last executing test programs: 5.613953805s ago: executing program 4 (id=533): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [0x0, 0x0, 0xff, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x308) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 5.493083001s ago: executing program 3 (id=534): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 }'], 0x9) 4.575715313s ago: executing program 3 (id=536): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 4.125111762s ago: executing program 3 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.748095895s ago: executing program 4 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x55, &(0x7f0000000000)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) 3.184567769s ago: executing program 3 (id=541): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) 2.843663194s ago: executing program 4 (id=544): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20037}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) 2.327699968s ago: executing program 3 (id=547): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000005c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x400, 0x6, {"280116c596a0b02d72711dda56cab4d0"}, 0x3, 0xec4f, 0xc}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 2.049465979s ago: executing program 1 (id=548): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x6e21, 0x1005, @loopback, 0x101}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) 1.986101813s ago: executing program 2 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 syn', 0x37) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x8001, 0xcc7, 0x8}, &(0x7f0000000140)=0x14) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001") 1.969160937s ago: executing program 3 (id=550): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) 1.919820487s ago: executing program 1 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:te', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536\n', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='2\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='ppl\n', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='1:0\n', 0x4) write(r7, &(0x7f00000005c0)='1:1\n', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram0/size\x00', 0x1, 0x0) write(r8, &(0x7f0000000640)='1024', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-ram0/ppl_sector\x00', 0x1, 0x0) write(r9, &(0x7f00000006c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000740)='128\n', 0x4) r10 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r10, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-ram1/size\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000940)='128\n', 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r11, &(0x7f00000009c0)='1\n', 0x2) write(r6, &(0x7f0000000500)='ppl\n', 0x4) 1.388743135s ago: executing program 2 (id=552): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}, @typed={0x8, 0x31, 0x0, 0x0, @u32=0x4}]}]}, 0x30}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.196779087s ago: executing program 1 (id=554): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x2, 0xdd9f83, 0x1, 0x2f, 0xf3, 0xc, 0x8, 0x722, 0x6, 0x5, 0x8, 0x8, 0x0, {0x0, 0x6fd8e84b}, 0x3, 0xa5}}) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="c7fb", 0x2}, {&(0x7f0000000640)="52142779f39a9bc4f7b1fed85aa73db93c920a6e79535ce8b0530c95e15e0d871fdc0b2e9a67a7d2ddbac3a879c976df2c37447535075c618129fa2d60317ecc5bbd11420b06602396f954fa7a9e8dea191fe0f370cbdf182e8611929a5afaac25158ccc0d9feebe7e4b179b0a7ff952000f1a0758a36f26f7f25b6adea2441adc0b7a02c353301edef96f191e27a24e16908d3bffc95b2526c4824d10496b91a6a89662ff49f43e4fd5259339408c31b611dee31bb6b4c0157f0aa2cde92d7a2d0560d7", 0xfffffffffffffd55}, {&(0x7f0000000280)="3df1d13929763dc87424cd47c1f26c4b8c6dadf7d6c98f3a1228861c0973d40ac35fc1ee8278edffb9ce89469f51d9e8ee407ee67937f299167412f31911887cf642cba8ec10fecc433827eb883e2f18b109adea6f8919c927", 0x59}, {&(0x7f0000000380)="1fece8605605f86ae5ed2f9d4a694a3c5efa1cee7653147e2455e6ed2e83c0518fe605b3ceed14ef2915f13e5f39ad32e27997c1ce8ce898a7f16d474cb11e8efd", 0x41}, {&(0x7f0000000480)="fcf6b777a5376144c4c6377c8baa124c6fb60e252b01582f26a457b434fd1b106378bde77c3964fd4ca4849b9c86bb7b50bbd279e219a4a1045a4e503df6b2a2", 0x40}, {&(0x7f0000000140)="a84401b1530bb51f729c9cfb838d889c2089f776000100004ec8538db72fe35909fdb19691ec55e83cc29f", 0x23}], 0x6}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2, 0x10, 0x5, 0x7, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x6, 0x1, 0x0, 0x0, 0x5, {0x6, 0x6c, 0xe, 0xf, 0x0, 0x6, 0x0, @in=@multicast1, @in=@remote}}]}, 0x50}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.099934838s ago: executing program 2 (id=555): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xffffffff}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) 1.099819938s ago: executing program 0 (id=556): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000300)=""/101}, 0x20) 1.099723848s ago: executing program 2 (id=557): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0xfffeffff, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0xfffffffffffffffe, 0xffffffffffffff6e}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) 1.098479918s ago: executing program 4 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 sync', 0x38) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x8001, 0xcc7, 0x8}, &(0x7f0000000140)=0x14) socket$inet(0x2, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00', [0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shutdown(r1, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 1.028935604s ago: executing program 2 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r7, r6, 0x25, 0x0, @void}, 0x10) 1.028756354s ago: executing program 0 (id=560): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000005c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x400, 0x6, {"280116c596a0b02d72711dda56cab4d0"}, 0x3, 0xec4f, 0xc}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 1.027601354s ago: executing program 1 (id=561): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x16) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0x2, 0x48f, 0x4d, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x5}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001740)={0x1, 0x0, [{0x58000, 0x7d, &(0x7f00000015c0)=""/125}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=""/51, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 690.547838ms ago: executing program 0 (id=562): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x2, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 391.702714ms ago: executing program 2 (id=563): syz_usb_connect$sierra_net(0x6, 0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000000c0)=0x6c) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r0, r0) read$FUSE(r2, 0x0, 0x0) 166.820373ms ago: executing program 1 (id=564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x100}}, 0x0) 160.477615ms ago: executing program 0 (id=565): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x675, 0x200) ioctl$BLKPG(r0, 0x1269, 0xffffffffffffffff) 131.897671ms ago: executing program 4 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) 27.681904ms ago: executing program 4 (id=567): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0x98201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 27.607324ms ago: executing program 0 (id=568): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 14.090397ms ago: executing program 1 (id=569): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20037}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) 0s ago: executing program 0 (id=570): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): adv0: Interface deactivated: batadv_slave_1 [ 74.272569][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.320053][ T4227] usb 2-1: USB disconnect, device number 3 [ 76.388864][ T4371] futex_wake_op: syz.4.26 tries to shift op by 144; fix this program [ 76.398227][ T4371] futex_wake_op: syz.4.26 tries to shift op by 144; fix this program [ 76.430117][ T4372] syz.1.27 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 76.441575][ T4372] CPU: 0 PID: 4372 Comm: syz.1.27 Not tainted syzkaller #0 [ 76.448790][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.458850][ T4372] Call Trace: [ 76.462119][ T4372] [ 76.465050][ T4372] dump_stack_lvl+0x188/0x250 [ 76.469735][ T4372] ? show_regs_print_info+0x20/0x20 [ 76.474949][ T4372] ? load_image+0x410/0x410 [ 76.479446][ T4372] ? local_lock_release+0x170/0x170 [ 76.484641][ T4372] ? __rwlock_init+0x140/0x140 [ 76.489398][ T4372] dump_header+0xd9/0x780 [ 76.493748][ T4372] oom_kill_process+0x20e/0x3d0 [ 76.498684][ T4372] out_of_memory+0xdb2/0x1190 [ 76.503378][ T4372] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 76.509014][ T4372] ? mutex_lock_io_nested+0x60/0x60 [ 76.514236][ T4372] ? unregister_oom_notifier+0x20/0x20 [ 76.519692][ T4372] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 76.525230][ T4372] ? mem_cgroup_oom_trylock+0x210/0x210 [ 76.530885][ T4372] ? do_raw_spin_unlock+0x11d/0x230 [ 76.536107][ T4372] try_charge_memcg+0x1075/0x15b0 [ 76.541143][ T4372] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 76.546951][ T4372] ? rcu_lock_acquire+0x30/0x30 [ 76.551796][ T4372] ? mark_lock+0x94/0x320 [ 76.556116][ T4372] ? __lock_acquire+0x13dc/0x7b50 [ 76.561132][ T4372] obj_cgroup_charge_pages+0x87/0x190 [ 76.566493][ T4372] ? __memcg_kmem_charge_page+0x380/0x380 [ 76.572207][ T4372] ? rcu_lock_acquire+0x30/0x30 [ 76.577058][ T4372] obj_cgroup_charge+0x19f/0x320 [ 76.581988][ T4372] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 76.587752][ T4372] slab_pre_alloc_hook+0x9d/0xc0 [ 76.592723][ T4372] ? __d_alloc+0x27/0x6d0 [ 76.597048][ T4372] kmem_cache_alloc+0x3d/0x280 [ 76.601817][ T4372] __d_alloc+0x27/0x6d0 [ 76.606000][ T4372] d_alloc_parallel+0x7b/0x1320 [ 76.610848][ T4372] ? __init_waitqueue_head+0xa4/0x140 [ 76.616210][ T4372] __lookup_slow+0x134/0x410 [ 76.620815][ T4372] ? lookup_one_len+0x2d0/0x2d0 [ 76.625682][ T4372] ? down_read+0x1aa/0x2e0 [ 76.630096][ T4372] lookup_slow+0x53/0x70 [ 76.634362][ T4372] walk_component+0x314/0x460 [ 76.639047][ T4372] path_lookupat+0x148/0x420 [ 76.643648][ T4372] filename_lookup+0x21e/0x550 [ 76.648448][ T4372] ? __lock_acquire+0x7b50/0x7b50 [ 76.653501][ T4372] ? hashlen_string+0x110/0x110 [ 76.658363][ T4372] ? strncpy_from_user+0x1f4/0x350 [ 76.663497][ T4372] ? getname_flags+0x1f9/0x4f0 [ 76.668262][ T4372] user_path_at_empty+0x40/0x190 [ 76.673206][ T4372] __se_sys_mount+0x2a4/0x3d0 [ 76.677896][ T4372] ? __x64_sys_mount+0xc0/0xc0 [ 76.682694][ T4372] ? lockdep_hardirqs_on+0x94/0x140 [ 76.687901][ T4372] ? __x64_sys_mount+0x1c/0xc0 [ 76.692792][ T4372] do_syscall_64+0x4c/0xa0 [ 76.697219][ T4372] ? clear_bhb_loop+0x30/0x80 [ 76.701889][ T4372] ? clear_bhb_loop+0x30/0x80 [ 76.706579][ T4372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.712485][ T4372] RIP: 0033:0x7f311b02e159 [ 76.716905][ T4372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.736505][ T4372] RSP: 002b:00007f3119265028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.744909][ T4372] RAX: ffffffffffffffda RBX: 00007f311b2b6090 RCX: 00007f311b02e159 [ 76.752875][ T4372] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 76.760836][ T4372] RBP: 00007f311b0c506b R08: 0000000000000000 R09: 0000000000000000 [ 76.768799][ T4372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.776779][ T4372] R13: 00007f311b2b6128 R14: 00007f311b2b6090 R15: 00007ffc4b27b088 [ 76.784765][ T4372] [ 76.800798][ T4372] memory: usage 0kB, limit 0kB, failcnt 19 [ 76.838934][ T4372] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 76.860303][ T4372] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 76.974368][ T4372] Memory cgroup stats for /syz1/test: [ 77.009082][ T4372] anon 0 [ 77.009082][ T4372] file 0 [ 77.009082][ T4372] kernel_stack 0 [ 77.009082][ T4372] pagetables 0 [ 77.009082][ T4372] percpu 0 [ 77.009082][ T4372] sock 0 [ 77.009082][ T4372] shmem 0 [ 77.009082][ T4372] file_mapped 0 [ 77.009082][ T4372] file_dirty 0 [ 77.009082][ T4372] file_writeback 0 [ 77.009082][ T4372] swapcached 0 [ 77.009082][ T4372] anon_thp 0 [ 77.009082][ T4372] file_thp 0 [ 77.009082][ T4372] shmem_thp 0 [ 77.009082][ T4372] inactive_anon 0 [ 77.009082][ T4372] active_anon 0 [ 77.009082][ T4372] inactive_file 0 [ 77.009082][ T4372] active_file 0 [ 77.009082][ T4372] unevictable 0 [ 77.009082][ T4372] slab_reclaimable 0 [ 77.009082][ T4372] slab_unreclaimable 0 [ 77.009082][ T4372] slab 0 [ 77.009082][ T4372] workingset_refault_anon 0 [ 77.009082][ T4372] workingset_refault_file 0 [ 77.009082][ T4372] workingset_activate_anon 0 [ 77.009082][ T4372] workingset_activate_file 0 [ 77.674979][ T4372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.27,pid=4369,uid=0 [ 77.696184][ T4372] Memory cgroup out of memory: Killed process 4369 (syz.1.27) total-vm:102376kB, anon-rss:1396kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 77.888118][ T4383] device-mapper: dirty region log: invalid region size 1024 [ 77.917388][ T4383] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 77.942100][ T4383] device-mapper: ioctl: error adding target to table [ 77.956617][ T4389] comedi comedi1: Minor 16 could not be opened [ 78.272368][ T4232] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.831027][ T4401] rdma_rxe: rxe_register_device failed with error -23 [ 78.842071][ T4401] rdma_rxe: failed to add syz_tun [ 78.980506][ T4405] futex_wake_op: syz.2.40 tries to shift op by 144; fix this program [ 79.011900][ T4405] futex_wake_op: syz.2.40 tries to shift op by 144; fix this program [ 79.062402][ T13] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 79.083028][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.096596][ T4232] usb 5-1: config 0 has no interfaces? [ 79.142347][ T4305] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.282485][ T4232] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 79.296003][ T4232] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 79.316409][ T4232] usb 5-1: Product: syz [ 79.327194][ T4232] usb 5-1: Manufacturer: syz [ 79.337363][ T4232] usb 5-1: SerialNumber: syz [ 79.353740][ T4232] usb 5-1: config 0 descriptor?? [ 79.402430][ T4305] usb 4-1: Using ep0 maxpacket: 8 [ 79.432565][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.522530][ T4305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.546325][ T4305] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 79.584814][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.608763][ T4232] usb 5-1: USB disconnect, device number 2 [ 79.616349][ T13] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 79.643272][ T13] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 79.659701][ T4305] usb 4-1: config 0 descriptor?? [ 79.681102][ T13] usb 2-1: Product: syz [ 79.695688][ T13] usb 2-1: Manufacturer: syz [ 79.710129][ T13] usb 2-1: SerialNumber: syz [ 79.717507][ T4305] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 79.768296][ T13] usb 2-1: config 0 descriptor?? [ 79.813734][ T13] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 79.827071][ T13] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 79.865628][ T13] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 79.893310][ T13] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 79.913648][ T13] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 79.926931][ T13] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 79.936752][ T13] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 79.947571][ T13] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 79.956634][ T13] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 79.969448][ T13] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 80.009613][ T13] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 80.086480][ T154] bond0: (slave bond_slave_0): interface is now down [ 80.103281][ T154] bond0: (slave bond_slave_1): interface is now down [ 80.393139][ T154] bond0: now running without any active interface! [ 80.878473][ T4305] usb 2-1: USB disconnect, device number 4 [ 80.925295][ T4305] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 80.955874][ T4305] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 80.981651][ T4305] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 80.994986][ T4305] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 81.005647][ T4305] keyspan 2-1:0.0: device disconnected [ 81.096713][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.104519][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.156685][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.164695][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.537798][ T1110] cfg80211: failed to load regulatory.db [ 83.184097][ T4422] syz.0.44 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 83.286353][ T4422] CPU: 1 PID: 4422 Comm: syz.0.44 Not tainted syzkaller #0 [ 83.293599][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.303664][ T4422] Call Trace: [ 83.306946][ T4422] [ 83.309865][ T4422] dump_stack_lvl+0x188/0x250 [ 83.314527][ T4422] ? show_regs_print_info+0x20/0x20 [ 83.319719][ T4422] ? load_image+0x410/0x410 [ 83.324209][ T4422] ? local_lock_release+0x170/0x170 [ 83.329431][ T4422] ? __rwlock_init+0x140/0x140 [ 83.334219][ T4422] dump_header+0xd9/0x780 [ 83.338563][ T4422] oom_kill_process+0x20e/0x3d0 [ 83.343411][ T4422] out_of_memory+0xdb2/0x1190 [ 83.348076][ T4422] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 83.353698][ T4422] ? mutex_lock_io_nested+0x60/0x60 [ 83.358884][ T4422] ? unregister_oom_notifier+0x20/0x20 [ 83.364333][ T4422] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 83.369888][ T4422] ? mem_cgroup_oom_trylock+0x210/0x210 [ 83.375433][ T4422] ? do_raw_spin_unlock+0x11d/0x230 [ 83.380636][ T4422] try_charge_memcg+0x1075/0x15b0 [ 83.385662][ T4422] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 83.391453][ T4422] ? rcu_lock_acquire+0x30/0x30 [ 83.396309][ T4422] ? mark_lock+0x94/0x320 [ 83.400644][ T4422] ? __lock_acquire+0x13dc/0x7b50 [ 83.405664][ T4422] obj_cgroup_charge_pages+0x87/0x190 [ 83.411022][ T4422] ? __memcg_kmem_charge_page+0x380/0x380 [ 83.416747][ T4422] ? rcu_lock_acquire+0x30/0x30 [ 83.421669][ T4422] obj_cgroup_charge+0x19f/0x320 [ 83.426630][ T4422] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 83.431733][ T4422] slab_pre_alloc_hook+0x9d/0xc0 [ 83.436661][ T4422] ? __d_alloc+0x27/0x6d0 [ 83.440977][ T4422] kmem_cache_alloc+0x3d/0x280 [ 83.445733][ T4422] __d_alloc+0x27/0x6d0 [ 83.449916][ T4422] d_alloc_parallel+0x7b/0x1320 [ 83.454777][ T4422] ? __init_waitqueue_head+0xa4/0x140 [ 83.460161][ T4422] __lookup_slow+0x134/0x410 [ 83.464738][ T4422] ? lookup_one_len+0x2d0/0x2d0 [ 83.469589][ T4422] ? down_read+0x1aa/0x2e0 [ 83.474028][ T4422] lookup_slow+0x53/0x70 [ 83.478262][ T4422] walk_component+0x314/0x460 [ 83.482947][ T4422] path_lookupat+0x148/0x420 [ 83.487540][ T4422] filename_lookup+0x21e/0x550 [ 83.492305][ T4422] ? __lock_acquire+0x7b50/0x7b50 [ 83.497514][ T4422] ? hashlen_string+0x110/0x110 [ 83.502381][ T4422] ? strncpy_from_user+0x1f4/0x350 [ 83.507602][ T4422] ? getname_flags+0x1f9/0x4f0 [ 83.512371][ T4422] user_path_at_empty+0x40/0x190 [ 83.517304][ T4422] __se_sys_mount+0x2a4/0x3d0 [ 83.521972][ T4422] ? __x64_sys_mount+0xc0/0xc0 [ 83.526728][ T4422] ? lockdep_hardirqs_on+0x94/0x140 [ 83.531924][ T4422] ? __x64_sys_mount+0x1c/0xc0 [ 83.536678][ T4422] do_syscall_64+0x4c/0xa0 [ 83.541077][ T4422] ? clear_bhb_loop+0x30/0x80 [ 83.545751][ T4422] ? clear_bhb_loop+0x30/0x80 [ 83.550465][ T4422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.556355][ T4422] RIP: 0033:0x7f450b7ee159 [ 83.560760][ T4422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.580457][ T4422] RSP: 002b:00007f4509a25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.588877][ T4422] RAX: ffffffffffffffda RBX: 00007f450ba76090 RCX: 00007f450b7ee159 [ 83.596841][ T4422] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 83.604803][ T4422] RBP: 00007f450b88506b R08: 0000000000000000 R09: 0000000000000000 [ 83.612766][ T4422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.620721][ T4422] R13: 00007f450ba76128 R14: 00007f450ba76090 R15: 00007fffe4a173b8 [ 83.628710][ T4422] [ 83.667234][ T4422] memory: usage 0kB, limit 0kB, failcnt 19 [ 83.746281][ T4422] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 83.756008][ T4422] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 83.764322][ T4422] Memory cgroup stats for /syz0/test: [ 83.764511][ T4422] anon 0 [ 83.764511][ T4422] file 0 [ 83.764511][ T4422] kernel_stack 0 [ 83.764511][ T4422] pagetables 0 [ 83.764511][ T4422] percpu 0 [ 83.764511][ T4422] sock 0 [ 83.764511][ T4422] shmem 0 [ 83.764511][ T4422] file_mapped 0 [ 83.764511][ T4422] file_dirty 0 [ 83.764511][ T4422] file_writeback 0 [ 83.764511][ T4422] swapcached 0 [ 83.764511][ T4422] anon_thp 0 [ 83.764511][ T4422] file_thp 0 [ 83.764511][ T4422] shmem_thp 0 [ 83.764511][ T4422] inactive_anon 0 [ 83.764511][ T4422] active_anon 0 [ 83.764511][ T4422] inactive_file 0 [ 83.764511][ T4422] active_file 0 [ 83.764511][ T4422] unevictable 0 [ 83.764511][ T4422] slab_reclaimable 0 [ 83.764511][ T4422] slab_unreclaimable 0 [ 83.764511][ T4422] slab 0 [ 83.764511][ T4422] workingset_refault_anon 0 [ 83.764511][ T4422] workingset_refault_file 0 [ 83.764511][ T4422] workingset_activate_anon 0 [ 83.764511][ T4422] workingset_activate_file 0 [ 83.872284][ T4422] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.44,pid=4419,uid=0 [ 83.891704][ T13] usb 4-1: USB disconnect, device number 2 [ 83.918255][ T4422] Memory cgroup out of memory: Killed process 4419 (syz.0.44) total-vm:102376kB, anon-rss:1396kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 84.082370][ T4435] device-mapper: dirty region log: invalid region size 1024 [ 84.100941][ T4435] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 84.125710][ T4435] device-mapper: ioctl: error adding target to table [ 84.161257][ T4433] comedi comedi1: Minor 16 could not be opened [ 84.964200][ T4444] futex_wake_op: syz.0.51 tries to shift op by 144; fix this program [ 84.977743][ T4444] futex_wake_op: syz.0.51 tries to shift op by 144; fix this program [ 85.282550][ T4333] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 85.917264][ T4454] rdma_rxe: rxe_register_device failed with error -23 [ 85.924543][ T4454] rdma_rxe: failed to add syz_tun [ 86.193125][ T4305] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.212712][ T4333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.224680][ T4333] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.259478][ T4467] syz.0.61 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 86.273003][ T4227] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 86.289905][ T4467] CPU: 0 PID: 4467 Comm: syz.0.61 Not tainted syzkaller #0 [ 86.297127][ T4467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.307194][ T4467] Call Trace: [ 86.310485][ T4467] [ 86.313410][ T4467] dump_stack_lvl+0x188/0x250 [ 86.318078][ T4467] ? show_regs_print_info+0x20/0x20 [ 86.323261][ T4467] ? load_image+0x410/0x410 [ 86.327862][ T4467] ? local_lock_release+0x170/0x170 [ 86.333068][ T4467] ? __rwlock_init+0x140/0x140 [ 86.337823][ T4467] dump_header+0xd9/0x780 [ 86.342141][ T4467] oom_kill_process+0x20e/0x3d0 [ 86.346981][ T4467] out_of_memory+0xdb2/0x1190 [ 86.351651][ T4467] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 86.357272][ T4467] ? mutex_lock_io_nested+0x60/0x60 [ 86.362456][ T4467] ? unregister_oom_notifier+0x20/0x20 [ 86.367917][ T4467] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 86.373466][ T4467] ? mem_cgroup_oom_trylock+0x210/0x210 [ 86.379003][ T4467] ? do_raw_spin_unlock+0x11d/0x230 [ 86.384204][ T4467] try_charge_memcg+0x1075/0x15b0 [ 86.389224][ T4467] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 86.395021][ T4467] ? rcu_lock_acquire+0x30/0x30 [ 86.399889][ T4467] ? mark_lock+0x94/0x320 [ 86.404210][ T4467] ? __lock_acquire+0x13dc/0x7b50 [ 86.409228][ T4467] obj_cgroup_charge_pages+0x87/0x190 [ 86.414612][ T4467] ? __memcg_kmem_charge_page+0x380/0x380 [ 86.420323][ T4467] ? rcu_lock_acquire+0x30/0x30 [ 86.425158][ T4467] obj_cgroup_charge+0x19f/0x320 [ 86.430092][ T4467] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 86.435193][ T4467] slab_pre_alloc_hook+0x9d/0xc0 [ 86.440140][ T4467] ? __d_alloc+0x27/0x6d0 [ 86.444463][ T4467] kmem_cache_alloc+0x3d/0x280 [ 86.449243][ T4467] __d_alloc+0x27/0x6d0 [ 86.453387][ T4467] d_alloc_parallel+0x7b/0x1320 [ 86.458227][ T4467] ? __init_waitqueue_head+0xa4/0x140 [ 86.463586][ T4467] __lookup_slow+0x134/0x410 [ 86.468192][ T4467] ? lookup_one_len+0x2d0/0x2d0 [ 86.473073][ T4467] ? down_read+0x1aa/0x2e0 [ 86.477485][ T4467] lookup_slow+0x53/0x70 [ 86.481732][ T4467] walk_component+0x314/0x460 [ 86.486441][ T4467] path_lookupat+0x148/0x420 [ 86.491028][ T4467] filename_lookup+0x21e/0x550 [ 86.495786][ T4467] ? __lock_acquire+0x7b50/0x7b50 [ 86.500821][ T4467] ? hashlen_string+0x110/0x110 [ 86.505685][ T4467] ? strncpy_from_user+0x1f4/0x350 [ 86.510791][ T4467] ? getname_flags+0x1f9/0x4f0 [ 86.515549][ T4467] user_path_at_empty+0x40/0x190 [ 86.520514][ T4467] __se_sys_mount+0x2a4/0x3d0 [ 86.525182][ T4467] ? __x64_sys_mount+0xc0/0xc0 [ 86.529932][ T4467] ? lockdep_hardirqs_on+0x94/0x140 [ 86.535120][ T4467] ? __x64_sys_mount+0x1c/0xc0 [ 86.539873][ T4467] do_syscall_64+0x4c/0xa0 [ 86.544273][ T4467] ? clear_bhb_loop+0x30/0x80 [ 86.548948][ T4467] ? clear_bhb_loop+0x30/0x80 [ 86.553632][ T4467] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.559514][ T4467] RIP: 0033:0x7f450b7ee159 [ 86.563918][ T4467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.583526][ T4467] RSP: 002b:00007f4509a25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.591931][ T4467] RAX: ffffffffffffffda RBX: 00007f450ba76090 RCX: 00007f450b7ee159 [ 86.599893][ T4467] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 86.607859][ T4467] RBP: 00007f450b88506b R08: 0000000000000000 R09: 0000000000000000 [ 86.615824][ T4467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.623795][ T4467] R13: 00007f450ba76128 R14: 00007f450ba76090 R15: 00007fffe4a173b8 [ 86.631896][ T4467] [ 86.650167][ T4467] memory: usage 0kB, limit 0kB, failcnt 55 [ 86.657566][ T4467] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 86.665519][ T4467] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 86.673049][ T4467] Memory cgroup stats for /syz0/test: [ 86.673341][ T4467] anon 0 [ 86.673341][ T4467] file 0 [ 86.673341][ T4467] kernel_stack 0 [ 86.673341][ T4467] pagetables 0 [ 86.673341][ T4467] percpu 0 [ 86.673341][ T4467] sock 0 [ 86.673341][ T4467] shmem 0 [ 86.673341][ T4467] file_mapped 0 [ 86.673341][ T4467] file_dirty 0 [ 86.673341][ T4467] file_writeback 0 [ 86.673341][ T4467] swapcached 0 [ 86.673341][ T4467] anon_thp 0 [ 86.673341][ T4467] file_thp 0 [ 86.673341][ T4467] shmem_thp 0 [ 86.673341][ T4467] inactive_anon 0 [ 86.673341][ T4467] active_anon 0 [ 86.673341][ T4467] inactive_file 0 [ 86.673341][ T4467] active_file 0 [ 86.673341][ T4467] unevictable 0 [ 86.673341][ T4467] slab_reclaimable 0 [ 86.673341][ T4467] slab_unreclaimable 0 [ 86.673341][ T4467] slab 0 [ 86.673341][ T4467] workingset_refault_anon 0 [ 86.673341][ T4467] workingset_refault_file 0 [ 86.673341][ T4467] workingset_activate_anon 0 [ 86.673341][ T4467] workingset_activate_file 0 [ 86.777900][ T4467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.61,pid=4463,uid=0 [ 86.797696][ T4467] Memory cgroup out of memory: Killed process 4463 (syz.0.61) total-vm:102376kB, anon-rss:1396kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 86.822350][ T4305] usb 4-1: Using ep0 maxpacket: 8 [ 86.832820][ T4333] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 86.841911][ T4333] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 86.882490][ T4227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.884869][ T4333] usb 5-1: Product: syz [ 86.900946][ T4333] usb 5-1: Manufacturer: syz [ 86.908118][ T4333] usb 5-1: SerialNumber: syz [ 86.918028][ T4333] usb 5-1: config 0 descriptor?? [ 86.942851][ T4305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.956317][ T4305] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 86.968429][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.020265][ T4305] usb 4-1: config 0 descriptor?? [ 87.072522][ T4227] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 87.074721][ T4305] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 87.115153][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.122863][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.737127][ T4227] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 88.853556][ T4475] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 88.951222][ T4227] usb 3-1: Product: syz [ 88.951243][ T4227] usb 3-1: Manufacturer: syz [ 88.951257][ T4227] usb 3-1: SerialNumber: syz [ 88.971380][ T4227] usb 3-1: config 0 descriptor?? [ 88.976833][ T4229] usb 5-1: USB disconnect, device number 3 [ 88.992825][ T4227] usb 3-1: can't set config #0, error -71 [ 88.994665][ T4227] usb 3-1: USB disconnect, device number 4 [ 89.089104][ T4482] device-mapper: dirty region log: invalid region size 1024 [ 89.089135][ T4482] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 89.089143][ T4482] device-mapper: ioctl: error adding target to table [ 89.090115][ T4482] comedi comedi1: Minor 16 could not be opened [ 89.939430][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.948110][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.283981][ T4492] futex_wake_op: syz.2.67 tries to shift op by 144; fix this program [ 90.298235][ T4492] futex_wake_op: syz.2.67 tries to shift op by 144; fix this program [ 91.485487][ T4232] usb 4-1: USB disconnect, device number 3 [ 91.603620][ T4504] syz.3.73 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 91.644856][ T4504] CPU: 1 PID: 4504 Comm: syz.3.73 Not tainted syzkaller #0 [ 91.652102][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.662262][ T4504] Call Trace: [ 91.665551][ T4504] [ 91.668493][ T4504] dump_stack_lvl+0x188/0x250 [ 91.673191][ T4504] ? show_regs_print_info+0x20/0x20 [ 91.678411][ T4504] ? load_image+0x410/0x410 [ 91.682937][ T4504] ? local_lock_release+0x170/0x170 [ 91.688156][ T4504] ? __rwlock_init+0x140/0x140 [ 91.692936][ T4504] dump_header+0xd9/0x780 [ 91.697290][ T4504] oom_kill_process+0x20e/0x3d0 [ 91.702157][ T4504] out_of_memory+0xdb2/0x1190 [ 91.706842][ T4504] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 91.712479][ T4504] ? mutex_lock_io_nested+0x60/0x60 [ 91.717689][ T4504] ? unregister_oom_notifier+0x20/0x20 [ 91.723143][ T4504] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 91.728705][ T4504] ? mem_cgroup_oom_trylock+0x210/0x210 [ 91.734257][ T4504] ? do_raw_spin_unlock+0x11d/0x230 [ 91.739478][ T4504] try_charge_memcg+0x1075/0x15b0 [ 91.744518][ T4504] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 91.750320][ T4504] ? rcu_lock_acquire+0x30/0x30 [ 91.755173][ T4504] ? mark_lock+0x94/0x320 [ 91.759521][ T4504] ? __lock_acquire+0x13dc/0x7b50 [ 91.764554][ T4504] obj_cgroup_charge_pages+0x87/0x190 [ 91.769939][ T4504] ? __memcg_kmem_charge_page+0x380/0x380 [ 91.775700][ T4504] ? rcu_lock_acquire+0x30/0x30 [ 91.780580][ T4504] obj_cgroup_charge+0x19f/0x320 [ 