last executing test programs: 7m41.948748139s ago: executing program 0 (id=241): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x109882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'sit0\x00', 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) 7m41.720497285s ago: executing program 0 (id=243): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone3(&(0x7f0000000140)={0x104901400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) waitid(0x2, r0, 0x0, 0x6, 0x0) 7m40.440319404s ago: executing program 0 (id=245): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r1, &(0x7f0000000240)=""/43, 0x2b) getdents(r1, 0x0, 0xbb) 7m40.148015791s ago: executing program 0 (id=248): socket(0x400000000010, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 7m38.975050789s ago: executing program 0 (id=251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=@newsa={0x158, 0x10, 0x1, 0x0, 0xfffffffd, {{@in=@private=0xa010101, @in6=@empty, 0x4000, 0x0, 0x0, 0x6}, {@in=@broadcast, 0x80000000, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x400}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x19}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x158}}, 0x0) 7m38.343855633s ago: executing program 0 (id=255): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x0, 0x87e, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x0, 0xffffffb8], [0x101, 0x0, 0x1, 0xb1e5], [0x20000000000008, 0xffffffffffffffff, 0xfffffffffffffffe, 0xc]}) 7m37.962685242s ago: executing program 32 (id=255): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x0, 0x87e, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x0, 0xffffffb8], [0x101, 0x0, 0x1, 0xb1e5], [0x20000000000008, 0xffffffffffffffff, 0xfffffffffffffffe, 0xc]}) 10.886400169s ago: executing program 2 (id=1921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xa, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x20004, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0xeeee8000, 0x7b652}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.792374353s ago: executing program 2 (id=1927): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xa4ffd48ba98ae73c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0xfffffffffffffffe, r2, {0x7, 0x5, 0x0, {0x4, 0xffffffffffffffff, 0x7, 0x4, 0x7ff, 0x2, 0x6, 0x3b2f, 0x5, 0x1000, 0x10, r3, 0x0, 0x3, 0x3}}}, 0x78) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x6000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) fsync(r5) 6.696221075s ago: executing program 1 (id=1933): io_setup(0x6, 0x0) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 6.161697947s ago: executing program 2 (id=1935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xa, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x20004, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0xeeee8000, 0x7b652}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.830327505s ago: executing program 1 (id=1936): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) 5.716309188s ago: executing program 1 (id=1937): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x20000000000003, 0x1004}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r7, &(0x7f0000000280)='2', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2b, 0x801, 0x0) 4.840747798s ago: executing program 3 (id=1938): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f00000000c0)='binder\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180), 0x208002, &(0x7f0000000440)={'trans=unix,', {[{@directio}, {@debug={'debug', 0x3d, 0x10001}}], [{@uid_eq}]}}) 4.792361439s ago: executing program 2 (id=1939): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x2b}], 0x1, 0x62, 0xfd4c) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r5, &(0x7f00000000c0)='./mnt\x00', r5, &(0x7f0000000100)='./mnt\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}], 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB], 0x2c}}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) accept4(r1, 0x0, 0x0, 0x80800) 4.406989138s ago: executing program 3 (id=1941): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) 4.366519299s ago: executing program 1 (id=1942): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="f802", 0x2) 3.268291354s ago: executing program 1 (id=1944): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xa4ffd48ba98ae73c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0xfffffffffffffffe, r2, {0x7, 0x5, 0x0, {0x4, 0xffffffffffffffff, 0x7, 0x4, 0x7ff, 0x2, 0x6, 0x3b2f, 0x5, 0x1000, 0x10, r3, 0x0, 0x3, 0x3}}}, 0x78) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, 0x0, 0x0) 3.209629026s ago: executing program 4 (id=1945): io_setup(0x6, 0x0) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 3.170191996s ago: executing program 3 (id=1946): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x1, 0x60bd25, 0x7, {0x0, 0x0, 0x0, 0x0, 0x8013, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x2000000c}, 0x20004010) 3.154066367s ago: executing program 2 (id=1947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xa, &(0x7f0000000240), 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x20004, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0xeeee8000, 0x7b652}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.106670648s ago: executing program 4 (id=1948): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400010000008000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000004000"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0xffffffffffffffbd) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0xa, 0x2400000001, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x3, 0x1, 0x6, 0x0, 0x2}}) getrlimit(0xc, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x7f}, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc0) 2.719178797s ago: executing program 4 (id=1949): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f00000000c0)='binder\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180), 0x208002, &(0x7f0000000440)={'trans=unix,', {[{@directio}, {@debug={'debug', 0x3d, 0x10001}}], [{@uid_eq}]}}) 2.632321559s ago: executing program 3 (id=1950): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x20000000000003, 0x1004}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r7, &(0x7f0000000280)='2', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2b, 0x801, 0x0) 2.246913258s ago: executing program 2 (id=1951): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.995408064s ago: executing program 4 (id=1952): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.441321777s ago: executing program 3 (id=1953): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) close(0x3) 757.253343ms ago: executing program 4 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0xf0, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}, @TCA_FLOWER_KEY_IP_PROTO={0x5}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x0, 0x1b, @local}]}}, @filter_kind_options=@f_fw={{0x7}, {0x6c}}, @TCA_RATE={0x6, 0x5, {0x9, 0xff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 651.015975ms ago: executing program 4 (id=1955): syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 87.873918ms ago: executing program 3 (id=1956): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 0s ago: executing program 1 (id=1957): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): se_sys_futex+0x3a9/0x440 [ 317.392269][ T9056] ? __x64_sys_futex+0xf0/0xf0 [ 317.397062][ T9056] ? __x64_sys_futex+0x21/0xf0 [ 317.401856][ T9056] do_syscall_64+0x55/0xb0 [ 317.406298][ T9056] ? clear_bhb_loop+0x40/0x90 [ 317.411029][ T9056] ? clear_bhb_loop+0x40/0x90 [ 317.415731][ T9056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.421655][ T9056] RIP: 0033:0x7fc72fb9e159 [ 317.426087][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.445727][ T9056] RSP: 002b:00007fc7309d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 317.454171][ T9056] RAX: ffffffffffffffda RBX: 00007fc72fe26098 RCX: 00007fc72fb9e159 [ 317.462164][ T9056] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc72fe26098 [ 317.470152][ T9056] RBP: 00007fc72fe26090 R08: 0000000000000000 R09: 0000000000000000 [ 317.478147][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.486141][ T9056] R13: 00007fc72fe26128 R14: 00007ffcce22c460 R15: 00007ffcce22c548 [ 317.494159][ T9056] [ 317.497232][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.610631][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.623020][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.090210][ T5813] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 318.300828][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 319.120033][ T5813] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.171206][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.181740][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.192493][ T5813] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.205963][ T5813] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.215397][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.468894][ T5813] usb 5-1: GET_CAPABILITIES returned 0 [ 320.376240][ T5813] usbtmc 5-1:16.0: can't read capabilities [ 320.605237][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 320.880824][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 320.904326][ T5813] usb 5-1: USB disconnect, device number 8 [ 320.912609][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 320.970831][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 321.019815][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.059117][ T8] usb 3-1: Product: syz [ 321.113939][ T8] usb 3-1: Manufacturer: syz [ 321.169377][ T8] usb 3-1: SerialNumber: syz [ 321.309955][ T8] usb 3-1: config 0 descriptor?? [ 321.483220][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 321.573062][ T8] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 322.006453][ T9107] FAULT_INJECTION: forcing a failure. [ 322.006453][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 322.020550][ T9107] CPU: 1 PID: 9107 Comm: syz.3.1007 Not tainted syzkaller #0 [ 322.027988][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.038084][ T9107] Call Trace: [ 322.041396][ T9107] [ 322.044367][ T9107] dump_stack_lvl+0x18c/0x250 [ 322.049123][ T9107] ? show_regs_print_info+0x20/0x20 [ 322.054381][ T9107] ? load_image+0x420/0x420 [ 322.058902][ T9107] ? __might_sleep+0xe0/0xe0 [ 322.063531][ T9107] ? __lock_acquire+0x7d80/0x7d80 [ 322.068581][ T9107] should_fail_ex+0x394/0x4c0 [ 322.073271][ T9107] should_failslab+0x9/0x20 [ 322.077815][ T9107] slab_pre_alloc_hook+0x59/0x300 [ 322.082884][ T9107] ? kasan_set_track+0x5f/0x70 [ 322.087686][ T9107] ? v9fs_session_init+0xb5/0x1960 [ 322.092837][ T9107] ? v9fs_session_init+0xb5/0x1960 [ 322.097996][ T9107] __kmem_cache_alloc_node+0x53/0x250 [ 322.103586][ T9107] ? kasan_set_track+0x5f/0x70 [ 322.108391][ T9107] ? v9fs_session_init+0xb5/0x1960 [ 322.113538][ T9107] __kmalloc_node_track_caller+0xa4/0x230 [ 322.119306][ T9107] kstrdup+0x3b/0x80 [ 322.123259][ T9107] v9fs_session_init+0xb5/0x1960 [ 322.128245][ T9107] ? v9fs_show_options+0x700/0x700 [ 322.133394][ T9107] v9fs_mount+0xd0/0xb40 [ 322.137648][ T9107] ? kfree+0x31/0x1a0 [ 322.141644][ T9107] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 322.147454][ T9107] ? vfs_parse_fs_param+0x420/0x420 [ 322.152673][ T9107] legacy_get_tree+0xea/0x180 [ 322.157361][ T9107] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 322.163177][ T9107] vfs_get_tree+0x8c/0x280 [ 322.167610][ T9107] do_new_mount+0x24a/0xa40 [ 322.172123][ T9107] __se_sys_mount+0x2e7/0x3d0 [ 322.176815][ T9107] ? __x64_sys_mount+0xc0/0xc0 [ 322.181590][ T9107] ? lockdep_hardirqs_on+0x98/0x150 [ 322.186825][ T9107] ? __x64_sys_mount+0x20/0xc0 [ 322.191602][ T9107] do_syscall_64+0x55/0xb0 [ 322.196052][ T9107] ? clear_bhb_loop+0x40/0x90 [ 322.200766][ T9107] ? clear_bhb_loop+0x40/0x90 [ 322.205535][ T9107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.211437][ T9107] RIP: 0033:0x7fdfc099e159 [ 322.215857][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.235820][ T9107] RSP: 002b:00007fdfbebf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.244240][ T9107] RAX: ffffffffffffffda RBX: 00007fdfc0c25fa0 RCX: 00007fdfc099e159 [ 322.252229][ T9107] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 322.260203][ T9107] RBP: 00007fdfc0a35024 R08: 0000200000000440 R09: 0000000000000000 [ 322.268177][ T9107] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 322.276153][ T9107] R13: 00007fdfc0c26038 R14: 00007fdfc0c25fa0 R15: 00007ffe5f813008 [ 322.284140][ T9107] [ 322.287302][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.320739][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 322.484085][ T9109] sctp_transport_update_pmtu: 47 callbacks suppressed [ 322.484115][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.503444][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.515045][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.526828][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.544260][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.556690][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.568588][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.580375][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.592245][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.605070][ T9109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 323.782978][ T8] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 323.845547][ T8] em28xx 3-1:0.0: board has no eeprom [ 324.240151][ T8] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 324.248176][ T8] em28xx 3-1:0.0: dvb set to bulk mode. [ 324.638175][ T5841] em28xx 3-1:0.0: Binding DVB extension [ 324.651558][ T8] usb 3-1: USB disconnect, device number 12 [ 324.658497][ T8] em28xx 3-1:0.0: Disconnecting em28xx [ 324.716367][ T5841] em28xx 3-1:0.0: Registering input extension [ 324.732567][ T8] em28xx 3-1:0.0: Closing input extension [ 324.803011][ T8] em28xx 3-1:0.0: Freeing device [ 324.910717][ T5817] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 325.200313][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 325.283479][ T5817] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.358271][ T9135] overlayfs: failed to resolve 'lower1': -2 [ 325.398150][ T5817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.484429][ T5817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.554020][ T5817] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.645318][ T5817] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.675680][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.936643][ T5817] usb 4-1: GET_CAPABILITIES returned 0 [ 325.975470][ T5817] usbtmc 4-1:16.0: can't read capabilities [ 326.499194][ T5817] usb 4-1: USB disconnect, device number 14 [ 327.192188][ T5817] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 327.470626][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 327.533233][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 327.689520][ T5817] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 327.812827][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.927869][ T5817] usb 5-1: Product: syz [ 327.960764][ T5817] usb 5-1: Manufacturer: syz [ 327.987076][ T5817] usb 5-1: SerialNumber: syz [ 328.046805][ T5817] usb 5-1: config 0 descriptor?? [ 329.585441][ T5817] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 330.960132][ T5817] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 331.233914][ T9184] FAULT_INJECTION: forcing a failure. [ 331.233914][ T9184] name fail_futex, interval 1, probability 0, space 0, times 0 [ 331.265156][ T9184] CPU: 0 PID: 9184 Comm: syz.2.1032 Not tainted syzkaller #0 [ 331.267153][ T5817] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 331.272576][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.272595][ T9184] Call Trace: [ 331.272603][ T9184] [ 331.272612][ T9184] dump_stack_lvl+0x18c/0x250 [ 331.272643][ T9184] ? show_regs_print_info+0x20/0x20 [ 331.272666][ T9184] ? load_image+0x420/0x420 [ 331.272692][ T9184] ? plist_add+0x3db/0x490 [ 331.272722][ T9184] should_fail_ex+0x394/0x4c0 [ 331.272754][ T9184] get_futex_key+0x136/0x1030 [ 331.272773][ T9184] ? __fget_files+0x28/0x460 [ 331.272802][ T9184] ? futex_wait+0x4a7/0x5c0 [ 331.272828][ T9184] ? futex_setup_timer+0xc0/0xc0 [ 331.272855][ T9184] futex_wake+0x127/0x4f0 [ 331.272882][ T9184] ? futex_wake_mark+0x150/0x150 [ 331.272902][ T9184] ? __se_sys_io_uring_enter+0x1ffe/0x2510 [ 331.272937][ T9184] ? file_end_write+0x159/0x250 [ 331.272965][ T9184] ? vfs_write+0x5de/0x9a0 [ 331.272990][ T9184] do_futex+0x35d/0x3e0 [ 331.273013][ T9184] ? __ia32_sys_get_robust_list+0x110/0x110 [ 331.371605][ T9184] __se_sys_futex+0x3a9/0x440 [ 331.376321][ T9184] ? __x64_sys_futex+0xf0/0xf0 [ 331.381105][ T9184] ? __x64_sys_futex+0x21/0xf0 [ 331.385878][ T9184] do_syscall_64+0x55/0xb0 [ 331.390298][ T9184] ? clear_bhb_loop+0x40/0x90 [ 331.395322][ T9184] ? clear_bhb_loop+0x40/0x90 [ 331.400001][ T9184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.405923][ T9184] RIP: 0033:0x7fc72fb9e159 [ 331.410359][ T9184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.429972][ T9184] RSP: 002b:00007fc7309d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 331.438388][ T9184] RAX: ffffffffffffffda RBX: 00007fc72fe26098 RCX: 00007fc72fb9e159 [ 331.446359][ T9184] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc72fe2609c [ 331.454333][ T9184] RBP: 00007fc72fe26090 R08: 0000000000745b1d R09: 0000000000000000 [ 331.462304][ T9184] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 331.470275][ T9184] R13: 00007fc72fe26128 R14: 00007ffcce22c460 R15: 00007ffcce22c548 [ 331.478257][ T9184] [ 331.676041][ T5817] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 331.736679][ T5817] em28xx 5-1:0.0: board has no eeprom [ 332.560172][ T5817] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 332.568212][ T5817] em28xx 5-1:0.0: dvb set to bulk mode. [ 332.575558][ T5813] em28xx 5-1:0.0: Binding DVB extension [ 332.586276][ T5817] usb 5-1: USB disconnect, device number 9 [ 332.594630][ T5817] em28xx 5-1:0.0: Disconnecting em28xx [ 332.668848][ T5813] em28xx 5-1:0.0: Registering input extension [ 332.680731][ T5817] em28xx 5-1:0.0: Closing input extension [ 332.732136][ T5817] em28xx 5-1:0.0: Freeing device [ 332.900192][ T7299] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 333.090403][ T7299] usb 2-1: Using ep0 maxpacket: 16 [ 333.097045][ T7299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 333.109663][ T7299] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 333.121338][ T7299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.129381][ T7299] usb 2-1: Product: syz [ 333.134101][ T7299] usb 2-1: Manufacturer: syz [ 333.138723][ T7299] usb 2-1: SerialNumber: syz [ 333.145732][ T7299] usb 2-1: config 0 descriptor?? [ 333.153562][ T7299] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 333.162881][ T7299] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 333.730205][ T9228] FAULT_INJECTION: forcing a failure. [ 333.730205][ T9228] name fail_futex, interval 1, probability 0, space 0, times 0 [ 333.748725][ T9228] CPU: 0 PID: 9228 Comm: syz.4.1046 Not tainted syzkaller #0 [ 333.756160][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.766243][ T9228] Call Trace: [ 333.769528][ T9228] [ 333.771815][ T7299] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 333.772459][ T9228] dump_stack_lvl+0x18c/0x250 [ 333.783119][ T9228] ? show_regs_print_info+0x20/0x20 [ 333.788308][ T9228] ? load_image+0x420/0x420 [ 333.792820][ T9228] ? plist_add+0x3db/0x490 [ 333.797231][ T9228] should_fail_ex+0x394/0x4c0 [ 333.801926][ T9228] get_futex_key+0x136/0x1030 [ 333.806619][ T9228] ? __fget_files+0x28/0x460 [ 333.811229][ T9228] ? futex_wait+0x4a7/0x5c0 [ 333.815737][ T9228] ? futex_setup_timer+0xc0/0xc0 [ 333.820682][ T9228] futex_wake+0x127/0x4f0 [ 333.825036][ T9228] ? futex_wake_mark+0x150/0x150 [ 333.829974][ T9228] ? __se_sys_io_uring_enter+0x1ffe/0x2510 [ 333.835794][ T9228] ? file_end_write+0x159/0x250 [ 333.840676][ T9228] ? vfs_write+0x5de/0x9a0 [ 333.845095][ T9228] do_futex+0x35d/0x3e0 [ 333.849258][ T9228] ? __ia32_sys_get_robust_list+0x110/0x110 [ 333.855246][ T9228] __se_sys_futex+0x3a9/0x440 [ 333.859928][ T9228] ? __x64_sys_futex+0xf0/0xf0 [ 333.864699][ T9228] ? __x64_sys_futex+0x21/0xf0 [ 333.869463][ T9228] do_syscall_64+0x55/0xb0 [ 333.873883][ T9228] ? clear_bhb_loop+0x40/0x90 [ 333.878557][ T9228] ? clear_bhb_loop+0x40/0x90 [ 333.883240][ T9228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.889143][ T9228] RIP: 0033:0x7f89da39e159 [ 333.893562][ T9228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.913182][ T9228] RSP: 002b:00007f89db22d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 333.921602][ T9228] RAX: ffffffffffffffda RBX: 00007f89da626098 RCX: 00007f89da39e159 [ 333.929573][ T9228] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f89da62609c [ 333.937560][ T9228] RBP: 00007f89da626090 R08: 0000000000745b1d R09: 0000000000000000 [ 333.945581][ T9228] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 333.953562][ T9228] R13: 00007f89da626128 R14: 00007ffc5ed37830 R15: 00007ffc5ed37918 [ 333.961557][ T9228] [ 334.189135][ T7299] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 334.198076][ T7299] em28xx 2-1:0.0: board has no eeprom [ 334.580159][ T7299] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 334.588097][ T7299] em28xx 2-1:0.0: dvb set to bulk mode. [ 334.606239][ T5817] em28xx 2-1:0.0: Binding DVB extension [ 334.613450][ T9238] FAULT_INJECTION: forcing a failure. [ 334.613450][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 334.634573][ T9238] CPU: 0 PID: 9238 Comm: syz.4.1050 Not tainted syzkaller #0 [ 334.642007][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.652100][ T9238] Call Trace: [ 334.655414][ T9238] [ 334.658366][ T9238] dump_stack_lvl+0x18c/0x250 [ 334.663090][ T9238] ? show_regs_print_info+0x20/0x20 [ 334.668326][ T9238] ? load_image+0x420/0x420 [ 334.672867][ T9238] ? __might_sleep+0xe0/0xe0 [ 334.677499][ T9238] ? __lock_acquire+0x7d80/0x7d80 [ 334.682568][ T9238] should_fail_ex+0x394/0x4c0 [ 334.687288][ T9238] should_failslab+0x9/0x20 [ 334.691833][ T9238] slab_pre_alloc_hook+0x59/0x300 [ 334.696905][ T9238] kmem_cache_alloc+0x5a/0x2c0 [ 334.701723][ T9238] ? dup_fd+0x56/0xa20 [ 334.705833][ T9238] dup_fd+0x56/0xa20 [ 334.709762][ T9238] ? __ia32_sys_get_robust_list+0x110/0x110 [ 334.715690][ T9238] __close_range+0x19d/0x690 [ 334.720324][ T9238] ? pick_file+0x1e0/0x1e0 [ 334.724781][ T9238] __x64_sys_close_range+0x7a/0x90 [ 334.729934][ T9238] do_syscall_64+0x55/0xb0 [ 334.734380][ T9238] ? clear_bhb_loop+0x40/0x90 [ 334.739091][ T9238] ? clear_bhb_loop+0x40/0x90 [ 334.743792][ T9238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.749713][ T9238] RIP: 0033:0x7f89da39e159 [ 334.754152][ T9238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.773790][ T9238] RSP: 002b:00007f89db24e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 334.782243][ T9238] RAX: ffffffffffffffda RBX: 00007f89da625fa0 RCX: 00007f89da39e159 [ 334.790243][ T9238] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 334.798246][ T9238] RBP: 00007f89da435024 R08: 0000000000000000 R09: 0000000000000000 [ 334.806240][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.814235][ T9238] R13: 00007f89da626038 R14: 00007f89da625fa0 R15: 00007ffc5ed37918 [ 334.822245][ T9238] [ 335.500662][ T9207] em28xx 2-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 335.850924][ T8] usb 2-1: USB disconnect, device number 12 [ 335.857967][ T8] em28xx 2-1:0.0: Disconnecting em28xx [ 335.923125][ T5817] em28xx 2-1:0.0: Registering input extension [ 335.940148][ T8] em28xx 2-1:0.0: Closing input extension [ 335.982414][ T8] em28xx 2-1:0.0: Freeing device [ 338.878626][ T9269] FAULT_INJECTION: forcing a failure. [ 338.878626][ T9269] name failslab, interval 1, probability 0, space 0, times 0 [ 338.881435][ T9272] FAULT_INJECTION: forcing a failure. [ 338.881435][ T9272] name fail_futex, interval 1, probability 0, space 0, times 0 [ 338.904608][ T9272] CPU: 0 PID: 9272 Comm: syz.3.1058 Not tainted syzkaller #0 [ 338.912039][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.922122][ T9272] Call Trace: [ 338.925432][ T9272] [ 338.928388][ T9272] dump_stack_lvl+0x18c/0x250 [ 338.933103][ T9272] ? show_regs_print_info+0x20/0x20 [ 338.938339][ T9272] ? load_image+0x420/0x420 [ 338.942871][ T9272] ? plist_add+0x3db/0x490 [ 338.947386][ T9272] should_fail_ex+0x394/0x4c0 [ 338.952073][ T9272] get_futex_key+0x136/0x1030 [ 338.956745][ T9272] ? __fget_files+0x28/0x460 [ 338.961343][ T9272] ? futex_wait+0x4a7/0x5c0 [ 338.965860][ T9272] ? futex_setup_timer+0xc0/0xc0 [ 338.970803][ T9272] futex_wake+0x127/0x4f0 [ 338.975140][ T9272] ? futex_wake_mark+0x150/0x150 [ 338.980076][ T9272] ? __se_sys_io_uring_enter+0x1ffe/0x2510 [ 338.985892][ T9272] ? file_end_write+0x159/0x250 [ 338.990782][ T9272] ? vfs_write+0x5de/0x9a0 [ 338.995248][ T9272] do_futex+0x35d/0x3e0 [ 338.999415][ T9272] ? __ia32_sys_get_robust_list+0x110/0x110 [ 339.005323][ T9272] __se_sys_futex+0x3a9/0x440 [ 339.010031][ T9272] ? __x64_sys_futex+0xf0/0xf0 [ 339.014808][ T9272] ? __x64_sys_futex+0x21/0xf0 [ 339.019577][ T9272] do_syscall_64+0x55/0xb0 [ 339.024043][ T9272] ? clear_bhb_loop+0x40/0x90 [ 339.028722][ T9272] ? clear_bhb_loop+0x40/0x90 [ 339.033401][ T9272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.039296][ T9272] RIP: 0033:0x7fdfc099e159 [ 339.043712][ T9272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.063330][ T9272] RSP: 002b:00007fdfbebd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.071754][ T9272] RAX: ffffffffffffffda RBX: 00007fdfc0c26098 RCX: 00007fdfc099e159 [ 339.079723][ T9272] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdfc0c2609c [ 339.087697][ T9272] RBP: 00007fdfc0c26090 R08: 0000000000745b1d R09: 0000000000000000 [ 339.095671][ T9272] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 339.103648][ T9272] R13: 00007fdfc0c26128 R14: 00007ffe5f812f20 R15: 00007ffe5f813008 [ 339.111657][ T9272] [ 339.122006][ T9269] CPU: 0 PID: 9269 Comm: syz.1.1059 Not tainted syzkaller #0 [ 339.129450][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.139542][ T9269] Call Trace: [ 339.142846][ T9269] [ 339.145810][ T9269] dump_stack_lvl+0x18c/0x250 [ 339.150543][ T9269] ? show_regs_print_info+0x20/0x20 [ 339.155762][ T9269] ? load_image+0x420/0x420 [ 339.160268][ T9269] ? __might_sleep+0xe0/0xe0 [ 339.164868][ T9269] ? __lock_acquire+0x7d80/0x7d80 [ 339.169902][ T9269] should_fail_ex+0x394/0x4c0 [ 339.174596][ T9269] should_failslab+0x9/0x20 [ 339.179107][ T9269] slab_pre_alloc_hook+0x59/0x300 [ 339.184151][ T9269] kmem_cache_alloc+0x5a/0x2c0 [ 339.188935][ T9269] ? dup_fd+0x56/0xa20 [ 339.193015][ T9269] dup_fd+0x56/0xa20 [ 339.196920][ T9269] ? __ia32_sys_get_robust_list+0x110/0x110 [ 339.202823][ T9269] __close_range+0x19d/0x690 [ 339.207420][ T9269] ? pick_file+0x1e0/0x1e0 [ 339.211846][ T9269] __x64_sys_close_range+0x7a/0x90 [ 339.216968][ T9269] do_syscall_64+0x55/0xb0 [ 339.221394][ T9269] ? clear_bhb_loop+0x40/0x90 [ 339.226079][ T9269] ? clear_bhb_loop+0x40/0x90 [ 339.230756][ T9269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.236650][ T9269] RIP: 0033:0x7f631b19e159 [ 339.241086][ T9269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.260810][ T9269] RSP: 002b:00007f631bff9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 339.269250][ T9269] RAX: ffffffffffffffda RBX: 00007f631b425fa0 RCX: 00007f631b19e159 [ 339.277233][ T9269] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 339.285209][ T9269] RBP: 00007f631b235024 R08: 0000000000000000 R09: 0000000000000000 [ 339.293180][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.301171][ T9269] R13: 00007f631b426038 R14: 00007f631b425fa0 R15: 00007ffd2e034c68 [ 339.309157][ T9269] [ 340.660202][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 340.840242][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 342.265193][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 342.288147][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 342.297904][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.307636][ T8] usb 3-1: Product: syz [ 342.312201][ T8] usb 3-1: Manufacturer: syz [ 342.322507][ T8] usb 3-1: SerialNumber: syz [ 342.586441][ T8] usb 3-1: config 0 descriptor?? [ 342.608844][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 342.618605][ T8] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 343.177818][ T9303] FAULT_INJECTION: forcing a failure. [ 343.177818][ T9303] name failslab, interval 1, probability 0, space 0, times 0 [ 343.190903][ T9303] CPU: 1 PID: 9303 Comm: syz.4.1070 Not tainted syzkaller #0 [ 343.198310][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.208380][ T9303] Call Trace: [ 343.211691][ T9303] [ 343.214645][ T9303] dump_stack_lvl+0x18c/0x250 [ 343.219369][ T9303] ? show_regs_print_info+0x20/0x20 [ 343.224602][ T9303] ? load_image+0x420/0x420 [ 343.229135][ T9303] ? __might_sleep+0xe0/0xe0 [ 343.233760][ T9303] ? __lock_acquire+0x7d80/0x7d80 [ 343.238819][ T9303] should_fail_ex+0x394/0x4c0 [ 343.243535][ T9303] should_failslab+0x9/0x20 [ 343.248069][ T9303] slab_pre_alloc_hook+0x59/0x300 [ 343.253132][ T9303] ? alloc_fdtable+0xca/0x2c0 [ 343.257846][ T9303] __kmem_cache_alloc_node+0x53/0x250 [ 343.263259][ T9303] ? __lock_acquire+0x7d80/0x7d80 [ 343.268369][ T9303] ? alloc_fdtable+0xca/0x2c0 [ 343.273092][ T9303] kmalloc_trace+0x2a/0xe0 [ 343.277563][ T9303] alloc_fdtable+0xca/0x2c0 [ 343.282155][ T9303] dup_fd+0x747/0xa20 [ 343.286189][ T9303] __close_range+0x19d/0x690 [ 343.290916][ T9303] ? pick_file+0x1e0/0x1e0 [ 343.295519][ T9303] __x64_sys_close_range+0x7a/0x90 [ 343.300688][ T9303] do_syscall_64+0x55/0xb0 [ 343.305151][ T9303] ? clear_bhb_loop+0x40/0x90 [ 343.309878][ T9303] ? clear_bhb_loop+0x40/0x90 [ 343.314593][ T9303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.320530][ T9303] RIP: 0033:0x7f89da39e159 [ 343.324976][ T9303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.345051][ T9303] RSP: 002b:00007f89db24e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 343.353514][ T9303] RAX: ffffffffffffffda RBX: 00007f89da625fa0 RCX: 00007f89da39e159 [ 343.361532][ T9303] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 343.369620][ T9303] RBP: 00007f89da435024 R08: 0000000000000000 R09: 0000000000000000 [ 343.377619][ T9303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.385605][ T9303] R13: 00007f89da626038 R14: 00007f89da625fa0 R15: 00007ffc5ed37918 [ 343.393600][ T9303] [ 343.396816][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.555478][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 344.116486][ T9314] FAULT_INJECTION: forcing a failure. [ 344.116486][ T9314] name fail_futex, interval 1, probability 0, space 0, times 0 [ 344.152098][ T9314] CPU: 1 PID: 9314 Comm: syz.3.1071 Not tainted syzkaller #0 [ 344.159544][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.169622][ T9314] Call Trace: [ 344.172928][ T9314] [ 344.175869][ T9314] dump_stack_lvl+0x18c/0x250 [ 344.180573][ T9314] ? show_regs_print_info+0x20/0x20 [ 344.185791][ T9314] ? load_image+0x420/0x420 [ 344.190338][ T9314] should_fail_ex+0x394/0x4c0 [ 344.195051][ T9314] get_futex_key+0x136/0x1030 [ 344.199769][ T9314] ? futex_setup_timer+0xc0/0xc0 [ 344.204728][ T9314] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 344.210735][ T9314] ? __lock_acquire+0x7d80/0x7d80 [ 344.216053][ T9314] ? preempt_schedule+0xc0/0xd0 [ 344.220932][ T9314] futex_wait_setup+0xbc/0x270 [ 344.225769][ T9314] ? futex_wait_multiple+0x920/0x920 [ 344.231130][ T9314] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 344.237050][ T9314] ? _raw_spin_unlock+0x40/0x40 [ 344.241922][ T9314] futex_wait+0x1bc/0x5c0 [ 344.246280][ T9314] ? futex_wait_setup+0x270/0x270 [ 344.251352][ T9314] ? file_end_write+0x159/0x250 [ 344.256239][ T9314] ? vfs_write+0x5de/0x9a0 [ 344.260685][ T9314] do_futex+0x2ff/0x3e0 [ 344.264912][ T9314] ? __ia32_sys_get_robust_list+0x110/0x110 [ 344.270831][ T9314] __se_sys_futex+0x3a9/0x440 [ 344.275535][ T9314] ? __x64_sys_futex+0xf0/0xf0 [ 344.280319][ T9314] ? __x64_sys_futex+0x21/0xf0 [ 344.285085][ T9314] do_syscall_64+0x55/0xb0 [ 344.289526][ T9314] ? clear_bhb_loop+0x40/0x90 [ 344.294225][ T9314] ? clear_bhb_loop+0x40/0x90 [ 344.298954][ T9314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.304888][ T9314] RIP: 0033:0x7fdfc099e159 [ 344.309323][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.329111][ T9314] RSP: 002b:00007fdfbebd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 344.337564][ T9314] RAX: ffffffffffffffda RBX: 00007fdfc0c26098 RCX: 00007fdfc099e159 [ 344.345552][ T9314] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfc0c26098 [ 344.353546][ T9314] RBP: 00007fdfc0c26090 R08: 0000000000000000 R09: 0000000000000000 [ 344.361534][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.369518][ T9314] R13: 00007fdfc0c26128 R14: 00007ffe5f812f20 R15: 00007ffe5f813008 [ 344.377516][ T9314] [ 344.380608][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.405257][ T8] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 344.422970][ T8] em28xx 3-1:0.0: board has no eeprom [ 344.842864][ T8] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 345.542337][ T8] em28xx 3-1:0.0: dvb set to bulk mode. [ 345.548554][ T9] em28xx 3-1:0.0: Binding DVB extension [ 345.740738][ T9284] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 346.467385][ T7257] usb 3-1: USB disconnect, device number 13 [ 346.491387][ T7257] em28xx 3-1:0.0: Disconnecting em28xx [ 346.517330][ T9] em28xx 3-1:0.0: Registering input extension [ 346.523838][ T7257] em28xx 3-1:0.0: Closing input extension [ 346.537284][ T7257] em28xx 3-1:0.0: Freeing device [ 346.850607][ T9346] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 346.855772][ T9344] MTD: Couldn't look up './dev/mtdblock0': -2 [ 346.898995][ T9346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.278956][ T7302] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 347.717127][ T7302] usb 4-1: Using ep0 maxpacket: 16 [ 347.969876][ T7302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 348.006382][ T7302] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 348.016028][ T7302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.016056][ T7302] usb 4-1: Product: syz [ 348.016073][ T7302] usb 4-1: Manufacturer: syz [ 348.016088][ T7302] usb 4-1: SerialNumber: syz [ 348.047989][ T7302] usb 4-1: config 0 descriptor?? [ 348.078520][ T7302] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 348.088943][ T7302] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 348.728692][ T7302] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 349.295023][ T7302] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 349.354677][ T7302] em28xx 4-1:0.0: board has no eeprom [ 349.753738][ T7302] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 349.807818][ T7302] em28xx 4-1:0.0: dvb set to bulk mode. [ 349.836836][ T5817] em28xx 4-1:0.0: Binding DVB extension [ 349.898200][ T7302] usb 4-1: USB disconnect, device number 15 [ 349.921894][ T7302] em28xx 4-1:0.0: Disconnecting em28xx [ 350.147590][ T5817] em28xx 4-1:0.0: Registering input extension [ 350.184715][ T7302] em28xx 4-1:0.0: Closing input extension [ 350.213245][ T7302] em28xx 4-1:0.0: Freeing device [ 350.304952][ T9375] MTD: Couldn't look up './dev/mtdblock0': -2 [ 350.432847][ T9379] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 350.512650][ T9379] 8021q: adding VLAN 0 to HW filter on device bond6 [ 352.906155][ T9412] FAULT_INJECTION: forcing a failure. [ 352.906155][ T9412] name fail_futex, interval 1, probability 0, space 0, times 0 [ 352.954842][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1106'. [ 352.973144][ T9412] CPU: 0 PID: 9412 Comm: syz.1.1104 Not tainted syzkaller #0 [ 352.980587][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.990672][ T9412] Call Trace: [ 352.993972][ T9412] [ 352.996922][ T9412] dump_stack_lvl+0x18c/0x250 [ 353.001637][ T9412] ? show_regs_print_info+0x20/0x20 [ 353.006880][ T9412] ? load_image+0x420/0x420 [ 353.011423][ T9412] ? plist_add+0x3db/0x490 [ 353.015911][ T9412] should_fail_ex+0x394/0x4c0 [ 353.020635][ T9412] get_futex_key+0x136/0x1030 [ 353.025344][ T9412] ? __fget_files+0x28/0x460 [ 353.029973][ T9412] ? futex_wait+0x4a7/0x5c0 [ 353.034513][ T9412] ? futex_setup_timer+0xc0/0xc0 [ 353.039751][ T9412] futex_wake+0x127/0x4f0 [ 353.044113][ T9412] ? futex_wake_mark+0x150/0x150 [ 353.049078][ T9412] ? __se_sys_io_uring_enter+0x1ffe/0x2510 [ 353.054927][ T9412] ? file_end_write+0x159/0x250 [ 353.059814][ T9412] ? vfs_write+0x5de/0x9a0 [ 353.064274][ T9412] do_futex+0x35d/0x3e0 [ 353.068467][ T9412] ? __ia32_sys_get_robust_list+0x110/0x110 [ 353.074404][ T9412] __se_sys_futex+0x3a9/0x440 [ 353.079120][ T9412] ? __x64_sys_futex+0xf0/0xf0 [ 353.083922][ T9412] ? __x64_sys_futex+0x21/0xf0 [ 353.088725][ T9412] do_syscall_64+0x55/0xb0 [ 353.093181][ T9412] ? clear_bhb_loop+0x40/0x90 [ 353.097885][ T9412] ? clear_bhb_loop+0x40/0x90 [ 353.102593][ T9412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.108519][ T9412] RIP: 0033:0x7f631b19e159 [ 353.112961][ T9412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.132600][ T9412] RSP: 002b:00007f631bfd70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 353.141071][ T9412] RAX: ffffffffffffffda RBX: 00007f631b426098 RCX: 00007f631b19e159 [ 353.149076][ T9412] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f631b42609c [ 353.157081][ T9412] RBP: 00007f631b426090 R08: 0000000000745b1d R09: 0000000000000000 [ 353.165084][ T9412] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 353.173090][ T9412] R13: 00007f631b426128 R14: 00007ffd2e034b80 R15: 00007ffd2e034c68 [ 353.181112][ T9412] [ 353.335734][ T9417] netlink: 'syz.3.1107': attribute type 1 has an invalid length. [ 353.603999][ T9417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 358.237629][ T9453] netlink: 'syz.3.1120': attribute type 1 has an invalid length. [ 358.261899][ T9451] FAULT_INJECTION: forcing a failure. [ 358.261899][ T9451] name fail_futex, interval 1, probability 0, space 0, times 0 [ 358.287714][ T9451] CPU: 0 PID: 9451 Comm: syz.4.1118 Not tainted syzkaller #0 [ 358.295165][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.298018][ T9453] 8021q: adding VLAN 0 to HW filter on device bond7 [ 358.305227][ T9451] Call Trace: [ 358.305239][ T9451] [ 358.305248][ T9451] dump_stack_lvl+0x18c/0x250 [ 358.305279][ T9451] ? show_regs_print_info+0x20/0x20 [ 358.305302][ T9451] ? load_image+0x420/0x420 [ 358.332582][ T9451] ? plist_add+0x3db/0x490 [ 358.337054][ T9451] should_fail_ex+0x394/0x4c0 [ 358.341777][ T9451] get_futex_key+0x136/0x1030 [ 358.346495][ T9451] ? __fget_files+0x28/0x460 [ 358.351135][ T9451] ? futex_wait+0x4a7/0x5c0 [ 358.355680][ T9451] ? futex_setup_timer+0xc0/0xc0 [ 358.360664][ T9451] futex_wake+0x127/0x4f0 [ 358.365036][ T9451] ? futex_wake_mark+0x150/0x150 [ 358.370011][ T9451] ? __se_sys_io_uring_enter+0x1ffe/0x2510 [ 358.375861][ T9451] ? file_end_write+0x159/0x250 [ 358.380755][ T9451] ? vfs_write+0x5de/0x9a0 [ 358.385218][ T9451] do_futex+0x35d/0x3e0 [ 358.389423][ T9451] ? __ia32_sys_get_robust_list+0x110/0x110 [ 358.395369][ T9451] __se_sys_futex+0x3a9/0x440 [ 358.400179][ T9451] ? __x64_sys_futex+0xf0/0xf0 [ 358.404967][ T9451] ? __x64_sys_futex+0x21/0xf0 [ 358.409760][ T9451] do_syscall_64+0x55/0xb0 [ 358.414187][ T9451] ? clear_bhb_loop+0x40/0x90 [ 358.418887][ T9451] ? clear_bhb_loop+0x40/0x90 [ 358.423612][ T9451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.429519][ T9451] RIP: 0033:0x7f89da39e159 [ 358.433937][ T9451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.453557][ T9451] RSP: 002b:00007f89db22c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 358.461978][ T9451] RAX: ffffffffffffffda RBX: 00007f89da626098 RCX: 00007f89da39e159 [ 358.469952][ T9451] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f89da62609c [ 358.477923][ T9451] RBP: 00007f89da626090 R08: 0000000000745b1d R09: 0000000000000000 [ 358.485897][ T9451] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 358.493872][ T9451] R13: 00007f89da626128 R14: 00007ffc5ed37830 R15: 00007ffc5ed37918 [ 358.501863][ T9451] [ 360.322196][ T9482] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 360.368653][ T9482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.389560][ T9490] FAULT_INJECTION: forcing a failure. [ 360.389560][ T9490] name fail_futex, interval 1, probability 0, space 0, times 0 [ 360.420358][ T9490] CPU: 1 PID: 9490 Comm: syz.2.1133 Not tainted syzkaller #0 [ 360.427810][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.437893][ T9490] Call Trace: [ 360.441197][ T9490] [ 360.444190][ T9490] dump_stack_lvl+0x18c/0x250 [ 360.448911][ T9490] ? show_regs_print_info+0x20/0x20 [ 360.454188][ T9490] ? load_image+0x420/0x420 [ 360.458751][ T9490] ? min_deadline_cb_rotate+0x150/0x150 [ 360.464319][ T9490] should_fail_ex+0x394/0x4c0 [ 360.469026][ T9490] get_futex_key+0x136/0x1030 [ 360.473731][ T9490] ? futex_setup_timer+0xc0/0xc0 [ 360.478663][ T9490] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 360.484640][ T9490] ? __lock_acquire+0x7d80/0x7d80 [ 360.489679][ T9490] ? preempt_schedule+0xc0/0xd0 [ 360.494535][ T9490] futex_wait_setup+0xbc/0x270 [ 360.499297][ T9490] ? futex_wait_multiple+0x920/0x920 [ 360.504576][ T9490] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 360.510489][ T9490] ? _raw_spin_unlock+0x40/0x40 [ 360.515385][ T9490] futex_wait+0x1bc/0x5c0 [ 360.519749][ T9490] ? futex_wait_setup+0x270/0x270 [ 360.524788][ T9490] ? file_end_write+0x159/0x250 [ 360.529651][ T9490] ? vfs_write+0x5de/0x9a0 [ 360.534698][ T9490] do_futex+0x2ff/0x3e0 [ 360.538870][ T9490] ? __ia32_sys_get_robust_list+0x110/0x110 [ 360.544768][ T9490] __se_sys_futex+0x3a9/0x440 [ 360.549471][ T9490] ? __x64_sys_futex+0xf0/0xf0 [ 360.554251][ T9490] ? __x64_sys_futex+0x21/0xf0 [ 360.559024][ T9490] do_syscall_64+0x55/0xb0 [ 360.563455][ T9490] ? clear_bhb_loop+0x40/0x90 [ 360.568161][ T9490] ? clear_bhb_loop+0x40/0x90 [ 360.572837][ T9490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.578734][ T9490] RIP: 0033:0x7fc72fb9e159 [ 360.583154][ T9490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.602792][ T9490] RSP: 002b:00007fc7309d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 360.611246][ T9490] RAX: ffffffffffffffda RBX: 00007fc72fe26098 RCX: 00007fc72fb9e159 [ 360.619230][ T9490] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc72fe26098 [ 360.627205][ T9490] RBP: 00007fc72fe26090 R08: 0000000000000000 R09: 0000000000000000 [ 360.635207][ T9490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.643203][ T9490] R13: 00007fc72fe26128 R14: 00007ffcce22c460 R15: 00007ffcce22c548 [ 360.651235][ T9490] [ 362.240660][ T7299] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 362.519602][ T7299] usb 5-1: Using ep0 maxpacket: 16 [ 362.558773][ T7299] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 362.587851][ T7299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.660051][ T7299] usb 5-1: config 0 has no interface number 0 [ 362.718129][ T7299] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 362.762369][ T7299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.836733][ T7299] usb 5-1: Product: syz [ 362.869631][ T7299] usb 5-1: Manufacturer: syz [ 362.903462][ T7299] usb 5-1: SerialNumber: syz [ 363.010037][ T7299] usb 5-1: config 0 descriptor?? [ 363.127684][ T7299] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 363.187057][ T7299] usb 5-1: No valid video chain found. [ 364.596515][ T9522] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 364.626157][ T5817] usb 5-1: USB disconnect, device number 10 [ 364.951137][ T9522] 8021q: adding VLAN 0 to HW filter on device bond7 [ 365.002357][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1145'. [ 370.252804][ T9587] FAULT_INJECTION: forcing a failure. [ 370.252804][ T9587] name failslab, interval 1, probability 0, space 0, times 0 [ 370.273702][ T9587] CPU: 1 PID: 9587 Comm: syz.3.1163 Not tainted syzkaller #0 [ 370.281145][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.291232][ T9587] Call Trace: [ 370.294528][ T9587] [ 370.297471][ T9587] dump_stack_lvl+0x18c/0x250 [ 370.302174][ T9587] ? show_regs_print_info+0x20/0x20 [ 370.307383][ T9587] ? load_image+0x420/0x420 [ 370.311900][ T9587] ? __might_sleep+0xe0/0xe0 [ 370.316497][ T9587] ? __lock_acquire+0x7d80/0x7d80 [ 370.321532][ T9587] should_fail_ex+0x394/0x4c0 [ 370.326219][ T9587] should_failslab+0x9/0x20 [ 370.330728][ T9587] slab_pre_alloc_hook+0x59/0x300 [ 370.335763][ T9587] ? init_srcu_struct_fields+0x7c/0xa40 [ 370.341319][ T9587] __kmem_cache_alloc_node+0x53/0x250 [ 370.347716][ T9587] ? init_srcu_struct_fields+0x7c/0xa40 [ 370.353296][ T9587] kmalloc_trace+0x2a/0xe0 [ 370.357735][ T9587] init_srcu_struct_fields+0x7c/0xa40 [ 370.363129][ T9587] kvm_dev_ioctl+0x5c6/0x1810 [ 370.367824][ T9587] ? kvm_resume+0x1e0/0x1e0 [ 370.372336][ T9587] ? bpf_lsm_file_ioctl+0x9/0x10 [ 370.377280][ T9587] ? security_file_ioctl+0x80/0xa0 [ 370.382399][ T9587] ? kvm_resume+0x1e0/0x1e0 [ 370.386912][ T9587] __se_sys_ioctl+0xfd/0x170 [ 370.391516][ T9587] do_syscall_64+0x55/0xb0 [ 370.395942][ T9587] ? clear_bhb_loop+0x40/0x90 [ 370.400621][ T9587] ? clear_bhb_loop+0x40/0x90 [ 370.405308][ T9587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.411204][ T9587] RIP: 0033:0x7fdfc099e159 [ 370.415621][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.435248][ T9587] RSP: 002b:00007fdfbebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.443851][ T9587] RAX: ffffffffffffffda RBX: 00007fdfc0c25fa0 RCX: 00007fdfc099e159 [ 370.451831][ T9587] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 370.459807][ T9587] RBP: 00007fdfc0a35024 R08: 0000000000000000 R09: 0000000000000000 [ 370.467796][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.475796][ T9587] R13: 00007fdfc0c26038 R14: 00007fdfc0c25fa0 R15: 00007ffe5f813008 [ 370.483797][ T9587] [ 370.580692][ T9593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1164'. [ 373.564830][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1175'. [ 374.430601][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 375.735777][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 375.755569][ T8] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 376.615240][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.647309][ T8] usb 5-1: config 0 has no interface number 0 [ 376.719278][ T8] usb 5-1: string descriptor 0 read error: -71 [ 376.772027][ T8] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 376.804282][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.871726][ T8] usb 5-1: config 0 descriptor?? [ 376.878691][ T8] usb 5-1: can't set config #0, error -71 [ 376.907185][ T8] usb 5-1: USB disconnect, device number 11 [ 378.590750][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 378.790610][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.797078][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.850279][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 378.905422][ T8] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 378.984151][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.123152][ T8] usb 3-1: config 0 has no interface number 0 [ 379.278133][ T8] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 379.378247][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.498318][ T8] usb 3-1: Product: syz [ 379.556720][ T8] usb 3-1: Manufacturer: syz [ 379.612912][ T8] usb 3-1: SerialNumber: syz [ 379.742871][ T8] usb 3-1: config 0 descriptor?? [ 379.894990][ T8] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 379.983254][ T8] usb 3-1: No valid video chain found. [ 381.149560][ T9688] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 381.157497][ T9688] netlink: 'syz.1.1197': attribute type 2 has an invalid length. [ 381.922483][ T9688] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 382.880370][ T7257] usb 3-1: USB disconnect, device number 14 [ 385.900376][ T7302] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 386.181008][ T7302] usb 5-1: Using ep0 maxpacket: 16 [ 386.240354][ T7302] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 386.306916][ T7302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.324944][ T7302] usb 5-1: config 0 has no interface number 0 [ 386.368411][ T7302] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 386.404647][ T7302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.459653][ T7302] usb 5-1: Product: syz [ 386.486379][ T7302] usb 5-1: Manufacturer: syz [ 386.511093][ T7302] usb 5-1: SerialNumber: syz [ 387.348339][ T7302] usb 5-1: config 0 descriptor?? [ 387.393765][ T7302] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 387.446207][ T7302] usb 5-1: No valid video chain found. [ 388.171349][ T9787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1222'. [ 389.010004][ T7301] usb 5-1: USB disconnect, device number 12 [ 390.242897][ T9809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1233'. [ 392.240782][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 392.431015][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 392.457695][ T8] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 392.469853][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.485544][ T8] usb 4-1: config 0 has no interface number 0 [ 392.509359][ T8] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 392.519179][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.529698][ T7257] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 392.546225][ T8] usb 4-1: Product: syz [ 392.627513][ T8] usb 4-1: Manufacturer: syz [ 392.637009][ T8] usb 4-1: SerialNumber: syz [ 392.653389][ T8] usb 4-1: config 0 descriptor?? [ 392.676399][ T8] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 392.683466][ T8] usb 4-1: No valid video chain found. [ 392.710170][ T7257] usb 2-1: device descriptor read/64, error -71 [ 392.992434][ T7257] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 393.082543][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1245'. [ 393.165219][ T9851] FAULT_INJECTION: forcing a failure. [ 393.165219][ T9851] name failslab, interval 1, probability 0, space 0, times 0 [ 393.214305][ T9851] CPU: 1 PID: 9851 Comm: syz.4.1246 Not tainted syzkaller #0 [ 393.221745][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.231825][ T9851] Call Trace: [ 393.235120][ T9851] [ 393.238064][ T9851] dump_stack_lvl+0x18c/0x250 [ 393.242771][ T9851] ? show_regs_print_info+0x20/0x20 [ 393.248001][ T9851] ? load_image+0x420/0x420 [ 393.252534][ T9851] ? __might_sleep+0xe0/0xe0 [ 393.257148][ T9851] ? __lock_acquire+0x7d80/0x7d80 [ 393.262207][ T9851] should_fail_ex+0x394/0x4c0 [ 393.266929][ T9851] should_failslab+0x9/0x20 [ 393.271467][ T9851] slab_pre_alloc_hook+0x59/0x300 [ 393.276526][ T9851] ? rtnl_newlink+0x10d/0x2170 [ 393.281318][ T9851] __kmem_cache_alloc_node+0x53/0x250 [ 393.286730][ T9851] ? rtnl_newlink+0x10d/0x2170 [ 393.291520][ T9851] kmalloc_trace+0x2a/0xe0 [ 393.295968][ T9851] rtnl_newlink+0x10d/0x2170 [ 393.300591][ T9851] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 393.306614][ T9851] ? __mutex_trylock_common+0x160/0x270 [ 393.312183][ T9851] ? rtnl_setlink+0x4e0/0x4e0 [ 393.316884][ T9851] ? trace_raw_output_contention_end+0xd0/0xd0 [ 393.323062][ T9851] ? rcu_is_watching+0x15/0xb0 [ 393.327852][ T9851] ? trace_contention_end+0x39/0xe0 [ 393.333073][ T9851] ? __mutex_lock+0x30d/0xc80 [ 393.337787][ T9851] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 393.342938][ T9851] ? mutex_lock_nested+0x20/0x20 [ 393.347918][ T9851] ? rtnl_setlink+0x4e0/0x4e0 [ 393.352617][ T9851] rtnetlink_rcv_msg+0x843/0xf90 [ 393.357580][ T9851] ? rtnetlink_rcv_msg+0x220/0xf90 [ 393.362718][ T9851] ? rtnetlink_bind+0x80/0x80 [ 393.367418][ T9851] ? finish_task_switch+0x25d/0x8f0 [ 393.372645][ T9851] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 393.378647][ T9851] ? read_lock_is_recursive+0x20/0x20 [ 393.384060][ T9851] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 393.390088][ T9851] ? __lock_acquire+0x7d80/0x7d80 [ 393.395133][ T9851] ? lock_chain_count+0x20/0x20 [ 393.400011][ T9851] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 393.405926][ T9851] ? lockdep_hardirqs_on+0x98/0x150 [ 393.411152][ T9851] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 393.417062][ T9851] ? _raw_spin_unlock+0x40/0x40 [ 393.422028][ T9851] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 393.428656][ T9851] netlink_rcv_skb+0x235/0x4c0 [ 393.433476][ T9851] ? trace_irq_disable+0x37/0xe0 [ 393.438440][ T9851] ? rtnetlink_bind+0x80/0x80 [ 393.443231][ T9851] ? netlink_ack+0x1160/0x1160 [ 393.448026][ T9851] ? __lock_acquire+0x7d80/0x7d80 [ 393.453076][ T9851] ? __rcu_read_unlock+0x7c/0xd0 [ 393.458030][ T9851] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.463259][ T9851] netlink_unicast+0x7b1/0x930 [ 393.468066][ T9851] netlink_sendmsg+0x8d0/0xbf0 [ 393.472858][ T9851] ? aa_sock_msg_perm+0x94/0x150 [ 393.477820][ T9851] ? netlink_getsockopt+0x590/0x590 [ 393.483048][ T9851] ? apparmor_socket_sendmsg+0x170/0x330 [ 393.488707][ T9851] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 393.494013][ T9851] ? security_socket_sendmsg+0x80/0xa0 [ 393.499484][ T9851] ? netlink_getsockopt+0x590/0x590 [ 393.504705][ T9851] ____sys_sendmsg+0x61b/0x980 [ 393.509499][ T9851] ? __asan_memset+0x22/0x40 [ 393.514111][ T9851] ? __sys_sendmsg_sock+0x30/0x30 [ 393.519153][ T9851] ? __import_iovec+0x5f2/0x850 [ 393.524123][ T9851] ? import_iovec+0x73/0xa0 [ 393.528654][ T9851] ___sys_sendmsg+0x2a6/0x360 [ 393.533368][ T9851] ? __sys_sendmsg+0x2b0/0x2b0 [ 393.538203][ T9851] __se_sys_sendmsg+0x1d0/0x2c0 [ 393.543077][ T9851] ? __x64_sys_sendmsg+0x80/0x80 [ 393.548047][ T9851] ? lockdep_hardirqs_on+0x98/0x150 [ 393.553277][ T9851] do_syscall_64+0x55/0xb0 [ 393.557715][ T9851] ? clear_bhb_loop+0x40/0x90 [ 393.562415][ T9851] ? clear_bhb_loop+0x40/0x90 [ 393.567123][ T9851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.573034][ T9851] RIP: 0033:0x7f89da39e159 [ 393.577470][ T9851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.597097][ T9851] RSP: 002b:00007f89db24e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.605534][ T9851] RAX: ffffffffffffffda RBX: 00007f89da625fa0 RCX: 00007f89da39e159 [ 393.613525][ T9851] RDX: 0000000020004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 393.621511][ T9851] RBP: 00007f89da435024 R08: 0000000000000000 R09: 0000000000000000 [ 393.629494][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.637480][ T9851] R13: 00007f89da626038 R14: 00007f89da625fa0 R15: 00007ffc5ed37918 [ 393.645489][ T9851] [ 394.010158][ T7257] usb 2-1: device descriptor read/64, error -71 [ 394.158109][ T7257] usb usb2-port1: attempt power cycle [ 394.587609][ T5773] usb 4-1: USB disconnect, device number 16 [ 394.613048][ T7257] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 394.774731][ T7257] usb 2-1: device descriptor read/8, error -71 [ 395.110551][ T7257] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 395.210940][ T7257] usb 2-1: device descriptor read/8, error -71 [ 395.335821][ T7257] usb usb2-port1: unable to enumerate USB device [ 395.507740][ T9878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1256'. [ 395.610173][ T7302] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 396.390680][ T7302] usb 4-1: device descriptor read/64, error -71 [ 396.690718][ T7302] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 396.790403][ T5817] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 396.900843][ T7302] usb 4-1: device descriptor read/64, error -71 [ 396.980491][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 397.017586][ T5817] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 397.073696][ T7302] usb usb4-port1: attempt power cycle [ 397.093969][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.157818][ T5817] usb 3-1: config 0 has no interface number 0 [ 397.223435][ T5817] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 397.281273][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.355621][ T5817] usb 3-1: Product: syz [ 397.391778][ T5817] usb 3-1: Manufacturer: syz [ 397.435577][ T5817] usb 3-1: SerialNumber: syz [ 397.537694][ T5817] usb 3-1: config 0 descriptor?? [ 397.551895][ T7302] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 398.622478][ T5817] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 398.628907][ T5817] usb 3-1: No valid video chain found. [ 398.853429][ T7302] usb 4-1: device descriptor read/8, error -71 [ 399.102379][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1266'. [ 399.754848][ T7302] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 399.905367][ T7257] usb 3-1: USB disconnect, device number 15 [ 399.930215][ T7302] usb 4-1: device descriptor read/8, error -71 [ 400.050393][ T7302] usb usb4-port1: unable to enumerate USB device [ 401.500300][ T7257] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 402.240815][ T7257] usb 5-1: Using ep0 maxpacket: 8 [ 402.262060][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1276'. [ 403.091705][ T7257] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 403.118067][ T7257] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.137841][ T7257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.461198][ T7257] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 403.640208][ T7257] usb 3-1: Using ep0 maxpacket: 16 [ 403.675717][ T7257] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 403.696141][ T7257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.713741][ T7257] usb 3-1: config 0 has no interface number 0 [ 403.737723][ T7257] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 403.758769][ T7257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.780413][ T7257] usb 3-1: Product: syz [ 403.785135][ T7257] usb 3-1: Manufacturer: syz [ 403.789930][ T7257] usb 3-1: SerialNumber: syz [ 403.821752][ T7257] usb 3-1: config 0 descriptor?? [ 403.876512][ T7257] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 403.906800][ T7257] usb 3-1: No valid video chain found. [ 405.028166][ T7257] usb 5-1: USB disconnect, device number 13 [ 405.195439][ T9968] gadgetfs: bound to dummy_udc driver [ 405.347148][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1287'. [ 405.612773][ T5841] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 405.621898][ T7257] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 405.647107][ C0] gadgetfs: connected [ 405.662773][ T5841] gadgetfs: disconnected [ 405.870253][ T7257] usb 5-1: device descriptor read/64, error -71 [ 405.912287][ C0] gadgetfs: connected [ 405.928982][ T5841] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 405.985998][ T5841] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 406.055079][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.152589][ C0] gadgetfs: configuration #1 [ 406.170842][ T9967] gadgetfs: suspended from state 3 [ 406.186427][ T9967] gadgetfs: disconnected [ 406.192901][ T5841] usb 1-1: USB disconnect, device number 3 [ 406.209216][ T5773] usb 3-1: USB disconnect, device number 16 [ 406.240320][ T7257] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 406.431444][ T7257] usb 5-1: device descriptor read/64, error -71 [ 406.570346][ T7257] usb usb5-port1: attempt power cycle [ 407.190815][ T7257] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 407.313533][ T7257] usb 5-1: device descriptor read/8, error -71 [ 407.640535][ T7257] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 407.691885][ T7257] usb 5-1: device descriptor read/8, error -71 [ 408.377644][ T7257] usb usb5-port1: unable to enumerate USB device [ 408.679752][T10005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1296'. [ 408.867727][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 408.918316][ T5139] ldm_validate_privheads(): Disk read failed. [ 408.937170][ T5139] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 408.952408][ T5139] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 408.963807][ T5139] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 408.990342][ T5139] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 408.997782][ T5139] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 409.035401][ T5139] loop0: [ 409.041808][ T5139] loop0: partition table partially beyond EOD, truncated [ 409.668393][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1306'. [ 409.923331][T10035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1309'. [ 410.770297][ T5841] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 411.100226][ T5841] usb 2-1: device descriptor read/64, error -71 [ 411.484663][ T5841] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 413.864587][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1317'. [ 414.396485][T10069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1320'. [ 415.820219][ T5773] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 418.230598][ T5773] usb 4-1: device descriptor read/64, error -71 [ 419.153219][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1328'. [ 420.557320][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1333'. [ 421.240199][ T5773] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 423.300982][ T5773] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 423.327943][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.662403][ T5773] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 423.909702][ T5773] usb 3-1: USB disconnect, device number 17 [ 425.351242][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1348'. [ 425.818927][ T5817] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 427.910424][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 428.710088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 428.940091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 429.130089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 429.674707][ T5817] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 429.689218][ T5817] usb 3-1: can't read configurations, error -71 [ 430.869559][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1359'. [ 436.404406][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1370'. [ 436.570169][ T7257] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 436.790165][ T7257] usb 2-1: Using ep0 maxpacket: 32 [ 436.798155][ T7257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.809479][ T7257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.819894][ T7257] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 436.829378][ T7257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.840489][ T7257] usb 2-1: config 0 descriptor?? [ 437.294742][ T7302] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 437.329184][ T7302] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 437.360225][ T7257] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 437.387995][ T7302] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 437.536163][ T7257] usb 2-1: USB disconnect, device number 19 [ 437.643751][ T5817] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 437.701256][ T5817] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 437.780216][ T7302] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 437.970546][ T7302] usb 4-1: Using ep0 maxpacket: 16 [ 437.977255][ T7302] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 437.985968][ T7302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.996566][ T7302] usb 4-1: config 0 has no interface number 0 [ 438.004943][ T7302] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 438.014157][ T7302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.022222][ T7302] usb 4-1: Product: syz [ 438.026434][ T7302] usb 