257] ? futex_wake_mark+0x150/0x150 [ 1651.171247][T30257] ? __lock_acquire+0x7d80/0x7d80 [ 1651.176393][T30257] ? file_end_write+0x159/0x250 [ 1651.181272][T30257] ? vfs_write+0x5de/0x9a0 [ 1651.185742][T30257] ? do_futex+0x35d/0x3e0 [ 1651.190243][T30257] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1651.196219][T30257] ? lock_chain_count+0x20/0x20 [ 1651.201193][T30257] __x64_sys_madvise+0xa6/0xc0 [ 1651.205992][T30257] do_syscall_64+0x55/0xb0 [ 1651.210470][T30257] ? clear_bhb_loop+0x40/0x90 [ 1651.215429][T30257] ? clear_bhb_loop+0x40/0x90 [ 1651.220345][T30257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1651.226500][T30257] RIP: 0033:0x7f76e6d9e159 [ 1651.231237][T30257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.251106][T30257] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1651.259633][T30257] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1651.267651][T30257] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 1651.275859][T30257] RBP: 00007f76e6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1651.283942][T30257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1651.292328][T30257] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1651.300355][T30257] [ 1652.054274][T30268] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1652.080744][T30268] device-mapper: ioctl: error adding target to table [ 1652.968156][T30281] kvm: pic: non byte write [ 1653.125976][T21812] team0 (unregistering): Port device team_slave_1 removed [ 1653.458793][T21812] team0 (unregistering): Port device team_slave_0 removed [ 1653.840504][T21812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1654.129195][T21812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.904505][T21587] Bluetooth: hci0: command 0x0406 tx timeout [ 1655.943527][T21812] bond0 (unregistering): Released all slaves [ 1658.766692][T30385] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1658.845460][T30019] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1658.903986][T30019] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1659.008649][T30019] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1659.132480][T30019] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1659.675849][T30019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1659.778983][T30019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.903143][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.910369][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1660.027238][T21812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.034640][T21812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1660.247323][T30019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1660.387519][T30019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1660.958714][T30431] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1661.576880][T30019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1661.937494][T30019] veth0_vlan: entered promiscuous mode [ 1662.015677][T30019] veth1_vlan: entered promiscuous mode [ 1662.189686][T30019] veth0_macvtap: entered promiscuous mode [ 1662.312532][T30019] veth1_macvtap: entered promiscuous mode [ 1662.504813][T30019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.589811][T30019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.641349][T30019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.675883][T30019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.706411][T30019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.737728][T30019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.765333][T30019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.808104][T30019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.872620][T30019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.973033][T30019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1663.040238][T30019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.136762][T30019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1663.181777][T30019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.248918][T30019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1663.288464][T30019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.335490][T30019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1663.395586][T30019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.449151][T30019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1663.599050][T30019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.658166][T30019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.707943][T30019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.760247][T30019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.190044][T22779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.249639][T22779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.427071][ T7871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.485487][ T7871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.051112][T30547] kvm: apic: phys broadcast and lowest prio [ 1666.593739][T30563] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1667.409753][T30586] kvm: apic: phys broadcast and lowest prio [ 1668.038373][T30604] netlink: 'syz.0.7321': attribute type 4 has an invalid length. [ 1669.211760][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.218121][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.685161][T30644] netlink: 'syz.6.7331': attribute type 4 has an invalid length. [ 1670.183086][T30652] netlink: 'syz.6.7333': attribute type 4 has an invalid length. [ 1671.810460][T30688] kvm: apic: phys broadcast and lowest prio [ 1671.946194][T30694] netlink: 'syz.6.7343': attribute type 4 has an invalid length. [ 1674.293728][T30742] kvm: apic: phys broadcast and lowest prio [ 1676.868404][T30802] FAULT_INJECTION: forcing a failure. [ 1676.868404][T30802] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.938874][T30802] CPU: 0 PID: 30802 Comm: syz.9.7373 Not tainted syzkaller #0 [ 1676.946401][T30802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1676.956489][T30802] Call Trace: [ 1676.959803][T30802] [ 1676.962835][T30802] dump_stack_lvl+0x18c/0x250 [ 1676.967569][T30802] ? show_regs_print_info+0x20/0x20 [ 1676.972810][T30802] ? load_image+0x420/0x420 [ 1676.977344][T30802] ? __might_sleep+0xe0/0xe0 [ 1676.982051][T30802] ? __lock_acquire+0x7d80/0x7d80 [ 1676.987099][T30802] ? mark_lock+0x94/0x320 [ 1676.991452][T30802] should_fail_ex+0x394/0x4c0 [ 1676.996187][T30802] should_failslab+0x9/0x20 [ 1677.000730][T30802] slab_pre_alloc_hook+0x59/0x300 [ 1677.005801][T30802] kmem_cache_alloc+0x5a/0x2c0 [ 1677.010589][T30802] ? mas_alloc_nodes+0x2f8/0x8c0 [ 1677.015546][T30802] mas_alloc_nodes+0x2f8/0x8c0 [ 1677.020349][T30802] mas_preallocate+0xa1f/0x1170 [ 1677.025241][T30802] ? lockdep_softirqs_off+0x440/0x440 [ 1677.030653][T30802] ? mas_destroy+0x20a0/0x20a0 [ 1677.035466][T30802] ? vma_iter_config+0xe6/0x270 [ 1677.040352][T30802] __split_vma+0x2dd/0xc20 [ 1677.044821][T30802] ? init_vma_prep+0x160/0x160 [ 1677.049612][T30802] ? mmap_write_unlock+0x160/0x160 [ 1677.054777][T30802] ? split_vma+0x8f/0x110 [ 1677.059148][T30802] mbind_range+0x4b0/0x710 [ 1677.063613][T30802] __se_sys_mbind+0x5ca/0x7c0 [ 1677.068348][T30802] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1677.074335][T30802] ? __x64_sys_mbind+0xf0/0xf0 [ 1677.079146][T30802] ? lock_chain_count+0x20/0x20 [ 1677.084041][T30802] ? __x64_sys_mbind+0x21/0xf0 [ 1677.088843][T30802] do_syscall_64+0x55/0xb0 [ 1677.093288][T30802] ? clear_bhb_loop+0x40/0x90 [ 1677.098001][T30802] ? clear_bhb_loop+0x40/0x90 [ 1677.102723][T30802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.108666][T30802] RIP: 0033:0x7f0b60f9e159 [ 1677.113117][T30802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.132758][T30802] RSP: 002b:00007f0b61f2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1677.141197][T30802] RAX: ffffffffffffffda RBX: 00007f0b61225fa0 RCX: 00007f0b60f9e159 [ 1677.149203][T30802] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 1677.157225][T30802] RBP: 00007f0b6103506b R08: 0000000000000006 R09: 0000000000000002 [ 1677.165216][T30802] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 1677.173202][T30802] R13: 00007f0b61226038 R14: 00007f0b61225fa0 R15: 00007fffd403b878 [ 1677.181293][T30802] [ 1677.698566][T30818] kvm: pic: non byte write [ 1678.240963][T30833] netlink: 'syz.6.7384': attribute type 1 has an invalid length. [ 1678.419789][T30833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1678.583424][T30837] bond1: (slave ip6erspan0): making interface the new active one [ 1678.757049][T30837] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1679.305508][T30857] FAULT_INJECTION: forcing a failure. [ 1679.305508][T30857] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.396470][T30857] CPU: 0 PID: 30857 Comm: syz.0.7393 Not tainted syzkaller #0 [ 1679.404005][T30857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1679.414100][T30857] Call Trace: [ 1679.417430][T30857] [ 1679.420393][T30857] dump_stack_lvl+0x18c/0x250 [ 1679.425103][T30857] ? show_regs_print_info+0x20/0x20 [ 1679.430355][T30857] ? load_image+0x420/0x420 [ 1679.434906][T30857] ? __might_sleep+0xe0/0xe0 [ 1679.439552][T30857] ? __lock_acquire+0x7d80/0x7d80 [ 1679.444610][T30857] ? percpu_ref_put+0x12/0x100 [ 1679.449398][T30857] should_fail_ex+0x394/0x4c0 [ 1679.454132][T30857] should_failslab+0x9/0x20 [ 1679.458690][T30857] slab_pre_alloc_hook+0x59/0x300 [ 1679.463772][T30857] kmem_cache_alloc+0x5a/0x2c0 [ 1679.468562][T30857] ? vm_area_dup+0x61/0x270 [ 1679.473100][T30857] vm_area_dup+0x61/0x270 [ 1679.477459][T30857] __split_vma+0x1a8/0xc20 [ 1679.481912][T30857] ? init_vma_prep+0x160/0x160 [ 1679.486705][T30857] ? mmap_write_unlock+0x160/0x160 [ 1679.491861][T30857] ? split_vma+0x8f/0x110 [ 1679.496219][T30857] mbind_range+0x4b0/0x710 [ 1679.500667][T30857] __se_sys_mbind+0x5ca/0x7c0 [ 1679.505366][T30857] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1679.511293][T30857] ? __x64_sys_mbind+0xf0/0xf0 [ 1679.516076][T30857] ? lock_chain_count+0x20/0x20 [ 1679.520953][T30857] ? __x64_sys_mbind+0x21/0xf0 [ 1679.525738][T30857] do_syscall_64+0x55/0xb0 [ 1679.530266][T30857] ? clear_bhb_loop+0x40/0x90 [ 1679.534969][T30857] ? clear_bhb_loop+0x40/0x90 [ 1679.539672][T30857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1679.545607][T30857] RIP: 0033:0x7f4de9f9e159 [ 1679.550055][T30857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.569785][T30857] RSP: 002b:00007f4deaf1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1679.578222][T30857] RAX: ffffffffffffffda RBX: 00007f4dea225fa0 RCX: 00007f4de9f9e159 [ 1679.586386][T30857] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 1679.594371][T30857] RBP: 00007f4dea03506b R08: 0000000000000006 R09: 0000000000000002 [ 1679.602538][T30857] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 1679.610723][T30857] R13: 00007f4dea226038 R14: 00007f4dea225fa0 R15: 00007ffd99de0e98 [ 1679.618843][T30857] [ 1679.632351][T30863] netlink: 'syz.9.7395': attribute type 4 has an invalid length. [ 1680.047161][T30866] kvm: apic: phys broadcast and lowest prio [ 1680.263007][T30874] FAULT_INJECTION: forcing a failure. [ 1680.263007][T30874] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.376428][T30874] CPU: 0 PID: 30874 Comm: syz.3.7398 Not tainted syzkaller #0 [ 1680.383999][T30874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1680.394091][T30874] Call Trace: [ 1680.397393][T30874] [ 1680.400336][T30874] dump_stack_lvl+0x18c/0x250 [ 1680.405047][T30874] ? show_regs_print_info+0x20/0x20 [ 1680.410277][T30874] ? load_image+0x420/0x420 [ 1680.414811][T30874] ? __might_sleep+0xe0/0xe0 [ 1680.419424][T30874] ? __lock_acquire+0x7d80/0x7d80 [ 1680.424465][T30874] ? percpu_ref_put+0x12/0x100 [ 1680.429243][T30874] should_fail_ex+0x394/0x4c0 [ 1680.433949][T30874] should_failslab+0x9/0x20 [ 1680.438486][T30874] slab_pre_alloc_hook+0x59/0x300 [ 1680.444637][T30874] kmem_cache_alloc+0x5a/0x2c0 [ 1680.449451][T30874] ? vm_area_dup+0x61/0x270 [ 1680.454469][T30874] vm_area_dup+0x61/0x270 [ 1680.458839][T30874] __split_vma+0x1a8/0xc20 [ 1680.463720][T30874] ? init_vma_prep+0x160/0x160 [ 1680.468674][T30874] ? mmap_write_unlock+0x160/0x160 [ 1680.473875][T30874] ? split_vma+0x8f/0x110 [ 1680.478494][T30874] mbind_range+0x4b0/0x710 [ 1680.482944][T30874] __se_sys_mbind+0x5ca/0x7c0 [ 1680.487638][T30874] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1680.493638][T30874] ? __x64_sys_mbind+0xf0/0xf0 [ 1680.498424][T30874] ? lock_chain_count+0x20/0x20 [ 1680.503311][T30874] ? __x64_sys_mbind+0x21/0xf0 [ 1680.508104][T30874] do_syscall_64+0x55/0xb0 [ 1680.512542][T30874] ? clear_bhb_loop+0x40/0x90 [ 1680.517237][T30874] ? clear_bhb_loop+0x40/0x90 [ 1680.521976][T30874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1680.527998][T30874] RIP: 0033:0x7f76e6d9e159 [ 1680.532436][T30874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.552062][T30874] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1680.560510][T30874] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1680.568533][T30874] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 1680.576537][T30874] RBP: 00007f76e6e3506b R08: 0000000000000006 R09: 0000000000000002 [ 1680.584549][T30874] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 1680.592544][T30874] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1680.600559][T30874] [ 1680.663207][T30877] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 1681.119708][T30889] netlink: 'syz.9.7404': attribute type 4 has an invalid length. [ 1681.700544][T30902] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 1681.953503][T30906] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1683.106819][T30931] FAULT_INJECTION: forcing a failure. [ 1683.106819][T30931] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.149059][T30931] CPU: 0 PID: 30931 Comm: syz.0.7421 Not tainted syzkaller #0 [ 1683.156754][T30931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1683.166922][T30931] Call Trace: [ 1683.170234][T30931] [ 1683.173180][T30931] dump_stack_lvl+0x18c/0x250 [ 1683.177887][T30931] ? show_regs_print_info+0x20/0x20 [ 1683.183106][T30931] ? load_image+0x420/0x420 [ 1683.187630][T30931] ? __might_sleep+0xe0/0xe0 [ 1683.192589][T30931] ? __lock_acquire+0x7d80/0x7d80 [ 1683.197638][T30931] should_fail_ex+0x394/0x4c0 [ 1683.202344][T30931] should_failslab+0x9/0x20 [ 1683.206869][T30931] slab_pre_alloc_hook+0x59/0x300 [ 1683.212369][T30931] ? slab_post_alloc_hook+0x86/0x4d0 [ 1683.217944][T30931] kmem_cache_alloc_bulk+0x52/0x5a0 [ 1683.223220][T30931] ? rcu_is_watching+0x15/0xb0 [ 1683.228061][T30931] ? kmem_cache_alloc+0x1a6/0x2c0 [ 1683.233125][T30931] ? mas_alloc_nodes+0x2f8/0x8c0 [ 1683.238098][T30931] mas_alloc_nodes+0x471/0x8c0 [ 1683.242909][T30931] mas_preallocate+0xa1f/0x1170 [ 1683.247843][T30931] ? lockdep_softirqs_off+0x440/0x440 [ 1683.253260][T30931] ? mas_destroy+0x20a0/0x20a0 [ 1683.258062][T30931] ? vma_iter_config+0xe6/0x270 [ 1683.262989][T30931] __split_vma+0x2dd/0xc20 [ 1683.267465][T30931] ? init_vma_prep+0x160/0x160 [ 1683.272264][T30931] ? mmap_write_unlock+0x160/0x160 [ 1683.277434][T30931] ? split_vma+0x8f/0x110 [ 1683.281822][T30931] mbind_range+0x4b0/0x710 [ 1683.286271][T30931] __se_sys_mbind+0x5ca/0x7c0 [ 1683.291022][T30931] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1683.296959][T30931] ? __x64_sys_mbind+0xf0/0xf0 [ 1683.301752][T30931] ? lock_chain_count+0x20/0x20 [ 1683.306647][T30931] ? __x64_sys_mbind+0x21/0xf0 [ 1683.311435][T30931] do_syscall_64+0x55/0xb0 [ 1683.315888][T30931] ? clear_bhb_loop+0x40/0x90 [ 1683.320593][T30931] ? clear_bhb_loop+0x40/0x90 [ 1683.325311][T30931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1683.331233][T30931] RIP: 0033:0x7f4de9f9e159 [ 1683.335667][T30931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.355317][T30931] RSP: 002b:00007f4deaf1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1683.363768][T30931] RAX: ffffffffffffffda RBX: 00007f4dea225fa0 RCX: 00007f4de9f9e159 [ 1683.371771][T30931] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 1683.379770][T30931] RBP: 00007f4dea03506b R08: 0000000000000006 R09: 0000000000000002 [ 1683.387799][T30931] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 1683.395792][T30931] R13: 00007f4dea226038 R14: 00007f4dea225fa0 R15: 00007ffd99de0e98 [ 1683.403815][T30931] [ 1684.044974][T30950] fuse: Unknown parameter 'user_i00000000000000000000' [ 1686.620356][T21587] Bluetooth: hci2: command 0x0406 tx timeout [ 1687.207163][T31034] device-mapper: ioctl: name not supplied when creating device [ 1687.999370][T31058] device-mapper: ioctl: name not supplied when creating device [ 1688.210519][T31064] kvm: apic: phys broadcast and lowest prio [ 1688.485704][T31069] device-mapper: ioctl: name not supplied when creating device [ 1689.208317][T31087] device-mapper: ioctl: name not supplied when creating device [ 1689.727767][T31102] device-mapper: ioctl: name not supplied when creating device [ 1689.825105][T31103] kvm: apic: phys broadcast and lowest prio [ 1690.514061][T31120] fuse: Bad value for 'fd' [ 1690.834602][T31128] device-mapper: ioctl: name not supplied when creating device [ 1691.664366][T31146] MTRR 0 not used [ 1691.681227][T31149] fuse: Bad value for 'fd' [ 1691.708210][T31146] loop3: detected capacity change from 0 to 256 [ 1691.850344][T28156] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1692.050502][T31157] device-mapper: ioctl: name not supplied when creating device [ 1694.610952][T31201] kvm: apic: phys broadcast and lowest prio [ 1695.620783][T31218] MTRR 0 not used [ 1695.656850][T31218] loop3: detected capacity change from 0 to 256 [ 1695.811324][T21587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1695.823687][T21587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1695.833860][T21587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1695.843941][T21587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1695.851997][T21587] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1695.861638][T21587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1695.921355][T29161] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1696.939312][T31223] chnl_net:caif_netlink_parms(): no params data found [ 1696.985792][T31241] kvm: apic: phys broadcast