91.785505][ T4504] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 91.790630][ T4504] slab_pre_alloc_hook+0x9d/0xc0 [ 91.795554][ T4504] ? __d_alloc+0x27/0x6d0 [ 91.799869][ T4504] kmem_cache_alloc+0x3d/0x280 [ 91.804642][ T4504] __d_alloc+0x27/0x6d0 [ 91.808783][ T4504] d_alloc_parallel+0x7b/0x1320 [ 91.813638][ T4504] ? __init_waitqueue_head+0xa4/0x140 [ 91.819014][ T4504] __lookup_slow+0x134/0x410 [ 91.823592][ T4504] ? lookup_one_len+0x2d0/0x2d0 [ 91.828449][ T4504] ? down_read+0x1aa/0x2e0 [ 91.832854][ T4504] lookup_slow+0x53/0x70 [ 91.837111][ T4504] walk_component+0x314/0x460 [ 91.841817][ T4504] path_lookupat+0x148/0x420 [ 91.846393][ T4504] filename_lookup+0x21e/0x550 [ 91.851139][ T4504] ? __lock_acquire+0x7b50/0x7b50 [ 91.856168][ T4504] ? hashlen_string+0x110/0x110 [ 91.861017][ T4504] ? strncpy_from_user+0x1f4/0x350 [ 91.866117][ T4504] ? getname_flags+0x1f9/0x4f0 [ 91.870869][ T4504] user_path_at_empty+0x40/0x190 [ 91.875802][ T4504] __se_sys_mount+0x2a4/0x3d0 [ 91.880485][ T4504] ? __x64_sys_mount+0xc0/0xc0 [ 91.885240][ T4504] ? lockdep_hardirqs_on+0x94/0x140 [ 91.890435][ T4504] ? __x64_sys_mount+0x1c/0xc0 [ 91.895183][ T4504] do_syscall_64+0x4c/0xa0 [ 91.899584][ T4504] ? clear_bhb_loop+0x30/0x80 [ 91.904253][ T4504] ? clear_bhb_loop+0x30/0x80 [ 91.908929][ T4504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.914806][ T4504] RIP: 0033:0x7f4389a95159 [ 91.919204][ T4504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.938831][ T4504] RSP: 002b:00007f4387ccc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.947266][ T4504] RAX: ffffffffffffffda RBX: 00007f4389d1d090 RCX: 00007f4389a95159 [ 91.955228][ T4504] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 91.963270][ T4504] RBP: 00007f4389b2c06b R08: 0000000000000000 R09: 0000000000000000 [ 91.971238][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.979632][ T4504] R13: 00007f4389d1d128 R14: 00007f4389d1d090 R15: 00007ffd02d99c98 [ 91.987623][ T4504] [ 91.990637][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.061754][ T4504] memory: usage 0kB, limit 0kB, failcnt 19 [ 92.079666][ T4504] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 92.098505][ T4504] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 92.127816][ T4512] device-mapper: dirty region log: invalid region size 1024 [ 92.137162][ T4504] Memory cgroup stats for /syz3/test: [ 92.138469][ T4504] anon 0 [ 92.138469][ T4504] file 0 [ 92.138469][ T4504] kernel_stack 0 [ 92.138469][ T4504] pagetables 0 [ 92.138469][ T4504] percpu 0 [ 92.138469][ T4504] sock 0 [ 92.138469][ T4504] shmem 0 [ 92.138469][ T4504] file_mapped 0 [ 92.138469][ T4504] file_dirty 0 [ 92.138469][ T4504] file_writeback 0 [ 92.138469][ T4504] swapcached 0 [ 92.138469][ T4504] anon_thp 0 [ 92.138469][ T4504] file_thp 0 [ 92.138469][ T4504] shmem_thp 0 [ 92.138469][ T4504] inactive_anon 0 [ 92.138469][ T4504] active_anon 0 [ 92.138469][ T4504] inactive_file 0 [ 92.138469][ T4504] active_file 0 [ 92.138469][ T4504] unevictable 0 [ 92.138469][ T4504] slab_reclaimable 0 [ 92.138469][ T4504] slab_unreclaimable 0 [ 92.138469][ T4504] slab 0 [ 92.138469][ T4504] workingset_refault_anon 0 [ 92.138469][ T4504] workingset_refault_file 0 [ 92.138469][ T4504] workingset_activate_anon 0 [ 92.138469][ T4504] workingset_activate_file 0 [ 92.231731][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.254224][ T4504] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.73,pid=4500,uid=0 [ 92.255568][ T4512] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 92.271419][ T4514] comedi comedi1: Minor 16 could not be opened [ 92.282307][ T2304] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 92.285042][ T4504] Memory cgroup out of memory: Killed process 4500 (syz.3.73) total-vm:102376kB, anon-rss:1400kB, file-rss:21820kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 92.309211][ T4512] device-mapper: ioctl: error adding target to table [ 92.962436][ T2304] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.982284][ T2304] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.152447][ T2304] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 94.911868][ T2304] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 94.920483][ T2304] usb 3-1: Product: syz [ 94.924938][ T2304] usb 3-1: Manufacturer: syz [ 94.930796][ T2304] usb 3-1: SerialNumber: syz [ 94.937472][ T2304] usb 3-1: config 0 descriptor?? [ 94.969178][ T2304] usb 3-1: can't set config #0, error -71 [ 94.982949][ T2304] usb 3-1: USB disconnect, device number 5 [ 95.140884][ T4527] futex_wake_op: syz.4.80 tries to shift op by 144; fix this program [ 95.180938][ T4527] futex_wake_op: syz.4.80 tries to shift op by 144; fix this program [ 95.198727][ T4532] rdma_rxe: already configured on syz_tun [ 95.307970][ T4538] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 95.409920][ T4541] syz.0.88 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.419754][ T4541] CPU: 0 PID: 4541 Comm: syz.0.88 Not tainted syzkaller #0 [ 95.426966][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.437028][ T4541] Call Trace: [ 95.440301][ T4541] [ 95.443223][ T4541] dump_stack_lvl+0x188/0x250 [ 95.447899][ T4541] ? show_regs_print_info+0x20/0x20 [ 95.453086][ T4541] ? load_image+0x410/0x410 [ 95.457606][ T4541] ? local_lock_release+0x170/0x170 [ 95.462821][ T4541] ? __rwlock_init+0x140/0x140 [ 95.467595][ T4541] dump_header+0xd9/0x780 [ 95.471922][ T4541] oom_kill_process+0x20e/0x3d0 [ 95.476764][ T4541] out_of_memory+0xdb2/0x1190 [ 95.481452][ T4541] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 95.487080][ T4541] ? mutex_lock_io_nested+0x60/0x60 [ 95.492280][ T4541] ? unregister_oom_notifier+0x20/0x20 [ 95.497735][ T4541] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 95.503273][ T4541] ? mem_cgroup_oom_trylock+0x210/0x210 [ 95.508814][ T4541] ? do_raw_spin_unlock+0x11d/0x230 [ 95.514017][ T4541] try_charge_memcg+0x1075/0x15b0 [ 95.519047][ T4541] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 95.522448][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.524846][ T4541] ? rcu_lock_acquire+0x30/0x30 [ 95.524898][ T4541] ? mark_lock+0x94/0x320 [ 95.524917][ T4541] ? __lock_acquire+0x13dc/0x7b50 [ 95.524947][ T4541] obj_cgroup_charge_pages+0x87/0x190 [ 95.524964][ T4541] ? __memcg_kmem_charge_page+0x380/0x380 [ 95.524984][ T4541] ? rcu_lock_acquire+0x30/0x30 [ 95.525005][ T4541] obj_cgroup_charge+0x19f/0x320 [ 95.525024][ T4541] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 95.525054][ T4541] slab_pre_alloc_hook+0x9d/0xc0 [ 95.525072][ T4541] ? __d_alloc+0x27/0x6d0 [ 95.525089][ T4541] kmem_cache_alloc+0x3d/0x280 [ 95.525117][ T4541] __d_alloc+0x27/0x6d0 [ 95.525139][ T4541] d_alloc_parallel+0x7b/0x1320 [ 95.525171][ T4541] ? __init_waitqueue_head+0xa4/0x140 [ 95.525195][ T4541] __lookup_slow+0x134/0x410 [ 95.525216][ T4541] ? lookup_one_len+0x2d0/0x2d0 [ 95.525247][ T4541] ? down_read+0x1aa/0x2e0 [ 95.525266][ T4541] lookup_slow+0x53/0x70 [ 95.525285][ T4541] walk_component+0x314/0x460 [ 95.525310][ T4541] path_lookupat+0x148/0x420 [ 95.525333][ T4541] filename_lookup+0x21e/0x550 [ 95.525354][ T4541] ? __lock_acquire+0x7b50/0x7b50 [ 95.525373][ T4541] ? hashlen_string+0x110/0x110 [ 95.642995][ T4541] ? strncpy_from_user+0x1f4/0x350 [ 95.648104][ T4541] ? getname_flags+0x1f9/0x4f0 [ 95.652868][ T4541] user_path_at_empty+0x40/0x190 [ 95.657803][ T4541] __se_sys_mount+0x2a4/0x3d0 [ 95.662484][ T4541] ? __x64_sys_mount+0xc0/0xc0 [ 95.667243][ T4541] ? lockdep_hardirqs_on+0x94/0x140 [ 95.672434][ T4541] ? __x64_sys_mount+0x1c/0xc0 [ 95.677213][ T4541] do_syscall_64+0x4c/0xa0 [ 95.681621][ T4541] ? clear_bhb_loop+0x30/0x80 [ 95.686299][ T4541] ? clear_bhb_loop+0x30/0x80 [ 95.690967][ T4541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.696868][ T4541] RIP: 0033:0x7f450b7ee159 [ 95.701271][ T4541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.720957][ T4541] RSP: 002b:00007f4509a25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.729455][ T4541] RAX: ffffffffffffffda RBX: 00007f450ba76090 RCX: 00007f450b7ee159 [ 95.737441][ T4541] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 95.745406][ T4541] RBP: 00007f450b88506b R08: 0000000000000000 R09: 0000000000000000 [ 95.753380][ T4541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.761591][ T4541] R13: 00007f450ba76128 R14: 00007f450ba76090 R15: 00007fffe4a173b8 [ 95.769601][ T4541] [ 95.778420][ T4541] memory: usage 0kB, limit 0kB, failcnt 91 [ 95.784320][ T4541] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 95.791788][ T4541] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 95.798974][ T4541] Memory cgroup stats for /syz0/test: [ 95.799082][ T4541] anon 0 [ 95.799082][ T4541] file 0 [ 95.799082][ T4541] kernel_stack 0 [ 95.799082][ T4541] pagetables 0 [ 95.799082][ T4541] percpu 0 [ 95.799082][ T4541] sock 0 [ 95.799082][ T4541] shmem 0 [ 95.799082][ T4541] file_mapped 0 [ 95.799082][ T4541] file_dirty 0 [ 95.799082][ T4541] file_writeback 0 [ 95.799082][ T4541] swapcached 0 [ 95.799082][ T4541] anon_thp 0 [ 95.799082][ T4541] file_thp 0 [ 95.799082][ T4541] shmem_thp 0 [ 95.799082][ T4541] inactive_anon 0 [ 95.799082][ T4541] active_anon 0 [ 95.799082][ T4541] inactive_file 0 [ 95.799082][ T4541] active_file 0 [ 95.799082][ T4541] unevictable 0 [ 95.799082][ T4541] slab_reclaimable 0 [ 95.799082][ T4541] slab_unreclaimable 0 [ 95.799082][ T4541] slab 0 [ 95.799082][ T4541] workingset_refault_anon 0 [ 95.799082][ T4541] workingset_refault_file 0 [ 95.799082][ T4541] workingset_activate_anon 0 [ 95.799082][ T4541] workingset_activate_file 0 [ 95.922346][ T4541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.88,pid=4539,uid=0 [ 95.942250][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 95.955583][ T4541] Memory cgroup out of memory: Killed process 4539 (syz.0.88) total-vm:102376kB, anon-rss:1396kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 96.047202][ T4545] device-mapper: dirty region log: invalid region size 1024 [ 96.054883][ T4545] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 96.072309][ T4545] device-mapper: ioctl: error adding target to table [ 96.088538][ T4545] comedi comedi1: Minor 16 could not be opened [ 96.102804][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.863982][ T21] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 96.891037][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.915310][ T21] usb 2-1: config 0 descriptor?? [ 96.954492][ T21] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 97.212309][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 97.592520][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.596703][ T21] usb 2-1: USB disconnect, device number 5 [ 97.772471][ T7] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 97.818133][ T7] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 97.832314][ T7] usb 5-1: Product: syz [ 97.836529][ T7] usb 5-1: Manufacturer: syz [ 97.852358][ T7] usb 5-1: SerialNumber: syz [ 97.868212][ T7] usb 5-1: config 0 descriptor?? [ 97.913995][ T7] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 97.955877][ T7] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 97.988429][ T7] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 98.038496][ T7] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 98.134467][ T7] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 98.268322][ T7] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 98.426496][ T7] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 98.578649][ T7] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 98.686739][ T7] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 98.728642][ T7] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 98.758850][ T7] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 98.778102][ T7] usb 5-1: USB disconnect, device number 4 [ 98.788063][ T7] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 98.819188][ T7] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 98.834670][ T7] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 98.850229][ T7] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 98.861261][ T7] keyspan 5-1:0.0: device disconnected [ 98.995744][ T4570] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 99.151258][ T4577] syz.1.101 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 99.193454][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.201090][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.726768][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.734555][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.908989][ T4577] CPU: 0 PID: 4577 Comm: syz.1.101 Not tainted syzkaller #0 [ 100.916312][ T4577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.926367][ T4577] Call Trace: [ 100.929648][ T4577] [ 100.932581][ T4577] dump_stack_lvl+0x188/0x250 [ 100.937270][ T4577] ? show_regs_print_info+0x20/0x20 [ 100.942470][ T4577] ? load_image+0x410/0x410 [ 100.946980][ T4577] ? local_lock_release+0x170/0x170 [ 100.952189][ T4577] ? __rwlock_init+0x140/0x140 [ 100.956976][ T4577] dump_header+0xd9/0x780 [ 100.961324][ T4577] oom_kill_process+0x20e/0x3d0 [ 100.966372][ T4577] out_of_memory+0xdb2/0x1190 [ 100.971064][ T4577] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 100.976718][ T4577] ? mutex_lock_io_nested+0x60/0x60 [ 100.981940][ T4577] ? unregister_oom_notifier+0x20/0x20 [ 100.987425][ T4577] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 100.992993][ T4577] ? mem_cgroup_oom_trylock+0x210/0x210 [ 100.998572][ T4577] ? do_raw_spin_unlock+0x11d/0x230 [ 101.003791][ T4577] try_charge_memcg+0x1075/0x15b0 [ 101.008855][ T4577] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 101.014776][ T4577] ? rcu_lock_acquire+0x30/0x30 [ 101.019736][ T4577] ? mark_lock+0x94/0x320 [ 101.024089][ T4577] ? __lock_acquire+0x13dc/0x7b50 [ 101.029150][ T4577] obj_cgroup_charge_pages+0x87/0x190 [ 101.034543][ T4577] ? __memcg_kmem_charge_page+0x380/0x380 [ 101.040291][ T4577] ? rcu_lock_acquire+0x30/0x30 [ 101.045159][ T4577] obj_cgroup_charge+0x19f/0x320 [ 101.050092][ T4577] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 101.055221][ T4577] slab_pre_alloc_hook+0x9d/0xc0 [ 101.060177][ T4577] ? __d_alloc+0x27/0x6d0 [ 101.064528][ T4577] kmem_cache_alloc+0x3d/0x280 [ 101.069316][ T4577] __d_alloc+0x27/0x6d0 [ 101.073486][ T4577] d_alloc_parallel+0x7b/0x1320 [ 101.078355][ T4577] ? __init_waitqueue_head+0xa4/0x140 [ 101.083733][ T4577] __lookup_slow+0x134/0x410 [ 101.088418][ T4577] ? lookup_one_len+0x2d0/0x2d0 [ 101.093292][ T4577] ? down_read+0x1aa/0x2e0 [ 101.097710][ T4577] lookup_slow+0x53/0x70 [ 101.102043][ T4577] walk_component+0x314/0x460 [ 101.106748][ T4577] path_lookupat+0x148/0x420 [ 101.111365][ T4577] filename_lookup+0x21e/0x550 [ 101.116189][ T4577] ? __lock_acquire+0x7b50/0x7b50 [ 101.121239][ T4577] ? hashlen_string+0x110/0x110 [ 101.126100][ T4577] ? strncpy_from_user+0x1f4/0x350 [ 101.131204][ T4577] ? getname_flags+0x1f9/0x4f0 [ 101.135967][ T4577] user_path_at_empty+0x40/0x190 [ 101.140895][ T4577] __se_sys_mount+0x2a4/0x3d0 [ 101.145565][ T4577] ? __x64_sys_mount+0xc0/0xc0 [ 101.150325][ T4577] ? lockdep_hardirqs_on+0x94/0x140 [ 101.155527][ T4577] ? __x64_sys_mount+0x1c/0xc0 [ 101.160290][ T4577] do_syscall_64+0x4c/0xa0 [ 101.164694][ T4577] ? clear_bhb_loop+0x30/0x80 [ 101.169358][ T4577] ? clear_bhb_loop+0x30/0x80 [ 101.174033][ T4577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.179927][ T4577] RIP: 0033:0x7f311b02e159 [ 101.184326][ T4577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.203939][ T4577] RSP: 002b:00007f3119265028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.212345][ T4577] RAX: ffffffffffffffda RBX: 00007f311b2b6090 