ci-upstream-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce/syz-executor76391588

<...>
Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts.
execve("ci-upstream-kasan-gce/syz-executor76391588", ["ci-upstream-kasan-gce/syz-executor76391588"], 0x7fffc2e03320 /* 10 vars */) = 0
brk(NULL)                               = 0x555590f32000
brk(0x555590f32e40)                     = 0x555590f32e40
arch_prctl(ARCH_SET_FS, 0x555590f324c0) = 0
set_tid_address(0x555590f32790)         = 5620
set_robust_list(0x555590f327a0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce/syz-executor76391588", 4096) = 48
getrandom("\x5d\x64\xf1\x92\x32\x68\x61\x4a", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555590f32e40
brk(0x555590f53e40)                     = 0x555590f53e40
brk(0x555590f54000)                     = 0x555590f54000
mprotect(0x7f2c2ba59000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3
write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21
close(3)                                = 0
openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3
write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 24) = 24
close(3)                                = 0
swapoff("./swap-file")                  = -1 ENOENT (No such file or directory)
unlink("./swap-file")                   = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3
fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0
close(3)                                = 0
rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f2c2b99b390}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f2c2b99b390}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2c2b97c000
rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0
clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7f2c2b97c000, stack_size=0x9000}, 88ci-upstream-kasan-gce/strace-static-x86_64: Process 5621 attached
 <unfinished ...>
[pid  5621] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0
[pid  5621] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f2c2b99b390}, NULL, 8) = 0
[pid  5621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5621] execve("/bin/sh", ["sh", "-c", "--", "mkswap ./swap-file"], 0x7fffd464e358 /* 10 vars */ <unfinished ...>
[pid  5620] <... clone3 resumed>)       = 5621
[pid  5620] munmap(0x7f2c2b97c000, 36864) = 0
[pid  5621] <... execve resumed>)       = 0
[pid  5620] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
[pid  5621] brk(NULL)                   = 0x55e3f1bd4000
[pid  5621] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb914d95000
[pid  5621] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffc20a014f0, 0) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffc20a014f0, 0) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0
[pid  5621] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb914cd3000
[pid  5621] mmap(0x7fb914ce3000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7fb914ce3000
[pid  5621] mmap(0x7fb914d69000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7fb914d69000
[pid  5621] mmap(0x7fb914d91000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7fb914d91000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832
[pid  5621] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0
[pid  5621] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid  5621] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb914af3000
[pid  5621] mmap(0x7fb914b1b000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7fb914b1b000
[pid  5621] mmap(0x7fb914c69000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7fb914c69000
[pid  5621] mmap(0x7fb914cc0000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7fb914cc0000
[pid  5621] mmap(0x7fb914cc6000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fb914cc6000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0
[pid  5621] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb914ae2000
[pid  5621] mmap(0x7fb914ae5000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fb914ae5000
[pid  5621] mmap(0x7fb914aed000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fb914aed000
[pid  5621] mmap(0x7fb914af1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7fb914af1000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0
[pid  5621] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb914adb000
[pid  5621] mmap(0x7fb914add000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fb914add000
[pid  5621] mmap(0x7fb914adf000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fb914adf000
[pid  5621] mmap(0x7fb914ae0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fb914ae0000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0
[pid  5621] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb914aca000
[pid  5621] mmap(0x7fb914acd000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fb914acd000
[pid  5621] mmap(0x7fb914ad5000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fb914ad5000
[pid  5621] mmap(0x7fb914ad7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7fb914ad7000
[pid  5621] mmap(0x7fb914ad9000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fb914ad9000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffc20a01450, 0) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffc20a01450, 0) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0
[pid  5621] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb914a9a000
[pid  5621] mmap(0x7fb914aa2000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7fb914aa2000
[pid  5621] mmap(0x7fb914abe000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7fb914abe000