and lowest prio [ 1697.336844][T31223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.384996][T31223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.403105][T31252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1697.428621][T31223] bridge_slave_0: entered allmulticast mode [ 1697.476800][T31223] bridge_slave_0: entered promiscuous mode [ 1697.507890][T31223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.529596][T31223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.577071][T31223] bridge_slave_1: entered allmulticast mode [ 1697.629524][T31223] bridge_slave_1: entered promiscuous mode [ 1697.817997][T31223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.900564][T30021] Bluetooth: hci1: command tx timeout [ 1697.932432][T31223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1698.127534][T31223] team0: Port device team_slave_0 added [ 1698.234476][T31223] team0: Port device team_slave_1 added [ 1698.388489][T31223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1698.430138][T31223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.603756][T31223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.675006][T31223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.737757][T31223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.857789][T31223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.117744][T31223] hsr_slave_0: entered promiscuous mode [ 1699.156581][T31223] hsr_slave_1: entered promiscuous mode [ 1699.991911][T30021] Bluetooth: hci1: command tx timeout [ 1700.025424][T31223] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.409819][T31223] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.849459][T31223] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.203333][T31223] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.922145][T31223] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1702.053718][T31223] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1702.068008][T30021] Bluetooth: hci1: command tx timeout [ 1702.141432][T31223] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1702.198881][T31223] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1702.740693][T31223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.902316][T31223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.988607][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.995976][T12309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1703.127803][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.135030][T12309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.469665][T31223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1703.588871][T31347] device-mapper: table: 248:2: zero-length target [ 1703.642448][T31347] device-mapper: ioctl: error adding target to table [ 1704.140300][T30021] Bluetooth: hci1: command tx timeout [ 1704.549556][T31223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1705.169665][T31379] device-mapper: table: 248:2: zero-length target [ 1705.230621][T31379] device-mapper: ioctl: error adding target to table [ 1706.099698][T31223] veth0_vlan: entered promiscuous mode [ 1706.226227][T31223] veth1_vlan: entered promiscuous mode [ 1706.443665][T31223] veth0_macvtap: entered promiscuous mode [ 1706.493876][T31223] veth1_macvtap: entered promiscuous mode [ 1706.583345][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.643783][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.705134][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.753150][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.778692][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.807270][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.835599][T31409] device-mapper: table: 248:2: : unknown target type [ 1706.845239][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.862788][T31409] device-mapper: ioctl: error adding target to table [ 1706.877276][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.900643][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.925360][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.990810][T31223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1707.072738][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.144490][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.212657][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.280257][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.349595][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.394100][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.425104][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.468737][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.516892][T31223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.544629][T31223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.631064][T31223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1707.717689][T31223] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.791641][T31223] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.850463][T31223] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.859267][T31223] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.379479][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.432137][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.610151][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.618141][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.876108][T31437] device-mapper: table: 248:2: : unknown target type [ 1708.895243][T31444] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1708.923387][T31437] device-mapper: ioctl: error adding target to table [ 1712.313813][T31473] device-mapper: table: 248:2: : unknown target type [ 1712.353567][T31473] device-mapper: ioctl: error adding target to table [ 1714.356065][T31492] FAULT_INJECTION: forcing a failure. [ 1714.356065][T31492] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.439017][T31492] CPU: 0 PID: 31492 Comm: syz.3.7603 Not tainted syzkaller #0 [ 1714.446636][T31492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1714.456730][T31492] Call Trace: [ 1714.460064][T31492] [ 1714.463097][T31492] dump_stack_lvl+0x18c/0x250 [ 1714.467818][T31492] ? show_regs_print_info+0x20/0x20 [ 1714.473133][T31492] ? load_image+0x420/0x420 [ 1714.477663][T31492] ? __might_sleep+0xe0/0xe0 [ 1714.482302][T31492] ? __lock_acquire+0x7d80/0x7d80 [ 1714.487356][T31492] should_fail_ex+0x394/0x4c0 [ 1714.492072][T31492] should_failslab+0x9/0x20 [ 1714.496687][T31492] slab_pre_alloc_hook+0x59/0x300 [ 1714.501959][T31492] ? vfs_write+0x5de/0x9a0 [ 1714.506510][T31492] kmem_cache_alloc+0x5a/0x2c0 [ 1714.511304][T31492] ? getname_flags+0xbb/0x500 [ 1714.516001][T31492] getname_flags+0xbb/0x500 [ 1714.520611][T31492] do_sys_openat2+0xda/0x1d0 [ 1714.525237][T31492] ? do_sys_open+0xe0/0xe0 [ 1714.529941][T31492] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1714.536305][T31492] ? lock_chain_count+0x20/0x20 [ 1714.541188][T31492] __x64_sys_openat+0x139/0x160 [ 1714.546072][T31492] do_syscall_64+0x55/0xb0 [ 1714.550545][T31492] ? clear_bhb_loop+0x40/0x90 [ 1714.555260][T31492] ? clear_bhb_loop+0x40/0x90 [ 1714.560048][T31492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.566036][T31492] RIP: 0033:0x7f76e6d5e98e [ 1714.570537][T31492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1714.590290][T31492] RSP: 002b:00007f76e7b88b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1714.599082][T31492] RAX: ffffffffffffffda RBX: 00007f76e7b896c0 RCX: 00007f76e6d5e98e [ 1714.607502][T31492] RDX: 0000000000008002 RSI: 00007f76e7b88c00 RDI: ffffffffffffff9c [ 1714.615578][T31492] RBP: 00007f76e7b88c00 R08: 0000000000000000 R09: 0000000000000000 [ 1714.623652][T31492] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1714.631747][T31492] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1714.639798][T31492] [ 1715.434527][T31503] device-mapper: table: 248:2: thin-p: unknown target type [ 1715.442255][T31503] device-mapper: ioctl: error adding target to table [ 1716.094724][T31522] loop9: detected capacity change from 0 to 16 [ 1716.163766][T31522] erofs: (device loop9): mounted with root inode @ nid 36. [ 1717.977840][T31545] device-mapper: table: 248:2: thin-p: unknown target type [ 1718.081200][T31545] device-mapper: ioctl: error adding target to table [ 1720.196035][T31582] device-mapper: table: 248:2: thin-p: unknown target type [ 1720.229888][T31582] device-mapper: ioctl: error adding target to table [ 1722.476920][T31614] loop3: detected capacity change from 0 to 16 [ 1722.526077][T31614] erofs: (device loop3): mounted with root inode @ nid 36. [ 1723.261064][T31619] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 1723.269742][T31619] device-mapper: ioctl: error adding target to table [ 1724.451961][T31636] fuse: Bad value for 'fd' [ 1724.871422][T31644] FAULT_INJECTION: forcing a failure. [ 1724.871422][T31644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.963994][T31644] CPU: 0 PID: 31644 Comm: syz.6.7648 Not tainted syzkaller #0 [ 1724.971617][T31644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1724.981704][T31644] Call Trace: [ 1724.985000][T31644] [ 1724.987945][T31644] dump_stack_lvl+0x18c/0x250 [ 1724.992681][T31644] ? show_regs_print_info+0x20/0x20 [ 1724.997908][T31644] ? load_image+0x420/0x420 [ 1725.002436][T31644] ? __might_fault+0xaa/0x120 [ 1725.007367][T31644] ? __lock_acquire+0x7d80/0x7d80 [ 1725.012419][T31644] ? __virt_addr_valid+0x10c/0x380 [ 1725.017586][T31644] should_fail_ex+0x394/0x4c0 [ 1725.022416][T31644] _copy_from_user+0x2f/0xe0 [ 1725.027056][T31644] __se_sys_memfd_create+0x295/0x660 [ 1725.032398][T31644] do_syscall_64+0x55/0xb0 [ 1725.036855][T31644] ? clear_bhb_loop+0x40/0x90 [ 1725.041559][T31644] ? clear_bhb_loop+0x40/0x90 [ 1725.046269][T31644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1725.052302][T31644] RIP: 0033:0x7f5d32f9e159 [ 1725.056783][T31644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.076414][T31644] RSP: 002b:00007f5d33df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1725.084941][T31644] RAX: ffffffffffffffda RBX: 00007f5d33225fa0 RCX: 00007f5d32f9e159 [ 1725.092935][T31644] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000080 [ 1725.100939][T31644] RBP: 00007f5d3303506b R08: 0000000000000000 R09: 0000000000000000 [ 1725.109369][T31644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1725.117450][T31644] R13: 00007f5d33226038 R14: 00007f5d33225fa0 R15: 00007ffd72eeb3e8 [ 1725.125541][T31644] [ 1725.771445][T31654] FAULT_INJECTION: forcing a failure. [ 1725.771445][T31654] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.839341][T31654] CPU: 0 PID: 31654 Comm: syz.3.7651 Not tainted syzkaller #0 [ 1725.846889][T31654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1725.856973][T31654] Call Trace: [ 1725.860273][T31654] [ 1725.863240][T31654] dump_stack_lvl+0x18c/0x250 [ 1725.867950][T31654] ? show_regs_print_info+0x20/0x20 [ 1725.873181][T31654] ? load_image+0x420/0x420 [ 1725.877703][T31654] ? __might_sleep+0xe0/0xe0 [ 1725.882311][T31654] ? __lock_acquire+0x7d80/0x7d80 [ 1725.887389][T31654] ? mark_lock+0x94/0x320 [ 1725.891760][T31654] should_fail_ex+0x394/0x4c0 [ 1725.896575][T31654] should_failslab+0x9/0x20 [ 1725.901128][T31654] slab_pre_alloc_hook+0x59/0x300 [ 1725.906230][T31654] kmem_cache_alloc+0x5a/0x2c0 [ 1725.911055][T31654] ? mas_alloc_nodes+0x2f8/0x8c0 [ 1725.916023][T31654] mas_alloc_nodes+0x2f8/0x8c0 [ 1725.920814][T31654] mas_preallocate+0xa1f/0x1170 [ 1725.925697][T31654] ? lockdep_softirqs_off+0x440/0x440 [ 1725.931100][T31654] ? mas_destroy+0x20a0/0x20a0 [ 1725.935912][T31654] ? vma_iter_config+0xe6/0x270 [ 1725.940787][T31654] __split_vma+0x2dd/0xc20 [ 1725.945250][T31654] ? init_vma_prep+0x160/0x160 [ 1725.950041][T31654] ? mmap_write_unlock+0x160/0x160 [ 1725.955196][T31654] ? split_vma+0x8f/0x110 [ 1725.959556][T31654] mbind_range+0x4b0/0x710 [ 1725.964002][T31654] __se_sys_mbind+0x5ca/0x7c0 [ 1725.968700][T31654] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1725.974631][T31654] ? __x64_sys_mbind+0xf0/0xf0 [ 1725.979421][T31654] ? lock_chain_count+0x20/0x20 [ 1725.984300][T31654] ? __x64_sys_mbind+0x21/0xf0 [ 1725.989101][T31654] do_syscall_64+0x55/0xb0 [ 1725.993584][T31654] ? clear_bhb_loop+0x40/0x90 [ 1725.998305][T31654] ? clear_bhb_loop+0x40/0x90 [ 1726.003009][T31654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1726.008923][T31654] RIP: 0033:0x7f76e6d9e159 [ 1726.013356][T31654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.033084][T31654] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1726.041523][T31654] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1726.049513][T31654] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 1726.057519][T31654] RBP: 00007f76e6e3506b R08: 0000000000000006 R09: 0000000000000002 [ 1726.065785][T31654] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 1726.073789][T31654] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1726.081795][T31654] [ 1726.284608][T31661] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 1726.314369][T31661] device-mapper: ioctl: error adding target to table [ 1727.767545][T31689] FAULT_INJECTION: forcing a failure. [ 1727.767545][T31689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1727.823758][T31689] CPU: 0 PID: 31689 Comm: syz.6.7662 Not tainted syzkaller #0 [ 1727.831459][T31689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1727.841798][T31689] Call Trace: [ 1727.845180][T31689] [ 1727.848128][T31689] dump_stack_lvl+0x18c/0x250 [ 1727.852966][T31689] ? show_regs_print_info+0x20/0x20 [ 1727.858233][T31689] ? load_image+0x420/0x420 [ 1727.862794][T31689] ? __might_fault+0xaa/0x120 [ 1727.867704][T31689] ? __lock_acquire+0x7d80/0x7d80 [ 1727.872997][T31689] ? __virt_addr_valid+0x10c/0x380 [ 1727.878265][T31689] should_fail_ex+0x394/0x4c0 [ 1727.883005][T31689] _copy_from_user+0x2f/0xe0 [ 1727.887660][T31689] __se_sys_memfd_create+0x295/0x660 [ 1727.893104][T31689] do_syscall_64+0x55/0xb0 [ 1727.897664][T31689] ? clear_bhb_loop+0x40/0x90 [ 1727.902370][T31689] ? clear_bhb_loop+0x40/0x90 [ 1727.907199][T31689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1727.913235][T31689] RIP: 0033:0x7f5d32f9e159 [ 1727.917694][T31689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.938042][T31689] RSP: 002b:00007f5d33df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1727.946485][T31689] RAX: ffffffffffffffda RBX: 00007f5d33225fa0 RCX: 00007f5d32f9e159 [ 1727.954572][T31689] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000080 [ 1727.962595][T31689] RBP: 00007f5d3303506b R08: 0000000000000000 R09: 0000000000000000 [ 1727.970606][T31689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1727.978623][T31689] R13: 00007f5d33226038 R14: 00007f5d33225fa0 R15: 00007ffd72eeb3e8 [ 1727.986652][T31689] [ 1728.526182][T31696] device-mapper: table: 248:2: thin-poo: unknown target type [ 1728.653609][T31696] device-mapper: ioctl: error adding target to table [ 1729.408482][T31713] FAULT_INJECTION: forcing a failure. [ 1729.408482][T31713] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.550181][T31713] CPU: 0 PID: 31713 Comm: syz.9.7668 Not tainted syzkaller #0 [ 1729.557716][T31713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1729.567905][T31713] Call Trace: [ 1729.571252][T31713] [ 1729.574215][T31713] dump_stack_lvl+0x18c/0x250 [ 1729.578955][T31713] ? show_regs_print_info+0x20/0x20 [ 1729.584356][T31713] ? load_image+0x420/0x420 [ 1729.588887][T31713] ? __might_sleep+0xe0/0xe0 [ 1729.593510][T31713] ? __lock_acquire+0x7d80/0x7d80 [ 1729.599223][T31713] should_fail_ex+0x394/0x4c0 [ 1729.603989][T31713] should_failslab+0x9/0x20 [ 1729.608566][T31713] slab_pre_alloc_hook+0x59/0x300 [ 1729.613716][T31713] kmem_cache_alloc+0x5a/0x2c0 [ 1729.618536][T31713] ? __mpol_dup+0x7a/0x320 [ 1729.623080][T31713] __mpol_dup+0x7a/0x320 [ 1729.627445][T31713] ? vma_dup_policy+0xa0/0xa0 [ 1729.632233][T31713] vma_replace_policy+0x167/0x4a0 [ 1729.637333][T31713] __se_sys_mbind+0x5ca/0x7c0 [ 1729.642154][T31713] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1729.648079][T31713] ? __x64_sys_mbind+0xf0/0xf0 [ 1729.652869][T31713] ? lock_chain_count+0x20/0x20 [ 1729.657835][T31713] ? __x64_sys_mbind+0x21/0xf0 [ 1729.662629][T31713] do_syscall_64+0x55/0xb0 [ 1729.667224][T31713] ? clear_bhb_loop+0x40/0x90 [ 1729.672095][T31713] ? clear_bhb_loop+0x40/0x90 [ 1729.676818][T31713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1729.682749][T31713] RIP: 0033:0x7f0b60f9e159 [ 1729.687278][T31713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.706925][T31713] RSP: 002b:00007f0b61f2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1729.715404][T31713] RAX: ffffffffffffffda RBX: 00007f0b61225fa0 RCX: 00007f0b60f9e159 [ 1729.723593][T31713] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 1729.731616][T31713] RBP: 00007f0b6103506b R08: 0000000000000006 R09: 0000000000000002 [ 1729.739724][T31713] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 1729.747841][T31713] R13: 00007f0b61226038 R14: 00007f0b61225fa0 R15: 00007fffd403b878 [ 1729.755954][T31713] [ 1730.630357][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.636784][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.393613][T31733] device-mapper: table: 248:2: thin-poo: unknown target type [ 1731.401434][T31733] device-mapper: ioctl: error adding target to table [ 1732.164899][T31750] netlink: 'syz.6.7681': attribute type 1 has an invalid length. [ 1732.365832][T31750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1733.499477][T31768] device-mapper: table: 248:2: thin-poo: unknown target type [ 1733.540187][T31768] device-mapper: ioctl: error adding target to table [ 1733.828183][T31775] FAULT_INJECTION: forcing a failure. [ 1733.828183][T31775] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.917284][T31775] CPU: 0 PID: 31775 Comm: syz.3.7688 Not tainted syzkaller #0 [ 1733.924913][T31775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1733.935138][T31775] Call Trace: [ 1733.938451][T31775] [ 1733.941510][T31775] dump_stack_lvl+0x18c/0x250 [ 1733.946861][T31775] ? show_regs_print_info+0x20/0x20 [ 1733.952223][T31775] ? load_image+0x420/0x420 [ 1733.957573][T31775] ? __might_sleep+0xe0/0xe0 [ 1733.962309][T31775] ? __lock_acquire+0x7d80/0x7d80 [ 1733.967873][T31775] should_fail_ex+0x394/0x4c0 [ 