last executing test programs: 2m48.780760316s ago: executing program 2 (id=762): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000a28000000000a010100010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000e00010073797a30000000000900030073797a32000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xc3}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl(r2, 0x1000, &(0x7f0000000000)="868a51fb1d642017deca96830d950cc3f0bb1fa03e63152d9bce13444fc8e670d251849c7c803ddae073718b01466dfe55babf796ca3f99839") openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000640), 0x7, 0x2) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="eb0d0501072000ff52e72b058a318f147f9378624eb9ac768b8a3ab4a3cf"], 0x8) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x5, 0x10000, 0x80000000, 0x400}, 0x9, 0x3, 0x0, 0xfffffff5, &(0x7f0000000340)="f9055cf3f8891b495ccc28d7aa408fb2298fa6f4029b7f244c654695cd91853c8e8c2b42c21b2318e006f2ac40596dd729bbc86d6ff011cfcb77c2f9b4faba014cdd4252d781c66f19bd7c249ee38982dcc5958883ac063ce10cd6528d880c67b05d05d1ac6f0cb5d30af46f7ea1000d145ad237f75d33d866f7e179b496c1d741dc20f16afb8ba72958d1add1aa2bb03e0a27085d4ac444cd10fb13d5ead773ae6bc8ff1c16e1e4e4fd56649121ae65d9f65997294e0d126c9402d58efe85f919dd38f36b0773ce0b560cf9dedccd923c5c57655fc110e3"}}) 2m47.132530445s ago: executing program 2 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) 2m45.943841285s ago: executing program 2 (id=773): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003240), 0x4000000000000e4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r6 = socket$inet6(0xa, 0x800000000000006, 0xffffffff) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x9, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r6, &(0x7f0000000200)="89", 0xffe3) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) 2m45.092032155s ago: executing program 2 (id=775): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0xffffffff}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x53, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x0, 0x0, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f00000000c0), 0x4, 0x2, &(0x7f0000000200), &(0x7f0000000240), 0x1) syz_emit_ethernet(0x56, &(0x7f00000008c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000380)="00f589e0be8c68984368c18cb1a51792edfc64ebcd10f08d4ad201ca72131f9de2adbe7c0ee658d73b468667e360af95484d7e09b9003e882e6ca383ef0eebd756ead670a8c525", 0xfceb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r6 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r6, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) 2m41.897340304s ago: executing program 2 (id=786): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 testdomain', 0x24) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='testdomain / 2147483647\n', 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) 2m40.640221304s ago: executing program 2 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0xe5c, 0x80000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@mblk_io_submit}, {@bh}, {@journal_async_commit}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(&(0x7f00000002c0)=""/112) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000006800e978000000180000bf0a00e47cac2a000000000000"], 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) eventfd2(0x42000006, 0x801) 2m25.491103874s ago: executing program 32 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0xe5c, 0x80000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@mblk_io_submit}, {@bh}, {@journal_async_commit}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$eJzs3MtvVNUfAPDvvZ2WlscPfogPCGgVjMRHS8tDFiZGowkLjUZdYFzVaSFIAQM1EUIUXWCMC0Pi3rg08S9wpRujrkx0iXtDQgwb0NWYO/fePoaZtkMHpjCfT3KZc+6Dc75z7rk999zbBtCzhrN/koj1EXE5IjZGRKVxh+H848a189V/rp2vJlGrvfl3kh0W16+drxb/RX3JrMtX1GpFfk2Tci++EzExPT11usiPzpx4f/TM2XPPHDsxcXTq6NTJ8YMH9+3dMXBgfH9H4sziur7to1Pbtx56+9Kr1cOX3v3lu6y+64vtZRydNJx/u0093unCumzDvHRS6WJFaEvWbv3FcjlqfX0xNLttY7z8aVcrB9xulWY/nwsXasA9LBuoA72o/EGf3f+Wy1LjhQ6OPbru6gt5RFncN4ol31KJtNinv+H+tpMGI+LwhX+/zpa4TfMQAADz/ZCNf55uNv5L44F5+/2veIayKSL+HxGbI+K+iNgSEfdH1Pd9MCIearP8xickN49/0isLsrW+NktYXDb+e654trVw/FeO/mJTX5HbUI+/PzlybHpqT/Gd7I7+NVl+bMEhC/340u9fNq77ophmH543/suWrPyFEaZXGifoJidmJlYeee7qJxHbKs3iT2YH+klEbI2IbbdYxrEnv93ealuz+Mux8JI6cCdS+ybiibz9L0RD/KWk5fPJsWcPjO8fHYzpqT2j5Vlxs19/u/h6q/JXFH8HZO2/tun5n8ef3SMmgxFnzp47Xn9ee+YWCvnzs2rSYtOWIv7+lvHffP5Xd0UMJG/V0wPlXsXnQPJK9jFUrv9wYmbm9PjcsWW+/jmWx79751z8EzHX/zfnt2eR/PHG7PE7IuLhiHikaLtHI+KxiNi5SPg/v7jrvVbbWrf/IrPyHZTFP7lI+2eXvCw11/7tJ/qO//R9q/JrS57/Wfvvq6d2F2uWc/1bbgVX8t0BAADA3SKtvwOfpCOz6TQdGcnf4d8Sa9NKRDx15NQHJyfzd+U3RX9aznRtnDcfOlbMDZf58Yb83mLe+Ku+oXp+pHpqerLbwUOPW9ei/2f+6uyjFmA1uqfe6APaov9D79L/oXfp/9C7nu92BYDuGGi++uM7XQ+gK9of/w/elnoAd577f+hd+j/0Lv0felLL341PV/Qr/3drorI6qtE0MbQ6qlEmIl1yn3SVVHV5idc+z7vEaqlPmags+49Z3GJiTdNNTS8Xh9bf2csTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0XAAD//1ub24E=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(&(0x7f00000002c0)=""/112) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000006800e978000000180000bf0a00e47cac2a000000000000"], 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) eventfd2(0x42000006, 0x801) 10.283582402s ago: executing program 5 (id=1353): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a2000000000007000000000000009500b900"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setxattr$security_capability(0x0, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x161, 0x4800084d, r4, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) 7.835923899s ago: executing program 1 (id=1367): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)) 6.981418529s ago: executing program 1 (id=1369): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r5, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r6, @ANYRES16=r4, @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") statx(0xffffffffffffff9c, &(0x7f0000004040)='./trace\x00', 0x0, 0x10, &(0x7f0000004080)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r8, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") lstat(&(0x7f0000004280)='./trace/file0\x00', &(0x7f00000042c0)) sendfile(r2, r2, 0x0, 0x8000002) 6.834393192s ago: executing program 1 (id=1371): syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d8048200000101020301"], 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 6.697070725s ago: executing program 3 (id=1372): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) 6.551539649s ago: executing program 5 (id=1373): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1001, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/17, 0x11, 0x1, 0x27}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = dup3(r3, r0, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003a00010027bd700004000000010040000800ec000841"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x24008094) 6.310983294s ago: executing program 3 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) 6.033505781s ago: executing program 4 (id=1377): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) r3 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r4, 0x4, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @private, @remote}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x74, 0x10, 0x1, 0x0, 0xeffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x4}}, [@TCA_RATE={0x6}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0x8, 0x6, 0x2, 0x4, 0x3}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xf1c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xb, 0x14a}}) ioctl$TCSETS2(r6, 0x402c542b, 0x0) 5.161678041s ago: executing program 4 (id=1378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pselect6(0xf8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, &(0x7f0000000480)}, 0x9}], 0x2, 0x10002, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x41, 0xb2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 5.120172362s ago: executing program 3 (id=1379): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)) 3.951438349s ago: executing program 4 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 3.936625009s ago: executing program 3 (id=1384): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, 0x0, 0x0) 2.968341221s ago: executing program 1 (id=1385): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x98) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="6fcdc6564281bdcb83fe76ee13669821561956d3e4ed48440a58993e262e69c0ff5a3f00300628171399fe7d2e9efd6e2665f99292c1159f0150d34c3d769caf2f3fe9a2d25ef7e121e4e31202c39ca7459a09bea34ae5e0066e3396c182ff38bea4fee7da4b67f353f7f9763bb7525a233bf8a9f8a3b64c1421d4c2672551a0ae5397e1d6227a748b97fd01d5323512e95a7120bb7e739b08ca9732d4e5ba6555432bfc106521469ba289974de295799fde468570212df18fc7007e07115581cb860200c558", 0x2) 2.967823551s ago: executing program 4 (id=1386): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) write(r0, &(0x7f0000000180), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x0, 0xfe}) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000340)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000092870076000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount$pvfs2(&(0x7f0000000600), &(0x7f0000000280)='./proc\x00', &(0x7f0000000140), 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="7d7db73470e13d4da84fc4b2ff5c305df72d4b3b3f2201a28dc097cdc8013f83d4c96d6e9e602dda338f390cb69696f3e20c2e16be9f42c6e6dcc60b5c62776cb2b69f1155048d96c5611d22f7b6b791862f8ef4c2a356e594a328a0e6a096dd191db6672e1ef5f1fb822101095d05771d64eb75fa254d4ef04b6f60b824da9af082f9a58036c2053b00a79df6caae38e845e12d3335ce323df0397754ee4158baf3adec659b77765c292c4e04b8010cca116353eeb544506d400c5075dace28e5431e79ab238433ca6f8d1febaf1800d6bdbf7f701a952b0c0dd1b4010cde7e298762e5e2548fe9a72ce7d724357afd5dcf4607fe54b2"]) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 2.907858363s ago: executing program 0 (id=1387): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423b", 0x5a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e5", 0x49}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3d", 0x15}], 0x5) write(r0, &(0x7f0000001e00)="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", 0x35a) shutdown(r0, 0x1) 2.024744213s ago: executing program 1 (id=1388): eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000001240), 0x80000) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x40000100) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) 2.009150394s ago: executing program 3 (id=1389): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0xfffffff9, 0xffffffff) 1.987828284s ago: executing program 0 (id=1390): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) r3 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r4, 0x4, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @private, @remote}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x74, 0x10, 0x1, 0x0, 0xeffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x4}}, [@TCA_RATE={0x6}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x80, 0x8, 0x6, 0x2, 0x4, 0x3}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xf1c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xb, 0x14a}}) ioctl$TCSETS2(r6, 0x402c542b, 0x0) 1.975890324s ago: executing program 4 (id=1391): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x34b6, 0x0, &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000f40)) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioperm(0x3, 0x4, 0x100000a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x132) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./file0/file0\x00', 0x1) 1.355937249s ago: executing program 5 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd09000085"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x1800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r0}, 0x38) 1.275239931s ago: executing program 0 (id=1393): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x3, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x20000, 0x1c, 0x0, 0x5, 0x1, 0xffffffffffffffff], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.204251892s ago: executing program 5 (id=1394): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x41, 0x4a) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004940)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x4, 0xe6, 0xffffffff, 0x7, {0x5, 0x3, 0x101, 0x100, 0x10000, 0x7, 0x70e4, 0x180000, 0x9, 0x6000, 0x3, 0x0, 0x0, 0xffffffff, 0xfffffffd}}, {0x0, 0x15}}}, 0xa0) 1.110120515s ago: executing program 4 (id=1395): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/103, 0x67}], 0x1) 1.086194415s ago: executing program 1 (id=1396): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)='.U/', 0x3, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.023865766s ago: executing program 0 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a2000000000007000000000000009500b900"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setxattr$security_capability(0x0, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x161, 0x4800084d, r3, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) 881.95155ms ago: executing program 5 (id=1398): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) 150.920197ms ago: executing program 0 (id=1399): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20005891}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rthdr_2292={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}}], 0x1, 0x4040084) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x3, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x20000, 0x1c, 0x0, 0x5, 0x1, 0xffffffffffffffff], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 105.052538ms ago: executing program 3 (id=1400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000400), 0x8) 103.717738ms ago: executing program 5 (id=1401): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) write(r0, &(0x7f0000000180), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x0, 0xfe}) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000340)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000092870076000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount$pvfs2(&(0x7f0000000600), &(0x7f0000000280)='./proc\x00', &(0x7f0000000140), 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="7d7db73470e13d4da84fc4b2ff5c305df72d4b3b3f2201a28dc097cdc8013f83d4c96d6e9e602dda338f390cb69696f3e20c2e16be9f42c6e6dcc60b5c62776cb2b69f1155048d96c5611d22f7b6b791862f8ef4c2a356e594a328a0e6a096dd191db6672e1ef5f1fb822101095d05771d64eb75fa254d4ef04b6f60b824da9af082f9a58036c2053b00a79df6caae38e845e12d3335ce323df0397754ee4158baf3adec659b77765c292c4e04b8010cca116353eeb544506d400c5075dace28e5431e79ab238433ca6f8d1febaf1800d6bdbf7f701a952b0c0dd1b4010cde7e298762e5e2548fe9a72ce7d724357afd5dcf4607fe54b2"]) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 0s ago: executing program 0 (id=1402): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x38}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc01c586b, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x1, 0x2, 0xdd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x40, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x9, 0x7fff, 0xf, 0xa, 0x9, 0xffd, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2, 0x1]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000180)) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) clock_nanosleep(0x2, 0x1, 0x0, 0x0) keyctl$invalidate(0x15, r6) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x9, 0x4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0000000000004 [ 64.326803][ T4361] RBP: 00007f8f441ba06b R08: 0000000000000000 R09: 0000000000000000 [ 64.334777][ T4361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.342757][ T4361] R13: 00007f8f443ab038 R14: 00007f8f443aafa0 R15: 00007ffed1abdde8 [ 64.350751][ T4361] [ 64.371608][ T4365] loop5: detected capacity change from 0 to 7 [ 64.449483][ T4365] Dev loop5: unable to read RDB block 7 [ 64.473254][ T4365] loop5: unable to read partition table [ 64.479599][ T4365] loop5: partition table beyond EOD, truncated [ 64.489636][ T4365] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 64.749004][ T4379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.799431][ T4381] syz.4.37 uses obsolete (PF_INET,SOCK_PACKET) [ 66.032275][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.086309][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.094231][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.100395][ T4394] FAULT_INJECTION: