last executing test programs: 45.640347971s ago: executing program 0 (id=59): setns(0xc9, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x2404c030) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, 0x0, 0x4000c814) write$tun(r1, &(0x7f0000000180)={@void, @val={0x1, 0x3, 0x1e, 0x10, 0x14, 0x6}, @ipv4=@esp={{0x5, 0x4, 0x1, 0x18, 0x22, 0x66, 0x0, 0xe, 0x32, 0x0, @empty, @empty}}}, 0x2c) 44.76014906s ago: executing program 0 (id=69): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000001c0)={0x0, 0x210000}) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) 44.449716951s ago: executing program 0 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./security\x00', &(0x7f0000000a40)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='appraise func=FIRMWARE_CHECK', 0x1c) 44.207015276s ago: executing program 0 (id=77): mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000280)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x200) 43.235655374s ago: executing program 0 (id=84): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000380)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x40814}, 0xc080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0xe9, 0x9, 0x7}]}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000500)={0x0, 0x0, 0x1}, 0x8) 42.686789629s ago: executing program 0 (id=90): r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002100)={0x0, &(0x7f0000002140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x66}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x8000000, 0x9000}) 42.063423392s ago: executing program 32 (id=90): r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002100)={0x0, &(0x7f0000002140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x66}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x8000000, 0x9000}) 2.528318685s ago: executing program 4 (id=369): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000c80)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd671f2f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 2.515973626s ago: executing program 1 (id=370): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.336265764s ago: executing program 2 (id=372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@report={0xbc, 0x29, 0x1, 0x70bd2b, 0x25dfdbfe, {0x33, {@in=@rand_addr=0x64010102, @in=@multicast1, 0x7ff, 0x6, 0x4e23, 0x0, 0x0, 0xb0, 0x80, 0x90}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @address_filter={0x28, 0x20, {@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x1, 0x7}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008815}, 0x4000) 2.335992234s ago: executing program 4 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) 2.318157066s ago: executing program 1 (id=374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4004850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x3, 0xf, 0x100, 0x1, 0x92, 0x8a}, {0x8, 0x9, 0x8000000000000001, 0x401, 0x8, 0x1ff}], ['\x00']}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=',', 0x5dc}], 0x1) 2.223696096s ago: executing program 2 (id=375): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x19c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0xec, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x7}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.061803892s ago: executing program 1 (id=377): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@mmap={0xfffffffd, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e2890800"}}) 2.056443942s ago: executing program 4 (id=378): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x21, 0xfffffffffffffffe, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYBLOB="01002cbd7001bedbdf25340000"], 0x3c}, 0x1, 0x0, 0x0, 0x200080d4}, 0x20000000) msgget$private(0x0, 0x41) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) msgsnd(0x0, &(0x7f0000000380)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) timer_gettime(r1, 0x0) socket(0x10, 0x2, 0x4) r5 = timerfd_create(0x2, 0x80000) timerfd_settime(r5, 0x1, &(0x7f0000000140), &(0x7f0000000180)) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000000c0)="1a000000020001", 0x7) setresuid(0x0, 0x0, 0x0) 1.958406872s ago: executing program 2 (id=379): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 1.956990712s ago: executing program 3 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x42, 0x100) write(r1, &(0x7f00000008c0)='270', 0x3) unshare(0x40000000) 1.767912782s ago: executing program 4 (id=381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$inet(r3, &(0x7f0000000200)=[{{&(0x7f0000000b00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="97a004ba0af07d833298f446a9b53afea6838827e3dc2dec34cc61", 0x1b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="3015bbe23b", 0x5}], 0x1}}], 0x2, 0xc060) 1.308254878s ago: executing program 2 (id=382): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000028c0), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/135, 0x87}], 0x1}}], 0x48}, 0x0) 1.197045109s ago: executing program 3 (id=383): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x85) 963.681723ms ago: executing program 3 (id=384): socket$packet(0x11, 0x3, 0x300) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000480)={0x1f, 0xffff, 0x3}, 0x6) mknod(&(0x7f0000000500)='./file0\x00', 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000640)='r:s/p ./file0:0', 0xf) creat(&(0x7f0000000680)='./tracing/uprobe_events\x00', 0x120) 904.411429ms ago: executing program 2 (id=385): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x6, @empty, 0x12}, 0x1c) 798.557369ms ago: executing program 1 (id=386): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}], 0x1, 0x488c4) 777.217691ms ago: executing program 2 (id=387): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/220, 0xdc}, {&(0x7f0000000900)=""/4085, 0xff5}], 0x2}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001980)=""/211, 0xd3}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/24, 0x18}, {&(0x7f0000002ac0)=""/75, 0x4b}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/129, 0x81}], 0x6}, 0x80}, {{0x0, 0x0, 0x0}, 0x6f29}], 0x6, 0x20, 0x0) 712.406058ms ago: executing program 3 (id=388): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x2f) 672.967142ms ago: executing program 1 (id=389): openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d00)='./proc\x00', &(0x7f0000000d40)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) write(r0, &(0x7f0000000dc0)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x0) add_key(&(0x7f0000000e40)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000e80)='user\x00', &(0x7f0000000ec0)={'syz', 0x0}, &(0x7f0000000f00)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\[\xed\x18\v\xc4\xd6\xa9\xb7\xd3\x03\xfc\xba[b~f\xf3\x88\xeaX\x99U\x0f\x91\x8f\x8aH\xb7^\x00\xfe;\xceg\"(\x7f\xc3\xee\xac\v\xb7\xaf\t&\x18W;\xdd\xe5\xe5\xae_\x19M\x18\x9d\xd2$r]\x8e\xfc$\x96U\xbf\xf0\xb2j\xfd\xcdz\x90\xfazt\x8cO\x1e\x85\xf4\xb7\xa6\xf7\x8f\xae\x81GL\xcf\x19\x99n\x16\x1a\xf3\x81\x01\x9c\x9c\xd0\xe4:R\xec\xdb\x03q\xef\x86\xb9\x12\xbaXh6QH\x0f\x9b\xe9\xf9\x1eC4-\x92a\xc1\xe6\xae\xc1<\xe2\r&.@*\v\t\x10\xec\xcd\xa6\xd9\x18\xea\x92r\x99\x92\xe1\x928\x1e\xce\xd9\\\xf9\xb4\x06v\xab\xaf\x86\xbbB0\xa0\f\x13\xa8\xcf\x9a\x98\x9ez\xa7\xc4w6(\xc6^C\xbd\xfb\xbfs\xf6Z\x9e,\x10\x15\x9e\xc0h\x968\xbd\xfa\x96', 0x0) request_key(0x0, 0x0, 0x0, r1) mkdir(&(0x7f0000001080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000010c0)='./bus\x00', &(0x7f0000001100), 0x8, &(0x7f0000001140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 611.988998ms ago: executing program 3 (id=390): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 164.760973ms ago: executing program 4 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./tracefs\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='!:m', 0x3) 60.250554ms ago: executing program 3 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) write(r0, &(0x7f0000000140)='27', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) mount(&(0x7f0000000180)=@filename='mtd0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='jffs2\x00', 0x0, 0x0) 59.995454ms ago: executing program 1 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='raid1', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='1:0', 0x3) 0s ago: executing program 4 (id=394): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000180)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x14, &(0x7f00000002c0)=[{&(0x7f0000000300)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4096, 0xa15b0}], 0x1, 0x0, 0x15}, 0x700) r1 = landlock_create_ruleset(&(0x7f0000001580)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. [ 79.781197][ T5775] cgroup: Unknown subsys name 'net' [ 79.904806][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.627811][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.009321][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.021542][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.030092][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.038521][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.047846][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.055536][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.063448][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.072952][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.081702][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.089541][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.097255][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.104493][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.114302][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.122205][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.130251][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.137068][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.139936][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.147430][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.159674][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.168145][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.187930][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.238382][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.247700][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.249457][ T5795] (null): rxe_set_mtu: Set mtu to 1024 [ 84.255778][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.272989][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.303488][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.325404][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.373418][ T5790] (null): rxe_set_mtu: Set mtu to 1024 [ 84.391008][ T5794] (null): rxe_set_mtu: Set mtu to 1024 [ 84.398748][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 84.406970][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 84.425466][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 84.433959][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 84.687365][ T5795] infiniband rxe0: set active [ 84.693339][ T5795] infiniband rxe0: added rxe_eth0 [ 84.716824][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.779888][ T5795] RDS/IB: rxe0: added [ 84.784478][ T5795] smc: adding ib device rxe0 with port count 1 [ 84.791935][ T5795] smc: ib device rxe0 port 1 has pnetid [ 84.835930][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.907901][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.081545][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.097299][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.236027][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 85.279294][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 85.589674][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.597657][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.605279][ T5787] bridge_slave_0: entered allmulticast mode [ 85.612426][ T5787] bridge_slave_0: entered promiscuous mode [ 85.627878][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.672234][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.685082][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.692454][ T5787] bridge_slave_1: entered allmulticast mode [ 85.703396][ T5787] bridge_slave_1: entered promiscuous mode [ 85.711702][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.724888][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.732154][ T5794] bridge_slave_0: entered allmulticast mode [ 85.743443][ T5794] bridge_slave_0: entered promiscuous mode [ 85.753861][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.764913][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.772181][ T5794] bridge_slave_1: entered allmulticast mode [ 85.782652][ T5794] bridge_slave_1: entered promiscuous mode [ 85.791809][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.801983][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.810677][ T5790] bridge_slave_0: entered allmulticast mode [ 85.821171][ T5790] bridge_slave_0: entered promiscuous mode [ 85.831510][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.841432][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.850134][ T5790] bridge_slave_1: entered allmulticast mode [ 85.860822][ T5790] bridge_slave_1: entered promiscuous mode [ 85.927000][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.980224][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.992155][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.033212][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.057414][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.070488][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.080094][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.126574][ T5787] team0: Port device team_slave_0 added [ 86.140470][ T5787] team0: Port device team_slave_1 added [ 86.188480][ T5790] team0: Port device team_slave_0 added [ 86.198484][ T5790] team0: Port device team_slave_1 added [ 86.248559][ T5794] team0: Port device team_slave_0 added [ 86.273297][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.280452][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.307908][ T5099] Bluetooth: hci0: command tx timeout [ 86.315093][ T5099] Bluetooth: hci1: command tx timeout [ 86.320808][ T5099] Bluetooth: hci3: command tx timeout [ 86.326619][ T5801] Bluetooth: hci2: command tx timeout [ 86.334766][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.353451][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.360536][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.386521][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.400955][ T5794] team0: Port device team_slave_1 added [ 86.434107][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.441256][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.467542][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.481682][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.488888][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.515072][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.527295][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.534303][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.560826][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.588095][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.596745][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.622997][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.705017][ T5794] hsr_slave_0: entered promiscuous mode [ 86.711652][ T5794] hsr_slave_1: entered promiscuous mode [ 86.793486][ T5787] hsr_slave_0: entered promiscuous mode [ 86.803282][ T5787] hsr_slave_1: entered promiscuous mode [ 86.811730][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.820905][ T5787] Cannot create hsr debugfs directory [ 86.865992][ T5790] hsr_slave_0: entered promiscuous mode [ 86.873324][ T5790] hsr_slave_1: entered promiscuous mode [ 86.880314][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.888037][ T5790] Cannot create hsr debugfs directory [ 87.389220][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.431070][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.457485][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 87.484685][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.521684][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.708148][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.742657][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.756382][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.791672][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.799377][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.808227][ T5795] bridge_slave_0: entered allmulticast mode [ 87.815799][ T5795] bridge_slave_0: entered promiscuous mode [ 87.834303][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.844336][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.855833][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.863301][ T5795] bridge_slave_1: entered allmulticast mode [ 87.871542][ T5795] bridge_slave_1: entered promiscuous mode [ 87.928384][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.941747][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.000949][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.018751][ T5795] team0: Port device team_slave_0 added [ 88.029257][ T5795] team0: Port device team_slave_1 added [ 88.040733][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.051361][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.073884][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.101697][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.108855][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.137339][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.168579][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.175955][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.202887][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.279038][ T5795] hsr_slave_0: entered promiscuous mode [ 88.285838][ T5795] hsr_slave_1: entered promiscuous mode [ 88.292186][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.299974][ T5795] Cannot create hsr debugfs directory [ 88.371438][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.381101][ T5099] Bluetooth: hci3: command tx timeout [ 88.381155][ T52] Bluetooth: hci2: command tx timeout [ 88.386655][ T5099] Bluetooth: hci1: command tx timeout [ 88.386695][ T5099] Bluetooth: hci0: command tx timeout [ 88.523488][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.563987][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.571538][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.602380][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.609640][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.711033][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.731042][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.743335][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.759727][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.775525][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.809850][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.854433][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.866765][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.903784][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.911025][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.933467][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.940750][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.989117][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.996371][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.009076][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.016586][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.182908][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.282376][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.344260][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.402763][ T5794] veth0_vlan: entered promiscuous mode [ 89.428446][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.461791][ T5794] veth1_vlan: entered promiscuous mode [ 89.498739][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.505983][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.552869][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.560121][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.712503][ T5794] veth0_macvtap: entered promiscuous mode [ 89.727702][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.744241][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.779732][ T5794] veth1_macvtap: entered promiscuous mode [ 89.893000][ T5790] veth0_vlan: entered promiscuous mode [ 89.937246][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.973358][ T5790] veth1_vlan: entered promiscuous mode [ 90.004556][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.054618][ T5787] veth0_vlan: entered promiscuous mode [ 90.080036][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.090114][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.100837][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.110485][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.153766][ T5787] veth1_vlan: entered promiscuous mode [ 90.197052][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.288028][ T5790] veth0_macvtap: entered promiscuous mode [ 90.343628][ T5790] veth1_macvtap: entered promiscuous mode [ 90.363311][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.382283][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.383021][ T5787] veth0_macvtap: entered promiscuous mode [ 90.417311][ T5787] veth1_macvtap: entered promiscuous mode [ 90.435299][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.447402][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.462814][ T52] Bluetooth: hci2: command tx timeout [ 90.465992][ T5801] Bluetooth: hci0: command tx timeout [ 90.468548][ T52] Bluetooth: hci1: command tx timeout [ 90.473847][ T5801] Bluetooth: hci3: command tx timeout [ 90.492508][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.527277][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.544083][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.556286][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.567872][ T5795] veth0_vlan: entered promiscuous mode [ 90.607079][ T5795] veth1_vlan: entered promiscuous mode [ 90.616628][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.626426][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.635498][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.644255][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.661801][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.673625][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.684100][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.694658][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.707373][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.728258][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.739176][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.749391][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.760020][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.771639][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.790837][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.813126][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.838982][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.848547][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.859142][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.868248][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.940065][ T5795] veth0_macvtap: entered promiscuous mode [ 90.972588][ T5795] veth1_macvtap: entered promiscuous mode [ 91.015658][ T5794] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.052886][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.073496][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.084371][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.096542][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.106817][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.117664][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.130570][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.144602][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.155740][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.165985][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.176523][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.186874][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.198038][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.209767][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.263973][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.285737][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.304194][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.313178][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.374112][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.389125][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.529571][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.540271][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.562225][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.574120][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.616874][ T28] audit: type=1804 audit(1794382255.595:2): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5" name="/newroot/1/mnt/#2040" dev="sda1" ino=2040 res=1 errno=0 [ 91.680003][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.698361][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.735915][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.743826][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.842594][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.874787][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.912723][ T5883] syz.1.6 (5883): drop_caches: 2 [ 92.148033][ T5890] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 92.213195][ T5883] syz.1.6 (5883): drop_caches: 2 [ 92.232645][ T5892] bcache: register_bcache() error : failed to open device [ 92.394610][ T5898] usb usb1: usbfs: process 5898 (syz.0.1) did not claim interface 0 before use [ 92.490671][ T5902] ALSA: mixer_oss: invalid OSS volume '' [ 92.535581][ T5801] Bluetooth: hci1: command tx timeout [ 92.537027][ T5099] Bluetooth: hci0: command tx timeout [ 92.541069][ T5801] Bluetooth: hci2: command tx timeout [ 92.546812][ T5099] Bluetooth: hci3: command tx timeout [ 92.831003][ T5914] cramfs: checking physical address 0x0000000024a21000 for linear cramfs image [ 92.842400][ T5914] cramfs: wrong magic [ 92.850106][ T5914] cramfs: wrong magic [ 92.871508][ T5916] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 92.903588][ T5916] netlink: 'syz.1.15': attribute type 2 has an invalid length. [ 92.977572][ T5919] bond0: option slaves: interface -bo does not exist! [ 93.095711][ T5921] block device autoloading is deprecated and will be removed. [ 93.287384][ T5927] ======================================================= [ 93.287384][ T5927] WARNING: The mand mount option has been deprecated and [ 93.287384][ T5927] and is ignored by this kernel. Remove the mand [ 93.287384][ T5927] option from the mount to silence this warning. [ 93.287384][ T5927] ======================================================= [ 93.347516][ T5927] devtmpfs: Unknown parameter 'trans' [ 93.485683][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.508745][ T5934] FAULT_INJECTION: forcing a failure. [ 93.508745][ T5934] name failslab, interval 1, probability 0, space 0, times 1 [ 93.532745][ T5934] CPU: 1 PID: 5934 Comm: syz.3.25 Not tainted syzkaller #0 [ 93.540031][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.550155][ T5934] Call Trace: [ 93.553478][ T5934] [ 93.556458][ T5934] dump_stack_lvl+0x18c/0x250 [ 93.561223][ T5934] ? show_regs_print_info+0x20/0x20 [ 93.566491][ T5934] ? load_image+0x420/0x420 [ 93.571042][ T5934] ? __might_sleep+0xe0/0xe0 [ 93.575683][ T5934] ? __lock_acquire+0x7eb0/0x7eb0 [ 93.580746][ T5934] should_fail_ex+0x394/0x4c0 [ 93.585460][ T5934] should_failslab+0x9/0x20 [ 93.589994][ T5934] slab_pre_alloc_hook+0x59/0x300 [ 93.595058][ T5934] ? prepend_path+0x8a7/0x950 [ 93.599764][ T5934] ? tomoyo_encode+0x2ad/0x570 [ 93.604559][ T5934] ? tomoyo_encode+0x2ad/0x570 [ 93.609356][ T5934] __kmem_cache_alloc_node+0x53/0x260 [ 93.614850][ T5934] ? tomoyo_encode+0x2ad/0x570 [ 93.619693][ T5934] __kmalloc+0xa7/0x240 [ 93.623899][ T5934] tomoyo_encode+0x2ad/0x570 [ 93.628536][ T5934] tomoyo_realpath_from_path+0x57c/0x5c0 [ 93.634205][ T5934] ? tomoyo_domain+0xd6/0x120 [ 93.638923][ T5934] tomoyo_path_number_perm+0x248/0x5e0 [ 93.644512][ T5934] ? tomoyo_path_number_perm+0x217/0x5e0 [ 93.650178][ T5934] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 93.655719][ T5934] ? __fget_files+0x28/0x460 [ 93.660383][ T5934] security_file_ioctl+0x70/0xa0 [ 93.665409][ T5934] __se_sys_ioctl+0x48/0x170 [ 93.670095][ T5934] do_syscall_64+0x55/0xb0 [ 93.674572][ T5934] ? clear_bhb_loop+0x40/0x90 [ 93.679303][ T5934] ? clear_bhb_loop+0x40/0x90 [ 93.684026][ T5934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.689986][ T5934] RIP: 0033:0x7fa2eb1a8f19 [ 93.694444][ T5934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.714107][ T5934] RSP: 002b:00007fa2ec115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.722553][ T5934] RAX: ffffffffffffffda RBX: 00007fa2eb425fa0 RCX: 00007fa2eb1a8f19 [ 93.730557][ T5934] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 93.738559][ T5934] RBP: 00007fa2eb237f6d R08: 0000000000000000 R09: 0000000000000000 [ 93.746572][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.754571][ T5934] R13: 00007fa2eb426038 R14: 00007fa2eb425fa0 R15: 00007ffeb71f6dd8 [ 93.762594][ T5934] [ 93.802338][ T5939] ubi16: attaching mtd0 [ 93.807828][ T5939] ubi16 error: ubi_attach_mtd_dev: bad VID header (34078720) or data offsets (34078784) [ 93.810276][ T5934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.826542][ T5934] binder: 5933:5934 ioctl c0306201 0 returned -14 [ 94.522409][ T28] audit: type=1400 audit(1794382258.525:3): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="f//" pid=5966 comm="syz.3.40" [ 95.312507][ T5997] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 96.209363][ T6032] device-mapper: table: 248:0: striped: Invalid chunk_size (-EINVAL) [ 96.224827][ T6032] device-mapper: ioctl: error adding target to table [ 96.441944][ T5777] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.756014][ T6058] fscrypt (sda1, inode 1262): Unsupported encryption modes (contents 0, filenames 0) [ 97.010933][ T28] audit: type=1807 audit(1794382261.015:4): action=appraise func=FIRMWARE_CHECK res=1 [ 97.032400][ T6067] ima: policy update completed [ 97.042958][ T28] audit: type=1802 audit(1794382261.045:5): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.73" res=1 errno=0 [ 97.213027][ T6079] comedi comedi1: dt2815: I/O port conflict (0x10000101,2) [ 97.260860][ T789] cfg80211: failed to load regulatory.db [ 97.412297][ T6082] FAULT_INJECTION: forcing a failure. [ 97.412297][ T6082] name fail_futex, interval 1, probability 0, space 0, times 1 [ 97.447282][ T6089] syz.2.80[6089]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.463531][ T6082] CPU: 0 PID: 6082 Comm: syz.0.77 Not tainted syzkaller #0 [ 97.470821][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 97.480927][ T6082] Call Trace: [ 97.484248][ T6082] [ 97.487247][ T6082] dump_stack_lvl+0x18c/0x250 [ 97.492091][ T6082] ? show_regs_print_info+0x20/0x20 [ 97.497358][ T6082] ? load_image+0x420/0x420 [ 97.501926][ T6082] ? kasan_save_stack+0x4d/0x60 [ 97.506869][ T6082] ? __kasan_record_aux_stack+0xaf/0xc0 [ 97.512512][ T6082] ? call_rcu+0x153/0x900 [ 97.516909][ T6082] ? task_work_run+0x1d4/0x260 [ 97.521734][ T6082] ? exit_to_user_mode_prepare+0xee/0x180 [ 97.527563][ T6082] ? syscall_exit_to_user_mode+0x1a/0x50 [ 97.533248][ T6082] ? do_syscall_64+0x61/0xb0 [ 97.537903][ T6082] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.544031][ T6082] should_fail_ex+0x394/0x4c0 [ 97.548777][ T6082] get_futex_key+0x134/0xf40 [ 97.553425][ T6082] ? futex_setup_timer+0xc0/0xc0 [ 97.558427][ T6082] futex_wake+0x127/0x4f0 [ 97.562825][ T6082] ? lock_chain_count+0x20/0x20 [ 97.567771][ T6082] ? futex_wake_mark+0x150/0x150 [ 97.572870][ T6082] do_futex+0x35d/0x3e0 [ 97.577074][ T6082] ? rcu_force_quiescent_state+0x220/0x220 [ 97.582952][ T6082] ? __ia32_sys_get_robust_list+0x110/0x110 [ 97.588896][ T6082] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 97.595029][ T6082] __se_sys_futex+0x3a9/0x440 [ 97.599775][ T6082] ? __x64_sys_futex+0xf0/0xf0 [ 97.604620][ T6082] ? __x64_sys_futex+0x21/0xf0 [ 97.609443][ T6082] do_syscall_64+0x55/0xb0 [ 97.614013][ T6082] ? clear_bhb_loop+0x40/0x90 [ 97.618749][ T6082] ? clear_bhb_loop+0x40/0x90 [ 97.623500][ T6082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.629454][ T6082] RIP: 0033:0x7f5630fa8f19 [ 97.633963][ T6082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.653666][ T6082] RSP: 002b:00007f5631e100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.662160][ T6082] RAX: ffffffffffffffda RBX: 00007f5631225fa8 RCX: 00007f5630fa8f19 [ 97.670192][ T6082] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5631225fac [ 97.678222][ T6082] RBP: 00007f5631225fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 97.686254][ T6082] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 97.694307][ T6082] R13: 00007f5631226038 R14: 00007ffdfa413b90 R15: 00007ffdfa413c78 [ 97.702352][ T6082] [ 97.774298][ T6093] FAULT_INJECTION: forcing a failure. [ 97.774298][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 97.820576][ T6093] CPU: 0 PID: 6093 Comm: syz.3.81 Not tainted syzkaller #0 [ 97.827874][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 97.837987][ T6093] Call Trace: [ 97.841313][ T6093] [ 97.844291][ T6093] dump_stack_lvl+0x18c/0x250 [ 97.849057][ T6093] ? show_regs_print_info+0x20/0x20 [ 97.854325][ T6093] ? load_image+0x420/0x420 [ 97.858903][ T6093] ? __lock_acquire+0x7eb0/0x7eb0 [ 97.864006][ T6093] should_fail_ex+0x394/0x4c0 [ 97.868755][ T6093] should_failslab+0x9/0x20 [ 97.873310][ T6093] slab_pre_alloc_hook+0x59/0x300 [ 97.878405][ T6093] kmem_cache_alloc+0x5a/0x2d0 [ 97.883251][ T6093] ? ceph_msg_new2+0x3a/0x490 [ 97.887979][ T6093] ceph_msg_new2+0x3a/0x490 [ 97.892539][ T6093] ceph_monc_init+0x518/0xa70 [ 97.897260][ T6093] ceph_create_client+0x225/0x300 [ 97.902324][ T6093] ceph_get_tree+0x1ca/0x1800 [ 97.907036][ T6093] ? bpf_lsm_capable+0x9/0x10 [ 97.911737][ T6093] ? security_capable+0x89/0xb0 [ 97.916624][ T6093] vfs_get_tree+0x8c/0x280 [ 97.921161][ T6093] vfs_cmd_create+0xe3/0x230 [ 97.925797][ T6093] __se_sys_fsconfig+0x70a/0x850 [ 97.930788][ T6093] ? __x64_sys_fsconfig+0xc0/0xc0 [ 97.935869][ T6093] ? lockdep_hardirqs_on+0x98/0x150 [ 97.941105][ T6093] ? __x64_sys_fsconfig+0x20/0xc0 [ 97.946172][ T6093] do_syscall_64+0x55/0xb0 [ 97.950631][ T6093] ? clear_bhb_loop+0x40/0x90 [ 97.955364][ T6093] ? clear_bhb_loop+0x40/0x90 [ 97.960099][ T6093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.966027][ T6093] RIP: 0033:0x7fa2eb1a8f19 [ 97.970491][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.990147][ T6093] RSP: 002b:00007fa2ec115028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 97.998605][ T6093] RAX: ffffffffffffffda RBX: 00007fa2eb425fa0 RCX: 00007fa2eb1a8f19 [ 98.006607][ T6093] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 98.014604][ T6093] RBP: 00007fa2eb237f6d R08: 0004000000000000 R09: 0000000000000000 [ 98.022602][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.030624][ T6093] R13: 00007fa2eb426038 R14: 00007fa2eb425fa0 R15: 00007ffeb71f6dd8 [ 98.038671][ T6093] [ 98.521713][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 98.676158][ T6114] binder: 6113:6114 unknown command 1074553619 [ 98.682425][ T6114] binder: 6113:6114 ioctl c0306201 2000000001c0 returned -22 [ 98.696070][ T999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.722289][ T6114] binder: 6113:6114 ioctl 400c620e 200000000340 returned -22 [ 98.809038][ T6116] binder: 6113:6116 ioctl 400c620e 200000000840 returned -22 [ 98.846481][ T6116] binder: 6113:6116 unknown command 1074291477 [ 98.852365][ T999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.852709][ T6116] binder: 6113:6116 ioctl c0306201 200000000880 returned -22 [ 98.992689][ T999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.129686][ T999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.622686][ T6135] FAULT_INJECTION: forcing a failure. [ 99.622686][ T6135] name failslab, interval 1, probability 0, space 0, times 0 [ 99.669429][ T6135] CPU: 0 PID: 6135 Comm: syz.2.96 Not tainted syzkaller #0 [ 99.676737][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.686865][ T6135] Call Trace: [ 99.690186][ T6135] [ 99.693182][ T6135] dump_stack_lvl+0x18c/0x250 [ 99.697936][ T6135] ? show_regs_print_info+0x20/0x20 [ 99.703203][ T6135] ? load_image+0x420/0x420 [ 99.707782][ T6135] ? __might_sleep+0xe0/0xe0 [ 99.712439][ T6135] ? __lock_acquire+0x7eb0/0x7eb0 [ 99.717527][ T6135] should_fail_ex+0x394/0x4c0 [ 99.722273][ T6135] should_failslab+0x9/0x20 [ 99.726831][ T6135] slab_pre_alloc_hook+0x59/0x300 [ 99.732164][ T6135] ? security_sk_alloc+0x4b/0x130 [ 99.737249][ T6135] ? security_sk_alloc+0x4b/0x130 [ 99.742336][ T6135] __kmem_cache_alloc_node+0x53/0x260 [ 99.747743][ T6135] ? security_sk_alloc+0x4b/0x130 [ 99.752806][ T6135] __kmalloc+0xa7/0x240 [ 99.757001][ T6135] ? sk_prot_alloc+0xe7/0x210 [ 99.761721][ T6135] security_sk_alloc+0x4b/0x130 [ 99.766645][ T6135] sk_prot_alloc+0x101/0x210 [ 99.771323][ T6135] ? sk_alloc+0x24/0x350 [ 99.775637][ T6135] sk_alloc+0x3a/0x350 [ 99.779763][ T6135] tun_chr_open+0x79/0x510 [ 99.784240][ T6135] ? tun_chr_compat_ioctl+0x30/0x30 [ 99.789498][ T6135] misc_open+0x326/0x3a0 [ 99.793789][ T6135] chrdev_open+0x58c/0x600 [ 99.798259][ T6135] ? cd_forget+0x160/0x160 [ 99.802716][ T6135] ? fsnotify_perm+0x3ed/0x5e0 [ 99.807518][ T6135] do_dentry_open+0x880/0x14b0 [ 99.812321][ T6135] ? cd_forget+0x160/0x160 [ 99.816771][ T6135] path_openat+0x284f/0x3270 [ 99.821428][ T6135] ? do_sys_openat2+0xda/0x1d0 [ 99.826378][ T6135] ? do_filp_open+0x430/0x430 [ 99.831139][ T6135] do_filp_open+0x1f2/0x430 [ 99.835696][ T6135] ? vfs_tmpfile+0x620/0x620 [ 99.840347][ T6135] ? _raw_spin_unlock+0x28/0x40 [ 99.845232][ T6135] ? alloc_fd+0x590/0x640 [ 99.849607][ T6135] do_sys_openat2+0x134/0x1d0 [ 99.854323][ T6135] ? do_sys_open+0xe0/0xe0 [ 99.858778][ T6135] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 99.864797][ T6135] ? lock_chain_count+0x20/0x20 [ 99.869692][ T6135] __x64_sys_openat+0x139/0x160 [ 99.874588][ T6135] do_syscall_64+0x55/0xb0 [ 99.879042][ T6135] ? clear_bhb_loop+0x40/0x90 [ 99.883759][ T6135] ? clear_bhb_loop+0x40/0x90 [ 99.888477][ T6135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.894406][ T6135] RIP: 0033:0x7fd34a3a8f19 [ 99.898860][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.918508][ T6135] RSP: 002b:00007fd34b1d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.926972][ T6135] RAX: ffffffffffffffda RBX: 00007fd34a625fa0 RCX: 00007fd34a3a8f19 [ 99.934973][ T6135] RDX: 0000000000040241 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 99.942973][ T6135] RBP: 00007fd34a437f6d R08: 0000000000000000 R09: 0000000000000000 [ 99.951065][ T6135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.959069][ T6135] R13: 00007fd34a626038 R14: 00007fd34a625fa0 R15: 00007fff0aa63658 [ 99.967104][ T6135] [ 100.185286][ T5853] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.202689][ T6137] FAULT_INJECTION: forcing a failure. [ 100.202689][ T6137] name failslab, interval 1, probability 0, space 0, times 0 [ 100.216024][ T6137] CPU: 0 PID: 6137 Comm: syz.1.97 Not tainted syzkaller #0 [ 100.223309][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 100.233409][ T6137] Call Trace: [ 100.236767][ T6137] [ 100.239754][ T6137] dump_stack_lvl+0x18c/0x250 [ 100.244543][ T6137] ? show_regs_print_info+0x20/0x20 [ 100.249838][ T6137] ? load_image+0x420/0x420 [ 100.254404][ T6137] ? __might_sleep+0xe0/0xe0 [ 100.259064][ T6137] ? __lock_acquire+0x7eb0/0x7eb0 [ 100.264247][ T6137] should_fail_ex+0x394/0x4c0 [ 100.269005][ T6137] should_failslab+0x9/0x20 [ 100.273572][ T6137] slab_pre_alloc_hook+0x59/0x300 [ 100.278677][ T6137] ? ops_init+0x8b/0x640 [ 100.282957][ T6137] ? ops_init+0x8b/0x640 [ 100.287228][ T6137] __kmem_cache_alloc_node+0x53/0x260 [ 100.292654][ T6137] ? ops_init+0x8b/0x640 [ 100.296945][ T6137] __kmalloc+0xa7/0x240 [ 100.301225][ T6137] ? ctinfo_init_net+0x15a/0x190 [ 100.306226][ T6137] ops_init+0x8b/0x640 [ 100.310345][ T6137] setup_net+0x3b6/0xa20 [ 100.314713][ T6137] ? copy_net_ns+0x530/0x530 [ 100.319347][ T6137] ? copy_net_ns+0x347/0x530 [ 100.323968][ T6137] ? down_read_killable+0x1d0/0x340 [ 100.329242][ T6137] copy_net_ns+0x361/0x530 [ 100.333719][ T6137] create_new_namespaces+0x3ce/0x700 [ 100.339067][ T6137] unshare_nsproxy_namespaces+0x11a/0x160 [ 100.344847][ T6137] ksys_unshare+0x4fa/0x8f0 [ 100.349396][ T6137] ? sighand_ctor+0x50/0x50 [ 100.353932][ T6137] ? lock_chain_count+0x20/0x20 [ 100.358914][ T6137] ? syscall_enter_from_user_mode+0x25/0x80 [ 100.364871][ T6137] __x64_sys_unshare+0x38/0x40 [ 100.369673][ T6137] do_syscall_64+0x55/0xb0 [ 100.374128][ T6137] ? clear_bhb_loop+0x40/0x90 [ 100.378840][ T6137] ? clear_bhb_loop+0x40/0x90 [ 100.383556][ T6137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.389489][ T6137] RIP: 0033:0x7f3009fa8f19 [ 100.393956][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.413588][ T6137] RSP: 002b:00007f300ad8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 100.422050][ T6137] RAX: ffffffffffffffda RBX: 00007f300a225fa0 RCX: 00007f3009fa8f19 [ 100.430064][ T6137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 100.438085][ T6137] RBP: 00007f300a037f6d R08: 0000000000000000 R09: 0000000000000000 [ 100.446087][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.454103][ T6137] R13: 00007f300a226038 R14: 00007f300a225fa0 R15: 00007ffd07f20578 [ 100.462117][ T6137] [ 100.507851][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.521000][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.534341][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.542711][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.554493][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.562196][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.575472][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 100.585745][ T5853] usb 4-1: config 9 has an invalid interface number: 178 but max is 0 [ 100.594326][ T5853] usb 4-1: config 9 has no interface number 0 [ 100.635089][ T5853] usb 4-1: config 9 interface 178 has no altsetting 0 [ 100.648434][ T5853] usb 4-1: New USB device found, idVendor=168c, idProduct=0001, bcdDevice=b5.c0 [ 100.660014][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.688651][ T5853] usb 4-1: Product: syz [ 100.692888][ T5853] usb 4-1: Manufacturer: syz [ 100.723160][ T5853] usb 4-1: SerialNumber: syz [ 100.782974][ T6140] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.846917][ T6148] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 101.041325][ T5853] usb 4-1: Could not find all expected endpoints [ 101.085904][ T5853] usb 4-1: USB disconnect, device number 2 [ 102.113581][ T6187] warning: `syz.2.