[pid  5621] mmap(0x7fb914ac6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7fb914ac6000
[pid  5621] mmap(0x7fb914ac8000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fb914ac8000
[pid  5621] close(3)                    = 0
[pid  5621] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb914a98000
[pid  5621] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0
[pid  5621] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb914a8e000
[pid  5621] mmap(0x7fb914a90000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fb914a90000
[pid  5621] mmap(0x7fb914a93000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fb914a93000
[pid  5621] mmap(0x7fb914a95000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fb914a95000
[pid  5621] mmap(0x7fb914a97000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fb914a97000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0
[pid  5621] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb914a2c000
[pid  5621] mmap(0x7fb914a2f000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fb914a2f000
[pid  5621] mmap(0x7fb914a66000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7fb914a66000
[pid  5621] mmap(0x7fb914a8c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7fb914a8c000
[pid  5621] close(3)                    = 0
[pid  5621] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb914a2a000
[pid  5621] arch_prctl(ARCH_SET_FS, 0x7fb914a2ac80) = 0
[pid  5621] set_tid_address(0x7fb914a2af50) = 5621
[pid  5621] set_robust_list(0x7fb914a2af60, 24) = 0
[pid  5621] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
[pid  5621] mprotect(0x7fb914cc0000, 16384, PROT_READ) = 0
[pid  5621] mprotect(0x7fb914a8c000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7fb914a95000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7fb914ac6000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7fb914ad7000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7fb914af1000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7fb914ae0000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7fb914d91000, 12288, PROT_READ) = 0
[pid  5621] mprotect(0x55e3c2acd000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7fb914dd2000, 8192, PROT_READ) = 0
[pid  5621] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
[pid  5621] statfs("/sys/fs/selinux", 0x7ffc20a02290) = -1 ENOENT (No such file or directory)
[pid  5621] statfs("/selinux", 0x7ffc20a02290) = -1 ENOENT (No such file or directory)
[pid  5621] getrandom("\x2c\x38\x39\x78\x79\x3f\xd5\xb2", 8, GRND_NONBLOCK) = 8
[pid  5621] brk(NULL)                   = 0x55e3f1bd4000
[pid  5621] brk(0x55e3f1bf5000)         = 0x55e3f1bf5000
[pid  5621] openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
[pid  5621] read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tproc\nnodev\tcgroup\nnodev\tcgroup2\nnodev\tdevtmpfs\nnodev\tbinfmt_misc\nnodev"..., 1024) = 758
[pid  5621] read(3, "", 1024)           = 0
[pid  5621] close(3)                    = 0
[pid  5621] access("/etc/selinux/config", F_OK) = 0
[pid  5621] getpid()                    = 5621
[pid  5621] rt_sigaction(SIGCHLD, {sa_handler=0x7fb914d16287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7fb914b32180}, NULL, 8) = 0
[pid  5621] getppid()                   = 5620
[pid  5621] uname({sysname="Linux", nodename="syzkaller", ...}) = 0
[pid  5621] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0
[pid  5621] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0
[pid  5621] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
[pid  5621] rt_sigaction(SIGINT, {sa_handler=0x7fb914d16287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7fb914b32180}, NULL, 8) = 0
[pid  5621] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0
[pid  5621] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
[pid  5621] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffc20a01de8, 0) = -1 ENOENT (No such file or directory)
[pid  5621] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0
[pid  5621] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x55e3f1bd4d40 /* 10 vars */) = 0
[pid  5621] brk(NULL)                   = 0x55b0d145c000
[pid  5621] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f948d994000
[pid  5621] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffdce9cff30, 0) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffdce9cff30, 0) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0
[pid  5621] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f948d8d2000
[pid  5621] mmap(0x7f948d8e2000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f948d8e2000
[pid  5621] mmap(0x7f948d968000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f948d968000
[pid  5621] mmap(0x7f948d990000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f948d990000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832
[pid  5621] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0
[pid  5621] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid  5621] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f948d6f2000
[pid  5621] mmap(0x7f948d71a000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f948d71a000
[pid  5621] mmap(0x7f948d868000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f948d868000
[pid  5621] mmap(0x7f948d8bf000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f948d8bf000
[pid  5621] mmap(0x7f948d8c5000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f948d8c5000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0
[pid  5621] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f948d6e1000
