last executing test programs: 14.947995685s ago: executing program 0 (id=2061): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 13.688672377s ago: executing program 0 (id=2067): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe4) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@nullb, r1, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, 0x0, 0x0, 0x200) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) read$FUSE(r5, &(0x7f0000000c80)={0x2020}, 0x2020) 7.972674985s ago: executing program 2 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9}, 0xa8) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 6.768923686s ago: executing program 1 (id=2076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b6197b5090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) 6.648600559s ago: executing program 2 (id=2078): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,soft,timeo=1,retrans=1\x00') socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0xfff, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e000000", 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 6.501203952s ago: executing program 1 (id=2079): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfeffffff00000000) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getpid() sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x60048880) 5.81111679s ago: executing program 1 (id=2081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000d62000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/63) 5.801237431s ago: executing program 2 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x4443, &(0x7f0000000300)={0x0, 0x4b58, 0x80, 0x2, 0x157}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000180)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4c2142, 0x161) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x800, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4881c}, 0xc804) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="340200007d3d1f0005f30000000000000500000000000000000000000000000010800000000000000000000000000000000076716f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11400cfc20010000000000000218300000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000000000000000000000000000000000000000000000beb9238ea38c1145faaee0ea3a101748d5cf6305cf396107e71379976d72a0736d22e8c0e0ee9cfc96118f3f996a8cc1f72db74b8aa7f877179d6c0f7c040a66ae3efd74867d3a8216a1c15ca1b15dadab7af158a583ffaf2838e3cf62fb8288078e9d81dc433fea71da3fb7bf9e84dec7ea5250d35cb48b4a7cdf8446839a0f076bdc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0xf800, 0x3, 0xe, 0x6}]}) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r7, 0xe, 0x4) write$binfmt_script(r9, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) sendfile(r5, r5, 0x0, 0x200000) 5.770412211s ago: executing program 0 (id=2083): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000300)={0x4, 0x746, 0xe2f, 0x3, 0xfb, 0x8, 0xb}, 0xc) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) write$P9_RWALK(r2, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRES16=r3, @ANYBLOB="8206aadc4eb6437f11ac4347dc20479eaa932abba93c39e51b8438177d9035f0063878e306d5c6e76e3c693ed47416a37736c74142174f9fb68896dad6ac58a994938952a09228dcf70c7e6f215ea9733e70b2e205dab6bfa37b23630b6de4c492199ae1096b4a9e5f3e29cf377a010bc3281168a5f025ee9208cbb8569b692b2730aa0ec2cfbbfe83ce5433a53c7e13d5f22ccd9892d9d7fc5db4bdd527e7c1a66450d085e033", @ANYRESDEC], 0x9) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000009000000850000007b00000018140000", @ANYRES32=r2, @ANYBLOB="0000df1300"/16], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1005}, 0x94) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) 5.537345377s ago: executing program 1 (id=2084): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 5.503423098s ago: executing program 3 (id=2085): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f00000018c0)={0x0}) 5.283326054s ago: executing program 1 (id=2086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000003c0), 0x40, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9}, 0xa8) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 5.233361665s ago: executing program 3 (id=2087): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) 5.116880749s ago: executing program 3 (id=2088): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48011}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x48000) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="14000800fe8000000000000000000000000000bb08000500", @ANYRES32, @ANYBLOB="08000a005485226f54a9c1c8a71e52e3ec78cde8aefd0a8399d9cdfde2d91ad58c713950b0f102a19663c17e7d55b092ae30d79649e9c6624bd8fe2a8556d0ae28c2dfdf393a801b7f174cdc5639cdd96ef4ca9a26fa88d46d1fe735d8cd80ca8c71637b81ce252f271b6c89c625b41e2d56a6e7c740d28f99b09e9a2cdfe734b03aeb1e0abfac522895eabef0f86c953656af72a658745c50ca15b3b1f77260dbb9a3e2cd01aa2e8c362493180057512f3eaa2c2b5fac80ccafa4b93c0ccbcbd903ab49647e133ccfdcd3d0aecb1102166034083aee03a52c881f770c14253c94c080ec228bbdf8f28c0963a61ef6a0436d3160ba30aeda", @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r5, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x100}}}]}, 0x3c}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 4.259472651s ago: executing program 0 (id=2089): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfeffffff00000000) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getpid() sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x60048880) 4.194584392s ago: executing program 2 (id=2090): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,soft,timeo=1,retrans=1\x00') socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0xfff, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e000000", 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 4.184700203s ago: executing program 1 (id=2091): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe4) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@nullb, r1, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, 0x0, 0x0, 0x200) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) read$FUSE(r5, &(0x7f0000000c80)={0x2020}, 0x2020) 3.649271736s ago: executing program 3 (id=2092): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="400305"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x41) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x0}) 543.002886ms ago: executing program 0 (id=2093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfeffffff00000000) close_range(r1, 0xffffffffffffffff, 0x0) 309.297052ms ago: executing program 2 (id=2094): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 194.090776ms ago: executing program 0 (id=2095): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x3, 0x4, 0x1, {0x0, 0x0, r0}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000340)={0x200000, 0x1200000, 0x0, 0x0, 0x5989}) setpriority(0x1, 0x0, 0x3) r5 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc11, 0x534c8, 0x5, 0x2ee}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) 61.393209ms ago: executing program 3 (id=2096): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) 59.146319ms ago: executing program 3 (id=2097): socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, 0x0, 0x0, 0x200040c, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX]) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 0s ago: executing program 2 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x4443, &(0x7f0000000300)={0x0, 0x4b58, 0x80, 0x2, 0x157}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000180)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4c2142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x800, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4881c}, 0xc804) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0xf800, 0x3, 0xe, 0x6}]}) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r7, 0xe, 0x4) write$binfmt_script(r9, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) sendfile(r5, r5, 0x0, 0x200000) kernel console output (not intermixed with test programs): ailed with error -5 [ 330.465186][ T6452] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 330.475252][ T6950] usb usb4-port1: attempt power cycle [ 330.555552][ T7008] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 330.625168][ T6452] usb 1-1: device descriptor read/64, error -71 [ 330.695430][ T7007] usb 2-1: USB disconnect, device number 41 [ 330.749168][ T7008] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.760382][ T7008] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 330.770372][ T7008] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.779512][ T7008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.791797][ T8399] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 330.802107][ T7008] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 330.885736][ T6950] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 330.905161][ T6452] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 330.916113][ T6950] usb 4-1: device descriptor read/8, error -71 [ 331.071405][ T6452] usb 1-1: device descriptor read/64, error -71 [ 331.191948][ T6950] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 331.277645][ T6950] usb 4-1: device descriptor read/8, error -71 [ 331.428126][ T6950] usb usb4-port1: unable to enumerate USB device [ 332.960909][ T6452] usb usb1-port1: attempt power cycle [ 333.174113][ T6950] usb 3-1: USB disconnect, device number 34 [ 333.339458][ T8414] FAULT_INJECTION: forcing a failure. [ 333.339458][ T8414] name failslab, interval 1, probability 0, space 0, times 0 [ 333.551386][ T8414] CPU: 1 PID: 8414 Comm: syz.3.887 Not tainted syzkaller #0 [ 333.558749][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.568822][ T8414] Call Trace: [ 333.572129][ T8414] [ 333.575074][ T8414] dump_stack_lvl+0x18c/0x250 [ 333.579774][ T8414] ? __sctp_connect+0x5b7/0xd80 [ 333.584766][ T8414] ? do_sock_setsockopt+0x175/0x1a0 [ 333.590070][ T8414] ? show_regs_print_info+0x20/0x20 [ 333.595286][ T8414] ? load_image+0x420/0x420 [ 333.599821][ T8414] should_fail_ex+0x394/0x4c0 [ 333.604530][ T8414] should_failslab+0x9/0x20 [ 333.609059][ T8414] slab_pre_alloc_hook+0x59/0x300 [ 333.614116][ T8414] ? sctp_add_bind_addr+0x8c/0x360 [ 333.619251][ T8414] __kmem_cache_alloc_node+0x53/0x250 [ 333.624655][ T8414] ? sctp_add_bind_addr+0x8c/0x360 [ 333.629782][ T8414] kmalloc_trace+0x2a/0xe0 [ 333.634223][ T8414] sctp_add_bind_addr+0x8c/0x360 [ 333.639198][ T8414] sctp_copy_local_addr_list+0x31b/0x4e0 [ 333.644941][ T8414] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 333.650685][ T8414] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 333.656866][ T8414] ? sctp_v6_is_any+0x64/0x70 [ 333.661621][ T8414] ? sctp_copy_one_addr+0x8c/0x350 [ 333.666763][ T8414] sctp_bind_addr_copy+0x189/0x3c0 [ 333.671914][ T8414] sctp_connect_new_asoc+0x2f9/0x6a0 [ 333.677229][ T8414] ? __sctp_connect+0xd80/0xd80 [ 333.682103][ T8414] ? __ipv6_addr_type+0x13e/0x2e0 [ 333.687258][ T8414] ? sctp_inet6_send_verify+0x6e/0x300 [ 333.692735][ T8414] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 333.698576][ T8414] __sctp_connect+0x5b7/0xd80 [ 333.703292][ T8414] ? sctp_send_asconf+0x170/0x170 [ 333.708343][ T8414] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 333.713943][ T8414] ? sctp_setsockopt_connectx_old+0xbc/0x150 [ 333.719952][ T8414] sctp_setsockopt+0x458/0x11e0 [ 333.724824][ T8414] ? sock_common_recvmsg+0x190/0x190 [ 333.730150][ T8414] do_sock_setsockopt+0x175/0x1a0 [ 333.735193][ T8414] ? __fdget+0x180/0x210 [ 333.739460][ T8414] __x64_sys_setsockopt+0x182/0x200 [ 333.744682][ T8414] do_syscall_64+0x55/0xb0 [ 333.749140][ T8414] ? clear_bhb_loop+0x40/0x90 [ 333.753836][ T8414] ? clear_bhb_loop+0x40/0x90 [ 333.758537][ T8414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.764450][ T8414] RIP: 0033:0x7ffa6ab9e159 [ 333.768881][ T8414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.788502][ T8414] RSP: 002b:00007ffa6ba6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.796938][ T8414] RAX: ffffffffffffffda RBX: 00007ffa6ae25fa0 RCX: 00007ffa6ab9e159 [ 333.804921][ T8414] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 333.812902][ T8414] RBP: 00007ffa6ac35024 R08: 000000000000001c R09: 0000000000000000 [ 333.820888][ T8414] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.828873][ T8414] R13: 00007ffa6ae26038 R14: 00007ffa6ae25fa0 R15: 00007ffeab531ac8 [ 333.836877][ T8414] [ 334.294281][ T8422] fuse: Unknown parameter 'user_i00000000000000000000' [ 334.466057][ T8431] jffs2: notice: (8431) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 334.705170][ T6452] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 334.815145][ T7008] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 334.913026][ T6452] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 334.955748][ T6452] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 334.964866][ T6452] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.974518][ T6452] usb 1-1: Product: syz [ 334.979739][ T6452] usb 1-1: Manufacturer: syz [ 334.988509][ T6452] usb 1-1: SerialNumber: syz [ 