RCX: 00007f311b02e159 [ 101.220332][ T4577] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 101.228318][ T4577] RBP: 00007f311b0c506b R08: 0000000000000000 R09: 0000000000000000 [ 101.236423][ T4577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.244387][ T4577] R13: 00007f311b2b6128 R14: 00007f311b2b6090 R15: 00007ffc4b27b088 [ 101.252359][ T4577] [ 101.277110][ T4584] futex_wake_op: syz.2.100 tries to shift op by 144; fix this program [ 101.287277][ T4587] device-mapper: dirty region log: invalid region size 1024 [ 101.297811][ T4584] futex_wake_op: syz.2.100 tries to shift op by 144; fix this program [ 101.308695][ T4587] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 101.333213][ T4587] device-mapper: ioctl: error adding target to table [ 101.356138][ T4577] memory: usage 0kB, limit 0kB, failcnt 55 [ 101.358961][ T4580] comedi comedi1: Minor 16 could not be opened [ 101.365013][ T4577] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 101.372227][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 101.388045][ T4577] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 101.395517][ T4577] Memory cgroup stats for /syz1/test: [ 101.395689][ T4577] anon 0 [ 101.395689][ T4577] file 0 [ 101.395689][ T4577] kernel_stack 0 [ 101.395689][ T4577] pagetables 0 [ 101.395689][ T4577] percpu 0 [ 101.395689][ T4577] sock 0 [ 101.395689][ T4577] shmem 0 [ 101.395689][ T4577] file_mapped 0 [ 101.395689][ T4577] file_dirty 0 [ 101.395689][ T4577] file_writeback 0 [ 101.395689][ T4577] swapcached 0 [ 101.395689][ T4577] anon_thp 0 [ 101.395689][ T4577] file_thp 0 [ 101.395689][ T4577] shmem_thp 0 [ 101.395689][ T4577] inactive_anon 0 [ 101.395689][ T4577] active_anon 0 [ 101.395689][ T4577] inactive_file 0 [ 101.395689][ T4577] active_file 0 [ 101.395689][ T4577] unevictable 0 [ 101.395689][ T4577] slab_reclaimable 0 [ 101.395689][ T4577] slab_unreclaimable 0 [ 101.395689][ T4577] slab 0 [ 101.395689][ T4577] workingset_refault_anon 0 [ 101.395689][ T4577] workingset_refault_file 0 [ 101.395689][ T4577] workingset_activate_anon 0 [ 101.395689][ T4577] workingset_activate_file 0 [ 101.675355][ T4577] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.101,pid=4572,uid=0 [ 101.694204][ T4577] Memory cgroup out of memory: Killed process 4572 (syz.1.101) total-vm:102376kB, anon-rss:1396kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 101.794007][ T4598] rdma_rxe: rxe_register_device failed with error -23 [ 101.801055][ T4598] rdma_rxe: failed to add syz_tun [ 102.763468][ T21] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 102.950309][ T4618] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 103.000484][ T4620] device-mapper: dirty region log: invalid region size 1024 [ 103.008038][ T4620] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 103.017217][ T4620] device-mapper: ioctl: error adding target to table [ 103.025768][ T4620] comedi comedi1: Minor 16 could not be opened [ 103.162343][ T4305] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 103.193069][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.413013][ T21] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 103.437579][ T21] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 103.475314][ T21] usb 2-1: Product: syz [ 103.480012][ T21] usb 2-1: Manufacturer: syz [ 103.559998][ T4629] futex_wake_op: syz.4.117 tries to shift op by 144; fix this program [ 103.574589][ T21] usb 2-1: SerialNumber: syz [ 103.658020][ T21] usb 2-1: config 0 descriptor?? [ 103.726912][ T4629] futex_wake_op: syz.4.117 tries to shift op by 144; fix this program [ 103.752889][ T21] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 103.766079][ T21] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 103.780026][ T21] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 103.819416][ T21] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 103.831625][ T21] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 103.859665][ T21] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 103.870123][ T21] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 103.886296][ T21] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 103.908490][ T21] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 103.933888][ T21] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 103.970618][ T21] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 104.172513][ T4305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.208631][ T21] usb 2-1: USB disconnect, device number 6 [ 104.219118][ T4305] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.234337][ T21] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 104.264341][ T21] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 104.304173][ T21] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 104.338790][ T21] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 104.377803][ T21] keyspan 2-1:0.0: device disconnected [ 104.387701][ T4636] syz.4.119 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 104.398305][ T4305] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 104.413838][ T4305] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 104.434093][ T4636] CPU: 0 PID: 4636 Comm: syz.4.119 Not tainted syzkaller #0 [ 104.441426][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.451491][ T4636] Call Trace: [ 104.454770][ T4636] [ 104.457717][ T4636] dump_stack_lvl+0x188/0x250 [ 104.462407][ T4636] ? show_regs_print_info+0x20/0x20 [ 104.467705][ T4636] ? load_image+0x410/0x410 [ 104.472210][ T4636] ? local_lock_release+0x170/0x170 [ 104.477502][ T4636] ? __rwlock_init+0x140/0x140 [ 104.482262][ T4636] dump_header+0xd9/0x780 [ 104.486608][ T4636] oom_kill_process+0x20e/0x3d0 [ 104.491477][ T4636] out_of_memory+0xdb2/0x1190 [ 104.496157][ T4636] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 104.501791][ T4636] ? mutex_lock_io_nested+0x60/0x60 [ 104.506978][ T4636] ? unregister_oom_notifier+0x20/0x20 [ 104.512425][ T4636] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 104.517955][ T4636] ? mem_cgroup_oom_trylock+0x210/0x210 [ 104.523510][ T4636] ? do_raw_spin_unlock+0x11d/0x230 [ 104.528719][ T4636] try_charge_memcg+0x1075/0x15b0 [ 104.533748][ T4636] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 104.539570][ T4636] ? rcu_lock_acquire+0x30/0x30 [ 104.544424][ T4636] obj_cgroup_charge_pages+0x87/0x190 [ 104.549777][ T4636] ? __memcg_kmem_charge_page+0x380/0x380 [ 104.555481][ T4636] ? rcu_lock_acquire+0x30/0x30 [ 104.560316][ T4636] obj_cgroup_charge+0x19f/0x320 [ 104.565242][ T4636] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 104.570362][ T4636] slab_pre_alloc_hook+0x9d/0xc0 [ 104.575287][ T4636] ? __d_alloc+0x27/0x6d0 [ 104.579601][ T4636] kmem_cache_alloc+0x3d/0x280 [ 104.584358][ T4636] __d_alloc+0x27/0x6d0 [ 104.588504][ T4636] d_alloc_parallel+0x7b/0x1320 [ 104.593356][ T4636] ? __init_waitqueue_head+0xa4/0x140 [ 104.598725][ T4636] __lookup_slow+0x134/0x410 [ 104.603312][ T4636] ? lookup_one_len+0x2d0/0x2d0 [ 104.608154][ T4636] ? down_read+0x1aa/0x2e0 [ 104.612556][ T4636] lookup_slow+0x53/0x70 [ 104.616783][ T4636] walk_component+0x314/0x460 [ 104.621468][ T4636] path_lookupat+0x148/0x420 [ 104.626049][ T4636] filename_lookup+0x21e/0x550 [ 104.630800][ T4636] ? __lock_acquire+0x7b50/0x7b50 [ 104.635839][ T4636] ? hashlen_string+0x110/0x110 [ 104.640702][ T4636] ? strncpy_from_user+0x1f4/0x350 [ 104.645814][ T4636] ? getname_flags+0x1f9/0x4f0 [ 104.650577][ T4636] user_path_at_empty+0x40/0x190 [ 104.655532][ T4636] __se_sys_mount+0x2a4/0x3d0 [ 104.660200][ T4636] ? __x64_sys_mount+0xc0/0xc0 [ 104.664968][ T4636] ? lockdep_hardirqs_on+0x94/0x140 [ 104.670162][ T4636] ? __x64_sys_mount+0x1c/0xc0 [ 104.674909][ T4636] do_syscall_64+0x4c/0xa0 [ 104.679315][ T4636] ? clear_bhb_loop+0x30/0x80 [ 104.683984][ T4636] ? clear_bhb_loop+0x30/0x80 [ 104.688677][ T4636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.694559][ T4636] RIP: 0033:0x7fd632d20159 [ 104.698960][ T4636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.718552][ T4636] RSP: 002b:00007fd630f57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.726957][ T4636] RAX: ffffffffffffffda RBX: 00007fd632fa8090 RCX: 00007fd632d20159 [ 104.735106][ T4636] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 104.743075][ T4636] RBP: 00007fd632db706b R08: 0000000000000000 R09: 0000000000000000 [ 104.751055][ T4636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.759010][ T4636] R13: 00007fd632fa8128 R14: 00007fd632fa8090 R15: 00007fff166f5228 [ 104.766978][ T4636] [ 104.779729][ T4305] usb 4-1: Product: syz [ 104.784168][ T4305] usb 4-1: Manufacturer: syz [ 104.796956][ T4305] usb 4-1: SerialNumber: syz [ 104.815515][ T4305] usb 4-1: config 0 descriptor?? [ 104.827852][ T4636] memory: usage 0kB, limit 0kB, failcnt 19 [ 104.843268][ T4636] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 104.850824][ T4636] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 104.873365][ T4636] Memory cgroup stats for /syz4/test: [ 104.873551][ T4636] anon 0 [ 104.873551][ T4636] file 0 [ 104.873551][ T4636] kernel_stack 0 [ 104.873551][ T4636] pagetables 0 [ 104.873551][ T4636] percpu 0 [ 104.873551][ T4636] sock 0 [ 104.873551][ T4636] shmem 0 [ 104.873551][ T4636] file_mapped 0 [ 104.873551][ T4636] file_dirty 0 [ 104.873551][ T4636] file_writeback 0 [ 104.873551][ T4636] swapcached 0 [ 104.873551][ T4636] anon_thp 0 [ 104.873551][ T4636] file_thp 0 [ 104.873551][ T4636] shmem_thp 0 [ 104.873551][ T4636] inactive_anon 0 [ 104.873551][ T4636] active_anon 0 [ 104.873551][ T4636] inactive_file 0 [ 104.873551][ T4636] active_file 0 [ 104.873551][ T4636] unevictable 0 [ 104.873551][ T4636] slab_reclaimable 0 [ 104.873551][ T4636] slab_unreclaimable 0 [ 104.873551][ T4636] slab 0 [ 104.873551][ T4636] workingset_refault_anon 0 [ 104.873551][ T4636] workingset_refault_file 0 [ 104.873551][ T4636] workingset_activate_anon 0 [ 104.873551][ T4636] workingset_activate_file 0 [ 104.973740][ T4636] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.119,pid=4633,uid=0 [ 104.989958][ T4636] Memory cgroup out of memory: Killed process 4633 (syz.4.119) total-vm:102376kB, anon-rss:1400kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 105.065207][ T4231] usb 4-1: USB disconnect, device number 4 [ 105.077435][ T4637] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 107.906393][ T4655] device-mapper: ioctl: name not supplied when creating device [ 108.054436][ T4659] device-mapper: dirty region log: invalid region size 1024 [ 108.108966][ T4659] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 108.135537][ T4664] comedi comedi1: Minor 16 could not be opened [ 108.153587][ T4659] device-mapper: ioctl: error adding target to table [ 109.873733][ T4666] futex_wake_op: syz.1.129 tries to shift op by 144; fix this program [ 110.033011][ T4666] futex_wake_op: syz.1.129 tries to shift op by 144; fix this program [ 110.047520][ T4671] rdma_rxe: rxe_register_device failed with error -23 [ 110.065626][ T4671] rdma_rxe: failed to add syz_tun [ 110.282322][ T4305] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 110.337538][ T4676] syz.2.133 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 110.372328][ T4276] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.407999][ T4676] CPU: 1 PID: 4676 Comm: syz.2.133 Not tainted syzkaller #0 [ 110.415329][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.425393][ T4676] Call Trace: [ 110.428685][ T4676] [ 110.431634][ T4676] dump_stack_lvl+0x188/0x250 [ 110.436324][ T4676] ? show_regs_print_info+0x20/0x20 [ 110.441532][ T4676] ? load_image+0x410/0x410 [ 110.446052][ T4676] ? local_lock_release+0x170/0x170 [ 110.451258][ T4676] ? __rwlock_init+0x140/0x140 [ 110.456035][ T4676] dump_header+0xd9/0x780 [ 110.460373][ T4676] oom_kill_process+0x20e/0x3d0 [ 110.465234][ T4676] out_of_memory+0xdb2/0x1190 [ 110.469936][ T4676] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 110.475585][ T4676] ? mutex_lock_io_nested+0x60/0x60 [ 110.480796][ T4676] ? unregister_oom_notifier+0x20/0x20 [ 110.486612][ T4676] ? preempt_schedule+0xbc/0xd0 [ 110.491479][ T4676] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 110.497037][ T4676] ? mem_cgroup_oom_trylock+0x210/0x210 [ 110.502717][ T4676] ? preempt_schedule_thunk+0x16/0x18 [ 110.508106][ T4676] try_charge_memcg+0x1075/0x15b0 [ 110.513250][ T4676] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 110.519062][ T4676] ? rcu_lock_acquire+0x30/0x30 [ 110.523925][ T4676] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.529930][ T4676] obj_cgroup_charge_pages+0x87/0x190 [ 110.535309][ T4676] ? __memcg_kmem_charge_page+0x380/0x380 [ 110.541034][ T4676] ? rcu_lock_acquire+0x30/0x30 [ 110.545894][ T4676] obj_cgroup_charge+0x19f/0x320 [ 110.550848][ T4676] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 110.556410][ T4676] slab_pre_alloc_hook+0x9d/0xc0 [ 110.561357][ T4676] ? __d_alloc+0x27/0x6d0 [ 110.565690][ T4676] kmem_cache_alloc+0x3d/0x280 [ 110.570465][ T4676] __d_alloc+0x27/0x6d0 [ 110.574632][ T4676] d_alloc_parallel+0x7b/0x1320 [ 110.579502][ T4676] ? __init_waitqueue_head+0xa4/0x140 [ 110.584888][ T4676] __lookup_slow+0x134/0x410 [ 110.589485][ T4676] ? lookup_one_len+0x2d0/0x2d0 [ 110.594356][ T4676] ? down_read+0x1aa/0x2e0 [ 110.598784][ T4676] lookup_slow+0x53/0x70 [ 110.603035][ T4676] walk_component+0x314/0x460 [ 110.607725][ T4676] path_lookupat+0x148/0x420 [ 110.612325][ T4676] filename_lookup+0x21e/0x550 [ 110.617098][ T4676] ? __lock_acquire+0x7b50/0x7b50 [ 110.622131][ T4676] ? hashlen_string+0x110/0x110 [ 110.627008][ T4676] ? strncpy_from_user+0x1f4/0x350 [ 110.632130][ T4676] ? getname_flags+0x1f9/0x4f0 [ 110.636901][ T4676] user_path_at_empty+0x40/0x190 [ 110.641870][ T4676] __se_sys_mount+0x2a4/0x3d0 [ 110.646559][ T4676] ? __x64_sys_mount+0xc0/0xc0 [ 110.651340][ T4676] ? lockdep_hardirqs_on+0x94/0x140 [ 110.656544][ T4676] ? __x64_sys_mount+0x1c/0xc0 [ 110.661327][ T4676] do_syscall_64+0x4c/0xa0 [ 110.665753][ T4676] ? clear_bhb_loop+0x30/0x80 [ 110.670547][ T4676] ? clear_bhb_loop+0x30/0x80 [ 110.675241][ T4676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.681327][ T4676] RIP: 0033:0x7f2d921d9159 [ 110.685755][ T4676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.705373][ T4676] RSP: 002b:00007f2d90410028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.713797][ T4676] RAX: ffffffffffffffda RBX: 00007f2d92461090 RCX: 00007f2d921d9159 [ 110.721780][ T4676] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 110.729767][ T4676] RBP: 00007f2d9227006b R08: 0000000000000000 R09: 0000000000000000 [ 110.737750][ T4676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.745802][ T4676] R13: 00007f2d92461128 R14: 00007f2d92461090 R15: 00007ffc029c0d58 [ 110.753922][ T4676] [ 110.993517][ T4676] memory: usage 0kB, limit 0kB, failcnt 19 [ 110.999386][ T4676] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 111.007323][ T4676] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 111.014229][ T4676] Memory cgroup stats for /syz2/test: [ 111.014761][ T4676] anon 0 [ 111.014761][ T4676] file 0 [ 111.014761][ T4676] kernel_stack 0 [ 111.014761][ T4676] pagetables 0 [ 111.014761][ T4676] percpu 0 [ 111.014761][ T4676] sock 0 [ 111.014761][ T4676] shmem 0 [ 111.014761][ T4676] file_mapped 0 [ 111.014761][ T4676] file_dirty 0 [ 111.014761][ T4676] file_writeback 0 [ 111.014761][ T4676] swapcached 0 [ 111.014761][ T4676] anon_thp 0 [ 111.014761][ T4676] file_thp 0 [ 111.014761][ T4676] shmem_thp 0 [ 111.014761][ T4676] inactive_anon 0 [ 111.014761][ T4676] active_anon 0 [ 111.014761][ T4676] inactive_file 0 [ 111.014761][ T4676] active_file 0 [ 111.014761][ T4676] unevictable 0 [ 111.014761][ T4676] slab_reclaimable 0 [ 111.014761][ T4676] slab_unreclaimable 0 [ 111.014761][ T4676] slab 0 [ 111.014761][ T4676] workingset_refault_anon 0 [ 111.014761][ T4676] workingset_refault_file 0 [ 111.014761][ T4676] workingset_activate_anon 0 [ 111.014761][ T4676] workingset_activate_file 0 [ 111.110779][ T4676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.133,pid=4674,uid=0 [ 111.126893][ T4676] Memory cgroup out of memory: Killed process 4674 (syz.2.133) total-vm:102376kB, anon-rss:1404kB, file-rss:21740kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 111.239379][ T4685] device-mapper: ioctl: name not supplied when creating device [ 111.322317][ T4276] usb 4-1: Using ep0 maxpacket: 8 [ 111.432406][ T7] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 111.462511][ T4276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.472740][ T4305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.050839][ T4696] device-mapper: dirty region log: invalid region size 1024 [ 112.136272][ T4696] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 112.232593][ T4694] comedi comedi1: Minor 16 could not be opened [ 113.450962][ T4696] device-mapper: ioctl: error adding target to table [ 113.882476][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.184858][ T4276] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 114.280271][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.289673][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.299951][ T4276] usb 4-1: config 0 descriptor?? [ 114.322370][ T4276] usb 4-1: can't set config #0, error -71 [ 114.332501][ T7] usb 2-1: string descriptor 0 read error: -71 [ 114.338908][ T7] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 114.349369][ T4276] usb 4-1: USB disconnect, device number 5 [ 114.357236][ T7] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 114.367980][ T7] usb 2-1: config 0 descriptor?? [ 114.382427][ T4305] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 114.392388][ T7] usb 2-1: can't set config #0, error -71 [ 114.402704][ T4305] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 114.425664][ T7] usb 2-1: USB disconnect, device number 7 [ 114.437988][ T4305] usb 5-1: Product: syz [ 114.444440][ T4305] usb 5-1: Manufacturer: syz [ 114.450834][ T4305] usb 5-1: SerialNumber: syz [ 114.457959][ T4305] usb 5-1: config 0 descriptor?? [ 114.482701][ T4305] usb 5-1: can't set config #0, error -71 [ 114.498764][ T4305] usb 5-1: USB disconnect, device number 5 [ 115.553953][ T4716] device-mapper: ioctl: name not supplied when creating device [ 115.582176][ T4718] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.149'. [ 115.734176][ T4723] rdma_rxe: rxe_register_device failed with error -23 [ 115.741328][ T4723] rdma_rxe: failed to add syz_tun [ 115.845132][ T4725] device-mapper: dirty region log: invalid region size 1024 [ 115.853267][ T4725] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 115.861758][ T4725] device-mapper: ioctl: error adding target to table [ 115.871873][ T4725] comedi comedi1: Minor 16 could not be opened [ 116.012484][ T4276] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.982340][ T4276] usb 4-1: Using ep0 maxpacket: 8 [ 117.033427][ T7] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 117.122404][ T4276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.167267][ T4742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.175534][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.187584][ T4742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.195205][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.402438][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.918901][ T4276] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 118.928242][ T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.937389][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.947327][ T4276] usb 4-1: config 0 descriptor?? [ 118.987840][ T4747] device-mapper: ioctl: name not supplied when creating device [ 119.102414][ T7] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 119.198197][ T4750] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.162'. [ 119.804698][ T4276] usb 4-1: can't set config #0, error -71 [ 119.812542][ T7] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 119.830354][ T7] usb 3-1: Product: syz [ 119.834727][ T7] usb 3-1: Manufacturer: syz [ 119.839400][ T7] usb 3-1: SerialNumber: syz [ 119.845968][ T4276] usb 4-1: USB disconnect, device number 6 [ 119.856539][ T7] usb 3-1: config 0 descriptor?? [ 119.872350][ T7] usb 3-1: can't set config #0, error -71 [ 119.880299][ T7] usb 3-1: USB disconnect, device number 6 [ 119.955678][ T4758] device-mapper: dirty region log: invalid region size 1024 [ 119.963739][ T4758] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 119.974169][ T4758] device-mapper: ioctl: error adding target to table [ 119.982982][ T4758] comedi comedi1: Minor 16 could not be opened [ 120.878408][ T4765] device-mapper: dirty region log: invalid region size 1024 [ 120.917727][ T4765] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 120.926570][ T4765] device-mapper: ioctl: error adding target to table [ 120.943916][ T4765] comedi comedi1: Minor 16 could not be opened [ 121.006176][ T4774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.021726][ T4776] rdma_rxe: rxe_register_device failed with error -23 [ 121.031823][ T4776] rdma_rxe: failed to add syz_tun [ 121.091562][ T4774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.209052][ T4774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.302676][ T4276] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.315447][ T4780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.382661][ T7] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 121.562821][ T4276] usb 3-1: Using ep0 maxpacket: 8 [ 121.682690][ T4276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.723462][ T4276] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 121.742555][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.752893][ T4276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.777097][ T4276] usb 3-1: config 0 descriptor?? [ 121.814977][ T4276] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 121.823250][ T4783] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.174'. [ 121.932407][ T7] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 121.942365][ T7] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 121.955713][ T7] usb 2-1: Product: syz [ 121.965911][ T7] usb 2-1: Manufacturer: syz [ 121.976057][ T7] usb 2-1: SerialNumber: syz [ 121.987274][ T7] usb 2-1: config 0 descriptor?? [ 122.033036][ T7] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 122.042610][ T7] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 122.057340][ T7] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 122.070393][ T7] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 122.093071][ T7] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 122.107473][ T7] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 122.131085][ T7] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 122.142871][ T7] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 122.160006][ T7] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 122.186846][ T7] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 122.206224][ T7] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 122.276528][ T4792] device-mapper: ioctl: name not supplied when creating device [ 122.432500][ T4259] usb 3-1: USB disconnect, device number 7 [ 122.520353][ T4176] usb 2-1: USB disconnect, device number 8 [ 122.541564][ T4176] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 122.555328][ T4176] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 122.575413][ T4176] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 122.591922][ T4176] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 122.604363][ T4176] keyspan 2-1:0.0: device disconnected [ 123.182211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 123.232210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #308!!! [ 123.472209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 123.542210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 124.609217][ T4815] device-mapper: dirty region log: invalid region size 1024 [ 125.125412][ T4815] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 125.225295][ T4815] device-mapper: ioctl: error adding target to table [ 125.984006][ T4827] device-mapper: ioctl: name not supplied when creating device [ 126.322215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30e!!! [ 126.561317][ T4834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.632215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 126.862228][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 126.879525][ T4834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.892217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 126.912223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 127.835992][ T4834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.972720][ T4305] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 128.083178][ T4834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.352770][ T4305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.552820][ T4305] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 128.578568][ T4305] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 128.623707][ T4305] usb 2-1: Product: syz [ 128.639558][ T4305] usb 2-1: Manufacturer: syz [ 128.657287][ T4305] usb 2-1: SerialNumber: syz [ 128.727189][ T4305] usb 2-1: config 0 descriptor?? [ 128.803205][ T4305] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 128.822585][ T4305] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 128.842050][ T4305] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 128.872724][ T4305] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 128.903928][ T4305] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 128.913500][ T4305] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 128.945766][ T4305] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 128.974575][ T4305] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 129.012471][ T4305] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 129.022690][ T4305] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 129.032941][ T4305] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 129.219063][ T4854] rdma_rxe: rxe_register_device failed with error -23 [ 129.243142][ T4854] rdma_rxe: failed to add syz_tun [ 129.362103][ T21] usb 2-1: USB disconnect, device number 9 [ 129.372804][ T21] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 129.407179][ T21] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 129.425207][ T21] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 129.459827][ T21] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 129.504797][ T21] keyspan 2-1:0.0: device disconnected [ 129.524640][ T4305] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.581824][ T4860] syz.2.198 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 129.623030][ T4860] CPU: 0 PID: 4860 Comm: syz.2.198 Not tainted syzkaller #0 [ 129.630360][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.640426][ T4860] Call Trace: [ 129.643720][ T4860] [ 129.646657][ T4860] dump_stack_lvl+0x188/0x250 [ 129.651365][ T4860] ? show_regs_print_info+0x20/0x20 [ 129.656570][ T4860] ? load_image+0x410/0x410 [ 129.661107][ T4860] ? local_lock_release+0x170/0x170 [ 129.666312][ T4860] ? __rwlock_init+0x140/0x140 [ 129.671085][ T4860] dump_header+0xd9/0x780 [ 129.675445][ T4860] oom_kill_process+0x20e/0x3d0 [ 129.680324][ T4860] out_of_memory+0xdb2/0x1190 [ 129.685007][ T4860] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 129.690651][ T4860] ? mutex_lock_io_nested+0x60/0x60 [ 129.695855][ T4860] ? unregister_oom_notifier+0x20/0x20 [ 129.701304][ T4860] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 129.706839][ T4860] ? mem_cgroup_oom_trylock+0x210/0x210 [ 129.712378][ T4860] ? do_raw_spin_unlock+0x11d/0x230 [ 129.717584][ T4860] try_charge_memcg+0x1075/0x15b0 [ 129.722604][ T4860] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 129.728420][ T4860] ? rcu_lock_acquire+0x30/0x30 [ 129.733304][ T4860] ? mark_lock+0x94/0x320 [ 129.737661][ T4860] ? __lock_acquire+0x13dc/0x7b50 [ 129.742712][ T4860] obj_cgroup_charge_pages+0x87/0x190 [ 129.748075][ T4860] ? __memcg_kmem_charge_page+0x380/0x380 [ 129.753782][ T4860] ? rcu_lock_acquire+0x30/0x30 [ 129.758617][ T4860] obj_cgroup_charge+0x19f/0x320 [ 129.763543][ T4860] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 129.768659][ T4860] slab_pre_alloc_hook+0x9d/0xc0 [ 129.773587][ T4860] ? __d_alloc+0x27/0x6d0 [ 129.777900][ T4860] kmem_cache_alloc+0x3d/0x280 [ 129.782659][ T4860] __d_alloc+0x27/0x6d0 [ 129.786826][ T4860] d_alloc_parallel+0x7b/0x1320 [ 129.791715][ T4860] ? __init_waitqueue_head+0xa4/0x140 [ 129.797090][ T4860] __lookup_slow+0x134/0x410 [ 129.801670][ T4860] ? lookup_one_len+0x2d0/0x2d0 [ 129.806509][ T4860] ? down_read+0x1aa/0x2e0 [ 129.810907][ T4860] lookup_slow+0x53/0x70 [ 129.815138][ T4860] walk_component+0x314/0x460 [ 129.819800][ T4860] path_lookupat+0x148/0x420 [ 129.824374][ T4860] filename_lookup+0x21e/0x550 [ 129.829124][ T4860] ? __lock_acquire+0x7b50/0x7b50 [ 129.834140][ T4860] ? hashlen_string+0x110/0x110 [ 129.838985][ T4860] ? strncpy_from_user+0x1f4/0x350 [ 129.844219][ T4860] ? getname_flags+0x1f9/0x4f0 [ 129.848990][ T4860] user_path_at_empty+0x40/0x190 [ 129.853915][ T4860] __se_sys_mount+0x2a4/0x3d0 [ 129.858587][ T4860] ? __x64_sys_mount+0xc0/0xc0 [ 129.863334][ T4860] ? lockdep_hardirqs_on+0x94/0x140 [ 129.868510][ T4860] ? __x64_sys_mount+0x1c/0xc0 [ 129.873416][ T4860] do_syscall_64+0x4c/0xa0 [ 129.877828][ T4860] ? clear_bhb_loop+0x30/0x80 [ 129.882498][ T4860] ? clear_bhb_loop+0x30/0x80 [ 129.887192][ T4860] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.893097][ T4860] RIP: 0033:0x7f2d921d9159 [ 129.897499][ T4860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.917198][ T4860] RSP: 002b:00007f2d90410028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.925605][ T4860] RAX: ffffffffffffffda RBX: 00007f2d92461090 RCX: 00007f2d921d9159 [ 129.933571][ T4860] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 129.941527][ T4860] RBP: 00007f2d9227006b R08: 0000000000000000 R09: 0000000000000000 [ 129.949477][ T4860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.957440][ T4860] R13: 00007f2d92461128 R14: 00007f2d92461090 R15: 00007ffc029c0d58 [ 129.965402][ T4860] [ 129.994295][ T4860] memory: usage 0kB, limit 0kB, failcnt 55 [ 130.043675][ T4860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 130.051176][ T4860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 130.092367][ T4305] usb 4-1: Using ep0 maxpacket: 8 [ 130.158295][ T4864] device-mapper: dirty region log: invalid region size 1024 [ 130.180577][ T4860] Memory cgroup stats for /syz2/test: [ 130.180779][ T4860] anon 0 [ 130.180779][ T4860] file 0 [ 130.180779][ T4860] kernel_stack 0 [ 130.180779][ T4860] pagetables 0 [ 130.180779][ T4860] percpu 0 [ 130.180779][ T4860] sock 0 [ 130.180779][ T4860] shmem 0 [ 130.180779][ T4860] file_mapped 0 [ 130.180779][ T4860] file_dirty 0 [ 130.180779][ T4860] file_writeback 0 [ 130.180779][ T4860] swapcached 0 [ 130.180779][ T4860] anon_thp 0 [ 130.180779][ T4860] file_thp 0 [ 130.180779][ T4860] shmem_thp 0 [ 130.180779][ T4860] inactive_anon 0 [ 130.180779][ T4860] active_anon 0 [ 130.180779][ T4860] inactive_file 0 [ 130.180779][ T4860] active_file 0 [ 130.180779][ T4860] unevictable 0 [ 130.180779][ T4860] slab_reclaimable 0 [ 130.180779][ T4860] slab_unreclaimable 