[pid  5621] mmap(0x7f948d6e4000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f948d6e4000
[pid  5621] mmap(0x7f948d6ec000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f948d6ec000
[pid  5621] mmap(0x7f948d6f0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f948d6f0000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0
[pid  5621] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f948d6da000
[pid  5621] mmap(0x7f948d6dc000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f948d6dc000
[pid  5621] mmap(0x7f948d6de000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f948d6de000
[pid  5621] mmap(0x7f948d6df000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f948d6df000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0
[pid  5621] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f948d6c9000
[pid  5621] mmap(0x7f948d6cc000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f948d6cc000
[pid  5621] mmap(0x7f948d6d4000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f948d6d4000
[pid  5621] mmap(0x7f948d6d6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f948d6d6000
[pid  5621] mmap(0x7f948d6d8000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f948d6d8000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffdce9cfe90, 0) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffdce9cfe90, 0) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0
[pid  5621] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f948d699000
[pid  5621] mmap(0x7f948d6a1000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f948d6a1000
[pid  5621] mmap(0x7f948d6bd000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f948d6bd000
[pid  5621] mmap(0x7f948d6c5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f948d6c5000
[pid  5621] mmap(0x7f948d6c7000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f948d6c7000
[pid  5621] close(3)                    = 0
[pid  5621] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f948d697000
[pid  5621] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0
[pid  5621] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f948d68d000
[pid  5621] mmap(0x7f948d68f000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f948d68f000
[pid  5621] mmap(0x7f948d692000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f948d692000
[pid  5621] mmap(0x7f948d694000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f948d694000
[pid  5621] mmap(0x7f948d696000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f948d696000
[pid  5621] close(3)                    = 0
[pid  5621] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5621] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832
[pid  5621] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0
[pid  5621] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f948d62b000
[pid  5621] mmap(0x7f948d62e000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f948d62e000
[pid  5621] mmap(0x7f948d665000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f948d665000
[pid  5621] mmap(0x7f948d68b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f948d68b000
[pid  5621] close(3)                    = 0
[pid  5621] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f948d629000
[pid  5621] arch_prctl(ARCH_SET_FS, 0x7f948d629c80) = 0
[pid  5621] set_tid_address(0x7f948d629f50) = 5621
[pid  5621] set_robust_list(0x7f948d629f60, 24) = 0
[pid  5621] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
[pid  5621] mprotect(0x7f948d8bf000, 16384, PROT_READ) = 0
[pid  5621] mprotect(0x7f948d68b000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7f948d694000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7f948d6c5000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7f948d6d6000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7f948d6f0000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7f948d6df000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7f948d990000, 12288, PROT_READ) = 0
[pid  5621] mprotect(0x55b0bd903000, 4096, PROT_READ) = 0
[pid  5621] mprotect(0x7f948d9d1000, 8192, PROT_READ) = 0
[pid  5621] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
[pid  5621] statfs("/sys/fs/selinux", 0x7ffdce9d0cd0) = -1 ENOENT (No such file or directory)
[pid  5621] statfs("/selinux", 0x7ffdce9d0cd0) = -1 ENOENT (No such file or directory)
[pid  5621] getrandom("\x80\xa6\xe6\x2e\xee\x80\x6a\x45", 8, GRND_NONBLOCK) = 8
[pid  5621] brk(NULL)                   = 0x55b0d145c000
[pid  5621] brk(0x55b0d147d000)         = 0x55b0d147d000
[pid  5621] openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3
[pid  5621] fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
[pid  5621] read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tproc\nnodev\tcgroup\nnodev\tcgroup2\nnodev\tdevtmpfs\nnodev\tbinfmt_misc\nnodev"..., 1024) = 758
[pid  5621] read(3, "", 1024)           = 0
[pid  5621] close(3)                    = 0
[pid  5621] access("/etc/selinux/config", F_OK) = 0
[pid  5621] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3
[pid  5621] lseek(3, 0, SEEK_END)       = 128000000
[pid  5621] lseek(3, 0, SEEK_SET)       = 0
[pid  5621] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
[pid  5621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024
[pid  5621] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516
[pid  5621] lseek(3, 4086, SEEK_SET)    = 4086
[pid  5621] write(3, "SWAPSPACE2", 10)  = 10
[pid  5621] fsync(3)                    = 0
[pid  5621] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55
Setting up swapspace version 1, size = 127995904 bytes
[pid  5621] exit_group(0)               = ?