forcing a failure. [ 66.100395][ T4394] name fail_futex, interval 1, probability 0, space 0, times 1 [ 66.115056][ T4394] CPU: 1 PID: 4394 Comm: syz.1.39 Not tainted syzkaller #0 [ 66.122276][ T4394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.124858][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.132330][ T4394] Call Trace: [ 66.132340][ T4394] [ 66.132348][ T4394] dump_stack_lvl+0x188/0x250 [ 66.132371][ T4394] ? unwind_get_return_address+0x49/0x80 [ 66.132397][ T4394] ? stack_trace_save+0xf0/0xf0 [ 66.132415][ T4394] ? show_regs_print_info+0x20/0x20 [ 66.132432][ T4394] ? load_image+0x410/0x410 [ 66.132454][ T4394] ? kmem_cache_free+0x8f/0x210 [ 66.132472][ T4394] ? stack_trace_save+0xa6/0xf0 [ 66.132489][ T4394] ? stack_trace_snprint+0xe0/0xe0 [ 66.132509][ T4394] should_fail+0x383/0x4b0 [ 66.132529][ T4394] get_futex_key+0x1a1/0x12d0 [ 66.132552][ T4394] ? __lock_acquire+0x13b3/0x7d40 [ 66.132571][ T4394] ? futex_wait_restart+0x250/0x250 [ 66.132596][ T4394] futex_wake+0x101/0x540 [ 66.209747][ T4394] ? futex_wait+0x680/0x680 [ 66.214251][ T4394] ? verify_lock_unused+0x140/0x140 [ 66.219449][ T4394] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 66.225434][ T4394] ? verify_lock_unused+0x140/0x140 [ 66.230627][ T4394] do_futex+0xd83/0x12b0 [ 66.234868][ T4394] ? kasan_quarantine_put+0xd4/0x210 [ 66.240240][ T4394] ? lockdep_hardirqs_on+0x94/0x140 [ 66.245439][ T4394] ? futex_exit_release+0x1c0/0x1c0 [ 66.250634][ T4394] ? __context_tracking_exit+0x4c/0x80 [ 66.256087][ T4394] __se_sys_futex+0x389/0x420 [ 66.260761][ T4394] ? __x64_sys_futex+0xf0/0xf0 [ 66.265517][ T4394] ? __x64_sys_futex+0x1d/0xf0 [ 66.270268][ T4394] do_syscall_64+0x4c/0xa0 [ 66.274676][ T4394] ? clear_bhb_loop+0x30/0x80 [ 66.279339][ T4394] ? clear_bhb_loop+0x30/0x80 [ 66.284000][ T4394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.289882][ T4394] RIP: 0033:0x7fb3d16fd159 [ 66.294297][ T4394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.313890][ T4394] RSP: 002b:00007fb3cf9550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 66.322293][ T4394] RAX: ffffffffffffffda RBX: 00007fb3d1984fa8 RCX: 00007fb3d16fd159 [ 66.330251][ T4394] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb3d1984fac [ 66.338229][ T4394] RBP: 00007fb3d1984fa0 R08: 0003c269b37dc760 R09: 0000000000000000 [ 66.346187][ T4394] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 66.354147][ T4394] R13: 00007fb3d1985038 R14: 00007ffe03c97430 R15: 00007ffe03c97518 [ 66.362116][ T4394] [ 66.731413][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 66.741487][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.027923][ T7] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 67.131001][ T4261] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.317272][ T4419] loop5: detected capacity change from 0 to 7 [ 67.335243][ T4419] Dev loop5: unable to read RDB block 7 [ 67.351339][ T4230] usb 3-1: USB disconnect, device number 2 [ 67.359380][ T4419] loop5: unable to read partition table [ 67.371147][ T4419] loop5: partition table beyond EOD, truncated [ 67.378696][ T4419] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 67.526506][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.541342][ T4261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.569509][ T4261] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.590251][ T4261] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.615785][ T4261] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 67.630101][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.001170][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.481339][ T4230] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 68.496265][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.731475][ T4230] usb 3-1: can't set config #1, error -71 [ 69.805597][ T4230] usb 3-1: USB disconnect, device number 3 [ 69.855089][ T4261] usb 2-1: USB disconnect, device number 2 [ 70.286845][ T4452] ODEBUG: Out of memory. ODEBUG disabled [ 71.174382][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.181011][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.378427][ T1108] Bluetooth: hci0: command 0x0401 tx timeout [ 76.782696][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 77.261050][ T4261] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.511034][ T4261] usb 1-1: Using ep0 maxpacket: 16 [ 77.631137][ T4261] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.996605][ T4504] sched: RT throttling activated [ 78.670992][ T4261] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.651169][ T4261] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.660250][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.679137][ T4261] usb 1-1: Product: syz [ 79.683659][ T4261] usb 1-1: Manufacturer: syz [ 79.691187][ T4261] usb 1-1: SerialNumber: syz [ 80.021155][ T4261] usb 1-1: 0:2 : does not exist [ 80.074086][ T4261] usb 1-1: USB disconnect, device number 2 [ 80.111021][ T2855] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.531161][ T2855] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 80.687705][ T2855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.710104][ T2855] usb 2-1: config 0 descriptor?? [ 81.404293][ T13] cfg80211: failed to load regulatory.db [ 81.519791][ T2855] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 81.527369][ T2855] [drm] Initialized udl on minor 2 [ 82.621091][ T2855] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffff92 [ 82.648485][ T2855] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 82.741167][ T2855] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 82.825148][ T2855] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 83.012913][ T2855] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 83.653666][ T4263] usb 2-1: USB disconnect, device number 3 [ 83.968041][ T4579] Need at least one configuration in g1. [ 84.004250][ T4579] udc usbip-vudc.0: failed to start g1: -22 [ 86.437696][ T4621] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.267341][ T4643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'. [ 88.827074][ T4646] netdevsim netdevsim4: Direct firmware load for ¹ failed with error -2 [ 88.835544][ T4646] netdevsim netdevsim4: Falling back to sysfs fallback for: ¹ [ 89.067719][ T4658] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.976115][ T4681] FAULT_INJECTION: forcing a failure. [ 90.976115][ T4681] name failslab, interval 1, probability 0, space 0, times 0 [ 90.994907][ T4681] CPU: 1 PID: 4681 Comm: syz.1.124 Not tainted syzkaller #0 [ 91.002239][ T4681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.012304][ T4681] Call Trace: [ 91.015595][ T4681] [ 91.018526][ T4681] dump_stack_lvl+0x188/0x250 [ 91.023214][ T4681] ? show_regs_print_info+0x20/0x20 [ 91.028421][ T4681] ? load_image+0x410/0x410 [ 91.032940][ T4681] ? __might_sleep+0xf0/0xf0 [ 91.037543][ T4681] ? __lock_acquire+0x7d40/0x7d40 [ 91.042589][ T4681] should_fail+0x383/0x4b0 [ 91.048930][ T4681] should_failslab+0x5/0x20 [ 91.053451][ T4681] slab_pre_alloc_hook+0x51/0xc0 [ 91.058408][ T4681] kmem_cache_alloc_node+0x47/0x2c0 [ 91.063616][ T4681] ? dup_task_struct+0x57/0xbc0 [ 91.068486][ T4681] dup_task_struct+0x57/0xbc0 [ 91.073168][ T4681] ? _raw_spin_unlock_irq+0x1f/0x40 [ 91.078379][ T4681] ? lockdep_hardirqs_on+0x94/0x140 [ 91.083592][ T4681] copy_process+0x61f/0x3e70 [ 91.088220][ T4681] ? __pidfd_prepare+0x140/0x140 [ 91.093173][ T4681] ? verify_lock_unused+0x140/0x140 [ 91.098395][ T4681] kernel_clone+0x23f/0x990 [ 91.102914][ T4681] ? create_io_thread+0x180/0x180 [ 91.107969][ T4681] __x64_sys_clone+0x19a/0x210 [ 91.112778][ T4681] ? __ia32_sys_vfork+0x130/0x130 [ 91.117934][ T4681] ? lockdep_hardirqs_on+0x94/0x140 [ 91.123130][ T4681] do_syscall_64+0x4c/0xa0 [ 91.127536][ T4681] ? clear_bhb_loop+0x30/0x80 [ 91.132203][ T4681] ? clear_bhb_loop+0x30/0x80 [ 91.136889][ T4681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.142794][ T4681] RIP: 0033:0x7fb3d16fd159 [ 91.147219][ T4681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.166829][ T4681] RSP: 002b:00007fb3cf954fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 91.175257][ T4681] RAX: ffffffffffffffda RBX: 00007fb3d1984fa0 RCX: 00007fb3d16fd159 [ 91.183240][ T4681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000600 [ 91.191220][ T4681] RBP: 00007fb3d179406b R08: 0000000000000000 R09: 0000000000000000 [ 91.199206][ T4681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.207186][ T4681] R13: 00007fb3d1985038 R14: 00007fb3d1984fa0 R15: 00007ffe03c97518 [ 91.215179][ T4681] [ 92.158350][ T4689] FAULT_INJECTION: forcing a failure. [ 92.158350][ T4689] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.172652][ T4689] CPU: 0 PID: 4689 Comm: syz.3.127 Not tainted syzkaller #0 [ 92.179955][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.190014][ T4689] Call Trace: [ 92.192300][ T4693] netdevsim netdevsim1: Direct firmware load for ¹ failed with error -2 [ 92.193290][ T4689] [ 92.201668][ T4693] netdevsim netdevsim1: Falling back to sysfs fallback for: ¹ [ 92.204525][ T4689] dump_stack_lvl+0x188/0x250 [ 92.216641][ T4689] ? show_regs_print_info+0x20/0x20 [ 92.221855][ T4689] ? load_image+0x410/0x410 [ 92.226372][ T4689] ? __lock_acquire+0x7d40/0x7d40 [ 92.231408][ T4689] ? verify_lock_unused+0x140/0x140 [ 92.236623][ T4689] should_fail+0x383/0x4b0 [ 92.241070][ T4689] prepare_alloc_pages+0x1e3/0x5b0 [ 92.246204][ T4689] __alloc_pages+0x11b/0x480 [ 92.250805][ T4689] ? zone_statistics+0x170/0x170 [ 92.255755][ T4689] ? __lock_acquire+0x7d40/0x7d40 [ 92.260794][ T4689] new_slab+0xc0/0x4b0 [ 92.264869][ T4689] ___slab_alloc+0x807/0xdd0 [ 92.269460][ T4689] ? mpol_set_shared_policy+0xb5/0xe90 [ 92.274902][ T4689] ? mpol_set_shared_policy+0xb5/0xe90 [ 92.280341][ T4689] kmem_cache_alloc+0xf0/0x280 [ 92.285093][ T4689] mpol_set_shared_policy+0xb5/0xe90 [ 92.290362][ T4689] ? vma_dup_policy+0xa0/0xa0 [ 92.295045][ T4689] mbind_range+0x829/0x9b0 [ 92.299469][ T4689] __se_sys_mbind+0x51c/0x770 [ 92.304132][ T4689] ? __x64_sys_mbind+0xf0/0xf0 [ 92.308872][ T4689] ? lock_chain_count+0x20/0x20 [ 92.313708][ T4689] ? __x64_sys_mbind+0x1d/0xf0 [ 92.318466][ T4689] do_syscall_64+0x4c/0xa0 [ 92.322867][ T4689] ? clear_bhb_loop+0x30/0x80 [ 92.327549][ T4689] ? clear_bhb_loop+0x30/0x80 [ 92.332229][ T4689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.338117][ T4689] RIP: 0033:0x7f8f44123159 [ 92.342525][ T4689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.362122][ T4689] RSP: 002b:00007f8f4237b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 92.370517][ T4689] RAX: ffffffffffffffda RBX: 00007f8f443aafa0 RCX: 00007f8f44123159 [ 92.378471][ T4689] RDX: 0000000000000003 RSI: 0000000000005000 RDI: 0000200000ff9000 [ 92.386424][ T4689] RBP: 00007f8f441ba06b R08: 000000000000000c R09: 0000000000000000 [ 92.394381][ T4689] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 92.402331][ T4689] R13: 00007f8f443ab038 R14: 00007f8f443aafa0 R15: 00007ffed1abdde8 [ 92.410288][ T4689] [ 93.251094][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.347025][ T4716] FAULT_INJECTION: forcing a failure. [ 93.347025][ T4716] name failslab, interval 1, probability 0, space 0, times 0 [ 93.375155][ T4716] CPU: 1 PID: 4716 Comm: syz.3.136 Not tainted syzkaller #0 [ 93.382493][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.392561][ T4716] Call Trace: [ 93.395849][ T4716] [ 93.398787][ T4716] dump_stack_lvl+0x188/0x250 [ 93.403491][ T4716] ? show_regs_print_info+0x20/0x20 [ 93.408702][ T4716] ? load_image+0x410/0x410 [ 93.413222][ T4716] ? __might_sleep+0xf0/0xf0 [ 93.417825][ T4716] ? __lock_acquire+0x7d40/0x7d40 [ 93.422871][ T4716] should_fail+0x383/0x4b0 [ 93.427304][ T4716] should_failslab+0x5/0x20 [ 93.431819][ T4716] slab_pre_alloc_hook+0x51/0xc0 [ 93.436769][ T4716] kmem_cache_alloc_trace+0x47/0x290 [ 93.442060][ T4716] ? create_filter_start+0x144/0x2c0 [ 93.447363][ T4716] create_filter_start+0x144/0x2c0 [ 93.452492][ T4716] apply_subsystem_event_filter+0x1c2/0x16b0 [ 93.458497][ T4716] ? __lock_acquire+0x7d40/0x7d40 [ 93.463550][ T4716] ? apply_event_filter+0x590/0x590 [ 93.468762][ T4716] ? _copy_from_user+0x111/0x170 [ 93.473715][ T4716] subsystem_filter_write+0x95/0xf0 [ 93.478934][ T4716] ? subsystem_filter_read+0x1e0/0x1e0 [ 93.484400][ T4716] vfs_write+0x304/0xd70 [ 93.488668][ T4716] ? file_end_write+0x250/0x250 [ 93.493544][ T4716] ? mutex_lock_nested+0x17/0x20 [ 93.498495][ T4716] ? __fdget_pos+0x2bf/0x370 [ 93.503096][ T4716] ? ksys_write+0x70/0x260 [ 93.507536][ T4716] ksys_write+0x153/0x260 [ 93.511882][ T4716] ? __ia32_sys_read+0x80/0x80 [ 93.516673][ T4716] ? lockdep_hardirqs_on+0x94/0x140 [ 93.521890][ T4716] do_syscall_64+0x4c/0xa0 [ 93.526318][ T4716] ? clear_bhb_loop+0x30/0x80 [ 93.531004][ T4716] ? clear_bhb_loop+0x30/0x80 [ 93.535692][ T4716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.538100][ T4719] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.541592][ T4716] RIP: 0033:0x7f8f44123159 [ 93.541633][ T4716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.541648][ T4716] RSP: 002b:00007f8f4237b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.581323][ T4716] RAX: ffffffffffffffda RBX: 00007f8f443aafa0 RCX: 00007f8f44123159 [ 93.589311][ T4716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 93.597293][ T4716] RBP: 00007f8f441ba06b R08: 0000000000000000 R09: 0000000000000000 [ 93.605279][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.613262][ T4716] R13: 00007f8f443ab038 R14: 00007f8f443aafa0 R15: 00007ffed1abdde8 [ 93.621265][ T4716] [ 93.633529][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.815747][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.825974][ T13] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.835714][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.848640][ T13] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 93.858054][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.870600][ T4725] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 95.458716][ T13] usb 2-1: USB disconnect, device number 4 [ 95.562240][ T4734] netdevsim netdevsim3: Direct firmware load for ¹ failed with error -2 [ 95.623999][ T4734] netdevsim netdevsim3: Falling back to sysfs fallback for: ¹ [ 96.202443][ T4751] syz.3.144 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.039906][ T4764] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.353180][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.361727][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.025817][ T4769] FAULT_INJECTION: forcing a failure. [ 98.025817][ T4769] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.040228][ T4769] CPU: 0 PID: 4769 Comm: syz.3.149 Not tainted syzkaller #0 [ 98.047533][ T4769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.057596][ T4769] Call Trace: [ 98.060885][ T4769] [ 98.063815][ T4769] dump_stack_lvl+0x188/0x250 [ 98.068511][ T4769] ? show_regs_print_info+0x20/0x20 [ 98.073718][ T4769] ? load_image+0x410/0x410 [ 98.078241][ T4769] should_fail+0x383/0x4b0 [ 98.082666][ T4769] prepare_alloc_pages+0x1e3/0x5b0 [ 98.087790][ T4769] __alloc_pages+0x11b/0x480 [ 98.092392][ T4769] ? zone_statistics+0x170/0x170 [ 98.097339][ T4769] ? rcu_lock_acquire+0x30/0x30 [ 98.102195][ T4769] ? alloc_pages+0x452/0x560 [ 98.106799][ T4769] __get_free_pages+0x8/0x30 [ 98.111392][ T4769] __tlb_remove_page_size+0x1f2/0x3f0 [ 98.116773][ T4769] unmap_page_range+0xfcf/0x2410 [ 98.121727][ T4769] ? lockdep_hardirqs_on+0x94/0x140 [ 98.126942][ T4769] unmap_vmas+0x131/0x250 [ 98.131278][ T4769] ? unmap_page_range+0x2410/0x2410 [ 98.136510][ T4769] exit_mmap+0x3b9/0x640 [ 98.140862][ T4769] ? vm_brk+0x20/0x20 [ 98.144865][ T4769] ? uprobe_clear_state+0x2f6/0x460 [ 98.150086][ T4769] __mmput+0x115/0x390 [ 98.154162][ T4769] exit_mm+0x632/0x7b0 [ 98.158229][ T4769] ? perf_pmu_migrate_context+0xb70/0xb70 [ 98.163957][ T4769] ? do_exit+0x2110/0x2110 [ 98.168498][ T4769] ? __ia32_sys_timer_delete+0x40/0x40 [ 98.173976][ T4769] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 98.179448][ T4769] ? tty_audit_exit+0x149/0x1f0 [ 98.184309][ T4769] do_exit+0x5b8/0x2110 [ 98.188482][ T4769] ? put_task_struct+0x80/0x80 [ 98.193252][ T4769] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.199252][ T4769] ? _raw_spin_lock_irq+0xb7/0xf0 [ 98.204293][ T4769] do_group_exit+0x12c/0x2f0 [ 98.208894][ T4769] ? lockdep_hardirqs_on+0x94/0x140 [ 98.214104][ T4769] get_signal+0x7eb/0x12e0 [ 98.218542][ T4769] arch_do_signal_or_restart+0xe6/0x12a0 [ 98.224198][ T4769] ? futex_exit_release+0x1c0/0x1c0 [ 98.229407][ T4769] ? get_sigframe_size+0x10/0x10 [ 98.234358][ T4769] ? __context_tracking_exit+0x4c/0x80 [ 98.239842][ T4769] ? exit_to_user_mode_loop+0x3b/0x130 [ 98.245329][ T4769] exit_to_user_mode_loop+0x9e/0x130 [ 98.250625][ T4769] exit_to_user_mode_prepare+0xee/0x180 [ 98.256210][ T4769] syscall_exit_to_user_mode+0x16/0x40 [ 98.261674][ T4769] do_syscall_64+0x58/0xa0 [ 98.266092][ T4769] ? clear_bhb_loop+0x30/0x80 [ 98.270771][ T4769] ? clear_bhb_loop+0x30/0x80 [ 98.275453][ T4769] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.281461][ T4769] RIP: 0033:0x7f8f44123159 [ 98.285898][ T4769] Code: Unable to access opcode bytes at RIP 0x7f8f4412312f. [ 98.293265][ T4769] RSP: 002b:00007f8f4237b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.301690][ T4769] RAX: 0000000000000001 RBX: 00007f8f443aafa8 RCX: 00007f8f44123159 [ 98.309665][ T4769] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f443aafac [ 98.317645][ T4769] RBP: 00007f8f443aafa0 R08: 00379d8f4d3f0074 R09: 0000000000000000 [ 98.325623][ T4769] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 98.333600][ T4769] R13: 00007f8f443ab038 R14: 00007ffed1abdd00 R15: 00007ffed1abdde8 [ 98.341588][ T4769] [ 100.976723][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.026294][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.591829][ T4753] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.600979][ T4753] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.610003][ T4753] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.619358][ T4753] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.338855][ T4814] Mass Storage Function, version: 2009/09/11 [ 103.345454][ T4814] LUN: removable file: (no medium) [ 106.710770][ T4840] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 106.710770][ T4840] The task syz.3.168 (4840) triggered the difference, watch for misbehavior. [ 111.441296][ T4876] orangefs_mount: mount request failed with -4 [ 113.669024][ T4908] fuse: Bad value for 'fd' [ 113.777093][ T4908] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.130966][ T2855] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.195171][ T25] audit: type=1326 audit(1791088194.874:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d16fd159 code=0x7ffc0000 [ 114.250647][ T25] audit: type=1326 audit(1791088194.904:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3d16bd98e code=0x7ffc0000 [ 114.303979][ T25] audit: type=1326 audit(1791088194.904:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d16fd159 code=0x7ffc0000 [ 114.336044][ T25] audit: type=1326 audit(1791088194.914:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3d16bd98e code=0x7ffc0000 [ 114.362123][ T25] audit: type=1326 audit(1791088194.914:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3d16bd98e code=0x7ffc0000 [ 114.371478][ T2855] usb 3-1: Using ep0 maxpacket: 8 [ 114.409707][ T4923] FAULT_INJECTION: forcing a failure. [ 114.409707][ T4923] name failslab, interval 1, probability 0, space 0, times 0 [ 114.422750][ T25] audit: type=1326 audit(1791088194.914:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3d16bd98e code=0x7ffc0000 [ 114.448996][ T4923] CPU: 0 PID: 4923 Comm: syz.3.198 Not tainted syzkaller #0 [ 114.456307][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.466368][ T4923] Call Trace: [ 114.469660][ T4923] [ 114.472596][ T4923] dump_stack_lvl+0x188/0x250 [ 114.477287][ T4923] ? show_regs_print_info+0x20/0x20 [ 114.482509][ T4923] ? load_image+0x410/0x410 [ 114.487028][ T4923] ? __might_sleep+0xf0/0xf0 [ 114.491632][ T4923] ? __lock_acquire+0x7d40/0x7d40 [ 114.496670][ T4923] ? lockdep_hardirqs_on+0x94/0x140 [ 114.501881][ T4923] should_fail+0x383/0x4b0 [ 114.506311][ T4923] should_failslab+0x5/0x20 [ 114.508589][ T25] audit: type=1326 audit(1791088194.914:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3d16bd98e code=0x7ffc0000 [ 114.510816][ T4923] slab_pre_alloc_hook+0x51/0xc0 [ 114.539538][ T4923] kmem_cache_alloc_trace+0x47/0x290 [ 114.544838][ T4923] ? xprt_alloc+0x4bf/0x770 [ 114.549354][ T4923] xprt_alloc+0x4bf/0x770 [ 114.553707][ T4923] xs_setup_tcp+0x105/0x970 [ 114.558226][ T4923] xprt_create_transport+0x14e/0x5b0 [ 114.563525][ T4923] rpc_create+0x413/0x7e0 [ 114.567859][ T4923] ? rpc_cleanup_clids+0x20/0x20 [ 114.572807][ T4923] ? __lock_acquire+0x7d40/0x7d40 [ 114.575795][ T2855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.577842][ T4923] ? trace_fscache_cookie+0x80/0x1c0 [ 114.593959][ T4923] nfs_create_rpc_client+0x4cc/0x6d0 [ 114.599255][ T4923] ? nfs_init_timeout_values+0x410/0x410 [ 114.605001][ T4923] ? __init_waitqueue_head+0xa4/0x140 [ 114.605514][ T25] audit: type=1326 audit(1791088194.914:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3d16bd98e code=0x7ffc0000 [ 114.610377][ T4923] nfs4_alloc_client+0x6ea/0xa00 [ 114.610401][ T4923] ? nfs40_shutdown_client+0x80/0x80 [ 114.610421][ T4923] ? rcu_lock_acquire+0x10/0x30 [ 114.639334][ T2855] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.644358][ T4923] ? nfs_get_client+0x9db/0xd80 [ 114.644385][ T4923] ? __lock_acquire+0x7d40/0x7d40 [ 114.644403][ T4923] ? do_raw_spin_lock+0x128/0x2f0 [ 114.644425][ T4923] ? do_raw_spin_unlock+0x11d/0x230 [ 114.664936][ T2855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.668115][ T4923] nfs_get_client+0x9f4/0xd80 [ 114.678830][ T25] audit: type=1326 audit(1791088194.914:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3d16bd98e code=0x7ffc0000 [ 114.686250][ T4923] ? pcpu_memcg_post_alloc_hook+0x11a/0x3b0 [ 114.686285][ T4923] nfs4_set_client+0x364/0x4e0 [ 114.686305][ T4923] ? nfs4_create_referral_server+0x5b0/0x5b0 [ 114.686336][ T4923] nfs4_create_server+0x4c0/0xe50 [ 114.686362][ T4923] ? nfs4_set_ds_client+0x490/0x490 [ 114.686380][ T4923] ? get_nfs_version+0x1e7/0x200 [ 114.686395][ T4923] ? nfs_get_tree+0x10ae/0x1510 [ 114.686414][ T4923] nfs4_try_get_tree+0x45/0x110 [ 114.686433][ T4923] vfs_get_tree+0x88/0x270 [ 114.686451][ T4923] do_new_mount+0x247/0xa40 [ 114.686475][ T4923] __se_sys_mount+0x2e3/0x3d0 [ 114.686498][ T4923] ? __x64_sys_mount+0xc0/0xc0 [ 114.686517][ T4923] ? lockdep_hardirqs_on+0x94/0x140 [ 114.686536][ T4923] ? __x64_sys_mount+0x1c/0xc0 [ 114.686556][ T4923] do_syscall_64+0x4c/0xa0 [ 114.686572][ T4923] ? clear_bhb_loop+0x30/0x80 [ 114.686589][ T4923] ? clear_bhb_loop+0x30/0x80 [ 114.686606][ T4923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.686625][ T4923] RIP: 0033:0x7f8f44123159 [ 114.686642][ T4923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.686657][ T4923] RSP: 002b:00007f8f4237b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.686675][ T4923] RAX: ffffffffffffffda RBX: 00007f8f443aafa0 RCX: 00007f8f44123159 [ 114.686686][ T4923] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 114.686697][ T4923] RBP: 00007f8f441ba06b R08: 0000200000000140 R09: 0000000000000000 [ 114.686708][ T4923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.686718][ T4923] R13: 00007f8f443ab038 R14: 00007f8f443aafa0 R15: 00007ffed1abdde8 [ 114.686743][ T4923] [ 114.884952][ T2855] usb 3-1: config 0 descriptor?? [ 115.114091][ T25] audit: type=1326 audit(1791088194.914:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3d16bd98e code=0x7ffc0000 [ 115.179824][ T2855] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.665149][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 116.349391][ T2855] usb 3-1: USB disconnect, device number 4 [ 116.367972][ T4939] fuse: Unknown parameter 'user00000000000000000000' [ 116.410661][ T4954] configfs-gadget gadget: afunc_bind:1164 Error! [ 116.454863][ T4954] udc dummy_udc.0: failed to start g1: -19 [ 118.123496][ T4962] orangefs_mount: mount request failed with -4 [ 120.152262][ T4988] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 121.007928][ T5012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.214'. [ 121.241123][ T4201] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 121.932947][ T5005] fuse: Unknown parameter 'user_i00000000000000000000' [ 121.984020][ T5026] ptp ptp0: new virtual clock ptp1 [ 121.989581][ T5026] ptp ptp0: guarantee physical clock free running [ 121.997738][ T5026] ptp ptp0: delete virtual clock ptp1 [ 122.008746][ T5026] ptp ptp0: only physical clock in use now [ 123.347500][ T5040] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 125.801069][ T4227] Bluetooth: hci0: command 0x0401 tx timeout [ 128.001321][ T4231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.134447][ T5086] FAULT_INJECTION: forcing a failure. [ 128.134447][ T5086] name failslab, interval 1, probability 0, space 0, times 0 [ 128.150977][ T5086] CPU: 0 PID: 5086 Comm: syz.2.250 Not tainted syzkaller #0 [ 128.158291][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.166397][ T5071] fuse: Unknown parameter 'user_i00000000000000000000' [ 128.168365][ T5086] Call Trace: [ 128.168374][ T5086] [ 128.181412][ T5086] dump_stack_lvl+0x188/0x250 [ 128.186087][ T5086] ? show_regs_print_info+0x20/0x20 [ 128.191290][ T5086] ? load_image+0x410/0x410 [ 128.195786][ T5086] ? __lock_acquire+0x7d40/0x7d40 [ 128.200802][ T5086] should_fail+0x383/0x4b0 [ 128.205215][ T5086] should_failslab+0x5/0x20 [ 128.209708][ T5086] slab_pre_alloc_hook+0x51/0xc0 [ 128.214660][ T5086] kmem_cache_alloc_trace+0x47/0x290 [ 128.219944][ T5086] ? htab_map_alloc+0x9a/0x1670 [ 128.224806][ T5086] htab_map_alloc+0x9a/0x1670 [ 128.229491][ T5086] ? __might_fault+0xb7/0x110 [ 128.234169][ T5086] ? __lock_acquire+0x7d40/0x7d40 [ 128.239191][ T5086] ? htab_map_alloc_check+0x3e0/0x4d0 [ 128.244558][ T5086] map_create+0x481/0x2330 [ 128.249125][ T5086] ? bpf_lsm_bpf+0x5/0x10 [ 128.253461][ T5086] __sys_bpf+0x30a/0x6f0 [ 128.257723][ T5086] ? bpf_link_show_fdinfo+0x380/0x380 [ 128.263110][ T5086] __x64_sys_bpf+0x78/0x90 [ 128.267515][ T5086] do_syscall_64+0x4c/0xa0 [ 128.271924][ T5086] ? clear_bhb_loop+0x30/0x80 [ 128.276588][ T5086] ? clear_bhb_loop+0x30/0x80 [ 128.281260][ T5086] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.287166][ T5086] RIP: 0033:0x7fc8b6c44159 [ 128.291571][ T5086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.311161][ T5086] RSP: 002b:00007fc8b4e9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.319560][ T5086] RAX: ffffffffffffffda RBX: 00007fc8b6ecbfa0 RCX: 00007fc8b6c44159 [ 128.320990][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 128.327521][ T5086] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 128.327537][ T5086] RBP: 00007fc8b6cdb06b R08: 0000000000000000 R09: 0000000000000000 [ 128.327548][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.327559][ T5086] R13: 00007fc8b6ecc038 R14: 00007fc8b6ecbfa0 R15: 00007ffd2ffc5948 [ 128.327585][ T5086] [ 128.642988][ T4231] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 128.797298][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.099425][ T4231] usb 1-1: Product: syz [ 129.212892][ T4231] usb 1-1: Manufacturer: syz [ 129.236781][ T4231] usb 1-1: SerialNumber: syz [ 129.331197][ T4231] usb 1-1: config 0 descriptor?? [ 129.501062][ T4231] usb 1-1: can't set config #0, error -71 [ 129.511306][ T4231] usb 1-1: USB disconnect, device number 3 [ 129.572702][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.712520][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.745949][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.603374][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.610080][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.152806][ T5162] FAULT_INJECTION: forcing a failure. [ 134.152806][ T5162] name failslab, interval 1, probability 0, space 0, times 0 [ 134.206161][ T5162] CPU: 1 PID: 5162 Comm: syz.4.272 Not tainted syzkaller #0 [ 134.213605][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.223655][ T5162] Call Trace: [ 134.226928][ T5162] [ 134.229841][ T5162] dump_stack_lvl+0x188/0x250 [ 134.234615][ T5162] ? show_regs_print_info+0x20/0x20 [ 134.239797][ T5162] ? load_image+0x410/0x410 [ 134.244278][ T5162] ? __lock_acquire+0x7d40/0x7d40 [ 134.249305][ T5162] should_fail+0x383/0x4b0 [ 134.253746][ T5162] should_failslab+0x5/0x20 [ 134.258263][ T5162] slab_pre_alloc_hook+0x51/0xc0 [ 134.263219][ T5162] __kmalloc+0x6b/0x340 [ 134.267383][ T5162] ? afs_lookup_cell+0x57e/0x1680 [ 134.272429][ T5162] afs_lookup_cell+0x57e/0x1680 [ 134.277307][ T5162] ? __lock_acquire+0x7d40/0x7d40 [ 134.282355][ T5162] ? afs_find_cell+0x310/0x310 [ 134.287141][ T5162] afs_cell_init+0x6a/0x300 [ 134.291635][ T5162] proc_simple_write+0x102/0x130 [ 134.296562][ T5162] ? PDE_DATA+0x60/0x60 [ 134.300716][ T5162] proc_reg_write+0x1dd/0x2c0 [ 134.305378][ T5162] ? proc_reg_llseek+0x280/0x280 [ 134.310300][ T5162] vfs_write+0x304/0xd70 [ 134.314528][ T5162] ? file_end_write+0x250/0x250 [ 134.319368][ T5162] ? mutex_lock_nested+0x17/0x20 [ 134.324285][ T5162] ? __fdget_pos+0x2bf/0x370 [ 134.328870][ T5162] ? ksys_write+0x70/0x260 [ 134.333296][ T5162] ksys_write+0x153/0x260 [ 134.337605][ T5162] ? __ia32_sys_read+0x80/0x80 [ 134.342349][ T5162] ? lockdep_hardirqs_on+0x94/0x140 [ 134.347546][ T5162] do_syscall_64+0x4c/0xa0 [ 134.351951][ T5162] ? clear_bhb_loop+0x30/0x80 [ 134.356635][ T5162] ? clear_bhb_loop+0x30/0x80 [ 134.361318][ T5162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.367220][ T5162] RIP: 0033:0x7f537bc6b159 [ 134.371643][ T5162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.391240][ T5162] RSP: 002b:00007f5379ec3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.399663][ T5162] RAX: ffffffffffffffda RBX: 00007f537bef2fa0 RCX: 00007f537bc6b159 [ 134.407633][ T5162] RDX: 0000000000000002 RSI: 0000200000000070 RDI: 0000000000000004 [ 134.415619][ T5162] RBP: 00007f537bd0206b R08: 0000000000000000 R09: 0000000000000000 [ 134.423616][ T5162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.431755][ T5162] R13: 00007f537bef3038 R14: 00007f537bef2fa0 R15: 00007fff8c8875f8 [ 134.439745][ T5162] [ 135.362755][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.414459][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.450565][ T5180] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.490211][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.584304][ T5185] fuse: blksize only supported for fuseblk [ 136.476346][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 137.837388][ T25] kauditd_printk_skb: 69 callbacks suppressed [ 137.837401][ T25] audit: type=1326 audit(1791088218.514:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.287" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44123159 code=0x7ffc0000 [ 137.975003][ T25] audit: type=1326 audit(1791088218.514:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.287" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44123159 code=0x7ffc0000 [ 138.074527][ T25] audit: type=1326 audit(1791088218.514:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.287" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44123159 code=0x7ffc0000 [ 138.200667][ T25] audit: type=1326 audit(1791088218.514:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.287" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f8f44123159 code=0x7ffc0000 [ 138.285733][ T25] audit: type=1326 audit(1791088218.554:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.287" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44123159 code=0x7ffc0000 [ 138.375146][ T25] audit: type=1326 audit(1791088218.554:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.287" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8f44123159 code=0x7ffc0000 [ 138.446821][ T25] audit: type=1326 audit(1791088218.554:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.3.287" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f44123159 code=0x7ffc0000 [ 139.902283][ T5229] FAULT_INJECTION: forcing a failure. [ 139.902283][ T5229] name failslab, interval 1, probability 0, space 0, times 0 [ 139.915124][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.959520][ T5229] CPU: 0 PID: 5229 Comm: syz.2.294 Not tainted syzkaller #0 [ 139.966849][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.976928][ T5229] Call Trace: [ 139.980214][ T5229] [ 139.983150][ T5229] dump_stack_lvl+0x188/0x250 [ 139.987854][ T5229] ? show_regs_print_info+0x20/0x20 [ 139.993059][ T5229] ? load_image+0x410/0x410 [ 139.997570][ T5229] ? __lock_acquire+0x7d40/0x7d40 [ 140.002724][ T5229] should_fail+0x383/0x4b0 [ 140.007163][ T5229] should_failslab+0x5/0x20 [ 140.011859][ T5229] slab_pre_alloc_hook+0x51/0xc0 [ 140.016822][ T5229] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 140.021692][ T5229] kmem_cache_alloc_trace+0x47/0x290 [ 140.026985][ T5229] ? __rdma_create_id+0x65/0x4d0 [ 140.031918][ T5229] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 140.036760][ T5229] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 140.041604][ T5229] __rdma_create_id+0x65/0x4d0 [ 140.046355][ T5229] ? do_raw_spin_unlock+0x11d/0x230 [ 140.051538][ T5229] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 140.056377][ T5229] rdma_create_user_id+0x7d/0xc0 [ 140.061320][ T5229] ucma_create_id+0x227/0x370 [ 140.066193][ T5229] ? __lock_acquire+0x7d40/0x7d40 [ 140.071242][ T5229] ? ucma_close+0x170/0x170 [ 140.075757][ T5229] ? __might_fault+0xb3/0x110 [ 140.080425][ T5229] ? _copy_from_user+0x111/0x170 [ 140.085389][ T5229] ucma_write+0x24e/0x2f0 [ 140.089712][ T5229] ? ucma_get_global_nl_info+0x70/0x70 [ 140.095163][ T5229] ? common_file_perm+0x171/0x1c0 [ 140.100188][ T5229] ? fsnotify_perm+0x5d/0x560 [ 140.104854][ T5229] ? security_file_permission+0x75/0xa0 [ 140.110385][ T5229] ? ucma_get_global_nl_info+0x70/0x70 [ 140.115841][ T5229] vfs_write+0x304/0xd70 [ 140.120093][ T5229] ? file_end_write+0x250/0x250 [ 140.124934][ T5229] ? __fget_files+0x402/0x470 [ 140.129605][ T5229] ? __fdget_pos+0x1e2/0x370 [ 140.134301][ T5229] ? ksys_write+0x70/0x260 [ 140.138829][ T5229] ksys_write+0x153/0x260 [ 140.143153][ T5229] ? __ia32_sys_read+0x80/0x80 [ 140.147905][ T5229] ? lockdep_hardirqs_on+0x94/0x140 [ 140.153097][ T5229] do_syscall_64+0x4c/0xa0 [ 140.157521][ T5229] ? clear_bhb_loop+0x30/0x80 [ 140.162190][ T5229] ? clear_bhb_loop+0x30/0x80 [ 140.166876][ T5229] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.172762][ T5229] RIP: 0033:0x7fc8b6c44159 [ 140.177203][ T5229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.196814][ T5229] RSP: 002b:00007fc8b4e9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.205225][ T5229] RAX: ffffffffffffffda RBX: 00007fc8b6ecbfa0 RCX: 00007fc8b6c44159 [ 140.213191][ T5229] RDX: 0000000000000020 RSI: 00002000000006c0 RDI: 0000000000000003 [ 140.221155][ T5229] RBP: 00007fc8b6cdb06b R08: 0000000000000000 R09: 0000000000000000 [ 140.229141][ T5229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.237101][ T5229] R13: 00007fc8b6ecc038 R14: 00007fc8b6ecbfa0 R15: 00007ffd2ffc5948 [ 140.245087][ T5229] [ 140.346356][ T5233] device syzkaller0 entered promiscuous mode [ 140.686709][ T5233] tipc: Started in network mode [ 140.701758][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 140.729799][ T5233] tipc: Node identity 369651ff627a, cluster identity 4711 [ 140.869242][ T5233] tipc: Enabled bearer , priority 0 [ 140.911235][ T1108] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 140.936209][ T5233] tipc: Resetting bearer [ 140.947717][ T1108] usb 2-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 141.053138][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.231062][ T1108] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 143.001474][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.009516][ T1108] usb 2-1: Product: syz [ 143.276826][ T1108] usb 2-1: Manufacturer: syz [ 143.281773][ T1108] usb 2-1: SerialNumber: syz [ 143.289025][ T4227] tipc: Node number set to 1424773631 [ 143.296396][ T1108] usb 2-1: config 0 descriptor?? [ 143.331150][ T1108] usb 2-1: can't set config #0, error -71 [ 143.351093][ T1108] usb 2-1: USB disconnect, device number 5 [ 143.367498][ T5230] tipc: Resetting bearer [ 143.394441][ T5230] tipc: Disabling bearer [ 145.591023][ T4227] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 146.671036][ T4227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.731107][ T4227] usb 5-1: not running at top speed; connect to a high speed hub [ 147.371802][ T4227] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 147.926434][ T4227] usb 5-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 147.950366][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.992372][ T4227] usb 5-1: Product: syz [ 148.006060][ T4227] usb 5-1: Manufacturer: syz [ 148.021010][ T4227] usb 5-1: SerialNumber: syz [ 148.094618][ T4227] usb 5-1: can't set config #1, error -71 [ 148.129873][ T4227] usb 5-1: USB disconnect, device number 2 [ 150.325373][ T5379] tipc: Started in network mode [ 150.330414][ T5379] tipc: Node identity 4, cluster identity 4711 [ 150.336756][ T5379] tipc: Node number set to 4 [ 157.089458][ T4231] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.629887][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 157.731091][ T4231] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 157.997527][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.006011][ T4231] usb 3-1: Product: syz [ 158.010218][ T4231] usb 3-1: Manufacturer: syz [ 158.015030][ T4231] usb 3-1: SerialNumber: syz [ 158.023508][ T4231] usb 3-1: config 0 descriptor?? [ 158.072421][ T4231] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 158.095817][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.136056][ T4231] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 158.146169][ T4231] usb 3-1: media controller created [ 158.163484][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.281192][ T4231] DVB: Unable to find symbol mt352_attach() [ 159.292071][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 159.311162][ T4231] DVB: Unable to find symbol nxt6000_attach() [ 159.331687][ T4231] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 159.411131][ T4227] usb 4-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 161.602548][ T4231] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 161.817638][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.835161][ T4231] dvb-usb: schedule remote query interval to 1000 msecs. [ 161.844420][ T4231] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 161.859026][ T4231] dvb-usb: bulk message failed: -22 (7/0) [ 161.865776][ T4231] dvb-usb: bulk message failed: -22 (7/0) [ 161.878356][ T4231] usb 3-1: USB disconnect, device number 5 [ 161.897936][ T4227] usb 4-1: string descriptor 0 read error: -71 [ 161.937733][ T4227] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.046392][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.111052][ T4227] usb 4-1: can't set config #1, error -71 [ 162.360813][ T4227] usb 4-1: USB disconnect, device number 2 [ 162.364729][ T4231] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 164.635346][ T5533] input: syz0 as /devices/virtual/input/input6 [ 164.761114][ T4227] wiimote 0005:057E:0330.0001: item fetching failed at offset 0/1 [ 164.785003][ T4227] wiimote 0005:057E:0330.0001: HID parse failed [ 165.812723][ T4227] wiimote: probe of 0005:057E:0330.0001 failed with error -22 [ 170.533638][ T5593] netem: incorrect gi model size [ 170.580500][ T5593] netem: change failed [ 171.757558][ T5601] Invalid option length (65058) for dns_resolver key [ 171.781327][ T5605] Zero length message leads to an empty skb [ 173.133625][ T2855] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.666368][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 175.890969][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 176.066810][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 176.089802][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 176.110085][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 176.536383][ T5655] program syz.0.412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.273550][ T5668] tipc: Started in network mode [ 178.303800][ T5668] tipc: Node identity ac1414aa, cluster identity 4711 [ 178.407876][ T5668] tipc: New replicast peer: 172.20.20.187 [ 178.476105][ T5668] tipc: Enabled bearer , priority 10 [ 180.132825][ T2855] tipc: Node number set to 2886997162 [ 182.819090][ T5711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.430'. [ 182.994140][ T25] audit: type=1326 audit(1791088263.674:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6c44159 code=0x7ffc0000 [ 183.072068][ T25] audit: type=1326 audit(1791088263.674:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc8b6c44159 code=0x7ffc0000 [ 183.109424][ T25] audit: type=1326 audit(1791088263.674:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6c44159 code=0x7ffc0000 [ 183.149286][ T25] audit: type=1326 audit(1791088263.674:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6c44159 code=0x7ffc0000 [ 183.214877][ T25] audit: type=1326 audit(1791088263.674:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc8b6c44159 code=0x7ffc0000 [ 183.251663][ T25] audit: type=1326 audit(1791088263.674:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6c44159 code=0x7ffc0000 [ 183.280267][ T25] audit: type=1326 audit(1791088263.674:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6c44159 code=0x7ffc0000 [ 183.320566][ T25] audit: type=1326 audit(1791088263.674:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8b6c43deb code=0x7ffc0000 [ 183.880437][ T25] audit: type=1326 audit(1791088263.674:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8b6c43deb code=0x7ffc0000 [ 184.066012][ T25] audit: type=1326 audit(1791088263.674:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8b6c43deb code=0x7ffc0000 [ 184.550201][ T5748] netlink: 36 bytes leftover after parsing attributes in process `syz.3.443'. [ 185.481009][ T4279] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 185.605118][ T5764] file system registered [ 185.839591][ T4201] Bluetooth: hci2: unknown advertising packet type: 0xf3 [ 186.556717][ T5769] configfs-gadget gadget: afunc_bind:1164 Error! [ 186.579366][ T5769] udc dummy_udc.0: failed to start g1: -19 [ 186.601199][ T4279] usb 4-1: not running at top speed; connect to a high speed hub [ 186.612123][ T5764] unloading [ 186.846727][ T4279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.859237][ T4279] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 186.874808][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.917288][ T5764] netlink: 52 bytes leftover after parsing attributes in process `syz.0.449'. [ 186.943090][ T4279] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 186.971666][ T5764] ffs_data_put(): freeing [ 186.972785][ T4279] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 187.183858][ T4261] usb 4-1: USB disconnect, device number 3 [ 187.209122][ T4261] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 187.233036][ T4261] cyberjack 4-1:1.0: device disconnected [ 187.865608][ T5796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.457'. [ 188.549362][ T5798] fuse: Unknown parameter '0x0000000000000003' [ 189.994651][ T5832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 190.684002][ T4279] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 191.160958][ T5857] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 191.172907][ T4279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.190986][ T4279] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 191.223101][ T4279] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.421281][ T4279] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 191.441016][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 191.454001][ T4279] usb 3-1: Product: syz [ 191.458600][ T4279] usb 3-1: Manufacturer: syz [ 191.501273][ T5834] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.522150][ T4279] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 191.523604][ T4261] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 192.121850][ T4261] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 192.157440][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.212700][ T4261] usb 5-1: Product: syz [ 192.256467][ T4261] usb 5-1: Manufacturer: syz [ 192.297227][ T4261] usb 5-1: SerialNumber: syz [ 192.326532][ T4279] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 192.355346][ T4279] usb 3-1: USB disconnect, device number 6 [ 192.365314][ T4279] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 192.372802][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.376088][ T4279] garmin_gps 3-1:1.0: device disconnected [ 192.383937][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.443206][ T5875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'. [ 193.451182][ T4261] usb 5-1: MIDIStreaming interface descriptor not found [ 193.601256][ T4261] usb 5-1: USB disconnect, device number 4 [ 194.045634][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.053528][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.711707][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.823901][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.883029][ T5917] input: syz0 as /devices/virtual/input/input9 [ 195.889820][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'. [ 196.129172][ T5859] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.145480][ T5859] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.156767][ T5859] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.171562][ T5859] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.571826][ T5931] orangefs_mount: mount request failed with -4 [ 199.997699][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 200.800227][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.510'. [ 200.935590][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.221141][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 201.226806][ T4227] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 201.376558][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 201.517048][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 201.731075][ T7] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 201.758853][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.786127][ T7] usb 5-1: Product: syz [ 201.790741][ T7] usb 5-1: Manufacturer: syz [ 201.796266][ T4227] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 201.811939][ T7] usb 5-1: SerialNumber: syz [ 201.820211][ T4227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.851710][ T7] usb 5-1: config 0 descriptor?? [ 201.871289][ T4227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.899974][ T4227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.928793][ T4227] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.950078][ T7] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 201.997108][ T4227] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.023990][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.152934][ T7] usb 5-1: USB disconnect, device number 5 [ 202.332225][ T4227] usb 4-1: usb_control_msg returned -32 [ 202.344710][ T4227] usbtmc 4-1:16.0: can't read capabilities [ 203.681659][ T5971] orangefs_mount: mount request failed with -4 [ 204.038626][ T7] usb 4-1: USB disconnect, device number 4 [ 205.779743][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.831220][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.872306][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.931083][ T4279] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 211.641291][ T4279] usb 4-1: not running at top speed; connect to a high speed hub [ 211.721053][ T4279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.756508][ T4279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 211.777967][ T4279] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 211.802612][ T4279] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 211.820024][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.935858][ T4279] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 212.964962][ T4279] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 212.975981][ T4279] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 212.989399][ T4279] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 212.998768][ T4279] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 213.009084][ T4279] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 214.083508][ T4279] usb 4-1: USB disconnect, device number 5 [ 214.961895][ T4279] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 215.098068][ T4279] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 215.228462][ T4279] keyspan 4-1:1.0: device disconnected [ 216.067049][ T25] kauditd_printk_skb: 17 callbacks suppressed [ 216.067062][ T25] audit: type=1800 audit(1791088296.744:115): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.558" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 