last executing test programs: 8.078406315s ago: executing program 3 (id=85): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x60000600) (fail_nth: 5) 8.029680054s ago: executing program 3 (id=86): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x8}) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (fail_nth: 2) 7.937090002s ago: executing program 3 (id=87): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x2, 0xffff5f11, 0xfffd, 0xffffbffffffffff8, 0x4000b, 0x86, 0x3, 0x6, 0x28, 0x2, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4b70cf489f5cb3b}) 7.04145454s ago: executing program 3 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x13c9804, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) (async) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 6.950396527s ago: executing program 3 (id=91): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000600)='mtd0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000000)="420a4c3d49db9df7503ff5cdc4bc700c270b41bd39ede70b09a9b48c08e077b685e1f510d00393", 0xff0a) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x8}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port1\x00', 0x10, 0x70452, 0xd, 0x4, 0x8028008, 0x7, 0x96e572f1, 0x0, 0x7, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.755399896s ago: executing program 3 (id=92): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0xfffffffffffffe77, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.581030788s ago: executing program 32 (id=92): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0xfffffffffffffe77, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.410946784s ago: executing program 1 (id=94): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (fail_nth: 2) 6.249242984s ago: executing program 1 (id=95): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.140410525s ago: executing program 1 (id=96): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) setxattr$incfs_metadata(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="050786edc17b9e82a44f83e150fc07d99cb55a28c56fcaac2677ba373abf967e5e392c3074a8c07bda0ca912a8675e9be6277096b1e0e09c66707c7690b52b9a3cf8fc3ed7b5937c6697a0005c999158d0ba", 0x52, 0x3) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x0, 0x98b046, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x8b7848, 0x0) (async) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000280)=[{{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8) (async, rerun: 32) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="500504"], 0x7) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='proc\x00', 0x1220080, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x10, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24}, 0x4) (async, rerun: 64) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) (async, rerun: 64) r7 = getuid() mount$9p_xen(&(0x7f0000000300), &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480), 0x7a414, &(0x7f0000000540)={'trans=xen,', {[{@cache_loose}], [{@measure}, {@euid_eq={'euid', 0x3d, r6}}, {@fsname={'fsname', 0x3d, '\'+{-)+'}}, {@euid_eq={'euid', 0x3d, r7}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x37, 0x39, 0x38, 0x30, 0x61, 0x62, 0x31], 0x2d, [0x64, 0x39, 0x39, 0x66], 0x2d, [0x6c, 0x33, 0x36, 0x34], 0x2d, [0x63, 0x32, 0x32, 0x31], 0x2d, [0x38, 0x63, 0x32, 0x63, 0x39, 0x63, 0x39, 0x62]}}}]}}) write$vhost_msg(r4, &(0x7f0000000600)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448e3, 0x0) (async) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) r9 = syz_socket_connect_nvme_tcp() read(r9, &(0x7f00000003c0)=""/112, 0x70) 3.662404045s ago: executing program 1 (id=103): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000280)='0', 0x1) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = syz_usb_connect$uac2(0x5, 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000401e05d632400001020500090272000301053009080b00010107208c090400000001012000092401004009090007090401000001022000090401010101022000090501090002030b040825010000400400090402000001022000090402010101022000092402020400cf1c050905820908004006030825018203f30600"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000600)) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.852519042s ago: executing program 0 (id=105): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000040)=0x7fffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8, 0x9}}, './file0\x00'}) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0x1, {0x7f, 0x4, 0xf4}}) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0x8, 0x4}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x3}, [{0x2, 0x0, r2}], {}, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x3, 0xee01}], {0x10, 0x6}, {0x20, 0x4}}, 0x44, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000004c0)={0x9f39304bf81f8265, 0xffffffad, 0x4, 0x80000, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000500)) pidfd_send_signal(r1, 0x22, &(0x7f0000000540)={0x6, 0x1, 0x9}, 0x0) inotify_add_watch(r1, &(0x7f00000005c0)='./file0\x00', 0x100) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x80100, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000640)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000680)={0x0, @reserved}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000740)={0x6, 0x1, 0xfffffffffffffff9}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000780)={'macvlan1\x00', 0x1000}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f0000000900)={{r8}, "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"}) r9 = openat$panthor(0xffffffffffffff9c, &(0x7f0000001900), 0x2, 0x0) r10 = syz_open_dev$dvb_demux(&(0x7f0000001940), 0x5, 0x200) ppoll(&(0x7f0000001980)=[{r5, 0x1008}, {r9, 0x254}, {r0, 0x2670}, {r1, 0x80}, {r0}, {r5, 0x4010}, {r1, 0x100}, {r10, 0x1}], 0x8, &(0x7f00000019c0), &(0x7f0000001a00)={[0xa2]}, 0x8) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000001a40)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x8000000000000001) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000001d40)={&(0x7f0000001d00)=[{0x9, 0x6210, 0xf6, &(0x7f0000001a80)="c91adfe1ba19b10147a5c4e754a3a8da1fc6acf915b686530a8bd377aaf4aea840d10ad9cf3109b9b1dc2d6bdc97ec8d814ecd6c2067b6f8e966d4c0236c9f8a3dda2e8e4e0030fcf55015f174e7a53727cfb70bd8ef343aba23555bac811c07cb4209393f2c8a2ed9efee1f71f11272912c03b0b1241560907cdda1f92a5098fe30d43d5f8da17d4dbf0b83a37892928b84db8db2910495ed110c25fc73d934b5c87cf12a668f9b5a872e5832f69f5d5d46866a51bd6109b57e81154bca611d522cbbac830842c5d0dcafd46dd3def8c4a5796b67f736c18c222c705978bfc30eec5fa683fadda480a8b2084c5f9c95ea885b848fd7"}, {0x3, 0x6000, 0xc3, &(0x7f0000001b80)="1c338ca10d32c63c30b32c2c9665e910c1465236bb2c54fdafbb8b9a845121baa8336857a835aba66971ea0a2d977eda6062e7c3ce6d8a84cb4451f98d419117f08e35ddc8a974426a80f60798ddd3b07ff30ebc628d8ba20b80a2c6dc6cd358d6c592cd45ab973374a4137b8aab66bd9d77060b5dd4f59477ad5401df4059d605e50f4a10ba8370310cae819ccab26ff7448ba2d0e341d80fdc0cefdae0185fba173bed97836eb42c280ca02c9f831cfa51fbf7bec1f74423c1fac758fe919478483b"}, {0x3, 0x6200, 0x73, &(0x7f0000001c80)="339a1acc27b55998ee406abd828a64981d81f751089f78fc074b7371e0b95353399c0266e95a7a598e45cb766f87bdcf52ec7a8b58bceffde4724c486d5e3f2f4f4ae9951dcda9c06b91783d89dcf034bd31e6ee6d90e62dce1c0c300b2c8c33fde49364543e50c68028df113af2404ab76b63"}], 0x3}) 2.478485468s ago: executing program 2 (id=108): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0xfffffffffffff5e4, 0x6}) (async) r1 = getpid() (async) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000080)) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x2) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x3ff}) (async, rerun: 64) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000240)={0xfff, 0x1, 0x5}) (async, rerun: 64) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x709) timer_create(0x5, &(0x7f0000000280)={0x0, 0x41, 