[pid  5621] +++ exited with 0 +++
rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f2c2b99b390}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f2c2b99b390}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5621, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} ---
swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f2c2b997520, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f2c2b99b390}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f2c2b997520, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f2c2b99b390}, NULL, 8) = 0
[   79.821378][ T5620] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
getrandom("\xf1\x26\x29\xe8\x2b\x67\xe1\x4c", 8, GRND_NONBLOCK) = 8
mkdir("./syzkaller.zodH76", 0700)       = 0
chmod("./syzkaller.zodH76", 0777)       = 0
chdir("./syzkaller.zodH76")             = 0
unshare(CLONE_NEWPID)                   = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5622 attached
, child_tidptr=0x555590f32790) = 5622
[pid  5622] set_robust_list(0x555590f327a0, 24) = 0
[pid  5620] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5622] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5620] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5622] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5622] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3
[pid  5622] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4
[pid  5622] dup2(4, 202)                = 202
[pid  5622] close(4)                    = 0
[pid  5622] write(202, "\xff\x00", 2)   = 2
[pid  5622] read(202, "\xff\x00\x00\x00", 4) = 4
[pid  5622] rt_sigaction(SIGRT_1, {sa_handler=0x7f2c2b9dc130, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2c2b99b390}, NULL, 8) = 0
[pid  5622] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5622] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2c2b184000
[pid  5622] mprotect(0x7f2c2b185000, 8388608, PROT_READ|PROT_WRITE) = 0
[pid  5622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2c2b984990, parent_tid=0x7f2c2b984990, exit_signal=0, stack=0x7f2c2b184000, stack_size=0x800200, tls=0x7f2c2b9846c0}ci-upstream-kasan-gce/strace-static-x86_64: Process 5625 attached
 => {parent_tid=[2]}, 88) = 2
[pid  5622] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5625] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 <unfinished ...>
[pid  5622] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5625] <... rseq resumed>)         = 0
[pid  5625] set_robust_list(0x7f2c2b9849a0, 24 <unfinished ...>
[pid  5622] ioctl(3, HCIDEVUP, 0 <unfinished ...>
[pid  5625] <... set_robust_list resumed>) = 0
[pid  5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5625] read(202, "\x01\x03\x0c\x00", 1024) = 4
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5625] read(202, "\x01\x03\x10\x00", 1024) = 4
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5625] read(202, "\x01\x01\x10\x00", 1024) = 4
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[   80.073601][ T4926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.093576][ T4926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[pid  5625] read(202, "\x01\x09\x10\x00", 1024) = 4
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13
[pid  5625] read(202, "\x01\x05\x10\x00", 1024) = 4
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14
[   80.124773][ T4926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[pid  5625] read(202, "\x01\x23\x0c\x00", 1024) = 4
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5625] read(202, "\x01\x14\x0c\x00", 1024) = 4
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5625] read(202, "\x01\x38\x0c\x00", 1024) = 4
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[   80.188421][ T4926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[pid  5625] read(202, "\x01\x39\x0c\x00", 1024) = 4
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5625] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5625] read(202 <unfinished ...>
[pid  5622] <... ioctl resumed>)        = -1 EALREADY (Operation already in progress)
[pid  5622] ioctl(3, HCISETSCAN, 0x7fffd464e120 <unfinished ...>
[pid  5625] <... read resumed>, "\x01\x1a\x0c\x01\x02", 1024) = 5
[pid  5625] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7
[pid  5625] rt_sigprocmask(SIG_BLOCK, ~[RT_1] <unfinished ...>
[pid  5622] <... ioctl resumed>)        = 0
[pid  5625] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5622] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 <unfinished ...>
[pid  5625] madvise(0x7f2c2b184000, 8372224, MADV_DONTNEED) = 0
[pid  5622] <... writev resumed>)       = 13
[pid  5625] exit(0 <unfinished ...>
[pid  5622] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 <unfinished ...>
[pid  5625] <... exit resumed>)         = ?