334.997536][ T6452] usb 1-1: config 0 descriptor?? [ 335.009929][ T6452] hub 1-1:0.0: bad descriptor, ignoring hub [ 335.016026][ T6452] hub: probe of 1-1:0.0 failed with error -5 [ 335.048473][ T7008] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.060202][ T7008] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.077147][ T7008] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.088663][ T7008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.103907][ T8434] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 335.151639][ T7008] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 335.345736][ T6950] usb 1-1: USB disconnect, device number 45 [ 337.458644][ T7008] usb 2-1: USB disconnect, device number 42 [ 337.603273][ T8453] jffs2: notice: (8453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 338.324621][ T8463] fuse: Unknown parameter 'user_i00000000000000000000' [ 338.935921][ T8481] fuse: Unknown parameter 'user_i00000000000000000000' [ 338.965233][ T6452] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 339.083370][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 339.177011][ T6452] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 339.189775][ T6452] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 339.198937][ T7008] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 339.206632][ T6452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.216952][ T6452] usb 4-1: Product: syz [ 339.221402][ T6452] usb 4-1: Manufacturer: syz [ 339.226396][ T6452] usb 4-1: SerialNumber: syz [ 339.241995][ T6452] usb 4-1: config 0 descriptor?? [ 339.253657][ T6452] hub 4-1:0.0: bad descriptor, ignoring hub [ 339.260141][ T6452] hub: probe of 4-1:0.0 failed with error -5 [ 339.311380][ T8496] jffs2: notice: (8496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 339.398729][ T7008] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.413417][ T7008] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.423633][ T7008] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.437670][ T7008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.461480][ T8482] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 339.496515][ T7008] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 339.586067][ T6452] usb 4-1: USB disconnect, device number 34 [ 340.170272][ T8501] ceph: No mds server is up or the cluster is laggy [ 340.180954][ T6950] libceph: connect (1)[c::]:6789 error -101 [ 340.197184][ T6950] libceph: mon0 (1)[c::]:6789 connect error [ 342.015240][ T7008] usb 1-1: USB disconnect, device number 46 [ 342.149809][ T8516] fuse: Unknown parameter 'user_id00000000000000000000' [ 343.016100][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'. [ 343.176504][ T8529] jffs2: notice: (8529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 346.855144][ T6452] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 347.056970][ T6452] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 347.085193][ T6452] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 347.105705][ T6452] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 347.114741][ T6452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.155636][ T8547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 347.188658][ T6452] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 347.269388][ T8555] fuse: Unknown parameter 'user_id00000000000000000000' [ 350.217325][ T6950] usb 3-1: USB disconnect, device number 35 [ 350.465712][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.939'. [ 350.548785][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 350.829444][ T8584] fuse: Unknown parameter 'user_id00000000000000000000' [ 352.125215][ T6452] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 352.478275][ T6452] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.493252][ T6452] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 352.517093][ T6452] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.540823][ T6452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.563048][ T8594] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 352.596649][ T6452] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 353.529395][ T8602] sched: RT throttling activated [ 355.136495][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.951'. [ 355.901515][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 356.134888][ T6950] usb 4-1: USB disconnect, device number 35 [ 356.242136][ T8619] fuse: Bad value for 'fd' [ 359.405127][ T6950] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 359.616794][ T6950] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 359.633312][ T6950] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 359.644086][ T6950] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 359.658059][ T6950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.671657][ T8647] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.683112][ T6950] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 362.172212][ T7007] usb 4-1: USB disconnect, device number 36 [ 362.287929][ T8660] fuse: Bad value for 'fd' [ 362.448248][ T8668] FAULT_INJECTION: forcing a failure. [ 362.448248][ T8668] name failslab, interval 1, probability 0, space 0, times 0 [ 362.481728][ T8668] CPU: 1 PID: 8668 Comm: syz.2.968 Not tainted syzkaller #0 [ 362.489066][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.499157][ T8668] Call Trace: [ 362.502460][ T8668] [ 362.505406][ T8668] dump_stack_lvl+0x18c/0x250 [ 362.510109][ T8668] ? __sctp_connect+0x5b7/0xd80 [ 362.514990][ T8668] ? do_sock_setsockopt+0x175/0x1a0 [ 362.520224][ T8668] ? show_regs_print_info+0x20/0x20 [ 362.525446][ T8668] ? load_image+0x420/0x420 [ 362.529988][ T8668] should_fail_ex+0x394/0x4c0 [ 362.534698][ T8668] should_failslab+0x9/0x20 [ 362.539235][ T8668] slab_pre_alloc_hook+0x59/0x300 [ 362.544287][ T8668] ? sctp_add_bind_addr+0x8c/0x360 [ 362.549432][ T8668] __kmem_cache_alloc_node+0x53/0x250 [ 362.554838][ T8668] ? sctp_add_bind_addr+0x8c/0x360 [ 362.559977][ T8668] kmalloc_trace+0x2a/0xe0 [ 362.564427][ T8668] sctp_add_bind_addr+0x8c/0x360 [ 362.569393][ T8668] sctp_copy_local_addr_list+0x31b/0x4e0 [ 362.575054][ T8668] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 362.580798][ T8668] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 362.586899][ T8668] ? sctp_v6_is_any+0x64/0x70 [ 362.591610][ T8668] ? sctp_copy_one_addr+0x8c/0x350 [ 362.596752][ T8668] sctp_bind_addr_copy+0x189/0x3c0 [ 362.601902][ T8668] sctp_connect_new_asoc+0x2f9/0x6a0 [ 362.607232][ T8668] ? __sctp_connect+0xd80/0xd80 [ 362.612114][ T8668] ? __ipv6_addr_type+0x13e/0x2e0 [ 362.617173][ T8668] ? sctp_inet6_send_verify+0x6e/0x300 [ 362.622655][ T8668] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 362.628499][ T8668] __sctp_connect+0x5b7/0xd80 [ 362.633218][ T8668] ? sctp_send_asconf+0x170/0x170 [ 362.638267][ T8668] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 362.643851][ T8668] ? sctp_setsockopt_connectx_old+0xbc/0x150 [ 362.649855][ T8668] sctp_setsockopt+0x458/0x11e0 [ 362.654717][ T8668] ? sock_common_recvmsg+0x190/0x190 [ 362.660030][ T8668] do_sock_setsockopt+0x175/0x1a0 [ 362.665079][ T8668] ? __fdget+0x180/0x210 [ 362.669344][ T8668] __x64_sys_setsockopt+0x182/0x200 [ 362.674539][ T8668] do_syscall_64+0x55/0xb0 [ 362.678955][ T8668] ? clear_bhb_loop+0x40/0x90 [ 362.683620][ T8668] ? clear_bhb_loop+0x40/0x90 [ 362.688305][ T8668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.694214][ T8668] RIP: 0033:0x7f9e6079e159 [ 362.698644][ T8668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.718257][ T8668] RSP: 002b:00007f9e61634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 362.726659][ T8668] RAX: ffffffffffffffda RBX: 00007f9e60a25fa0 RCX: 00007f9e6079e159 [ 362.734619][ T8668] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 362.742583][ T8668] RBP: 00007f9e60835024 R08: 000000000000001c R09: 0000000000000000 [ 362.750546][ T8668] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.758511][ T8668] R13: 00007f9e60a26038 R14: 00007f9e60a25fa0 R15: 00007ffe429ee148 [ 362.766489][ T8668] [ 363.301583][ T8689] fuse: Bad value for 'fd' [ 363.525642][ T7007] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 363.737167][ T7007] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 363.748426][ T7007] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 363.758988][ T7007] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 363.768361][ T7007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.779986][ T8686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.792355][ T7007] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 365.539239][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 366.285484][ T6950] usb 2-1: USB disconnect, device number 43 [ 366.497474][ T8711] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 366.713564][ T8725] fuse: Unknown parameter '0x0000000000000004' [ 366.830714][ T8728] tipc: Enabled bearer , priority 10 [ 366.856226][ T8727] tipc: Resetting bearer [ 366.895525][ T8727] tipc: Disabling bearer [ 367.384808][ T8737] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 367.570803][ T8737] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 368.459652][ T8741] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 368.467443][ T8741] netlink: 'syz.0.988': attribute type 2 has an invalid length. [ 369.095381][ T6950] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 369.111271][ T8755] fuse: Unknown parameter '0x0000000000000004' [ 369.280016][ T8750] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 369.298822][ T6950] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.313836][ T6950] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 369.328430][ T6950] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.344485][ T6950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.366145][ T8746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 369.408192][ T6950] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 371.942983][ T7007] usb 4-1: USB disconnect, device number 37 [ 371.987713][ T8787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1007'. [ 372.080603][ T8790] file system registered [ 372.238605][ T8801] read descriptors [ 372.396832][ T8799] FAULT_INJECTION: forcing a failure. [ 372.396832][ T8799] name failslab, interval 1, probability 0, space 0, times 0 [ 372.409866][ T8799] CPU: 1 PID: 8799 Comm: syz.2.1011 Not tainted syzkaller #0 [ 372.417264][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.427320][ T8799] Call Trace: [ 372.430598][ T8799] [ 372.433527][ T8799] dump_stack_lvl+0x18c/0x250 [ 372.438215][ T8799] ? show_regs_print_info+0x20/0x20 [ 372.443414][ T8799] ? load_image+0x420/0x420 [ 372.447924][ T8799] ? __might_sleep+0xe0/0xe0 [ 372.452550][ T8799] ? __lock_acquire+0x7d80/0x7d80 [ 372.457577][ T8799] should_fail_ex+0x394/0x4c0 [ 372.462262][ T8799] should_failslab+0x9/0x20 [ 372.466772][ T8799] slab_pre_alloc_hook+0x59/0x300 [ 372.471803][ T8799] ? memcg_list_lru_alloc+0x335/0xb00 [ 372.477179][ T8799] ? memcg_list_lru_alloc+0x335/0xb00 [ 372.482549][ T8799] __kmem_cache_alloc_node+0x53/0x250 [ 372.487948][ T8799] ? memcg_list_lru_alloc+0x335/0xb00 [ 372.493335][ T8799] __kmalloc+0xa7/0x240 [ 372.497507][ T8799] memcg_list_lru_alloc+0x335/0xb00 [ 372.502719][ T8799] ? memcg_reparent_list_lrus+0x860/0x860 [ 372.508451][ T8799] ? get_obj_cgroup_from_current+0xd4/0x280 [ 372.514352][ T8799] ? get_obj_cgroup_from_current+0xd4/0x280 [ 372.520280][ T8799] slab_pre_alloc_hook+0x2ad/0x300 [ 372.525400][ T8799] ? slab_pre_alloc_hook+0xb1/0x300 [ 372.530617][ T8799] kmem_cache_alloc_lru+0x4d/0x2b0 [ 372.535728][ T8799] ? __d_alloc+0x31/0x710 [ 372.540058][ T8799] __d_alloc+0x31/0x710 [ 372.544212][ T8799] d_alloc_parallel+0xe0/0x1590 [ 372.549063][ T8799] ? __asan_memset+0x22/0x40 [ 372.553660][ T8799] ? lockdep_init_map_type+0x9c/0x8e0 [ 372.559033][ T8799] ? lockdep_softirqs_off+0x440/0x440 [ 372.564400][ T8799] ? d_hash_and_lookup+0x1b0/0x1b0 [ 372.569523][ T8799] ? __init_waitqueue_head+0xa8/0x140 [ 372.574897][ T8799] __lookup_slow+0x138/0x400 [ 372.579509][ T8799] ? lookup_one_len+0x2e0/0x2e0 [ 372.584371][ T8799] lookup_one_len+0x1a1/0x2e0 [ 372.589051][ T8799] ? lookup_one_common+0x450/0x450 [ 372.594154][ T8799] ? __mnt_want_write+0x223/0x2a0 [ 372.599186][ T8799] do_mq_open+0x25f/0x760 [ 372.603557][ T8799] ? mq_clear_sbinfo+0x90/0x90 [ 372.608324][ T8799] __x64_sys_mq_open+0x186/0x1e0 [ 372.613261][ T8799] ? proc_ipc_sem_dointvec+0x180/0x180 [ 372.618731][ T8799] ? lockdep_hardirqs_on+0x98/0x150 [ 372.623933][ T8799] do_syscall_64+0x55/0xb0 [ 372.628348][ T8799] ? clear_bhb_loop+0x40/0x90 [ 372.633023][ T8799] ? clear_bhb_loop+0x40/0x90 [ 372.637698][ T8799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.643588][ T8799] RIP: 0033:0x7f9e6079e159 [ 372.648000][ T8799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.667606][ T8799] RSP: 002b:00007f9e61634028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 372.676021][ T8799] RAX: ffffffffffffffda RBX: 00007f9e60a25fa0 RCX: 00007f9e6079e159 [ 372.683988][ T8799] RDX: 