4-1: Manufacturer: syz [ 438.032175][ T7302] usb 4-1: SerialNumber: syz [ 438.039353][ T7302] usb 4-1: config 0 descriptor?? [ 438.055961][ T7302] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 438.080242][ T7302] usb 4-1: No valid video chain found. [ 438.113857][T10257] ceph: No mds server is up or the cluster is laggy [ 438.136203][T10260] ceph: No mds server is up or the cluster is laggy [ 438.163163][ T7302] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 438.211181][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 438.233648][ T7302] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 438.308873][ T7302] usb 4-1: USB disconnect, device number 23 [ 438.525237][ T5773] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 439.139262][T10278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1379'. [ 439.240913][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1381'. [ 439.301247][ T5773] usb 2-1: Using ep0 maxpacket: 16 [ 439.312234][ T5773] usb 2-1: config 0 has no interfaces? [ 439.329085][ T5773] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 439.349545][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.364297][ T5773] usb 2-1: Product: syz [ 439.368510][ T5773] usb 2-1: Manufacturer: syz [ 439.380315][ T5773] usb 2-1: SerialNumber: syz [ 439.391299][ T5773] usb 2-1: config 0 descriptor?? [ 440.226370][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.233446][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.468991][T10298] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1386'. [ 440.554780][T10298] input: syz1 as /devices/virtual/input/input18 [ 441.123179][ T5813] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 441.176704][ T5773] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 441.234964][ T5813] usb 2-1: USB disconnect, device number 20 [ 441.256488][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 441.375982][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1390'. [ 441.401301][ T5817] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 441.459975][ T5773] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 441.912080][ T5817] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 441.956857][T10306] ceph: No mds server is up or the cluster is laggy [ 441.964094][T10309] ceph: No mds server is up or the cluster is laggy [ 442.010999][ T5773] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 443.250284][ T5841] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 443.292235][ T5817] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 443.874075][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1400'. [ 443.970335][ T5813] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 444.255837][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 444.309708][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.555788][ T5813] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 444.570197][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.796424][ T5813] usb 2-1: Product: syz [ 444.829529][ T5813] usb 2-1: Manufacturer: syz [ 444.834343][ T5813] usb 2-1: SerialNumber: syz [ 444.842751][ T5813] usb 2-1: config 0 descriptor?? [ 444.873124][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1402'. [ 446.317060][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 448.203350][ T5773] usb 2-1: USB disconnect, device number 21 [ 450.776423][T10406] block nbd2: NBD_DISCONNECT [ 450.900467][T10409] 8021q: adding VLAN 0 to HW filter on device bond8 [ 451.127364][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'. [ 451.200284][ T7302] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 451.670350][ T7302] usb 2-1: Using ep0 maxpacket: 16 [ 451.701565][ T7302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.861750][ T7302] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 451.977429][ T7302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.075509][ T7302] usb 2-1: Product: syz [ 452.118164][ T7302] usb 2-1: Manufacturer: syz [ 452.161576][ T7302] usb 2-1: SerialNumber: syz [ 452.308803][ T7302] usb 2-1: config 0 descriptor?? [ 454.347925][ T5813] usb 2-1: USB disconnect, device number 22 [ 454.530890][T10452] 8021q: adding VLAN 0 to HW filter on device bond8 [ 454.888347][T10460] jffs2: notice: (10460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 455.267685][ T5841] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 456.699362][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1434'. [ 456.942480][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 456.949442][ T5841] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 456.958652][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.000377][ T5841] usb 2-1: config 0 has no interface number 0 [ 457.023642][ T5841] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 457.071195][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.284112][ T5841] usb 2-1: Product: syz [ 457.290145][ T5841] usb 2-1: Manufacturer: syz [ 457.294922][ T5841] usb 2-1: SerialNumber: syz [ 457.305751][ T5841] usb 2-1: config 0 descriptor?? [ 457.314462][ T5841] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 457.322512][ T5841] usb 2-1: No valid video chain found. [ 459.058179][T10481] 8021q: adding VLAN 0 to HW filter on device bond5 [ 459.112806][ T5817] usb 2-1: USB disconnect, device number 23 [ 459.370255][ T5841] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 460.370684][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 460.378388][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.392665][ T5841] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.406145][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.414388][ T5841] usb 4-1: Product: syz [ 460.419183][ T5841] usb 4-1: Manufacturer: syz [ 460.424190][ T5841] usb 4-1: SerialNumber: syz [ 460.437384][ T5841] usb 4-1: config 0 descriptor?? [ 462.351595][ T7302] usb 4-1: USB disconnect, device number 24 [ 462.492155][ T28] audit: type=1326 audit(1788854896.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89da39e159 code=0x7ffc0000 [ 462.495785][T10526] 8021q: adding VLAN 0 to HW filter on device bond9 [ 462.595485][ T28] audit: type=1326 audit(1788854896.153:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89da39e159 code=0x7ffc0000 [ 462.635573][ T28] audit: type=1326 audit(1788854896.203:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f89da39e159 code=0x7ffc0000 [ 462.672244][ T28] audit: type=1326 audit(1788854896.203:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89da39e159 code=0x7ffc0000 [ 462.710911][ T28] audit: type=1326 audit(1788854896.203:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89da39e159 code=0x7ffc0000 [ 462.742746][ T28] audit: type=1326 audit(1788854896.213:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89da39e159 code=0x7ffc0000 [ 462.744943][T10534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1456'. [ 462.766616][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.781917][ T28] audit: type=1326 audit(1788854896.213:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89da39e159 code=0x7ffc0000 [ 462.805898][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.817504][ T28] audit: type=1326 audit(1788854896.213:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89da39e159 code=0x7ffc0000 [ 462.843497][ T28] audit: type=1326 audit(1788854896.213:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89da35e98e code=0x7ffc0000 [ 462.867490][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.899954][ T1099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.908657][ T1099] syzkaller0: tun_net_xmit 76 [ 462.914369][ T1099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.922966][ T1099] syzkaller0: tun_net_xmit 48 [ 462.928483][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.937043][ T7302] syzkaller0: tun_net_xmit 76 [ 463.001056][T10539] syzkaller0: create flow: hash 3765409474 index 2 [ 463.009907][ T28] audit: type=1326 audit(1788854896.213:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.4.1454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89da39ddeb code=0x7ffc0000 [ 463.033854][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.256740][T10539] syzkaller0: delete flow: hash 3765409474 index 2 [ 463.280657][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.288886][ T7302] syzkaller0: tun_net_xmit 76 [ 465.483694][T10561] syzkaller0: entered promiscuous mode [ 465.489382][T10561] syzkaller0: entered allmulticast mode [ 465.623086][T10565] 8021q: adding VLAN 0 to HW filter on device bond10 [ 470.290910][T10603] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.786399][T10641] netlink: 'syz.3.1488': attribute type 1 has an invalid length. [ 472.832750][T10642] Need at least one configuration in g1. [ 472.850644][T10642] udc dummy_udc.0: failed to start g1: -22 [ 472.856533][T10642] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 472.903140][T10642] UDC core: g1: couldn't find an available UDC or it's busy [ 472.918448][T10641] 8021q: adding VLAN 0 to HW filter on device bond9 [ 473.983958][T10649] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 474.077350][T10649] 8021q: adding VLAN 0 to HW filter on device bond6 [ 474.189417][T10656] 8021q: adding VLAN 0 to HW filter on device bond6 [ 474.202192][T10656] bond6: (slave sit1): The slave device specified does not support setting the MAC address [ 474.215696][T10656] bond6: (slave sit1): Error -95 calling set_mac_address [ 475.173658][T10670] FAULT_INJECTION: forcing a failure. [ 475.173658][T10670] name failslab, interval 1, probability 0, space 0, times 0 [ 475.210325][T10670] CPU: 1 PID: 10670 Comm: syz.4.1500 Not tainted syzkaller #0 [ 475.217856][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.227937][T10670] Call Trace: [ 475.231211][T10670] [ 475.234168][T10670] dump_stack_lvl+0x18c/0x250 [ 475.238885][T10670] ? show_regs_print_info+0x20/0x20 [ 475.244110][T10670] ? load_image+0x420/0x420 [ 475.248618][T10670] ? __lock_acquire+0x7d80/0x7d80 [ 475.253657][T10670] ? io_uring_alloc_task_context+0x215/0x5c0 [ 475.259649][T10670] should_fail_ex+0x394/0x4c0 [ 475.264337][T10670] should_failslab+0x9/0x20 [ 475.268844][T10670] slab_pre_alloc_hook+0x59/0x300 [ 475.273896][T10670] ? io_wq_create+0xcf/0x8f0 [ 475.278532][T10670] __kmem_cache_alloc_node+0x53/0x250 [ 475.283953][T10670] ? io_wq_create+0xcf/0x8f0 [ 475.288556][T10670] kmalloc_trace+0x2a/0xe0 [ 475.292983][T10670] io_wq_create+0xcf/0x8f0 [ 475.297399][T10670] ? __init_waitqueue_head+0xa8/0x140 [ 475.302779][T10670] io_uring_alloc_task_context+0x292/0x5c0 [ 475.308585][T10670] ? __asan_memcpy+0x40/0x70 [ 475.313184][T10670] ? io_uring_show_cred+0x4d0/0x4d0 [ 475.318419][T10670] ? io_wq_free_work+0x2a0/0x2a0 [ 475.323370][T10670] ? io_issue_sqe+0xc60/0xc60 [ 475.328053][T10670] ? alloc_file_pseudo+0x1ae/0x210 [ 475.333168][T10670] __io_uring_add_tctx_node+0x34f/0x500 [ 475.338722][T10670] ? __io_uring_free+0x200/0x200 [ 475.343662][T10670] ? __might_fault+0xaa/0x120 [ 475.348344][T10670] ? __anon_inode_getfile+0x16c/0x200 [ 475.353754][T10670] io_uring_create+0xc03/0x1330 [ 475.358645][T10670] __se_sys_io_uring_setup+0x29f/0x2b0 [ 475.364205][T10670] ? __x64_sys_io_uring_setup+0x60/0x60 [ 475.369796][T10670] ? lockdep_hardirqs_on+0x98/0x150 [ 475.375006][T10670] do_syscall_64+0x55/0xb0 [ 475.379424][T10670] ? clear_bhb_loop+0x40/0x90 [ 475.384109][T10670] ? clear_bhb_loop+0x40/0x90 [ 475.388786][T10670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.394681][T10670] RIP: 0033:0x7f89da39e159 [ 475.399097][T10670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.418709][T10670] RSP: 002b:00007f89db24dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 475.427141][T10670] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f89da39e159 [ 475.435149][T10670] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000006aed [ 475.443122][T10670] RBP: 00007f89da435024 R08: 0000000000000000 R09: 0000000000000000 [ 475.451099][T10670] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.459102][T10670] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc5ed37918 [ 475.467107][T10670] [ 475.498249][T10674] netlink: 'syz.2.1501': attribute type 1 has an invalid length. [ 475.565864][T10674] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.777448][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 478.123095][T10706] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 478.298576][T10706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 480.888893][T10739] Need at least one configuration in g1. [ 480.942694][T10739] udc dummy_udc.0: failed to start g1: -22 [ 481.020250][T10739] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 481.078685][T10739] UDC core: g1: couldn't find an available UDC or it's busy [ 482.797259][T10748] netlink: 'syz.1.1526': attribute type 1 has an invalid length. [ 482.838514][T10748] 8021q: adding VLAN 0 to HW filter on device bond11 [ 482.902026][T10755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1529'. [ 483.192343][T10765] netlink: 'syz.4.1531': attribute type 10 has an invalid length. [ 483.265501][T10767] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1531'. [ 484.291468][T10765] team0 (unregistering): Port device team_slave_0 removed [ 484.435432][T10765] team0 (unregistering): Port device team_slave_1 removed [ 486.088219][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1539'. [ 486.896087][ T7302] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 487.086458][T10796] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 487.137302][T10796] 8021q: adding VLAN 0 to HW filter on device bond7 [ 487.180337][ T7302] usb 2-1: Using ep0 maxpacket: 8 [ 487.188008][ T7302] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 487.197163][ T7302] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.250916][ T7302] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 487.285469][ T7302] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.308262][ T7302] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.330709][ T7302] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 487.339892][ T7302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.562296][ T7302] usb 2-1: GET_CAPABILITIES returned 0 [ 487.580159][ T7302] usbtmc 2-1:16.0: can't read capabilities [ 487.748945][T10811] syz.2.1546: vmalloc error: size 36864, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 487.820428][T10811] CPU: 1 PID: 10811 Comm: syz.2.1546 Not tainted syzkaller #0 [ 487.827954][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.838075][T10811] Call Trace: [ 487.841379][T10811] [ 487.844326][T10811] dump_stack_lvl+0x18c/0x250 [ 487.849026][T10811] ? show_regs_print_info+0x20/0x20 [ 487.854254][T10811] ? load_image+0x420/0x420 [ 487.858794][T10811] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 487.865232][T10811] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 487.871743][T10811] warn_alloc+0x246/0x340 [ 487.876085][T10811] ? zone_watermark_ok_safe+0x230/0x230 [ 487.881631][T10811] ? mod_memcg_page_state+0x4bd/0x940 [ 487.887022][T10811] __vmalloc_node_range+0x1055/0x1320 [ 487.892416][T10811] ? free_vm_area+0x50/0x50 [ 487.896925][T10811] ? vscnprintf+0x80/0x80 [ 487.901258][T10811] ? alloc_fd+0x590/0x640 [ 487.905595][T10811] ? kvm_dev_ioctl+0x208/0x1810 [ 487.910457][T10811] __vmalloc+0x7a/0x90 [ 487.914532][T10811] ? kvm_dev_ioctl+0x208/0x1810 [ 487.919399][T10811] kvm_dev_ioctl+0x208/0x1810 [ 487.924081][T10811] ? __fget_files+0x28/0x460 [ 487.928688][T10811] ? kvm_resume+0x1e0/0x1e0 [ 487.933198][T10811] ? bpf_lsm_file_ioctl+0x9/0x10 [ 487.938143][T10811] ? security_file_ioctl+0x80/0xa0 [ 487.943258][T10811] ? kvm_resume+0x1e0/0x1e0 [ 487.947763][T10811] __se_sys_ioctl+0xfd/0x170 [ 487.952361][T10811] do_syscall_64+0x55/0xb0 [ 487.956779][T10811] ? clear_bhb_loop+0x40/0x90 [ 487.961459][T10811] ? clear_bhb_loop+0x40/0x90 [ 487.966147][T10811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.972042][T10811] RIP: 0033:0x7fc72fb9e159 [ 487.976455][T10811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.996069][T10811] RSP: 002b:00007fc7309f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.004494][T10811] RAX: ffffffffffffffda RBX: 00007fc72fe25fa0 RCX: 00007fc72fb9e159 [ 488.012467][T10811] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 488.020437][T10811] RBP: 00007fc72fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 488.028405][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.036394][T10811] R13: 00007fc72fe26038 R14: 00007fc72fe25fa0 R15: 00007ffcce22c548 [ 488.044403][T10811] [ 488.117274][T10811] Mem-Info: [ 488.121457][T10811] active_anon:16874 inactive_anon:0 isolated_anon:0 [ 488.121457][T10811] active_file:14832 inactive_file:42139 isolated_file:0 [ 488.121457][T10811] unevictable:768 dirty:191 writeback:0 [ 488.121457][T10811] slab_reclaimable:10928 slab_unreclaimable:98606 [ 488.121457][T10811] mapped:24789 shmem:12499 pagetables:660 [ 488.121457][T10811] sec_pagetables:0 bounce:0 [ 488.121457][T10811] kernel_misc_reclaimable:0 [ 488.121457][T10811] free:1315440 free_pcp:12038 free_cma:0 [ 488.124491][ T5841] usb 2-1: USB disconnect, device number 24 [ 488.166915][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.201684][T10819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1548'. [ 488.227992][T10811] Node 0 active_anon:66296kB inactive_anon:0kB active_file:59328kB inactive_file:168352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99156kB dirty:760kB writeback:0kB shmem:47160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12804kB pagetables:2640kB sec_pagetables:0kB all_unreclaimable? no [ 488.261065][T10811] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 488.293139][T10811] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.329062][T10811] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 488.335523][T10811] Node 0 DMA32 free:1358364kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:62160kB inactive_anon:0kB active_file:59328kB inactive_file:167516kB unevictable:1536kB writepending:756kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:29536kB local_pcp:12656kB free_cma:0kB [ 488.376760][T10811] lowmem_reserve[]: 0 0 0 0 0 [ 488.382306][T10811] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.416086][T10811] lowmem_reserve[]: 0 0 0 0 0 [ 488.422121][T10811] Node 1 Normal free:3888036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23804kB local_pcp:6336kB free_cma:0kB [ 488.460775][T10811] lowmem_reserve[]: 0 0 0 0 0 [ 488.465556][T10811] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 488.483117][T10811] Node 0 DMA32: 667*4kB (UM) 541*8kB (UME) 509*16kB (UME) 560*32kB (UME) 579*64kB (UME) 218*128kB (UME) 109*256kB (UME) 87*512kB (UM) 61*1024kB (UM) 28*2048kB (M) 268*4096kB (UM) = 1388004kB [ 488.561324][T10811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 488.872868][T10811] Node 1 Normal: 225*4kB (UME) 50*8kB (UME) 33*16kB (UME) 106*32kB (UME) 23*64kB (UE) 5*128kB (UME) 1*256kB (E) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 946*4096kB (M) = 3888036kB [ 489.240267][T10811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 489.249885][T10811] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 489.259275][T10811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 489.270454][T10811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 489.279816][T10811] 63766 total pagecache pages [ 489.284856][T10811] 0 pages in swap cache [ 489.289035][T10811] Free swap = 124568kB [ 489.293258][T10811] Total swap = 124996kB [ 489.297591][T10811] 2097051 pages RAM [ 489.301553][T10811] 0 pages HighMem/MovableOnly [ 489.306424][T10811] 416960 pages reserved [ 489.310821][T10811] 0 pages cma reserved [ 489.570960][T10828] sctp_transport_update_pmtu: 48 callbacks suppressed [ 489.570973][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.588423][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.598891][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.609417][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.621167][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.631730][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.642341][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.652847][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.663383][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.673905][T10828] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 489.805693][T10835] netlink: 'syz.1.1552': attribute type 1 has an invalid length. [ 490.442530][T10835] 8021q: adding VLAN 0 to HW filter on device bond12 [ 491.026210][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1558'. [ 492.979059][T10880] MTD: Couldn't look up './dev/mtdblock0': -2 [ 493.003848][T10877] syz.4.1563 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 493.064857][T10877] CPU: 1 PID: 10877 Comm: syz.4.1563 Not tainted syzkaller #0 [ 493.072390][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.082473][T10877] Call Trace: [ 493.085771][T10877] [ 493.088707][T10877] dump_stack_lvl+0x18c/0x250 [ 493.093414][T10877] ? show_regs_print_info+0x20/0x20 [ 493.098620][T10877] ? load_image+0x420/0x420 [ 493.103127][T10877] ? ___ratelimit+0x478/0x610 [ 493.107855][T10877] ? radix_tree_cpu_dead+0x160/0x160 [ 493.113154][T10877] dump_header+0xd8/0x820 [ 493.117494][T10877] oom_kill_process+0x390/0x580 [ 493.122363][T10877] out_of_memory+0xe0e/0x1200 [ 493.127056][T10877] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 493.132695][T10877] ? mutex_lock_nested+0x20/0x20 [ 493.137649][T10877] ? unregister_oom_notifier+0x20/0x20 [ 493.143125][T10877] mem_cgroup_out_of_memory+0x2c2/0x390 [ 493.148680][T10877] ? try_charge_memcg+0xc91/0x17c0 [ 493.153798][T10877] ? drain_local_stock+0x630/0x630 [ 493.158922][T10877] ? do_raw_spin_unlock+0x121/0x230 [ 493.164132][T10877] try_charge_memcg+0xca1/0x17c0 [ 493.169093][T10877] ? folio_flags+0x120/0x120 [ 493.173690][T10877] ? percpu_ref_tryget+0x15/0x180 [ 493.178717][T10877] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 493.184453][T10877] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 493.190439][T10877] ? percpu_ref_tryget+0x15/0x180 [ 493.195464][T10877] ? percpu_ref_tryget+0x15/0x180 [ 493.200494][T10877] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 493.206216][T10877] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 493.211942][T10877] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 493.217761][T10877] obj_cgroup_charge+0x36e/0x630 [ 493.222702][T10877] ? get_obj_cgroup_from_current+0xd4/0x280 [ 493.228605][T10877] ? obj_cgroup_charge+0xed/0x630 [ 493.233631][T10877] ? mod_objcg_mlstate+0x320/0x320 [ 493.238755][T10877] ? get_obj_cgroup_from_current+0xd4/0x280 [ 493.244653][T10877] ? get_obj_cgroup_from_current+0xd4/0x280 [ 493.250557][T10877] slab_pre_alloc_hook+0x2e2/0x300 [ 493.255686][T10877] kmem_cache_alloc+0x5a/0x2c0 [ 493.260466][T10877] ? vm_area_dup+0x27/0x270 [ 493.264981][T10877] vm_area_dup+0x27/0x270 [ 493.269315][T10877] copy_mm+0x11a6/0x1e30 [ 493.273574][T10877] ? copy_signal+0x640/0x640 [ 493.278165][T10877] ? lockdep_init_map_type+0x9c/0x8e0 [ 493.283563][T10877] ? __init_rwsem+0x122/0x160 [ 493.288244][T10877] ? copy_signal+0x51f/0x640 [ 493.292846][T10877] copy_process+0x16c9/0x3da0 [ 493.297526][T10877] ? plist_add+0x3db/0x490 [ 493.301960][T10877] ? copy_process+0x98e/0x3da0 [ 493.306746][T10877] ? futex_wait+0x4a7/0x5c0 [ 493.311264][T10877] ? __pidfd_prepare+0x140/0x140 [ 493.316216][T10877] kernel_clone+0x24b/0x8a0 [ 493.320737][T10877] ? create_io_thread+0x190/0x190 [ 493.325773][T10877] ? do_futex+0x2ff/0x3e0 [ 493.330649][T10877] __x64_sys_clone+0x1b7/0x230 [ 493.335609][T10877] ? __ia32_sys_vfork+0x140/0x140 [ 493.340656][T10877] ? lock_chain_count+0x20/0x20 [ 493.345530][T10877] ? lockdep_hardirqs_on+0x98/0x150 [ 493.350747][T10877] do_syscall_64+0x55/0xb0 [ 493.355169][T10877] ? clear_bhb_loop+0x40/0x90 [ 493.359851][T10877] ? clear_bhb_loop+0x40/0x90 [ 493.364535][T10877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.370432][T10877] RIP: 0033:0x7f89da39e159 [ 493.374854][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.394468][T10877] RSP: 002b:00007f89db24dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 493.402890][T10877] RAX: ffffffffffffffda RBX: 00007f89da625fa0 RCX: 00007f89da39e159 [ 493.410868][T10877] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 493.418927][T10877] RBP: 00007f89da435024 R08: 0000000000000000 R09: 0000000000000000 [ 493.426899][T10877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 493.434873][T10877] R13: 00007f89da626038 R14: 00007f89da625fa0 R15: 00007ffc5ed37918 [ 493.442862][T10877] [ 493.454800][T10877] memory: usage 96kB, limit 96kB, failcnt 40 [ 493.462985][T10877] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 493.470795][T10877] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 493.477908][T10877] Memory cgroup stats for /syz4/test: [ 493.478359][T10877] cache 0 [ 493.486871][T10877] rss 0 [ 493.489792][T10877] rss_huge 0 [ 493.493192][T10877] shmem 0 [ 493.496150][T10877] mapped_file 0 [ 493.500385][T10877] dirty 0 [ 493.503358][T10877] writeback 0 [ 493.506661][T10877] workingset_refault_anon 0 [ 493.533868][T10877] workingset_refault_file 0 [ 493.590473][T10877] swap 0 [ 493.620193][T10877] pgpgin 0 [ 493.661302][T10877] pgpgout 0 [ 493.670450][T10877] pgfault 17 [ 493.675561][T10877] pgmajfault 0 [ 493.679045][T10877] inactive_anon 0 [ 493.687528][T10877] active_anon 0 [ 493.695959][T10877] inactive_file 0 [ 493.699770][T10877] active_file 0 [ 493.704874][T10877] unevictable 0 [ 493.708538][T10877] hierarchical_memory_limit 98304 [ 493.730224][T10877] hierarchical_memsw_limit 9223372036854771712 [ 493.770403][T10877] total_cache 0 [ 493.774782][T10877] total_rss 0 [ 493.778125][T10877] total_rss_huge 0 [ 493.782169][T10877] total_shmem 0 [ 493.785696][T10877] total_mapped_file 0 [ 493.789748][T10877] total_dirty 0 [ 493.793405][T10877] total_writeback 0 [ 493.797330][T10877] total_workingset_refault_anon 0 [ 493.802619][T10877] total_workingset_refault_file 0 [ 493.807865][T10877] total_swap 0 [ 493.814085][T10877] total_pgpgin 0 [ 493.820631][T10877] total_pgpgout 0 [ 493.824370][T10877] total_pgfault 17 [ 493.830226][T10877] total_pgmajfault 0 [ 493.834249][T10877] total_inactive_anon 0 [ 493.840154][T10877] total_active_anon 0 [ 493.860662][T10877] total_inactive_file 0 [ 493.872164][T10877] total_active_file 0 [ 493.901074][T10877] total_unevictable 0 [ 493.905116][T10877] anon_cost 0 [ 493.908419][T10877] file_cost 0 [ 493.930208][T10877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.1563,pid=10876,uid=0 [ 493.981346][T10877] Memory cgroup out of memory: Killed process 10876 (syz.4.1563) total-vm:104292kB, anon-rss:1344kB, file-rss:23040kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 494.031783][T10894] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22) [ 494.136636][T10897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1570'. [ 495.076827][T10907] MTD: Couldn't look up './dev/mtdblock0': -2 [ 495.095108][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1572'. [ 496.316009][T10929] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22) [ 497.168107][T10944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1583'. [ 497.405874][T10942] MTD: Couldn't look up './dev/mtdblock0': -2 [ 497.757720][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1585'. [ 498.027049][T10959] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22) [ 498.120820][T10966] MTD: Couldn't look up './dev/mtdblock0': -2 [ 498.384771][T10974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1595'. [ 499.175899][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 499.564975][T10993] MTD: Couldn't look up './dev/mtdblock0': -2 [ 500.262700][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1607'. [ 501.368866][T11023] MTD: Couldn't look up './dev/mtdblock0': -2 [ 501.692219][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.698610][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.204608][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1620'. [ 503.016004][T11051] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 503.467333][T11051] netlink: 'syz.4.1619': attribute type 2 has an invalid length. [ 504.940251][T11051] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 505.364462][T11083] MTD: Couldn't look up './dev/mtdblock0': -2 [ 505.814612][T11093] overlayfs: failed to resolve 'work': -2 [ 507.171421][T11100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1631'. [ 508.217026][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'. [ 508.220603][T11120] MTD: Couldn't look up './dev/mtdblock0': -2 [ 508.356866][T11125] overlayfs: failed to resolve 'work': -2 [ 512.413666][T11146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1644'. [ 513.576532][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1649'. [ 514.134153][T11165] overlayfs: failed to resolve 'work': -2 [ 516.728634][T11184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1657'. [ 518.376114][T11202] overlayfs: failed to resolve 'upper': -2 [ 518.483601][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1664'. [ 522.009904][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1672'. [ 523.753414][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1679'. [ 528.149266][T11280] FAULT_INJECTION: forcing a failure. [ 528.149266][T11280] name failslab, interval 1, probability 0, space 0, times 0 [ 528.162669][T11280] CPU: 1 PID: 11280 Comm: syz.2.1687 Not tainted syzkaller #0 [ 528.170166][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.180251][T11280] Call Trace: [ 528.183542][T11280] [ 528.186462][T11280] dump_stack_lvl+0x18c/0x250 [ 528.191140][T11280] ? show_regs_print_info+0x20/0x20 [ 528.196349][T11280] ? load_image+0x420/0x420 [ 528.200851][T11280] ? __might_sleep+0xe0/0xe0 [ 528.205457][T11280] ? __lock_acquire+0x7d80/0x7d80 [ 528.210484][T11280] ? __lock_acquire+0x1262/0x7d80 [ 528.215532][T11280] should_fail_ex+0x394/0x4c0 [ 528.220239][T11280] should_failslab+0x9/0x20 [ 528.224770][T11280] slab_pre_alloc_hook+0x59/0x300 [ 528.229819][T11280] ? mark_lock+0x94/0x320 [ 528.234171][T11280] kmem_cache_alloc_node+0x5e/0x310 [ 528.239395][T11280] ? __lock_acquire+0x1262/0x7d80 [ 528.244440][T11280] ? __alloc_skb+0x103/0x2c0 [ 528.249062][T11280] __alloc_skb+0x103/0x2c0 [ 528.253507][T11280] netlink_ack+0x377/0x1160 [ 528.258214][T11280] ? verify_lock_unused+0x140/0x140 [ 528.263439][T11280] ? netlink_dump+0xec0/0xec0 [ 528.268145][T11280] netlink_rcv_skb+0x2b3/0x4c0 [ 528.272930][T11280] ? rtnetlink_bind+0x80/0x80 [ 528.277631][T11280] ? netlink_ack+0x1160/0x1160 [ 528.282424][T11280] ? __lock_acquire+0x7d80/0x7d80 [ 528.287471][T11280] ? net_generic+0x1e/0x240 [ 528.292010][T11280] ? netlink_deliver_tap+0x2e/0x1b0 [ 528.297234][T11280] netlink_unicast+0x7b1/0x930 [ 528.302029][T11280] netlink_sendmsg+0x8d0/0xbf0 [ 528.306818][T11280] ? netlink_getsockopt+0x590/0x590 [ 528.312040][T11280] ? apparmor_socket_sendmsg+0x170/0x330 [ 528.317694][T11280] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 528.323009][T11280] ? security_socket_sendmsg+0x80/0xa0 [ 528.328484][T11280] ? netlink_getsockopt+0x590/0x590 [ 528.333706][T11280] ____sys_sendmsg+0x61b/0x980 [ 528.338498][T11280] ? __asan_memset+0x22/0x40 [ 528.343113][T11280] ? __sys_sendmsg_sock+0x30/0x30 [ 528.348157][T11280] ? __import_iovec+0x5f2/0x850 [ 528.353044][T11280] ? import_iovec+0x73/0xa0 [ 528.357576][T11280] ___sys_sendmsg+0x2a6/0x360 [ 528.362283][T11280] ? __sys_sendmsg+0x2b0/0x2b0 [ 528.367096][T11280] ? __lock_acquire+0x7d80/0x7d80 [ 528.372168][T11280] __se_sys_sendmsg+0x1d0/0x2c0 [ 528.377048][T11280] ? __x64_sys_sendmsg+0x80/0x80 [ 528.382026][T11280] ? lockdep_hardirqs_on+0x98/0x150 [ 528.387258][T11280] do_syscall_64+0x55/0xb0 [ 528.391703][T11280] ? clear_bhb_loop+0x40/0x90 [ 528.396400][T11280] ? clear_bhb_loop+0x40/0x90 [ 