[pid  5622] <... writev resumed>)       = 14
[pid  5625] +++ exited with 0 +++
[   80.230290][ T4926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[pid  5622] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3) = 14
[pid  5622] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3) = 22
[pid  5622] close(3)                    = 0
[pid  5622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5622] getppid()                   = 0
[pid  5622] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5622] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5622] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5622] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5622] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5622] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5622] unshare(CLONE_NEWNS)        = 0
[pid  5622] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5622] unshare(CLONE_NEWIPC)       = 0
[pid  5622] unshare(CLONE_NEWCGROUP)    = 0
[pid  5622] unshare(CLONE_NEWUTS)       = 0
[pid  5622] unshare(CLONE_SYSVSEM)      = 0
[pid  5622] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5622] write(3, "16777216", 8)     = 8
[pid  5622] close(3)                    = 0
[pid  5622] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5622] write(3, "536870912", 9)    = 9
[pid  5622] close(3)                    = 0
[pid  5622] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5622] write(3, "1024", 4)         = 4
[pid  5622] close(3)                    = 0
[pid  5622] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5622] write(3, "8192", 4)         = 4
[pid  5622] close(3)                    = 0
[pid  5622] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5622] write(3, "1024", 4)         = 4
[pid  5622] close(3)                    = 0
[pid  5622] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5622] write(3, "1024", 4)         = 4
[pid  5622] close(3)                    = 0
[pid  5622] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5622] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5622] close(3)                    = 0
[pid  5622] getpid()                    = 1
[pid  5622] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5622] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5622] unshare(CLONE_NEWNET)       = 0
[pid  5622] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5622] write(3, "0 65535", 7)      = 7
[pid  5622] close(3)                    = 0
[pid  5622] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid  5622] write(3, "100000", 6)       = 6
[pid  5622] close(3)                    = 0
[pid  5622] mkdir("./syz-tmp", 0777)    = 0
[pid  5622] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid  5622] mkdir("./syz-tmp/newroot", 0777) = 0
[pid  5622] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid  5622] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5622] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid  5622] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid  5622] mkdir("./syz-tmp/newroot/selinux", 0700) = 0
[pid  5622] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5622] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5622] mkdir("./syz-tmp/newroot/sys", 0700) = 0
[pid  5622] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5622] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5622] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5622] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5622] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid  5622] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5622] mkdir("./syz-tmp/pivot", 0777) = 0
[pid  5622] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid  5622] chdir("/")                  = 0
[pid  5622] umount2("./pivot", MNT_DETACH) = 0
[pid  5622] chroot("./newroot")         = 0
[pid  5622] chdir("/")                  = 0
[pid  5622] mkdir("/dev/gadgetfs", 0777) = 0
[pid  5622] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = 0
[pid  5622] mkdir("/dev/binderfs", 0777) = 0
[pid  5622] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5622] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
executing program
[pid  5622] write(1, "executing program\n", 18) = 18
[pid  5622] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid  5622] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffd464c080) = 18
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[   81.072179][   T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffd464c080) = 18
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffd464c080) = 9
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffd464c080) = 34
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d090) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x32) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[   81.295691][   T29] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[   81.305146][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f2c2ba5fb8c) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fffd464c080) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d0b0) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fffd464c0a0) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffd464d0b0) = 0
[pid  5622] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffd464c0a0) = 203
[   81.855496][   T29] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/input/input5
[pid  5622] exit_group(1)               = ?