00000000000001d0 RSI: 0000000000000040 RDI: 0000200000000180 [ 372.691954][ T8799] RBP: 00007f9e60835024 R08: 0000000000000000 R09: 0000000000000000 [ 372.699922][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.707893][ T8799] R13: 00007f9e60a26038 R14: 00007f9e60a25fa0 R15: 00007ffe429ee148 [ 372.715875][ T8799] [ 372.731403][ T8799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 372.740307][ T8799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 372.749145][ T8799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 372.757999][ T8799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 372.940117][ T5772] ffs_data_put(): freeing [ 373.055292][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 373.445437][ T6949] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 373.637523][ T6949] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.653023][ T6949] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.663193][ T6949] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.674699][ T6949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.687776][ T8829] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 373.700358][ T8815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 373.729076][ T6949] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 376.105064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 376.236581][ T5785] Bluetooth: hci1: command 0x0405 tx timeout [ 376.306659][ T7007] usb 2-1: USB disconnect, device number 44 [ 376.519198][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1026'. [ 376.683762][ T8847] syz.3.1026 (8847) used greatest stack depth: 17896 bytes left [ 377.039471][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 377.537362][ T7007] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 377.737184][ T7007] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.748367][ T7007] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 377.758304][ T7007] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.767894][ T7007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.794570][ T8873] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 377.811610][ T7007] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 378.716126][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.726661][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.199252][ T6949] usb 3-1: USB disconnect, device number 36 [ 381.620358][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 381.908626][ T8922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.961057][ T8922] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.974178][ T8922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.180813][ T8969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.197153][ T8969] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.235261][ T8969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.727330][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 388.610234][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 388.641593][ T9033] 9pnet_virtio: no channels available for device syz [ 388.846996][ T7007] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 389.739582][ T7007] usb 4-1: unable to get BOS descriptor or descriptor too short [ 389.760828][ T7007] usb 4-1: not running at top speed; connect to a high speed hub [ 389.785104][ T7007] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 389.794299][ T7007] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 389.812741][ T7007] usb 4-1: config 14 has no interface number 0 [ 389.825308][ T7007] usb 4-1: config 14 has no interface number 1 [ 389.841815][ T7007] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 389.867853][ T7007] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 389.881869][ T7007] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 389.901490][ T7007] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 389.927333][ T7007] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 389.956977][ T7007] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.975482][ T7007] usb 4-1: config 14 interface 57 has no altsetting 0 [ 389.990336][ T7007] usb 4-1: config 14 interface 228 has no altsetting 0 [ 390.012027][ T7007] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 390.027927][ T7007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.048528][ T7007] usb 4-1: Product: syz [ 390.052718][ T7007] usb 4-1: Manufacturer: syz [ 390.065496][ T7007] usb 4-1: SerialNumber: syz [ 390.499029][ T7007] legousbtower 4-1:14.57: interrupt endpoints not found [ 390.712701][ T7007] legousbtower 4-1:14.228: interrupt endpoints not found [ 391.010564][ T9069] random: crng reseeded on system resumption [ 391.022537][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 391.575521][ T9079] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 391.836260][ T5773] ffs_data_put(): freeing [ 391.949325][ T9091] syzkaller0: entered promiscuous mode [ 391.954860][ T9091] syzkaller0: entered allmulticast mode [ 392.640284][ T7007] usb 4-1: USB disconnect, device number 38 [ 392.885390][ T9104] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 393.057625][ T5773] ffs_data_put(): freeing [ 393.332996][ T9118] syzkaller0: entered promiscuous mode [ 393.338674][ T9118] syzkaller0: entered allmulticast mode [ 393.642649][ T9126] 9pnet_virtio: no channels available for device syz [ 394.800368][ T9131] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 395.121258][ T9144] syzkaller0: entered promiscuous mode [ 395.131606][ T9144] syzkaller0: entered allmulticast mode [ 397.058341][ T9168] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 397.679053][ T9188] syzkaller0: entered promiscuous mode [ 397.684645][ T9188] syzkaller0: entered allmulticast mode [ 398.619206][ T9205] FAULT_INJECTION: forcing a failure. [ 398.619206][ T9205] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 398.673535][ T9205] CPU: 0 PID: 9205 Comm: syz.0.1148 Not tainted syzkaller #0 [ 398.680942][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.690982][ T9205] Call Trace: [ 398.694245][ T9205] [ 398.697161][ T9205] dump_stack_lvl+0x18c/0x250 [ 398.701829][ T9205] ? show_regs_print_info+0x20/0x20 [ 398.707027][ T9205] ? load_image+0x420/0x420 [ 398.711537][ T9205] ? __might_fault+0xaa/0x120 [ 398.716203][ T9205] ? __lock_acquire+0x7d80/0x7d80 [ 398.721319][ T9205] ? __virt_addr_valid+0x10c/0x380 [ 398.726482][ T9205] should_fail_ex+0x394/0x4c0 [ 398.731201][ T9205] _copy_from_user+0x2f/0xe0 [ 398.735814][ T9205] strndup_user+0xb7/0x150 [ 398.740257][ T9205] __se_sys_mount+0x9f/0x3d0 [ 398.744875][ T9205] ? __x64_sys_mount+0xc0/0xc0 [ 398.749648][ T9205] ? lockdep_hardirqs_on+0x98/0x150 [ 398.754855][ T9205] ? __x64_sys_mount+0x20/0xc0 [ 398.759652][ T9205] do_syscall_64+0x55/0xb0 [ 398.764073][ T9205] ? clear_bhb_loop+0x40/0x90 [ 398.768753][ T9205] ? clear_bhb_loop+0x40/0x90 [ 398.773433][ T9205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.779328][ T9205] RIP: 0033:0x7f5ff399e159 [ 398.783750][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.803362][ T9205] RSP: 002b:00007f5ff4879028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 398.811778][ T9205] RAX: ffffffffffffffda RBX: 00007f5ff3c25fa0 RCX: 00007f5ff399e159 [ 398.819746][ T9205] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 398.827714][ T9205] RBP: 00007f5ff3a35024 R08: 0000200000000200 R09: 0000000000000000 [ 398.835681][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.843649][ T9205] R13: 00007f5ff3c26038 R14: 00007f5ff3c25fa0 R15: 00007ffd46d98918 [ 398.851636][ T9205] [ 399.103294][ T9207] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 399.274213][ T9217] syzkaller0: entered promiscuous mode [ 399.303299][ T9217] syzkaller0: entered allmulticast mode [ 400.733352][ T9248] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 400.765202][ T6949] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 400.838503][ T9255] syzkaller0: entered promiscuous mode [ 400.844185][ T9255] syzkaller0: entered allmulticast mode [ 400.973749][ T6949] usb 1-1: config 0 has no interfaces? [ 401.028811][ T6949] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 401.089887][ T6949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 401.147753][ T6949] usb 1-1: Product: syz [ 401.177031][ T6949] usb 1-1: Manufacturer: syz [ 401.218748][ T6949] usb 1-1: SerialNumber: syz [ 401.320943][ T6949] usb 1-1: config 0 descriptor?? [ 401.698009][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.756309][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.797473][ T6949] usb 1-1: USB disconnect, device number 47 [ 402.100498][ T9274] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 402.200769][ T9281] syzkaller0: entered promiscuous mode [ 402.206659][ T9281] syzkaller0: entered allmulticast mode [ 403.525732][ T9308] 9pnet_virtio: no channels available for device syz [ 403.546105][ T9298] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 403.604803][ T9310] syzkaller0: entered promiscuous mode [ 403.610808][ T9310] syzkaller0: entered allmulticast mode [ 405.849348][ T9339] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 406.027349][ T9345] 9pnet_virtio: no channels available for device syz [ 406.867044][ T9349] syzkaller0: entered promiscuous mode [ 406.872586][ T9349] syzkaller0: entered allmulticast mode [ 407.771576][ T9372] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 408.017619][ T9384] syzkaller0: entered promiscuous mode [ 408.023268][ T9384] syzkaller0: entered allmulticast mode [ 408.219186][ T9394] read descriptors [ 409.945498][ T5773] ffs_data_put(): freeing [ 410.165121][ T5785] Bluetooth: hci1: command 0x0405 tx timeout [ 411.047244][ T9440] read descriptors [ 411.269903][ T9450] 9pnet_virtio: no channels available for device syz [ 412.058856][ T5773] ffs_data_put(): freeing [ 412.862399][ T27] audit: type=1326 audit(1788305770.357:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 412.904250][ T27] audit: type=1326 audit(1788305770.357:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 412.953384][ T27] audit: type=1326 audit(1788305770.357:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 412.977403][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 413.012810][ T27] audit: type=1326 audit(1788305770.357:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 413.044322][ T27] audit: type=1326 audit(1788305770.357:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 413.131024][ T27] audit: type=1326 audit(1788305770.357:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 413.164489][ T27] audit: type=1326 audit(1788305770.447:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 413.182692][ T9492] FAULT_INJECTION: forcing a failure. [ 413.182692][ T9492] name failslab, interval 1, probability 0, space 0, times 0 [ 413.205488][ T27] audit: type=1326 audit(1788305770.447:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 413.230061][ T27] audit: type=1326 audit(1788305770.447:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 413.258321][ T27] audit: type=1326 audit(1788305770.447:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 413.357922][ T9492] CPU: 1 PID: 9492 Comm: syz.2.1240 Not tainted syzkaller #0 [ 413.365365][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.375420][ T9492] Call Trace: [ 413.378698][ T9492] [ 413.381627][ T9492] dump_stack_lvl+0x18c/0x250 [ 413.386309][ T9492] ? show_regs_print_info+0x20/0x20 [ 413.391524][ T9492] ? load_image+0x420/0x420 [ 413.396041][ T9492] ? __lock_acquire+0x7d80/0x7d80 [ 413.401073][ T9492] should_fail_ex+0x394/0x4c0 [ 413.405755][ T9492] should_failslab+0x9/0x20 [ 413.410263][ T9492] slab_pre_alloc_hook+0x59/0x300 [ 413.415294][ T9492] kmem_cache_alloc_lru+0x4d/0x2b0 [ 413.420406][ T9492] ? sock_alloc_inode+0x28/0xc0 [ 413.425268][ T9492] sock_alloc_inode+0x28/0xc0 [ 413.429952][ T9492] ? sockfs_init_fs_context+0xb0/0xb0 [ 413.435325][ T9492] new_inode_pseudo+0x63/0x1d0 [ 413.440088][ T9492] __sock_create+0x12d/0x940 [ 413.444673][ T9492] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 413.450657][ T9492] __sys_socket+0xd7/0x1b0 [ 413.455071][ T9492] __x64_sys_socket+0x7a/0x90 [ 413.459747][ T9492] do_syscall_64+0x55/0xb0 [ 413.464175][ T9492] ? clear_bhb_loop+0x40/0x90 [ 413.468862][ T9492] ? clear_bhb_loop+0x40/0x90 [ 413.473540][ T9492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.479437][ T9492] RIP: 0033:0x7f9e6079e159 [ 413.483847][ T9492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.503447][ T9492] RSP: 002b:00007f9e61634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 413.511857][ T9492] RAX: ffffffffffffffda RBX: 00007f9e60a25fa0 RCX: 00007f9e6079e159 [ 413.519821][ T9492] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 413.527786][ T9492] RBP: 00007f9e60835024 R08: 0000000000000000 R09: 0000000000000000 [ 413.535750][ T9492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.543731][ T9492] R13: 00007f9e60a26038 R14: 00007f9e60a25fa0 R15: 00007ffe429ee148 [ 413.551721][ T9492] [ 413.585257][ T9492] socket: no more sockets [ 413.809085][ T9509] read descriptors [ 413.975111][ T6452] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 414.125100][ T6452] usb 1-1: device descriptor read/64, error -71 [ 414.405119][ T6452] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 414.550898][ T5772] ffs_data_put(): freeing [ 414.555610][ T6452] usb 1-1: device descriptor read/64, error -71 [ 414.685477][ T6452] usb usb1-port1: attempt power cycle [ 415.155178][ T6452] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 415.215854][ T6452] usb 1-1: device descriptor read/8, error -71 [ 415.411970][ T9538] 9pnet_virtio: no channels available for device syz [ 415.505707][ T6452] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 415.568392][ T6452] usb 1-1: device descriptor read/8, error -71 [ 415.726562][ T6452] usb usb1-port1: unable to enumerate USB device [ 415.775487][ T5785] Bluetooth: hci1: command 0x0405 tx timeout [ 416.212161][ T9541] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 416.457684][ T9553] read descriptors [ 418.415114][ T5785] Bluetooth: hci1: command 0x0405 tx timeout [ 418.767099][ T5773] ffs_data_put(): freeing [ 420.491451][ T9585] 9pnet_virtio: no channels available for device syz [ 421.492536][ T9587] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 421.985283][ T6950] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 422.155233][ T6950] usb 1-1: device descriptor read/64, error -71 [ 422.426624][ T6950] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 422.523092][ T5772] ffs_data_put(): freeing [ 422.585347][ T6950] usb 1-1: device descriptor read/64, error -71 [ 422.706668][ T6950] usb usb1-port1: attempt power cycle [ 422.850961][ T9627] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 423.115225][ T6950] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 423.155663][ T6950] usb 1-1: device descriptor read/8, error -71 [ 423.425113][ T6950] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 423.455962][ T6950] usb 1-1: device descriptor read/8, error -71 [ 423.576655][ T6950] usb usb1-port1: unable to enumerate USB device [ 423.724728][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 423.724819][ T27] audit: type=1326 audit(1788305781.217:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 423.775375][ T27] audit: type=1326 audit(1788305781.237:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 423.820089][ T27] audit: type=1326 audit(1788305781.267:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 423.844992][ T27] audit: type=1326 audit(1788305781.267:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 423.870187][ T27] audit: type=1326 audit(1788305781.267:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 423.926571][ T27] audit: type=1326 audit(1788305781.317:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 423.955413][ T27] audit: type=1326 audit(1788305781.317:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 423.979497][ T27] audit: type=1326 audit(1788305781.317:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 424.021418][ T5774] ffs_data_put(): freeing [ 424.057510][ T27] audit: type=1326 audit(1788305781.317:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 424.121989][ T27] audit: type=1326 audit(1788305781.317:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 424.829236][ T9669] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 425.404471][ T5773] ffs_data_put(): freeing [ 426.025348][ T6452] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 426.185271][ T6452] usb 4-1: device descriptor read/64, error -71 [ 426.452644][ T5771] ffs_data_put(): freeing [ 426.478254][ T6452] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 426.645941][ T6452] usb 4-1: device descriptor read/64, error -71 [ 426.815457][ T6452] usb usb4-port1: attempt power cycle [ 426.947836][ T9723] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 427.255263][ T6452] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 427.305999][ T6452] usb 4-1: device descriptor read/8, error -71 [ 427.585096][ T6452] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 427.625876][ T6452] usb 4-1: device descriptor read/8, error -71 [ 427.762033][ T6452] usb usb4-port1: unable to enumerate USB device [ 428.926768][ T9775] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 429.535111][ T6949] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 429.716818][ T6949] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 429.727324][ T6949] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 429.736515][ T6949] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.745779][ T6949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.806397][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 429.806410][ T27] audit: type=1326 audit(1788305787.307:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 429.836732][ T27] audit: type=1326 audit(1788305787.307:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 429.861791][ T27] audit: type=1326 audit(1788305787.307:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 429.886799][ T27] audit: type=1326 audit(1788305787.307:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 429.946566][ T27] audit: type=1326 audit(1788305787.307:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 430.053295][ T27] audit: type=1326 audit(1788305787.307:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 430.077650][ T27] audit: type=1326 audit(1788305787.347:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 430.290003][ T27] audit: type=1326 audit(1788305787.367:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 430.580408][ T27] audit: type=1326 audit(1788305787.387:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 430.922973][ T27] audit: type=1326 audit(1788305787.387:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 432.275572][ T6949] usb 1-1: USB disconnect, device number 56 [ 432.444824][ T9805] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 432.646436][ T9812] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 432.672701][ T9812] CIFS mount error: No usable UNC path provided in device string! [ 432.672701][ T9812] [ 432.683096][ T9812] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 434.427311][ T7007] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 434.432831][ T9849] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 434.617495][ T7007] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 434.636267][ T7007] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 434.646701][ T7007] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 434.660375][ T7007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.844912][ T7007] usb 1-1: USB disconnect, device number 57 [ 439.810933][ T9888] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 440.103168][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.109581][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.505342][ T6950] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 440.687124][ T6950] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 440.711211][ T6950] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 440.740127][ T6950] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 440.805149][ T6950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.295961][ T6950] usb 1-1: USB disconnect, device number 58 [ 443.946069][ T9936] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 444.730225][ T9962] No source specified [ 444.806212][ T9970] 9pnet_virtio: no channels available for device syz [ 444.827513][ T9967] FAULT_INJECTION: forcing a failure. [ 444.827513][ T9967] name failslab, interval 1, probability 0, space 0, times 0 [ 444.841686][ T9967] CPU: 0 PID: 9967 Comm: syz.3.1383 Not tainted syzkaller #0 [ 444.849102][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.859182][ T9967] Call Trace: [ 444.862484][ T9967] [ 444.865434][ T9967] dump_stack_lvl+0x18c/0x250 [ 444.870156][ T9967] ? show_regs_print_info+0x20/0x20 [ 444.875400][ T9967] ? load_image+0x420/0x420 [ 444.879936][ T9967] ? __lock_acquire+0x7d80/0x7d80 [ 444.884992][ T9967] should_fail_ex+0x394/0x4c0 [ 444.889689][ T9967] should_failslab+0x9/0x20 [ 444.894217][ T9967] slab_pre_alloc_hook+0x59/0x300 [ 444.899247][ T9967] kmem_cache_alloc+0x5a/0x2c0 [ 444.904006][ T9967] ? create_new_namespaces+0x34/0x700 [ 444.909467][ T9967] create_new_namespaces+0x34/0x700 [ 444.914666][ T9967] __se_sys_setns+0x2f3/0x1740 [ 444.919427][ T9967] ? __x64_sys_setns+0x60/0x60 [ 444.924183][ T9967] ? lockdep_hardirqs_on+0x98/0x150 [ 444.929420][ T9967] do_syscall_64+0x55/0xb0 [ 444.933867][ T9967] ? clear_bhb_loop+0x40/0x90 [ 444.938588][ T9967] ? clear_bhb_loop+0x40/0x90 [ 444.943260][ T9967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.949143][ T9967] RIP: 0033:0x7ffa6ab9f457 [ 444.953548][ T9967] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.973161][ T9967] RSP: 002b:00007ffa6ba6dfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 444.981584][ T9967] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ffa6ab9f457 [ 444.989556][ T9967] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000004 [ 444.997528][ T9967] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 445.005498][ T9967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6ba6e6a8 [ 445.013481][ T9967] R13: 000000000000005d R14: 00007ffa6ae25fa0 R15: 00007ffeab531ac8 [ 445.021475][ T9967] [ 446.764931][ T9977] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 446.958468][ T9992] No source specified [ 448.400310][T10006] comedi comedi3: comedi_config --init_data is deprecated [ 448.788831][T10023] No source specified [ 451.912840][T10081] 9pnet_virtio: no channels available for device syz [ 451.947271][T10081] overlayfs: failed to resolve './file1': -2 [ 454.474172][T10125] 9pnet_virtio: no channels available for device syz [ 454.505919][T10125] overlayfs: failed to resolve './file1': -2 [ 457.256743][T10153] read descriptors [ 457.992675][T10188] 9pnet_virtio: no channels available for device syz [ 458.824839][ T5771] ffs_data_put(): freeing [ 459.215073][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 461.041971][T10241] read descriptors [ 461.137387][T10246] 9pnet_virtio: no channels available for device syz [ 462.013039][ T5773] ffs_data_put(): freeing [ 462.041109][T10250] syzkaller0: entered promiscuous mode [ 462.055175][T10250] syzkaller0: entered allmulticast mode [ 463.264422][T10264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.416596][T10278] 9pnet_virtio: no channels available for device syz [ 464.489703][T10287] syzkaller0: entered promiscuous mode [ 464.495745][T10287] syzkaller0: entered allmulticast mode [ 464.567255][ T5785] Bluetooth: hci1: command 0x0405 tx timeout [ 465.603825][T10296] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.798903][T10313] 9pnet_virtio: no channels available for device syz [ 466.826801][T10321] syzkaller0: entered promiscuous mode [ 466.832326][T10321] syzkaller0: entered allmulticast mode [ 466.866786][T10325] FAULT_INJECTION: forcing a failure. [ 466.866786][T10325] name fail_futex, interval 1, probability 0, space 0, times 1 [ 466.888478][T10325] CPU: 0 PID: 10325 Comm: syz.1.1480 Not tainted syzkaller #0 [ 466.895984][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.906058][T10325] Call Trace: [ 466.909353][T10325] [ 466.912300][T10325] dump_stack_lvl+0x18c/0x250 [ 466.917012][T10325] ? show_regs_print_info+0x20/0x20 [ 466.922244][T10325] ? load_image+0x420/0x420 [ 466.926783][T10325] ? stack_trace_save+0xaa/0x100 [ 466.931746][T10325] ? stack_trace_snprint+0xf0/0xf0 [ 466.936900][T10325] should_fail_ex+0x394/0x4c0 [ 466.941616][T10325] get_futex_key+0x136/0x1030 [ 466.946349][T10325] ? kasan_set_track+0x4e/0x70 [ 466.951143][T10325] ? kasan_save_free_info+0x28/0x40 [ 466.956365][T10325] ? ____kasan_slab_free+0x126/0x1f0 [ 466.961674][T10325] ? __kmem_cache_free+0xba/0x1f0 [ 466.966736][T10325] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.972833][T10325] ? futex_setup_timer+0xc0/0xc0 [ 466.977808][T10325] futex_wake+0x127/0x4f0 [ 466.982170][T10325] ? futex_wake_mark+0x150/0x150 [ 466.987141][T10325] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 466.993158][T10325] ? lock_chain_count+0x20/0x20 [ 466.998053][T10325] do_futex+0x35d/0x3e0 [ 467.002248][T10325] ? __ia32_sys_get_robust_list+0x110/0x110 [ 467.008169][T10325] ? slab_free_freelist_hook+0x130/0x1a0 [ 467.013839][T10325] __se_sys_futex+0x3a9/0x440 [ 467.018555][T10325] ? __x64_sys_futex+0xf0/0xf0 [ 467.023351][T10325] ? __x64_sys_futex+0x21/0xf0 [ 467.028152][T10325] do_syscall_64+0x55/0xb0 [ 467.032597][T10325] ? clear_bhb_loop+0x40/0x90 [ 467.037307][T10325] ? clear_bhb_loop+0x40/0x90 [ 467.042014][T10325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.047933][T10325] RIP: 0033:0x7fc0c2b9e159 [ 467.052367][T10325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.071997][T10325] RSP: 002b:00007fc0c39900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 467.080434][T10325] RAX: ffffffffffffffda RBX: 00007fc0c2e25fa8 RCX: 00007fc0c2b9e159 [ 467.088430][T10325] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc0c2e25fac [ 