528.401103][T11280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.407028][T11280] RIP: 0033:0x7fc72fb9e159 [ 528.411460][T11280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.431329][T11280] RSP: 002b:00007fc7309f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.439779][T11280] RAX: ffffffffffffffda RBX: 00007fc72fe25fa0 RCX: 00007fc72fb9e159 [ 528.447769][T11280] RDX: 0000000020004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 528.455763][T11280] RBP: 00007fc72fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 528.463750][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.471749][T11280] R13: 00007fc72fe26038 R14: 00007fc72fe25fa0 R15: 00007ffcce22c548 [ 528.479779][T11280] [ 528.557513][T11283] No source specified [ 528.563820][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1688'. [ 529.112121][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1690'. [ 530.936982][T11313] No source specified [ 531.151761][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'. [ 531.930139][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1702'. [ 536.112703][T11359] No source specified [ 536.365961][T11366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1714'. [ 540.198636][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1725'. [ 543.285264][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1737'. [ 545.218908][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 547.678448][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 550.179380][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 550.428599][T11534] gadgetfs: bound to dummy_udc driver [ 550.644360][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 550.721388][ T7302] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 550.760357][ C1] gadgetfs: connected [ 550.768306][ T7302] gadgetfs: disconnected [ 553.604053][T11574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1771'. [ 554.711478][T11580] overlayfs: failed to resolve 'lower1': -2 [ 556.126780][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1783'. [ 556.906671][T11607] gadgetfs: bound to dummy_udc driver [ 557.200173][ T7302] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 557.207900][ C1] gadgetfs: connected [ 557.213006][T11606] gadgetfs: suspended from state 3 [ 557.219831][T11616] overlayfs: failed to resolve 'lower1': -2 [ 557.220462][T11606] gadgetfs: disconnected [ 560.235060][T11652] 9pnet_fd: p9_fd_create_unix (11652): problem connecting socket: ./proc: -111 [ 560.273922][T11653] overlayfs: failed to resolve 'lower1': -2 [ 560.420283][T11657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1795'. [ 563.120452][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.126806][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.593087][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1808'. [ 563.883206][T11688] 9pnet_fd: p9_fd_create_unix (11688): problem connecting socket: ./proc: -111 [ 564.399926][T11694] overlayfs: failed to resolve 'lower1': -2 [ 566.339988][T11720] 9pnet_fd: p9_fd_create_unix (11720): problem connecting socket: ./proc: -111 [ 566.428377][T11725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1820'. [ 567.288875][T11731] overlayfs: failed to resolve 'lower1': -2 [ 569.940768][T11752] 9pnet_fd: p9_fd_create_unix (11752): problem connecting socket: ./proc: -111 [ 570.085458][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1832'. [ 570.892356][T11761] overlayfs: failed to resolve 'lower1': -2 [ 573.900161][ T5773] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 574.200563][T11789] 9pnet_fd: p9_fd_create_unix (11789): problem connecting socket: ./proc: -111 [ 574.679852][T11798] overlayfs: failed to resolve 'lower2': -2 [ 574.722444][ T5773] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 574.748219][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.773888][T11799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1845'. [ 575.289934][ T5773] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 575.562288][T11802] jffs2: notice: (11802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 575.601384][ T5773] usb 2-1: USB disconnect, device number 25 [ 577.249519][T11822] 9pnet_fd: p9_fd_create_unix (11822): problem connecting socket: ./proc: -111 [ 579.353269][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1860'. [ 581.860475][ T7301] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 582.189780][ T7301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 582.298176][ T7301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.954466][ T7301] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 582.982593][T11857] 9pnet_fd: p9_fd_create_unix (11857): problem connecting socket: ./proc: -111 [ 583.199400][ T7301] usb 4-1: USB disconnect, device number 25 [ 583.370857][T11864] jffs2: notice: (11864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 585.796855][T11885] 9pnet_fd: p9_fd_create_unix (11885): problem connecting socket: ./proc: -111 [ 585.921557][T11888] jffs2: notice: (11888) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 589.132075][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1873'. [ 589.238459][T11924] FAULT_INJECTION: forcing a failure. [ 589.238459][T11924] name failslab, interval 1, probability 0, space 0, times 0 [ 589.283577][T11924] CPU: 0 PID: 11924 Comm: syz.1.1887 Not tainted syzkaller #0 [ 589.291107][T11924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.301183][T11924] Call Trace: [ 589.304480][T11924] [ 589.307436][T11924] dump_stack_lvl+0x18c/0x250 [ 589.312164][T11924] ? show_regs_print_info+0x20/0x20 [ 589.317482][T11924] ? load_image+0x420/0x420 [ 589.322025][T11924] ? __lock_acquire+0x7d80/0x7d80 [ 589.327089][T11924] should_fail_ex+0x394/0x4c0 [ 589.331808][T11924] should_failslab+0x9/0x20 [ 589.336348][T11924] slab_pre_alloc_hook+0x59/0x300 [ 589.341409][T11924] ? __lock_acquire+0x7d80/0x7d80 [ 589.346458][T11924] ? security_sk_alloc+0x4b/0x130 [ 589.351518][T11924] ? security_sk_alloc+0x4b/0x130 [ 589.356563][T11924] __kmem_cache_alloc_node+0x53/0x250 [ 589.361970][T11924] ? security_sk_alloc+0x4b/0x130 [ 589.367015][T11924] __kmalloc+0xa7/0x240 [ 589.371203][T11924] security_sk_alloc+0x4b/0x130 [ 589.376084][T11924] sk_prot_alloc+0x101/0x210 [ 589.380705][T11924] sk_alloc+0x3a/0x350 [ 589.384808][T11924] unix_create1+0xb0/0x780 [ 589.389257][T11924] ? bpf_lsm_socket_post_create+0x9/0x10 [ 589.394923][T11924] unix_stream_connect+0x24d/0xd60 [ 589.400068][T11924] p9_fd_create_unix+0x21a/0x440 [ 589.405035][T11924] ? p9_pollwake+0x160/0x160 [ 589.409651][T11924] ? lockdep_hardirqs_on+0x98/0x150 [ 589.414896][T11924] ? p9_client_create+0x78a/0x1050 [ 589.420032][T11924] ? __kmem_cache_free+0xba/0x1f0 [ 589.425088][T11924] p9_client_create+0x827/0x1050 [ 589.430058][T11924] ? do_trace_9p_fid_put+0x20/0x20 [ 589.435190][T11924] ? lockdep_softirqs_off+0x440/0x440 [ 589.440600][T11924] ? __raw_spin_lock_init+0x45/0x100 [ 589.445922][T11924] v9fs_session_init+0x1aa/0x1960 [ 589.450993][T11924] ? v9fs_show_options+0x700/0x700 [ 589.456161][T11924] v9fs_mount+0xd0/0xb40 [ 589.460439][T11924] ? kfree+0x31/0x1a0 [ 589.464461][T11924] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 589.470314][T11924] ? vfs_parse_fs_param+0x420/0x420 [ 589.475553][T11924] legacy_get_tree+0xea/0x180 [ 589.480259][T11924] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 589.486095][T11924] vfs_get_tree+0x8c/0x280 [ 589.490546][T11924] do_new_mount+0x24a/0xa40 [ 589.495079][T11924] __se_sys_mount+0x2e7/0x3d0 [ 589.499789][T11924] ? __x64_sys_mount+0xc0/0xc0 [ 589.504581][T11924] ? lockdep_hardirqs_on+0x98/0x150 [ 589.509812][T11924] ? __x64_sys_mount+0x20/0xc0 [ 589.514604][T11924] do_syscall_64+0x55/0xb0 [ 589.519052][T11924] ? clear_bhb_loop+0x40/0x90 [ 589.523760][T11924] ? clear_bhb_loop+0x40/0x90 [ 589.528481][T11924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.534401][T11924] RIP: 0033:0x7f631b19e159 [ 589.538841][T11924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.558488][T11924] RSP: 002b:00007f631bfd8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.566936][T11924] RAX: ffffffffffffffda RBX: 00007f631b426090 RCX: 00007f631b19e159 [ 589.574938][T11924] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 589.582943][T11924] RBP: 00007f631b235024 R08: 0000200000000440 R09: 0000000000000000 [ 589.590954][T11924] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 589.598976][T11924] R13: 00007f631b426128 R14: 00007f631b426090 R15: 00007ffd2e034c68 [ 589.607000][T11924] [ 589.610098][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.850358][T11924] 9pnet_fd: p9_fd_create_unix (11924): problem connecting socket: ./proc: -12 [ 593.945982][T11962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1897'. [ 594.700223][ T7301] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 595.645062][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1906'. [ 595.711047][ T7301] usb 3-1: Using ep0 maxpacket: 8 [ 596.548956][ T7301] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 596.557941][ T7301] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.568382][ T7301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.578471][ T7301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.588744][ T7301] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.602173][ T7301] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 596.615552][ T7301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.837975][ T7301] usb 3-1: GET_CAPABILITIES returned 0 [ 596.850148][ T7301] usbtmc 3-1:16.0: can't read capabilities [ 597.057711][ T7301] usb 3-1: USB disconnect, device number 20 [ 598.860343][T12029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'. [ 601.410305][T12074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1930'. [ 604.032946][T12091] FAULT_INJECTION: forcing a failure. [ 604.032946][T12091] name fail_futex, interval 1, probability 0, space 0, times 0 [ 604.112815][T12091] CPU: 1 PID: 12091 Comm: syz.3.1934 Not tainted syzkaller #0 [ 604.120345][T12091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.130430][T12091] Call Trace: [ 604.133725][T12091] [ 604.136669][T12091] dump_stack_lvl+0x18c/0x250 [ 604.141378][T12091] ? show_regs_print_info+0x20/0x20 [ 604.146597][T12091] ? load_image+0x420/0x420 [ 604.151117][T12091] ? __lock_acquire+0x1336/0x7d80 [ 604.156173][T12091] should_fail_ex+0x394/0x4c0 [ 604.160880][T12091] get_futex_key+0x16f/0x1030 [ 604.165583][T12091] ? futex_setup_timer+0xc0/0xc0 [ 604.170546][T12091] futex_wake+0x127/0x4f0 [ 604.174900][T12091] ? futex_wake_mark+0x150/0x150 [ 604.179865][T12091] do_futex+0x35d/0x3e0 [ 604.184034][T12091] ? __might_fault+0xaa/0x120 [ 604.188730][T12091] ? __ia32_sys_get_robust_list+0x110/0x110 [ 604.194732][T12091] ? __might_fault+0xc6/0x120 [ 604.199428][T12091] mm_release+0x184/0x3a0 [ 604.203777][T12091] ? exit_mm_release+0x30/0x30 [ 604.208555][T12091] ? lockdep_hardirqs_on+0x98/0x150 [ 604.213783][T12091] exit_mm+0xa4/0x340 [ 604.217791][T12091] ? sysctl_delayacct+0x220/0x220 [ 604.222828][T12091] ? do_exit+0x2530/0x2530 [ 604.227266][T12091] ? rcuwait_wake_up+0x1c/0x230 [ 604.232400][T12091] ? rcuwait_wake_up+0x1e8/0x230 [ 604.237369][T12091] do_exit+0x909/0x2530 [ 604.241560][T12091] ? put_task_struct+0xc0/0xc0 [ 604.246348][T12091] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 604.252362][T12091] ? get_signal+0x100e/0x1390 [ 604.257059][T12091] ? lock_chain_count+0x20/0x20 [ 604.261930][T12091] ? _raw_spin_lock_irq+0xbb/0xf0 [ 604.266972][T12091] do_group_exit+0x22d/0x2f0 [ 604.271589][T12091] ? lockdep_hardirqs_on+0x98/0x150 [ 604.276814][T12091] get_signal+0x12a6/0x1390 [ 604.281342][T12091] ? __fget_files+0x28/0x460 [ 604.285967][T12091] arch_do_signal_or_restart+0xc2/0x7b0 [ 604.291537][T12091] ? __ia32_sys_get_robust_list+0x110/0x110 [ 604.297472][T12091] ? __fdget+0x192/0x210 [ 604.301736][T12091] ? get_sigframe_size+0x20/0x20 [ 604.306717][T12091] ? exit_to_user_mode_loop+0x3b/0x110 [ 604.312207][T12091] exit_to_user_mode_loop+0x70/0x110 [ 604.317515][T12091] exit_to_user_mode_prepare+0xee/0x180 [ 604.323084][T12091] syscall_exit_to_user_mode+0x1a/0x50 [ 604.328569][T12091] do_syscall_64+0x61/0xb0 [ 604.333002][T12091] ? clear_bhb_loop+0x40/0x90 [ 604.337696][T12091] ? clear_bhb_loop+0x40/0x90 [ 604.342392][T12091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.348301][T12091] RIP: 0033:0x7fdfc099e159 [ 604.352733][T12091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.372378][T12091] RSP: 002b:00007fdfbebf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 604.380829][T12091] RAX: fffffffffffffe00 RBX: 00007fdfc0c25fa8 RCX: 00007fdfc099e159 [ 604.388822][T12091] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfc0c25fa8 [ 604.396808][T12091] RBP: 00007fdfc0c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 604.404808][T12091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.412809][T12091] R13: 00007fdfc0c26038 R14: 00007ffe5f812f20 R15: 00007ffe5f813008 [ 604.420813][T12091] [ 604.966738][T12099] FAULT_INJECTION: forcing a failure. [ 604.966738][T12099] name failslab, interval 1, probability 0, space 0, times 0 [ 605.000658][T12099] CPU: 0 PID: 12099 Comm: syz.3.1938 Not tainted syzkaller #0 [ 605.008194][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.018277][T12099] Call Trace: [ 605.021561][T12099] [ 605.024486][T12099] dump_stack_lvl+0x18c/0x250 [ 605.029168][T12099] ? show_regs_print_info+0x20/0x20 [ 605.034366][T12099] ? load_image+0x420/0x420 [ 605.038868][T12099] ? __might_sleep+0xe0/0xe0 [ 605.043465][T12099] ? __lock_acquire+0x7d80/0x7d80 [ 605.048667][T12099] should_fail_ex+0x394/0x4c0 [ 605.053352][T12099] should_failslab+0x9/0x20 [ 605.057866][T12099] slab_pre_alloc_hook+0x59/0x300 [ 605.062913][T12099] ? p9_client_create+0x33b/0x1050 [ 605.068028][T12099] ? p9_client_create+0x33b/0x1050 [ 605.073140][T12099] __kmem_cache_alloc_node+0x53/0x250 [ 605.078523][T12099] ? p9_client_create+0x33b/0x1050 [ 605.083629][T12099] __kmalloc_node_track_caller+0xa4/0x230 [ 605.089355][T12099] kstrdup+0x3b/0x80 [ 605.093253][T12099] p9_client_create+0x33b/0x1050 [ 605.098194][T12099] ? do_trace_9p_fid_put+0x20/0x20 [ 605.103303][T12099] ? lockdep_softirqs_off+0x440/0x440 [ 605.108673][T12099] ? lockdep_softirqs_off+0x440/0x440 [ 605.114047][T12099] ? free_zapped_rcu+0x250/0x250 [ 605.119004][T12099] ? v9fs_session_init+0xf4/0x1960 [ 605.124122][T12099] ? __raw_spin_lock_init+0x45/0x100 [ 605.129410][T12099] v9fs_session_init+0x1aa/0x1960 [ 605.134445][T12099] ? v9fs_show_options+0x700/0x700 [ 605.139571][T12099] v9fs_mount+0xd0/0xb40 [ 605.143823][T12099] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 605.149634][T12099] legacy_get_tree+0xea/0x180 [ 605.154311][T12099] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 605.160122][T12099] vfs_get_tree+0x8c/0x280 [ 605.164548][T12099] do_new_mount+0x24a/0xa40 [ 605.169056][T12099] __se_sys_mount+0x2e7/0x3d0 [ 605.173760][T12099] ? __x64_sys_mount+0xc0/0xc0 [ 605.178525][T12099] ? lockdep_hardirqs_on+0x98/0x150 [ 605.183728][T12099] ? __x64_sys_mount+0x20/0xc0 [ 605.188493][T12099] do_syscall_64+0x55/0xb0 [ 605.192908][T12099] ? clear_bhb_loop+0x40/0x90 [ 605.197584][T12099] ? clear_bhb_loop+0x40/0x90 [ 605.202261][T12099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.208153][T12099] RIP: 0033:0x7fdfc099e159 [ 605.212568][T12099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.232173][T12099] RSP: 002b:00007fdfbebf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 605.240587][T12099] RAX: ffffffffffffffda RBX: 00007fdfc0c25fa0 RCX: 00007fdfc099e159 [ 605.248556][T12099] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 605.256529][T12099] RBP: 00007fdfc0a35024 R08: 0000200000000440 R09: 0000000000000000 [ 605.264509][T12099] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 605.272474][T12099] R13: 00007fdfc0c26038 R14: 00007fdfc0c25fa0 R15: 00007ffe5f813008 [ 605.280454][T12099] [ 