1733.972694][T31775] should_failslab+0x9/0x20 [ 1733.977766][T31775] slab_pre_alloc_hook+0x59/0x300 [ 1733.983151][T31775] kmem_cache_alloc+0x5a/0x2c0 [ 1733.988403][T31775] ? __mpol_dup+0x7a/0x320 [ 1733.992953][T31775] __mpol_dup+0x7a/0x320 [ 1733.997425][T31775] ? vma_dup_policy+0xa0/0xa0 [ 1734.002182][T31775] vma_replace_policy+0x167/0x4a0 [ 1734.007449][T31775] __se_sys_mbind+0x5ca/0x7c0 [ 1734.012200][T31775] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1734.018172][T31775] ? __x64_sys_mbind+0xf0/0xf0 [ 1734.022990][T31775] ? lock_chain_count+0x20/0x20 [ 1734.027888][T31775] ? __x64_sys_mbind+0x21/0xf0 [ 1734.033481][T31775] do_syscall_64+0x55/0xb0 [ 1734.038050][T31775] ? clear_bhb_loop+0x40/0x90 [ 1734.042818][T31775] ? clear_bhb_loop+0x40/0x90 [ 1734.048053][T31775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1734.054138][T31775] RIP: 0033:0x7f76e6d9e159 [ 1734.058699][T31775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.079482][T31775] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1734.088836][T31775] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1734.097071][T31775] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 1734.105489][T31775] RBP: 00007f76e6e3506b R08: 0000000000000006 R09: 0000000000000002 [ 1734.113682][T31775] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 1734.122659][T31775] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1734.130700][T31775] [ 1734.894569][T31785] MTRR 0 not used [ 1734.944311][T31785] loop6: detected capacity change from 0 to 256 [ 1735.066048][T28156] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1735.386289][T31793] netlink: 'syz.0.7694': attribute type 1 has an invalid length. [ 1735.612625][T31793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1736.628438][T31815] FAULT_INJECTION: forcing a failure. [ 1736.628438][T31815] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.714529][T31815] CPU: 0 PID: 31815 Comm: syz.9.7702 Not tainted syzkaller #0 [ 1736.722060][T31815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1736.732157][T31815] Call Trace: [ 1736.735450][T31815] [ 1736.738398][T31815] dump_stack_lvl+0x18c/0x250 [ 1736.743103][T31815] ? show_regs_print_info+0x20/0x20 [ 1736.748348][T31815] ? load_image+0x420/0x420 [ 1736.752961][T31815] ? __might_sleep+0xe0/0xe0 [ 1736.757576][T31815] ? __lock_acquire+0x7d80/0x7d80 [ 1736.762621][T31815] should_fail_ex+0x394/0x4c0 [ 1736.767325][T31815] should_failslab+0x9/0x20 [ 1736.771848][T31815] slab_pre_alloc_hook+0x59/0x300 [ 1736.776892][T31815] ? vfs_write+0x5de/0x9a0 [ 1736.781330][T31815] kmem_cache_alloc+0x5a/0x2c0 [ 1736.786314][T31815] ? getname_flags+0xbb/0x500 [ 1736.791041][T31815] getname_flags+0xbb/0x500 [ 1736.795634][T31815] do_sys_openat2+0xda/0x1d0 [ 1736.800259][T31815] ? do_sys_open+0xe0/0xe0 [ 1736.804697][T31815] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1736.810708][T31815] ? lock_chain_count+0x20/0x20 [ 1736.815595][T31815] __x64_sys_openat+0x139/0x160 [ 1736.820499][T31815] do_syscall_64+0x55/0xb0 [ 1736.824980][T31815] ? clear_bhb_loop+0x40/0x90 [ 1736.829749][T31815] ? clear_bhb_loop+0x40/0x90 [ 1736.834517][T31815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1736.840456][T31815] RIP: 0033:0x7f0b60f5e98e [ 1736.844896][T31815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1736.864594][T31815] RSP: 002b:00007f0b61f2bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1736.873060][T31815] RAX: ffffffffffffffda RBX: 00007f0b61f2c6c0 RCX: 00007f0b60f5e98e [ 1736.881064][T31815] RDX: 0000000000008002 RSI: 00007f0b61f2bc00 RDI: ffffffffffffff9c [ 1736.889095][T31815] RBP: 00007f0b61f2bc00 R08: 0000000000000000 R09: 0000000000000000 [ 1736.897089][T31815] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1736.905119][T31815] R13: 00007f0b61226038 R14: 00007f0b61225fa0 R15: 00007fffd403b878 [ 1736.913204][T31815] [ 1737.507526][T31827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7707'. [ 1737.929298][T31832] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7710'. [ 1739.124643][T31856] FAULT_INJECTION: forcing a failure. [ 1739.124643][T31856] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.224168][T31856] CPU: 0 PID: 31856 Comm: syz.3.7718 Not tainted syzkaller #0 [ 1739.231727][T31856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1739.241807][T31856] Call Trace: [ 1739.245303][T31856] [ 1739.248286][T31856] dump_stack_lvl+0x18c/0x250 [ 1739.252993][T31856] ? show_regs_print_info+0x20/0x20 [ 1739.258246][T31856] ? load_image+0x420/0x420 [ 1739.262929][T31856] ? __might_sleep+0xe0/0xe0 [ 1739.267572][T31856] ? __lock_acquire+0x7d80/0x7d80 [ 1739.272687][T31856] should_fail_ex+0x394/0x4c0 [ 1739.277402][T31856] should_failslab+0x9/0x20 [ 1739.282113][T31856] slab_pre_alloc_hook+0x59/0x300 [ 1739.287170][T31856] ? vfs_write+0x5de/0x9a0 [ 1739.291615][T31856] kmem_cache_alloc+0x5a/0x2c0 [ 1739.296403][T31856] ? getname_flags+0xbb/0x500 [ 1739.301188][T31856] getname_flags+0xbb/0x500 [ 1739.305723][T31856] do_sys_openat2+0xda/0x1d0 [ 1739.310337][T31856] ? do_sys_open+0xe0/0xe0 [ 1739.314777][T31856] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1739.320822][T31856] ? lock_chain_count+0x20/0x20 [ 1739.325721][T31856] __x64_sys_openat+0x139/0x160 [ 1739.330601][T31856] do_syscall_64+0x55/0xb0 [ 1739.335060][T31856] ? clear_bhb_loop+0x40/0x90 [ 1739.339760][T31856] ? clear_bhb_loop+0x40/0x90 [ 1739.344467][T31856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.350383][T31856] RIP: 0033:0x7f76e6d5e98e [ 1739.354848][T31856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1739.374590][T31856] RSP: 002b:00007f76e7b88b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1739.383025][T31856] RAX: ffffffffffffffda RBX: 00007f76e7b896c0 RCX: 00007f76e6d5e98e [ 1739.391039][T31856] RDX: 0000000000008002 RSI: 00007f76e7b88c00 RDI: ffffffffffffff9c [ 1739.399097][T31856] RBP: 00007f76e7b88c00 R08: 0000000000000000 R09: 0000000000000000 [ 1739.407101][T31856] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1739.415122][T31856] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1739.423124][T31856] [ 1741.621424][T31898] device-mapper: ioctl: populate_table: no targets specified [ 1743.634797][T31933] device-mapper: ioctl: populate_table: no targets specified [ 1743.997558][T31935] device-mapper: ioctl: populate_table: no targets specified [ 1746.579304][ T28] audit: type=1326 audit(1700008268.989:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1746.827556][ T28] audit: type=1326 audit(1700008268.989:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1747.037347][ T28] audit: type=1326 audit(1700008269.029:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1747.268643][ T28] audit: type=1326 audit(1700008269.029:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1747.454623][ T28] audit: type=1326 audit(1700008269.029:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1747.622079][ T28] audit: type=1326 audit(1700008269.029:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1747.826221][ T28] audit: type=1326 audit(1700008269.029:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1748.011740][ T28] audit: type=1326 audit(1700008269.029:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1748.240282][ T28] audit: type=1326 audit(1700008269.029:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1748.435474][ T28] audit: type=1326 audit(1700008269.029:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.0.7757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1749.340421][T32028] FAULT_INJECTION: forcing a failure. [ 1749.340421][T32028] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.440365][T32028] CPU: 0 PID: 32028 Comm: syz.9.7771 Not tainted syzkaller #0 [ 1749.447893][T32028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1749.458063][T32028] Call Trace: [ 1749.461357][T32028] [ 1749.464303][T32028] dump_stack_lvl+0x18c/0x250 [ 1749.469065][T32028] ? show_regs_print_info+0x20/0x20 [ 1749.474321][T32028] ? load_image+0x420/0x420 [ 1749.478902][T32028] ? __might_sleep+0xe0/0xe0 [ 1749.483542][T32028] ? __lock_acquire+0x7d80/0x7d80 [ 1749.488594][T32028] should_fail_ex+0x394/0x4c0 [ 1749.493302][T32028] should_failslab+0x9/0x20 [ 1749.497832][T32028] slab_pre_alloc_hook+0x59/0x300 [ 1749.502909][T32028] ? vfs_write+0x5de/0x9a0 [ 1749.507351][T32028] kmem_cache_alloc+0x5a/0x2c0 [ 1749.512383][T32028] ? getname_flags+0xbb/0x500 [ 1749.517100][T32028] getname_flags+0xbb/0x500 [ 1749.521627][T32028] do_sys_openat2+0xda/0x1d0 [ 1749.526244][T32028] ? do_sys_open+0xe0/0xe0 [ 1749.530684][T32028] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1749.536736][T32028] ? lock_chain_count+0x20/0x20 [ 1749.541638][T32028] __x64_sys_openat+0x139/0x160 [ 1749.546530][T32028] do_syscall_64+0x55/0xb0 [ 1749.550969][T32028] ? clear_bhb_loop+0x40/0x90 [ 1749.555673][T32028] ? clear_bhb_loop+0x40/0x90 [ 1749.560391][T32028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1749.566419][T32028] RIP: 0033:0x7f0b60f5e98e [ 1749.570853][T32028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1749.590578][T32028] RSP: 002b:00007f0b61f2bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1749.599098][T32028] RAX: ffffffffffffffda RBX: 00007f0b61f2c6c0 RCX: 00007f0b60f5e98e [ 1749.607089][T32028] RDX: 0000000000008002 RSI: 00007f0b61f2bc00 RDI: ffffffffffffff9c [ 1749.615251][T32028] RBP: 00007f0b61f2bc00 R08: 0000000000000000 R09: 0000000000000000 [ 1749.623263][T32028] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1749.631277][T32028] R13: 00007f0b61226038 R14: 00007f0b61225fa0 R15: 00007fffd403b878 [ 1749.639312][T32028] [ 1754.204971][T32117] FAULT_INJECTION: forcing a failure. [ 1754.204971][T32117] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.274221][T32117] CPU: 0 PID: 32117 Comm: syz.6.7789 Not tainted syzkaller #0 [ 1754.281770][T32117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1754.291866][T32117] Call Trace: [ 1754.295180][T32117] [ 1754.298127][T32117] dump_stack_lvl+0x18c/0x250 [ 1754.302855][T32117] ? show_regs_print_info+0x20/0x20 [ 1754.308080][T32117] ? load_image+0x420/0x420 [ 1754.312714][T32117] ? __lock_acquire+0x7d80/0x7d80 [ 1754.317767][T32117] should_fail_ex+0x394/0x4c0 [ 1754.322569][T32117] should_failslab+0x9/0x20 [ 1754.327112][T32117] slab_pre_alloc_hook+0x59/0x300 [ 1754.332259][T32117] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1754.337394][T32117] ? sock_alloc_inode+0x28/0xc0 [ 1754.342274][T32117] sock_alloc_inode+0x28/0xc0 [ 1754.347000][T32117] ? sockfs_init_fs_context+0xb0/0xb0 [ 1754.352403][T32117] new_inode_pseudo+0x63/0x1d0 [ 1754.357191][T32117] __sock_create+0x12d/0x940 [ 1754.361808][T32117] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1754.367924][T32117] __sys_socket+0xd7/0x1b0 [ 1754.372365][T32117] __x64_sys_socket+0x7a/0x90 [ 1754.377082][T32117] do_syscall_64+0x55/0xb0 [ 1754.381558][T32117] ? clear_bhb_loop+0x40/0x90 [ 1754.386280][T32117] ? clear_bhb_loop+0x40/0x90 [ 1754.391118][T32117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1754.397075][T32117] RIP: 0033:0x7f5d32f9e159 [ 1754.401522][T32117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.421342][T32117] RSP: 002b:00007f5d33df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1754.429883][T32117] RAX: ffffffffffffffda RBX: 00007f5d33225fa0 RCX: 00007f5d32f9e159 [ 1754.438156][T32117] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 1754.446381][T32117] RBP: 00007f5d3303506b R08: 0000000000000000 R09: 0000000000000000 [ 1754.454456][T32117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1754.462482][T32117] R13: 00007f5d33226038 R14: 00007f5d33225fa0 R15: 00007ffd72eeb3e8 [ 1754.470558][T32117] [ 1754.948813][T32117] socket: no more sockets [ 1755.510170][T32138] fuse: Bad value for 'rootmode' [ 1755.809263][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1755.809297][ T28] audit: type=1326 audit(1700008278.219:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1756.035348][ T28] audit: type=1326 audit(1700008278.259:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1756.228037][ T28] audit: type=1326 audit(1700008278.259:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1756.403826][ T28] audit: type=1326 audit(1700008278.259:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1756.594032][ T28] audit: type=1326 audit(1700008278.269:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1756.797786][ T28] audit: type=1326 audit(1700008278.269:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1756.965559][T32163] FAULT_INJECTION: forcing a failure. [ 1756.965559][T32163] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.005987][ T28] audit: type=1326 audit(1700008278.269:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1757.075757][T32163] CPU: 0 PID: 32163 Comm: syz.3.7803 Not tainted syzkaller #0 [ 1757.083338][T32163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1757.093413][T32163] Call Trace: [ 1757.096708][T32163] [ 1757.099673][T32163] dump_stack_lvl+0x18c/0x250 [ 1757.104424][T32163] ? show_regs_print_info+0x20/0x20 [ 1757.109680][T32163] ? load_image+0x420/0x420 [ 1757.114286][T32163] ? __lock_acquire+0x7d80/0x7d80 [ 1757.119571][T32163] should_fail_ex+0x394/0x4c0 [ 1757.124301][T32163] should_failslab+0x9/0x20 [ 1757.128849][T32163] slab_pre_alloc_hook+0x59/0x300 [ 1757.133939][T32163] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1757.139071][T32163] ? sock_alloc_inode+0x28/0xc0 [ 1757.143950][T32163] sock_alloc_inode+0x28/0xc0 [ 1757.148647][T32163] ? sockfs_init_fs_context+0xb0/0xb0 [ 1757.154071][T32163] new_inode_pseudo+0x63/0x1d0 [ 1757.158961][T32163] __sock_create+0x12d/0x940 [ 1757.163574][T32163] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1757.169598][T32163] __sys_socket+0xd7/0x1b0 [ 1757.174038][T32163] __x64_sys_socket+0x7a/0x90 [ 1757.178730][T32163] do_syscall_64+0x55/0xb0 [ 1757.183165][T32163] ? clear_bhb_loop+0x40/0x90 [ 1757.187884][T32163] ? clear_bhb_loop+0x40/0x90 [ 1757.192586][T32163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.198513][T32163] RIP: 0033:0x7f76e6d9e159 [ 1757.202956][T32163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.222590][T32163] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1757.231024][T32163] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1757.239023][T32163] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 1757.247005][T32163] RBP: 00007f76e6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1757.255015][T32163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.263021][T32163] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1757.271071][T32163] [ 1757.330211][ T28] audit: type=1326 audit(1700008278.269:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1757.356294][T32167] netlink: 'syz.6.7805': attribute type 1 has an invalid length. [ 1757.429918][ T28] audit: type=1326 audit(1700008278.269:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1757.550486][ T28] audit: type=1326 audit(1700008278.279:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32141 comm="syz.0.7797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1758.158094][T32179] fuse: Bad value for 'rootmode' [ 1758.265308][T32163] socket: no more sockets [ 1759.860478][T32213] fuse: Unknown parameter 'use00000000000000000000' [ 1760.150215][T32219] FAULT_INJECTION: forcing a failure. [ 1760.150215][T32219] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.234051][T32219] CPU: 0 PID: 32219 Comm: syz.3.7819 Not tainted syzkaller #0 [ 1760.241585][T32219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1760.251663][T32219] Call Trace: [ 1760.254972][T32219] [ 1760.257927][T32219] dump_stack_lvl+0x18c/0x250 [ 1760.262640][T32219] ? show_regs_print_info+0x20/0x20 [ 1760.267862][T32219] ? load_image+0x420/0x420 [ 1760.272401][T32219] ? __lock_acquire+0x7d80/0x7d80 [ 1760.277451][T32219] should_fail_ex+0x394/0x4c0 [ 1760.282158][T32219] should_failslab+0x9/0x20 [ 1760.286687][T32219] slab_pre_alloc_hook+0x59/0x300 [ 1760.291745][T32219] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1760.296880][T32219] ? sock_alloc_inode+0x28/0xc0 [ 1760.301759][T32219] sock_alloc_inode+0x28/0xc0 [ 1760.306455][T32219] ? sockfs_init_fs_context+0xb0/0xb0 [ 1760.311853][T32219] new_inode_pseudo+0x63/0x1d0 [ 1760.316639][T32219] __sock_create+0x12d/0x940 [ 1760.321268][T32219] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1760.327281][T32219] __sys_socket+0xd7/0x1b0 [ 1760.331728][T32219] __x64_sys_socket+0x7a/0x90 [ 1760.336430][T32219] do_syscall_64+0x55/0xb0 [ 1760.340871][T32219] ? clear_bhb_loop+0x40/0x90 [ 1760.345587][T32219] ? clear_bhb_loop+0x40/0x90 [ 1760.350327][T32219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1760.356255][T32219] RIP: 0033:0x7f76e6d9e159 [ 1760.360692][T32219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.380416][T32219] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1760.388850][T32219] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1760.396852][T32219] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 1760.405010][T32219] RBP: 00007f76e6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1760.414077][T32219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1760.422133][T32219] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1760.430168][T32219] [ 1760.928426][T32219] socket: no more sockets [ 1761.811587][T32251] fuse: Unknown parameter 'use00000000000000000000' [ 1762.940487][T32268] FAULT_INJECTION: forcing a failure. [ 1762.940487][T32268] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.030292][T32268] CPU: 0 PID: 32268 Comm: syz.6.7834 Not tainted syzkaller #0 [ 1763.037832][T32268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1763.047926][T32268] Call Trace: [ 1763.051238][T32268] [ 1763.054182][T32268] dump_stack_lvl+0x18c/0x250 [ 1763.058987][T32268] ? show_regs_print_info+0x20/0x20 [ 1763.064405][T32268] ? load_image+0x420/0x420 [ 1763.068953][T32268] ? __lock_acquire+0x7d80/0x7d80 [ 1763.074090][T32268] should_fail_ex+0x394/0x4c0 [ 1763.078883][T32268] should_failslab+0x9/0x20 [ 1763.083411][T32268] slab_pre_alloc_hook+0x59/0x300 [ 1763.088467][T32268] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1763.093653][T32268] ? sock_alloc_inode+0x28/0xc0 [ 1763.098535][T32268] sock_alloc_inode+0x28/0xc0 [ 