467.096422][T10325] RBP: 00007fc0c2e25fa0 R08: 0000000000745a2b R09: 0000000000000000 [ 467.104410][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.112398][T10325] R13: 00007fc0c2e26038 R14: 00007ffce2d66e60 R15: 00007ffce2d66f48 [ 467.120415][T10325] [ 467.124351][ T5785] Bluetooth: hci1: command 0x0405 tx timeout [ 468.333554][T10343] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 468.564782][T10396] 9pnet_virtio: no channels available for device syz [ 468.799657][T10397] FAULT_INJECTION: forcing a failure. [ 468.799657][T10397] name fail_futex, interval 1, probability 0, space 0, times 0 [ 468.942514][T10397] CPU: 0 PID: 10397 Comm: syz.0.1489 Not tainted syzkaller #0 [ 468.950034][T10397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.960102][T10397] Call Trace: [ 468.963388][T10397] [ 468.966326][T10397] dump_stack_lvl+0x18c/0x250 [ 468.971029][T10397] ? show_regs_print_info+0x20/0x20 [ 468.976248][T10397] ? load_image+0x420/0x420 [ 468.980771][T10397] ? stack_trace_save+0xaa/0x100 [ 468.985728][T10397] ? stack_trace_snprint+0xf0/0xf0 [ 468.990862][T10397] should_fail_ex+0x394/0x4c0 [ 468.995567][T10397] get_futex_key+0x136/0x1030 [ 469.000255][T10397] ? kasan_set_track+0x4e/0x70 [ 469.005037][T10397] ? kasan_save_free_info+0x28/0x40 [ 469.010251][T10397] ? ____kasan_slab_free+0x126/0x1f0 [ 469.015555][T10397] ? __kmem_cache_free+0xba/0x1f0 [ 469.020599][T10397] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.026691][T10397] ? futex_setup_timer+0xc0/0xc0 [ 469.031653][T10397] futex_wake+0x127/0x4f0 [ 469.036004][T10397] ? futex_wake_mark+0x150/0x150 [ 469.040956][T10397] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 469.046957][T10397] ? lock_chain_count+0x20/0x20 [ 469.051832][T10397] do_futex+0x35d/0x3e0 [ 469.056012][T10397] ? __ia32_sys_get_robust_list+0x110/0x110 [ 469.061918][T10397] ? slab_free_freelist_hook+0x130/0x1a0 [ 469.067572][T10397] __se_sys_futex+0x3a9/0x440 [ 469.072271][T10397] ? __x64_sys_futex+0xf0/0xf0 [ 469.077051][T10397] ? __x64_sys_futex+0x21/0xf0 [ 469.081831][T10397] do_syscall_64+0x55/0xb0 [ 469.086260][T10397] ? clear_bhb_loop+0x40/0x90 [ 469.090954][T10397] ? clear_bhb_loop+0x40/0x90 [ 469.095648][T10397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.101559][T10397] RIP: 0033:0x7f5ff399e159 [ 469.105987][T10397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.125606][T10397] RSP: 002b:00007f5ff48790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 469.134035][T10397] RAX: ffffffffffffffda RBX: 00007f5ff3c25fa8 RCX: 00007f5ff399e159 [ 469.142017][T10397] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ff3c25fac [ 469.149997][T10397] RBP: 00007f5ff3c25fa0 R08: 0000000000745a2b R09: 0000000000000000 [ 469.157985][T10397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.165969][T10397] R13: 00007f5ff3c26038 R14: 00007ffd46d98830 R15: 00007ffd46d98918 [ 469.173970][T10397] [ 469.338646][T10401] syzkaller0: entered promiscuous mode [ 469.352404][T10401] syzkaller0: entered allmulticast mode [ 469.605185][ T5785] Bluetooth: hci1: command 0x0405 tx timeout [ 470.982974][T10444] 9pnet_virtio: no channels available for device syz [ 471.789441][T10442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.737946][T10451] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.619804][T10481] 9pnet_virtio: no channels available for device syz [ 474.380004][ T5785] Bluetooth: hci1: command 0x0405 tx timeout [ 474.708220][T10497] 9pnet_virtio: no channels available for device syz [ 475.443988][T10492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 475.985333][ T6452] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 476.229463][ T6452] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 476.329866][ T6452] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 476.419505][ T6452] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.495284][ T6452] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 476.544062][ T6452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.595444][T10512] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.602822][T10512] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.651893][ T6452] pl2303 2-1:1.0: pl2303 converter detected [ 476.741390][T10524] 9pnet_virtio: no channels available for device syz [ 477.502619][ T6452] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 477.585244][ T6950] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 477.795130][ T6950] usb 1-1: Using ep0 maxpacket: 8 [ 477.803834][ T6950] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.814922][ T6950] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.825243][ T6950] usb 1-1: config 0 interface 0 has no altsetting 0 [ 477.831883][ T6950] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 477.841026][ T6950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.852483][ T6950] usb 1-1: config 0 descriptor?? [ 478.347757][T10539] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 478.442385][T10531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.597810][T10546] syzkaller0: entered promiscuous mode [ 478.603534][T10546] syzkaller0: entered allmulticast mode [ 478.679660][ T6949] usb 2-1: USB disconnect, device number 45 [ 478.723632][ T6949] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 478.752751][ T6949] pl2303 2-1:1.0: device disconnected [ 480.012613][T10564] 9pnet_virtio: no channels available for device syz [ 481.009586][ T6950] usbhid 1-1:0.0: can't add hid device: -71 [ 481.031602][ T6950] usbhid: probe of 1-1:0.0 failed with error -71 [ 481.052384][ T6950] usb 1-1: USB disconnect, device number 59 [ 481.203671][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 481.203688][ T27] audit: type=1804 audit(1788305838.687:106): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1539" name="bus" dev="ramfs" ino=25901 res=1 errno=0 [ 481.255106][ T27] audit: type=1804 audit(1788305838.697:107): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1539" name="bus" dev="ramfs" ino=25901 res=1 errno=0 [ 481.946537][T10572] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 483.092886][T10607] 9pnet_virtio: no channels available for device syz [ 483.232296][ T5785] Bluetooth: hci1: command 0x0405 tx timeout [ 486.251885][T10624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.404907][T10647] fuse: Bad value for 'fd' [ 486.513257][T10652] read descriptors [ 487.525060][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 487.595572][ T5773] ffs_data_put(): freeing [ 487.770913][ T27] audit: type=1326 audit(1788305845.267:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 487.852483][ T27] audit: type=1326 audit(1788305845.267:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 487.924071][ T27] audit: type=1326 audit(1788305845.267:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 487.994246][ T27] audit: type=1326 audit(1788305845.267:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 487.997580][T10676] syzkaller0: entered promiscuous mode [ 488.042596][ T27] audit: type=1326 audit(1788305845.267:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 488.075333][T10676] syzkaller0: entered allmulticast mode [ 488.182850][ T27] audit: type=1326 audit(1788305845.267:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 488.255193][ T27] audit: type=1326 audit(1788305845.307:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 488.294230][ T27] audit: type=1326 audit(1788305845.307:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 488.341161][ T27] audit: type=1326 audit(1788305845.347:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 488.385216][ T27] audit: type=1326 audit(1788305845.347:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.2.1563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 488.515576][T10685] fuse: Bad value for 'fd' [ 488.691284][T10687] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 489.088824][T10682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 489.129345][T10697] read descriptors [ 489.875342][ T5774] ffs_data_put(): freeing [ 490.255676][T10714] fuse: Bad value for 'fd' [ 490.319001][T10716] syzkaller0: entered promiscuous mode [ 490.324526][T10716] syzkaller0: entered allmulticast mode [ 490.330165][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 490.418644][T10718] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 490.843810][T10735] read descriptors [ 492.278863][ T5771] ffs_data_put(): freeing [ 492.575874][T10753] syzkaller0: entered promiscuous mode [ 492.595168][T10753] syzkaller0: entered allmulticast mode [ 492.695136][ T5822] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 492.775080][T10755] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 492.805354][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 492.905205][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 492.916761][ T5822] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.935352][ T5822] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.974280][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.987964][ T5822] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 493.004945][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.026780][ T5822] usb 3-1: config 0 descriptor?? [ 494.886191][T10772] nvmet: adding nsid 1 to subsystem testsubsys [ 494.918248][T10772] nvmet: failed to open file ./0©ïßÔ˜ *Ñx¡³8: (-2) [ 494.949412][T10776] read descriptors [ 495.046224][ T5822] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 495.060455][ T5822] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 495.070612][ T5822] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 495.078424][ T5772] ffs_data_put(): freeing [ 495.083292][ T5822] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 495.099297][ T5822] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 495.118320][ T5822] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 496.511531][ T6949] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 497.044804][T10796] syzkaller0: entered promiscuous mode [ 497.068428][T10796] syzkaller0: entered allmulticast mode [ 497.072648][T10797] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 497.207401][T10808] read descriptors [ 498.224954][ T5822] usb 3-1: USB disconnect, device number 37 [ 499.425871][ T5771] ffs_data_put(): freeing [ 501.408308][T10840] syzkaller0: entered promiscuous mode [ 501.434014][T10840] syzkaller0: entered allmulticast mode [ 501.462881][T10839] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 501.530448][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.537000][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.931129][T10847] read descriptors [ 502.968999][ T5771] ffs_data_put(): freeing [ 503.378203][T10868] syzkaller0: entered promiscuous mode [ 503.383888][T10868] syzkaller0: entered allmulticast mode [ 503.467022][T10870] 9pnet: Could not find request transport: fd0rfäno=0xffffffffffffffff [ 503.712225][T10883] read descriptors [ 505.325906][ T5771] ffs_data_put(): freeing [ 505.979545][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 507.611807][T10904] syzkaller0: entered promiscuous mode [ 507.617461][T10904] syzkaller0: entered allmulticast mode [ 507.631996][T10908] 9pnet: Could not find request transport: fd0rfäno=0xffffffffffffffff [ 508.138823][T10920] read descriptors [ 508.875207][ T5773] ffs_data_put(): freeing [ 508.960068][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 508.960082][ T27] audit: type=1326 audit(1788305866.457:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.2.1649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 509.006534][ T27] audit: type=1326 audit(1788305866.487:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.2.1649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 509.103585][ T27] audit: type=1326 audit(1788305866.487:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.2.1649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 509.268516][ T27] audit: type=1326 audit(1788305866.487:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.2.1649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 509.445975][T10948] syzkaller0: entered promiscuous mode [ 509.477241][ T27] audit: type=1326 audit(1788305866.487:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.2.1649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 509.514679][T10948] syzkaller0: entered allmulticast mode [ 510.095066][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 510.235074][ T27] audit: type=1326 audit(1788305866.487:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.2.1649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 510.265409][ T27] audit: type=1326 audit(1788305866.487:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.2.1649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 510.289821][ T27] audit: type=1804 audit(1788305866.487:180): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1648" name="bus" dev="ramfs" ino=28784 res=1 errno=0 [ 510.310707][ T27] audit: type=1326 audit(1788305866.487:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.2.1649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 