0x4, @tid=r1}, &(0x7f00000002c0)) (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000003c0)=@urb_type_bulk={0x3, {0x8, 0x1}, 0x6, 0x0, &(0x7f0000000300)="d05d289d29777448bf921a94eae2d7f40139b1ed3b28b61e309b2b8aa3e3b5787474b0eb80c8bce2264734dab00dda15b08a6adf76cb2310d7", 0x39, 0x6, 0x401, 0x80, 0xc0, 0x1ff, &(0x7f0000000340)="132edaa2b7ef6ccf43b2d0487bd08e7b637b6ee8fb2bbc1e3ef02c0de73f3c925b7c8574cc52a72a18da1daec01193e9fccd303f159436bccdea00e3c23c9a9cd893aff336184de17e90fc64352ea80541f683bafdb623a80be1"}) (rerun: 32) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f0000000400)={0x0}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r4, 0xc0207511, &(0x7f0000000480)={r5, 0xffff, 0x0, 0x0, r1}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async, rerun: 64) bind$can_raw(r4, &(0x7f0000000540), 0x10) (async, rerun: 64) ioctl$NBD_DO_IT(r4, 0xab03) (async, rerun: 32) setns(r4, 0x0) (rerun: 32) faccessat2(r4, &(0x7f0000000580)='./file0\x00', 0xc0, 0x1380) (async) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_proto_private(r6, 0x89e3, &(0x7f00000005c0)="b81ace251c98b0284429395ef8e50ec39abf356d466bfa435a1947352c75e039984b61d148b0784d6b5b0b51a729debc8f959872c41d91a8ea636ff1") (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x128, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a1c6128c8f431ab486fea8bc5492115187f82d9486d2"}}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "bfad9585e892940148ae111a805e05fb783953d5ae8a18a1b7b036f420258234a1b99e198e7743871c8d69fe4a10900f9c20461efdcdd306955aed5a037b4d5a9bc7d7c3f3a0113ba5ae65579c048f149458cf2cbc1a65846db69617b81378a93a7c3bd88545a44f2ccff529f5b73ef1cbbb61454ecf59e055c402dc9a86380e6f20ed0e27dc6aa14e22e63a4ff5e923b6414814d48824240f5eef57271bb05eca242e32f18ae91efd8b796a5e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) (async) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000840)={0x0, @hci={0x1f, 0x1}, @l2={0x1f, 0x80, @none, 0xfa78}, @l2={0x1f, 0xf800, @none, 0x3}, 0x3dc, 0x0, 0x0, 0x0, 0x67, 0x0, 0x3ff, 0x0, 0x401}) (async, rerun: 64) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000008c0)={0x79, 0x0, 0xea7}) (async, rerun: 64) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind(r8, &(0x7f0000000940)=@can, 0x80) (async, rerun: 32) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x0, 0x5, 0x84, {0x84, 0x5, "d6c6b5c7d443820c3e99a9bfc8602b307fb582a2acc00435853198f03c7857722345a5926a635bd3b311d8a62d6d095f7248d8f43467fcac07dc96817d205f1eac68f82ce6e86dc2418f7bfe9257b9bab32b42de8fccdf03279c0ccac95c2e2ad36ec998de0388aa510e46c333b579c7344b63388e98f8b4abb979f006c998faf356"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000cc0)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x8001, 0x0, 0x6, [0x0, 0xff0030, 0x0, 0xdfbf]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x4, 0x400}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x7fffffe, 0xf000, 0x27a, [0xfff0, 0xffc030, 0x0, 0xc000, 0x3f00]}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x9, 0x6, 0x6, "3ed2a74b", "3b131ab1"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0xa9, 0x9, 0x6e, 0x73, 0xfff8}}}, &(0x7f0000001240)={0x84, &(0x7f0000000e00)={0x40, 0x1, 0x63, "94074ce972f6e598d008bb0d13a015e8e4ddaab02ffdb931e8da298b9de81b709d82b7db258e8fb4be5ea1f1dd0d12c7128f37c286f9c72478f9dc23dafbb06a04b3cc2a681e58dfadadfd137a92b20e2daf993e32e834e7fd5d269f19a4290e5825a4"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x4, 0x2}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x10, 0x1, [0xff00]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000001000)={0x40, 0xb, 0x2, "b2ae"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000001080)={0x40, 0x13, 0x6}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001100)={0x40, 0x19, 0x2, "9fad"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0xb}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x4}}) (rerun: 32) 2.344727997s ago: executing program 0 (id=109): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000003240)={&(0x7f0000002240)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000003280)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x6, r1, 0xfbfbfbfb}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0xfffffffffffffd24, 0x0, &(0x7f0000000240)={0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7fc3, "b9abecfe9100a72ead3b3be3b6795e80561559bf34037168c9eebad8f163d551", 0xffffffffffffffff}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) read$snddsp(r4, &(0x7f0000000240)=""/203, 0xcb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x7fff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="0a0018000303f6020303000008007000040003009afea8c8c19b92e9da456d8792ad60643ceba472c8454a8530ba60ab42b687765669d032a8dcb124dd89596d66004167283b1512"], 0x30}, 0x1, 0x0, 0x0, 0x4004014}, 0x20000004) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000126bd7000ffdbdf250200000008000300060000000800030004000000340006800500020003000000060005004e240000080006001500000008000300ac141437050002008000000008fe000000000000000004000700000008000200b9bf7a9d7006000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000081}, 0x4800) r13 = syz_create_resource$binfmt(&(0x7f0000000700)='./proc/thread-self/fail-nth\x00') openat$binfmt(0xffffffffffffff9c, r13, 0x41, 0x1ff) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r11, 0x5000940e, &(0x7f0000001240)={{r3}, "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"}) bind$inet(r7, &(0x7f0000000140)={0x2, 0xffff, @rand_addr=0x64010100}, 0x10) connect$inet(r14, &(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10) ppoll(&(0x7f0000000100)=[{r11}, {r14, 0x5020}, {r7, 0x8}, {r0, 0x100}], 0x4, &(0x7f00000001c0), &(0x7f0000000340)={[0x5]}, 0x8) 2.177638514s ago: executing program 0 (id=110): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000240)={@val={0xa888, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) 1.873880971s ago: executing program 0 (id=111): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async, rerun: 64) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b06032300080000000109022d0001010080000904000003ff00000009050102000200000009058202000200000009058303"], 0x0) (rerun: 64) timer_create(0x0, 0x0, &(0x7f00000002c0)=0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) (async) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_delete(r2) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000004dc0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000004e00)={0xd, @pix_mp={0x7f, 0x6, 0x47504a4d, 0x1, 0x2, [{0x401, 0x5}, {0x1, 0xbf}, {0x0, 0x10000}, {0x10001, 0x53}, {0x4, 0x6}, {0x6, 0x101}, {0x2, 0xffff7fff}, {0x4, 0x9}], 0xe2, 0x8, 0x0, 0x2, 0x5}}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x1200000000, 0x8}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x8, 0x3f8f26, 0x27a5ff}) 1.777201216s ago: executing program 2 (id=112): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.692355155s ago: executing program 2 (id=113): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (fail_nth: 2) 1.437706578s ago: executing program 2 (id=114): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000780), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a80), 0x101182, 0x0) getdents64(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x0) 933.026987ms ago: executing program 2 (id=115): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r2, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000002c0)={0x28, 0x2e, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x943, 0x0, 0x0, @fd}, @nested={0x10, 0x45, 0x0, 0x1, [@nested={0xc, 0x11b, 0x0, 0x1, [@nested={0x4, 0x61}, @typed={0x4, 0x1}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x80}, 0xc000) r3 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000340)={0xd, @output={0x0, 0x0, {0xbcbd, 0xd97}, 0x1, 0x61}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 476.201779ms ago: executing