1763.103234][T32268] ? sockfs_init_fs_context+0xb0/0xb0 [ 1763.108640][T32268] new_inode_pseudo+0x63/0x1d0 [ 1763.113570][T32268] __sock_create+0x12d/0x940 [ 1763.118192][T32268] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1763.124382][T32268] __sys_socket+0xd7/0x1b0 [ 1763.128837][T32268] __x64_sys_socket+0x7a/0x90 [ 1763.133946][T32268] do_syscall_64+0x55/0xb0 [ 1763.138496][T32268] ? clear_bhb_loop+0x40/0x90 [ 1763.143228][T32268] ? clear_bhb_loop+0x40/0x90 [ 1763.147944][T32268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.153893][T32268] RIP: 0033:0x7f5d32f9e159 [ 1763.158350][T32268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1763.178187][T32268] RSP: 002b:00007f5d33df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1763.186629][T32268] RAX: ffffffffffffffda RBX: 00007f5d33225fa0 RCX: 00007f5d32f9e159 [ 1763.194622][T32268] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 1763.202716][T32268] RBP: 00007f5d3303506b R08: 0000000000000000 R09: 0000000000000000 [ 1763.210720][T32268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1763.218713][T32268] R13: 00007f5d33226038 R14: 00007f5d33225fa0 R15: 00007ffd72eeb3e8 [ 1763.226743][T32268] [ 1763.492283][T21587] Bluetooth: hci3: command 0x0406 tx timeout [ 1763.858660][T32268] socket: no more sockets [ 1763.885320][T32283] fuse: Unknown parameter 'use00000000000000000000' [ 1764.266935][T32291] netlink: 'syz.0.7842': attribute type 1 has an invalid length. [ 1765.495715][T32318] FAULT_INJECTION: forcing a failure. [ 1765.495715][T32318] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.608894][T32318] CPU: 0 PID: 32318 Comm: syz.3.7850 Not tainted syzkaller #0 [ 1765.616428][T32318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1765.626593][T32318] Call Trace: [ 1765.629890][T32318] [ 1765.632842][T32318] dump_stack_lvl+0x18c/0x250 [ 1765.637551][T32318] ? show_regs_print_info+0x20/0x20 [ 1765.642799][T32318] ? load_image+0x420/0x420 [ 1765.647779][T32318] ? __lock_acquire+0x7d80/0x7d80 [ 1765.652831][T32318] should_fail_ex+0x394/0x4c0 [ 1765.657564][T32318] should_failslab+0x9/0x20 [ 1765.662113][T32318] slab_pre_alloc_hook+0x59/0x300 [ 1765.667170][T32318] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1765.672314][T32318] ? sock_alloc_inode+0x28/0xc0 [ 1765.677225][T32318] sock_alloc_inode+0x28/0xc0 [ 1765.681949][T32318] ? sockfs_init_fs_context+0xb0/0xb0 [ 1765.687347][T32318] new_inode_pseudo+0x63/0x1d0 [ 1765.692252][T32318] __sock_create+0x12d/0x940 [ 1765.696973][T32318] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1765.702994][T32318] __sys_socket+0xd7/0x1b0 [ 1765.707441][T32318] __x64_sys_socket+0x7a/0x90 [ 1765.712243][T32318] do_syscall_64+0x55/0xb0 [ 1765.716775][T32318] ? clear_bhb_loop+0x40/0x90 [ 1765.721869][T32318] ? clear_bhb_loop+0x40/0x90 [ 1765.726595][T32318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.732522][T32318] RIP: 0033:0x7f76e6d9e159 [ 1765.736956][T32318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.756782][T32318] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1765.765221][T32318] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1765.773259][T32318] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 1765.781254][T32318] RBP: 00007f76e6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1765.789267][T32318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1765.797253][T32318] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1765.805431][T32318] [ 1765.836801][T32322] fuse: Unknown parameter 'user_i00000000000000000000' [ 1765.914872][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 1765.914887][ T28] audit: type=1326 audit(1700008288.289:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1766.047163][ T28] audit: type=1326 audit(1700008288.289:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1766.110751][ T28] audit: type=1326 audit(1700008288.299:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1766.207796][ T28] audit: type=1326 audit(1700008288.299:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1766.279605][ T28] audit: type=1326 audit(1700008288.299:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1766.369358][ T28] audit: type=1326 audit(1700008288.299:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1766.526768][ T28] audit: type=1326 audit(1700008288.299:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1766.631058][T32318] socket: no more sockets [ 1766.692264][ T28] audit: type=1326 audit(1700008288.299:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1766.869126][ T28] audit: type=1326 audit(1700008288.299:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1767.024325][ T28] audit: type=1326 audit(1700008288.299:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32324 comm="syz.6.7852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1768.538977][T32359] fuse: Unknown parameter 'user_i00000000000000000000' [ 1770.522177][T32398] fuse: Unknown parameter 'user_i00000000000000000000' [ 1771.355321][T32408] netlink: 'syz.0.7877': attribute type 1 has an invalid length. [ 1771.604236][T32412] netlink: 'syz.3.7879': attribute type 1 has an invalid length. [ 1774.344659][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 1774.344672][ T28] audit: type=1326 audit(1700008296.759:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1774.586404][ T28] audit: type=1326 audit(1700008296.759:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1774.734425][ T28] audit: type=1326 audit(1700008296.799:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1774.886569][ T28] audit: type=1326 audit(1700008296.799:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1775.061956][ T28] audit: type=1326 audit(1700008296.799:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1775.240162][ T28] audit: type=1326 audit(1700008296.799:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1775.421106][ T28] audit: type=1326 audit(1700008296.799:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1775.589702][ T28] audit: type=1326 audit(1700008296.799:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1775.727708][ T28] audit: type=1326 audit(1700008296.799:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1775.895234][ T28] audit: type=1326 audit(1700008296.799:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32473 comm="syz.9.7899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1782.347496][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 1782.347509][ T28] audit: type=1326 audit(1700008304.759:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1782.616329][ T28] audit: type=1326 audit(1700008304.759:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1782.851541][ T28] audit: type=1326 audit(1700008304.759:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1783.009406][T32626] fuse: Unknown parameter 'group_i00000000000000000000' [ 1783.020334][ T28] audit: type=1326 audit(1700008304.759:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1783.168789][ T28] audit: type=1326 audit(1700008304.759:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1783.297196][ T28] audit: type=1326 audit(1700008304.809:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1783.429135][ T28] audit: type=1326 audit(1700008304.809:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1783.588078][ T28] audit: type=1326 audit(1700008304.809:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1783.715120][ T28] audit: type=1326 audit(1700008304.809:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1783.900199][ T28] audit: type=1326 audit(1700008304.809:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32610 comm="syz.3.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1784.841591][T32661] fuse: Unknown parameter 'group_id00000000000000000000' [ 1785.164440][T32668] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7955'. [ 1787.326703][T32705] kAFS: No cell specified [ 1787.519060][T32711] fuse: Unknown parameter '0x0000000000000005' [ 1787.809249][T32713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1788.916582][ T28] kauditd_printk_skb: 289 callbacks suppressed [ 1788.916595][ T28] audit: type=1326 audit(1700008311.329:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1789.100471][ T28] audit: type=1326 audit(1700008311.329:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1789.258615][ T28] audit: type=1326 audit(1700008311.329:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1789.437841][ T28] audit: type=1326 audit(1700008311.329:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1789.610122][ T28] audit: type=1326 audit(1700008311.329:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1789.779715][ T28] audit: type=1326 audit(1700008311.379:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1789.951883][T32751] fuse: Unknown parameter '0x0000000000000005' [ 1789.975136][ T28] audit: type=1326 audit(1700008311.379:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1790.133761][ T28] audit: type=1326 audit(1700008311.379:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1790.277097][ T28] audit: type=1326 audit(1700008311.379:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1790.452854][ T28] audit: type=1326 audit(1700008311.379:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32738 comm="syz.9.7975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1791.183267][T32765] FAULT_INJECTION: forcing a failure. [ 1791.183267][T32765] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1791.295633][T32765] CPU: 0 PID: 32765 Comm: syz.0.7981 Not tainted syzkaller #0 [ 1791.303163][T32765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1791.313256][T32765] Call Trace: [ 1791.316552][T32765] [ 1791.319504][T32765] dump_stack_lvl+0x18c/0x250 [ 1791.324210][T32765] ? stack_trace_snprint+0xf0/0xf0 [ 1791.329392][T32765] ? show_regs_print_info+0x20/0x20 [ 1791.334623][T32765] ? load_image+0x420/0x420 [ 1791.339147][T32765] ? kasan_set_track+0x5f/0x70 [ 1791.343933][T32765] ? kasan_save_free_info+0x28/0x40 [ 1791.349155][T32765] ? ____kasan_slab_free+0x126/0x1f0 [ 1791.354478][T32765] ? slab_free_freelist_hook+0x130/0x1a0 [ 1791.360124][T32765] ? kmem_cache_free+0xf8/0x290 [ 1791.364998][T32765] ? __se_sys_mbind+0x706/0x7c0 [ 1791.369882][T32765] ? do_syscall_64+0x55/0xb0 [ 1791.374491][T32765] should_fail_ex+0x394/0x4c0 [ 1791.379216][T32765] get_futex_key+0x136/0x1030 [ 1791.383934][T32765] ? futex_setup_timer+0xc0/0xc0 [ 1791.388895][T32765] futex_wake+0x127/0x4f0 [ 1791.393263][T32765] ? futex_wake_mark+0x150/0x150 [ 1791.398215][T32765] ? lockdep_hardirqs_on+0x98/0x150 [ 1791.403432][T32765] ? slab_free_freelist_hook+0x130/0x1a0 [ 1791.409170][T32765] do_futex+0x35d/0x3e0 [ 1791.413346][T32765] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1791.419347][T32765] __se_sys_futex+0x3a9/0x440 [ 1791.424059][T32765] ? __x64_sys_futex+0xf0/0xf0 [ 1791.428862][T32765] ? __x64_sys_futex+0x21/0xf0 [ 1791.433643][T32765] do_syscall_64+0x55/0xb0 [ 1791.438101][T32765] ? clear_bhb_loop+0x40/0x90 [ 1791.442803][T32765] ? clear_bhb_loop+0x40/0x90 [ 1791.447522][T32765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1791.453453][T32765] RIP: 0033:0x7f4de9f9e159 [ 1791.457987][T32765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.477703][T32765] RSP: 002b:00007f4deaf1f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1791.486150][T32765] RAX: ffffffffffffffda RBX: 00007f4dea225fa8 RCX: 00007f4de9f9e159 [ 1791.494157][T32765] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4dea225fac [ 1791.502146][T32765] RBP: 00007f4dea225fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1791.510243][T32765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1791.518344][T32765] R13: 00007f4dea226038 R14: 00007ffd99de0db0 R15: 00007ffd99de0e98 [ 1791.526358][T32765] [ 1792.001157][ T314] fuse: Unknown parameter 'fd0x0000000000000005' [ 1792.072803][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.079151][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.735424][ T326] syz.3.7989: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1792.870284][ T326] CPU: 0 PID: 326 Comm: syz.3.7989 Not tainted syzkaller #0 [ 1792.877638][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1792.887804][ T326] Call Trace: [ 1792.891102][ T326] [ 1792.894146][ T326] dump_stack_lvl+0x18c/0x250 [ 1792.898887][ T326] ? show_regs_print_info+0x20/0x20 [ 1792.904307][ T326] ? load_image+0x420/0x420 [ 1792.908843][ T326] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1792.915307][ T326] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1792.921874][ T326] warn_alloc+0x246/0x340 [ 1792.926238][ T326] ? stack_trace_save+0xaa/0x100 [ 1792.931203][ T326] ? zone_watermark_ok_safe+0x230/0x230 [ 1792.936796][ T326] ? kasan_set_track+0x5f/0x70 [ 1792.941678][ T326] ? kasan_set_track+0x4e/0x70 [ 1792.946482][ T326] ? __kasan_kmalloc+0x8f/0xa0 [ 1792.951311][ T326] ? xsk_init_queue+0xad/0x100 [ 1792.956170][ T326] ? xsk_setsockopt+0x413/0x750 [ 1792.961066][ T326] ? do_sock_setsockopt+0x175/0x1a0 [ 1792.966321][ T326] ? __x64_sys_setsockopt+0x182/0x200 [ 1792.971750][ T326] __vmalloc_node_range+0x129/0x1320 [ 1792.977123][ T326] ? free_vm_area+0x50/0x50 [ 1792.981699][ T326] vmalloc_user+0x74/0x80 [ 1792.986149][ T326] ? xskq_create+0xbf/0x170 [ 1792.990701][ T326] xskq_create+0xbf/0x170 [ 1792.995106][ T326] xsk_init_queue+0xad/0x100 [ 1792.999735][ T326] xsk_setsockopt+0x413/0x750 [ 1793.004455][ T326] ? xsk_poll+0x670/0x670 [ 1793.008816][ T326] ? __fget_files+0x28/0x460 [ 1793.013436][ T326] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1793.019127][ T326] ? security_socket_setsockopt+0x7e/0xa0 [ 1793.024979][ T326] ? xsk_poll+0x670/0x670 [ 1793.029465][ T326] do_sock_setsockopt+0x175/0x1a0 [ 1793.034513][ T326] ? __fdget+0x180/0x210 [ 1793.038782][ T326] __x64_sys_setsockopt+0x182/0x200 [ 1793.044032][ T326] do_syscall_64+0x55/0xb0 [ 1793.048472][ T326] ? clear_bhb_loop+0x40/0x90 [ 1793.053180][ T326] ? clear_bhb_loop+0x40/0x90 [ 1793.057906][ T326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1793.063819][ T326] RIP: 0033:0x7f76e6d9e159 [ 1793.068274][ T326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.087947][ T326] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1793.096381][ T326] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1793.104368][ T326] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1793.112354][ T326] RBP: 00007f76e6e3506b R08: 0000000000000004 R09: 0000000000000000 [ 1793.120792][ T326] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1793.128848][ T326] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1793.136875][ T326] [ 1793.592772][ T326] Mem-Info: [ 1793.618739][ T326] active_anon:25993 inactive_anon:0 isolated_anon:0 [ 1793.618739][ T326] active_file:18543 inactive_file:40818 isolated_file:0 [ 1793.618739][ T326] unevictable:17730 dirty:330 writeback:0 [ 1793.618739][ T326] slab_reclaimable:8745 slab_unreclaimable:101230 [ 1793.618739][ T326] mapped:24792 shmem:18446 pagetables:949 [ 1793.618739][ T326] sec_pagetables:9 bounce:0 [ 1793.618739][ T326] kernel_misc_reclaimable:0 [ 1793.618739][ T326] free:1276437 free_pcp:26675 free_cma:0 [ 1793.971419][ T326] Node 0 active_anon:105688kB inactive_anon:0kB active_file:74172kB inactive_file:163072kB unevictable:69384kB isolated(anon):0kB isolated(file):0kB mapped:100780kB dirty:1320kB writeback:0kB shmem:73860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12592kB pagetables:3900kB sec_pagetables:36kB all_unreclaimable? no [ 1794.195799][ T326] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1794.328646][ T326] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.498868][ T326] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1794.564470][ T326] Node 0 DMA32 free:1296364kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:103576kB inactive_anon:0kB active_file:74172kB inactive_file:162260kB unevictable:69384kB writepending:1344kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.658151][ T346] fuse: Unknown parameter 'fd0x0000000000000005' [ 1794.789339][ T326] lowmem_reserve[]: 0 0 0 0 0 [ 1794.814716][ T326] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1795.020304][ T326] lowmem_reserve[]: 0 0 0 0 0 [ 1795.025129][ T326] Node 1 Normal free:3840460kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:64112kB local_pcp:64112kB free_cma:0kB [ 1795.268612][ T326] lowmem_reserve[]: 0 0 0 0 0 [ 1795.302895][ T326] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1795.392149][ T326] Node 0 DMA32: 2521*4kB (UME) 1140*8kB (UME) 732*16kB (UME) 309*32kB (UME) 410*64kB (UME) 193*128kB (UME) 103*256kB (ME) 37*512kB (UME) 28*1024kB (UME) 21*2048kB (UM) 265*4096kB (UM) = 1294180kB [ 1795.525460][ T326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1795.637171][ T326] Node 1 Normal: 165*4kB (UME) 69*8kB (UE) 43*16kB (U) 211*32kB (UE) 84*64kB (UME) 30*128kB (UME) 12*256kB (UME) 4*512kB (U) 0*1024kB 4*2048kB (UME) 930*4096kB (M) = 3840460kB [ 1795.729202][ T326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1795.800606][ T326] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1795.860386][ T326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1795.926337][ T326] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1796.005089][ T326] 94729 total pagecache pages [ 1796.038164][ T326] 1 pages in swap cache [ 1796.096196][ T326] Free swap = 124740kB [ 1796.125655][ T326] Total swap = 124996kB [ 1796.153905][ T326] 2097051 pages RAM [ 1796.181815][ T326] 0 pages HighMem/MovableOnly [ 1796.188700][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 1796.188712][ T28] audit: type=1326 audit(1700008318.599:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1796.225226][ T380] fuse: Unknown parameter 'fd0x0000000000000005' [ 1796.234241][ T326] 416965 pages reserved [ 1796.270369][ T326] 0 pages cma reserved [ 1796.432935][ T28] audit: type=1326 audit(1700008318.599:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1796.626508][ T387] fuse: Bad value for 'fd' [ 1796.643424][ T28] audit: type=1326 audit(1700008318.599:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1796.864039][ T28] audit: type=1326 audit(1700008318.599:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1797.017377][ T28] audit: type=1326 audit(1700008318.599:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1797.218041][ T28] audit: type=1326 audit(1700008318.649:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1797.408407][ T28] audit: type=1326 audit(1700008318.649:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1797.587546][ T28] audit: type=1326 audit(1700008318.649:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1797.788269][ T28] audit: type=1326 audit(1700008318.649:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1797.958870][ T28] audit: type=1326 audit(1700008318.649:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=379 comm="syz.6.8005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1798.676199][ T423] fuse: Bad value for 'fd' [ 1799.923132][ T439] kAFS: No cell specified [ 1800.326916][ T447] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8028'. [ 1800.665344][ T458] fuse: Bad value for 'fd' [ 1801.207150][ T28] kauditd_printk_skb: 346 callbacks suppressed [ 1801.207164][ T28] audit: type=1326 audit(1700008323.619:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1801.424303][ T28] audit: type=1326 audit(1700008323.699:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1801.606665][ T28] audit: type=1326 audit(1700008323.699:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1801.780154][ T28] audit: type=1326 audit(1700008323.699:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1802.025603][ T28] audit: type=1326 audit(1700008323.729:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1802.220215][ T28] audit: type=1326 audit(1700008323.829:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d32f5e98e code=0x7ffc0000 [ 1802.385733][ T28] audit: type=1326 audit(1700008323.839:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d32f5e98e code=0x7ffc0000 [ 1802.564269][ T28] audit: type=1326 audit(1700008323.869:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d32f5e98e code=0x7ffc0000 [ 1802.700587][ T485] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8039'. [ 1802.716055][ T28] audit: type=1326 audit(1700008323.869:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d32f5e98e code=0x7ffc0000 [ 1802.907306][ T487] warn_alloc: 2 callbacks suppressed [ 1802.907319][ T487] syz.9.8040: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1802.914420][ T28] audit: type=1326 audit(1700008323.879:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=462 comm="syz.6.8033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d32f5e98e code=0x7ffc0000 [ 1803.000367][ T487] ,cpuset=syz9,mems_allowed=0-1 [ 1803.007127][ T487] CPU: 0 PID: 487 Comm: syz.9.8040 Not tainted syzkaller #0 [ 1803.014707][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1803.024782][ T487] Call Trace: [ 1803.028079][ T487] [ 1803.031036][ T487] dump_stack_lvl+0x18c/0x250 [ 1803.035830][ T487] ? show_regs_print_info+0x20/0x20 [ 1803.041079][ T487] ? load_image+0x420/0x420 [ 1803.045620][ T487] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1803.052060][ T487] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1803.058591][ T487] warn_alloc+0x246/0x340 [ 1803.062964][ T487] ? stack_trace_save+0xaa/0x100 [ 1803.067959][ T487] ? zone_watermark_ok_safe+0x230/0x230 [ 1803.073534][ T487] ? kasan_set_track+0x5f/0x70 [ 1803.078318][ T487] ? kasan_set_track+0x4e/0x70 [ 1803.083120][ T487] ? __kasan_kmalloc+0x8f/0xa0 [ 1803.088046][ T487] ? xsk_init_queue+0xad/0x100 [ 1803.092843][ T487] ? xsk_setsockopt+0x413/0x750 [ 1803.097726][ T487] ? do_sock_setsockopt+0x175/0x1a0 [ 1803.103090][ T487] ? __x64_sys_setsockopt+0x182/0x200 [ 1803.108514][ T487] __vmalloc_node_range+0x129/0x1320 [ 1803.113853][ T487] ? free_vm_area+0x50/0x50 [ 1803.118398][ T487] vmalloc_user+0x74/0x80 [ 1803.122754][ T487] ? xskq_create+0xbf/0x170 [ 1803.127304][ T487] xskq_create+0xbf/0x170 [ 1803.131836][ T487] xsk_init_queue+0xad/0x100 [ 1803.136570][ T487] xsk_setsockopt+0x413/0x750 [ 1803.141273][ T487] ? xsk_poll+0x670/0x670 [ 1803.145627][ T487] ? __fget_files+0x28/0x460 [ 1803.150251][ T487] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1803.155818][ T487] ? security_socket_setsockopt+0x7e/0xa0 [ 1803.161576][ T487] ? xsk_poll+0x670/0x670 [ 1803.165957][ T487] do_sock_setsockopt+0x175/0x1a0 [ 1803.171033][ T487] ? __fdget+0x180/0x210 [ 1803.175315][ T487] __x64_sys_setsockopt+0x182/0x200 [ 1803.180588][ T487] do_syscall_64+0x55/0xb0 [ 1803.185077][ T487] ? clear_bhb_loop+0x40/0x90 [ 1803.189894][ T487] ? clear_bhb_loop+0x40/0x90 [ 1803.194651][ T487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1803.200870][ T487] RIP: 0033:0x7f0b60f9e159 [ 1803.205325][ T487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.224979][ T487] RSP: 002b:00007f0b61f2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1803.233470][ T487] RAX: ffffffffffffffda RBX: 00007f0b61225fa0 RCX: 00007f0b60f9e159 [ 1803.241584][ T487] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1803.249609][ T487] RBP: 00007f0b6103506b R08: 0000000000000004 R09: 0000000000000000 [ 1803.257605][ T487] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1803.265597][ T487] R13: 00007f0b61226038 R14: 00007f0b61225fa0 R15: 00007fffd403b878 [ 1803.273607][ T487] [ 1803.312032][ T489] fuse: Bad value for 'fd' [ 1804.240163][ T487] Mem-Info: [ 1804.256473][ T487] active_anon:26018 inactive_anon:0 isolated_anon:0 [ 1804.256473][ T487] active_file:18543 inactive_file:40825 isolated_file:0 [ 1804.256473][ T487] unevictable:17730 dirty:288 writeback:0 [ 1804.256473][ T487] slab_reclaimable:8367 slab_unreclaimable:101304 [ 1804.256473][ T487] mapped:24801 shmem:18446 pagetables:986 [ 1804.256473][ T487] sec_pagetables:6 bounce:0 [ 1804.256473][ T487] kernel_misc_reclaimable:0 [ 1804.256473][ T487] free:1285268 free_pcp:18104 free_cma:0 [ 1804.488843][ T487] Node 0 active_anon:104020kB inactive_anon:0kB active_file:74172kB inactive_file:163100kB unevictable:69384kB isolated(anon):0kB isolated(file):0kB mapped:99204kB dirty:472kB writeback:624kB shmem:72248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:3840kB sec_pagetables:24kB all_unreclaimable? no [ 1804.753430][ T487] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1804.940280][ T487] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.085388][ T487] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1805.117720][ T487] Node 0 DMA32 free:1283352kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:106112kB inactive_anon:0kB active_file:74172kB inactive_file:162280kB unevictable:69384kB writepending:472kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:7648kB local_pcp:7648kB free_cma:0kB [ 1805.268842][ T487] lowmem_reserve[]: 0 0 0 0 0 [ 1805.325220][ T487] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1805.467688][ T487] lowmem_reserve[]: 0 0 0 0 0 [ 1805.491582][ T487] Node 1 Normal free:3840964kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:63616kB local_pcp:63616kB free_cma:0kB [ 1805.682485][ T487] lowmem_reserve[]: 0 0 0 0 0 [ 1805.687282][ T487] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1805.812507][ T487] Node 0 DMA32: 408*4kB (ME) 1063*8kB (UME) 732*16kB (UME) 247*32kB (UME) 410*64kB (UME) 193*128kB (UME) 103*256kB (ME) 37*512kB (UME) 28*1024kB (UME) 21*2048kB (UM) 263*4096kB (UM) = 1274936kB [ 1805.957657][ T487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1806.055075][ T487] Node 1 Normal: 215*4kB (UE) 69*8kB (UE) 46*16kB (UE) 211*32kB (UE) 84*64kB (UME) 30*128kB (UME) 11*256kB (UE) 5*512kB (UM) 0*1024kB 4*2048kB (UME) 930*4096kB (M) = 3840964kB [ 1806.197012][ T487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.274233][ T487] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1806.384015][ T487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.422403][ T487] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1806.496700][ T487] 94735 total pagecache pages [ 1806.516964][ T487] 1 pages in swap cache [ 1806.536437][ T487] Free swap = 124740kB [ 1806.552502][ T487] Total swap = 124996kB [ 1806.586743][ T487] 2097051 pages RAM [ 1806.623403][ T487] 0 pages HighMem/MovableOnly [ 1806.645053][ T487] 416965 pages reserved [ 1806.669088][ T487] 0 pages cma reserved [ 1806.822099][ T28] kauditd_printk_skb: 232 callbacks suppressed [ 1806.822113][ T28] audit: type=1326 audit(1700008329.239:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1806.957528][ T28] audit: type=1326 audit(1700008329.279:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1807.133913][ T28] audit: type=1326 audit(1700008329.279:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1807.256958][ T28] audit: type=1326 audit(1700008329.279:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1807.400549][ T28] audit: type=1326 audit(1700008329.279:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1807.540720][ T28] audit: type=1326 audit(1700008329.289:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76e6d9dec2 code=0x7ffc0000 [ 1807.662470][ T28] audit: type=1326 audit(1700008329.299:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76e6d9dec2 code=0x7ffc0000 [ 1807.768189][ T28] audit: type=1326 audit(1700008329.329:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1807.915795][ T28] audit: type=1326 audit(1700008329.329:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76e6d9dec2 code=0x7ffc0000 [ 1808.092674][ T28] audit: type=1326 audit(1700008329.329:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.8056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1809.187745][ T571] MTRR 0 not used [ 1809.205853][ T571] loop6: detected capacity change from 0 to 256 [ 1809.315416][T28372] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1811.837688][ T28] kauditd_printk_skb: 243 callbacks suppressed [ 1811.837701][ T28] audit: type=1326 audit(1700008334.249:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=592 comm="syz.3.8072" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e6d5e98e code=0x7ffc0000 [ 1811.997863][ T28] audit: type=1326 audit(1700008334.289:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=592 comm="syz.3.8072" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e6d5e98e code=0x7ffc0000 [ 1812.199003][ T28] audit: type=1326 audit(1700008334.289:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=592 comm="syz.3.8072" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e6d5e98e code=0x7ffc0000 [ 1812.381512][ T28] audit: type=1326 audit(1700008334.299:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=592 comm="syz.3.8072" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1812.600229][ T28] audit: type=1326 audit(1700008334.299:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=592 comm="syz.3.8072" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1812.810344][ T28] audit: type=1326 audit(1700008334.299:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=592 comm="syz.3.8072" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1812.983857][ T625] syzkaller0: entered promiscuous mode [ 1813.002411][ T28] audit: type=1326 audit(1700008334.299:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=592 comm="syz.3.8072" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1813.046819][ T625] syzkaller0: entered allmulticast mode [ 1813.102926][ T625] tipc: Started in network mode [ 1813.126784][ T625] tipc: Node identity 4af579d540db, cluster identity 4711 [ 1813.173955][ T625] tipc: Enabled bearer , priority 0 [ 1813.242488][ T625] tipc: Resetting bearer [ 1813.314192][ T624] tipc: Resetting bearer [ 1813.503899][ T624] tipc: Disabling bearer [ 1814.400502][ T649] syzkaller0: entered promiscuous mode [ 1814.454603][ T649] syzkaller0: entered allmulticast mode [ 1814.500953][ T652] input: syz0 as /devices/virtual/input/input95 [ 1814.579832][ T654] fuse: Unknown parameter '00000000000000000000' [ 1815.814953][ T685] input: syz0 as /devices/virtual/input/input96 [ 1816.166401][ T5783] IPVS: starting estimator thread 0... [ 1816.290485][ T692] IPVS: using max 26 ests per chain, 62400 per kthread [ 1817.964451][ T726] MTRR 0 not used [ 1817.987415][ T724] syzkaller0: entered promiscuous mode [ 1818.012177][ T726] loop9: detected capacity change from 0 to 256 [ 1818.050202][ T724] syzkaller0: entered allmulticast mode [ 1818.081555][T28372] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1818.119060][ T727] tipc: Started in network mode [ 1818.156885][ T727] tipc: Node identity 5a8eec08215b, cluster identity 4711 [ 1818.226871][ T727] tipc: Enabled bearer , priority 0 [ 1818.323153][ T724] tipc: Resetting bearer [ 1818.398736][ T723] tipc: Resetting bearer [ 1818.624227][ T723] tipc: Disabling bearer [ 1819.151437][T13604] IPVS: starting estimator thread 0... [ 1819.188380][ T734] syzkaller0: entered promiscuous mode [ 1819.238334][ T734] syzkaller0: entered allmulticast mode [ 1819.310869][ T739] IPVS: using max 26 ests per chain, 62400 per kthread [ 1819.760921][T21587] Bluetooth: hci1: command 0x0406 tx timeout [ 1820.185421][ T758] MTRR 0 not used [ 1820.222326][ T758] loop3: detected capacity change from 0 to 256 [ 1821.400654][ T776] input: syz0 as /devices/virtual/input/input98 [ 1821.772059][ T781] input: syz0 as /devices/virtual/input/input99 [ 1822.158457][ T28] audit: type=1326 audit(1700008344.559:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1822.371211][ T28] audit: type=1326 audit(1700008344.559:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1822.535665][ T28] audit: type=1326 audit(1700008344.559:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1822.629019][ T785] syzkaller0: entered promiscuous mode [ 1822.644743][ T785] syzkaller0: entered allmulticast mode [ 1822.674441][ T28] audit: type=1326 audit(1700008344.569:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1822.841000][ T28] audit: type=1326 audit(1700008344.569:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1822.970227][ T28] audit: type=1326 audit(1700008344.569:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1823.132612][ T28] audit: type=1326 audit(1700008344.569:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1823.263116][ T28] audit: type=1326 audit(1700008344.599:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1823.445470][ T28] audit: type=1326 audit(1700008344.599:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1823.669291][ T28] audit: type=1326 audit(1700008344.599:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.0.8119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1825.137892][ T803] binder: 801:803 ioctl c0306201 0 returned -14 [ 1825.311388][ T819] binder: 801:819 ioctl c0306201 0 returned -14 [ 1825.683151][ T823] input: syz0 as /devices/virtual/input/input100 [ 1825.760316][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1825.970114][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1826.005004][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.082689][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1826.147305][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1826.263172][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1826.302962][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1826.332598][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.387740][ T9] usb 4-1: config 0 descriptor?? [ 1827.099697][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1827.121906][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 1827.190302][ T9] usb 4-1: USB disconnect, device number 30 [ 1828.107005][ T842] input: syz0 as /devices/virtual/input/input101 [ 1830.698605][ T869] netlink: 19 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1830.763967][ T869] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1831.631520][ T877] binder: 866:877 ioctl c0306201 0 returned -14 [ 1831.794439][ T880] binder: 866:880 ioctl c0306201 0 returned -14 [ 1834.569590][ T855] tipc: Enabling of bearer rejected, failed to enable media [ 1834.971901][ T885] loop9: detected capacity change from 0 to 7 [ 1835.038875][ T884] team0: Device xfrm0 is of different type [ 1835.052770][ T885] Dev loop9: unable to read RDB block 7 [ 1835.099860][ T885] loop9: unable to read partition table [ 1835.140820][ T885] loop9: partition table beyond EOD, truncated [ 1835.195320][ T885] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1835.475387][ T893] gretap0: entered promiscuous mode [ 1835.580976][ T893] vlan2: entered promiscuous mode [ 1835.831305][ T897] gretap0: entered promiscuous mode [ 1835.868246][ T897] vlan2: entered promiscuous mode [ 1836.126025][ T906] syzkaller0: entered promiscuous mode [ 1836.171247][ T906] syzkaller0: entered allmulticast mode [ 1837.080283][ T931] input: syz0 as /devices/virtual/input/input102 [ 1837.670127][ T9] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1837.873513][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1837.909205][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1837.944740][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.979545][ T9] usb 4-1: config 0 descriptor?? [ 1838.438152][ T9] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.0005/input/input103 [ 1838.663386][ T9] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.0005/input/input104 [ 1838.918666][ T9] kye 0003:0458:5005.0005: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.3-1/input0 [ 1839.044984][ T9] usb 4-1: USB disconnect, device number 31 [ 1839.061445][T13604] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1839.228734][ T952] fido_id[952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1839.310505][T13604] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1839.318658][T13604] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.462858][T13604] usb 7-1: config 0 has no interface number 0 [ 1839.469035][T13604] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1839.650938][T13604] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1839.746427][T13604] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1839.821627][ T969] loop9: detected capacity change from 0 to 7 [ 1839.864682][T13604] usb 7-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 1839.899368][ T969] Dev loop9: unable to read RDB block 7 [ 1839.948210][ T969] loop9: unable to read partition table [ 1839.960789][T13604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.999616][ T969] loop9: partition table beyond EOD, truncated [ 1840.035828][T13604] usb 7-1: config 0 descriptor?? [ 1840.069732][ T969] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1840.536447][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 1840.536460][ T28] audit: type=1326 audit(1700008362.949:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1840.601488][T13604] holtek_mouse 0003:04D9:A04A.0006: unknown main item tag 0x0 [ 1840.670252][T13604] holtek_mouse 0003:04D9:A04A.0006: unknown main item tag 0x0 [ 1840.717026][T13604] holtek_mouse 0003:04D9:A04A.0006: unknown main item tag 0x0 [ 1840.776027][T13604] holtek_mouse 0003:04D9:A04A.0006: unknown main item tag 0x0 [ 1840.796681][ T28] audit: type=1326 audit(1700008362.989:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1840.826869][ T981] syz.3.8165: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1840.859391][T13604] holtek_mouse 0003:04D9:A04A.0006: unknown main item tag 0x0 [ 1840.902111][T13604] holtek_mouse 0003:04D9:A04A.0006: unknown main item tag 0x0 [ 1840.952459][T13604] holtek_mouse 0003:04D9:A04A.0006: unknown main item tag 0x0 [ 1840.998658][ T28] audit: type=1326 audit(1700008362.989:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1841.047672][ T981] CPU: 0 PID: 981 Comm: syz.3.8165 Not tainted syzkaller #0 [ 1841.055024][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1841.065118][ T981] Call Trace: [ 1841.068413][ T981] [ 1841.071380][ T981] dump_stack_lvl+0x18c/0x250 [ 1841.076104][ T981] ? show_regs_print_info+0x20/0x20 [ 1841.081335][ T981] ? load_image+0x420/0x420 [ 1841.085878][ T981] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1841.092319][ T981] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1841.098853][ T981] warn_alloc+0x246/0x340 [ 1841.103256][ T981] ? stack_trace_save+0xaa/0x100 [ 1841.108229][ T981] ? zone_watermark_ok_safe+0x230/0x230 [ 1841.114064][ T981] ? kasan_set_track+0x5f/0x70 [ 1841.118880][ T981] ? kasan_set_track+0x4e/0x70 [ 1841.123908][ T981] ? __kasan_kmalloc+0x8f/0xa0 [ 1841.128713][ T981] ? xsk_init_queue+0xad/0x100 [ 1841.133862][ T981] ? xsk_setsockopt+0x413/0x750 [ 1841.138737][ T981] ? do_sock_setsockopt+0x175/0x1a0 [ 1841.143973][ T981] ? __x64_sys_setsockopt+0x182/0x200 [ 1841.149483][ T981] __vmalloc_node_range+0x129/0x1320 [ 1841.154812][ T981] ? free_vm_area+0x50/0x50 [ 1841.159340][ T981] vmalloc_user+0x74/0x80 [ 1841.163691][ T981] ? xskq_create+0xbf/0x170 [ 1841.168226][ T981] xskq_create+0xbf/0x170 [ 1841.172574][ T981] xsk_init_queue+0xad/0x100 [ 1841.177187][ T981] xsk_setsockopt+0x413/0x750 [ 1841.181896][ T981] ? xsk_poll+0x670/0x670 [ 1841.186251][ T981] ? __fget_files+0x28/0x460 [ 1841.190873][ T981] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1841.196441][ T981] ? security_socket_setsockopt+0x7e/0xa0 [ 1841.202358][ T981] ? xsk_poll+0x670/0x670 [ 1841.206730][ T981] do_sock_setsockopt+0x175/0x1a0 [ 1841.211860][ T981] ? __fdget+0x180/0x210 [ 1841.216328][ T981] __x64_sys_setsockopt+0x182/0x200 [ 1841.221558][ T981] do_syscall_64+0x55/0xb0 [ 1841.225990][ T981] ? clear_bhb_loop+0x40/0x90 [ 1841.230766][ T981] ? clear_bhb_loop+0x40/0x90 [ 1841.235491][ T981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1841.241441][ T981] RIP: 0033:0x7f76e6d9e159 [ 1841.245877][ T981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.265634][ T981] RSP: 002b:00007f76e4ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1841.274087][ T981] RAX: ffffffffffffffda RBX: 00007f76e7026090 RCX: 00007f76e6d9e159 [ 1841.282141][ T981] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1841.290138][ T981] RBP: 00007f76e6e3506b R08: 0000000000000004 R09: 0000000000000000 [ 1841.298195][ T981] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1841.306245][ T981] R13: 00007f76e7026128 R14: 00007f76e7026090 R15: 00007ffdfe30eec8 [ 1841.314273][ T981] [ 1841.350543][T13604] holtek_mouse 0003:04D9:A04A.0006: unknown main item tag 0x0 [ 1841.359042][T13604] holtek_mouse 0003:04D9:A04A.0006: unknown main item tag 0x0 [ 1841.402855][ T28] audit: type=1326 audit(1700008362.989:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1841.449443][T13604] holtek_mouse 0003:04D9:A04A.0006: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.6-1/input1 [ 1841.518805][ T28] audit: type=1326 audit(1700008363.019:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1841.640221][ T28] audit: type=1326 audit(1700008363.019:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1841.790237][ T28] audit: type=1326 audit(1700008363.019:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1841.929289][ T28] audit: type=1326 audit(1700008363.019:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1842.002058][T13604] usb 7-1: USB disconnect, device number 46 [ 1842.100291][ T28] audit: type=1326 audit(1700008363.029:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1842.232368][ T28] audit: type=1326 audit(1700008363.029:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=976 comm="syz.0.8164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1842.798892][ T981] Mem-Info: [ 1842.820493][ T981] active_anon:26139 inactive_anon:0 isolated_anon:0 [ 1842.820493][ T981] active_file:18543 inactive_file:40841 isolated_file:0 [ 1842.820493][ T981] unevictable:17730 dirty:145 writeback:0 [ 1842.820493][ T981] slab_reclaimable:8058 slab_unreclaimable:102382 [ 1842.820493][ T981] mapped:24925 shmem:18448 pagetables:976 [ 1842.820493][ T981] sec_pagetables:0 bounce:0 [ 1842.820493][ T981] kernel_misc_reclaimable:0 [ 1842.820493][ T981] free:1278534 free_pcp:24335 free_cma:0 [ 1843.214884][ T981] Node 0 active_anon:104556kB inactive_anon:0kB active_file:74172kB inactive_file:163164kB unevictable:69384kB isolated(anon):0kB isolated(file):0kB mapped:99700kB dirty:576kB writeback:0kB shmem:72256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12656kB pagetables:3904kB sec_pagetables:0kB all_unreclaimable? no [ 1843.347102][ T1014] bridge_slave_0: left allmulticast mode [ 1843.395682][ T1014] bridge_slave_0: left promiscuous mode [ 1843.416269][ T981] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1843.456828][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.498537][ T1014] bridge_slave_1: left allmulticast mode [ 1843.528608][ T1014] bridge_slave_1: left promiscuous mode [ 1843.548507][ T981] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1843.578601][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.619838][ T1014] bond0: (slave bond_slave_0): Releasing backup interface [ 1843.685380][ T1014] bond0: (slave bond_slave_1): Releasing backup interface [ 1843.733461][ T981] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1843.790163][ T981] Node 0 DMA32 free:1255816kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:104592kB inactive_anon:0kB active_file:74172kB inactive_file:162344kB unevictable:69384kB writepending:584kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:36848kB local_pcp:36848kB free_cma:0kB [ 1843.955405][ T1014] team0: Port device team_slave_0 removed [ 1843.980286][ T981] lowmem_reserve[]: 0 0 0 0 0 [ 1844.002402][ T981] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1844.064349][ T1014] team0: Port device team_slave_1 removed [ 1844.097519][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1844.146038][ T981] lowmem_reserve[]: 0 0 0 0 0 [ 1844.155497][ T981] Node 1 Normal free:3842708kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:62020kB local_pcp:62020kB free_cma:0kB [ 1844.187464][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1844.278567][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1844.317503][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1844.327666][ T981] lowmem_reserve[]: 0 0 0 0 0 [ 1844.357031][ T981] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1844.436318][ T981] Node 0 DMA32: 12*4kB (UME) 195*8kB (UME) 636*16kB (UME) 194*32kB (ME) 389*64kB (UME) 192*128kB (UME) 104*256kB (UME) 37*512kB (UME) 14*1024kB (UME) 21*2048kB (UM) 265*4096kB (UM) = 1255816kB [ 1844.558056][ T981] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1844.661955][ T981] Node 1 Normal: 155*4kB (UME) 69*8kB (UE) 46*16kB (UE) 217*32kB (UE) 84*64kB (UME) 30*128kB (UME) 12*256kB (UME) 4*512kB (U) 0*1024kB 3*2048kB (UME) 931*4096kB (M) = 3842708kB [ 1844.768343][ T981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1844.797123][ T981] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1844.812810][ T981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1844.825789][ T981] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1844.842646][ T981] 94750 total pagecache pages [ 1844.847532][ T981] 1 pages in swap cache [ 1844.854782][ T981] Free swap = 124740kB [ 1844.859042][ T981] Total swap = 124996kB [ 1844.875858][ T981] 2097051 pages RAM [ 1844.881164][ T981] 0 pages HighMem/MovableOnly [ 1844.889026][ T981] 416965 pages reserved [ 1844.898153][ T981] 0 pages cma reserved [ 1845.030104][ T5783] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1845.251274][ T5783] usb 7-1: Using ep0 maxpacket: 32 [ 1845.286932][ T5783] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1845.339276][ T5783] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1845.425540][ T5783] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 1845.521607][ T5783] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 1845.587515][ T5783] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1845.665368][ T5783] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1845.722002][ T5783] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1845.785671][ T5783] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1845.860131][ T5783] usb 7-1: Product: syz [ 1845.895178][ T5783] usb 7-1: Manufacturer: syz [ 1845.934814][ T5783] usb 7-1: SerialNumber: syz [ 1845.972110][ T5783] usb 7-1: config 0 descriptor?? [ 1846.008358][ T1029] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1846.039847][ T5783] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1846.092722][ T5783] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1846.392832][ T1060] loop9: detected capacity change from 0 to 7 [ 1846.442526][ T1060] Dev loop9: unable to read RDB block 7 [ 1846.449824][ T1060] loop9: unable to read partition table [ 1846.484827][ T1060] loop9: partition table beyond EOD, truncated [ 1846.525080][ T5783] usb 7-1: USB disconnect, device number 47 [ 1846.543777][ T1060] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1846.588482][ T5783] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1846.919678][ T1069] loop9: detected capacity change from 0 to 7 [ 1846.966442][ T1069] Dev loop9: unable to read RDB block 7 [ 1847.005806][ T1069] loop9: unable to read partition table [ 1847.041807][ T1069] loop9: partition table beyond EOD, truncated [ 1847.083142][ T1069] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1847.285219][ T1072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.426750][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 1847.426763][ T28] audit: type=1326 audit(1700008369.839:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1847.570541][ T28] audit: type=1326 audit(1700008369.879:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1847.719628][ T28] audit: type=1326 audit(1700008369.879:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1847.844196][ T28] audit: type=1326 audit(1700008369.899:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1847.978903][ T28] audit: type=1326 audit(1700008369.899:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1848.131062][ T28] audit: type=1326 audit(1700008369.899:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1848.301155][ T28] audit: type=1326 audit(1700008369.879:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1848.446227][ T28] audit: type=1326 audit(1700008369.899:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1848.584966][ T28] audit: type=1326 audit(1700008369.899:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1848.719633][ T28] audit: type=1326 audit(1700008369.899:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1075 comm="syz.0.8186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4de9f9dec2 code=0x7ffc0000 [ 1849.032036][ T9] wiimote 0005:057E:0330.0007: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 1849.137595][ T9] wiimote 0005:057E:0330.0007: New device registered [ 1849.220657][ T5783] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1849.470175][ T5783] usb 7-1: Using ep0 maxpacket: 32 [ 1849.510309][ T5783] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.552870][ T5783] usb 7-1: config 0 has no interfaces? [ 1849.600494][ T5783] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1849.627385][ T5783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.663513][ T5783] usb 7-1: Product: syz [ 1849.688080][ T5783] usb 7-1: Manufacturer: syz [ 1849.732943][ T5783] usb 7-1: SerialNumber: syz [ 1849.755327][ T5783] usb 7-1: config 0 descriptor?? [ 1850.220373][ T5761] wiimote 0005:057E:0330.0007: detected device: Nintendo Wii Remote Plus (Gen 2) [ 1850.441337][ T5761] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input106 [ 1850.577414][ T5761] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input107 [ 1850.686169][ T5761] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input105 [ 1850.753600][ T1099] wiimote 0005:057E:0330.0007: Event data for report 32 was too short (31 vs 2) [ 1851.939705][ T5783] usb 7-1: USB disconnect, device number 48 [ 1851.948906][ T1084] wiimote 0005:057E:0330.0007: Device removed [ 1852.048741][ T1103] syzkaller0: entered promiscuous mode [ 1852.081047][ T1103] syzkaller0: entered allmulticast mode [ 1853.098524][ T1116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1853.317642][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 1853.317654][ T28] audit: type=1326 audit(1700008375.729:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1853.481690][ T28] audit: type=1326 audit(1700008375.769:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1853.528627][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.535227][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.659543][ T28] audit: type=1326 audit(1700008375.779:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1853.738580][ T28] audit: type=1326 audit(1700008375.779:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1853.807604][ T28] audit: type=1326 audit(1700008375.789:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1853.908783][ T28] audit: type=1326 audit(1700008375.789:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1853.995332][ T28] audit: type=1326 audit(1700008375.789:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1854.065946][ T28] audit: type=1326 audit(1700008375.789:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1854.135461][ T28] audit: type=1326 audit(1700008375.799:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1854.199106][ T28] audit: type=1326 audit(1700008375.799:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1119 comm="syz.0.8197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1855.657978][ T1141] bridge_slave_0: left allmulticast mode [ 1855.682825][ T1141] bridge_slave_0: left promiscuous mode [ 1855.703988][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.747458][ T1141] bridge_slave_1: left allmulticast mode [ 1855.766271][ T1141] bridge_slave_1: left promiscuous mode [ 1855.784760][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.824806][ T1141] bond0: (slave bond_slave_0): Releasing backup interface [ 1855.868776][ T1141] bond0: (slave bond_slave_1): Releasing backup interface [ 1855.976432][ T1141] team0: Port device team_slave_0 removed [ 1856.024623][ T1141] team0: Port device team_slave_1 removed [ 1856.053814][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1856.084316][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1856.097822][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1856.106771][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1856.196859][ T1142] team0: Port device xfrm0 added [ 1856.638596][ T1152] loop9: detected capacity change from 0 to 7 [ 1856.648028][ T1152] Dev loop9: unable to read RDB block 7 [ 1856.656640][ T1152] loop9: unable to read partition table [ 1856.667851][ T1152] loop9: partition table beyond EOD, truncated [ 1856.677312][ T1152] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1857.040421][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1857.230285][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1857.245258][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1857.257300][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1857.288397][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 1857.312022][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 1857.347619][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1857.392129][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1857.412382][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1857.433785][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1857.483556][ T9] usb 4-1: Product: syz [ 1857.492841][ T9] usb 4-1: Manufacturer: syz [ 1857.497508][ T9] usb 4-1: SerialNumber: syz [ 1857.541082][ T9] usb 4-1: config 0 descriptor?? [ 1857.557192][ T1154] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1857.578476][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1857.619506][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1857.904100][ T5761] usb 4-1: USB disconnect, device number 32 [ 1857.916364][ T5761] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1858.644109][ T1165] syzkaller0: entered promiscuous mode [ 1858.659638][ T1165] syzkaller0: entered allmulticast mode [ 1861.147025][ T28] kauditd_printk_skb: 296 callbacks suppressed [ 1861.147038][ T28] audit: type=1326 audit(1700008383.559:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1861.438300][ T28] audit: type=1326 audit(1700008383.619:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1861.658628][ T28] audit: type=1326 audit(1700008383.619:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1861.840295][ T28] audit: type=1326 audit(1700008383.619:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1861.994666][ T28] audit: type=1326 audit(1700008383.639:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1862.147148][ T28] audit: type=1326 audit(1700008383.639:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1862.290352][ T28] audit: type=1326 audit(1700008383.639:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1862.372631][ T8] wiimote 0005:057E:0330.0008: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 1862.444138][ T8] wiimote 0005:057E:0330.0008: New device registered [ 1862.470194][ T28] audit: type=1326 audit(1700008383.679:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1862.513163][ T1214] wiimote 0005:057E:0330.0008: Device removed [ 1862.613411][ T28] audit: type=1326 audit(1700008383.679:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1862.675147][ T1218] fido_id[1218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1862.745346][ T28] audit: type=1326 audit(1700008383.679:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1197 comm="syz.6.