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.366883][ T6140] chnl_net:caif_netlink_parms(): no params data found [ 102.404849][ T8] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 102.510131][ T999] hsr_slave_0: left promiscuous mode [ 102.529265][ T999] hsr_slave_1: left promiscuous mode [ 102.547443][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.575996][ T8] usb 3-1: device descriptor read/64, error -71 [ 102.580199][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.613785][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.631865][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.656611][ T999] bridge_slave_1: left allmulticast mode [ 102.663757][ T999] bridge_slave_1: left promiscuous mode [ 102.671686][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.689558][ T999] bridge_slave_0: left allmulticast mode [ 102.695430][ T52] Bluetooth: hci2: command tx timeout [ 102.701375][ T999] bridge_slave_0: left promiscuous mode [ 102.707877][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.761476][ T999] veth1_macvtap: left promiscuous mode [ 102.781521][ T999] veth0_macvtap: left promiscuous mode [ 102.791864][ T999] veth1_vlan: left promiscuous mode [ 102.800523][ T999] veth0_vlan: left promiscuous mode [ 102.864880][ T8] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.024911][ T8] usb 3-1: device descriptor read/64, error -71 [ 103.148310][ T8] usb usb3-port1: attempt power cycle [ 103.575082][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 103.601538][ T999] team0 (unregistering): Port device team_slave_1 removed [ 103.627742][ T8] usb 3-1: device descriptor read/8, error -71 [ 103.651011][ T999] team0 (unregistering): Port device team_slave_0 removed [ 103.697993][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.739566][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.895058][ T8] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 103.936741][ T8] usb 3-1: device descriptor read/8, error -71 [ 104.060173][ T8] usb usb3-port1: unable to enumerate USB device [ 104.069474][ T999] bond0 (unregistering): Released all slaves [ 104.447465][ T9] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz1 [ 104.468481][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.475800][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.476001][ T6140] bridge_slave_0: entered allmulticast mode [ 104.477574][ T6140] bridge_slave_0: entered promiscuous mode [ 104.487305][ T6140] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.487412][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.487574][ T6140] bridge_slave_1: entered allmulticast mode [ 104.491609][ T9] wiimote 0005:057E:0306.0001: New device registered [ 104.497977][ T6140] bridge_slave_1: entered promiscuous mode [ 104.607038][ T6140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.610292][ T6140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.685562][ T6070] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.751796][ T6140] team0: Port device team_slave_0 added [ 104.768498][ T6140] team0: Port device team_slave_1 added [ 104.775622][ T52] Bluetooth: hci2: command tx timeout [ 104.823223][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.830380][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.858462][ T6140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.880204][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.896446][ T6070] usb 4-1: config 0 has no interfaces? [ 104.902013][ T6070] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 104.914968][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.951540][ T6070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.961250][ T6140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.978642][ T6070] usb 4-1: config 0 descriptor?? [ 105.140909][ T6140] hsr_slave_0: entered promiscuous mode [ 105.161458][ T6140] hsr_slave_1: entered promiscuous mode [ 105.194563][ T1193] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 105.205263][ T6140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.212906][ T6140] Cannot create hsr debugfs directory [ 105.222926][ T6213] wiimote 0005:057E:0306.0001: Device removed [ 105.246251][ T8] usb 4-1: USB disconnect, device number 3 [ 105.302636][ T6236] netlink: 22960 bytes leftover after parsing attributes in process `syz.2.116'. [ 105.331086][ T1193] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 105.421407][ T1193] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 105.456602][ T1193] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 105.884543][ T6140] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.897560][ T6140] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.912504][ T6140] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.930615][ T6140] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.159000][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.220832][ T6140] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.252435][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.259733][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.288848][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.296245][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.374662][ T6140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.783876][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.855476][ T52] Bluetooth: hci2: command tx timeout [ 107.383315][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.392897][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.407832][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.431679][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.626641][ T6140] veth0_vlan: entered promiscuous mode [ 107.764045][ T6140] veth1_vlan: entered promiscuous mode [ 107.868442][ T6140] veth0_macvtap: entered promiscuous mode [ 107.893724][ T6140] veth1_macvtap: entered promiscuous mode [ 107.947148][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.968497][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.991308][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.007761][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.028856][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.078695][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.109032][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.130599][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.164769][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.182223][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.200254][ T6140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.216367][ T6140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.227641][ T6140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.240446][ T6140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.425662][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.433567][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.482085][ T6319] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 108.525792][ T6321] FAULT_INJECTION: forcing a failure. [ 108.525792][ T6321] name failslab, interval 1, probability 0, space 0, times 0 [ 108.553174][ T6321] CPU: 0 PID: 6321 Comm: syz.1.134 Not tainted syzkaller #0 [ 108.560594][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 108.570715][ T6321] Call Trace: [ 108.574103][ T6321] [ 108.577089][ T6321] dump_stack_lvl+0x18c/0x250 [ 108.581842][ T6321] ? show_regs_print_info+0x20/0x20 [ 108.587111][ T6321] ? load_image+0x420/0x420 [ 108.591686][ T6321] ? __might_sleep+0xe0/0xe0 [ 108.596343][ T6321] ? __lock_acquire+0x7eb0/0x7eb0 [ 108.601429][ T6321] ? trace_raw_output_contention_end+0xd0/0xd0 [ 108.607678][ T6321] should_fail_ex+0x394/0x4c0 [ 108.612423][ T6321] should_failslab+0x9/0x20 [ 108.616995][ T6321] slab_pre_alloc_hook+0x59/0x300 [ 108.622110][ T6321] ? __lock_acquire+0x7eb0/0x7eb0 [ 108.627217][ T6321] ? __rb_allocate_pages+0x197/0x6b0 [ 108.632711][ T6321] ? __rb_allocate_pages+0x197/0x6b0 [ 108.638064][ T6321] __kmem_cache_alloc_node+0x53/0x260 [ 108.643514][ T6321] ? __rb_allocate_pages+0x197/0x6b0 [ 108.648871][ T6321] __kmalloc_node+0xa6/0x240 [ 108.653541][ T6321] __rb_allocate_pages+0x197/0x6b0 [ 108.658731][ T6321] ring_buffer_resize+0x4e2/0x1080 [ 108.663933][ T6321] ? tracing_stop+0x20/0x20 [ 108.668515][ T6321] __tracing_resize_ring_buffer+0x74/0x2a0 [ 108.674422][ T6321] tracing_update_buffers+0x47/0x60 [ 108.679690][ T6321] ftrace_event_write+0xfc/0x2b0 [ 108.684695][ T6321] ? show_header+0x1f0/0x1f0 [ 108.689361][ T6321] ? show_header+0x1f0/0x1f0 [ 108.694018][ T6321] vfs_write+0x299/0x9a0 [ 108.698345][ T6321] ? file_end_write+0x250/0x250 [ 108.703267][ T6321] ? __fget_files+0x28/0x460 [ 108.707925][ T6321] ? __fget_files+0x3fc/0x460 [ 108.712672][ T6321] ? __fdget_pos+0x2a3/0x330 [ 108.717303][ T6321] ? ksys_write+0x74/0x260 [ 108.721774][ T6321] ksys_write+0x151/0x260 [ 108.726169][ T6321] ? __ia32_sys_read+0x90/0x90 [ 108.730987][ T6321] ? lockdep_hardirqs_on+0x98/0x150 [ 108.736225][ T6321] do_syscall_64+0x55/0xb0 [ 108.740681][ T6321] ? clear_bhb_loop+0x40/0x90 [ 108.745392][ T6321] ? clear_bhb_loop+0x40/0x90 [ 108.750109][ T6321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.756037][ T6321] RIP: 0033:0x7f3009fa8f19 [ 108.760574][ T6321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.780485][ T6321] RSP: 002b:00007f300ad8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.788932][ T6321] RAX: ffffffffffffffda RBX: 00007f300a225fa0 RCX: 00007f3009fa8f19 [ 108.796932][ T6321] RDX: 0000000000000048 RSI: 0000200000000680 RDI: 0000000000000003 [ 108.804942][ T6321] RBP: 00007f300a037f6d R08: 0000000000000000 R09: 0000000000000000 [ 108.812948][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.820959][ T6321] R13: 00007f300a226038 R14: 00007f300a225fa0 R15: 00007ffd07f20578 [ 108.828981][ T6321] [ 108.836215][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.844104][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.934906][ T52] Bluetooth: hci2: command tx timeout [ 109.613211][ T6352] input: syz0 as /devices/virtual/input/input8 [ 109.733741][ T6360] FAULT_INJECTION: forcing a failure. [ 109.733741][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 109.765197][ T6360] CPU: 0 PID: 6360 Comm: syz.4.144 Not tainted syzkaller #0 [ 109.772597][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 109.782710][ T6360] Call Trace: [ 109.786045][ T6360] [ 109.789026][ T6360] dump_stack_lvl+0x18c/0x250 [ 109.793767][ T6360] ? show_regs_print_info+0x20/0x20 [ 109.799123][ T6360] ? load_image+0x420/0x420 [ 109.803692][ T6360] ? __might_sleep+0xe0/0xe0 [ 109.808435][ T6360] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.813528][ T6360] should_fail_ex+0x394/0x4c0 [ 109.818276][ T6360] should_failslab+0x9/0x20 [ 109.822824][ T6360] slab_pre_alloc_hook+0x59/0x300 [ 109.827901][ T6360] ? is_bpf_text_address+0x26/0x2a0 [ 109.833199][ T6360] ? __kernfs_new_node+0xaa/0x7f0 [ 109.838308][ T6360] ? __kernfs_new_node+0xaa/0x7f0 [ 109.843398][ T6360] __kmem_cache_alloc_node+0x53/0x260 [ 109.848866][ T6360] ? __kernfs_new_node+0xaa/0x7f0 [ 109.853963][ T6360] __kmalloc_node_track_caller+0xa4/0x230 [ 109.859755][ T6360] kstrdup+0x3b/0x80 [ 109.863933][ T6360] __kernfs_new_node+0xaa/0x7f0 [ 109.868892][ T6360] ? kernfs_new_node+0x260/0x260 [ 109.873905][ T6360] ? verify_lock_unused+0x140/0x140 [ 109.879162][ T6360] ? stack_trace_save+0xaa/0x100 [ 109.884203][ T6360] kernfs_new_node+0x14c/0x260 [ 109.889082][ T6360] kernfs_create_dir_ns+0x44/0x120 [ 109.894293][ T6360] sysfs_create_dir_ns+0x130/0x2a0 [ 109.899504][ T6360] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.904619][ T6360] ? sysfs_warn_dup+0xa0/0xa0 [ 109.909391][ T6360] ? do_raw_spin_unlock+0x121/0x230 [ 109.914656][ T6360] kobject_add_internal+0x617/0xc90 [ 109.916985][ T6362] FAULT_INJECTION: forcing a failure. [ 109.916985][ T6362] name failslab, interval 1, probability 0, space 0, times 0 [ 109.919907][ T6360] kobject_add+0x164/0x240 [ 109.919940][ T6360] ? kobject_init+0x1d0/0x1d0 [ 109.941705][ T6360] ? bus_get_dev_root+0x127/0x150 [ 109.946794][ T6360] ? get_device_parent+0x387/0x390 [ 109.951959][ T6360] ? dev_attr_store+0x90/0x90 [ 109.956696][ T6360] device_add+0x3fa/0xc40 [ 109.961081][ T6360] iommufd_test+0x121d/0x2a20 [ 109.965820][ T6360] ? iommufd_selftest_destroy+0xf0/0xf0 [ 109.971528][ T6360] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.976659][ T6360] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.981745][ T6360] ? __might_fault+0xaa/0x120 [ 109.986476][ T6360] ? __might_fault+0xaa/0x120 [ 109.991204][ T6360] iommufd_fops_ioctl+0x48b/0x540 [ 109.996293][ T6360] ? iommufd_ctx_put+0x40/0x40 [ 110.001117][ T6360] ? __fget_files+0x28/0x460 [ 110.005776][ T6360] ? bpf_lsm_file_ioctl+0x9/0x10 [ 110.010760][ T6360] ? security_file_ioctl+0x80/0xa0 [ 110.015923][ T6360] ? iommufd_ctx_put+0x40/0x40 [ 110.020765][ T6360] __se_sys_ioctl+0xfd/0x170 [ 110.025407][ T6360] do_syscall_64+0x55/0xb0 [ 110.026181][ T5777] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 110.029859][ T6360] ? clear_bhb_loop+0x40/0x90 [ 110.029893][ T6360] ? clear_bhb_loop+0x40/0x90 [ 110.046906][ T6360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.052864][ T6360] RIP: 0033:0x7f91f6ba8f19 [ 110.057337][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.077003][ T6360] RSP: 002b:00007f91f7b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.085480][ T6360] RAX: ffffffffffffffda RBX: 00007f91f6e25fa0 RCX: 00007f91f6ba8f19 [ 110.093509][ T6360] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 110.101530][ T6360] RBP: 00007f91f6c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 110.109553][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.117593][ T6360] R13: 00007f91f6e26038 R14: 00007f91f6e25fa0 R15: 00007ffd9b2ff628 [ 110.125627][ T6360] [ 110.133291][ T6362] CPU: 1 PID: 6362 Comm: syz.2.145 Not tainted syzkaller #0 [ 110.140670][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 110.150811][ T6362] Call Trace: [ 110.154169][ T6362] [ 110.157187][ T6362] dump_stack_lvl+0x18c/0x250 [ 110.161940][ T6362] ? show_regs_print_info+0x20/0x20 [ 110.167220][ T6362] ? load_image+0x420/0x420 [ 110.171794][ T6362] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.172227][ T6360] kobject: kobject_add_internal failed for iommufd_mock1 (error: -12 parent: devices) [ 110.176872][ T6362] should_fail_ex+0x394/0x4c0 [ 110.176910][ T6362] should_failslab+0x9/0x20 [ 110.176932][ T6362] slab_pre_alloc_hook+0x59/0x300 [ 110.200820][ T6362] ? do_replace+0x34b/0x460 [ 110.205402][ T6362] ? do_ebt_set_ctl+0x273/0xf20 [ 110.210322][ T6362] ? nf_setsockopt+0x263/0x280 [ 110.215164][ T6362] kmem_cache_alloc_node+0x5e/0x320 [ 110.220428][ T6362] ? alloc_vmap_area+0x1b4/0x1e50 [ 110.225527][ T6362] alloc_vmap_area+0x1b4/0x1e50 [ 110.230559][ T6362] ? vm_map_ram+0xcf0/0xcf0 [ 110.235125][ T6362] ? rcu_is_watching+0x15/0xb0 [ 110.239966][ T6362] __get_vm_area_node+0x162/0x370 [ 110.245100][ T6362] __vmalloc_node_range+0x36f/0x1320 [ 110.250478][ T6362] ? do_replace_finish+0x77/0x18c0 [ 110.255667][ T6362] ? verify_lock_unused+0x140/0x140 [ 110.260958][ T6362] ? __kasan_unpoison_vmalloc+0x70/0xa0 [ 110.266664][ T6362] ? free_vm_area+0x50/0x50 [ 110.271247][ T6362] ? do_replace_finish+0x77/0x18c0 [ 110.276427][ T6362] __vmalloc+0x7a/0x90 [ 110.280565][ T6362] ? do_replace_finish+0x77/0x18c0 [ 110.285746][ T6362] do_replace_finish+0x77/0x18c0 [ 110.290841][ T6362] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.295927][ T6362] ? __might_fault+0xaa/0x120 [ 110.300663][ T6362] ? __might_fault+0xc6/0x120 [ 110.305432][ T6362] ? __might_fault+0xaa/0x120 [ 110.310166][ T6362] do_replace+0x34b/0x460 [ 110.314566][ T6362] ? do_ebt_get_ctl+0x1d30/0x1d30 [ 110.319785][ T6362] ? bpf_lsm_capable+0x9/0x10 [ 110.324516][ T6362] ? security_capable+0x89/0xb0 [ 110.329439][ T6362] do_ebt_set_ctl+0x273/0xf20 [ 110.334213][ T6362] ? ebt_pernet_exit+0x90/0x90 [ 110.339037][ T6362] ? print_unlock_imbalance_bug+0x160/0x160 [ 110.345012][ T6362] ? do_ip_setsockopt+0x1afe/0x2d50 [ 110.350313][ T6362] ? nf_setsockopt+0x21c/0x280 [ 110.355150][ T6362] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.360221][ T6362] ? rcu_is_watching+0x15/0xb0 [ 110.365036][ T6362] ? trace_contention_end+0x39/0xe0 [ 110.370285][ T6362] ? __mutex_lock+0x30d/0xce0 [ 110.375054][ T6362] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 110.380749][ T6362] ? mutex_unlock+0x10/0x10 [ 110.385311][ T6362] ? aa_sk_perm+0x7bb/0x8e0 [ 110.389879][ T6362] ? aa_af_perm+0x330/0x330 [ 110.394454][ T6362] nf_setsockopt+0x263/0x280 [ 110.399116][ T6362] ? sock_common_recvmsg+0x190/0x190 [ 110.404722][ T6362] do_sock_setsockopt+0x175/0x1a0 [ 110.409807][ T6362] ? __fdget+0x180/0x210 [ 110.414112][ T6362] __x64_sys_setsockopt+0x182/0x200 [ 110.419369][ T6362] do_syscall_64+0x55/0xb0 [ 110.423856][ T6362] ? clear_bhb_loop+0x40/0x90 [ 110.428596][ T6362] ? clear_bhb_loop+0x40/0x90 [ 110.433337][ T6362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.439355][ T6362] RIP: 0033:0x7fd34a3a8f19 [ 110.443798][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.463466][ T6362] RSP: 002b:00007fd34b1d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.472035][ T6362] RAX: ffffffffffffffda RBX: 00007fd34a625fa0 RCX: 00007fd34a3a8f19 [ 110.480070][ T6362] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 110.488106][ T6362] RBP: 00007fd34a437f6d R08: 0000000000000108 R09: 0000000000000000 [ 110.496137][ T6362] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 110.504171][ T6362] R13: 00007fd34a626038 R14: 00007fd34a625fa0 R15: 00007fff0aa63658 [ 110.512225][ T6362] [ 110.531337][ T6362] syz.2.145: vmalloc error: size 28672, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 110.553983][ T6362] CPU: 1 PID: 6362 Comm: syz.2.145 Not tainted syzkaller #0 [ 110.561359][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 110.571490][ T6362] Call Trace: [ 110.574810][ T6362] [ 110.577787][ T6362] dump_stack_lvl+0x18c/0x250 [ 110.582541][ T6362] ? show_regs_print_info+0x20/0x20 [ 110.587799][ T6362] ? load_image+0x420/0x420 [ 110.592353][ T6362] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 110.598860][ T6362] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 110.605422][ T6362] warn_alloc+0x246/0x340 [ 110.609813][ T6362] ? slab_free_freelist_hook+0x154/0x240 [ 110.615784][ T6362] ? zone_watermark_ok_safe+0x230/0x230 [ 110.621383][ T6362] ? __get_vm_area_node+0x17b/0x370 [ 110.626742][ T6362] ? __get_vm_area_node+0x17b/0x370 [ 110.632046][ T6362] __vmalloc_node_range+0x394/0x1320 [ 110.637399][ T6362] ? verify_lock_unused+0x140/0x140 [ 110.642719][ T6362] ? __kasan_unpoison_vmalloc+0x70/0xa0 [ 110.648342][ T6362] ? free_vm_area+0x50/0x50 [ 110.653100][ T6362] ? do_replace_finish+0x77/0x18c0 [ 110.658280][ T6362] __vmalloc+0x7a/0x90 [ 110.662420][ T6362] ? do_replace_finish+0x77/0x18c0 [ 110.667622][ T6362] do_replace_finish+0x77/0x18c0 [ 110.672655][ T6362] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.677728][ T6362] ? __might_fault+0xaa/0x120 [ 110.682456][ T6362] ? __might_fault+0xc6/0x120 [ 110.687167][ T6362] ? __might_fault+0xaa/0x120 [ 110.691880][ T6362] do_replace+0x34b/0x460 [ 110.696261][ T6362] ? do_ebt_get_ctl+0x1d30/0x1d30 [ 110.701340][ T6362] ? bpf_lsm_capable+0x9/0x10 [ 110.706045][ T6362] ? security_capable+0x89/0xb0 [ 110.711022][ T6362] do_ebt_set_ctl+0x273/0xf20 [ 110.715773][ T6362] ? ebt_pernet_exit+0x90/0x90 [ 110.720576][ T6362] ? print_unlock_imbalance_bug+0x160/0x160 [ 110.726517][ T6362] ? do_ip_setsockopt+0x1afe/0x2d50 [ 110.731767][ T6362] ? nf_setsockopt+0x21c/0x280 [ 110.736570][ T6362] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.741622][ T6362] ? rcu_is_watching+0x15/0xb0 [ 110.746422][ T6362] ? trace_contention_end+0x39/0xe0 [ 110.751651][ T6362] ? __mutex_lock+0x30d/0xce0 [ 110.756365][ T6362] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 110.762066][ T6362] ? mutex_unlock+0x10/0x10 [ 110.766594][ T6362] ? aa_sk_perm+0x7bb/0x8e0 [ 110.771259][ T6362] ? aa_af_perm+0x330/0x330 [ 110.775805][ T6362] nf_setsockopt+0x263/0x280 [ 110.780445][ T6362] ? sock_common_recvmsg+0x190/0x190 [ 110.785765][ T6362] do_sock_setsockopt+0x175/0x1a0 [ 110.790825][ T6362] ? __fdget+0x180/0x210 [ 110.795111][ T6362] __x64_sys_setsockopt+0x182/0x200 [ 110.800342][ T6362] do_syscall_64+0x55/0xb0 [ 110.804790][ T6362] ? clear_bhb_loop+0x40/0x90 [ 110.809501][ T6362] ? clear_bhb_loop+0x40/0x90 [ 110.814234][ T6362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.820162][ T6362] RIP: 0033:0x7fd34a3a8f19 [ 110.824612][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.844255][ T6362] RSP: 002b:00007fd34b1d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.852720][ T6362] RAX: ffffffffffffffda RBX: 00007fd34a625fa0 RCX: 00007fd34a3a8f19 [ 110.860722][ T6362] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 110.868897][ T6362] RBP: 00007fd34a437f6d R08: 0000000000000108 R09: 0000000000000000 [ 110.876892][ T6362] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 110.884887][ T6362] R13: 00007fd34a626038 R14: 00007fd34a625fa0 R15: 00007fff0aa63658 [ 110.892902][ T6362] [ 110.945799][ T5777] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 110.963864][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.992447][ T5777] usb 2-1: config 0 descriptor?? [ 111.031793][ T6362] Mem-Info: [ 111.035181][ T6362] active_anon:6179 inactive_anon:0 isolated_anon:0 [ 111.035181][ T6362] active_file:965 inactive_file:39977 isolated_file:0 [ 111.035181][ T6362] unevictable:768 dirty:56 writeback:0 [ 111.035181][ T6362] slab_reclaimable:10273 slab_unreclaimable:93865 [ 111.035181][ T6362] mapped:24397 shmem:1384 pagetables:640 [ 111.035181][ T6362] sec_pagetables:0 bounce:0 [ 111.035181][ T6362] kernel_misc_reclaimable:0 [ 111.035181][ T6362] free:1353591 free_pcp:12125 free_cma:0 [ 111.106757][ T6362] Node 0 active_anon:24616kB inactive_anon:0kB active_file:3860kB inactive_file:159704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97588kB dirty:212kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11004kB pagetables:2560kB sec_pagetables:0kB all_unreclaimable? no [ 111.144226][ T6362] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 111.184843][ T6362] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.242123][ T6362] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 111.252873][ T6362] Node 0 DMA32 free:1503532kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:24924kB inactive_anon:0kB active_file:3860kB inactive_file:158888kB unevictable:1536kB writepending:200kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:23548kB local_pcp:6736kB free_cma:0kB [ 111.292866][ T6362] lowmem_reserve[]: 0 0 0 0 0 [ 111.303662][ T6362] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:12kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 111.335795][ T6362] lowmem_reserve[]: 0 0 0 0 0 [ 111.370326][ T6362] Node 1 Normal free:3895468kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25116kB local_pcp:14924kB free_cma:0kB [ 111.417891][ T6362] lowmem_reserve[]: 0 0 0 0 0 [ 111.442065][ T6362] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.474326][ T6362] Node 0 DMA32: 173*4kB (ME) 77*8kB (UM) 31*16kB (ME) 13*32kB (UM) 8*64kB (UM) 39*128kB (UM) 6*256kB (UM) 4*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 363*4096kB (M) = 1502252kB [ 111.495514][ T5777] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 111.524973][ T6362] Node 0 Normal: [ 111.541086][ T5777] [drm] Initialized udl on minor 2 [ 111.556068][ T6362] 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 111.570337][ T6362] Node 1 Normal: 83*4kB (UME) 18*8kB (UME) 17*16kB (UME) 28*32kB (UME) 11*64kB (UE) 7*128kB (UME) 0*256kB 2*512kB (ME) 0*1024kB 2*2048kB (UE) 949*4096kB (M) = 3895468kB [ 111.593220][ T6362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.603858][ T6362] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.625144][ T6362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.637312][ T6362] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.667849][ T6362] 42326 total pagecache pages [ 111.682362][ T5777] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.719875][ T6362] 2 pages in swap cache [ 111.724143][ T6362] Free swap = 124720kB [ 111.744084][ T5777] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 111.755531][ T6362] Total swap = 124996kB [ 111.757496][ T789] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.759735][ T6362] 2097051 pages RAM [ 111.759747][ T6362] 0 pages HighMem/MovableOnly [ 111.759756][ T6362] 421729 pages reserved [ 111.811745][ T6362] 0 pages cma reserved [ 111.830934][ T789] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.855199][ T5777] usb 2-1: USB disconnect, device number 2 [ 111.920327][ T789] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 112.310198][ T6393] mmap: syz.3.151 (6393) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.635027][ T5777] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 112.840992][ T5777] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 112.882950][ T5777] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.907615][ T5777] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.935559][ T5777] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 112.956998][ T5777] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.980800][ T5777] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.005439][ T5777] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 113.044226][ T5777] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.086898][ T5777] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.399914][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 113.438908][ T6422] Bluetooth: MGMT ver 1.22 [ 113.514937][ T6142] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.618177][ T6425] syzkaller1: entered promiscuous mode [ 113.623856][ T6425] syzkaller1: entered allmulticast mode [ 113.672209][ T9] IPVS: starting estimator thread 0... [ 113.704923][ T6142] usb 2-1: Using ep0 maxpacket: 8 [ 113.712443][ T6142] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.734980][ T6142] usb 2-1: config 0 has no interfaces? [ 113.766093][ T6428] IPVS: using max 18 ests per chain, 43200 per kthread [ 113.775118][ T6142] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 113.804977][ T6142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.813060][ T6142] usb 2-1: Product: syz [ 113.845332][ T6142] usb 2-1: Manufacturer: syz [ 113.854810][ T6142] usb 2-1: SerialNumber: syz [ 113.868344][ T6142] usb 2-1: config 0 descriptor?? [ 113.991390][ T6433] Process accounting resumed [ 114.105155][ T6142] usb 2-1: USB disconnect, device number 3 [ 114.327528][ T6443] FAULT_INJECTION: forcing a failure. [ 114.327528][ T6443] name failslab, interval 1, probability 0, space 0, times 0 [ 114.346636][ T6443] CPU: 0 PID: 6443 Comm: syz.3.162 Not tainted syzkaller #0 [ 114.354026][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 114.364141][ T6443] Call Trace: [ 114.367470][ T6443] [ 114.370447][ T6443] dump_stack_lvl+0x18c/0x250 [ 114.375227][ T6443] ? show_regs_print_info+0x20/0x20 [ 114.380507][ T6443] ? load_image+0x420/0x420 [ 114.385091][ T6443] ? __might_sleep+0xe0/0xe0 [ 114.389750][ T6443] ? __lock_acquire+0x7eb0/0x7eb0 [ 114.394849][ T6443] should_fail_ex+0x394/0x4c0 [ 114.399600][ T6443] should_failslab+0x9/0x20 [ 114.404167][ T6443] slab_pre_alloc_hook+0x59/0x300 [ 114.409256][ T6443] ? comedi_alloc_spriv+0x2d/0xa0 [ 114.414357][ T6443] ? comedi_alloc_spriv+0x2d/0xa0 [ 114.419458][ T6443] __kmem_cache_alloc_node+0x53/0x260 [ 114.424904][ T6443] ? comedi_alloc_spriv+0x2d/0xa0 [ 114.429997][ T6443] __kmalloc+0xa7/0x240 [ 114.434225][ T6443] comedi_alloc_spriv+0x2d/0xa0 [ 114.439157][ T6443] subdev_8255_init+0x30/0x320 [ 114.444005][ T6443] das16m1_attach+0x7d9/0xae0 [ 114.448751][ T6443] comedi_device_attach+0x526/0x710 [ 114.454025][ T6443] comedi_unlocked_ioctl+0x6c4/0x1170 [ 114.459477][ T6443] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 114.465183][ T6443] ? comedi_poll+0x8e0/0x8e0 [ 114.469891][ T6443] ? __fget_files+0x28/0x460 [ 114.474579][ T6443] ? bpf_lsm_file_ioctl+0x9/0x10 [ 114.479574][ T6443] ? security_file_ioctl+0x80/0xa0 [ 114.484742][ T6443] ? comedi_poll+0x8e0/0x8e0 [ 114.489394][ T6443] __se_sys_ioctl+0xfd/0x170 [ 114.494051][ T6443] do_syscall_64+0x55/0xb0 [ 114.498529][ T6443] ? clear_bhb_loop+0x40/0x90 [ 114.503291][ T6443] ? clear_bhb_loop+0x40/0x90 [ 114.508090][ T6443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.516751][ T6443] RIP: 0033:0x7fa2eb1a8f19 [ 114.521234][ T6443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.540917][ T6443] RSP: 002b:00007fa2ec115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.549396][ T6443] RAX: ffffffffffffffda RBX: 00007fa2eb425fa0 RCX: 00007fa2eb1a8f19 [ 114.557432][ T6443] RDX: 00002000000002c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 114.565463][ T6443] RBP: 00007fa2eb237f6d R08: 0000000000000000 R09: 0000000000000000 [ 114.573491][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.581516][ T6443] R13: 00007fa2eb426038 R14: 00007fa2eb425fa0 R15: 00007ffeb71f6dd8 [ 114.589576][ T6443] [ 114.852611][ T6456] jffs2: notice: (6456) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.314879][ T789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.330704][ T5777] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 115.358347][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.396797][ T5777] usb 3-1: can't set config #168, error -71 [ 115.426506][ T5777] usb 3-1: USB disconnect, device number 6 [ 115.524824][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 115.531868][ T789] usb 2-1: config index 0 descriptor too short (expected 36, got 19) [ 115.553716][ T789] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 115.584619][ T789] usb 2-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.618201][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.642464][ T789] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 115.668867][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.694218][ T789] usb 2-1: config 0 descriptor?? [ 115.712478][ T789] appletouch 2-1:0.0: Could not find int-in endpoint [ 115.731753][ T789] appletouch: probe of 2-1:0.0 failed with error -5 [ 115.766481][ T789] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 115.919966][ T6463] FAULT_INJECTION: forcing a failure. [ 115.919966][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 115.975008][ T6463] CPU: 1 PID: 6463 Comm: syz.1.167 Not tainted syzkaller #0 [ 115.982384][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 115.992463][ T6463] Call Trace: [ 115.995800][ T6463] [ 115.998765][ T6463] dump_stack_lvl+0x18c/0x250 [ 116.003467][ T6463] ? show_regs_print_info+0x20/0x20 [ 116.008725][ T6463] ? load_image+0x420/0x420 [ 116.013262][ T6463] ? __might_sleep+0xe0/0xe0 [ 116.017886][ T6463] ? __lock_acquire+0x7eb0/0x7eb0 [ 116.022950][ T6463] should_fail_ex+0x394/0x4c0 [ 116.027673][ T6463] should_failslab+0x9/0x20 [ 116.032222][ T6463] slab_pre_alloc_hook+0x59/0x300 [ 116.037277][ T6463] kmem_cache_alloc+0x5a/0x2d0 [ 116.042078][ T6463] ? __kernfs_new_node+0xe5/0x7f0 [ 116.047143][ T6463] __kernfs_new_node+0xe5/0x7f0 [ 116.052042][ T6463] ? kernfs_new_node+0x260/0x260 [ 116.057020][ T6463] ? up_write+0x1be/0x410 [ 116.061383][ T6463] kernfs_new_node+0x14c/0x260 [ 116.066199][ T6463] __kernfs_create_file+0x4b/0x2e0 [ 116.071339][ T6463] sysfs_add_file_mode_ns+0x237/0x2f0 [ 116.076735][ T6463] sysfs_create_file_ns+0x12c/0x1b0 [ 116.082060][ T6463] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 116.088065][ T6463] ? module_add_driver+0x316/0x320 [ 116.093197][ T6463] ? sysfs_create_groups+0xa0/0x120 [ 116.098416][ T6463] bus_add_driver+0x478/0x630 [ 116.103148][ T6463] driver_register+0x23a/0x310 [ 116.107969][ T6463] usb_gadget_register_driver_owner+0xf9/0x270 [ 116.114155][ T6463] raw_ioctl+0x1613/0x3d80 [ 116.118599][ T6463] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 116.124250][ T6463] ? tomoyo_path_number_perm+0x217/0x5e0 [ 116.129901][ T6463] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 116.135381][ T6463] ? make_qualifier+0x260/0x260 [ 116.140269][ T6463] ? __fget_files+0x28/0x460 [ 116.144918][ T6463] ? bpf_lsm_file_ioctl+0x9/0x10 [ 116.149901][ T6463] ? security_file_ioctl+0x80/0xa0 [ 116.155052][ T6463] ? make_qualifier+0x260/0x260 [ 116.159922][ T6463] __se_sys_ioctl+0xfd/0x170 [ 116.164550][ T6463] do_syscall_64+0x55/0xb0 [ 116.169011][ T6463] ? clear_bhb_loop+0x40/0x90 [ 116.173736][ T6463] ? clear_bhb_loop+0x40/0x90 [ 116.178472][ T6463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.184402][ T6463] RIP: 0033:0x7f3009fa8bab [ 116.188835][ T6463] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 116.208457][ T6463] RSP: 002b:00007f300ad87f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.216899][ T6463] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f3009fa8bab [ 116.224899][ T6463] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 116.232900][ T6463] RBP: 00007f300ad88fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 116.240885][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.248871][ T6463] R13: 00002000000001c0 R14: 0000000000000000 R15: 00000000000010d0 [ 116.256890][ T6463] [ 116.259962][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.324973][ T6463] bus_add_driver: add_bind_files(raw-gadget.0) failed [ 116.348341][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.360399][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.404811][ T9] usb 2-1: USB disconnect, device number 4 [ 117.001858][ T6511] Zero length message leads to an empty skb [ 117.495004][ T6220] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.707966][ T6220] usb 2-1: config 0 has no interfaces? [ 117.732700][ T6220] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 117.805348][ T6220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.821965][ T6220] usb 2-1: config 0 descriptor?? [ 118.083836][ T789] usb 2-1: USB disconnect, device number 5 [ 118.935898][ T789] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.098534][ T52] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 119.168877][ T789] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 119.205637][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.234621][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.252784][ T789] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.276871][ T789] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.289292][ T789] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.297561][ T789] usb 3-1: Manufacturer: syz [ 119.310771][ T789] usb 3-1: config 0 descriptor?? [ 119.739334][ T789] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 119.770096][ T789] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 119.864474][ T789] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 120.151779][ T6558] loop0: detected capacity change from 0 to 4096 [ 120.352875][ T6562] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 120.390314][ T6562] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 120.516326][ T6562] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 120.531169][ T6562] loop0: [ 120.624326][ T789] usb 3-1: USB disconnect, device number 7 [ 121.542747][ T6593] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 121.556137][ T6593] netlink: 'syz.2.212': attribute type 2 has an invalid length. [ 123.421283][ T6643] FAULT_INJECTION: forcing a failure. [ 123.421283][ T6643] name failslab, interval 1, probability 0, space 0, times 0 [ 123.437166][ T6643] CPU: 0 PID: 6643 Comm: syz.4.230 Not tainted syzkaller #0 [ 123.444543][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 123.454658][ T6643] Call Trace: [ 123.458021][ T6643] [ 123.461002][ T6643] dump_stack_lvl+0x18c/0x250 [ 123.465747][ T6643] ? show_regs_print_info+0x20/0x20 [ 123.470991][ T6643] ? load_image+0x420/0x420 [ 123.475537][ T6643] ? __might_sleep+0xe0/0xe0 [ 123.480185][ T6643] ? __lock_acquire+0x7eb0/0x7eb0 [ 123.485266][ T6643] ? trace_contention_end+0x39/0xe0 [ 123.490507][ T6643] should_fail_ex+0x394/0x4c0 [ 123.495257][ T6643] should_failslab+0x9/0x20 [ 123.499850][ T6643] slab_pre_alloc_hook+0x59/0x300 [ 123.504931][ T6643] ? nvme_tcp_create_ctrl+0x733/0xbb0 [ 123.510385][ T6643] ? nvme_tcp_create_ctrl+0x733/0xbb0 [ 123.515797][ T6643] __kmem_cache_alloc_node+0x53/0x260 [ 123.521216][ T6643] ? nvme_tcp_create_ctrl+0x733/0xbb0 [ 123.526620][ T6643] __kmalloc+0xa7/0x240 [ 123.530815][ T6643] nvme_tcp_create_ctrl+0x733/0xbb0 [ 123.536067][ T6643] nvmf_dev_write+0x2383/0x2b50 [ 123.540973][ T6643] ? nvmf_host_put+0x190/0x190 [ 123.545759][ T6643] ? aa_file_perm+0x11b/0xee0 [ 123.550474][ T6643] ? futex_wait_queue+0x138/0x1b0 [ 123.555592][ T6643] ? common_file_perm+0x198/0x1f0 [ 123.560679][ T6643] ? fsnotify_perm+0x5d/0x5e0 [ 123.565390][ T6643] ? security_file_permission+0x79/0xa0 [ 123.570968][ T6643] ? nvmf_host_put+0x190/0x190 [ 123.576024][ T6643] vfs_write+0x299/0x9a0 [ 123.580310][ T6643] ? file_end_write+0x250/0x250 [ 123.585292][ T6643] ? __fget_files+0x28/0x460 [ 123.589921][ T6643] ? __fget_files+0x3fc/0x460 [ 123.594641][ T6643] ? __fdget_pos+0x1d8/0x330 [ 123.599272][ T6643] ? ksys_write+0x74/0x260 [ 123.603730][ T6643] ksys_write+0x151/0x260 [ 123.608106][ T6643] ? __ia32_sys_read+0x90/0x90 [ 123.612912][ T6643] ? lockdep_hardirqs_on+0x98/0x150 [ 123.618174][ T6643] do_syscall_64+0x55/0xb0 [ 123.622630][ T6643] ? clear_bhb_loop+0x40/0x90 [ 123.627344][ T6643] ? clear_bhb_loop+0x40/0x90 [ 123.632064][ T6643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.638001][ T6643] RIP: 0033:0x7f91f6ba8f19 [ 123.642448][ T6643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.662179][ T6643] RSP: 002b:00007f91f7b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.670833][ T6643] RAX: ffffffffffffffda RBX: 00007f91f6e25fa0 RCX: 00007f91f6ba8f19 [ 123.678839][ T6643] RDX: 0000000000000031 RSI: 0000200000000180 RDI: 0000000000000004 [ 123.686925][ T6643] RBP: 00007f91f6c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 123.695020][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.703032][ T6643] R13: 00007f91f6e26038 R14: 00007f91f6e25fa0 R15: 00007ffd9b2ff628 [ 123.711065][ T6643] [ 123.785055][ T6142] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 123.888978][ T6651] autofs4:pid:6651:autofs_fill_super: called with bogus options [ 123.990071][ T6142] usb 4-1: too many configurations: 181, using maximum allowed: 8 [ 124.000938][ T6653] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 124.015180][ T6142] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 124.030027][ T6142] usb 4-1: can't read configurations, error -71 [ 124.609278][ T6681] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 124.945367][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.096619][ T6710] device-mapper: raid: Choosing default region size of 4MiB [ 125.114021][ T6710] device-mapper: table: 248:1: raid: RAID device lookup failure (-ENOENT) [ 125.114053][ T6710] device-mapper: ioctl: error adding target to table [ 125.148330][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 125.150487][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.150565][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.150591][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.153121][ T23] usb 2-1: config 0 descriptor?? [ 125.599468][ T23] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 125.628509][ T6731] netlink: 156 bytes leftover after parsing attributes in process `syz.4.260'. [ 125.990317][ T789] usb 2-1: USB disconnect, device number 6 [ 126.795454][ T60] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 127.842545][ T5153] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 127.866677][ T5153] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 127.873972][ T5153] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 127.908240][ T5153] loop0: [ 127.981268][ T6808] netlink: 14 bytes leftover after parsing attributes in process `syz.3.278'. [ 128.173080][ T6818] FAULT_INJECTION: forcing a failure. [ 128.173080][ T6818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.209273][ T6818] CPU: 0 PID: 6818 Comm: syz.1.280 Not tainted syzkaller #0 [ 128.216656][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 128.226777][ T6818] Call Trace: [ 128.230105][ T6818] [ 128.233232][ T6818] dump_stack_lvl+0x18c/0x250 [ 128.237983][ T6818] ? show_regs_print_info+0x20/0x20 [ 128.243243][ T6818] ? load_image+0x420/0x420 [ 128.247816][ T6818] ? __lock_acquire+0x7eb0/0x7eb0 [ 128.252918][ T6818] should_fail_ex+0x394/0x4c0 [ 128.257661][ T6818] prepare_alloc_pages+0x1e1/0x5b0 [ 128.262824][ T6818] __alloc_pages+0x134/0x460 [ 128.267459][ T6818] ? zone_statistics+0x170/0x170 [ 128.272452][ T6818] __folio_alloc+0x10/0x20 [ 128.276904][ T6818] vma_alloc_folio+0x474/0x8f0 [ 128.281707][ T6818] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 128.287547][ T6818] shmem_alloc_folio+0x1a9/0x2a0 [ 128.292616][ T6818] ? folio_put+0xd0/0xd0 [ 128.296918][ T6818] ? __vm_enough_memory+0x11a/0x370 [ 128.302251][ T6818] ? shmem_inode_acct_block+0x35e/0x460 [ 128.307853][ T6818] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 128.313633][ T6818] ? put_swap_device+0x230/0x230 [ 128.318615][ T6818] ? xas_load+0x12b/0x140 [ 128.322982][ T6818] ? filemap_get_entry+0xce/0x3f0 [ 128.328036][ T6818] ? filemap_get_entry+0xce/0x3f0 [ 128.333097][ T6818] ? filemap_get_entry+0x375/0x3f0 [ 128.338245][ T6818] ? page_cache_prev_miss+0x390/0x390 [ 128.343686][ T6818] ? mark_lock+0x94/0x320 [ 128.348057][ T6818] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 128.354080][ T6818] ? do_user_addr_fault+0x61e/0x13e0 [ 128.359517][ T6818] ? lock_chain_count+0x20/0x20 [ 128.364420][ T6818] shmem_get_folio_gfp+0xe1d/0x2b40 [ 128.369677][ T6818] shmem_write_begin+0xf2/0x430 [ 128.374565][ T6818] generic_perform_write+0x2fe/0x5c0 [ 128.379922][ T6818] ? generic_file_direct_write+0x3e0/0x3e0 [ 128.385764][ T6818] ? down_write+0x16e/0x200 [ 128.390308][ T6818] ? file_update_time+0x98/0x1a0 [ 128.395286][ T6818] shmem_file_write_iter+0xfb/0x120 [ 128.400526][ T6818] vfs_write+0x474/0x9a0 [ 128.404820][ T6818] ? file_end_write+0x250/0x250 [ 128.409716][ T6818] ? __fget_files+0x3fc/0x460 [ 128.414447][ T6818] ? __fdget_pos+0x2a3/0x330 [ 128.419077][ T6818] ? ksys_write+0x74/0x260 [ 128.423546][ T6818] ksys_write+0x151/0x260 [ 128.427923][ T6818] ? __ia32_sys_read+0x90/0x90 [ 128.432748][ T6818] ? lockdep_hardirqs_on+0x98/0x150 [ 128.437978][ T6818] do_syscall_64+0x55/0xb0 [ 128.442429][ T6818] ? clear_bhb_loop+0x40/0x90 [ 128.447139][ T6818] ? clear_bhb_loop+0x40/0x90 [ 128.451853][ T6818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.457786][ T6818] RIP: 0033:0x7f3009fa8f19 [ 128.462272][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.481911][ T6818] RSP: 002b:00007f300ad8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.490358][ T6818] RAX: ffffffffffffffda RBX: 00007f300a225fa0 RCX: 00007f3009fa8f19 [ 128.498365][ T6818] RDX: 00000000fffffdef RSI: 0000200000006dc0 RDI: 0000000000000004 [ 128.506373][ T6818] RBP: 00007f300a037f6d R08: 0000000000000000 R09: 0000000000000000 [ 128.514406][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.522411][ T6818] R13: 00007f300a226038 R14: 00007f300a225fa0 R15: 00007ffd07f20578 [ 128.530429][ T6818] [ 128.661372][ T6808] team0: Port device team_slave_0 removed [ 128.766285][ T6822] netlink: 'syz.2.282': attribute type 10 has an invalid length. [ 128.802116][ T6822] team0: Device hsr_slave_1 failed to register rx_handler [ 129.464843][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.644803][ T789] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 129.655312][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 129.674782][ T23] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 129.694241][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.711945][ T23] usb 2-1: Product: syz [ 129.717949][ T23] usb 2-1: Manufacturer: syz [ 129.722670][ T23] usb 2-1: SerialNumber: syz [ 129.754595][ T6867] set match dimension is over the limit! [ 129.765804][ T6868] 9pnet_fd: p9_fd_create_tcp (6868): problem connecting socket to 127.0.0.1 [ 129.847662][ T789] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.859513][ T789] usb 5-1: not running at top speed; connect to a high speed hub [ 129.877678][ T789] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 129.895137][ T789] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 129.924149][ T789] usb 5-1: config 14 has no interface number 0 [ 129.937105][ T789] usb 5-1: config 14 has no interface number 1 [ 129.943514][ T789] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 129.981196][ T23] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 129.996368][ T789] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 130.022833][ T789] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 130.038972][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.051268][ T789] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 130.063462][ T23] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 130.073903][ T789] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.084335][ T23] usb 2-1: media controller created [ 130.116117][ T789] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.149233][ T789] usb 5-1: config 14 interface 57 has no altsetting 0 [ 130.169114][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.186624][ T789] usb 5-1: config 14 interface 228 has no altsetting 0 [ 130.209575][ T789] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 130.225602][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.243786][ T789] usb 5-1: Product: syz [ 130.254783][ T6876] block device autoloading is deprecated and will be removed. [ 130.267041][ T789] usb 5-1: Manufacturer: syz [ 130.275038][ T789] usb 5-1: SerialNumber: syz [ 130.289205][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 130.434615][ T23] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 130.497011][ T23] usb 2-1: USB disconnect, device number 7 [ 130.570725][ T6883] netlink: 68 bytes leftover after parsing attributes in process `syz.3.302'. [ 130.728383][ T789] legousbtower 5-1:14.57: interrupt endpoints not found [ 130.931104][ T789] legousbtower 5-1:14.228: interrupt endpoints not found [ 131.542755][ T6923] Bluetooth: MGMT ver 1.22 [ 131.631888][ T6927] binder: 6925:6927 unknown command 1074553619 [ 131.640482][ T6927] binder: 6925:6927 ioctl c0306201 2000000005c0 returned -22 [ 131.663968][ T6927] binder: 6925:6927 unknown command 1074553620 [ 131.687688][ T6927] binder: 6925:6927 ioctl c0306201 200000000740 returned -22 [ 131.709923][ T6927] binder: 6925:6927 ioctl 400c620e 2000000008c0 returned -22 [ 131.729063][ T6927] binder: 6925:6927 ioctl c00c620f 200000000fc0 returned -22 [ 131.749017][ T6927] binder: 6925:6927 unknown command 1074291477 [ 131.772201][ T6927] binder: 6925:6927 ioctl c0306201 200000001000 returned -22 [ 131.784884][ T6927] binder: 6925:6927 ioctl 400c620e 200000001180 returned -22 [ 131.824090][ T6935] jffs2: notice: (6935) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.263624][ T28] audit: type=1400 audit(1794382296.265:6): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=6951 comm="syz.1.321" [ 132.749982][ T6978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.330'. [ 132.783368][ T6978] FAULT_INJECTION: forcing a failure. [ 132.783368][ T6978] name failslab, interval 1, probability 0, space 0, times 0 [ 132.814071][ T6978] CPU: 1 PID: 6978 Comm: syz.2.330 Not tainted syzkaller #0 [ 132.821510][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 132.831619][ T6978] Call Trace: [ 132.834987][ T6978] [ 132.837971][ T6978] dump_stack_lvl+0x18c/0x250 [ 132.842731][ T6978] ? show_regs_print_info+0x20/0x20 [ 132.848021][ T6978] ? load_image+0x420/0x420 [ 132.852593][ T6978] ? __might_sleep+0xe0/0xe0 [ 132.857252][ T6978] ? __lock_acquire+0x7eb0/0x7eb0 [ 132.862356][ T6978] should_fail_ex+0x394/0x4c0 [ 132.867148][ T6978] should_failslab+0x9/0x20 [ 132.871730][ T6978] slab_pre_alloc_hook+0x59/0x300 [ 132.876817][ T6978] ? devm_kasprintf+0x160/0x200 [ 132.881778][ T6978] ? devm_kasprintf+0x160/0x200 [ 132.886687][ T6978] __kmem_cache_alloc_node+0x53/0x260 [ 132.892126][ T6978] ? devm_kasprintf+0x160/0x200 [ 132.897043][ T6978] __kmalloc_node_track_caller+0xa4/0x230 [ 132.902889][ T6978] devm_kmalloc+0x7f/0x300 [ 132.907399][ T6978] devm_kasprintf+0x160/0x200 [ 132.912148][ T6978] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 132.918119][ T6978] ? devm_kvasprintf+0x170/0x170 [ 132.923120][ T6978] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 132.929087][ T6978] ? devres_log+0x106/0x2f0 [ 132.933669][ T6978] ? hci_leds_init+0x39/0x180 [ 132.938421][ T6978] ? devm_kmalloc+0x27f/0x300 [ 132.943183][ T6978] hci_leds_init+0xc8/0x180 [ 132.947810][ T6978] hci_register_dev+0x3a3/0x8b0 [ 132.952795][ T6978] vhci_create_device+0x403/0x6e0 [ 132.957905][ T6978] vhci_write+0x3a3/0x460 [ 132.962323][ T6978] vfs_write+0x474/0x9a0 [ 132.966641][ T6978] ? file_end_write+0x250/0x250 [ 132.971556][ T6978] ? __fget_files+0x3fc/0x460 [ 132.976311][ T6978] ? __fdget_pos+0x1d8/0x330 [ 132.980980][ T6978] ? ksys_write+0x74/0x260 [ 132.985491][ T6978] ksys_write+0x151/0x260 [ 132.989895][ T6978] ? __ia32_sys_read+0x90/0x90 [ 132.994741][ T6978] ? lockdep_hardirqs_on+0x98/0x150 [ 133.000005][ T6978] do_syscall_64+0x55/0xb0 [ 133.004494][ T6978] ? clear_bhb_loop+0x40/0x90 [ 133.009237][ T6978] ? clear_bhb_loop+0x40/0x90 [ 133.014076][ T6978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.020071][ T6978] RIP: 0033:0x7fd34a3a8f19 [ 133.024546][ T6978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.044211][ T6978] RSP: 002b:00007fd34b1d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.052690][ T6978] RAX: ffffffffffffffda RBX: 00007fd34a625fa0 RCX: 00007fd34a3a8f19 [ 133.060731][ T6978] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 133.068774][ T6978] RBP: 00007fd34a437f6d R08: 0000000000000000 R09: 0000000000000000 [ 133.076810][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.084842][ T6978] R13: 00007fd34a626038 R14: 00007fd34a625fa0 R15: 00007fff0aa63658 [ 133.088684][ T9] usb 5-1: USB disconnect, device number 2 [ 133.092868][ T6978] [ 133.113829][ T6220] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 133.123043][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.133060][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.303559][ T6984] md/raid:md1: not enough operational devices (3/3 failed) [ 133.330767][ T28] audit: type=1326 audit(1794382297.335:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f6ba8f19 code=0x7ffc0000 [ 133.367112][ T6220] usb 4-1: not running at top speed; connect to a high speed hub [ 133.393872][ T6220] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.417553][ T6220] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.421794][ T28] audit: type=1326 audit(1794382297.365:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f6ba8f19 code=0x7ffc0000 [ 133.441508][ T6220] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 133.515776][ T28] audit: type=1326 audit(1794382297.365:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f6ba8f19 code=0x7ffc0000 [ 133.525779][ T6220] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 133.557816][ T6984] md/raid:md1: failed to run raid set. [ 133.563634][ T6984] md: pers->run() failed ... [ 133.571447][ T28] audit: type=1326 audit(1794382297.365:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f6ba8f19 code=0x7ffc0000 [ 133.571799][ T6220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.630450][ T5153] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 133.642240][ T28] audit: type=1326 audit(1794382297.365:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91f6ba8f19 code=0x7ffc0000 [ 133.674868][ T5153] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 133.685385][ T6220] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 133.692962][ T5153] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 133.700258][ T5153] loop0: [ 133.706321][ T6220] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 133.733892][ T28] audit: type=1326 audit(1794382297.365:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f6ba8f19 code=0x7ffc0000 [ 133.745615][ T6220] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 133.827643][ T6220] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 133.855896][ T28] audit: type=1326 audit(1794382297.365:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f6ba8f19 code=0x7ffc0000 [ 133.909026][ T6220] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 133.947983][ T6220] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 133.988411][ T6220] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 133.992946][ T28] audit: type=1326 audit(1794382297.365:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f6ba8f19 code=0x7ffc0000 [ 134.135186][ T28] audit: type=1326 audit(1794382297.365:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f6ba8f19 code=0x7ffc0000 [ 134.261170][ T6993] kernel profiling enabled (shift: 9) [ 134.380097][ T5849] usb 4-1: USB disconnect, device number 6 [ 134.448327][ T5849] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 134.510473][ T5849] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 134.557790][ T5849] keyspan 4-1:1.0: device disconnected [ 134.565737][ T7014] netlink: 830 bytes leftover after parsing attributes in process `syz.4.339'. [ 134.811218][ T7022] FAULT_INJECTION: forcing a failure. [ 134.811218][ T7022] name failslab, interval 1, probability 0, space 0, times 0 [ 134.811278][ T7022] CPU: 0 PID: 7022 Comm: syz.4.341 Not tainted syzkaller #0 [ 134.811302][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 134.811315][ T7022] Call Trace: [ 134.811324][ T7022] [ 134.811334][ T7022] dump_stack_lvl+0x18c/0x250 [ 134.811374][ T7022] ? show_regs_print_info+0x20/0x20 [ 134.811405][ T7022] ? load_image+0x420/0x420 [ 134.811433][ T7022] ? __might_sleep+0xe0/0xe0 [ 134.811462][ T7022] ? __lock_acquire+0x7eb0/0x7eb0 [ 134.811494][ T7022] should_fail_ex+0x394/0x4c0 [ 134.811528][ T7022] should_failslab+0x9/0x20 [ 134.811548][ T7022] slab_pre_alloc_hook+0x59/0x300 [ 134.811578][ T7022] kmem_cache_alloc+0x5a/0x2d0 [ 134.811597][ T7022] ? __kernfs_new_node+0xe5/0x7f0 [ 134.811637][ T7022] __kernfs_new_node+0xe5/0x7f0 [ 134.811680][ T7022] ? kernfs_new_node+0x260/0x260 [ 134.811710][ T7022] ? kernfs_create_dir_ns+0x112/0x120 [ 134.811757][ T7022] ? up_write+0x1be/0x410 [ 134.811785][ T7022] kernfs_new_node+0x14c/0x260 [ 134.811824][ T7022] __kernfs_create_file+0x4b/0x2e0 [ 134.811850][ T7022] sysfs_add_file_mode_ns+0x237/0x2f0 [ 134.811884][ T7022] sysfs_create_file_ns+0x12c/0x1b0 [ 134.811912][ T7022] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 134.811940][ T7022] ? kobject_put+0x41a/0x450 [ 134.811961][ T7022] ? kobject_create_and_add+0x16f/0x230 [ 134.811988][ T7022] iommu_group_alloc+0x2c0/0x390 [ 134.812019][ T7022] __iommu_probe_device+0x305/0x1040 [ 134.812044][ T7022] ? iommu_probe_device+0x24/0x230 [ 134.812080][ T7022] ? iommu_probe_device+0x230/0x230 [ 134.812117][ T7022] iommu_probe_device+0x2e/0x230 [ 134.812147][ T7022] iommu_bus_notifier+0x7b/0x170 [ 134.812175][ T7022] notifier_call_chain+0x18f/0x380 [ 134.812219][ T7022] blocking_notifier_call_chain+0x6a/0x90 [ 134.812252][ T7022] bus_notify+0x13e/0x180 [ 134.812286][ T7022] device_add+0x5cb/0xc40 [ 134.812313][ T7022] iommufd_test+0x121d/0x2a20 [ 134.812348][ T7022] ? iommufd_selftest_destroy+0xf0/0xf0 [ 134.812374][ T7022] ? __lock_acquire+0x7eb0/0x7eb0 [ 134.812401][ T7022] ? __lock_acquire+0x7eb0/0x7eb0 [ 134.812429][ T7022] ? __might_fault+0xaa/0x120 [ 134.812454][ T7022] ? __might_fault+0xaa/0x120 [ 134.812486][ T7022] iommufd_fops_ioctl+0x48b/0x540 [ 134.812512][ T7022] ? iommufd_ctx_put+0x40/0x40 [ 134.812537][ T7022] ? __fget_files+0x28/0x460 [ 134.812582][ T7022] ? bpf_lsm_file_ioctl+0x9/0x10 [ 134.812606][ T7022] ? security_file_ioctl+0x80/0xa0 [ 134.812634][ T7022] ? iommufd_ctx_put+0x40/0x40 [ 134.812656][ T7022] __se_sys_ioctl+0xfd/0x170 [ 134.812690][ T7022] do_syscall_64+0x55/0xb0 [ 134.812718][ T7022] ? clear_bhb_loop+0x40/0x90 [ 134.812748][ T7022] ? clear_bhb_loop+0x40/0x90 [ 134.812781][ T7022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.812810][ T7022] RIP: 0033:0x7f91f6ba8f19 [ 134.812831][ T7022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.812850][ T7022] RSP: 002b:00007f91f7b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.812875][ T7022] RAX: ffffffffffffffda RBX: 00007f91f6e25fa0 RCX: 00007f91f6ba8f19 [ 134.812892][ T7022] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 134.812907][ T7022] RBP: 00007f91f6c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 134.812921][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.812935][ T7022] R13: 00007f91f6e26038 R14: 00007f91f6e25fa0 R15: 00007ffd9b2ff628 [ 134.812969][ T7022] [ 135.054077][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.084382][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.084547][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.715080][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.827042][ T7048] device-mapper: multipath service-time: repeat_count > 1 is deprecated, using 1 instead [ 135.855269][ T7048] device-mapper: table: 248:2: multipath: not enough priority group arguments (-EINVAL) [ 135.876372][ T7048] device-mapper: ioctl: error adding target to table [ 135.911763][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 135.944800][ T9] usb 4-1: config 0 has no interfaces? [ 135.950396][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 135.998000][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.036308][ T9] usb 4-1: config 0 descriptor?? [ 136.245843][ T23] usb 4-1: USB disconnect, device number 7 [ 136.272168][ T7067] kvm: Disabled LAPIC found during irq injection [ 136.354903][ T7071] jffs2: notice: (7071) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 137.158683][ T7098] device-mapper: table: 248:1: flakey: Device lookup failed (-ENOENT) [ 137.170633][ T7098] device-mapper: ioctl: error adding target to table [ 137.184876][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.377034][ T23] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 137.387358][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.409254][ T23] usb 4-1: config 0 descriptor?? [ 137.414273][ T7102] kvm: MWAIT instruction emulated as NOP! [ 137.474909][ T789] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.696313][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 137.708322][ T789] usb 2-1: config 9 has an invalid interface number: 178 but max is 0 [ 137.718365][ T7116] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 137.730967][ T7116] netlink: 244 bytes leftover after parsing attributes in process `syz.4.366'. [ 137.745044][ T789] usb 2-1: config 9 has no interface number 0 [ 137.751247][ T789] usb 2-1: config 9 interface 178 has no altsetting 0 [ 137.778491][ T789] usb 2-1: New USB device found, idVendor=168c, idProduct=0001, bcdDevice=b5.c0 [ 137.789446][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.797706][ T789] usb 2-1: Product: syz [ 137.802032][ T789] usb 2-1: Manufacturer: syz [ 137.806761][ T789] usb 2-1: SerialNumber: syz [ 137.910705][ T23] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 137.933953][ T23] [drm] Initialized udl on minor 2 [ 137.951830][ T7123] process 'syz.4.367' launched './file2' with NULL argv: empty string added [ 138.033463][ T789] usb 2-1: Could not find all expected endpoints [ 138.072926][ T23] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.085552][ T789] usb 2-1: USB disconnect, device number 8 [ 138.117396][ T23] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 138.125469][ T5849] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.170799][ T23] usb 4-1: USB disconnect, device number 8 [ 138.178355][ T5849] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.211575][ T7123] FAULT_INJECTION: forcing a failure. [ 138.211575][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 138.229577][ T5849] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 138.247510][ T7123] CPU: 0 PID: 7123 Comm: syz.4.367 Not tainted syzkaller #0 [ 138.254978][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 138.265088][ T7123] Call Trace: [ 138.268416][ T7123] [ 138.271388][ T7123] dump_stack_lvl+0x18c/0x250 [ 138.276428][ T7123] ? show_regs_print_info+0x20/0x20 [ 138.282220][ T7123] ? load_image+0x420/0x420 [ 138.286792][ T7123] ? __might_sleep+0xe0/0xe0 [ 138.291545][ T7123] ? __lock_acquire+0x7eb0/0x7eb0 [ 138.296665][ T7123] should_fail_ex+0x394/0x4c0 [ 138.301505][ T7123] should_failslab+0x9/0x20 [ 138.306070][ T7123] slab_pre_alloc_hook+0x59/0x300 [ 138.311156][ T7123] ? lockdep_softirqs_off+0x440/0x440 [ 138.316601][ T7123] ? dm_kcopyd_client_create+0x58/0x910 [ 138.322230][ T7123] __kmem_cache_alloc_node+0x53/0x260 [ 138.327665][ T7123] ? dm_kcopyd_client_create+0x58/0x910 [ 138.333274][ T7123] kmalloc_trace+0x2a/0xe0 [ 138.337782][ T7123] dm_kcopyd_client_create+0x58/0x910 [ 138.343200][ T7123] ? __init_waitqueue_head+0xa8/0x140 [ 138.348614][ T7123] snapshot_ctr+0xb0f/0x1340 [ 138.353275][ T7123] ? dm_snap_cow+0x40/0x40 [ 138.357733][ T7123] ? skip_spaces+0x8a/0xa0 [ 138.362181][ T7123] ? dm_split_args+0x505/0x5b0 [ 138.366981][ T7123] dm_table_add_target+0x575/0xbc0 [ 138.372147][ T7123] table_load+0x2eb/0x7e0 [ 138.376533][ T7123] ? dev_wait+0x2f0/0x2f0 [ 138.380891][ T7123] ? __might_fault+0xaa/0x120 [ 138.385604][ T7123] ? __might_fault+0xc6/0x120 [ 138.390381][ T7123] ? __might_fault+0xaa/0x120 [ 138.395089][ T7123] ? dev_wait+0x2f0/0x2f0 [ 138.399450][ T7123] dm_ctl_ioctl+0x975/0xd00 [ 138.404005][ T7123] ? dev_wait+0x2f0/0x2f0 [ 138.408365][ T7123] ? dm_poll+0x120/0x120 [ 138.412688][ T7123] ? bpf_lsm_file_ioctl+0x9/0x10 [ 138.417664][ T7123] ? security_file_ioctl+0x80/0xa0 [ 138.422813][ T7123] ? dm_poll+0x120/0x120 [ 138.427089][ T7123] __se_sys_ioctl+0xfd/0x170 [ 138.431720][ T7123] do_syscall_64+0x55/0xb0 [ 138.436174][ T7123] ? clear_bhb_loop+0x40/0x90 [ 138.440886][ T7123] ? clear_bhb_loop+0x40/0x90 [ 138.445602][ T7123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.451530][ T7123] RIP: 0033:0x7f91f6ba8f19 [ 138.455979][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.475701][ T7123] RSP: 002b:00007f91f7b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.484162][ T7123] RAX: ffffffffffffffda RBX: 00007f91f6e25fa0 RCX: 00007f91f6ba8f19 [ 138.492159][ T7123] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 