[   81.941997][   T29] rc_core: IR keymap rc-rc6-mce not found
[   81.947788][   T29] Registered IR keymap rc-empty
[   81.959176][   T29] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/rc/rc0
[   81.971803][   T29] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/rc/rc0/input6
[   82.069449][ T5342] hid-picolcd 0003:04D8:C002.0001: offset (1) exceeds report_count (1)
[   82.069510][ T5342] ==================================================================
[   82.069519][ T5342] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xcb/0xd0
[   82.069565][ T5342] Read of size 4 at addr ffff88801f7999c0 by task kworker/1:3/5342
[   82.069580][ T5342] 
[   82.069596][ T5342] CPU: 1 UID: 0 PID: 5342 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) 
[   82.069614][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   82.069624][ T5342] Workqueue: events fb_deferred_io_work
[   82.069660][ T5342] Call Trace:
[   82.069666][ T5342]  <TASK>
[   82.069673][ T5342]  dump_stack_lvl+0xe8/0x150
[   82.069694][ T5342]  print_address_description+0x55/0x1e0
[   82.069714][ T5342]  ? hid_dump_input+0xcb/0xd0
[   82.069727][ T5342]  print_report+0x58/0x70
[   82.069745][ T5342]  kasan_report+0x117/0x150
[   82.069770][ T5342]  ? hid_dump_input+0xcb/0xd0
[   82.069788][ T5342]  hid_dump_input+0xcb/0xd0
[   82.069803][ T5342]  hid_set_field+0xd3/0x440
[   82.069824][ T5342]  picolcd_fb_deferred_io+0x6d5/0x1880
[   82.069853][ T5342]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[   82.069878][ T5342]  ? irqentry_exit+0x218/0x8f0
[   82.069899][ T5342]  ? process_scheduled_works+0xa20/0x14e0
[   82.069919][ T5342]  fb_deferred_io_work+0x1cf/0x310
[   82.069938][ T5342]  ? process_scheduled_works+0xa20/0x14e0
[   82.069953][ T5342]  process_scheduled_works+0xa8e/0x14e0
[   82.069979][ T5342]  ? __pfx_process_scheduled_works+0x10/0x10
[   82.069997][ T5342]  ? assign_work+0x3cf/0x5d0
[   82.070015][ T5342]  worker_thread+0xa47/0xfb0
[   82.070036][ T5342]  ? __kthread_parkme+0x71/0x1f0
[   82.070057][ T5342]  kthread+0x388/0x470
[   82.070077][ T5342]  ? __pfx_worker_thread+0x10/0x10
[   82.070093][ T5342]  ? __pfx_kthread+0x10/0x10
[   82.070112][ T5342]  ret_from_fork+0x514/0xb70
[   82.070134][ T5342]  ? __pfx_ret_from_fork+0x10/0x10
[   82.070154][ T5342]  ? __switch_to+0xc89/0x1420
[   82.070174][ T5342]  ? __pfx_kthread+0x10/0x10
[   82.070194][ T5342]  ret_from_fork_asm+0x1a/0x30
[   82.070218][ T5342]  </TASK>
[   82.070223][ T5342] 
[   82.070231][ T5342] Allocated by task 29:
[   82.070239][ T5342]  kasan_save_track+0x3e/0x80
[   82.070256][ T5342]  __kasan_kmalloc+0x93/0xb0
[   82.070274][ T5342]  __kvmalloc_node_noprof+0x53f/0x860
[   82.070293][ T5342]  hid_add_field+0x70a/0x1840
[   82.070312][ T5342]  hid_parser_main+0x2e1/0xd50
[   82.070330][ T5342]  hid_open_report+0x884/0xf00
[   82.070344][ T5342]  picolcd_probe+0x177/0x16c0
[   82.070357][ T5342]  hid_device_probe+0x42c/0x7c0
[   82.070372][ T5342]  really_probe+0x254/0xae0
[   82.070394][ T5342]  __driver_probe_device+0x1e8/0x360
[   82.070407][ T5342]  driver_probe_device+0x4f/0x240
[   82.070419][ T5342]  __device_attach_driver+0x270/0x410
[   82.070432][ T5342]  bus_for_each_drv+0x258/0x2f0
[   82.070448][ T5342]  __device_attach+0x2c4/0x450
[   82.070458][ T5342]  device_initial_probe+0xa1/0xd0
[   82.070469][ T5342]  bus_probe_device+0x12a/0x220