510.335344][ T27] audit: type=1326 audit(1788305866.487:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.2.1649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 511.525716][T10963] 9pnet: Could not find request transport: fd0rfäno=0xffffffffffffffff [ 511.858153][T10981] read descriptors [ 512.510963][T10992] syzkaller0: entered promiscuous mode [ 512.533504][T10992] syzkaller0: entered allmulticast mode [ 513.765036][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 514.222153][ T5774] ffs_data_put(): freeing [ 516.892534][T11041] syzkaller0: entered promiscuous mode [ 516.901090][T11041] syzkaller0: entered allmulticast mode [ 516.986367][ T5772] ffs_data_put(): freeing [ 517.925337][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 520.225338][T11088] syzkaller0: entered promiscuous mode [ 520.237143][T11088] syzkaller0: entered allmulticast mode [ 523.929843][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 524.092702][ T5773] ffs_data_put(): freeing [ 526.765590][T11120] syzkaller0: entered promiscuous mode [ 526.795831][T11120] syzkaller0: entered allmulticast mode [ 529.009021][ T5773] ffs_data_put(): freeing [ 529.145499][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 529.145512][ T27] audit: type=1326 audit(1788305886.637:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 529.187082][ T27] audit: type=1326 audit(1788305886.637:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 529.205243][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 529.211473][ T27] audit: type=1326 audit(1788305886.637:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 529.241495][ T27] audit: type=1326 audit(1788305886.637:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 529.288350][ T27] audit: type=1326 audit(1788305886.677:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 529.339603][ T27] audit: type=1326 audit(1788305886.767:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 529.416411][ T27] audit: type=1326 audit(1788305886.767:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 529.440785][ T27] audit: type=1326 audit(1788305886.827:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 529.446350][T11157] syzkaller0: entered promiscuous mode [ 529.485073][ T27] audit: type=1326 audit(1788305886.827:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 529.503276][T11157] syzkaller0: entered allmulticast mode [ 529.533547][ T27] audit: type=1326 audit(1788305886.837:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 530.693615][T11172] No source specified [ 532.436026][T11195] syzkaller0: entered promiscuous mode [ 532.449412][T11195] syzkaller0: entered allmulticast mode [ 532.805206][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 533.980029][T11213] No source specified [ 536.519968][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 536.844448][T11256] No source specified [ 537.125648][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 537.125663][ T27] audit: type=1326 audit(1788305894.627:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 537.197446][ T27] audit: type=1326 audit(1788305894.627:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 537.282707][ T27] audit: type=1326 audit(1788305894.627:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 537.343624][ T27] audit: type=1326 audit(1788305894.627:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 537.375134][ T27] audit: type=1326 audit(1788305894.627:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 537.399474][ T27] audit: type=1326 audit(1788305894.627:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 537.425306][ T27] audit: type=1326 audit(1788305894.627:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 537.453677][ T27] audit: type=1326 audit(1788305894.627:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 537.550752][ T27] audit: type=1326 audit(1788305894.627:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 537.654619][ T27] audit: type=1326 audit(1788305894.627:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.0.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 539.720774][T11282] syzkaller0: entered promiscuous mode [ 539.750626][T11282] syzkaller0: entered allmulticast mode [ 544.595245][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 547.187624][T11328] syzkaller0: entered promiscuous mode [ 547.193171][T11328] syzkaller0: entered allmulticast mode [ 547.218916][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 547.218929][ T27] audit: type=1326 audit(1788305904.717:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 547.313277][ T27] audit: type=1326 audit(1788305904.717:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 547.385041][ T27] audit: type=1326 audit(1788305904.717:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 547.435741][ T27] audit: type=1326 audit(1788305904.717:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 547.495014][ T27] audit: type=1326 audit(1788305904.717:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 547.565571][ T27] audit: type=1326 audit(1788305904.717:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 547.643835][ T27] audit: type=1326 audit(1788305904.757:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 547.718889][ T27] audit: type=1326 audit(1788305904.757:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 547.750377][ T27] audit: type=1326 audit(1788305904.807:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 547.779742][ T27] audit: type=1326 audit(1788305904.807:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.1.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 550.184614][T11374] syzkaller0: entered promiscuous mode [ 550.202360][T11374] syzkaller0: entered allmulticast mode [ 552.165391][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 552.906251][T11416] syzkaller0: entered promiscuous mode [ 552.925044][T11416] syzkaller0: entered allmulticast mode [ 556.228420][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 557.692670][T11468] syzkaller0: entered promiscuous mode [ 557.702413][T11468] syzkaller0: entered allmulticast mode [ 559.689228][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 560.788247][T11512] syzkaller0: entered promiscuous mode [ 560.793779][T11512] syzkaller0: entered allmulticast mode [ 562.238031][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 562.238046][ T27] audit: type=1326 audit(1788305919.737:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 562.269019][ T5774] ffs_data_put(): freeing [ 562.291499][ T27] audit: type=1326 audit(1788305919.737:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 562.975776][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.091353][ T27] audit: type=1326 audit(1788305919.737:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 563.116032][ T27] audit: type=1326 audit(1788305919.737:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 563.140230][ T27] audit: type=1326 audit(1788305919.737:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 563.164397][ T27] audit: type=1326 audit(1788305919.737:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 563.184990][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.206878][ T27] audit: type=1326 audit(1788305919.787:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 563.327374][ T27] audit: type=1326 audit(1788305919.787:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e6079dec2 code=0x7ffc0000 [ 563.358347][ T27] audit: type=1326 audit(1788305919.787:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9e6079df57 code=0x7ffc0000 [ 563.398193][ T27] audit: type=1326 audit(1788305919.787:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11534 comm="syz.2.1813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9e6075ae51 code=0x7ffc0000 [ 563.448347][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 567.160384][T11558] syzkaller0: entered promiscuous mode [ 567.185034][T11558] syzkaller0: entered allmulticast mode [ 570.740075][ T5773] ffs_data_put(): freeing [ 571.047225][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 571.047239][ T27] audit: type=1326 audit(1788305928.547:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.120434][ T27] audit: type=1326 audit(1788305928.547:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.163690][ T27] audit: type=1326 audit(1788305928.577:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.188287][ T27] audit: type=1326 audit(1788305928.577:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.241086][ T27] audit: type=1326 audit(1788305928.577:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.373004][ T27] audit: type=1326 audit(1788305928.577:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.452773][ T27] audit: type=1326 audit(1788305928.577:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.487592][ T27] audit: type=1326 audit(1788305928.577:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.489946][T11602] syzkaller0: entered promiscuous mode [ 571.514999][ T27] audit: type=1326 audit(1788305928.577:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.548323][T11602] syzkaller0: entered allmulticast mode [ 571.645872][ T27] audit: type=1326 audit(1788305928.577:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.1830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 571.845227][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 574.758913][ T5774] ffs_data_put(): freeing [ 576.805026][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 579.957621][T11648] syzkaller0: entered promiscuous mode [ 579.963187][T11648] syzkaller0: entered allmulticast mode [ 581.035529][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 581.035577][ T27] audit: type=1326 audit(1788305938.437:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 581.095261][ T27] audit: type=1326 audit(1788305938.447:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 581.120571][ T27] audit: type=1326 audit(1788305938.467:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 581.144867][ T27] audit: type=1326 audit(1788305938.467:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 581.169049][ T27] audit: type=1326 audit(1788305938.467:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 581.193122][ T27] audit: type=1326 audit(1788305938.527:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 581.225255][ T27] audit: type=1326 audit(1788305938.527:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0c2b9dec2 code=0x7ffc0000 [ 581.265047][ T27] audit: type=1326 audit(1788305938.697:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 581.316724][ T27] audit: type=1326 audit(1788305938.697:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 581.375458][ T27] audit: type=1326 audit(1788305938.757:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.1849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc0c2b9df57 code=0x7ffc0000 [ 581.565307][ T5774] ffs_data_put(): freeing [ 581.799243][T11674] syzkaller0: entered promiscuous mode [ 581.840191][T11674] syzkaller0: entered allmulticast mode [ 583.241710][T11696] read descriptors [ 585.055011][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 586.852649][ T5772] ffs_data_put(): freeing [ 587.875546][ T5772] ffs_data_put(): freeing [ 588.896107][T11720] syzkaller0: entered promiscuous mode [ 588.935340][T11720] syzkaller0: entered allmulticast mode [ 589.517229][T11733] read descriptors [ 590.501484][ T5771] ffs_data_put(): freeing [ 591.445154][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 591.523100][ T5774] ffs_data_put(): freeing [ 592.168919][T11763] syzkaller0: entered promiscuous mode [ 592.187537][T11763] syzkaller0: entered allmulticast mode [ 593.766121][T11778] read descriptors [ 595.006368][T11786] ffs_data_put(): freeing [ 596.050200][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 596.056654][ T5773] ffs_data_put(): freeing [ 596.440576][T11803] syzkaller0: entered promiscuous mode [ 596.447561][T11803] syzkaller0: entered allmulticast mode [ 597.042815][T11813] read descriptors [ 597.081558][ T5772] ffs_data_put(): freeing [ 597.139291][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 597.139305][ T27] audit: type=1326 audit(1788305954.637:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 597.271108][ T27] audit: type=1326 audit(1788305954.637:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 597.339126][ T27] audit: type=1326 audit(1788305954.637:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 597.368407][ T27] audit: type=1326 audit(1788305954.677:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 597.392966][ T27] audit: type=1326 audit(1788305954.677:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 597.417533][ T27] audit: type=1326 audit(1788305954.677:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 597.442004][ T27] audit: type=1326 audit(1788305954.677:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 597.485013][ T27] audit: type=1326 audit(1788305954.677:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 597.595476][ T27] audit: type=1326 audit(1788305954.677:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 597.950346][ T27] audit: type=1326 audit(1788305954.677:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.1898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 599.318859][T11834] syzkaller0: entered promiscuous mode [ 599.370952][T11834] syzkaller0: entered allmulticast mode [ 600.673607][T11852] read descriptors [ 604.271907][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 604.436988][ T5772] ffs_data_put(): freeing [ 605.576001][T11873] syzkaller0: entered promiscuous mode [ 605.625027][T11873] syzkaller0: entered allmulticast mode [ 606.948085][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 606.948100][ T27] audit: type=1326 audit(1788305964.447:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 607.053456][ T27] audit: type=1326 audit(1788305964.477:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 607.111814][ T27] audit: type=1326 audit(1788305964.477:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 607.175072][ T27] audit: type=1326 audit(1788305964.477:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 607.215217][ T27] audit: type=1326 audit(1788305964.477:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 607.252244][ T27] audit: type=1326 audit(1788305964.477:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 607.299743][ T27] audit: type=1326 audit(1788305964.477:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 607.351432][ T27] audit: type=1326 audit(1788305964.477:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 607.437800][T11902] read descriptors [ 607.460683][ T27] audit: type=1326 audit(1788305964.477:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 607.615192][ T27] audit: type=1326 audit(1788305964.477:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.1919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 608.540782][ T5773] ffs_data_put(): freeing [ 608.786030][T11914] syzkaller0: entered promiscuous mode [ 608.791561][T11914] syzkaller0: entered allmulticast mode [ 609.675023][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 611.499455][T11947] read descriptors [ 612.216894][ T5771] ffs_data_put(): freeing [ 614.151926][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 614.336001][T11964] syzkaller0: entered promiscuous mode [ 614.341545][T11964] syzkaller0: entered allmulticast mode [ 614.837962][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 614.837977][ T27] audit: type=1326 audit(1788305972.337:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 614.925028][ T27] audit: type=1326 audit(1788305972.377:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 615.021453][ T27] audit: type=1326 audit(1788305972.377:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 615.046972][T11981] read descriptors [ 615.093446][ T27] audit: type=1326 audit(1788305972.377:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 615.184411][ T27] audit: type=1326 audit(1788305972.377:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 615.325114][ T27] audit: type=1326 audit(1788305972.387:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 615.481241][ T27] audit: type=1326 audit(1788305972.417:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 615.543741][ T27] audit: type=1326 audit(1788305972.417:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 615.601901][ T27] audit: type=1326 audit(1788305972.417:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 615.680465][ T27] audit: type=1326 audit(1788305972.427:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 615.769670][ T5773] ffs_data_put(): freeing [ 616.968009][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 617.011335][T12004] syzkaller0: entered promiscuous mode [ 617.040513][T12004] syzkaller0: entered allmulticast mode [ 622.587879][ T5771] ffs_data_put(): freeing [ 623.899100][T12053] syzkaller0: entered promiscuous mode [ 623.912278][T12053] syzkaller0: entered allmulticast mode [ 624.771523][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.781980][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.794660][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 625.339071][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 625.339086][ T27] audit: type=1326 audit(1788305982.837:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 625.425221][ T27] audit: type=1326 audit(1788305982.877:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 625.488960][ T27] audit: type=1326 audit(1788305982.887:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 625.523293][ T27] audit: type=1326 audit(1788305982.887:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 625.564882][ T27] audit: type=1326 audit(1788305982.897:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 625.616184][T12077] read descriptors [ 625.633285][ T27] audit: type=1326 audit(1788305982.967:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 625.707342][ T27] audit: type=1326 audit(1788305982.967:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ff399dec2 code=0x7ffc0000 [ 625.769902][ T27] audit: type=1326 audit(1788305982.967:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5ff399df57 code=0x7ffc0000 [ 625.859711][ T27] audit: type=1326 audit(1788305982.967:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5ff395ae51 code=0x7ffc0000 [ 625.970387][ T27] audit: type=1326 audit(1788305982.967:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.0.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5ff399ef49 code=0x7ffc0000 [ 626.725790][T12088] syzkaller0: entered promiscuous mode [ 626.731334][T12088] syzkaller0: entered allmulticast mode [ 626.867171][ T5772] ffs_data_put(): freeing [ 627.525060][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 632.236271][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 632.236286][ T27] audit: type=1326 audit(1788305989.707:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 632.268617][ T27] audit: type=1326 audit(1788305989.707:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ff399dec2 code=0x7ffc0000 [ 632.292714][ T27] audit: type=1326 audit(1788305989.707:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5ff399df57 code=0x7ffc0000 [ 632.323461][ T27] audit: type=1326 audit(1788305989.717:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5ff395ae51 code=0x7ffc0000 [ 632.368407][ T27] audit: type=1326 audit(1788305989.717:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5ff399ef49 code=0x7ffc0000 [ 632.397312][ T27] audit: type=1326 audit(1788305989.717:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5ff395aebb code=0x7ffc0000 [ 632.431400][ T27] audit: type=1326 audit(1788305989.717:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 632.482231][ T27] audit: type=1326 audit(1788305989.717:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 632.640389][ T27] audit: type=1326 audit(1788305989.717:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5ff395a5ac code=0x7ffc0000 [ 633.546250][ T27] audit: type=1326 audit(1788305989.717:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.0.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5ff395a60e code=0x7ffc0000 [ 633.720224][T12130] read descriptors [ 634.127571][ T5771] ffs_data_put(): freeing [ 634.139209][T12136] syzkaller0: entered promiscuous mode [ 634.144684][T12136] syzkaller0: entered allmulticast mode [ 634.651629][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 636.385183][T12174] syzkaller0: entered promiscuous mode [ 636.444316][T12174] syzkaller0: entered allmulticast mode [ 636.922450][T12178] read descriptors [ 637.538632][ T5774] ffs_data_put(): freeing [ 637.733882][ T27] kauditd_printk_skb: 93 callbacks suppressed [ 637.733897][ T27] audit: type=1326 audit(1788305995.227:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 638.349344][ T27] audit: type=1326 audit(1788305995.307:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 638.593113][ T27] audit: type=1326 audit(1788305995.307:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 638.645043][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 640.015148][ T27] audit: type=1326 audit(1788305995.317:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 640.225026][ T27] audit: type=1326 audit(1788305995.317:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 640.302444][ T27] audit: type=1326 audit(1788305995.317:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 640.373495][ T27] audit: type=1326 audit(1788305995.327:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 640.458461][ T27] audit: type=1326 audit(1788305995.327:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 640.605043][ T27] audit: type=1326 audit(1788305995.337:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 640.695088][ T27] audit: type=1326 audit(1788305995.337:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.3.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 642.618679][T12221] read descriptors [ 642.855411][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 642.855420][ T27] audit: type=1326 audit(1788306000.347:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 642.965057][ T27] audit: type=1326 audit(1788306000.357:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 643.030824][ T27] audit: type=1326 audit(1788306000.407:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 643.094369][ T27] audit: type=1326 audit(1788306000.407:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 643.147824][ T27] audit: type=1326 audit(1788306000.407:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 643.916383][ T27] audit: type=1326 audit(1788306000.407:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 644.125280][ T27] audit: type=1326 audit(1788306000.407:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 644.220845][ T5772] ffs_data_put(): freeing [ 644.245052][ T27] audit: type=1326 audit(1788306000.407:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 644.405309][ T27] audit: type=1326 audit(1788306000.407:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 644.466966][ T27] audit: type=1326 audit(1788306000.407:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.3.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa6ab9e159 code=0x7ffc0000 [ 644.565089][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 647.281145][T12272] read descriptors [ 648.434949][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 648.434965][ T27] audit: type=1326 audit(1788306005.897:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 648.559293][ T27] audit: type=1326 audit(1788306005.907:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 648.644127][ T27] audit: type=1326 audit(1788306005.907:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 648.747968][ T27] audit: type=1326 audit(1788306005.917:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 648.813031][ T27] audit: type=1326 audit(1788306005.917:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 648.864973][ T27] audit: type=1326 audit(1788306005.917:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 648.943825][ T27] audit: type=1326 audit(1788306005.917:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 648.978816][ T5772] ffs_data_put(): freeing [ 649.065157][ T27] audit: type=1326 audit(1788306005.977:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 649.154963][ T27] audit: type=1326 audit(1788306005.977:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 649.235188][ T27] audit: type=1326 audit(1788306005.977:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.0.2022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e159 code=0x7ffc0000 [ 649.339164][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 654.785039][T12334] read descriptors [ 655.870282][ T5774] ffs_data_put(): freeing [ 655.885662][ T27] kauditd_printk_skb: 71 callbacks suppressed [ 655.885676][ T27] audit: type=1326 audit(1788306013.387:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 655.916513][ T27] audit: type=1326 audit(1788306013.387:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 655.940768][ T27] audit: type=1326 audit(1788306013.387:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 655.964936][ T27] audit: type=1326 audit(1788306013.387:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 656.015253][ T27] audit: type=1326 audit(1788306013.387:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 656.095003][ T27] audit: type=1326 audit(1788306013.387:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 656.182723][ T27] audit: type=1326 audit(1788306013.387:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 656.305518][ T27] audit: type=1326 audit(1788306013.387:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 656.330166][ T27] audit: type=1326 audit(1788306013.387:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 656.365196][ T27] audit: type=1326 audit(1788306013.387:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 656.475852][ T7007] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 