218.557494][ T6133] nvme_fabrics: missing parameter 'nqn=%s' [ 219.310324][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 221.126339][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 221.541085][ T4279] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 222.110999][ T4279] usb 4-1: Using ep0 maxpacket: 32 [ 222.154014][ T6182] tipc: Enabled bearer , priority 0 [ 222.185082][ T6182] device syzkaller0 entered promiscuous mode [ 222.229213][ T6182] tipc: Resetting bearer [ 222.246518][ T4279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.257215][ T6180] tipc: Resetting bearer [ 222.264833][ T4279] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 222.287924][ T6180] tipc: Disabling bearer [ 222.314022][ T6188] binder: 6155:6188 ioctl c0306201 0 returned -14 [ 222.370992][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 222.407109][ T6190] tmpfs: Unknown parameter 'grpquota' [ 222.461708][ T4279] usb 4-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 222.471844][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.481336][ T4279] usb 4-1: Product: syz [ 222.486229][ T4279] usb 4-1: Manufacturer: syz [ 222.491883][ T4279] usb 4-1: SerialNumber: syz [ 222.661040][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 222.810681][ T4279] usb 4-1: USB disconnect, device number 6 [ 223.173189][ T6183] ceph: No mds server is up or the cluster is laggy [ 224.417504][ T7] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 224.441026][ T7] usb 2-1: config 0 has no interface number 0 [ 224.480082][ T7] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.491613][ T7] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 224.501859][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.522302][ T7] usb 2-1: config 0 descriptor?? [ 224.563649][ T7] usbhid 2-1:0.3: couldn't find an input interrupt endpoint [ 224.659970][ T6210] loop4: detected capacity change from 0 to 7 [ 224.688619][ T6210] Dev loop4: unable to read RDB block 7 [ 224.747702][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 225.301518][ T6210] loop4: unable to read partition table [ 225.338418][ T6210] loop4: partition table beyond EOD, truncated [ 225.411112][ T6210] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.546630][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 226.481954][ T6226] binder: 6224:6226 ioctl c0306201 0 returned -14 [ 227.074823][ T4279] usb 2-1: USB disconnect, device number 6 [ 227.453501][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 230.423532][ T6297] overlayfs: failed to resolve './file0': -2 [ 231.893787][ T6319] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.6225946.0), cmd(2) [ 232.878033][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 233.056481][ T6339] FAULT_INJECTION: forcing a failure. [ 233.056481][ T6339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.071430][ T6339] CPU: 0 PID: 6339 Comm: syz.2.629 Not tainted syzkaller #0 [ 233.079451][ T6339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.090511][ T6339] Call Trace: [ 233.094114][ T6339] [ 233.097332][ T6339] dump_stack_lvl+0x188/0x250 [ 233.102480][ T6339] ? show_regs_print_info+0x20/0x20 [ 233.108175][ T6339] ? load_image+0x410/0x410 [ 233.113104][ T6339] ? uncharge_page+0x490/0x490 [ 233.118333][ T6339] should_fail+0x383/0x4b0 [ 233.123178][ T6339] prepare_alloc_pages+0x1e3/0x5b0 [ 233.128790][ T6339] __alloc_pages+0x11b/0x480 [ 233.133817][ T6339] ? zone_statistics+0x170/0x170 [ 233.139248][ T6339] ? rcu_lock_acquire+0x30/0x30 [ 233.144558][ T6339] ? alloc_pages+0x452/0x560 [ 233.149582][ T6339] __get_free_pages+0x8/0x30 [ 233.154602][ T6339] __tlb_remove_page_size+0x1f2/0x3f0 [ 233.160506][ T6339] unmap_page_range+0xfcf/0x2410 [ 233.165949][ T6339] unmap_vmas+0x131/0x250 [ 233.170723][ T6339] ? unmap_page_range+0x2410/0x2410 [ 233.176413][ T6339] ? __mutex_lock_common+0x435/0x2400 [ 233.182300][ T6339] ? exit_mm_release+0x16/0x30 [ 233.187521][ T6339] exit_mmap+0x3b9/0x640 [ 233.192165][ T6339] ? vm_brk+0x20/0x20 [ 233.196521][ T6339] ? uprobe_clear_state+0x2f6/0x460 [ 233.202216][ T6339] __mmput+0x115/0x390 [ 233.206670][ T6339] exit_mm+0x632/0x7b0 [ 233.211119][ T6339] ? perf_pmu_migrate_context+0xb70/0xb70 [ 233.217396][ T6339] ? do_exit+0x2110/0x2110 [ 233.222232][ T6339] ? __ia32_sys_timer_delete+0x40/0x40 [ 233.228215][ T6339] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 233.234199][ T6339] ? tty_audit_exit+0x149/0x1f0 [ 233.239515][ T6339] do_exit+0x5b8/0x2110 [ 233.244066][ T6339] ? put_task_struct+0x80/0x80 [ 233.249284][ T6339] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 233.255840][ T6339] ? _raw_spin_lock_irq+0xb7/0xf0 [ 233.261361][ T6339] do_group_exit+0x12c/0x2f0 [ 233.266387][ T6339] ? lockdep_hardirqs_on+0x94/0x140 [ 233.272091][ T6339] get_signal+0x7eb/0x12e0 [ 233.276939][ T6339] arch_do_signal_or_restart+0xe6/0x12a0 [ 233.283125][ T6339] ? futex_exit_release+0x1c0/0x1c0 [ 233.288822][ T6339] ? get_sigframe_size+0x10/0x10 [ 233.294230][ T6339] ? __context_tracking_exit+0x4c/0x80 [ 233.300227][ T6339] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 233.306791][ T6339] ? exit_to_user_mode_loop+0x3b/0x130 [ 233.312769][ T6339] exit_to_user_mode_loop+0x9e/0x130 [ 233.318560][ T6339] exit_to_user_mode_prepare+0xee/0x180 [ 233.324642][ T6339] syscall_exit_to_user_mode+0x16/0x40 [ 233.330619][ T6339] do_syscall_64+0x58/0xa0 [ 233.335453][ T6339] ? clear_bhb_loop+0x30/0x80 [ 233.340586][ T6339] ? clear_bhb_loop+0x30/0x80 [ 233.345714][ T6339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.352169][ T6339] RIP: 0033:0x7fc8b6c44159 [ 233.357003][ T6339] Code: Unable to access opcode bytes at RIP 0x7fc8b6c4412f. [ 233.365073][ T6339] RSP: 002b:00007fc8b4e7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 233.374303][ T6339] RAX: fffffffffffffe00 RBX: 00007fc8b6ecc098 RCX: 00007fc8b6c44159 [ 233.383052][ T6339] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc8b6ecc098 [ 233.391817][ T6339] RBP: 00007fc8b6ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 233.400564][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.409308][ T6339] R13: 00007fc8b6ecc128 R14: 00007ffd2ffc5860 R15: 00007ffd2ffc5948 [ 233.418067][ T6339] [ 233.614205][ T6348] overlayfs: failed to clone upperpath [ 235.442224][ T6383] overlayfs: failed to clone upperpath [ 237.049260][ T6397] loop2: detected capacity change from 0 to 512 [ 237.084803][ T6397] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.676378][ T6397] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.649: invalid indirect mapped block 256 (level 2) [ 237.783938][ T6397] EXT4-fs (loop2): Remounting filesystem read-only [ 237.827294][ T6397] EXT4-fs (loop2): 2 truncates cleaned up [ 237.850438][ T6397] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 238.585300][ T6397] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.649: bg 0: block 5: invalid block bitmap [ 238.749919][ T6397] EXT4-fs (loop2): Remounting filesystem read-only [ 243.697009][ T6468] loop3: detected capacity change from 0 to 256 [ 243.999827][ T6468] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 246.291032][ T6490] loop3: detected capacity change from 0 to 16 [ 246.453331][ T6490] erofs: (device loop3): mounted with root inode @ nid 36. [ 247.129450][ T6490] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 247.438981][ T6490] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 247.451253][ T6495] erofs: (device loop3): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 248.534233][ T6490] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 248.744620][ T6490] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 248.755333][ T6490] erofs: (device loop3): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 248.765362][ T6490] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 248.775760][ T6490] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 9 of nid 36 [ 248.786032][ T6490] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 248.796004][ T6490] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 40959 of nid 36 [ 248.807541][ T6490] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 248.824494][ T6490] attempt to access beyond end of device [ 248.824494][ T6490] loop3: rw=524288, want=67108888, limit=16 [ 248.866158][ T6490] attempt to access beyond end of device [ 248.866158][ T6490] loop3: rw=524288, want=736, limit=16 [ 248.884342][ T6490] attempt to access beyond end of device [ 248.884342][ T6490] loop3: rw=524288, want=525160, limit=16 [ 248.899208][ T6490] attempt to access beyond end of device [ 248.899208][ T6490] loop3: rw=524288, want=24, limit=16 [ 249.703120][ T25] audit: type=1326 audit(1791088330.384:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.4.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 250.076337][ T25] audit: type=1326 audit(1791088330.454:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.4.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 250.108018][ T25] audit: type=1326 audit(1791088330.454:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.4.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 250.363983][ T25] audit: type=1326 audit(1791088330.454:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.4.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 250.593539][ T25] audit: type=1326 audit(1791088330.454:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.4.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 251.690178][ T25] audit: type=1326 audit(1791088330.454:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.4.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 251.771227][ T25] audit: type=1326 audit(1791088330.454:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.4.693" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 255.492484][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.499728][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.093527][ T25] audit: type=1800 audit(1791088339.774:123): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.717" name="c_chmask" dev="configfs" ino=41098 res=0 errno=0 [ 259.129316][ T6607] configfs-gadget gadget: afunc_bind:1164 Error! [ 259.159067][ T6607] udc dummy_udc.0: failed to start g1: -19 [ 259.210981][ T25] audit: type=1800 audit(1791088339.804:124): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.717" name="UDC" dev="configfs" ino=41099 res=0 errno=0 [ 259.307719][ T25] audit: type=1400 audit(1791088339.964:125): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6613 comm="syz.2.718" [ 261.798674][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061a00400: rx timeout, send abort [ 261.809968][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061a00400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 261.983322][ T25] audit: type=1800 audit(1791088342.664:126): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.732" name="c_chmask" dev="configfs" ino=40943 res=0 errno=0 [ 262.031325][ T6653] configfs-gadget gadget: afunc_bind:1164 Error! [ 262.063821][ T6653] udc dummy_udc.0: failed to start g1: -19 [ 262.065149][ T25] audit: type=1800 audit(1791088342.704:127): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.732" name="UDC" dev="configfs" ino=41180 res=0 errno=0 [ 263.829081][ T6674] x_tables: duplicate underflow at hook 2 [ 267.109812][ T6693] netdevsim netdevsim1: Direct firmware load for ¹ failed with error -2 [ 267.119323][ T6693] netdevsim netdevsim1: Falling back to sysfs fallback for: ¹ [ 272.533491][ T6719] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 272.563660][ T6719] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 282.321020][ T7] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 283.511118][ T7] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 283.533071][ T7] usb 5-1: config 0 has no interface number 0 [ 283.610194][ T7] usb 5-1: config 0 interface 41 has no altsetting 0 [ 283.629727][ T6858] loop2: detected capacity change from 0 to 512 [ 283.871952][ T7] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 283.889998][ T6858] ======================================================= [ 283.889998][ T6858] WARNING: The mand mount option has been deprecated and [ 283.889998][ T6858] and is ignored by this kernel. Remove the mand [ 283.889998][ T6858] option from the mount to silence this warning. [ 283.889998][ T6858] ======================================================= [ 284.052852][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.090141][ T6858] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 284.098145][ T6858] EXT4-fs (loop2): Ignoring removed bh option [ 284.108497][ T6858] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 284.127288][ T7] usb 5-1: Product: syz [ 284.141988][ T7] usb 5-1: Manufacturer: syz [ 284.159694][ T7] usb 5-1: SerialNumber: syz [ 284.170212][ T7] usb 5-1: config 0 descriptor?? [ 284.280056][ T6858] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 284.923656][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 285.220415][ T7] CoreChips: probe of 5-1:0.41 failed with error -71 [ 285.263343][ T7] usb 5-1: USB disconnect, device number 6 [ 288.474865][ T6904] loop1: detected capacity change from 0 to 256 [ 288.805955][ T6904] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 288.826754][ T25] audit: type=1800 audit(1791088369.504:128): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.803" name="file1" dev="loop1" ino=1048636 res=0 errno=0 [ 290.754571][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.818842][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.837664][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.918070][ T6940] fuse: Invalid rootmode [ 291.019848][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 291.964634][ T6950] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 294.366301][ T6986] synth uevent: /bus/acpi: unknown uevent action string [ 295.475648][ T6994] netdevsim netdevsim3: Direct firmware load for ¹ failed with error -2 [ 295.484923][ T6994] netdevsim netdevsim3: Falling back to sysfs fallback for: ¹ [ 297.027912][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.053736][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.082077][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.127796][ T7028] loop3: detected capacity change from 0 to 256 [ 299.171540][ T7028] exfat: Deprecated parameter 'utf8' [ 299.177431][ T7028] exfat: Deprecated parameter 'namecase' [ 299.191153][ T7028] exfat: Deprecated parameter 'namecase' [ 299.209273][ T7020] chnl_net:caif_netlink_parms(): no params data found [ 299.217292][ T7028] exfat: Deprecated parameter 'namecase' [ 299.308227][ T7028] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 299.369248][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.385601][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.399749][ T7020] device bridge_slave_0 entered promiscuous mode [ 299.409755][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.417678][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.426777][ T7020] device bridge_slave_1 entered promiscuous mode [ 299.450213][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.462436][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.488419][ T7020] team0: Port device team_slave_0 added [ 299.499628][ T7020] team0: Port device team_slave_1 added [ 299.550530][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.558442][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.597444][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.622739][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.641066][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.707750][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.988055][ T7020] device hsr_slave_0 entered promiscuous mode [ 300.049354][ T7020] device hsr_slave_1 entered promiscuous mode [ 300.072741][ T7020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.134851][ T7020] Cannot create hsr debugfs directory [ 301.263597][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 301.956984][ T7020] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.412085][ T7020] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.429980][ T7020] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.460556][ T7020] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.612516][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.644451][ T7020] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.691795][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.711279][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.734082][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.769959][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.780462][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.788264][ T4439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.805015][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.816944][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.830614][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.838442][ T4439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.897606][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.930033][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.965764][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.026286][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.045292][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.076298][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.110693][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.129967][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.171608][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.201316][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.228527][ T7076] netdevsim netdevsim0: Direct firmware load for ¹ failed with error -2 [ 303.237777][ T7076] netdevsim netdevsim0: Falling back to sysfs fallback for: ¹ [ 303.248973][ T7020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.271680][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.288039][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.304951][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.321284][ T4261] Bluetooth: hci5: command 0x041b tx timeout [ 303.586535][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.595154][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.609322][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.754432][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.764320][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.786643][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.796070][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.808267][ T7020] device veth0_vlan entered promiscuous mode [ 303.827092][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.836145][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.850768][ T7020] device veth1_vlan entered promiscuous mode [ 303.875456][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 303.884635][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.894666][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.904923][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.917112][ T7020] device veth0_macvtap entered promiscuous mode [ 303.930457][ T7020] device veth1_macvtap entered promiscuous mode [ 303.946460][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.958271][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.969454][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.981419][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.992779][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.004625][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.018590][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.029512][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.045089][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.058701][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.071653][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.102705][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.132254][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.152980][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.164551][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.175443][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.186988][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.206294][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.269140][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.033387][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.093963][ T7020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.193332][ T7020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.248333][ T7020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.258713][ T7020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.399530][ T4439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.401120][ T4261] Bluetooth: hci5: command 0x040f tx timeout [ 305.414908][ T4439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.428300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.459626][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.469700][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.485598][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.122065][ T7103] orangefs_mount: mount request failed with -4 [ 306.878017][ T7127] ip_tables: iptables: counters copy to user failed while replacing table [ 307.720022][ T4261] Bluetooth: hci5: command 0x0419 tx timeout [ 307.774796][ T7124] netdevsim netdevsim0: Direct firmware load for ¹ failed with error -2 [ 307.783197][ T7135] loop4: detected capacity change from 0 to 256 [ 307.791398][ T7124] netdevsim netdevsim0: Falling back to sysfs fallback for: ¹ [ 308.002656][ T7135] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.861412][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 309.025010][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.035248][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.045088][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.291361][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.303767][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.315386][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.330393][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.341362][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.922750][ T7151] orangefs_mount: mount request failed with -4 [ 309.962168][ T7] usb 4-1: config 0 descriptor?? [ 310.472805][ T7] plantronics 0003:047F:FFFF.0002: unbalanced collection at end of report description [ 310.484444][ T7] plantronics 0003:047F:FFFF.0002: parse failed [ 310.491797][ T7] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 310.656510][ T7] usb 4-1: USB disconnect, device number 7 [ 311.843712][ T7175] netdevsim netdevsim5: Direct firmware load for ¹ failed with error -2 [ 311.855838][ T7183] loop1: detected capacity change from 0 to 256 [ 311.856232][ T7175] netdevsim netdevsim5: Falling back to sysfs fallback for: ¹ [ 311.909847][ T7183] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 313.644272][ T7193] orangefs_mount: mount request failed with -4 [ 314.879336][ T7183] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 315.022898][ T7202] attempt to access beyond end of device [ 315.022898][ T7202] loop1: rw=524288, want=34359738496, limit=256 [ 315.121917][ T7202] attempt to access beyond end of device [ 315.121917][ T7202] loop1: rw=0, want=34359738496, limit=256 [ 315.274257][ T25] audit: type=1800 audit(1791088395.944:129): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.888" name="file1" dev="loop1" ino=1048653 res=0 errno=0 [ 315.341786][ T7202] syz.1.888 (7202) used greatest stack depth: 19536 bytes left [ 316.768239][ T7239] netdevsim netdevsim1: Direct firmware load for ¹ failed with error -2 [ 316.924986][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.944420][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.953316][ T7239] netdevsim netdevsim1: Falling back to sysfs fallback for: ¹ [ 317.048412][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 318.872425][ T7269] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 318.917891][ T7269] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 321.634499][ T7298] orangefs_mount: mount request failed with -4 [ 321.658979][ T25] audit: type=1800 audit(1791088402.334:130): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.925" name="c_chmask" dev="configfs" ino=43636 res=0 errno=0 [ 321.921387][ T7307] netdevsim netdevsim0: Direct firmware load for ¹ failed with error -2 [ 322.576999][ T7307] netdevsim netdevsim0: Falling back to sysfs fallback for: ¹ [ 324.970976][ T25] audit: type=1800 audit(1791088405.644:131): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.938" name="c_chmask" dev="configfs" ino=69151 res=0 errno=0 [ 324.973054][ T7338] configfs-gadget gadget: afunc_bind:1164 Error! [ 325.177439][ T7345] orangefs_mount: mount request failed with -4 [ 325.194584][ T25] audit: type=1800 audit(1791088405.654:132): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.938" name="UDC" dev="configfs" ino=69152 res=0 errno=0 [ 325.309520][ T7338] udc dummy_udc.0: failed to start g1: -19 [ 325.598621][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 326.354969][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 326.364932][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.373725][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.531398][ T7355] netdevsim netdevsim5: Direct firmware load for ¹ failed with error -2 [ 326.553561][ T7355] netdevsim netdevsim5: Falling back to sysfs fallback for: ¹ [ 329.856303][ T25] audit: type=1800 audit(1791088410.534:133): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.951" name="c_chmask" dev="configfs" ino=43773 res=0 errno=0 [ 329.857472][ T7387] configfs-gadget gadget: afunc_bind:1164 Error! [ 329.903002][ T7387] udc dummy_udc.0: failed to start g1: -19 [ 329.934319][ T25] audit: type=1800 audit(1791088410.534:134): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.951" name="UDC" dev="configfs" ino=43774 res=0 errno=0 [ 330.790314][ T7385] orangefs_mount: mount request failed with -4 [ 331.141560][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 332.201498][ T7410] comedi comedi2: comedi_config --init_data is deprecated [ 332.358669][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.563178][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.589337][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.622639][ T25] audit: type=1800 audit(1791088414.304:135): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.963" name="c_chmask" dev="configfs" ino=69263 res=0 errno=0 [ 333.651704][ T7430] configfs-gadget gadget: afunc_bind:1164 Error! [ 333.658768][ T7430] udc dummy_udc.0: failed to start g1: -19 [ 333.683307][ T25] audit: type=1800 audit(1791088414.334:136): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.963" name="UDC" dev="configfs" ino=69264 res=0 errno=0 [ 335.399338][ T7452] loop4: detected capacity change from 0 to 256 [ 335.929391][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 336.231236][ T7463] netlink: 76 bytes leftover after parsing attributes in process `syz.5.971'. [ 336.390236][ T7467] configfs-gadget gadget: afunc_bind:1164 Error! [ 336.397540][ T7467] udc dummy_udc.0: failed to start g1: -19 [ 336.411462][ T25] audit: type=1800 audit(1791088417.064:137): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.975" name="c_chmask" dev="configfs" ino=69325 res=0 errno=0 [ 336.433874][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.469866][ T25] audit: type=1800 audit(1791088417.064:138): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.975" name="UDC" dev="configfs" ino=69326 res=0 errno=0 [ 337.484585][ T7481] loop1: detected capacity change from 0 to 256 [ 337.548382][ T7481] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 338.484011][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.589924][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.598353][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.638524][ T7512] netlink: 76 bytes leftover after parsing attributes in process `syz.3.988'. [ 344.957538][ T25] audit: type=1800 audit(1791088425.634:139): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.999" name="c_chmask" dev="configfs" ino=43971 res=0 errno=0 [ 345.001709][ T7542] configfs-gadget gadget: afunc_bind:1164 Error! [ 345.008783][ T7542] udc dummy_udc.0: failed to start g1: -19 [ 345.022642][ T7540] loop4: detected capacity change from 0 to 1024 [ 345.065914][ T25] audit: type=1800 audit(1791088425.674:140): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.999" name="UDC" dev="configfs" ino=43972 res=0 errno=0 [ 345.764506][ T7540] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 2656 [ 346.728041][ T7557] orangefs_mount: mount request failed with -4 [ 347.125245][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 347.728711][ T7575] capability: warning: `syz.0.1009' uses deprecated v2 capabilities in a way that may be insecure [ 348.175280][ T7580] loop5: detected capacity change from 0 to 256 [ 350.552259][ T7580] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f912, utbl_chksum : 0xe619d30d) [ 352.057569][ T7618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1019'. [ 352.671937][ T7602] orangefs_mount: mount request failed with -4 [ 353.065157][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1020'. [ 356.421426][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 360.187128][ T7725] loop5: detected capacity change from 0 to 16 [ 360.577266][ T7725] erofs: (device loop5): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 363.411078][ T6840] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 364.065596][ T7772] loop1: detected capacity change from 0 to 512 [ 364.256455][ T7772] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.1064: missing EA_INODE flag [ 364.289958][ T7772] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1064: error while reading EA inode 2 err=-117 [ 364.314925][ T7772] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1064: inode #3584: comm syz.1.1064: iget: illegal inode # [ 364.320034][ T7777] loop5: detected capacity change from 0 to 4096 [ 364.335315][ T7772] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1064: error while reading EA inode 3584 err=-117 [ 364.360870][ T7772] EXT4-fs (loop1): 1 orphan inode deleted [ 364.361227][ T6840] usb 5-1: Using ep0 maxpacket: 8 [ 364.373935][ T7772] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 364.415764][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 364.527822][ T7777] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 365.082224][ T6840] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 365.239304][ T6840] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.428385][ T6840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.439208][ T6840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.450146][ T6840] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.464472][ T6840] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.736768][ T6840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.231125][ T6840] usb 5-1: can't set config #16, error -71 [ 366.261051][ T6840] usb 5-1: USB disconnect, device number 7 [ 366.649303][ T7808] loop3: detected capacity change from 0 to 256 [ 366.953486][ T7808] exfat: Deprecated parameter 'utf8' [ 366.973445][ T7808] exfat: Deprecated parameter 'utf8' [ 367.169518][ T7808] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 372.297051][ T7869] loop4: detected capacity change from 0 to 256 [ 372.329586][ T7869] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.470971][ T4279] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 376.152509][ T7910] loop4: detected capacity change from 0 to 16 [ 376.220544][ T7910] erofs: (device loop4): mounted with root inode @ nid 36. [ 376.293458][ T7910] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 376.340979][ T7910] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 376.371971][ T7910] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 376.380982][ T7916] erofs: (device loop4): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 376.519955][ T7910] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 376.753791][ T7918] comedi comedi2: comedi_config --init_data is deprecated [ 376.784346][ T7910] erofs: (device loop4): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 376.825720][ T7910] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 376.861247][ T7925] netdevsim netdevsim1: Direct firmware load for ¹ failed with error -2 [ 376.870440][ T7925] netdevsim netdevsim1: Falling back to sysfs fallback for: ¹ [ 376.881243][ T7910] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 9 of nid 36 [ 376.899735][ T7910] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 376.920657][ T7910] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 40959 of nid 36 [ 376.937781][ T7910] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 376.951245][ T7910] attempt to access beyond end of device [ 376.951245][ T7910] loop4: rw=524288, want=67108888, limit=16 [ 376.978368][ T7910] attempt to access beyond end of device [ 376.978368][ T7910] loop4: rw=524288, want=736, limit=16 [ 377.021090][ T7910] attempt to access beyond end of device [ 377.021090][ T7910] loop4: rw=524288, want=525160, limit=16 [ 377.071443][ T7910] attempt to access beyond end of device [ 377.071443][ T7910] loop4: rw=524288, want=24, limit=16 [ 378.411717][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.419324][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.783681][ T7962] loop1: detected capacity change from 0 to 1024 [ 379.984082][ T7960] comedi comedi2: comedi_config --init_data is deprecated [ 380.021566][ T7962] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 380.021566][ T7962] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 380.021566][ T7962] [ 380.058937][ T7962] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 380.168561][ T7962] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,minixdf,grpjquota=,nodiscard,dioread_nolock,barrier,data_err=abort,errors=remount-ro,stripe=0x0000000000000c1b,nouser_xattr,. Quota mode: none. [ 380.263213][ T7962] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.309860][ T7972] loop5: detected capacity change from 0 to 16 [ 380.370292][ T7972] erofs: (device loop5): mounted with root inode @ nid 36. [ 380.416549][ T7962] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1121: bg 0: block 112: padding at end of block bitmap is not set [ 380.459281][ T7962] EXT4-fs (loop1): Remounting filesystem read-only [ 380.468402][ T7972] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 380.483795][ T7972] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 380.486904][ T7978] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.1121: Freeing blocks not in datazone - block = 0, count = 16 [ 380.494354][ T7972] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 380.541092][ T7972] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 380.545303][ T7978] EXT4-fs (loop1): Remounting filesystem read-only [ 380.558073][ T7972] erofs: (device loop5): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 380.569541][ T7972] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 381.362420][ T7972] erofs: (device loop5): z_erofs_extent_lookback: unknown type 3 @ lcn 9 of nid 36 [ 381.446114][ T7979] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 381.461239][ T7972] erofs: (device loop5): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 381.523072][ T7972] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 40959 of nid 36 [ 381.593705][ T7972] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 381.644810][ T7972] attempt to access beyond end of device [ 381.644810][ T7972] loop5: rw=524288, want=67108888, limit=16 [ 381.681785][ T7972] attempt to access beyond end of device [ 381.681785][ T7972] loop5: rw=524288, want=736, limit=16 [ 381.705558][ T7972] attempt to access beyond end of device [ 381.705558][ T7972] loop5: rw=524288, want=525160, limit=16 [ 381.739268][ T7972] attempt to access beyond end of device [ 381.739268][ T7972] loop5: rw=524288, want=24, limit=16 [ 381.894030][ T7985] loop4: detected capacity change from 0 to 40427 [ 381.908440][ T7994] loop1: detected capacity change from 0 to 4096 [ 382.013325][ T7985] F2FS-fs (loop4): invalid crc value [ 382.060127][ T7994] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 382.184962][ T7985] F2FS-fs (loop4): Found nat_bits in checkpoint [ 382.852712][ T7985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 383.127821][ T25] audit: type=1326 audit(1791088463.804:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 383.168083][ T8021] comedi comedi2: comedi_config --init_data is deprecated [ 384.001517][ T25] audit: type=1326 audit(1791088463.854:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 384.045391][ T25] audit: type=1326 audit(1791088463.864:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 384.089233][ T4198] attempt to access beyond end of device [ 384.089233][ T4198] loop4: rw=2049, want=45104, limit=40427 [ 384.231111][ T25] audit: type=1326 audit(1791088463.864:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 384.359158][ T25] audit: type=1326 audit(1791088463.864:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 384.478441][ T25] audit: type=1326 audit(1791088463.864:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 384.541492][ T7732] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 384.556027][ T25] audit: type=1326 audit(1791088463.864:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 384.582552][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.660795][ T25] audit: type=1326 audit(1791088463.864:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 384.687332][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.804201][ T25] audit: type=1326 audit(1791088463.864:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 384.830533][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.940977][ T25] audit: type=1326 audit(1791088463.864:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.4.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537bc6b159 code=0x7ffc0000 [ 384.967466][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.971269][ T7732] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.026807][ T7732] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.042762][ T8032] loop4: detected capacity change from 0 to 1024 [ 385.110942][ T7732] usb 4-1: config 0 interface 0 has no altsetting 0 [ 385.129003][ T7732] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 385.177003][ T8032] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 385.201582][ T7732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.252664][ T8032] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 385.284281][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.292781][ T7732] usb 4-1: config 0 descriptor?? [ 385.729416][ T8046] loop4: detected capacity change from 0 to 256 [ 385.793763][ T7732] hid-multitouch 0003:0EEF:72C4.0003: unbalanced collection at end of report description [ 385.839184][ T7732] hid-multitouch: probe of 0003:0EEF:72C4.0003 failed with error -22 [ 385.895569][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 386.002082][ T1108] usb 4-1: USB disconnect, device number 9 [ 388.549071][ T8071] comedi comedi2: comedi_config --init_data is deprecated [ 388.713852][ T8076] loop5: detected capacity change from 0 to 256 [ 389.201514][ T8076] FAT-fs (loop5): Unrecognized mount option "u~i_xlate=1" or missing value [ 389.836876][ T8085] tipc: Started in network mode [ 389.843059][ T8085] tipc: Node identity 4, cluster identity 4711 [ 389.850047][ T8085] tipc: Node number set to 4 [ 390.021456][ T4231] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 390.331006][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 390.451225][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.504524][ T4231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.701286][ T4231] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.741783][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.938435][ T4231] usb 5-1: Product: syz [ 391.388811][ T4231] usb 5-1: Manufacturer: syz [ 391.400436][ T4231] usb 5-1: SerialNumber: syz [ 392.104216][ T8104] netdevsim netdevsim5: Direct firmware load for ¹ failed with error -2 [ 392.113667][ T8104] netdevsim netdevsim5: Falling back to sysfs fallback for: ¹ [ 392.227803][ T4231] usb 5-1: 0:2 : does not exist [ 392.277906][ T4231] usb 5-1: USB disconnect, device number 8 [ 395.319534][ T8116] loop4: detected capacity change from 0 to 1024 [ 395.361655][ T8120] comedi comedi2: comedi_config --init_data is deprecated [ 395.384792][ T7695] udevd[7695]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.412201][ T8116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 397.090255][ T8149] loop5: detected capacity change from 0 to 512 [ 397.134873][ T8151] netdevsim netdevsim3: Direct firmware load for ¹ failed with error -2 [ 397.144265][ T8151] netdevsim netdevsim3: Falling back to sysfs fallback for: ¹ [ 397.161239][ T8149] EXT4-fs (loop5): invalid inodes per group: 8 [ 397.161239][ T8149] [ 398.410676][ T8166] loop5: detected capacity change from 0 to 256 [ 400.189586][ T8166] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f912, utbl_chksum : 0xe619d30d) [ 402.179800][ T8184] loop5: detected capacity change from 0 to 128 [ 405.644706][ T8226] comedi comedi2: comedi_config --init_data is deprecated [ 405.742232][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1204'. [ 406.161321][ T8241] tipc: Started in network mode [ 406.166902][ T8241] tipc: Node identity 4, cluster identity 4711 [ 406.173883][ T8241] tipc: Node number set to 4 [ 407.224249][ T8256] overlayfs: failed to clone upperpath [ 407.382376][ T8255] loop3: detected capacity change from 0 to 512 [ 408.147926][ T8255] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 408.172609][ T8255] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 408.183918][ T8255] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 408.194750][ T8255] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 408.229635][ T8255] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 408.238522][ T8255] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e11c, mo2=0000] [ 408.247186][ T8255] EXT4-fs (loop3): failed to initialize system zone (-117) [ 408.255471][ T8255] EXT4-fs (loop3): mount failed [ 409.704094][ T8277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 409.724659][ T8277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.754118][ T8277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.744023][ T8269] loop3: detected capacity change from 0 to 40427 [ 410.834240][ T8269] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 410.837899][ T8286] loop5: detected capacity change from 0 to 512 [ 410.896054][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 411.080649][ T8269] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 411.094388][ T8269] F2FS-fs (loop3): invalid crc value [ 411.103241][ T8286] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 411.127185][ T8286] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 411.155365][ T8286] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.172134][ T8269] F2FS-fs (loop3): Found nat_bits in checkpoint [ 411.219235][ T8286] EXT4-fs (loop5): shut down requested (2) [ 411.245459][ T8269] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 411.254729][ T8269] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 413.176135][ T8317] comedi comedi2: comedi_config --init_data is deprecated [ 413.242097][ T8320] loop4: detected capacity change from 0 to 512 [ 413.424533][ T8320] EXT4-fs (loop4): Ignoring removed nobh option [ 413.495402][ T8320] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1231: invalid indirect mapped block 256 (level 2) [ 413.610242][ T8320] EXT4-fs (loop4): 2 truncates cleaned up [ 413.634306][ T8320] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 413.651719][ T8331] FAULT_INJECTION: forcing a failure. [ 413.651719][ T8331] name failslab, interval 1, probability 0, space 0, times 0 [ 413.651779][ T8331] CPU: 1 PID: 8331 Comm: syz.3.1224 Not tainted syzkaller #0 [ 413.651797][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 413.651808][ T8331] Call Trace: [ 413.651815][ T8331] [ 413.651823][ T8331] dump_stack_lvl+0x188/0x250 [ 413.651851][ T8331] ? show_regs_print_info+0x20/0x20 [ 413.651872][ T8331] ? load_image+0x410/0x410 [ 413.651893][ T8331] ? __might_sleep+0xf0/0xf0 [ 413.651914][ T8331] ? __lock_acquire+0x7d40/0x7d40 [ 413.651940][ T8331] should_fail+0x383/0x4b0 [ 413.651966][ T8331] should_failslab+0x5/0x20 [ 413.651985][ T8331] slab_pre_alloc_hook+0x51/0xc0 [ 413.652003][ T8331] ? __kernfs_new_node+0xe3/0x6b0 [ 413.652024][ T8331] kmem_cache_alloc+0x3d/0x280 [ 413.652048][ T8331] __kernfs_new_node+0xe3/0x6b0 [ 413.652072][ T8331] ? __lock_acquire+0x7d40/0x7d40 [ 413.652094][ T8331] ? kernfs_new_node+0x250/0x250 [ 413.652128][ T8331] ? kernfs_activate+0x1eb/0x210 [ 413.652151][ T8331] kernfs_new_node+0x148/0x250 [ 413.652177][ T8331] __kernfs_create_file+0x47/0x2e0 [ 413.652201][ T8331] sysfs_add_file_mode_ns+0x2d2/0x390 [ 413.652228][ T8331] sysfs_merge_group+0x182/0x320 [ 413.652250][ T8331] ? sysfs_remove_groups+0xa0/0xa0 [ 413.652272][ T8331] ? kernfs_put+0x442/0x480 [ 413.652299][ T8331] ? sysfs_create_groups+0x9c/0x120 [ 413.652320][ T8331] dpm_sysfs_add+0xce/0x270 [ 413.652341][ T8331] device_add+0x745/0x1050 [ 413.652367][ T8331] device_create+0x266/0x300 [ 413.652389][ T8331] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 413.652411][ T8331] ? _raw_spin_unlock+0x40/0x40 [ 413.652431][ T8331] ? root_device_unregister+0xf0/0xf0 [ 413.652449][ T8331] ? update_attr+0x550/0x730 [ 413.652471][ T8331] ? memcpy+0x3c/0x60 [ 413.652490][ T8331] ? is_console_locked+0x5/0x10 [ 413.652505][ T8331] ? csi_J+0x8d6/0xdb0 [ 413.652527][ T8331] vcs_make_sysfs+0x2e/0x80 [ 413.652544][ T8331] vc_allocate+0x5e4/0x700 [ 413.652569][ T8331] ? vc_cons_allocated+0x70/0x70 [ 413.652599][ T8331] con_install+0x9c/0x720 [ 413.652625][ T8331] ? show_tty_active+0x30/0x30 [ 413.652655][ T8331] tty_init_dev+0xbb/0x470 [ 413.652678][ T8331] tty_open+0x7e8/0xcd0 [ 413.652704][ T8331] ? __lock_acquire+0x7d40/0x7d40 [ 413.652729][ T8331] ? tty_compat_ioctl+0x570/0x570 [ 413.652753][ T8331] ? do_raw_spin_unlock+0x11d/0x230 [ 413.652776][ T8331] chrdev_open+0x585/0x5f0 [ 413.652798][ T8331] ? cd_forget+0x160/0x160 [ 413.652826][ T8331] ? fsnotify_perm+0x3a7/0x560 [ 413.652846][ T8331] ? cd_forget+0x160/0x160 [ 413.652870][ T8331] do_dentry_open+0x7f7/0xf90 [ 413.652891][ T8331] ? vfs_open+0x2b/0x80 [ 413.652915][ T8331] path_openat+0x2718/0x2fb0 [ 413.652959][ T8331] ? __kasan_slab_alloc+0xa9/0xc0 [ 413.652987][ T8331] ? do_filp_open+0x400/0x400 [ 413.653028][ T8331] do_filp_open+0x1df/0x400 [ 413.653054][ T8331] ? vfs_tmpfile+0x300/0x300 [ 413.653095][ T8331] ? _raw_spin_unlock+0x24/0x40 [ 413.653113][ T8331] ? alloc_fd+0x59e/0x650 [ 413.653140][ T8331] do_sys_openat2+0x14b/0x500 [ 413.653157][ T8331] ? __lock_acquire+0x7d40/0x7d40 [ 413.653178][ T8331] ? do_sys_open+0xe0/0xe0 [ 413.653196][ T8331] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 413.653221][ T8331] ? lock_chain_count+0x20/0x20 [ 413.653247][ T8331] __x64_sys_openat+0x135/0x160 [ 413.653270][ T8331] do_syscall_64+0x4c/0xa0 [ 413.653294][ T8331] ? clear_bhb_loop+0x30/0x80 [ 413.653314][ T8331] ? clear_bhb_loop+0x30/0x80 [ 413.653336][ T8331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 413.653357][ T8331] RIP: 0033:0x7f8f440e398e [ 413.653375][ T8331] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.653399][ T8331] RSP: 002b:00007f8f42359b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 413.653422][ T8331] RAX: ffffffffffffffda RBX: 00007f8f4235a6c0 RCX: 00007f8f440e398e [ 413.653436][ T8331] RDX: 0000000000000002 RSI: 00007f8f42359c00 RDI: ffffffffffffff9c [ 413.653450][ T8331] RBP: 00007f8f441ba06b R08: 0000000000000000 R09: 0000000000000000 [ 413.653463][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.653474][ T8331] R13: 00007f8f443ab128 R14: 00007f8f443ab090 R15: 00007ffed1abdde8 [ 413.653505][ T8331] [ 413.718551][ T8329] loop3: detected capacity change from 0 to 512 [ 414.179402][ T8336] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0 [ 414.718798][ T8318] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1231: bg 0: block 5: invalid block bitmap [ 414.723782][ T8318] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 414.723877][ T8318] EXT4-fs (loop4): This should not happen!! Data will be lost [ 414.723877][ T8318] [ 414.723893][ T8318] EXT4-fs (loop4): Total free blocks count 0 [ 414.723905][ T8318] EXT4-fs (loop4): Free/Dirty block details [ 414.723947][ T8318] EXT4-fs (loop4): free_blocks=0 [ 414.723989][ T8318] EXT4-fs (loop4): dirty_blocks=33 [ 414.724001][ T8318] EXT4-fs (loop4): Block reservation details [ 414.724012][ T8318] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 414.926844][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 416.494471][ T8358] netdevsim netdevsim5: Direct firmware load for ¹ failed with error -2 [ 416.494487][ T8358] netdevsim netdevsim5: Falling back to sysfs fallback for: ¹ [ 416.650052][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.835267][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.849396][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.935863][ T8368] netlink: 'syz.3.1245': attribute type 4 has an invalid length. [ 416.951254][ T8368] netlink: 'syz.3.1245': attribute type 17 has an invalid length. [ 419.584898][ T8384] loop5: detected capacity change from 0 to 256 [ 419.607772][ T8389] tipc: Enabling of bearer rejected, failed to enable media [ 419.692724][ T8384] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 421.042585][ T8409] netlink: 'syz.4.1257': attribute type 3 has an invalid length. [ 421.561113][ T4279] Bluetooth: hci5: command 0x0406 tx timeout [ 421.818919][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.144426][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.390837][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.971937][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 427.227715][ T8507] loop3: detected capacity change from 0 to 512 [ 427.261053][ T8512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1295'. [ 427.334260][ T8507] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 427.373969][ T8507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 427.427402][ T8507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 427.466070][ T8507] System zones: 1-12 [ 427.557501][ T8507] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.1294: bad orphan inode 131072 [ 427.599122][ T8507] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 427.714310][ T8527] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 427.724187][ T8527] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 428.124333][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1300'. [ 429.791404][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 430.266516][ T8586] usb usb9: usbfs: process 8586 (syz.5.1323) did not claim interface 26 before use [ 430.301043][ T4279] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 430.611110][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 431.011048][ T4279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.038961][ T4279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.061509][ T4279] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 431.084857][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.112126][ T4279] usb 4-1: config 0 descriptor?? [ 431.180430][ T8619] kAFS: No cell specified [ 431.604221][ T4279] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 431.654131][ T4279] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 431.718589][ T4279] playstation 0003:054C:0DF2.0004: unknown main item tag 0x6 [ 431.781053][ T4279] playstation 0003:054C:0DF2.0004: item fetching failed at offset 3/5 [ 431.851677][ T4279] playstation 0003:054C:0DF2.0004: Parse failed [ 431.891052][ T8637] loop4: detected capacity change from 0 to 256 [ 431.910164][ T4279] playstation: probe of 0003:054C:0DF2.0004 failed with error -22 [ 432.006314][ T4279] usb 4-1: USB disconnect, device number 10 [ 432.146905][ T8637] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 432.270561][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 432.392087][ T8650] kAFS: No cell specified [ 433.406183][ T8663] overlayfs: failed to resolve 'upper': -2 [ 434.835500][ T8680] orangefs_mount: mount request failed with -4 [ 434.914743][ T8685] kAFS: No cell specified [ 435.238512][ T8695] loop3: detected capacity change from 0 to 256 [ 435.883914][ T8704] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 435.907356][ T8704] netlink: 'syz.1.1365': attribute type 17 has an invalid length. [ 437.197802][ T8722] kAFS: No cell specified [ 437.298381][ T8724] loop3: detected capacity change from 0 to 1024 [ 437.378932][ T8724] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 437.409386][ T8724] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.431073][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 437.636444][ T4431] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm kworker/u4:10: lblock 0 mapped to illegal pblock 0 (length 1) [ 437.690553][ T4431] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 437.715231][ T4431] EXT4-fs (loop3): This should not happen!! Data will be lost [ 437.715231][ T4431] [ 437.776464][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1373'. [ 437.827851][ T8716] orangefs_mount: mount request failed with -4 [ 437.844668][ T21] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 437.880856][ T21] usb 2-1: can't read configurations, error -61 [ 437.975474][ T8740] netlink: 'syz.4.1377': attribute type 4 has an invalid length. [ 438.031182][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 438.120861][ T8740] netlink: 'syz.4.1377': attribute type 17 has an invalid length. [ 438.491504][ T21] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 438.586733][ T21] usb 2-1: can't read configurations, error -61 [ 438.804535][ T21] usb usb2-port1: attempt power cycle [ 439.832011][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.839044][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.950988][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 440.032564][ T8763] kAFS: No cell specified [ 440.215228][ T8764] loop3: detected capacity change from 0 to 512 [ 440.251354][ T21] usb 2-1: device descriptor read/8, error -71 [ 441.005562][ T8764] EXT4-fs (loop3): Ignoring removed nobh option [ 441.027057][ T8770] WARNING! power/level is deprecated; use power/control instead [ 441.115448][ T8764] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1384: invalid indirect mapped block 256 (level 2) [ 441.306999][ T8764] EXT4-fs (loop3): 2 truncates cleaned up [ 441.381877][ T8764] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 441.884443][ T8777] orangefs_mount: mount request failed with -4 [ 442.227517][ T8789] netlink: 'syz.0.1390': attribute type 4 has an invalid length. [ 442.274345][ T8789] netlink: 'syz.0.1390': attribute type 17 has an invalid length. [ 501.261751][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.268972][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.841007][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 548.848680][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4198/1:b..l [ 548.857949][ C0] (detected by 0, t=10502 jiffies, g=33117, q=536) [ 548.865205][ C0] task:syz-executor state:R running task stack:20576 pid: 4198 ppid: 4184 flags:0x00004000 [ 548.878484][ C0] Call Trace: [ 548.882112][ C0] [ 548.885341][ C0] __schedule+0x11c3/0x4350 [ 548.890330][ C0] ? release_firmware_map_entry+0x190/0x190 [ 548.896829][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 548.902650][ C0] preempt_schedule_irq+0xbb/0x160 [ 548.908276][ C0] ? __cond_resched+0xd0/0xd0 [ 548.913516][ C0] ? rcu_is_watching+0x11/0xa0 [ 548.918757][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 548.925168][ C0] irqentry_exit+0x63/0x70 [ 548.930049][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 548.936674][ C0] RIP: 0010:lock_acquire+0x209/0x400 [ 548.942495][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 548.964063][ C0] RSP: 0018:ffffc9000301f200 EFLAGS: 00000206 [ 548.970740][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 5261cd57b80eeb00 [ 548.979624][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4b80 [ 548.988388][ C0] RBP: ffffc9000301f320 R08: dffffc0000000000 R09: 1ffffffff2042818 [ 548.997153][ C0] R10: dffffc0000000000 R11: fffffbfff2042819 R12: 1ffff92000603e4c [ 549.005915][ C0] R13: ffffffff8c31efa0 R14: 0000000000000246 R15: dffffc0000000000 [ 549.014711][ C0] ? rcu_lock_release+0x5/0x20 [ 549.019964][ C0] ? read_lock_is_recursive+0x10/0x10 [ 549.025882][ C0] ? unwind_next_frame+0x11ec/0x1cf0 [ 549.031704][ C0] ? deref_stack_reg+0xd0/0x120 [ 549.037051][ C0] rcu_lock_acquire+0x2a/0x30 [ 549.042208][ C0] ? rcu_lock_acquire+0x5/0x30 [ 549.047447][ C0] is_bpf_text_address+0x1d/0x270 [ 549.052979][ C0] __kernel_text_address+0x9a/0x100 [ 549.058704][ C0] unwind_get_return_address+0x49/0x80 [ 549.064707][ C0] ? stack_trace_save+0xf0/0xf0 [ 549.070039][ C0] arch_stack_walk+0xf2/0x140 [ 549.075196][ C0] stack_trace_save+0xa6/0xf0 [ 549.080342][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 549.085969][ C0] save_stack+0x121/0x230 [ 549.090734][ C0] ? verify_lock_unused+0x140/0x140 [ 549.096450][ C0] ? __reset_page_owner+0x180/0x180 [ 549.102170][ C0] ? free_unref_page_prepare+0x637/0x6c0 [ 549.108363][ C0] ? free_unref_page_list+0x119/0x830 [ 549.114264][ C0] ? release_pages+0x185f/0x1bd0 [ 549.119686][ C0] ? __pagevec_release+0x6d/0xe0 [ 549.125110][ C0] ? shmem_undo_range+0x5cd/0x19a0 [ 549.130731][ C0] ? shmem_evict_inode+0x1e2/0x9a0 [ 549.136509][ C0] ? evict+0x4b6/0x8b0 [ 549.141049][ C0] ? do_unlinkat+0x3e7/0x710 [ 549.146092][ C0] ? __x64_sys_unlink+0x45/0x50 [ 549.151420][ C0] ? do_syscall_64+0x4c/0xa0 [ 549.156462][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 549.163140][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 549.168478][ C0] ? rcu_lock_acquire+0x30/0x30 [ 549.173818][ C0] __reset_page_owner+0x51/0x180 [ 549.179256][ C0] free_unref_page_prepare+0x637/0x6c0 [ 549.185260][ C0] free_unref_page_list+0x119/0x830 [ 549.190978][ C0] ? uncharge_page+0x490/0x490 [ 549.196211][ C0] ? free_unref_page_commit+0x4c0/0x4c0 [ 549.202329][ C0] release_pages+0x185f/0x1bd0 [ 549.207584][ C0] ? lru_cache_disable+0x30/0x30 [ 549.213017][ C0] __pagevec_release+0x6d/0xe0 [ 549.218263][ C0] shmem_undo_range+0x5cd/0x19a0 [ 549.223707][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 549.229441][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 549.234965][ C0] ? __rwlock_init+0x140/0x140 [ 549.240210][ C0] shmem_evict_inode+0x1e2/0x9a0 [ 549.245643][ C0] ? _raw_spin_unlock+0x24/0x40 [ 549.251066][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 549.257175][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 549.262707][ C0] ? bit_waitqueue+0x30/0x30 [ 549.267759][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 549.273481][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 549.279588][ C0] evict+0x4b6/0x8b0 [ 549.283878][ C0] ? proc_nr_inodes+0x320/0x320 [ 549.289211][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 549.294923][ C0] ? _raw_spin_unlock+0x24/0x40 [ 549.300254][ C0] ? iput+0x6ea/0x880 [ 549.304634][ C0] do_unlinkat+0x3e7/0x710 [ 549.309494][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 549.315123][ C0] ? getname_flags+0x1f9/0x4f0 [ 549.320364][ C0] __x64_sys_unlink+0x45/0x50 [ 549.325511][ C0] do_syscall_64+0x4c/0xa0 [ 549.330368][ C0] ? clear_bhb_loop+0x30/0x80 [ 549.335518][ C0] ? clear_bhb_loop+0x30/0x80 [ 549.340662][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 549.347147][ C0] RIP: 0033:0x7f537bc6a247 [ 549.352027][ C0] RSP: 002b:00007fff8c886868 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 549.361281][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f537bc6a247 [ 549.370073][ C0] RDX: 00007fff8c886890 RSI: 00007fff8c886920 RDI: 00007fff8c886920 [ 549.378845][ C0] RBP: 00007fff8c886920 R08: 00007fff8c887920 R09: 00000000ffffffff [ 549.387610][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff8c8879b0 [ 549.396373][ C0] R13: 00007f537bd014bb R14: 000000000006c09d R15: 00007fff8c8879f0 [ 549.405156][ C0] [ 549.408471][ C0] rcu: rcu_preempt kthread starved for 9689 jiffies! g33117 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 549.420680][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 549.431638][ C0] rcu: RCU grace-period kthread stack dump: [ 549.438106][ C0] task:rcu_preempt state:R running task stack:27408 pid: 15 ppid: 2 flags:0x00004000 [ 549.449958][ C0] Call Trace: [ 549.453560][ C0] [ 549.456784][ C0] __schedule+0x11c3/0x4350 [ 549.461765][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 549.468247][ C0] ? rcu_is_watching+0x11/0xa0 [ 549.473483][ C0] ? release_firmware_map_entry+0x190/0x190 [ 549.480000][ C0] schedule+0x11b/0x1e0 [ 549.484569][ C0] schedule_timeout+0x184/0x2d0 [ 549.489901][ C0] ? console_conditional_schedule+0x40/0x40 [ 549.496381][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 549.502861][ C0] ? update_process_times+0x200/0x200 [ 549.508769][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 549.514872][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 549.520204][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 549.525924][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 549.532688][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 549.537828][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 549.543065][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 549.548777][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 549.554497][ C0] rcu_gp_kthread+0x9a/0x370 [ 549.559553][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 549.565172][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 549.571654][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 549.577185][ C0] kthread+0x42e/0x520 [ 549.581656][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 549.587280][ C0] ? kthread_blkcg+0xd0/0xd0 [ 549.592325][ C0] ret_from_fork+0x1f/0x30 [ 549.597191][ C0] [ 549.600504][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 549.607445][ C0] NMI backtrace for cpu 0 [ 549.612215][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 549.619927][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 549.630976][ C0] Call Trace: [ 549.634580][ C0] [ 549.637706][ C0] dump_stack_lvl+0x188/0x250 [ 549.642850][ C0] ? show_regs_print_info+0x20/0x20 [ 549.648561][ C0] ? load_image+0x410/0x410 [ 549.653509][ C0] ? irq_work_queue+0xbf/0x140 [ 549.658754][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 549.664182][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 549.670942][ C0] ? _printk+0xda/0x130 [ 549.675511][ C0] ? cpu_online+0x1d/0x30 [ 549.680274][ C0] ? load_image+0x410/0x410 [ 549.685226][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 549.691899][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 549.698477][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 549.705247][ C0] print_other_cpu_stall+0x1110/0x1270 [ 549.711257][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 549.716682][ C0] ? timekeeping_advance+0x82c/0xb20 [ 549.722501][ C0] rcu_sched_clock_irq+0x845/0x1120 [ 549.728318][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 549.733647][ C0] ? hrtimer_run_queues+0x162/0x400 [ 549.739356][ C0] ? account_process_tick+0x22a/0x3a0 [ 549.745261][ C0] update_process_times+0x193/0x200 [ 549.750976][ C0] tick_sched_timer+0x37d/0x560 [ 549.756303][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 549.762400][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 549.768112][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 549.774700][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 549.780319][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 549.786989][ C0] hrtimer_interrupt+0x397/0x8b0 [ 549.792434][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 549.799009][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 549.805209][ C0] [ 549.808427][ C0] [ 549.811641][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 549.818219][ C0] RIP: 0010:default_idle+0xb/0x10 [ 549.823738][ C0] Code: b7 48 89 df e8 c6 fc f2 f7 eb ad e8 af aa f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 37 62 5a 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 549.845296][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 549.851971][ C0] RAX: 642d4b3b495cb600 RBX: ffffffff8c0bc480 RCX: 642d4b3b495cb600 [ 549.860733][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4b80 [ 549.869496][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 549.878270][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1800fc4 [ 549.887152][ C0] R13: dffffc0000000000 R14: 1ffffffff1817890 R15: 0000000000000000 [ 549.895945][ C0] default_idle_call+0x81/0xc0 [ 549.901194][ C0] do_idle+0x251/0x650 [ 549.905676][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 549.911395][ C0] ? schedule_idle+0x57/0x90 [ 549.916520][ C0] ? do_idle+0x63a/0x650 [ 549.921188][ C0] cpu_startup_entry+0x14/0x20 [ 549.926427][ C0] ? time_init+0x40/0x40 [ 549.931093][ C0] start_kernel+0x489/0x540 [ 549.936046][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 549.942544][ C0]