[   82.070483][ T5342]  device_add+0x7d7/0xb80
[   82.070500][ T5342]  hid_add_device+0x272/0x3e0
[   82.070515][ T5342]  usbhid_probe+0x9d4/0xde0
[   82.070531][ T5342]  usb_probe_interface+0x653/0xc60
[   82.070551][ T5342]  really_probe+0x254/0xae0
[   82.070563][ T5342]  __driver_probe_device+0x1e8/0x360
[   82.070576][ T5342]  driver_probe_device+0x4f/0x240
[   82.070589][ T5342]  __device_attach_driver+0x270/0x410
[   82.070603][ T5342]  bus_for_each_drv+0x258/0x2f0
[   82.070620][ T5342]  __device_attach+0x2c4/0x450
[   82.070634][ T5342]  device_initial_probe+0xa1/0xd0
[   82.070647][ T5342]  bus_probe_device+0x12a/0x220
[   82.070664][ T5342]  device_add+0x7d7/0xb80
[   82.070683][ T5342]  usb_set_configuration+0x1ad8/0x2180
[   82.070704][ T5342]  usb_generic_driver_probe+0x8d/0x150
[   82.070724][ T5342]  usb_probe_device+0x1c3/0x3b0
[   82.070744][ T5342]  really_probe+0x254/0xae0
[   82.070758][ T5342]  __driver_probe_device+0x1e8/0x360
[   82.070772][ T5342]  driver_probe_device+0x4f/0x240
[   82.070787][ T5342]  __device_attach_driver+0x270/0x410
[   82.070802][ T5342]  bus_for_each_drv+0x258/0x2f0
[   82.070820][ T5342]  __device_attach+0x2c4/0x450
[   82.070833][ T5342]  device_initial_probe+0xa1/0xd0
[   82.070847][ T5342]  bus_probe_device+0x12a/0x220
[   82.070873][ T5342]  device_add+0x7d7/0xb80
[   82.070892][ T5342]  usb_new_device+0x99d/0x1620
[   82.070909][ T5342]  hub_event+0x28e8/0x4d30
[   82.070924][ T5342]  process_scheduled_works+0xa8e/0x14e0
[   82.070938][ T5342]  worker_thread+0xa47/0xfb0
[   82.070951][ T5342]  kthread+0x388/0x470
[   82.070969][ T5342]  ret_from_fork+0x514/0xb70
[   82.070987][ T5342]  ret_from_fork_asm+0x1a/0x30
[   82.071005][ T5342] 
[   82.071010][ T5342] The buggy address belongs to the object at ffff88801f799900
[   82.071010][ T5342]  which belongs to the cache kmalloc-192 of size 192
[   82.071025][ T5342] The buggy address is located 16 bytes to the right of
[   82.071025][ T5342]  allocated 176-byte region [ffff88801f799900, ffff88801f7999b0)
[   82.071042][ T5342] 
[   82.071047][ T5342] The buggy address belongs to the physical page:
[   82.071071][ T5342] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801f799e00 pfn:0x1f799
[   82.071089][ T5342] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[   82.071117][ T5342] page_type: f5(slab)
[   82.071134][ T5342] raw: 00fff00000000200 ffff88813fe3e3c0 ffff88813fe3d288 ffffea000074e290
[   82.071149][ T5342] raw: ffff88801f799e00 0000000800100009 00000000f5000000 0000000000000000
[   82.071158][ T5342] page dumped because: kasan: bad access detected
[   82.071174][ T5342] page_owner tracks the page as allocated
[   82.071181][ T5342] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5489606884, free_ts 0
[   82.071208][ T5342]  post_alloc_hook+0x1f9/0x250
[   82.071226][ T5342]  get_page_from_freelist+0x21fa/0x2270
[   82.071245][ T5342]  __alloc_frozen_pages_noprof+0x18d/0x380
[   82.071264][ T5342]  allocate_slab+0x79/0x5e0
[   82.071287][ T5342]  refill_objects+0x2d5/0x350
[   82.071300][ T5342]  __pcs_replace_empty_main+0x2bf/0x6b0
[   82.071321][ T5342]  __kmalloc_cache_noprof+0x3a7/0x660
[   82.071339][ T5342]  call_usermodehelper_setup+0x8e/0x270
[   82.071355][ T5342]  kobject_uevent_env+0x662/0x9e0
[   82.071374][ T5342]  driver_register+0x2d4/0x320