656.484987][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 657.190563][ T7007] usb 2-1: Using ep0 maxpacket: 32 [ 657.340108][ T7007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.377606][ T7007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.419251][ T7007] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 657.474241][ T7007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.494175][ T7007] usb 2-1: config 0 descriptor?? [ 658.513069][ T7007] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 658.749076][ T6949] usb 2-1: USB disconnect, device number 46 [ 658.893169][T12381] fido_id[12381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 659.506132][T12395] read descriptors [ 661.295193][ T5771] ffs_data_put(): freeing [ 661.376194][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 662.765957][T12431] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 662.846695][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 662.846709][ T27] audit: type=1326 audit(1788306020.347:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 662.954600][ T27] audit: type=1326 audit(1788306020.347:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 663.149424][ T27] audit: type=1326 audit(1788306020.387:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 663.227087][ T27] audit: type=1326 audit(1788306020.387:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 663.293148][ T27] audit: type=1326 audit(1788306020.387:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 663.451912][ T27] audit: type=1326 audit(1788306020.407:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 663.531464][ T27] audit: type=1326 audit(1788306020.507:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6079e159 code=0x7ffc0000 [ 663.642631][ T27] audit: type=1326 audit(1788306020.507:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e6079dec2 code=0x7ffc0000 [ 663.724990][ T27] audit: type=1326 audit(1788306020.507:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9e6079df57 code=0x7ffc0000 [ 663.822900][ T27] audit: type=1326 audit(1788306020.507:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.2053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9e6075ae51 code=0x7ffc0000 [ 664.055785][T12462] read descriptors [ 665.095265][ T5774] ffs_data_put(): freeing [ 666.635200][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 670.710153][T12500] read descriptors [ 672.209564][ T5772] ffs_data_put(): freeing [ 672.388405][T12515] xt_l2tp: missing protocol rule (udp|l2tpip) [ 672.663348][T10698] Bluetooth: hci1: command 0x0405 tx timeout [ 672.708825][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 672.708839][ T27] audit: type=1326 audit(1788306030.207:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 672.739747][ T27] audit: type=1326 audit(1788306030.207:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 672.764028][ T27] audit: type=1326 audit(1788306030.207:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 672.788388][ T27] audit: type=1326 audit(1788306030.207:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 672.814248][ T27] audit: type=1326 audit(1788306030.217:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 672.838831][ T27] audit: type=1326 audit(1788306030.217:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 672.914989][ T27] audit: type=1326 audit(1788306030.377:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c2b9e159 code=0x7ffc0000 [ 672.976444][ T27] audit: type=1326 audit(1788306030.377:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0c2b9dec2 code=0x7ffc0000 [ 672.999533][T12520] md/raid10:md0: not clean -- starting background reconstruction [ 673.019551][T12520] md/raid10:md0: active with 1 out of 2 devices [ 673.042006][T12520] md0: detected capacity change from 0 to 2048 [ 673.088393][ T27] audit: type=1326 audit(1788306030.377:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc0c2b9df57 code=0x7ffc0000 [ 673.129752][T12531] md: resync of RAID array md0 [ 673.172585][ T27] audit: type=1326 audit(1788306030.377:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.1.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc0c2b5ae51 code=0x7ffc0000 [ 673.286602][T12531] md/raid10:md0: resync fails [ 673.310456][T12531] md: md0: resync done. [ 673.419799][T12535] md: recovery of RAID array md0 [ 673.478311][T12535] md: md0: recovery done. [ 673.655809][T12547] read descriptors [ 674.875382][ T5771] ffs_data_put(): freeing [ 675.714707][ T5781] Bluetooth: hci1: command 0x0405 tx timeout [ 678.914974][ T5822] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 679.154747][T12581] ================================================================== [ 679.154758][T12581] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x2114/0x25d0 [ 679.154875][T12581] Write of size 4 at addr ffffc90003e91fe8 by task syz.0.2095/12581 [ 679.154891][T12581] [ 679.154926][T12581] CPU: 0 PID: 12581 Comm: syz.0.2095 Not tainted syzkaller #0 [ 679.154941][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.154949][T12581] Call Trace: [ 679.154954][T12581] [ 679.154960][T12581] dump_stack_lvl+0x18c/0x250 [ 679.154976][T12581] ? sys_imageblit+0x2114/0x25d0 [ 679.154987][T12581] ? show_regs_print_info+0x20/0x20 [ 679.154999][T12581] ? load_image+0x420/0x420 [ 679.155013][T12581] print_report+0xa8/0x210 [ 679.155030][T12581] ? sys_imageblit+0x2114/0x25d0 [ 679.155039][T12581] kasan_report+0x117/0x150 [ 679.155060][T12581] ? sys_imageblit+0x2114/0x25d0 [ 679.155071][T12581] sys_imageblit+0x2114/0x25d0 [ 679.155084][T12581] ? sys_copyarea+0x2530/0x2530 [ 679.155094][T12581] ? __lock_acquire+0x7d80/0x7d80 [ 679.155107][T12581] ? rcu_is_watching+0x15/0xb0 [ 679.155121][T12581] ? trace_contention_end+0x39/0xe0 [ 679.155132][T12581] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 679.155164][T12581] cw_putcs+0x15f3/0x18a0 [ 679.155188][T12581] ? cw_clear+0x250/0x250 [ 679.155202][T12581] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 679.155216][T12581] ? fb_get_color_depth+0x162/0x280 [ 679.155228][T12581] fbcon_putcs+0x35c/0x520 [ 679.155242][T12581] ? cw_clear+0x250/0x250 [ 679.155255][T12581] do_update_region+0x4e9/0x640 [ 679.155274][T12581] ? __asan_memcpy+0x40/0x70 [ 679.155289][T12581] ? hide_cursor+0x320/0x320 [ 679.155302][T12581] redraw_screen+0xa30/0x1000 [ 679.155313][T12581] ? _raw_spin_unlock+0x40/0x40 [ 679.155357][T12581] ? clear_buffer_attributes+0x320/0x320 [ 679.155371][T12581] ? tty_do_resize+0xe1/0x120 [ 679.155384][T12581] vc_do_resize+0x1256/0x17f0 [ 679.155402][T12581] ? vc_resize+0x50/0x50 [ 679.155413][T12581] ? __mod_lruvec_page_state+0xa5/0x410 [ 679.155426][T12581] ? __kasan_kmalloc_large+0x8b/0xa0 [ 679.155439][T12581] fbcon_do_set_font+0xb5c/0x1ae0 [ 679.155457][T12581] ? fbcon_blank+0xb40/0xb40 [ 679.155469][T12581] con_font_op+0xc3c/0xf60 [ 679.155483][T12581] ? reset_palette+0xdd0/0xdd0 [ 679.155496][T12581] ? __might_fault+0xaa/0x120 [ 679.155507][T12581] ? __lock_acquire+0x7d80/0x7d80 [ 679.155519][T12581] ? apparmor_capable+0x137/0x1a0 [ 679.155535][T12581] ? __might_fault+0xaa/0x120 [ 679.155545][T12581] ? __might_fault+0xc6/0x120 [ 679.155554][T12581] ? __might_fault+0xaa/0x120 [ 679.155565][T12581] vt_ioctl+0x1a21/0x1f20 [ 679.155580][T12581] ? __vt_event_wait+0x260/0x260 [ 679.155596][T12581] ? __fget_files+0x28/0x460 [ 679.155611][T12581] ? tty_jobctrl_ioctl+0x378/0xba0 [ 679.155624][T12581] tty_ioctl+0x91e/0xdc0 [ 679.155636][T12581] ? tty_get_icount+0xb0/0xb0 [ 679.155647][T12581] __se_sys_ioctl+0xfd/0x170 [ 679.155667][T12581] do_syscall_64+0x55/0xb0 [ 679.155678][T12581] ? clear_bhb_loop+0x40/0x90 [ 679.155693][T12581] ? clear_bhb_loop+0x40/0x90 [ 679.155705][T12581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.155717][T12581] RIP: 0033:0x7f5ff399e159 [ 679.155728][T12581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.155739][T12581] RSP: 002b:00007f5ff4856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.155751][T12581] RAX: ffffffffffffffda RBX: 00007f5ff3c26090 RCX: 00007f5ff399e159 [ 679.155759][T12581] RDX: 0000200000000180 RSI: 0000000000004b72 RDI: 0000000000000004 [ 679.155766][T12581] RBP: 00007f5ff3a35024 R08: 0000000000000000 R09: 0000000000000000 [ 679.155773][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.155779][T12581] R13: 00007f5ff3c26128 R14: 00007f5ff3c26090 R15: 00007ffd46d98918 [ 679.155791][T12581] [ 679.155795][T12581] [ 679.155797][T12581] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003e92000 allocated at drm_gem_shmem_vmap+0x3c4/0x650 [ 679.155819][T12581] Memory state around the buggy address: [ 679.155825][T12581] ffffc90003e91e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 679.155832][T12581] ffffc90003e91f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 679.155839][T12581] >ffffc90003e91f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 679.155845][T12581] ^ [ 679.155851][T12581] ffffc90003e92000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 679.155857][T12581] ffffc90003e92080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 679.155862][T12581] ================================================================== [ 679.160377][T12581] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 679.160390][T12581] CPU: 0 PID: 12581 Comm: syz.0.2095 Not tainted syzkaller #0 [ 679.160408][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.160420][T12581] Call Trace: [ 679.160428][T12581] [ 679.160435][T12581] dump_stack_lvl+0x18c/0x250 [ 679.160465][T12581] ? show_regs_print_info+0x20/0x20 [ 679.160486][T12581] ? load_image+0x420/0x420 [ 679.160508][T12581] panic+0x2ca/0x720 [ 679.160534][T12581] ? bpf_jit_dump+0xd0/0xd0 [ 679.160559][T12581] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 679.160578][T12581] ? _raw_spin_unlock+0x40/0x40 [ 679.160594][T12581] ? print_memory_metadata+0x314/0x400 [ 679.160619][T12581] ? sys_imageblit+0x2114/0x25d0 [ 679.160636][T12581] check_panic_on_warn+0x84/0xa0 [ 679.160668][T12581] ? sys_imageblit+0x2114/0x25d0 [ 679.160686][T12581] end_report+0x6f/0x130 [ 679.160707][T12581] kasan_report+0x128/0x150 [ 679.160731][T12581] ? sys_imageblit+0x2114/0x25d0 [ 679.160751][T12581] sys_imageblit+0x2114/0x25d0 [ 679.160775][T12581] ? sys_copyarea+0x2530/0x2530 [ 679.160795][T12581] ? __lock_acquire+0x7d80/0x7d80 [ 679.160815][T12581] ? rcu_is_watching+0x15/0xb0 [ 679.160839][T12581] ? trace_contention_end+0x39/0xe0 [ 679.160859][T12581] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 679.160886][T12581] cw_putcs+0x15f3/0x18a0 [ 679.160926][T12581] ? cw_clear+0x250/0x250 [ 679.160953][T12581] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 679.160977][T12581] ? fb_get_color_depth+0x162/0x280 [ 679.160999][T12581] fbcon_putcs+0x35c/0x520 [ 679.161023][T12581] ? cw_clear+0x250/0x250 [ 679.161048][T12581] do_update_region+0x4e9/0x640 [ 679.161068][T12581] ? __asan_memcpy+0x40/0x70 [ 679.161097][T12581] ? hide_cursor+0x320/0x320 [ 679.161121][T12581] redraw_screen+0xa30/0x1000 [ 679.161143][T12581] ? _raw_spin_unlock+0x40/0x40 [ 679.161162][T12581] ? clear_buffer_attributes+0x320/0x320 [ 679.161186][T12581] ? tty_do_resize+0xe1/0x120 [ 679.161209][T12581] vc_do_resize+0x1256/0x17f0 [ 679.161241][T12581] ? vc_resize+0x50/0x50 [ 679.161260][T12581] ? __mod_lruvec_page_state+0xa5/0x410 [ 679.161282][T12581] ? __kasan_kmalloc_large+0x8b/0xa0 [ 679.161306][T12581] fbcon_do_set_font+0xb5c/0x1ae0 [ 679.161340][T12581] ? fbcon_blank+0xb40/0xb40 [ 679.161363][T12581] con_font_op+0xc3c/0xf60 [ 679.161388][T12581] ? reset_palette+0xdd0/0xdd0 [ 679.161414][T12581] ? __might_fault+0xaa/0x120 [ 679.161432][T12581] ? __lock_acquire+0x7d80/0x7d80 [ 679.161453][T12581] ? apparmor_capable+0x137/0x1a0 [ 679.161471][T12581] ? __might_fault+0xaa/0x120 [ 679.161489][T12581] ? __might_fault+0xc6/0x120 [ 679.161507][T12581] ? __might_fault+0xaa/0x120 [ 679.161527][T12581] vt_ioctl+0x1a21/0x1f20 [ 679.161553][T12581] ? __vt_event_wait+0x260/0x260 [ 679.161582][T12581] ? __fget_files+0x28/0x460 [ 679.161606][T12581] ? tty_jobctrl_ioctl+0x378/0xba0 [ 679.161628][T12581] tty_ioctl+0x91e/0xdc0 [ 679.161649][T12581] ? tty_get_icount+0xb0/0xb0 [ 679.161679][T12581] __se_sys_ioctl+0xfd/0x170 [ 679.161704][T12581] do_syscall_64+0x55/0xb0 [ 679.161724][T12581] ? clear_bhb_loop+0x40/0x90 [ 679.161745][T12581] ? clear_bhb_loop+0x40/0x90 [ 679.161767][T12581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.161788][T12581] RIP: 0033:0x7f5ff399e159 [ 679.161804][T12581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.161821][T12581] RSP: 002b:00007f5ff4856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.161840][T12581] RAX: ffffffffffffffda RBX: 00007f5ff3c26090 RCX: 00007f5ff399e159 [ 679.161855][T12581] RDX: 0000200000000180 RSI: 0000000000004b72 RDI: 0000000000000004 [ 679.161867][T12581] RBP: 00007f5ff3a35024 R08: 0000000000000000 R09: 0000000000000000 [ 679.161879][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.161891][T12581] R13: 00007f5ff3c26128 R14: 00007f5ff3c26090 R15: 00007ffd46d98918 [ 679.161912][T12581] [ 679.162158][T12581] Kernel Offset: disabled