program 1 (id=116): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket(0x1d, 0x2, 0x6) bind$nfc_llcp(r0, &(0x7f0000000500)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x2, "b2bb11d22075444719b6f7a8b4fd6282de57026b731f8f42034b034f1dbd75de6d58bac62364b7e4be61cdabd583dce005c7fd869d3abee9f8545ecdfada2f", 0x11}, 0x60) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000200000000"], 0x14}}, 0x18) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='qnx6\x00', 0x208000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) readv(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000440)=""/115, 0x73}], 0x4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 250.890611ms ago: executing program 1 (id=117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0xe, @raw_data="943d0f0aeac02b2df78fdd048bbc338df91c656e4439516a78f4ef18cad868220b357c036d6f00cab1093e78a030f32cf60453737ffaf7db67e964f070145779720e7c5ed3557aaf221820db730a1c0531bdbc51c993738ebc3726167ecea1925f6929faad77e17eff6a985c9c041ec47ccd908c1d6f9d4e5c5eee951fbf56c0f5d8b882e70fced38aa40e083255ee5e3f597e32837665c1000ad516ca5ffc8c3f6972f0e622fa2e4b2c2e643f2cdab59bf7a94a9d77ceeadeccdd487e9ee59aff3af01c78522464"}) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000400)="02000000020001000003be8c5ee1768810003c08030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200dff47f00000000f50607bdff59100a070061547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccad", 0x90) 105.11242ms ago: executing program 0 (id=118): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) listns(&(0x7f0000000500)={0x20, 0x0, 0x1, 0x4020000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (fail_nth: 2) 90.50101ms ago: executing program 2 (id=119): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x3, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0x0, {0x40, 0x2, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0xffffffff, 0x2000, 0xdb, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) listns(&(0x7f0000000500)={0x20, 0x0, 0x1, 0x4020000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 0 (id=120): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8623}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) fallocate(r2, 0x1, 0x3, 0x8) write(r0, &(0x7f00000000c0)="8f2a", 0x2) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x32, 0x38, 0x63, 0x36, 0x36, 0x13, 0x30, 0x64, 0x62, 0x62, 0x63, 0x32, 0x39, 0x62, 0x64, 0x33]}, &(0x7f0000000200)={0x0, "33397790d5231adaf3c4277c0b7efdc11975a6f6015a2b4f8c21237bc16542b3a7c30518e07c2536ac21ca03459c718dc734fb5f1500ea8947f636aeb34b488c", 0x19}, 0x48, 0xfffffffffffffff9) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000280)={@id, 0x21, r3, '\x00', @c}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 65.809034][ T5601] cgroup: Unknown subsys name 'net' [ 65.870657][ T5601] cgroup: Unknown subsys name 'cpuset' [ 65.873752][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.186760][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.450335][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.454090][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.456602][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.457159][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.466152][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.466681][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.467246][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.467952][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.475280][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.476210][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.476475][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.478212][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.491458][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.491905][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.501576][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.506958][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.507811][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.521640][ T4933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.522650][ T4933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.523189][ T4933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.903060][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.903257][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.903383][ T5613] bridge_slave_0: entered allmulticast mode [ 70.905223][ T5613] bridge_slave_0: entered promiscuous mode [ 70.909082][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.909179][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.909321][ T5613] bridge_slave_1: entered allmulticast mode [ 70.910940][ T5613] bridge_slave_1: entered promiscuous mode [ 71.013393][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.013490][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.013599][ T5612] bridge_slave_0: entered allmulticast mode [ 71.015025][ T5612] bridge_slave_0: entered promiscuous mode [ 71.021323][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.057684][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.057751][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.057975][ T5612] bridge_slave_1: entered allmulticast mode [ 71.058908][ T5612] bridge_slave_1: entered promiscuous mode [ 71.063935][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.180260][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.180489][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.180592][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.180707][ T5610] bridge_slave_0: entered allmulticast mode [ 71.182152][ T5610] bridge_slave_0: entered promiscuous mode [ 71.185565][ T5613] team0: Port device team_slave_0 added [ 71.185847][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.185942][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.186327][ T5611] bridge_slave_0: entered allmulticast mode [ 71.188175][ T5611] bridge_slave_0: entered promiscuous mode [ 71.191058][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.191152][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.192017][ T5611] bridge_slave_1: entered allmulticast mode [ 71.193717][ T5611] bridge_slave_1: entered promiscuous mode [ 71.252298][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.252542][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.252648][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.252763][ T5610] bridge_slave_1: entered allmulticast mode [ 71.254718][ T5610] bridge_slave_1: entered promiscuous mode [ 71.272577][ T5613] team0: Port device team_slave_1 added [ 71.341600][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.357948][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.358876][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.358896][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.358918][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.362710][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.364571][ T5612] team0: Port device team_slave_0 added [ 71.366592][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.367220][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.367232][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.367254][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.371949][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.372014][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.398648][ T5612] team0: Port device team_slave_1 added [ 71.474846][ T5610] team0: Port device team_slave_0 added [ 71.478440][ T5611] team0: Port device team_slave_0 added [ 71.511747][ T5610] team0: Port device team_slave_1 added [ 71.513994][ T5611] team0: Port device team_slave_1 added [ 