0 [ 130.180779][ T4860] slab 0 [ 130.180779][ T4860] workingset_refault_anon 0 [ 130.180779][ T4860] workingset_refault_file 0 [ 130.180779][ T4860] workingset_activate_anon 0 [ 130.180779][ T4860] workingset_activate_file 0 [ 130.183965][ T4864] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 130.247648][ T4860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 130.292423][ T4305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.337528][ T4305] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 130.363996][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.392328][ T4860] ,cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.198,pid=4857,uid=0 [ 130.442477][ T4305] usb 4-1: config 0 descriptor?? [ 130.536503][ T4305] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 130.561413][ T4860] Memory cgroup out of memory: Killed process 4857 (syz.2.198) total-vm:102376kB, anon-rss:1400kB, file-rss:21868kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 131.109838][ T4864] device-mapper: ioctl: error adding target to table [ 131.213848][ T4876] device-mapper: ioctl: name not supplied when creating device [ 131.446480][ T4882] kvm [4881]: vcpu0, guest rIP: 0x55d80 disabled perfctr wrmsr: 0x186 data 0x4000c0 [ 131.478363][ T4882] kvm: MONITOR instruction emulated as NOP! [ 132.724638][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.731966][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.893612][ T4305] usb 4-1: USB disconnect, device number 7 [ 133.482411][ T4276] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 133.862985][ T4276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.092659][ T4276] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 134.147827][ T4276] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 134.169747][ T4900] syz.3.212 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 134.249185][ T4276] usb 5-1: Product: syz [ 134.398417][ T4900] CPU: 0 PID: 4900 Comm: syz.3.212 Not tainted syzkaller #0 [ 134.405750][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.415811][ T4900] Call Trace: [ 134.419091][ T4900] [ 134.422021][ T4900] dump_stack_lvl+0x188/0x250 [ 134.426708][ T4900] ? show_regs_print_info+0x20/0x20 [ 134.431914][ T4900] ? load_image+0x410/0x410 [ 134.436422][ T4900] ? local_lock_release+0x170/0x170 [ 134.441627][ T4900] ? __rwlock_init+0x140/0x140 [ 134.446401][ T4900] dump_header+0xd9/0x780 [ 134.450741][ T4900] oom_kill_process+0x20e/0x3d0 [ 134.455603][ T4900] out_of_memory+0xdb2/0x1190 [ 134.460291][ T4900] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 134.465942][ T4900] ? mutex_lock_io_nested+0x60/0x60 [ 134.471152][ T4900] ? unregister_oom_notifier+0x20/0x20 [ 134.476721][ T4900] ? preempt_schedule+0xbc/0xd0 [ 134.481693][ T4900] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 134.487253][ T4900] ? mem_cgroup_oom_trylock+0x210/0x210 [ 134.492814][ T4900] ? preempt_schedule_thunk+0x16/0x18 [ 134.498206][ T4900] try_charge_memcg+0x1075/0x15b0 [ 134.503254][ T4900] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 134.509065][ T4900] ? rcu_lock_acquire+0x30/0x30 [ 134.513966][ T4900] obj_cgroup_charge_pages+0x87/0x190 [ 134.519342][ T4900] ? __memcg_kmem_charge_page+0x380/0x380 [ 134.525072][ T4900] ? rcu_lock_acquire+0x30/0x30 [ 134.529961][ T4900] obj_cgroup_charge+0x19f/0x320 [ 134.534904][ T4900] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 134.540042][ T4900] slab_pre_alloc_hook+0x9d/0xc0 [ 134.544992][ T4900] ? __d_alloc+0x27/0x6d0 [ 134.549333][ T4900] kmem_cache_alloc+0x3d/0x280 [ 134.554188][ T4900] __d_alloc+0x27/0x6d0 [ 134.558346][ T4900] d_alloc_parallel+0x7b/0x1320 [ 134.563216][ T4900] ? __init_waitqueue_head+0xa4/0x140 [ 134.568602][ T4900] __lookup_slow+0x134/0x410 [ 134.573200][ T4900] ? lookup_one_len+0x2d0/0x2d0 [ 134.578066][ T4900] ? down_read+0x1aa/0x2e0 [ 134.582488][ T4900] lookup_slow+0x53/0x70 [ 134.586737][ T4900] walk_component+0x314/0x460 [ 134.591421][ T4900] path_lookupat+0x148/0x420 [ 134.596052][ T4900] filename_lookup+0x21e/0x550 [ 134.600828][ T4900] ? __lock_acquire+0x7b50/0x7b50 [ 134.605871][ T4900] ? hashlen_string+0x110/0x110 [ 134.610767][ T4900] ? strncpy_from_user+0x1f4/0x350 [ 134.615897][ T4900] ? getname_flags+0x1f9/0x4f0 [ 134.620679][ T4900] user_path_at_empty+0x40/0x190 [ 134.625625][ T4900] __se_sys_mount+0x2a4/0x3d0 [ 134.630312][ T4900] ? __x64_sys_mount+0xc0/0xc0 [ 134.635086][ T4900] ? __x64_sys_mount+0x1c/0xc0 [ 134.639858][ T4900] do_syscall_64+0x4c/0xa0 [ 134.644282][ T4900] ? clear_bhb_loop+0x30/0x80 [ 134.648969][ T4900] ? clear_bhb_loop+0x30/0x80 [ 134.653690][ T4900] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.659615][ T4900] RIP: 0033:0x7f4389a95159 [ 134.664046][ T4900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.683673][ T4900] RSP: 002b:00007f4387ccc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.692105][ T4900] RAX: ffffffffffffffda RBX: 00007f4389d1d090 RCX: 00007f4389a95159 [ 134.700102][ T4900] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 134.708081][ T4900] RBP: 00007f4389b2c06b R08: 0000000000000000 R09: 0000000000000000 [ 134.716042][ T4900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.723997][ T4900] R13: 00007f4389d1d128 R14: 00007f4389d1d090 R15: 00007ffd02d99c98 [ 134.732072][ T4900] [ 134.766956][ T4276] usb 5-1: Manufacturer: syz [ 134.780531][ T4900] memory: usage 0kB, limit 0kB, failcnt 55 [ 134.786416][ T4900] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 134.792987][ T4276] usb 5-1: SerialNumber: syz [ 134.795801][ T4900] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 134.812851][ T4900] Memory cgroup stats for /syz3/test: [ 134.813033][ T4900] anon 0 [ 134.813033][ T4900] file 0 [ 134.813033][ T4900] kernel_stack 0 [ 134.813033][ T4900] pagetables 0 [ 134.813033][ T4900] percpu 0 [ 134.813033][ T4900] sock 0 [ 134.813033][ T4900] shmem 0 [ 134.813033][ T4900] file_mapped 0 [ 134.813033][ T4900] file_dirty 0 [ 134.813033][ T4900] file_writeback 0 [ 134.813033][ T4900] swapcached 0 [ 134.813033][ T4900] anon_thp 0 [ 134.813033][ T4900] file_thp 0 [ 134.813033][ T4900] shmem_thp 0 [ 134.813033][ T4900] inactive_anon 0 [ 134.813033][ T4900] active_anon 0 [ 134.813033][ T4900] inactive_file 0 [ 134.813033][ T4900] active_file 0 [ 134.813033][ T4900] unevictable 0 [ 134.813033][ T4900] slab_reclaimable 0 [ 134.813033][ T4900] slab_unreclaimable 0 [ 134.813033][ T4900] slab 0 [ 134.813033][ T4900] workingset_refault_anon 0 [ 134.813033][ T4900] workingset_refault_file 0 [ 134.813033][ T4900] workingset_activate_anon 0 [ 134.813033][ T4900] workingset_activate_file 0 [ 134.834207][ T4276] usb 5-1: config 0 descriptor?? [ 135.640186][ T4909] device-mapper: ioctl: name not supplied when creating device [ 135.699366][ T4900] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.212,pid=4898,uid=0 [ 135.716552][ T4900] Memory cgroup out of memory: Killed process 4898 (syz.3.212) total-vm:102508kB, anon-rss:1396kB, file-rss:21884kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 135.735020][ T4276] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 135.795869][ T4276] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 135.812503][ T4276] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 135.832665][ T4276] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 135.842097][ T4276] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 135.852757][ T4276] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 135.875698][ T4276] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 135.898944][ T4276] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 135.932764][ T4276] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 135.965316][ T4276] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 135.976219][ T4276] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 136.009571][ T4276] usb 5-1: USB disconnect, device number 6 [ 136.088029][ T4276] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 136.138136][ T4276] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 136.205108][ T4276] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 136.231026][ T4276] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 136.252414][ T4927] rdma_rxe: rxe_register_device failed with error -23 [ 136.269484][ T4927] rdma_rxe: failed to add syz_tun [ 136.273660][ T4276] keyspan 5-1:0.0: device disconnected [ 136.352416][ T4227] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 136.592309][ T4305] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.646822][ T4938] device-mapper: ioctl: name not supplied when creating device [ 136.693633][ T4940] device-mapper: dirty region log: invalid region size 1024 [ 136.701032][ T4940] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 136.710941][ T4940] device-mapper: ioctl: error adding target to table [ 136.782522][ T4227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.842373][ T4305] usb 4-1: Using ep0 maxpacket: 8 [ 136.973304][ T4305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.000802][ T4305] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 137.039754][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.152484][ T4305] usb 4-1: config 0 descriptor?? [ 137.260331][ T4305] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 137.715583][ T4949] syz.0.229 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 137.722373][ T4227] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 137.734758][ T4949] CPU: 0 PID: 4949 Comm: syz.0.229 Not tainted syzkaller #0 [ 137.741298][ T4227] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 137.742070][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.760232][ T4227] usb 3-1: Product: syz [ 137.760269][ T4949] Call Trace: [ 137.760280][ T4949] [ 137.768967][ T4227] usb 3-1: Manufacturer: syz [ 137.770623][ T4949] dump_stack_lvl+0x188/0x250 [ 137.770656][ T4949] ? show_regs_print_info+0x20/0x20 [ 137.781900][ T4227] usb 3-1: SerialNumber: syz [ 137.785056][ T4949] ? load_image+0x410/0x410 [ 137.785084][ T4949] ? local_lock_release+0x170/0x170 [ 137.785103][ T4949] ? __rwlock_init+0x140/0x140 [ 137.785124][ T4949] dump_header+0xd9/0x780 [ 137.785143][ T4949] oom_kill_process+0x20e/0x3d0 [ 137.785163][ T4949] out_of_memory+0xdb2/0x1190 [ 137.785180][ T4949] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 137.785201][ T4949] ? mutex_lock_io_nested+0x60/0x60 [ 137.785224][ T4949] ? unregister_oom_notifier+0x20/0x20 [ 137.785249][ T4949] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 137.785269][ T4949] ? mem_cgroup_oom_trylock+0x210/0x210 [ 137.785291][ T4949] ? do_raw_spin_unlock+0x11d/0x230 [ 137.785313][ T4949] try_charge_memcg+0x1075/0x15b0 [ 137.785349][ T4949] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 137.785368][ T4949] ? rcu_lock_acquire+0x30/0x30 [ 137.785389][ T4949] ? mark_lock+0x94/0x320 [ 137.785408][ T4949] ? __lock_acquire+0x13dc/0x7b50 [ 137.785438][ T4949] obj_cgroup_charge_pages+0x87/0x190 [ 137.785455][ T4949] ? __memcg_kmem_charge_page+0x380/0x380 [ 137.785475][ T4949] ? rcu_lock_acquire+0x30/0x30 [ 137.785494][ T4949] obj_cgroup_charge+0x19f/0x320 [ 137.785513][ T4949] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 137.785537][ T4949] slab_pre_alloc_hook+0x9d/0xc0 [ 137.785555][ T4949] ? __d_alloc+0x27/0x6d0 [ 137.785574][ T4949] kmem_cache_alloc+0x3d/0x280 [ 137.785594][ T4949] __d_alloc+0x27/0x6d0 [ 137.785615][ T4949] d_alloc_parallel+0x7b/0x1320 [ 137.785644][ T4949] ? __init_waitqueue_head+0xa4/0x140 [ 137.785668][ T4949] __lookup_slow+0x134/0x410 [ 137.837127][ T4227] usb 3-1: config 0 descriptor?? [ 137.840175][ T4949] ? lookup_one_len+0x2d0/0x2d0 [ 137.935894][ T4227] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 137.939768][ T4949] ? down_read+0x1aa/0x2e0 [ 137.939798][ T4949] lookup_slow+0x53/0x70 [ 137.953824][ T4227] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 137.956392][ T4949] walk_component+0x314/0x460 [ 137.956425][ T4949] path_lookupat+0x148/0x420 [ 137.956447][ T4949] filename_lookup+0x21e/0x550 [ 137.962941][ T4227] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 137.968364][ T4949] ? __lock_acquire+0x7b50/0x7b50 [ 137.993917][ T4227] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 137.994947][ T4949] ? hashlen_string+0x110/0x110 [ 138.007336][ T4949] ? strncpy_from_user+0x1f4/0x350 [ 138.012463][ T4949] ? getname_flags+0x1f9/0x4f0 [ 138.017237][ T4949] user_path_at_empty+0x40/0x190 [ 138.021569][ T4227] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 138.022188][ T4949] __se_sys_mount+0x2a4/0x3d0 [ 138.022218][ T4949] ? __x64_sys_mount+0xc0/0xc0 [ 138.039605][ T4949] ? lockdep_hardirqs_on+0x94/0x140 [ 138.042602][ T4227] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 138.044832][ T4949] ? __x64_sys_mount+0x1c/0xc0 [ 138.057107][ T4949] do_syscall_64+0x4c/0xa0 [ 138.061524][ T4949] ? clear_bhb_loop+0x30/0x80 [ 138.063595][ T4227] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 138.066198][ T4949] ? clear_bhb_loop+0x30/0x80 [ 138.078819][ T4949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.084012][ T4227] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 138.084717][ T4949] RIP: 0033:0x7f450b7ee159 [ 138.084737][ T4949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.084751][ T4949] RSP: 002b:00007f4509a25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 138.084772][ T4949] RAX: ffffffffffffffda RBX: 00007f450ba76090 RCX: 00007f450b7ee159 [ 138.103548][ T4227] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 138.116279][ T4949] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 138.116295][ T4949] RBP: 00007f450b88506b R08: 0000000000000000 R09: 0000000000000000 [ 138.116305][ T4949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.116320][ T4949] R13: 00007f450ba76128 R14: 00007f450ba76090 R15: 00007fffe4a173b8 [ 138.116346][ T4949] [ 138.123165][ T4949] memory: usage 0kB, limit 0kB, failcnt 127 [ 138.159867][ T4227] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 138.164898][ T4949] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 138.190558][ T4227] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 138.197024][ T4949] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 138.212484][ T4949] Memory cgroup stats for /syz0/test: [ 138.212665][ T4949] anon 0 [ 138.212665][ T4949] file 0 [ 138.212665][ T4949] kernel_stack 0 [ 138.212665][ T4949] pagetables 0 [ 138.212665][ T4949] percpu 0 [ 138.212665][ T4949] sock 0 [ 138.212665][ T4949] shmem 0 [ 138.212665][ T4949] file_mapped 0 [ 138.212665][ T4949] file_dirty 0 [ 138.212665][ T4949] file_writeback 0 [ 138.212665][ T4949] swapcached 0 [ 138.212665][ T4949] anon_thp 0 [ 138.212665][ T4949] file_thp 0 [ 138.212665][ T4949] shmem_thp 0 [ 138.212665][ T4949] inactive_anon 0 [ 138.212665][ T4949] active_anon 0 [ 138.212665][ T4949] inactive_file 0 [ 138.212665][ T4949] active_file 0 [ 138.212665][ T4949] unevictable 0 [ 138.212665][ T4949] slab_reclaimable 0 [ 138.212665][ T4949] slab_unreclaimable 0 [ 138.212665][ T4949] slab 0 [ 138.212665][ T4949] workingset_refault_anon 0 [ 138.212665][ T4949] workingset_refault_file 0 [ 138.212665][ T4949] workingset_activate_anon 0 [ 138.212665][ T4949] workingset_activate_file 0 [ 138.231795][ T4227] usb 3-1: USB disconnect, device number 8 [ 138.323508][ T2304] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 138.383920][ T4949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.229,pid=4945,uid=0 [ 138.410263][ T4949] Memory cgroup out of memory: Killed process 4945 (syz.0.229) total-vm:102376kB, anon-rss:1396kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 138.446778][ T1110] usb 4-1: USB disconnect, device number 8 [ 138.453799][ T4227] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 138.485041][ T4227] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 138.507135][ T4227] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 138.519331][ T4227] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 138.539735][ T4227] keyspan 3-1:0.0: device disconnected [ 138.690001][ T2304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.849255][ T4968] device-mapper: ioctl: name not supplied when creating device [ 138.882561][ T2304] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 138.896911][ T2304] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 138.921052][ T2304] usb 5-1: Product: syz [ 138.925461][ T2304] usb 5-1: Manufacturer: syz [ 138.959193][ T2304] usb 5-1: SerialNumber: syz [ 138.985094][ T2304] usb 5-1: config 0 descriptor?? [ 139.023546][ T2304] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 139.042419][ T2304] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 139.084712][ T2304] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 139.112025][ T2304] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 139.148869][ T2304] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 139.178601][ T2304] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 139.205995][ T2304] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 139.262061][ T2304] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 139.317296][ T2304] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 139.324468][ T4980] APIC base relocation is unsupported by KVM [ 139.364437][ T2304] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 139.430755][ T2304] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 139.628383][ T4227] usb 5-1: USB disconnect, device number 7 [ 139.645629][ T4227] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 139.672868][ T4987] rdma_rxe: rxe_register_device failed with error -23 [ 139.681696][ T4227] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 139.692993][ T4987] rdma_rxe: failed to add syz_tun [ 139.722940][ T4227] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 139.761463][ T4227] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 139.779458][ T4227] keyspan 5-1:0.0: device disconnected [ 139.992334][ T4276] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.242392][ T4276] usb 4-1: Using ep0 maxpacket: 8 [ 140.289508][ T5000] device-mapper: ioctl: name not supplied when creating device [ 140.362411][ T4276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.383307][ T4276] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 140.405438][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.414636][ T5002] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.427138][ T4276] usb 4-1: config 0 descriptor?? [ 140.474628][ T4276] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 140.685087][ T5013] kvm [5012]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x1 [ 140.904050][ T5028] device-mapper: ioctl: name not supplied when creating device [ 140.914336][ T4305] usb 4-1: USB disconnect, device number 9 [ 140.922736][ T4227] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 141.092793][ T4276] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 141.342510][ T4227] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 141.396837][ T4227] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 141.472479][ T4276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.652471][ T4227] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 141.652475][ T4276] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 141.652501][ T4276] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 141.671151][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.714914][ T4227] usb 5-1: Product: syz [ 141.728054][ T4227] usb 5-1: Manufacturer: syz [ 141.733954][ T4276] usb 3-1: Product: syz [ 141.738138][ T4276] usb 3-1: Manufacturer: syz [ 141.738333][ T4227] usb 5-1: SerialNumber: syz [ 141.767226][ T4276] usb 3-1: SerialNumber: syz [ 141.794325][ T4276] usb 3-1: config 0 descriptor?? [ 141.834150][ T4276] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 141.850320][ T4276] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 141.891632][ T4276] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 141.902637][ T4276] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 141.954824][ T4276] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 141.983794][ T4276] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 142.013241][ T4276] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 142.032031][ T4276] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 142.093679][ T4276] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 142.142949][ T4276] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 142.194041][ T4276] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 142.431744][ T4229] usb 3-1: USB disconnect, device number 9 [ 142.449017][ T4229] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 142.522258][ T4229] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 142.555100][ T4229] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 142.571294][ T4229] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 142.589095][ T4227] usb 5-1: USB disconnect, device number 8 [ 142.624087][ T4229] keyspan 3-1:0.0: device disconnected [ 142.910656][ T5064] device-mapper: ioctl: name not supplied when creating device [ 142.948589][ T5066] rdma_rxe: already configured on syz_tun [ 143.232267][ T4229] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.502262][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 143.632478][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.669516][ T4229] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 143.692143][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.723971][ T4229] usb 2-1: config 0 descriptor?? [ 143.774817][ T4229] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 144.017708][ T5104] device-mapper: ioctl: name not supplied when creating device [ 144.192346][ T4229] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 144.478677][ T1110] usb 2-1: USB disconnect, device number 10 [ 144.562390][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 144.592348][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.652371][ T4227] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 144.767289][ T5122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 144.786387][ T5122] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 144.792554][ T4229] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 144.795245][ T5122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 144.812300][ T4229] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 144.852241][ T4229] usb 3-1: Product: syz [ 144.872915][ T4229] usb 3-1: Manufacturer: syz [ 144.877549][ T4229] usb 3-1: SerialNumber: syz [ 144.896496][ T4229] usb 3-1: config 0 descriptor?? [ 144.943555][ T4229] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 144.963682][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 144.971853][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 144.981615][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 145.000196][ T4229] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 145.020260][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 145.034770][ T4229] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 145.046090][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 145.055197][ T4229] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 145.060507][ T5128] kvm [5127]: vcpu0, guest rIP: 0xdf disabled perfctr wrmsr: 0xc1 data 0x60c000027c8 [ 145.063763][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.086924][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 145.096480][ T4229] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 145.102624][ T5128] kvm [5127]: vcpu0, guest rIP: 0xdf disabled perfctr wrmsr: 0xc2 data 0x60c000039c8 [ 145.161279][ T5128] kvm [5127]: vcpu0, guest rIP: 0xdf ignored wrmsr: 0x11e data 0x60c0000e1c8 [ 145.205539][ T5131] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.293'. [ 145.222598][ T5128] kvm [5127]: vcpu0, guest rIP: 0xdf disabled perfctr wrmsr: 0x186 data 0x60c0000b1c8 [ 145.262454][ T5128] kvm [5127]: vcpu0, guest rIP: 0xdf disabled perfctr wrmsr: 0x187 data 0x60c0000b3c8 [ 145.292567][ T4227] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 145.307285][ T4227] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 145.341685][ T4227] usb 5-1: Product: syz [ 145.364615][ T4227] usb 5-1: Manufacturer: syz [ 145.371746][ T4227] usb 5-1: SerialNumber: syz [ 145.388267][ T4227] usb 5-1: config 0 descriptor?? [ 145.397809][ T4229] usb 3-1: USB disconnect, device number 10 [ 145.412939][ T4229] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 145.437961][ T4229] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 145.449214][ T4227] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 145.459414][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 145.477181][ T4229] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 145.486998][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 145.513420][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 145.527206][ T4229] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 145.561898][ T4227] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 145.575077][ T4229] keyspan 3-1:0.0: device disconnected [ 145.594214][ T5135] device-mapper: ioctl: name not supplied when creating device [ 145.603734][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 145.612884][ T4227] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 145.632602][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 145.643893][ T4227] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 145.655549][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 145.669129][ T4227] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 145.704137][ T4227] usb 5-1: USB disconnect, device number 9 [ 145.724550][ T4227] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 145.741036][ T4227] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 145.759007][ T4227] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 145.782519][ T4227] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 145.820533][ T4227] keyspan 5-1:0.0: device disconnected [ 146.289958][ T5157] rdma_rxe: rxe_register_device failed with error -23 [ 146.297133][ T5157] rdma_rxe: failed to add syz_tun [ 146.488334][ T5164] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.305'. [ 146.572279][ T4231] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.822294][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 146.869580][ T5171] device-mapper: table: 248:0: : unknown target type [ 146.879148][ T5171] device-mapper: ioctl: error adding target to table [ 146.942475][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.972335][ T4231] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 147.011713][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.026567][ T5177] device syzkaller0 entered promiscuous mode [ 147.051971][ T4231] usb 4-1: config 0 descriptor?? [ 147.094576][ T4231] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 147.312341][ T4227] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 147.656578][ T4228] usb 4-1: USB disconnect, device number 10 [ 147.752515][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.912289][ T4231] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 147.932498][ T4227] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 147.951961][ T4227] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 147.962113][ T4227] usb 5-1: Product: syz [ 147.966365][ T4227] usb 5-1: Manufacturer: syz [ 147.982419][ T4227] usb 5-1: SerialNumber: syz [ 148.000955][ T4227] usb 5-1: config 0 descriptor?? [ 148.053565][ T4227] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 148.078531][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 148.096826][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 148.116044][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 148.135127][ T4227] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 148.145164][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 148.154152][ T4227] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 148.165497][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 148.183720][ T4227] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 148.199155][ T4227] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 148.208275][ T4227] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 148.292537][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.338802][ T5200] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.316'. [ 148.487236][ T4231] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 148.502358][ T4231] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 148.519323][ T4231] usb 3-1: Product: syz [ 148.525141][ T4231] usb 3-1: Manufacturer: syz [ 148.529761][ T4231] usb 3-1: SerialNumber: syz [ 148.545741][ T4231] usb 3-1: config 0 descriptor?? [ 148.593774][ T4231] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 148.617203][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 148.627976][ T5209] device-mapper: table: 248:0: : unknown target type [ 148.638204][ T5209] device-mapper: ioctl: error adding target to table [ 148.647818][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 148.666468][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 148.680573][ T2304] usb 5-1: USB disconnect, device number 10 [ 148.687312][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 148.701888][ T2304] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 148.713286][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 148.742846][ T2304] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 148.765906][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 148.781328][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 148.781908][ T5216] device syzkaller0 entered promiscuous mode [ 148.792674][ T2304] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 148.815922][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 148.832103][ T2304] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 148.843591][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 148.855281][ T2304] keyspan 5-1:0.0: device disconnected [ 148.863811][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 148.884091][ T4231] usb 3-1: USB disconnect, device number 11 [ 148.918479][ T4231] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 148.936278][ T4231] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 148.949481][ T4231] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 148.964121][ T4231] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 148.974899][ T4231] keyspan 3-1:0.0: device disconnected [ 149.486809][ T5233] kvm: emulating exchange as write [ 149.499303][ T5238] netlink: 'syz.4.328': attribute type 72 has an invalid length. [ 149.585823][ T5241] netlink: 'syz.3.339': attribute type 72 has an invalid length. [ 150.183825][ T5256] device-mapper: table: 248:0: : unknown target type [ 150.195100][ T5256] device-mapper: ioctl: error adding target to table [ 150.341216][ T5260] device syzkaller0 entered promiscuous mode [ 151.242086][ T5281] netlink: 'syz.1.341': attribute type 72 has an invalid length. [ 151.272352][ T4232] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 151.691718][ T5298] device-mapper: table: 248:0: : unknown target type [ 151.702629][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.707882][ T5298] device-mapper: ioctl: error adding target to table [ 151.902413][ T4232] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 