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1863.580733][ T8] wiimote 0005:057E:0330.0008: detected device: Nintendo Wii Remote Plus (Gen 2) [ 1863.649339][ T8] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input110 [ 1863.770894][ T8] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input111 [ 1863.906554][ T8] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input109 [ 1866.387440][ T1246] syzkaller0: entered promiscuous mode [ 1866.412034][ T1246] syzkaller0: entered allmulticast mode [ 1866.549776][ T1250] syzkaller0: entered promiscuous mode [ 1866.561605][ T1250] syzkaller0: entered allmulticast mode [ 1870.404564][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 1870.404578][ T28] audit: type=1326 audit(1700008392.809:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1870.515842][ T28] audit: type=1326 audit(1700008392.809:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1870.607328][ T28] audit: type=1326 audit(1700008392.859:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1870.674922][ T28] audit: type=1326 audit(1700008392.859:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1870.746429][ T28] audit: type=1326 audit(1700008392.859:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1870.821655][ T28] audit: type=1326 audit(1700008392.859:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1870.888808][ T28] audit: type=1326 audit(1700008392.859:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1870.969785][ T28] audit: type=1326 audit(1700008392.879:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1871.048922][ T28] audit: type=1326 audit(1700008392.879:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1871.116969][ T28] audit: type=1326 audit(1700008392.879:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.9.8236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1880.038040][ T1267] tipc: Started in network mode [ 1880.044084][ T1267] tipc: Node identity c6d2986c8643, cluster identity 4711 [ 1880.058347][ T1267] tipc: Enabled bearer , priority 0 [ 1880.091409][ T1265] syzkaller0: entered promiscuous mode [ 1880.097143][ T1265] syzkaller0: entered allmulticast mode [ 1880.368632][ T1265] tipc: Resetting bearer [ 1880.530401][ T1265] tipc: Disabling bearer [ 1880.690764][ T8] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1880.900681][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 1880.953868][ T8] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1880.998328][ T8] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1881.075140][ T8] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 1881.147477][ T8] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 1881.208651][ T8] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1881.285987][ T8] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1881.334165][ T8] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1881.386199][ T8] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1881.434109][ T8] usb 10-1: Product: syz [ 1881.461380][ T8] usb 10-1: Manufacturer: syz [ 1881.484155][ T8] usb 10-1: SerialNumber: syz [ 1881.519917][ T8] usb 10-1: config 0 descriptor?? [ 1881.562035][ T1325] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1881.594415][ T8] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1881.666694][ T8] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1882.066850][ T8] usb 10-1: USB disconnect, device number 16 [ 1882.096596][ T8] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1882.558491][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 1882.558505][ T28] audit: type=1326 audit(1700008404.969:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1882.802753][ T28] audit: type=1326 audit(1700008404.969:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1882.916535][ T28] audit: type=1326 audit(1700008405.029:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1882.994226][ T28] audit: type=1326 audit(1700008405.029:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1883.060253][ T8] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1883.130130][ T28] audit: type=1326 audit(1700008405.029:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1883.216249][ T1352] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1883.236413][ T28] audit: type=1326 audit(1700008405.039:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1883.301493][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 1883.320284][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1883.329070][ T28] audit: type=1326 audit(1700008405.039:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1883.353649][ T8] usb 7-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1883.369506][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.409454][ T8] usb 7-1: config 0 descriptor?? [ 1883.447096][ T28] audit: type=1326 audit(1700008405.059:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1883.601162][ T28] audit: type=1326 audit(1700008405.059:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1883.749242][ T28] audit: type=1326 audit(1700008405.059:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1344 comm="syz.0.8245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de9f9e159 code=0x7ffc0000 [ 1883.798796][ T1358] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8248'. [ 1883.846386][ T1358] vlan2: entered promiscuous mode [ 1883.882360][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 1883.912832][ T8] usbhid: probe of 7-1:0.0 failed with error -71 [ 1883.928133][ T1358] syz_tun: entered promiscuous mode [ 1883.970729][ T8] usb 7-1: USB disconnect, device number 49 [ 1885.712621][ T1386] syzkaller0: entered promiscuous mode [ 1885.732271][ T1386] syzkaller0: entered allmulticast mode [ 1887.675700][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 1887.675713][ T28] audit: type=1326 audit(1700008410.089:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1887.798638][ T28] audit: type=1326 audit(1700008410.129:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1887.886933][ T28] audit: type=1326 audit(1700008410.129:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1887.955787][ T28] audit: type=1326 audit(1700008410.139:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1888.050237][ T28] audit: type=1326 audit(1700008410.139:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1888.127755][ T28] audit: type=1326 audit(1700008410.139:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1888.191332][ T28] audit: type=1326 audit(1700008410.139:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1888.265208][ T28] audit: type=1326 audit(1700008410.159:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1888.359332][ T28] audit: type=1326 audit(1700008410.159:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1888.428681][ T28] audit: type=1326 audit(1700008410.159:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1422 comm="syz.6.8261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1893.322106][ T1449] tipc: Enabled bearer , priority 0 [ 1893.367856][ T1449] tipc: Resetting bearer [ 1893.510669][ T1448] tipc: Disabling bearer [ 1893.852778][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 1893.852792][ T28] audit: type=1326 audit(1700008416.259:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1894.082594][ T28] audit: type=1326 audit(1700008416.269:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1894.257106][ T28] audit: type=1326 audit(1700008416.319:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1894.480224][ T28] audit: type=1326 audit(1700008416.319:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1894.663991][ T28] audit: type=1326 audit(1700008416.319:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1894.737420][ T1463] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1894.784603][ T28] audit: type=1326 audit(1700008416.319:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1894.830222][ T5761] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1894.946727][ T28] audit: type=1326 audit(1700008416.319:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1895.073540][ T5761] usb 4-1: too many configurations: 253, using maximum allowed: 8 [ 1895.098316][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.129273][ T28] audit: type=1326 audit(1700008416.339:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1895.177528][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.209918][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.251180][ T28] audit: type=1326 audit(1700008416.339:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1895.288284][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.333539][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.382516][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.395375][ T28] audit: type=1326 audit(1700008416.339:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1454 comm="syz.6.8268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d32f9e159 code=0x7ffc0000 [ 1895.435555][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.468256][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.504959][ T5761] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1895.567115][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.642475][ T5761] usb 4-1: config 0 descriptor?? [ 1895.693240][ T5761] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1895.886424][ T1474] netlink: 292 bytes leftover after parsing attributes in process `syz.6.8274'. [ 1895.960834][ T5761] usb 4-1: USB disconnect, device number 33 [ 1896.233632][ T1476] syzkaller0: entered promiscuous mode [ 1896.276842][ T1476] syzkaller0: entered allmulticast mode [ 1896.372114][ T1480] tipc: Enabled bearer , priority 0 [ 1896.437373][ T1480] tipc: Resetting bearer [ 1896.550295][ T5761] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1896.766440][ T5761] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 1896.796803][ T5761] usb 4-1: config 4 has no interface number 0 [ 1896.828885][ T5761] usb 4-1: config 4 interface 44 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 1896.878698][ T5761] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.948446][ T5761] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1896.981818][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.028405][ T5761] usb 4-1: Product: syz [ 1897.056342][ T5761] usb 4-1: Manufacturer: syz [ 1897.073597][ T5761] usb 4-1: SerialNumber: syz [ 1897.559650][ T5761] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1897.604479][ T5761] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1897.641954][ T5761] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1897.670980][ T5761] usb 4-1: media controller created [ 1897.687959][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1897.854704][ T5761] DVB: Unable to find symbol dib7000p_attach() [ 1897.878014][ T5761] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1898.021293][ T5761] rc_core: IR keymap rc-dib0700-rc5 not found [ 1898.027452][ T5761] Registered IR keymap rc-empty [ 1898.046598][ T5761] dvb-usb: could not initialize remote control. [ 1898.079569][ T5761] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1902.186552][ T1479] tipc: Disabling bearer [ 1902.207537][T13604] tipc: Node number set to 1083283564 [ 1902.319295][T13604] usb 4-1: USB disconnect, device number 34 [ 1902.427388][T13604] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1902.593273][ T1502] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8281'. [ 1902.824494][ T1495] udevd[1495]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 1903.314544][ T1521] loop6: detected capacity change from 0 to 256 [ 1903.368138][ T1521] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1903.440134][ T1521] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1903.579241][ T1521] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1903.664298][ T1521] exFAT-fs (loop6): failed to load alloc-bitmap [ 1903.692697][ T1521] exFAT-fs (loop6): failed to recognize exfat type [ 1906.840759][ T5761] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1907.070148][ T5761] usb 7-1: too many configurations: 181, using maximum allowed: 8 [ 1907.122716][ T5761] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1907.167684][ T5761] usb 7-1: can't read configurations, error -71 [ 1912.850482][ T5761] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1913.100622][ T5761] usb 10-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1913.150773][ T5761] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1913.157652][ T5761] usb 10-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1913.240232][ T5761] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.301585][ T5761] usb 10-1: config 0 descriptor?? [ 1913.774129][ T5761] wacom 0003:056A:00EC.0009: unknown main item tag 0x3 [ 1913.832309][ T5761] wacom 0003:056A:00EC.0009: ignoring exceeding usage max [ 1913.897890][ T5761] wacom 0003:056A:00EC.0009: hidraw0: USB HID v0.0a Device [HID 056a:00ec] on usb-dummy_hcd.9-1/input0 [ 1915.120415][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.417879][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.570448][ T5761] usb 10-1: USB disconnect, device number 17 [ 1915.793506][ T1589] fido_id[1589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1919.444044][ T1608] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1920.935852][ T1610] Bluetooth: MGMT ver 1.22 [ 1925.690166][ T5761] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1925.797238][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 1925.797251][ T28] audit: type=1326 audit(1700008448.209:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1925.850754][ T1642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.943783][ T5761] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.988498][ T5761] usb 10-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1926.010882][ T28] audit: type=1326 audit(1700008448.249:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1926.055725][ T5761] usb 10-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1926.100425][ T5761] usb 10-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1926.139508][ T28] audit: type=1326 audit(1700008448.249:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1926.185047][ T5761] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1926.220536][ T5761] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1926.261803][ T5761] usb 10-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 1926.282322][ T28] audit: type=1326 audit(1700008448.259:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1926.313029][ T5761] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.344681][ T5761] usb 10-1: Product: syz [ 1927.360112][ T5761] usb 10-1: Manufacturer: syz [ 1927.795168][ T5761] usb 10-1: SerialNumber: syz [ 1927.821464][ T28] audit: type=1326 audit(1700008448.259:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1928.066327][ T5761] usb 10-1: selecting invalid altsetting 0 [ 1928.096215][ T28] audit: type=1326 audit(1700008448.259:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1928.190381][ T5761] usb 10-1: selecting invalid altsetting 0 [ 1928.213833][ T5761] usbtest: probe of 10-1:220.1 failed with error -22 [ 1928.290480][ T5761] usb 10-1: USB disconnect, device number 18 [ 1928.337352][ T28] audit: type=1326 audit(1700008448.259:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1928.520419][ T28] audit: type=1326 audit(1700008448.259:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1928.720166][ T28] audit: type=1326 audit(1700008448.259:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76e6d5e98e code=0x7ffc0000 [ 1928.888058][ T28] audit: type=1326 audit(1700008448.269:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1639 comm="syz.3.8335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76e6d5e98e code=0x7ffc0000 [ 1929.110262][ T5761] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1929.341396][ T5761] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1929.381496][ T5761] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1929.478922][ T5761] usb 10-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 1929.544317][ T5761] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.613978][ T5761] usb 10-1: config 0 descriptor?? [ 1930.130821][ T5761] wacom 0003:056A:00E6.000A: hidraw0: USB HID v0.05 Device [HID 056a:00e6] on usb-dummy_hcd.9-1/input0 [ 1930.340162][ T5761] usb 10-1: USB disconnect, device number 19 [ 1930.403123][ T1657] fido_id[1657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:00E6.000A/report_descriptor': No such file or directory [ 1930.518908][ T1661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8342'. [ 1932.099569][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1932.099585][ T28] audit: type=1326 audit(1700008454.509:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1932.330856][ T28] audit: type=1326 audit(1700008454.509:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1932.478361][ T28] audit: type=1326 audit(1700008454.509:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1932.669029][ T28] audit: type=1326 audit(1700008454.509:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1932.879843][ T28] audit: type=1326 audit(1700008454.509:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1933.028991][ T28] audit: type=1326 audit(1700008454.509:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1933.120625][ T5783] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1933.188550][ T28] audit: type=1326 