71.514837][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.514849][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.514873][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.519328][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.519342][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.519378][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.534299][ T5614] Bluetooth: hci1: command tx timeout [ 71.540282][ T5613] hsr_slave_0: entered promiscuous mode [ 71.546295][ T5613] hsr_slave_1: entered promiscuous mode [ 71.607975][ T5616] Bluetooth: hci0: command tx timeout [ 71.608147][ T5614] Bluetooth: hci2: command tx timeout [ 71.611731][ T5614] Bluetooth: hci3: command tx timeout [ 71.696010][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.696027][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.696050][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.705436][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.705452][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.705476][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.733218][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.733233][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.733258][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.761398][ T5612] hsr_slave_0: entered promiscuous mode [ 71.762345][ T5612] hsr_slave_1: entered promiscuous mode [ 71.762991][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 71.763086][ T5612] Cannot create hsr debugfs directory [ 71.850230][ T5611] hsr_slave_0: entered promiscuous mode [ 71.851184][ T5611] hsr_slave_1: entered promiscuous mode [ 71.852029][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 71.852046][ T5611] Cannot create hsr debugfs directory [ 71.886125][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.886141][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.886164][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.065957][ T5610] hsr_slave_0: entered promiscuous mode [ 72.066602][ T5610] hsr_slave_1: entered promiscuous mode [ 72.067033][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 72.067050][ T5610] Cannot create hsr debugfs directory [ 72.251621][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.261140][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.262991][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.270306][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.280743][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.291553][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.301041][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.304767][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.405428][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.416287][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.417097][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.433576][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.434604][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.437145][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.461877][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.464206][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.549086][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.553607][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.554523][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.557091][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.578970][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.591751][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.604487][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.610497][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.690819][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.694891][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.699730][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.700650][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.710648][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.712984][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.722050][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.722811][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.730962][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.783856][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.811478][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.811809][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.820507][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.820617][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.916753][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.970882][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.000175][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.000234][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.033725][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.036667][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.036770][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.080172][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.136487][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.155197][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.171759][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.171854][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.211863][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.211949][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.214071][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.214127][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.262394][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.262519][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.609386][ T5614] Bluetooth: hci1: command tx timeout [ 73.687822][ T5614] Bluetooth: hci3: command tx timeout [ 73.687855][ T5614] Bluetooth: hci2: command tx timeout [ 73.687877][ T5614] Bluetooth: hci0: command tx timeout [ 73.812327][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.952769][ T5613] veth0_vlan: entered promiscuous mode [ 73.976127][ T5613] veth1_vlan: entered promiscuous mode [ 74.090207][ T5613] veth0_macvtap: entered promiscuous mode [ 74.101801][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.115760][ T5613] veth1_macvtap: entered promiscuous mode [ 74.185758][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.216181][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.301787][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.308780][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.308910][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.308947][ T1152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.316378][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.319555][ T256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.354241][ T5612] veth0_vlan: entered promiscuous mode [ 74.409479][ T5612] veth1_vlan: entered promiscuous mode [ 74.473221][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.473250][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.502551][ T5611] veth0_vlan: entered promiscuous mode [ 74.541178][ T5611] veth1_vlan: entered promiscuous mode [ 74.543822][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.543840][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.546255][ T5610] veth0_vlan: entered promiscuous mode [ 74.561611][ T5610] veth1_vlan: entered promiscuous mode [ 74.615693][ T5612] veth0_macvtap: entered promiscuous mode [ 74.635438][ T5612] veth1_macvtap: entered promiscuous mode [ 74.635993][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.691951][ T5611] veth0_macvtap: entered promiscuous mode [ 74.715004][ T5610] veth0_macvtap: entered promiscuous mode [ 74.733787][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.755016][ T5611] veth1_macvtap: entered promiscuous mode [ 74.770420][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.784827][ T5610] veth1_macvtap: entered promiscuous mode [ 