151.921273][ T4232] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 151.944697][ T4232] usb 5-1: Product: syz [ 151.963600][ T4232] usb 5-1: Manufacturer: syz [ 151.968242][ T4232] usb 5-1: SerialNumber: syz [ 152.003740][ T4232] usb 5-1: config 0 descriptor?? [ 152.073566][ T4232] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 152.086552][ T4232] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 152.103516][ T4232] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 152.120834][ T4232] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 152.130213][ T4232] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 152.140242][ T4232] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 152.149477][ T4232] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 152.160978][ T4232] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 152.176272][ T4232] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 152.187439][ T4232] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 152.197047][ T4232] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 152.333531][ T4231] usb 5-1: USB disconnect, device number 11 [ 152.345441][ T4231] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 152.379383][ T4231] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 152.410365][ T4231] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 152.433458][ T4231] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 152.466333][ T4231] keyspan 5-1:0.0: device disconnected [ 152.959449][ T5320] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.352'. [ 153.310394][ T5342] device-mapper: table: 248:0: : unknown target type [ 153.317806][ T5342] device-mapper: ioctl: error adding target to table [ 153.674987][ T5357] kvm [5356]: vcpu0, guest rIP: 0x5408d vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 153.685956][ T5357] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 153.733878][ T5363] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.366'. [ 153.952773][ T5374] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 153.989817][ T5374] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 154.021118][ T5374] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 154.306750][ T5385] device-mapper: table: 248:0: : unknown target type [ 154.323788][ T5385] device-mapper: ioctl: error adding target to table [ 154.474176][ T5401] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.378'. [ 154.602092][ T5406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4171871360 (8343742720 ns) > initial count (7317769222 ns). Using initial count to start timer. [ 154.627335][ T5406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2904023767 (46464380272 ns) > initial count (2430873088 ns). Using initial count to start timer. [ 155.001793][ T5432] device-mapper: table: 248:0: mirr: unknown target type [ 155.019188][ T5432] device-mapper: ioctl: error adding target to table [ 155.453417][ T5463] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.890367][ T5480] device-mapper: table: 248:0: mirr: unknown target type [ 155.898973][ T5480] device-mapper: ioctl: error adding target to table [ 156.671119][ T5518] device-mapper: table: 248:0: mirr: unknown target type [ 156.684869][ T5518] device-mapper: ioctl: error adding target to table [ 157.500883][ T5570] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments [ 157.528171][ T5570] device-mapper: ioctl: error adding target to table [ 157.579638][ T5573] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.483853][ T4229] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 158.961836][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.172923][ T4229] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 159.215405][ T4229] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 159.332729][ T4229] usb 2-1: Product: syz [ 159.392881][ T4229] usb 2-1: Manufacturer: syz [ 159.446027][ T4229] usb 2-1: SerialNumber: syz [ 159.585193][ T4229] usb 2-1: config 0 descriptor?? [ 159.739418][ T4229] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 159.863683][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 159.969076][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 160.101071][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 160.157988][ T5616] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments [ 160.230353][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 160.269661][ T5616] device-mapper: ioctl: error adding target to table [ 160.320103][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 160.434031][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 160.539338][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 160.634991][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 160.759275][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 160.789412][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 160.835936][ T4229] usb 2-1: USB disconnect, device number 11 [ 161.048077][ T4229] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 161.293419][ T4229] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 161.323578][ T4229] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 161.364776][ T5636] device-mapper: dirty region log: invalid region size 1024 [ 161.377236][ T4229] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 161.412514][ T5636] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 161.440123][ T4229] keyspan 2-1:0.0: device disconnected [ 161.449475][ T5636] device-mapper: ioctl: error adding target to table [ 163.195416][ T5674] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments [ 163.321188][ T5674] device-mapper: ioctl: error adding target to table [ 165.594954][ T5706] device-mapper: dirty region log: invalid region size 1024 [ 165.632576][ T5706] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 165.641793][ T5706] device-mapper: ioctl: error adding target to table [ 166.544130][ T5731] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments [ 166.552912][ T5731] device-mapper: ioctl: error adding target to table [ 166.730938][ T5740] ioapic: wrong length 6 [ 169.248380][ T5777] device-mapper: dirty region log: invalid region size 1024 [ 169.549736][ T5777] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 169.757258][ T5777] device-mapper: ioctl: error adding target to table [ 169.954480][ T5792] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments [ 169.963098][ T5792] device-mapper: ioctl: error adding target to table [ 170.285367][ T5815] kvm: vcpu 0: requested 384 ns lapic timer period limited to 200000 ns [ 171.560393][ T5840] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments [ 171.681266][ T5840] device-mapper: ioctl: error adding target to table [ 173.921133][ T5885] device-mapper: dirty region log: unrecognised sync argument to dirty region log: s [ 173.987873][ T5885] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 174.079428][ T5885] device-mapper: ioctl: error adding target to table [ 177.074631][ T5938] device-mapper: dirty region log: unrecognised sync argument to dirty region log: s [ 177.084288][ T5938] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 177.093190][ T5938] device-mapper: ioctl: error adding target to table [ 177.113171][ T5941] device-mapper: dirty region log: invalid region size 1024 [ 177.132389][ T5941] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 177.141259][ T5941] device-mapper: ioctl: error adding target to table [ 178.193137][ T4229] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 178.583410][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.823038][ T4229] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 178.867548][ T4229] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 178.973460][ T4229] usb 2-1: Product: syz [ 179.026086][ T4229] usb 2-1: Manufacturer: syz [ 179.073826][ T4229] usb 2-1: SerialNumber: syz [ 179.218454][ T4229] usb 2-1: config 0 descriptor?? [ 179.313510][ T4229] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 179.326259][ T5973] device-mapper: dirty region log: unrecognised sync argument to dirty region log: s [ 179.374419][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 179.408962][ T5973] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 179.437639][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 179.475420][ T5973] device-mapper: ioctl: error adding target to table [ 179.528805][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 179.633475][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 179.700677][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 179.749230][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 179.797326][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 179.928593][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 180.067331][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 180.218820][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 180.441078][ T4229] usb 2-1: USB disconnect, device number 12 [ 180.634743][ T4229] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 180.842014][ T4229] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 180.999168][ T4229] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 181.086190][ T4229] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 181.190566][ T4229] keyspan 2-1:0.0: device disconnected [ 182.064620][ T6017] device-mapper: dirty region log: unrecognised sync argument to dirty region log: syn [ 182.083804][ T6017] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 182.093097][ T6017] device-mapper: ioctl: error adding target to table [ 182.293297][ T4231] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 182.802472][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.022977][ T4231] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 183.068085][ T4231] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 183.145329][ T4231] usb 4-1: Product: syz [ 183.189788][ T4231] usb 4-1: Manufacturer: syz [ 183.241871][ T4231] usb 4-1: SerialNumber: syz [ 183.398780][ T4231] usb 4-1: config 0 descriptor?? [ 183.521622][ T4231] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 183.579451][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 183.643203][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 183.707189][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 183.753785][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 183.798987][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 183.832558][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 183.851855][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 183.879114][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 183.930665][ T4193] ------------[ cut here ]------------ [ 183.933331][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 183.936464][ T4193] WARNING: CPU: 1 PID: 4193 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 183.955085][ T4193] Modules linked in: [ 183.959009][ T4193] CPU: 1 PID: 4193 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 183.966691][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.977477][ T4193] Workqueue: hci2 hci_conn_timeout [ 183.982686][ T4193] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 183.982965][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 183.988349][ T4193] Code: 8b 8d e8 64 be dd f8 48 8b 35 15 95 aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 5c 6d f8 e8 81 8a 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 183.988384][ T4193] RSP: 0018:ffffc90002fafc08 EFLAGS: 00010293 [ 183.988403][ T4193] RAX: ffffffff88e08a1f RBX: ffff88807913c138 RCX: ffff888024710000 [ 183.988416][ T4193] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 183.988428][ T4193] RBP: 00000000ffffffff R08: ffff88807913c013 R09: 1ffff1100f227802 [ 184.018056][ T6061] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.023857][ T4193] R10: dffffc0000000000 R11: ffffed100f227803 R12: ffff88802c21f008 [ 184.076042][ T4193] R13: dffffc0000000000 R14: ffff88807913c000 R15: ffff88807913c010 [ 184.087394][ T4193] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 184.096590][ T4193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.097118][ T4231] usb 4-1: USB disconnect, device number 11 [ 184.103821][ T4193] CR2: 00007f3119264ff8 CR3: 0000000060db5000 CR4: 00000000003506e0 [ 184.117475][ T4193] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 184.125637][ T4193] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 184.133808][ T4193] Call Trace: [ 184.137191][ T4193] [ 184.140337][ T4193] process_one_work+0x867/0xff0 [ 184.145414][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 184.151118][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 184.156615][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.161720][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.167349][ T4193] ? wq_worker_running+0x97/0x170 [ 184.172585][ T4193] worker_thread+0xad7/0x12a0 [ 184.177419][ T4193] kthread+0x42e/0x520 [ 184.181566][ T4193] ? rcu_lock_release+0x20/0x20 [ 184.189262][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 184.194050][ T4193] ret_from_fork+0x1f/0x30 [ 184.198585][ T4193] [ 184.201668][ T4193] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.208950][ T4193] CPU: 1 PID: 4193 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 184.216500][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.226560][ T4193] Workqueue: hci2 hci_conn_timeout [ 184.231692][ T4193] Call Trace: [ 184.234970][ T4193] [ 184.237922][ T4193] dump_stack_lvl+0x188/0x250 [ 184.242610][ T4193] ? show_regs_print_info+0x20/0x20 [ 184.247812][ T4193] ? load_image+0x410/0x410 [ 184.252331][ T4193] panic+0x2f8/0x850 [ 184.256238][ T4193] ? bpf_jit_dump+0xd0/0xd0 [ 184.260753][ T4193] ? ret_from_fork+0x1f/0x30 [ 184.265349][ T4193] ? hci_conn_timeout+0x24f/0x450 [ 184.270376][ T4193] __warn+0x248/0x2b0 [ 184.274366][ T4193] ? hci_conn_timeout+0x24f/0x450 [ 184.279499][ T4193] report_bug+0x1b9/0x2e0 [ 184.283838][ T4193] handle_bug+0x3a/0x70 [ 184.287993][ T4193] exc_invalid_op+0x16/0x40 [ 184.292501][ T4193] asm_exc_invalid_op+0x16/0x20 [ 184.297362][ T4193] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 184.303005][ T4193] Code: 8b 8d e8 64 be dd f8 48 8b 35 15 95 aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 5c 6d f8 e8 81 8a 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 184.322622][ T4193] RSP: 0018:ffffc90002fafc08 EFLAGS: 00010293 [ 184.328701][ T4193] RAX: ffffffff88e08a1f RBX: ffff88807913c138 RCX: ffff888024710000 [ 184.336673][ T4193] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 184.344642][ T4193] RBP: 00000000ffffffff R08: ffff88807913c013 R09: 1ffff1100f227802 [ 184.352616][ T4193] R10: dffffc0000000000 R11: ffffed100f227803 R12: ffff88802c21f008 [ 184.360587][ T4193] R13: dffffc0000000000 R14: ffff88807913c000 R15: ffff88807913c010 [ 184.368580][ T4193] ? hci_conn_timeout+0x24f/0x450 [ 184.373619][ T4193] ? hci_conn_timeout+0x24f/0x450 [ 184.378648][ T4193] process_one_work+0x867/0xff0 [ 184.383518][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 184.389146][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 184.394436][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.399463][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.405038][ T4193] ? wq_worker_running+0x97/0x170 [ 184.410075][ T4193] worker_thread+0xad7/0x12a0 [ 184.414785][ T4193] kthread+0x42e/0x520 [ 184.418863][ T4193] ? rcu_lock_release+0x20/0x20 [ 184.423711][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 184.428301][ T4193] ret_from_fork+0x1f/0x30 [ 184.432728][ T4193] [ 184.435850][ T4193] Kernel Offset: disabled [ 184.440343][ T4193] Rebooting in 86400 seconds..