605.283482][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.266552][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1939'. [ 606.728398][T12125] FAULT_INJECTION: forcing a failure. [ 606.728398][T12125] name fail_futex, interval 1, probability 0, space 0, times 0 [ 606.741931][T12125] CPU: 1 PID: 12125 Comm: syz.3.1946 Not tainted syzkaller #0 [ 606.749426][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.759498][T12125] Call Trace: [ 606.762768][T12125] [ 606.765685][T12125] dump_stack_lvl+0x18c/0x250 [ 606.770355][T12125] ? show_regs_print_info+0x20/0x20 [ 606.775538][T12125] ? load_image+0x420/0x420 [ 606.780025][T12125] ? __lock_acquire+0x1336/0x7d80 [ 606.785042][T12125] should_fail_ex+0x394/0x4c0 [ 606.789707][T12125] get_futex_key+0x16f/0x1030 [ 606.794399][T12125] ? futex_setup_timer+0xc0/0xc0 [ 606.799327][T12125] futex_wake+0x127/0x4f0 [ 606.803655][T12125] ? futex_wake_mark+0x150/0x150 [ 606.808586][T12125] do_futex+0x35d/0x3e0 [ 606.812773][T12125] ? __might_fault+0xaa/0x120 [ 606.817453][T12125] ? __ia32_sys_get_robust_list+0x110/0x110 [ 606.823368][T12125] ? __might_fault+0xc6/0x120 [ 606.828042][T12125] mm_release+0x184/0x3a0 [ 606.832363][T12125] ? exit_mm_release+0x30/0x30 [ 606.837112][T12125] ? lockdep_hardirqs_on+0x98/0x150 [ 606.842322][T12125] exit_mm+0xa4/0x340 [ 606.846293][T12125] ? sysctl_delayacct+0x220/0x220 [ 606.851304][T12125] ? do_exit+0x2530/0x2530 [ 606.855713][T12125] do_exit+0x909/0x2530 [ 606.859860][T12125] ? put_task_struct+0xc0/0xc0 [ 606.864612][T12125] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 606.870577][T12125] ? get_signal+0x100e/0x1390 [ 606.875245][T12125] ? lock_chain_count+0x20/0x20 [ 606.880088][T12125] ? _raw_spin_lock_irq+0xbb/0xf0 [ 606.885111][T12125] do_group_exit+0x22d/0x2f0 [ 606.889692][T12125] ? lockdep_hardirqs_on+0x98/0x150 [ 606.894883][T12125] get_signal+0x12a6/0x1390 [ 606.899379][T12125] ? __fget_files+0x28/0x460 [ 606.903958][T12125] arch_do_signal_or_restart+0xc2/0x7b0 [ 606.909496][T12125] ? __ia32_sys_get_robust_list+0x110/0x110 [ 606.915372][T12125] ? __fdget+0x192/0x210 [ 606.919600][T12125] ? get_sigframe_size+0x20/0x20 [ 606.924565][T12125] ? exit_to_user_mode_loop+0x3b/0x110 [ 606.930013][T12125] exit_to_user_mode_loop+0x70/0x110 [ 606.935299][T12125] exit_to_user_mode_prepare+0xee/0x180 [ 606.940839][T12125] syscall_exit_to_user_mode+0x1a/0x50 [ 606.946295][T12125] do_syscall_64+0x61/0xb0 [ 606.950698][T12125] ? clear_bhb_loop+0x40/0x90 [ 606.955360][T12125] ? clear_bhb_loop+0x40/0x90 [ 606.960023][T12125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.965903][T12125] RIP: 0033:0x7fdfc099e159 [ 606.970306][T12125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.989903][T12125] RSP: 002b:00007fdfbebf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 606.998306][T12125] RAX: fffffffffffffe00 RBX: 00007fdfc0c25fa8 RCX: 00007fdfc099e159 [ 607.006284][T12125] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfc0c25fa8 [ 607.014276][T12125] RBP: 00007fdfc0c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 607.022235][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.030190][T12125] R13: 00007fdfc0c26038 R14: 00007ffe5f812f20 R15: 00007ffe5f813008 [ 607.038245][T12125] [ 607.124000][T12131] FAULT_INJECTION: forcing a failure. [ 607.124000][T12131] name failslab, interval 1, probability 0, space 0, times 0 [ 607.136850][T12131] CPU: 1 PID: 12131 Comm: syz.4.1949 Not tainted syzkaller #0 [ 607.144345][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.154433][T12131] Call Trace: [ 607.157740][T12131] [ 607.160699][T12131] dump_stack_lvl+0x18c/0x250 [ 607.165413][T12131] ? show_regs_print_info+0x20/0x20 [ 607.170642][T12131] ? load_image+0x420/0x420 [ 607.175185][T12131] ? __might_sleep+0xe0/0xe0 [ 607.179813][T12131] ? __lock_acquire+0x7d80/0x7d80 [ 607.184887][T12131] should_fail_ex+0x394/0x4c0 [ 607.189596][T12131] should_failslab+0x9/0x20 [ 607.194172][T12131] slab_pre_alloc_hook+0x59/0x300 [ 607.199207][T12131] ? p9_client_create+0x33b/0x1050 [ 607.204321][T12131] ? p9_client_create+0x33b/0x1050 [ 607.209431][T12131] __kmem_cache_alloc_node+0x53/0x250 [ 607.214811][T12131] ? p9_client_create+0x33b/0x1050 [ 607.219927][T12131] __kmalloc_node_track_caller+0xa4/0x230 [ 607.225661][T12131] kstrdup+0x3b/0x80 [ 607.229557][T12131] p9_client_create+0x33b/0x1050 [ 607.234500][T12131] ? do_trace_9p_fid_put+0x20/0x20 [ 607.239631][T12131] ? lockdep_softirqs_off+0x440/0x440 [ 607.245011][T12131] ? lockdep_softirqs_off+0x440/0x440 [ 607.250385][T12131] ? free_zapped_rcu+0x250/0x250 [ 607.255323][T12131] ? v9fs_session_init+0xf4/0x1960 [ 607.260470][T12131] ? __raw_spin_lock_init+0x45/0x100 [ 607.265767][T12131] v9fs_session_init+0x1aa/0x1960 [ 607.270804][T12131] ? v9fs_show_options+0x700/0x700 [ 607.275932][T12131] v9fs_mount+0xd0/0xb40 [ 607.280213][T12131] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 607.286038][T12131] legacy_get_tree+0xea/0x180 [ 607.290719][T12131] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 607.296527][T12131] vfs_get_tree+0x8c/0x280 [ 607.300947][T12131] do_new_mount+0x24a/0xa40 [ 607.305457][T12131] __se_sys_mount+0x2e7/0x3d0 [ 607.310138][T12131] ? __x64_sys_mount+0xc0/0xc0 [ 607.314904][T12131] ? lockdep_hardirqs_on+0x98/0x150 [ 607.320109][T12131] ? __x64_sys_mount+0x20/0xc0 [ 607.324879][T12131] do_syscall_64+0x55/0xb0 [ 607.329295][T12131] ? clear_bhb_loop+0x40/0x90 [ 607.333975][T12131] ? clear_bhb_loop+0x40/0x90 [ 607.338676][T12131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.344579][T12131] RIP: 0033:0x7f89da39e159 [ 607.348997][T12131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.368607][T12131] RSP: 002b:00007f89db24e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 607.377030][T12131] RAX: ffffffffffffffda RBX: 00007f89da625fa0 RCX: 00007f89da39e159 [ 607.385005][T12131] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 607.392978][T12131] RBP: 00007f89da435024 R08: 0000200000000440 R09: 0000000000000000 [ 607.400947][T12131] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 607.408914][T12131] R13: 00007f89da626038 R14: 00007f89da625fa0 R15: 00007ffc5ed37918 [ 607.416894][T12131] [ 608.572887][ T7302] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 608.650185][ T7301] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 608.790197][ T7302] usb 3-1: Using ep0 maxpacket: 16 [ 608.797412][ T7302] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.827240][ T7302] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 608.840679][ T7302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.852457][ T7302] usb 3-1: Product: syz [ 608.857464][ T7302] usb 3-1: Manufacturer: syz [ 608.862165][ T7302] usb 3-1: SerialNumber: syz [ 608.879138][ T7301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.896093][ T7302] usb 3-1: config 0 descriptor?? [ 608.908054][ T7301] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.921482][ T7301] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 608.930697][ T7301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.963531][ T7301] opticon 4-1:1.0: required endpoints missing [ 609.062982][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 609.165512][ T5773] usb 4-1: USB disconnect, device number 26 [ 624.543086][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.549461][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.982986][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.989378][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.510238][ C0] ------------[ cut here ]------------ [ 715.517360][ C0] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 715.527661][ C0] Modules linked in: [ 715.531603][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 715.538662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 715.548744][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 715.555117][ C0] Code: ff ff ff 48 c7 c7 a0 84 33 97 be 04 00 00 00 e8 ea 24 6e 00 48 89 df b8 01 00 00 00 87 05 ac a3 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 73 13 8d 74 47 48 c7 c0 6c c2 8c 8e 48 c1 e8 03 [ 715.574760][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 715.580858][ C0] RAX: 0000000000000000 RBX: ffffffff8d137340 RCX: ffffffff8171e0e6 [ 715.588857][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137340 [ 715.596855][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 715.604850][ C0] R10: dffffc0000000000 R11: fffffbfff2e67094 R12: 0000000000002904 [ 715.612847][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 715.620881][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 715.629841][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.636448][ C0] CR2: 00007fc730996d58 CR3: 000000007d0c1000 CR4: 00000000003506f0 [ 715.644450][ C0] Call Trace: [ 715.647756][ C0] [ 715.650619][ C0] rcu_core+0x5ec/0x17f0 [ 715.654893][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 715.659942][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 715.665517][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.670740][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 715.675960][ C0] ? __run_timers+0x7b3/0x810 [ 715.680663][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 715.685891][ C0] ? __run_timers+0x780/0x810 [ 715.690607][ C0] ? detach_timer+0x2b0/0x2b0 [ 715.695314][ C0] ? detach_timer+0x2b0/0x2b0 [ 715.700025][ C0] ? lock_chain_count+0x20/0x20 [ 715.704910][ C0] handle_softirqs+0x27d/0x820 [ 715.709699][ C0] ? read_tsc+0x9/0x20 [ 715.713798][ C0] ? ktime_get+0x24b/0x280 [ 715.718249][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 715.723042][ C0] ? do_softirq+0x1a0/0x1a0 [ 715.727571][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 715.732805][ C0] __irq_exit_rcu+0xd3/0x190 [ 715.737424][ C0] ? irq_exit_rcu+0x20/0x20 [ 715.741958][ C0] irq_exit_rcu+0x9/0x20 [ 715.746225][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 715.751895][ C0] [ 715.754841][ C0] [ 715.757786][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 715.763796][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 715.769463][ C0] Code: b9 19 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 76 38 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 715.789095][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 715.795194][ C0] RAX: 016e27081e3cf300 RBX: ffffffff81631c41 RCX: 016e27081e3cf300 [ 715.803195][ C0] RDX: 0000000000000001 RSI: ffffffff8acacce0 RDI: ffffffff8b1d35e0 [ 715.811199][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b6b R09: 1ffff110171c6d6d [ 715.819196][ C0] R10: dffffc0000000000 R11: ffffed10171c6d6e R12: 1ffffffff19c0fbc [ 715.827195][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 715.835195][ C0] ? do_idle+0x221/0x5c0 [ 715.839478][ C0] default_idle+0x13/0x20 [ 715.843830][ C0] default_idle_call+0x6c/0xa0 [ 715.848618][ C0] do_idle+0x221/0x5c0 [ 715.852723][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 715.857951][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 715.863652][ C0] cpu_startup_entry+0x43/0x60 [ 715.868450][ C0] rest_init+0x2e2/0x300 [ 715.872720][ C0] ? time_init+0x40/0x40 [ 715.876986][ C0] arch_call_rest_init+0xe/0x10 [ 715.881866][ C0] start_kernel+0x461/0x4e0 [ 715.886400][ C0] x86_64_start_reservations+0x2a/0x30 [ 715.891894][ C0] x86_64_start_kernel+0x60/0x60 [ 715.896867][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 715.902984][ C0] [ 715.906022][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 715.913326][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 715.920369][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 715.930438][ C0] Call Trace: [ 715.933733][ C0] [ 715.936590][ C0] dump_stack_lvl+0x18c/0x250 [ 715.941299][ C0] ? show_regs_print_info+0x20/0x20 [ 715.946530][ C0] ? load_image+0x420/0x420 [ 715.951068][ C0] panic+0x2ca/0x720 [ 715.954996][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 715.959533][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 715.965810][ C0] __warn+0x2e0/0x470 [ 715.969820][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 715.975628][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 715.981385][ C0] report_bug+0x2be/0x4f0 [ 715.985742][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 715.991504][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 715.997262][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 716.003017][ C0] handle_bug+0xcf/0x120 [ 716.007294][ C0] exc_invalid_op+0x1a/0x50 [ 716.011831][ C0] asm_exc_invalid_op+0x1a/0x20 [ 716.016707][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 716.023073][ C0] Code: ff ff ff 48 c7 c7 a0 84 33 97 be 04 00 00 00 e8 ea 24 6e 00 48 89 df b8 01 00 00 00 87 05 ac a3 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 73 13 8d 74 47 48 c7 c0 6c c2 8c 8e 48 c1 e8 03 [ 716.042706][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 716.048805][ C0] RAX: 0000000000000000 RBX: ffffffff8d137340 RCX: ffffffff8171e0e6 [ 716.056812][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137340 [ 716.064815][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 716.072816][ C0] R10: dffffc0000000000 R11: fffffbfff2e67094 R12: 0000000000002904 [ 716.080814][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 716.088823][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 716.094590][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 716.100345][ C0] rcu_core+0x5ec/0x17f0 [ 716.104608][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 716.109653][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 716.115224][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 716.120446][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 716.125667][ C0] ? __run_timers+0x7b3/0x810 [ 716.130369][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 716.135589][ C0] ? __run_timers+0x780/0x810 [ 716.140300][ C0] ? detach_timer+0x2b0/0x2b0 [ 716.145025][ C0] ? detach_timer+0x2b0/0x2b0 [ 716.149729][ C0] ? lock_chain_count+0x20/0x20 [ 716.154612][ C0] handle_softirqs+0x27d/0x820 [ 716.159398][ C0] ? read_tsc+0x9/0x20 [ 716.163485][ C0] ? ktime_get+0x24b/0x280 [ 716.167927][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 716.172717][ C0] ? do_softirq+0x1a0/0x1a0 [ 716.177246][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 716.182475][ C0] __irq_exit_rcu+0xd3/0x190 [ 716.187086][ C0] ? irq_exit_rcu+0x20/0x20 [ 716.191621][ C0] irq_exit_rcu+0x9/0x20 [ 716.195882][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 716.201546][ C0] [ 716.204490][ C0] [ 716.207433][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.213446][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 716.219108][ C0] Code: b9 19 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 76 38 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 716.238742][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 716.244844][ C0] RAX: 016e27081e3cf300 RBX: ffffffff81631c41 RCX: 016e27081e3cf300 [ 716.252836][ C0] RDX: 0000000000000001 RSI: ffffffff8acacce0 RDI: ffffffff8b1d35e0 [ 716.260829][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b6b R09: 1ffff110171c6d6d [ 716.268822][ C0] R10: dffffc0000000000 R11: ffffed10171c6d6e R12: 1ffffffff19c0fbc [ 716.276819][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 716.284827][ C0] ? do_idle+0x221/0x5c0 [ 716.289113][ C0] default_idle+0x13/0x20 [ 716.293464][ C0] default_idle_call+0x6c/0xa0 [ 716.298248][ C0] do_idle+0x221/0x5c0 [ 716.302350][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 716.307572][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 716.313253][ C0] cpu_startup_entry+0x43/0x60 [ 716.318041][ C0] rest_init+0x2e2/0x300 [ 716.322304][ C0] ? time_init+0x40/0x40 [ 716.326568][ C0] arch_call_rest_init+0xe/0x10 [ 716.331448][ C0] start_kernel+0x461/0x4e0 [ 716.335978][ C0] x86_64_start_reservations+0x2a/0x30 [ 716.341469][ C0] x86_64_start_kernel+0x60/0x60 [ 716.346439][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 716.352548][ C0] [ 716.355711][ C0] Kernel Offset: disabled [ 716.360587][ C0] Rebooting in 86400 seconds..