74.802015][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.824176][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.835950][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.845906][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.858008][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881095][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.890228][ T1032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.940164][ T1152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.940367][ T1152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.957997][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.958041][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.988735][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.988778][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.988812][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.988844][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.988886][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.058264][ T5701] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.069966][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.069986][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.141699][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.141720][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.155808][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.155829][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.220416][ T5701] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.221580][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.221591][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.225303][ T5701] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 75.225349][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.225373][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.225391][ T5701] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.225431][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.250940][ T5701] usb 2-1: config 0 descriptor?? [ 75.396137][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.396180][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.453335][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.453356][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.618805][ T987] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 75.622725][ T5766] FAULT_INJECTION: forcing a failure. [ 75.622725][ T5766] name failslab, interval 1, probability 0, space 0, times 1 [ 75.622769][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 75.622789][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.622808][ T5766] Call Trace: [ 75.622819][ T5766] [ 75.622835][ T5766] dump_stack_lvl+0xe8/0x150 [ 75.622874][ T5766] should_fail_ex+0x3eb/0x540 [ 75.622900][ T5766] should_failslab+0xa8/0x100 [ 75.622923][ T5766] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 75.622952][ T5766] ? __pfx_snprintf+0x10/0x10 [ 75.622977][ T5766] ? rtrs_str_to_sockaddr+0x1a7/0x3d0 [ 75.622999][ T5766] ? rtrs_str_to_sockaddr+0x1a7/0x3d0 [ 75.623026][ T5766] kstrndup+0x7e/0x160 [ 75.623057][ T5766] rtrs_str_to_sockaddr+0x1a7/0x3d0 [ 75.623079][ T5766] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 75.623109][ T5766] ? __pfx_rtrs_str_to_sockaddr+0x10/0x10 [ 75.623129][ T5766] ? kmemdup_nul+0x75/0xf0 [ 75.623160][ T5766] ? rtrs_addr_to_sockaddr+0xcc/0x130 [ 75.623186][ T5766] rnbd_clt_map_device_store+0x5f0/0xd60 [ 75.623209][ T5766] ? __pfx_hlock_conflict+0x10/0x10 [ 75.623235][ T5766] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 75.623269][ T5766] ? lockdep_unlock+0x5c/0xd0 [ 75.623335][ T5766] ? __lock_acquire+0x747/0x2de0 [ 75.623384][ T5766] ? lock_acquire+0x115/0x350 [ 75.623408][ T5766] ? sysfs_file_kobj+0x1a/0x230 [ 75.623441][ T5766] ? sysfs_file_kobj+0x1a/0x230 [ 75.623464][ T5766] ? sysfs_file_kobj+0x1e4/0x230 [ 75.623488][ T5766] ? sysfs_kf_write+0x166/0x260 [ 75.623516][ T5766] ? __pfx_sysfs_kf_write+0x10/0x10 [ 75.623538][ T5766] kernfs_fop_write_iter+0x3a4/0x540 [ 75.623565][ T5766] vfs_write+0x612/0xba0 [ 75.623599][ T5766] ? __pfx_vfs_write+0x10/0x10 [ 75.623634][ T5766] ? __fget_files+0x2a/0x420 [ 75.623667][ T5766] ksys_write+0x150/0x270 [ 75.623696][ T5766] ? __pfx_ksys_write+0x10/0x10 [ 75.623731][ T5766] do_syscall_64+0x166/0x520 [ 75.623748][ T5766] ? trace_irq_disable+0x3b/0x140 [ 75.623774][ T5766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.623793][ T5766] ? clear_bhb_loop+0x70/0xc0 [ 75.623817][ T5766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.623845][ T5766] RIP: 0033:0x7fe82e99e159 [ 75.623870][ T5766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.623885][ T5766] RSP: 002b:00007fe82f7a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.623911][ T5766] RAX: ffffffffffffffda RBX: 00007fe82ec25fa0 RCX: 00007fe82e99e159 [ 75.623926][ T5766] RDX: 0000000000000033 RSI: 0000200000000600 RDI: 0000000000000003 [ 75.623938][ T5766] RBP: 00007fe82f7a5090 R08: 0000000000000000 R09: 0000000000000000 [ 75.623949][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.623959][ T5766] R13: 00007fe82ec26038 R14: 00007fe82ec25fa0 R15: 00007ffd901f8c18 [ 75.623989][ T5766] [ 75.624392][ T5766] rnbd_client L127: Can't parse path ip:127.0.0.1: -12 [ 75.688216][ T5616] Bluetooth: hci1: command tx timeout [ 75.748196][ T987] usb 3-1: device descriptor read/64, error -71 [ 75.767799][ T5616] Bluetooth: hci0: command tx timeout [ 75.767832][ T5616] Bluetooth: hci2: command tx timeout [ 75.767852][ T5616] Bluetooth: hci3: command tx timeout [ 75.776905][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.776941][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.776967][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.785479][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.785520][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.785546][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.785570][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.785595][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.785620][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.785645][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.891281][ T5701] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 76.117527][ T987] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 76.257740][ T987] usb 3-1: device descriptor read/64, error -71 [ 76.324897][ T5715] usb 2-1: USB disconnect, device number 2 [ 76.371188][ T987] usb usb3-port1: attempt power cycle [ 76.423781][ T5781] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.717994][ T987] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 76.738930][ T987] usb 3-1: device descriptor read/8, error -71 [ 76.989803][ T987] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 77.010330][ T987] usb 3-1: device descriptor read/8, error -71 [ 77.119568][ T987] usb usb3-port1: unable to enumerate USB device [ 77.254013][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 77.274571][ T5803] FAULT_INJECTION: forcing a failure. [ 77.274571][ T5803] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 77.274601][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: syz.3.11 Not tainted syzkaller #0 PREEMPT(full) [ 77.274623][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.274635][ T5803] Call Trace: [ 77.274643][ T5803] [ 77.274651][ T5803] dump_stack_lvl+0xe8/0x150 [ 77.274682][ T5803] should_fail_ex+0x3eb/0x540 [ 77.274717][ T5803] prepare_alloc_pages+0x21e/0x5f0 [ 77.274753][ T5803] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 77.274781][ T5803] ? __lock_acquire+0x747/0x2de0 [ 77.274811][ T5803] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 77.274849][ T5803] ? policy_nodemask+0x2cc/0x8e0 [ 77.274870][ T5803] ? __pfx_free_vmap_area_rb_augment_cb_rotate+0x10/0x10 [ 77.274905][ T5803] alloc_pages_mpol+0x21e/0x390 [ 77.274933][ T5803] alloc_pages_noprof+0xb1/0x2b0 [ 77.274957][ T5803] get_free_pages_noprof+0xf/0x80 [ 77.274986][ T5803] __kasan_populate_vmalloc+0x38/0x1c0 [ 77.275014][ T5803] ? do_raw_spin_unlock+0xf5/0x200 [ 77.275042][ T5803] alloc_vmap_area+0xd10/0x1410 [ 77.275079][ T5803] ? __pfx_alloc_vmap_area+0x10/0x10 [ 77.275100][ T5803] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 77.275130][ T5803] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 77.275157][ T5803] ? __get_vm_area_node+0x155/0x2f0 [ 77.275186][ T5803] __get_vm_area_node+0x200/0x2f0 [ 77.275216][ T5803] __vmalloc_node_range_noprof+0x340/0x1690 [ 77.275243][ T5803] ? copy_process+0x81b/0x43e0 [ 77.275296][ T5803] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 77.275322][ T5803] ? dup_task_struct+0x52/0xa00 [ 77.275341][ T5803] ? trace_kmem_cache_alloc+0x29/0xe0 [ 77.275369][ T5803] ? memcpy_and_pad+0x48/0x80 [ 77.275401][ T5803] __vmalloc_node_noprof+0xc2/0x100 [ 77.275426][ T5803] ? copy_process+0x81b/0x43e0 [ 77.275444][ T5803] ? copy_process+0x81b/0x43e0 [ 77.275467][ T5803] dup_task_struct+0x2c6/0xa00 [ 77.275493][ T5803] copy_process+0x81b/0x43e0 [ 77.275527][ T5803] ? kstrtouint+0x6e/0xe0 [ 77.275548][ T5803] ? lock_acquire+0x115/0x350 [ 77.275574][ T5803] ? get_pid_task+0x20/0x1f0 [ 77.275605][ T5803] ? __pfx_copy_process+0x10/0x10 [ 77.275628][ T5803] ? get_pid_task+0x20/0x1f0 [ 77.275651][ T5803] ? get_pid_task+0x20/0x1f0 [ 77.275683][ T5803] kernel_clone+0x2d7/0x940 [ 77.275719][ T5803] ? __pfx_kernel_clone+0x10/0x10 [ 77.275759][ T5803] __x64_sys_clone+0x1b6/0x230 [ 77.275786][ T5803] ? __pfx___x64_sys_clone+0x10/0x10 [ 77.275824][ T5803] ? __pfx_ksys_write+0x10/0x10 [ 77.275862][ T5803] do_syscall_64+0x166/0x520 [ 77.275880][ T5803] ? trace_irq_disable+0x3b/0x140 [ 77.275907][ T5803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.275927][ T5803] ? clear_bhb_loop+0x70/0xc0 [ 77.275952][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.275971][ T5803] RIP: 0033:0x7fe4a919e159 [ 77.275989][ T5803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.276006][ T5803] RSP: 002b:00007fe4aa0aafd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 77.276027][ T5803] RAX: ffffffffffffffda RBX: 00007fe4a9426090 RCX: 00007fe4a919e159 [ 77.276042][ T5803] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 77.276055][ T5803] RBP: 00007fe4aa0ab090 R08: 0000000000000000 R09: 0000000000000000 [ 77.276068][ T5803] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 77.276079][ T5803] R13: 00007fe4a9426128 R14: 00007fe4a9426090 R15: 00007ffcdba90a78 [ 77.276110][ T5803] [ 77.285254][ T5803] syz.3.11: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 77.285411][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: syz.3.11 Not tainted syzkaller #0 PREEMPT(full) [ 77.285432][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.285443][ T5803] Call Trace: [ 77.285450][ T5803] [ 77.285457][ T5803] dump_stack_lvl+0xe8/0x150 [ 77.285486][ T5803] warn_alloc+0x24d/0x270 [ 77.285514][ T5803] ? lockdep_hardirqs_on+0x7b/0x110 [ 77.285545][ T5803] ? __pfx_warn_alloc+0x10/0x10 [ 77.285570][ T5803] ? kfree+0x1c5/0x650 [ 77.285598][ T5803] ? __get_vm_area_node+0x219/0x2f0 [ 77.285627][ T5803] __vmalloc_node_range_noprof+0x368/0x1690 [ 77.285681][ T5803] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 77.285713][ T5803] ? dup_task_struct+0x52/0xa00 [ 77.285733][ T5803] ? trace_kmem_cache_alloc+0x29/0xe0 [ 77.285758][ T5803] ? memcpy_and_pad+0x48/0x80 [ 77.285789][ T5803] __vmalloc_node_noprof+0xc2/0x100 [ 77.285813][ T5803] ? copy_process+0x81b/0x43e0 [ 77.285831][ T5803] ? copy_process+0x81b/0x43e0 [ 77.285853][ T5803] dup_task_struct+0x2c6/0xa00 [ 77.285880][ T5803] copy_process+0x81b/0x43e0 [ 77.285912][ T5803] ? kstrtouint+0x6e/0xe0 [ 77.285931][ T5803] ? lock_acquire+0x115/0x350 [ 77.285958][ T5803] ? get_pid_task+0x20/0x1f0 [ 77.285987][ T5803] ? __pfx_copy_process+0x10/0x10 [ 77.286009][ T5803] ? get_pid_task+0x20/0x1f0 [ 77.286031][ T5803] ? get_pid_task+0x20/0x1f0 [ 77.286062][ T5803] kernel_clone+0x2d7/0x940 [ 77.286090][ T5803] ? __pfx_kernel_clone+0x10/0x10 [ 77.286128][ T5803] __x64_sys_clone+0x1b6/0x230 [ 77.286153][ T5803] ? __pfx___x64_sys_clone+0x10/0x10 [ 77.286190][ T5803] ? __pfx_ksys_write+0x10/0x10 [ 77.286225][ T5803] do_syscall_64+0x166/0x520 [ 77.286241][ T5803] ? trace_irq_disable+0x3b/0x140 [ 77.286267][ T5803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.286286][ T5803] ? clear_bhb_loop+0x70/0xc0 [ 77.286308][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.286326][ T5803] RIP: 0033:0x7fe4a919e159 [ 77.286343][ T5803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.286358][ T5803] RSP: 002b:00007fe4aa0aafd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 77.286377][ T5803] RAX: ffffffffffffffda RBX: 00007fe4a9426090 RCX: 00007fe4a919e159 [ 77.286390][ T5803] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000009000 [ 77.286402][ T5803] RBP: 00007fe4aa0ab090 R08: 0000000000000000 R09: 0000000000000000 [ 77.286414][ T5803] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 77.286425][ T5803] R13: 00007fe4a9426128 R14: 00007fe4a9426090 R15: 00007ffcdba90a78 [ 77.286452][ T5803] [ 77.286465][ T5803] Mem-Info: [ 77.286474][ T5803] active_anon:5487 inactive_anon:0 isolated_anon:0 [ 77.286474][ T5803] active_file:0 inactive_file:42402 isolated_file:0 [ 77.286474][ T5803] unevictable:0 dirty:1779 writeback:0 [ 77.286474][ T5803] slab_reclaimable:9957 slab_unreclaimable:90082 [ 77.286474][ T5803] mapped:24773 shmem:520 pagetables:1053 [ 77.286474][ T5803] sec_pagetables:0 bounce:0 [ 77.286474][ T5803] kernel_misc_reclaimable:0 [ 77.286474][ T5803] free:1343790 free_pcp:20422 free_cma:0 [ 77.286527][ T5803] Node 0 active_anon:21948kB inactive_anon:0kB active_file:0kB inactive_file:169404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99092kB dirty:7104kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11572kB pagetables:4068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 77.286579][ T5803] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 77.301337][ T5803] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.301397][ T5803] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 77.301431][ T5803] Node 0 DMA32 free:1416304kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21948kB inactive_anon:0kB active_file:0kB inactive_file:169404kB unevictable:0kB writepending:7104kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:81572kB local_pcp:34740kB free_cma:0kB [ 77.301487][ T5803] lowmem_reserve[]: 0 0 1 1 1 [ 77.301519][ T5803] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.301573][ T5803] lowmem_reserve[]: 0 0 0 0 0 [ 77.301604][ T5803] Node 1 Normal free:3943496kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.301659][ T5803] lowmem_reserve[]: 0 0 0 0 0 [ 77.301690][ T5803] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.301822][ T5803] Node 0 DMA32: 62*4kB (UME) 29*8kB (UM) 3*16kB (ME) 5*32kB (UME) 4*64kB (ME) 3*128kB (UME) 5*256kB (ME) 5*512kB (UME) 4*1024kB (ME) 3*2048kB (UME) 342*4096kB (M) = 1416240kB [ 77.301969][ T5803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 77.302062][ T5803] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 6*16kB (UM) 7*32kB (UM) 7*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943496kB [ 77.302207][ T5803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.302222][ T5803] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.302237][ T5803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.302252][ T5803] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.302267][ T5803] 42918 total pagecache pages [ 77.302278][ T5803] 0 pages in swap cache [ 77.302285][ T5803] Free swap = 124996kB [ 77.302292][ T5803] Total swap = 124996kB [ 77.302299][ T5803] 2097051 pages RAM [ 77.302306][ T5803] 0 pages HighMem/MovableOnly [ 77.302312][ T5803] 429554 pages reserved [ 77.302319][ T5803] 0 pages cma reserved [ 77.767818][ T5614] Bluetooth: hci1: command tx timeout [ 77.849379][ T4933] Bluetooth: hci0: command tx