138.500156][ T7123] RBP: 00007f91f6c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 138.508174][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.516178][ T7123] R13: 00007f91f6e26038 R14: 00007f91f6e25fa0 R15: 00007ffd9b2ff628 [ 138.524193][ T7123] [ 138.578986][ T7123] device-mapper: table: 248:3: snapshot-merge: Could not create kcopyd client (-ENOMEM) [ 138.632735][ T7123] device-mapper: ioctl: error adding target to table [ 139.386059][ T7170] ubi0: attaching mtd0 [ 139.394198][ T7170] ubi0: scanning is finished [ 139.409768][ T7170] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 139.471873][ T7176] FAULT_INJECTION: forcing a failure. [ 139.471873][ T7176] name failslab, interval 1, probability 0, space 0, times 0 [ 139.523994][ T7176] CPU: 0 PID: 7176 Comm: syz.3.380 Not tainted syzkaller #0 [ 139.531389][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 139.541588][ T7176] Call Trace: [ 139.544918][ T7176] [ 139.547901][ T7176] dump_stack_lvl+0x18c/0x250 [ 139.552645][ T7176] ? show_regs_print_info+0x20/0x20 [ 139.557915][ T7176] ? load_image+0x420/0x420 [ 139.562478][ T7176] ? __might_sleep+0xe0/0xe0 [ 139.567123][ T7176] ? __lock_acquire+0x7eb0/0x7eb0 [ 139.572189][ T7176] ? verify_lock_unused+0x140/0x140 [ 139.577430][ T7176] should_fail_ex+0x394/0x4c0 [ 139.582152][ T7176] should_failslab+0x9/0x20 [ 139.586688][ T7176] slab_pre_alloc_hook+0x59/0x300 [ 139.591742][ T7176] ? __stack_depot_save+0x1f/0x660 [ 139.596891][ T7176] kmem_cache_alloc_lru+0x4d/0x2c0 [ 139.602025][ T7176] ? sock_alloc_inode+0x28/0xc0 [ 139.606918][ T7176] sock_alloc_inode+0x28/0xc0 [ 139.611627][ T7176] ? sockfs_init_fs_context+0xb0/0xb0 [ 139.617030][ T7176] new_inode_pseudo+0x63/0x1d0 [ 139.621862][ T7176] sock_create_lite+0x8b/0x500 [ 139.626678][ T7176] __netlink_kernel_create+0xfb/0x7b0 [ 139.632116][ T7176] ? netlink_set_err+0x3b0/0x3b0 [ 139.637106][ T7176] ? nfnl_pernet+0x23/0x230 [ 139.641738][ T7176] ? nfnl_pernet+0x23/0x230 [ 139.646281][ T7176] ? nfnetlink_net_init+0xb2/0x150 [ 139.651433][ T7176] nfnetlink_net_init+0xc9/0x150 [ 139.656417][ T7176] ? nfnetlink_broadcast+0x70/0x70 [ 139.661570][ T7176] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 139.667156][ T7176] ? nfnetlink_rcv+0x2490/0x2490 [ 139.672130][ T7176] ? nfnetlink_bind+0x3c0/0x3c0 [ 139.677374][ T7176] ops_init+0x391/0x640 [ 139.681580][ T7176] setup_net+0x3b6/0xa20 [ 139.686027][ T7176] ? copy_net_ns+0x530/0x530 [ 139.690647][ T7176] ? copy_net_ns+0x347/0x530 [ 139.695275][ T7176] ? down_read_killable+0x1d0/0x340 [ 139.700526][ T7176] copy_net_ns+0x361/0x530 [ 139.704979][ T7176] create_new_namespaces+0x3ce/0x700 [ 139.710310][ T7176] unshare_nsproxy_namespaces+0x11a/0x160 [ 139.716072][ T7176] ksys_unshare+0x4fa/0x8f0 [ 139.720622][ T7176] ? sighand_ctor+0x50/0x50 [ 139.725157][ T7176] ? lock_chain_count+0x20/0x20 [ 139.730038][ T7176] ? syscall_enter_from_user_mode+0x25/0x80 [ 139.736155][ T7176] __x64_sys_unshare+0x38/0x40 [ 139.741003][ T7176] do_syscall_64+0x55/0xb0 [ 139.745464][ T7176] ? clear_bhb_loop+0x40/0x90 [ 139.750186][ T7176] ? clear_bhb_loop+0x40/0x90 [ 139.754915][ T7176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.760947][ T7176] RIP: 0033:0x7fa2eb1a8f19 [ 139.765413][ T7176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.785053][ T7176] RSP: 002b:00007fa2ec115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 139.793504][ T7176] RAX: ffffffffffffffda RBX: 00007fa2eb425fa0 RCX: 00007fa2eb1a8f19 [ 139.801514][ T7176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 139.809517][ T7176] RBP: 00007fa2eb237f6d R08: 0000000000000000 R09: 0000000000000000 [ 139.817545][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.825562][ T7176] R13: 00007fa2eb426038 R14: 00007fa2eb425fa0 R15: 00007ffeb71f6dd8 [ 139.833593][ T7176] [ 139.850446][ T7170] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 140.742925][ T7208] FAULT_INJECTION: forcing a failure. [ 140.742925][ T7208] name failslab, interval 1, probability 0, space 0, times 0 [ 140.766081][ T7208] CPU: 0 PID: 7208 Comm: syz.1.389 Not tainted syzkaller #0 [ 140.773482][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 140.783630][ T7208] Call Trace: [ 140.786964][ T7208] [ 140.789945][ T7208] dump_stack_lvl+0x18c/0x250 [ 140.794696][ T7208] ? show_regs_print_info+0x20/0x20 [ 140.799964][ T7208] ? load_image+0x420/0x420 [ 140.804521][ T7208] ? __might_sleep+0xe0/0xe0 [ 140.809153][ T7208] ? __lock_acquire+0x7eb0/0x7eb0 [ 140.814241][ T7208] ? __d_add+0x4b6/0x7e0 [ 140.818522][ T7208] should_fail_ex+0x394/0x4c0 [ 140.823242][ T7208] should_failslab+0x9/0x20 [ 140.827776][ T7208] slab_pre_alloc_hook+0x59/0x300 [ 140.832867][ T7208] kmem_cache_alloc_lru+0x4d/0x2c0 [ 140.838007][ T7208] ? shmem_alloc_inode+0x28/0x40 [ 140.843003][ T7208] shmem_alloc_inode+0x28/0x40 [ 140.847996][ T7208] ? shmem_match+0x160/0x160 [ 140.852636][ T7208] new_inode_pseudo+0x63/0x1d0 [ 140.857455][ T7208] new_inode+0x22/0x1d0 [ 140.861662][ T7208] shmem_get_inode+0x34d/0xcd0 [ 140.866479][ T7208] shmem_mknod+0x5f/0x1c0 [ 140.870859][ T7208] shmem_mkdir+0x33/0x60 [ 140.875151][ T7208] vfs_mkdir+0x2a5/0x470 [ 140.879468][ T7208] ovl_mkdir_real+0xc6/0x2b0 [ 140.884128][ T7208] ovl_workdir_create+0x37a/0x7e0 [ 140.889227][ T7208] ? ovl_statfs+0x2f0/0x2f0 [ 140.893778][ T7208] ? rcu_read_lock_any_held+0xb4/0x140 [ 140.899297][ T7208] ? __mnt_want_write+0x223/0x2a0 [ 140.904370][ T7208] ovl_get_workdir+0x30e/0x1770 [ 140.909276][ T7208] ? do_raw_spin_unlock+0x121/0x230 [ 140.914538][ T7208] ? ovl_get_upper+0x5c0/0x5c0 [ 140.919337][ T7208] ? ovl_inuse_trylock+0xbd/0xd0 [ 140.924313][ T7208] ? ovl_get_upper+0x3c3/0x5c0 [ 140.929106][ T7208] ? ovl_fill_super+0x1280/0x1280 [ 140.934176][ T7208] ? ovl_fill_super+0x2dd/0x1280 [ 140.939150][ T7208] ? rcu_is_watching+0x15/0xb0 [ 140.943965][ T7208] ? ovl_fill_super+0x2dd/0x1280 [ 140.948943][ T7208] ? __kmalloc+0xe5/0x240 [ 140.953313][ T7208] ovl_fill_super+0x77a/0x1280 [ 140.958111][ T7208] ? virtio_fs_zero_page_range+0x140/0x140 [ 140.963952][ T7208] get_tree_nodev+0xb5/0x140 [ 140.968579][ T7208] vfs_get_tree+0x8c/0x280 [ 140.973036][ T7208] do_new_mount+0x24a/0xa60 [ 140.977597][ T7208] __se_sys_mount+0x2e7/0x3d0 [ 140.982326][ T7208] ? __x64_sys_mount+0xc0/0xc0 [ 140.987124][ T7208] ? lockdep_hardirqs_on+0x98/0x150 [ 140.992359][ T7208] ? __x64_sys_mount+0x20/0xc0 [ 140.997163][ T7208] do_syscall_64+0x55/0xb0 [ 141.001610][ T7208] ? clear_bhb_loop+0x40/0x90 [ 141.006332][ T7208] ? clear_bhb_loop+0x40/0x90 [ 141.011046][ T7208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.017005][ T7208] RIP: 0033:0x7f3009fa8f19 [ 141.021539][ T7208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.041176][ T7208] RSP: 002b:00007f300ad8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.049646][ T7208] RAX: ffffffffffffffda RBX: 00007f300a225fa0 RCX: 00007f3009fa8f19 [ 141.057741][ T7208] RDX: 0000200000001100 RSI: 00002000000010c0 RDI: 0000000000000000 [ 141.065830][ T7208] RBP: 00007f300a037f6d R08: 0000200000001140 R09: 0000000000000000 [ 141.073913][ T7208] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 141.081911][ T7208] R13: 00007f300a226038 R14: 00007f300a225fa0 R15: 00007ffd07f20578 [ 141.089927][ T7208] [ 141.132260][ T7208] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 141.334299][ T7220] FAULT_INJECTION: forcing a failure. [ 141.334299][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 141.368615][ T7217] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 141.377768][ T7220] CPU: 1 PID: 7220 Comm: syz.3.392 Not tainted syzkaller #0 [ 141.380389][ T7217] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 141.387692][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 141.396121][ T7217] CPU: 0 PID: 7217 Comm: syz.1.393 Not tainted syzkaller #0 [ 141.406447][ T7220] Call Trace: [ 141.413725][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 141.417050][ T7220] [ 141.427131][ T7217] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 141.430082][ T7220] dump_stack_lvl+0x18c/0x250 [ 141.436414][ T7217] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 141.441099][ T7220] ? show_regs_print_info+0x20/0x20 [ 141.460707][ T7217] RSP: 0018:ffffc9000384f8e0 EFLAGS: 00010002 [ 141.465926][ T7220] ? load_image+0x420/0x420 [ 141.472009][ T7217] [ 141.472017][ T7217] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 141.476526][ T7220] ? __might_sleep+0xe0/0xe0 [ 141.478854][ T7217] RDX: ffffc9000dfb5000 RSI: 0000000000002312 RDI: 0000000000002313 [ 141.486856][ T7220] ? __lock_acquire+0x7eb0/0x7eb0 [ 141.491472][ T7217] RBP: ffffc9000384f9f8 R08: 0000000000000003 R09: 0000000000000004 [ 141.499457][ T7220] should_fail_ex+0x394/0x4c0 [ 141.504477][ T7217] R10: dffffc0000000000 R11: fffff52000709f1c R12: 0000000000000000 [ 141.512485][ T7220] should_failslab+0x9/0x20 [ 141.517159][ T7217] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 141.525144][ T7220] slab_pre_alloc_hook+0x59/0x300 [ 141.529673][ T7217] FS: 00007f300ad8a6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 141.537654][ T7220] ? down_write+0x16e/0x200 [ 141.542692][ T7217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.551632][ T7220] ? __list_lru_init+0xb4/0x600 [ 141.556132][ T7217] CR2: 000000110c35a746 CR3: 0000000025169000 CR4: 00000000003506f0 [ 141.562810][ T7220] ? __list_lru_init+0xb4/0x600 [ 141.567665][ T7217] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 141.575636][ T7220] __kmem_cache_alloc_node+0x53/0x260 [ 141.580484][ T7217] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 141.588463][ T7220] ? up_write+0x1be/0x410 [ 141.593835][ T7217] Call Trace: [ 141.593845][ T7217] [ 141.601816][ T7220] ? __list_lru_init+0xb4/0x600 [ 141.606168][ T7217] ? percpu_ref_switch_to_atomic+0xa0/0xa0 [ 141.609455][ T7220] __kmalloc+0xa7/0x240 [ 141.612401][ T7217] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 141.617403][ T7220] __list_lru_init+0xb4/0x600 [ 141.623212][ T7217] ? _raw_spin_lock+0x40/0x40 [ 141.627376][ T7220] alloc_super+0x74c/0x910 [ 141.632852][ T7217] percpu_ref_kill_and_confirm+0x9b/0x130 [ 141.637525][ T7220] ? sget_dev+0xe0/0xe0 [ 141.642202][ T7217] __mddev_suspend+0x2d1/0x630 [ 141.646620][ T7220] sget_fc+0x2ee/0x930 [ 141.652345][ T7217] ? rcu_read_unlock+0xa0/0xa0 [ 141.656503][ T7220] ? super_s_dev_test+0x100/0x100 [ 141.661282][ T7217] ? _parse_integer_limit+0x19c/0x1e0 [ 141.665442][ T7220] sget_dev+0xac/0xe0 [ 141.670212][ T7217] ? kstrtoull+0x130/0x1d0 [ 141.675236][ T7220] ? test_keyed_super+0x70/0x70 [ 141.680608][ T7217] raid_disks_store+0xb8/0x550 [ 141.684588][ T7220] ? get_mtd_device+0x201/0x240 [ 141.689001][ T7217] ? md_attr_store+0x175/0x390 [ 141.693848][ T7220] ? unregister_mtd_user+0x280/0x280 [ 141.698616][ T7217] ? __lock_acquire+0x7eb0/0x7eb0 [ 141.703485][ T7220] mtd_get_sb+0x51/0x3b0 [ 141.708245][ T7217] ? raid_disks_show+0x140/0x140 [ 141.713726][ T7220] ? jffs2_reconfigure+0x310/0x310 [ 141.718787][ T7217] ? do_raw_spin_unlock+0x121/0x230 [ 141.723058][ T7220] get_tree_mtd+0x5e6/0x760 [ 141.728001][ T7217] md_attr_store+0x19c/0x390 [ 141.733112][ T7220] ? jffs2_reconfigure+0x310/0x310 [ 141.738312][ T7217] ? sysfs_kf_read+0x360/0x360 [ 141.742810][ T7220] ? mtd_proc_show+0x270/0x270 [ 141.747426][ T7217] kernfs_fop_write_iter+0x3a4/0x520 [ 141.752537][ T7220] ? apparmor_capable+0x137/0x1a0 [ 141.757303][ T7217] vfs_write+0x474/0x9a0 [ 141.762068][ T7220] ? bpf_lsm_capable+0x9/0x10 [ 141.767358][ T7217] ? file_end_write+0x250/0x250 [ 141.772379][ T7220] ? security_capable+0x89/0xb0 [ 141.776625][ T7217] ? __fget_files+0x3fc/0x460 [ 141.781299][ T7220] vfs_get_tree+0x8c/0x280 [ 141.786153][ T7217] ? __fdget_pos+0x2a3/0x330 [ 141.791003][ T7220] do_new_mount+0x24a/0xa60 [ 141.795675][ T7217] ? ksys_write+0x74/0x260 [ 141.800099][ T7220] __se_sys_mount+0x2e7/0x3d0 [ 141.804700][ T7217] ksys_write+0x151/0x260 [ 141.809209][ T7220] ? __x64_sys_mount+0xc0/0xc0 [ 141.813622][ T7217] ? __ia32_sys_read+0x90/0x90 [ 141.818302][ T7220] ? lockdep_hardirqs_on+0x98/0x150 [ 141.822631][ T7217] ? lockdep_hardirqs_on+0x98/0x150 [ 141.827389][ T7220] ? __x64_sys_mount+0x20/0xc0 [ 141.832156][ T7217] do_syscall_64+0x55/0xb0 [ 141.837354][ T7220] do_syscall_64+0x55/0xb0 [ 141.842556][ T7217] ? clear_bhb_loop+0x40/0x90 [ 141.847318][ T7220] ? clear_bhb_loop+0x40/0x90 [ 141.851733][ T7217] ? clear_bhb_loop+0x40/0x90 [ 141.856147][ T7220] ? clear_bhb_loop+0x40/0x90 [ 141.860829][ T7217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.865600][ T7220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.870278][ T7217] RIP: 0033:0x7f3009fa8f19 [ 141.874954][ T7220] RIP: 0033:0x7fa2eb1a8f19 [ 141.880854][ T7217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.886744][ T7220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.891188][ T7217] RSP: 002b:00007f300ad8a028 EFLAGS: 00000246 [ 141.895609][ T7220] RSP: 002b:00007fa2ec115028 EFLAGS: 00000246 [ 141.915219][ T7217] ORIG_RAX: 0000000000000001 [ 141.934829][ T7220] ORIG_RAX: 00000000000000a5 [ 141.940898][ T7217] RAX: ffffffffffffffda RBX: 00007f300a225fa0 RCX: 00007f3009fa8f19 [ 141.946964][ T7220] RAX: ffffffffffffffda RBX: 00007fa2eb425fa0 RCX: 00007fa2eb1a8f19 [ 141.951644][ T7217] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 141.956319][ T7220] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000180 [ 141.964299][ T7217] RBP: 00007f300a037f6d R08: 0000000000000000 R09: 0000000000000000 [ 141.972281][ T7220] RBP: 00007fa2eb237f6d R08: 0000000000000000 R09: 0000000000000000 [ 141.980257][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.988235][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.996210][ T7217] R13: 00007f300a226038 R14: 00007f300a225fa0 R15: 00007ffd07f20578 [ 142.004197][ T7220] R13: 00007fa2eb426038 R14: 00007fa2eb425fa0 R15: 00007ffeb71f6dd8 [ 142.012287][ T7217] [ 142.020272][ T7220] [ 142.028270][ T7217] Modules linked in: [ 142.047293][ T7217] ---[ end trace 0000000000000000 ]--- [ 142.052796][ T7217] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 142.059195][ T7217] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 142.078888][ T7217] RSP: 0018:ffffc9000384f8e0 EFLAGS: 00010002 [ 142.085018][ T7217] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 142.093040][ T7217] RDX: ffffc9000dfb5000 RSI: 0000000000002312 RDI: 0000000000002313 [ 142.101066][ T7217] RBP: ffffc9000384f9f8 R08: 0000000000000003 R09: 0000000000000004 [ 142.109095][ T7217] R10: dffffc0000000000 R11: fffff52000709f1c R12: 0000000000000000 [ 142.117122][ T7217] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 142.125208][ T7217] FS: 00007f300ad8a6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 142.134217][ T7217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.140937][ T7217] CR2: 000000110c35a746 CR3: 0000000025169000 CR4: 00000000003506f0 [ 142.148970][ T7217] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 142.156989][ T7217] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 142.165009][ T7217] Kernel panic - not syncing: Fatal exception [ 142.171688][ T7217] Kernel Offset: disabled [ 142.176026][ T7217] Rebooting in 86400 seconds..