audit(1700008454.509:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1933.293553][ T28] audit: type=1326 audit(1700008454.509:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1933.429495][ T28] audit: type=1326 audit(1700008454.509:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1933.549089][ T5783] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1933.572522][ T5783] usb 10-1: no configurations [ 1933.589922][ T28] audit: type=1326 audit(1700008454.509:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1662 comm="syz.3.8343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f76e6d9e159 code=0x7ffc0000 [ 1933.594879][ T1675] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input120 [ 1933.740084][ T5783] usb 10-1: can't read configurations, error -22 [ 1936.208826][ T5783] kernel write not supported for file bpf-prog (pid: 5783 comm: kworker/0:4) [ 1936.891227][T21587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1936.903555][T21587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1936.926442][T21587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1936.934779][T21587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1936.944333][T21587] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1936.952871][T21587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1939.027575][T21587] Bluetooth: hci1: command tx timeout [ 1939.700499][ T1701] FAULT_INJECTION: forcing a failure. [ 1939.700499][ T1701] name failslab, interval 1, probability 0, space 0, times 0 [ 1939.758766][ T745] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.781311][ T1701] CPU: 0 PID: 1701 Comm: syz.3.8356 Not tainted syzkaller #0 [ 1939.788759][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1939.798843][ T1701] Call Trace: [ 1939.802143][ T1701] [ 1939.805126][ T1701] dump_stack_lvl+0x18c/0x250 [ 1939.809849][ T1701] ? show_regs_print_info+0x20/0x20 [ 1939.815076][ T1701] ? load_image+0x420/0x420 [ 1939.819616][ T1701] ? __might_sleep+0xe0/0xe0 [ 1939.824256][ T1701] ? __lock_acquire+0x7d80/0x7d80 [ 1939.829308][ T1701] should_fail_ex+0x394/0x4c0 [ 1939.834197][ T1701] should_failslab+0x9/0x20 [ 1939.838919][ T1701] slab_pre_alloc_hook+0x59/0x300 [ 1939.844004][ T1701] ? __kasan_kmalloc+0x8f/0xa0 [ 1939.848791][ T1701] ? __se_sys_fsopen+0x135/0x2c0 [ 1939.853779][ T1701] __kmem_cache_alloc_node+0x53/0x250 [ 1939.859320][ T1701] ? __se_sys_fsopen+0x135/0x2c0 [ 1939.864280][ T1701] kmalloc_trace+0x2a/0xe0 [ 1939.869003][ T1701] __se_sys_fsopen+0x135/0x2c0 [ 1939.873837][ T1701] do_syscall_64+0x55/0xb0 [ 1939.878288][ T1701] ? clear_bhb_loop+0x40/0x90 [ 1939.883021][ T1701] ? clear_bhb_loop+0x40/0x90 [ 1939.887747][ T1701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1939.894124][ T1701] RIP: 0033:0x7f76e6d9e159 [ 1939.898672][ T1701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1939.918424][ T1701] RSP: 002b:00007f76e7b89028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1939.926861][ T1701] RAX: ffffffffffffffda RBX: 00007f76e7025fa0 RCX: 00007f76e6d9e159 [ 1939.934884][ T1701] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0 [ 1939.942891][ T1701] RBP: 00007f76e6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1939.950903][ T1701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1939.958932][ T1701] R13: 00007f76e7026038 R14: 00007f76e7025fa0 R15: 00007ffdfe30eec8 [ 1939.966948][ T1701] [ 1940.152413][ T1688] chnl_net:caif_netlink_parms(): no params data found [ 1940.573612][ T745] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.766255][T21587] Bluetooth: hci1: command tx timeout [ 1942.344388][ T745] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.193062][ T745] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.397113][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.427489][ T1688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.456492][ T1688] bridge_slave_0: entered allmulticast mode [ 1943.499023][ T1688] bridge_slave_0: entered promiscuous mode [ 1943.537455][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1943.580523][ T1688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.587914][ T1688] bridge_slave_1: entered allmulticast mode [ 1943.646818][ T1688] bridge_slave_1: entered promiscuous mode [ 1943.913396][ T1688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1944.025623][ T1688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1944.225275][ T5783] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1944.233943][T21587] Bluetooth: hci1: command tx timeout [ 1944.305235][ T1688] team0: Port device team_slave_0 added [ 1944.383772][ T1688] team0: Port device team_slave_1 added [ 1944.510279][ T5783] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 1944.560224][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.568296][ T5783] usb 4-1: Product: syz [ 1944.639404][ T745] tipc: Left network mode [ 1944.667842][ T1688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1944.687931][ T5783] usb 4-1: Manufacturer: syz [ 1944.730298][ T1688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1944.767222][ T5783] usb 4-1: SerialNumber: syz [ 1944.917742][ T1688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1944.992535][ T1688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1945.024791][ T5783] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1945.063754][ T1688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1945.110961][ T5783] usb 4-1: USB disconnect, device number 35 [ 1945.288046][ T1688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1945.564192][ T1754] loop9: detected capacity change from 0 to 128 [ 1945.610341][ T5783] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1945.677776][ T1754] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1945.833782][ T5783] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 1945.881072][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.949092][ T5783] usb 4-1: Product: syz [ 1945.982703][ T5783] usb 4-1: Manufacturer: syz [ 1945.987441][ T5783] usb 4-1: SerialNumber: syz [ 1946.195966][ T1760] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1946.308195][T21587] Bluetooth: hci1: command tx timeout [ 1946.457245][ T5783] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1946.578706][ T1688] hsr_slave_0: entered promiscuous mode [ 1946.666588][ T1688] hsr_slave_1: entered promiscuous mode [ 1946.719638][ T1688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1946.791075][ T1688] Cannot create hsr debugfs directory [ 1946.886682][ T5783] usb 4-1: USB disconnect, device number 36 [ 1950.462733][T21587] Bluetooth: hci2: command 0x0406 tx timeout [ 1951.045485][ T1790] input: syz0 as /devices/virtual/input/input121 [ 1953.144021][ T1798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.316117][ T745] hsr_slave_0: left promiscuous mode [ 1954.460636][ T745] hsr_slave_1: left promiscuous mode [ 1954.691175][ T745] veth1_macvtap: left promiscuous mode [ 1954.696765][ T745] veth0_macvtap: left promiscuous mode [ 1954.745096][ T1830] loop9: detected capacity change from 0 to 512 [ 1954.762275][ T745] veth1_vlan: left promiscuous mode [ 1954.767771][ T745] veth0_vlan: left promiscuous mode [ 1954.888822][ T1830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1955.006309][ T1830] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1955.304797][T27909] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1955.600728][ T1839] loop9: detected capacity change from 0 to 128 [ 1955.677769][ T1839] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1955.766604][ T1839] ext4 filesystem being mounted at /435/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1955.849554][ T1839] syz.9.8384 (pid 1839) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1955.990686][ T5761] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1956.192875][ T5761] usb 4-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 1956.282200][ T5761] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1956.293229][ T1839] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1956.333819][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.373811][ T5761] usb 4-1: Product: syz [ 1956.406662][ T5761] usb 4-1: Manufacturer: syz [ 1956.418419][ T5761] usb 4-1: SerialNumber: syz [ 1956.485116][T27909] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1956.686613][ T745] bond1 (unregistering): Released all slaves [ 1956.694214][ T5761] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1956.723439][ T5761] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1956.762168][ T5761] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1956.824990][ T5761] usb 4-1: 2:1: cannot set freq 16122032 to ep 0x82 [ 1956.969038][ T1856] loop9: detected capacity change from 0 to 2048 [ 1957.032954][ T5761] usb 4-1: USB disconnect, device number 37 [ 1957.119313][ T1856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1957.342887][ T1858] udevd[1858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1964.939233][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 1964.939246][ T28] audit: type=1326 audit(1700008487.349:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1965.110129][ T28] audit: type=1326 audit(1700008487.349:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1965.244421][ T28] audit: type=1326 audit(1700008487.349:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1965.278865][ T1890] loop9: detected capacity change from 0 to 2048 [ 1965.403156][ T28] audit: type=1326 audit(1700008487.349:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1965.495351][ T1890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1965.590055][ T28] audit: type=1326 audit(1700008487.349:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1965.708790][ T28] audit: type=1326 audit(1700008487.399:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1965.772299][ T6621] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1965.862947][ T28] audit: type=1326 audit(1700008487.399:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1965.888009][ T6621] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 1965.939502][ T6621] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1965.939502][ T6621] [ 1965.970355][ T6621] EXT4-fs (loop9): Total free blocks count 0 [ 1965.976432][ T6621] EXT4-fs (loop9): Free/Dirty block details [ 1965.983240][ T28] audit: type=1326 audit(1700008487.419:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1966.046374][ T6621] EXT4-fs (loop9): free_blocks=66060288 [ 1966.091187][ T6621] EXT4-fs (loop9): dirty_blocks=32 [ 1966.096365][ T6621] EXT4-fs (loop9): Block reservation details [ 1966.111938][ T28] audit: type=1326 audit(1700008487.419:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1966.158671][ T6621] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 1966.192260][ T6621] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 1966.252217][ T28] audit: type=1326 audit(1700008487.419:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1887 comm="syz.9.8398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f0b60f9e159 code=0x7ffc0000 [ 1970.402178][ T745] bond0 (unregistering): Released all slaves [ 1976.388701][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.396698][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.872058][ T1688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1978.031144][ T1688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1978.110068][ T1688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1978.158747][ T1688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1978.747063][ T1688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1978.898940][ T1688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1979.025607][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.032847][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1979.247181][T22779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.254424][T22779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1979.460375][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1979.552050][ T1688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1979.681336][ T9] usb 4-1: config 1 has an invalid interface number: 253 but max is 0 [ 1979.737889][ T9] usb 4-1: config 1 has no interface number 0 [ 1979.780489][ T9] usb 4-1: config 1 interface 253 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1980.924759][ T9] usb 4-1: config 1 interface 253 has no altsetting 0 [ 1981.271831][ T1972] xt_TCPMSS: Only works on TCP SYN packets [ 1981.280697][ T9] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice= b.a3 [ 1981.370015][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.448340][ T9] usb-storage 4-1:1.253: USB Mass Storage device detected [ 1981.562250][ T9] usb-storage 4-1:1.253: device ignored [ 1981.756248][ T9] usb 4-1: USB disconnect, device number 38 [ 1981.765993][ T1984] loop9: detected capacity change from 0 to 128 [ 1981.869615][ T1984] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1981.971838][ T1984] ext4 filesystem being mounted at /451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1982.109818][ T1688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1982.383441][ T1688] veth0_vlan: entered promiscuous mode [ 1982.454701][T27909] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1982.483691][ T1688] veth1_vlan: entered promiscuous mode [ 1982.692343][ T1688] veth0_macvtap: entered promiscuous mode [ 1982.806122][ T1688] veth1_macvtap: entered promiscuous mode [ 1982.916305][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1983.028851][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1983.084825][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1983.145978][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1983.187584][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1983.226890][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1983.279254][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1983.319787][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1983.415556][ T1688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1983.538619][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1983.630741][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1983.714391][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1983.744546][ T2010] loop9: detected capacity change from 0 to 512 [ 1985.129609][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.171877][ T2010] EXT4-fs error (device loop9): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1985.205044][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1985.370019][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.383088][ T2010] EXT4-fs error (device loop9): ext4_do_update_inode:5268: inode #11: comm syz.9.8426: corrupted inode contents [ 1985.430161][ T1688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1985.480909][ T2010] EXT4-fs error (device loop9): ext4_dirty_inode:6166: inode #11: comm syz.9.8426: mark_inode_dirty error [ 1985.497641][ T1688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.544407][ T2010] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.8426: invalid indirect mapped block 1 (level 1) [ 1985.559318][ T1688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1985.651586][ T2010] EXT4-fs error (device loop9): ext4_do_update_inode:5268: inode #11: comm syz.9.8426: corrupted inode contents [ 1985.707321][ T1688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.761028][ T2010] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1985.816467][ T1688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.874492][ T2010] EXT4-fs error (device loop9): ext4_do_update_inode:5268: inode #11: comm syz.9.8426: corrupted inode contents [ 1985.900437][ T1688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.909414][ T1688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.960419][ T2010] EXT4-fs error (device loop9): ext4_truncate:4314: inode #11: comm syz.9.8426: mark_inode_dirty error [ 1986.060266][T21587] Bluetooth: min 2048 > max 8 [ 1986.071055][ T2010] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1986.125310][ T2010] EXT4-fs (loop9): 1 truncate cleaned up [ 1986.195359][ T2010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1986.326197][ T2010] EXT4-fs error (device loop9): ext4_find_dest_de:2117: inode #2: block 13: comm syz.9.8426: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1986.431833][ T1771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1986.487164][ T1771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1986.631173][T27909] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1986.650553][ T6621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1986.720582][ T6621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.388324][ T2027] xt_TCPMSS: Only works on TCP SYN packets [ 1988.470802][T21587] Bluetooth: hci3: command 0x0406 tx timeout [ 1991.330428][ T788] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1991.620303][ T788] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1991.693896][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1991.775806][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1991.854008][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1991.959977][ T788] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1992.034927][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.087590][ T788] usb 2-1: config 0 descriptor?? [ 1992.573231][ T788] holtek_kbd 0003:04D9:A055.000B: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 1994.057308][ T788] usb 2-1: USB disconnect, device number 4 [ 1994.475004][ T2070] fido_id[2070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2037.829026][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.835636][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2060.410710][ T1766] Bluetooth: hci1: command 0x0406 tx timeout [ 2099.272446][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.278893][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.709224][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.720043][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.149523][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.156199][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.599369][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.606561][ T1290] ieee802154 phy1 wpan1: encryption failed: -22