timeout [ 77.849426][ T5616] Bluetooth: hci2: command tx timeout [ 77.849459][ T5614] Bluetooth: hci3: command tx timeout [ 78.879056][ T5860] jffs2: notice: (5860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.032840][ T5864] kvm [5863]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ca5 [ 79.101930][ T5870] rnbd_client L610: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 79.150969][ T5870] rtrs_client L2100: : Failed to resolve address, err: -ENODEV [ 79.151562][ T5870] rtrs_client L2643: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 79.257514][ T987] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.352634][ T5850] Bluetooth: hci4: Frame reassembly failed (-90) [ 79.352971][ T5875] Bluetooth: hci4: Frame reassembly failed (-84) [ 79.356843][ T5875] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 79.417083][ T5877] x_tables: duplicate underflow at hook 2 [ 79.428159][ T987] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 79.429132][ T987] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 79.429160][ T987] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 79.429183][ T987] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 79.429207][ T987] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 49 [ 79.429243][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.434801][ T5868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.434939][ T5868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.435059][ T5868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.435182][ T5868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.496993][ T987] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 79.643641][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.644081][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.674521][ T987] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 79.686834][ T5867] process 'syz.1.27' launched '/dev/fd/3' with NULL argv: empty string added [ 79.716110][ T987] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 79.848562][ T987] usb 2-1: USB disconnect, device number 3 [ 79.848673][ C1] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 79.892160][ T987] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 79.908715][ T987] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 79.912465][ T987] mos7720 2-1:1.0: device disconnected [ 80.204082][ T5899] sctp: [Deprecated]: syz.0.36 (pid 5899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.204082][ T5899] Use struct sctp_sack_info instead [ 80.917798][ T5701] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 81.084551][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.085076][ T5701] usb 2-1: not running at top speed; connect to a high speed hub [ 81.085106][ T5701] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 81.086108][ T5701] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 81.099861][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.099885][ T5701] usb 2-1: Product: syz [ 81.099898][ T5701] usb 2-1: Manufacturer: syz [ 81.099911][ T5701] usb 2-1: SerialNumber: syz [ 81.345841][ T5701] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 81.369106][ T5614] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 81.369389][ T5616] Bluetooth: hci4: command 0x1003 tx timeout [ 81.389302][ T5720] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.465825][ T5701] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 81.529913][ T5935] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 81.531657][ T5701] usb 2-1: USB disconnect, device number 4 [ 81.536911][ T5937] FAULT_INJECTION: forcing a failure. [ 81.536911][ T5937] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.536938][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT(full) [ 81.536959][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.536971][ T5937] Call Trace: [ 81.536979][ T5937] [ 81.536987][ T5937] dump_stack_lvl+0xe8/0x150 [ 81.537017][ T5937] should_fail_ex+0x3eb/0x540 [ 81.537043][ T5937] _copy_to_user+0x31/0xb0 [ 81.537070][ T5937] simple_read_from_buffer+0xe1/0x170 [ 81.537101][ T5937] proc_fail_nth_read+0x1bb/0x230 [ 81.537132][ T5937] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.537163][ T5937] ? rw_verify_area+0x24a/0x4c0 [ 81.537190][ T5937] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.537217][ T5937] vfs_read+0x213/0xa80 [ 81.537248][ T5937] ? __pfx___mutex_lock+0x10/0x10 [ 81.537268][ T5937] ? __pfx_vfs_read+0x10/0x10 [ 81.537295][ T5937] ? __fget_files+0x2a/0x420 [ 81.537324][ T5937] ? __fget_files+0x3a2/0x420 [ 81.537346][ T5937] ? __fget_files+0x2a/0x420 [ 81.537378][ T5937] ksys_read+0x150/0x270 [ 81.537402][ T5937] ? __pfx_ksys_read+0x10/0x10 [ 81.537435][ T5937] do_syscall_64+0x166/0x520 [ 81.537452][ T5937] ? trace_irq_disable+0x3b/0x140 [ 81.537478][ T5937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.537503][ T5937] ? clear_bhb_loop+0x70/0xc0 [ 81.537525][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.537544][ T5937] RIP: 0033:0x7fe4a915e98e [ 81.537561][ T5937] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.537577][ T5937] RSP: 002b:00007fe4aa130fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.537597][ T5937] RAX: ffffffffffffffda RBX: 00007fe4aa1316c0 RCX: 00007fe4a915e98e [ 81.537609][ T5937] RDX: 000000000000000f RSI: 00007fe4aa1310a0 RDI: 0000000000000004 [ 81.537620][ T5937] RBP: 00007fe4aa131090 R08: 0000000000000000 R09: 0000000000000000 [ 81.537631][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.537642][ T5937] R13: 00007fe4a9426038 R14: 00007fe4a9425fa0 R15: 00007ffcdba90a78 [ 81.537671][ T5937] [ 81.557952][ T5720] usb 3-1: Using ep0 maxpacket: 16 [ 81.558748][ T5720] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 81.559698][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.559739][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.604524][ T5720] usb 3-1: config 0 descriptor?? [ 81.636215][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.870243][ T5720] rc_core: IR keymap rc-xbox-dvd not found [ 81.870260][ T5720] Registered IR keymap rc-empty [ 81.880474][ T5720] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 81.894554][ T5720] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 81.903658][ T5720] xbox_remote 3-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 81.934489][ T5720] input: failed to attach handler kbd to device input5, error: -5 [ 81.966424][ T4968] xbox_remote 3-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 81.988088][ T4968] xbox_remote 3-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 82.024736][ T5720] usb 3-1: USB disconnect, device number 6 [ 82.193137][ T5614] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 82.233504][ T5950] netlink: 96 bytes leftover after parsing attributes in process `syz.1.53'. [ 82.360020][ T5622] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.508567][ T5622] usb 4-1: Using ep0 maxpacket: 16 [ 82.509320][ T5622] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 82.510259][ T5622] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 82.510281][ T5622] usb 4-1: config 252 has no interface number 0 [ 82.510320][ T5622] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 82.510345][ T5622] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 82.514318][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.514343][ T5622] usb 4-1: Product: syz [ 82.514356][ T5622] usb 4-1: Manufacturer: syz [ 82.514370][ T5622] usb 4-1: SerialNumber: syz [ 82.539932][ T5948] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 82.615009][ T5622] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 82.718784][ T5701] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.857028][ T5828] usb 4-1: Failed to submit usb control message: -71 [ 82.857063][ T5828] usb 4-1: unable to send the bmi data to the device: -71 [ 82.857078][ T5828] usb 