[   82.071391][ T5342]  pcie_init_services+0xa/0x20
[   82.071414][ T5342]  pcie_portdrv_init+0x1d/0x40
[   82.071437][ T5342]  do_one_initcall+0x250/0x870
[   82.071456][ T5342]  do_initcall_level+0x10a/0x1a0
[   82.071476][ T5342]  do_initcalls+0x59/0xa0
[   82.071491][ T5342]  kernel_init_freeable+0x29d/0x3e0
[   82.071507][ T5342] page_owner free stack trace missing
[   82.071517][ T5342] 
[   82.071522][ T5342] Memory state around the buggy address:
[   82.071531][ T5342]  ffff88801f799880: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[   82.071542][ T5342]  ffff88801f799900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   82.071553][ T5342] >ffff88801f799980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[   82.071561][ T5342]                                            ^
[   82.071571][ T5342]  ffff88801f799a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   82.071581][ T5342]  ffff88801f799a80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[   82.071590][ T5342] ==================================================================
[   82.071601][ T5342] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   82.071624][ T5342] CPU: 1 UID: 0 PID: 5342 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) 
[   82.071643][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   82.071653][ T5342] Workqueue: events fb_deferred_io_work
[   82.071675][ T5342] Call Trace:
[   82.071682][ T5342]  <TASK>
[   82.071689][ T5342]  vpanic+0x56c/0xa60
[   82.071713][ T5342]  ? __pfx_vpanic+0x10/0x10
[   82.071738][ T5342]  panic+0xc5/0xd0
[   82.071759][ T5342]  ? __pfx_panic+0x10/0x10
[   82.071780][ T5342]  ? hid_dump_input+0xcb/0xd0
[   82.071796][ T5342]  ? rcu_is_watching+0x15/0xb0
[   82.071821][ T5342]  ? hid_dump_input+0xcb/0xd0
[   82.071837][ T5342]  ? hid_dump_input+0xcb/0xd0
[   82.071851][ T5342]  check_panic_on_warn+0x89/0xb0
[   82.071877][ T5342]  ? hid_dump_input+0xcb/0xd0
[   82.071890][ T5342]  end_report+0x73/0x170
[   82.071910][ T5342]  ? hid_dump_input+0xcb/0xd0
[   82.071923][ T5342]  kasan_report+0x128/0x150
[   82.071944][ T5342]  ? hid_dump_input+0xcb/0xd0
[   82.071962][ T5342]  hid_dump_input+0xcb/0xd0
[   82.071977][ T5342]  hid_set_field+0xd3/0x440
[   82.071997][ T5342]  picolcd_fb_deferred_io+0x6d5/0x1880
[   82.072025][ T5342]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[   82.072043][ T5342]  ? irqentry_exit+0x218/0x8f0
[   82.072063][ T5342]  ? process_scheduled_works+0xa20/0x14e0
[   82.072082][ T5342]  fb_deferred_io_work+0x1cf/0x310
[   82.072104][ T5342]  ? process_scheduled_works+0xa20/0x14e0
[   82.072121][ T5342]  process_scheduled_works+0xa8e/0x14e0
[   82.072148][ T5342]  ? __pfx_process_scheduled_works+0x10/0x10
[   82.072168][ T5342]  ? assign_work+0x3cf/0x5d0
[   82.072186][ T5342]  worker_thread+0xa47/0xfb0
[   82.072209][ T5342]  ? __kthread_parkme+0x71/0x1f0
[   82.072231][ T5342]  kthread+0x388/0x470
[   82.072251][ T5342]  ? __pfx_worker_thread+0x10/0x10
[   82.072267][ T5342]  ? __pfx_kthread+0x10/0x10
[   82.072288][ T5342]  ret_from_fork+0x514/0xb70
[   82.072310][ T5342]  ? __pfx_ret_from_fork+0x10/0x10
[   82.072331][ T5342]  ? __switch_to+0xc89/0x1420
[   82.072351][ T5342]  ? __pfx_kthread+0x10/0x10
[   82.072371][ T5342]  ret_from_fork_asm+0x1a/0x30
[   82.072399][ T5342]  </TASK>
[   82.072699][ T5342] Kernel Offset: disabled