4-1: unable to get target info from device [ 82.857102][ T5828] usb 4-1: could not get target info (-71) [ 82.857304][ T5828] usb 4-1: could not probe fw (-71) [ 82.868176][ T5701] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 82.871196][ T5701] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.871264][ T5701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.898985][ T5622] usb 4-1: USB disconnect, device number 2 [ 82.901712][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.901734][ T5701] usb 2-1: Product: syz [ 82.901748][ T5701] usb 2-1: Manufacturer: syz [ 82.901761][ T5701] usb 2-1: SerialNumber: syz [ 83.047140][ T5965] FAULT_INJECTION: forcing a failure. [ 83.047140][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.047161][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: syz.0.59 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.047175][ T5965] Tainted: [L]=SOFTLOCKUP [ 83.047179][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.047186][ T5965] Call Trace: [ 83.047190][ T5965] [ 83.047195][ T5965] dump_stack_lvl+0xe8/0x150 [ 83.047214][ T5965] should_fail_ex+0x3eb/0x540 [ 83.047229][ T5965] _copy_to_user+0x31/0xb0 [ 83.047245][ T5965] simple_read_from_buffer+0xe1/0x170 [ 83.047265][ T5965] proc_fail_nth_read+0x1bb/0x230 [ 83.047289][ T5965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.047306][ T5965] ? rw_verify_area+0x24a/0x4c0 [ 83.047321][ T5965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.047336][ T5965] vfs_read+0x213/0xa80 [ 83.047352][ T5965] ? __pfx___mutex_lock+0x10/0x10 [ 83.047369][ T5965] ? __pfx_vfs_read+0x10/0x10 [ 83.047392][ T5965] ? __fget_files+0x2a/0x420 [ 83.047419][ T5965] ? __fget_files+0x3a2/0x420 [ 83.047440][ T5965] ? __fget_files+0x2a/0x420 [ 83.047477][ T5965] ksys_read+0x150/0x270 [ 83.047505][ T5965] ? __pfx_ksys_read+0x10/0x10 [ 83.047530][ T5965] ? __pfx_sync_file_ioctl+0x10/0x10 [ 83.047566][ T5965] do_syscall_64+0x166/0x520 [ 83.047583][ T5965] ? trace_irq_disable+0x3b/0x140 [ 83.047609][ T5965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.047629][ T5965] ? clear_bhb_loop+0x70/0xc0 [ 83.047651][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.047670][ T5965] RIP: 0033:0x7fe82e95e98e [ 83.047688][ T5965] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.047703][ T5965] RSP: 002b:00007fe82f7a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.047724][ T5965] RAX: ffffffffffffffda RBX: 00007fe82f7a56c0 RCX: 00007fe82e95e98e [ 83.047735][ T5965] RDX: 000000000000000f RSI: 00007fe82f7a50a0 RDI: 0000000000000008 [ 83.047741][ T5965] RBP: 00007fe82f7a5090 R08: 0000000000000000 R09: 0000000000000000 [ 83.047748][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.047754][ T5965] R13: 00007fe82ec26038 R14: 00007fe82ec25fa0 R15: 00007ffd901f8c18 [ 83.047770][ T5965] [ 83.067837][ T5720] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 83.218317][ T5720] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 83.219462][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.219484][ T5720] usb 3-1: config 0 has no interfaces? [ 83.219510][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.226080][ T5720] usb 3-1: config 0 descriptor?? [ 83.347048][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.347323][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.360613][ T5701] cdc_ncm 2-1:1.0: bind() failure [ 83.363047][ T5701] usbtest 2-1:1.0: Linux gadget zero [ 83.363065][ T5701] usbtest 2-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 83.373427][ T5701] usbtest 2-1:1.1: couldn't get endpoints, -22 [ 83.373504][ T5701] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 83.374396][ T5701] usbhid 2-1:1.1: couldn't find an input interrupt endpoint [ 83.379768][ T5701] usb 2-1: USB disconnect, device number 5 [ 83.518669][ T5961] warning: `syz.2.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.537216][ T5961] netlink: 'syz.2.57': attribute type 2 has an invalid length. [ 83.562660][ T5720] usb 3-1: USB disconnect, device number 7 [ 83.656652][ T5971] FAULT_INJECTION: forcing a failure. [ 83.656652][ T5971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.656684][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.3.61 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.656710][ T5971] Tainted: [L]=SOFTLOCKUP [ 83.656717][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.656728][ T5971] Call Trace: [ 83.656736][ T5971] [ 83.656745][ T5971] dump_stack_lvl+0xe8/0x150 [ 83.656783][ T5971] should_fail_ex+0x3eb/0x540 [ 83.656810][ T5971] _copy_to_user+0x31/0xb0 [ 83.656838][ T5971] simple_read_from_buffer+0xe1/0x170 [ 83.656868][ T5971] proc_fail_nth_read+0x1bb/0x230 [ 83.656900][ T5971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.656931][ T5971] ? rw_verify_area+0x24a/0x4c0 [ 83.656959][ T5971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.656986][ T5971] vfs_read+0x213/0xa80 [ 83.657017][ T5971] ? __pfx___mutex_lock+0x10/0x10 [ 83.657037][ T5971] ? __pfx_vfs_read+0x10/0x10 [ 83.657065][ T5971] ? __fget_files+0x2a/0x420 [ 83.657094][ T5971] ? __fget_files+0x3a2/0x420 [ 83.657116][ T5971] ? __fget_files+0x2a/0x420 [ 83.657148][ T5971] ksys_read+0x150/0x270 [ 83.657176][ T5971] ? __pfx_ksys_read+0x10/0x10 [ 83.657201][ T5971] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 83.657234][ T5971] do_syscall_64+0x166/0x520 [ 83.657251][ T5971] ? trace_irq_disable+0x3b/0x140 [ 83.657277][ T5971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.657297][ T5971] ? clear_bhb_loop+0x70/0xc0 [ 83.657321][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.657341][ T5971] RIP: 0033:0x7fe4a915e98e [ 83.657362][ T5971] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.657376][ T5971] RSP: 002b:00007fe4aa130fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.657395][ T5971] RAX: ffffffffffffffda RBX: 00007fe4aa1316c0 RCX: 00007fe4a915e98e [ 83.657408][ T5971] RDX: 000000000000000f RSI: 00007fe4aa1310a0 RDI: 0000000000000006 [ 83.657419][ T5971] RBP: 00007fe4aa131090 R08: 0000000000000000 R09: 0000000000000000 [ 83.657431][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.657443][ T5971] R13: 00007fe4a9426038 R14: 00007fe4a9425fa0 R15: 00007ffcdba90a78 [ 83.657473][ T5971] [ 84.096847][ T5985] FAULT_INJECTION: forcing a failure. [ 84.096847][ T5985] name failslab, interval 1, probability 0, space 0, times 0 [ 84.096881][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.1.64 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.096908][ T5985] Tainted: [L]=SOFTLOCKUP [ 84.096915][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.096927][ T5985] Call Trace: [ 84.096935][ T5985] [ 84.096943][ T5985] dump_stack_lvl+0xe8/0x150 [ 84.096973][ T5985] should_fail_ex+0x3eb/0x540 [ 84.096999][ T5985] should_failslab+0xa8/0x100 [ 84.097020][ T5985] ? fuse_get_req+0x8e9/0xd40 [ 84.097048][ T5985] kmem_cache_alloc_noprof+0x9c/0x600 [ 84.097074][ T5985] ? schedule+0x90/0x2b0 [ 84.097101][ T5985] ? fuse_get_req+0x8e9/0xd40 [ 84.097133][ T5985] fuse_get_req+0x8e9/0xd40 [ 84.097167][ T5985] ? __pfx_fuse_get_req+0x10/0x10 [ 84.097196][ T5985] ? __pfx_autoremove_wake_function+0x10/0x10 [ 84.097219][ T5985] ? __kernel_text_address+0xd/0x30 [ 84.097251][ T5985] ? lock_acquire+0x115/0x350 [ 84.097282][ T5985] fuse_chan_send+0x2cf/0x1ac0 [ 84.097314][ T5985] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 84.097352][ T5985] ? from_kgid+0x1c6/0x660 [ 84.097375][ T5985] ? __pfx_fuse_chan_send+0x10/0x10 [ 84.097399][ T5985] ? __pfx_from_kgid+0x10/0x10 [ 84.097423][ T5985] ? kasan_save_track+0x4f/0x80 [ 84.097448][ T5985] ? kasan_save_track+0x3e/0x80 [ 84.097474][ T5985] ? kasan_save_free_info+0x40/0x50 [ 84.097496][ T5985] ? pid_nr_ns+0xcb/0x140 [ 84.097524][ T5985] ? fuse_req_prep+0x613/0xa30 [ 84.097561][ T5985] ? __fuse_simple_request+0x7a/0xb0 [ 84.097591][ T5985] fuse_update_get_attr+0x920/0x1300 [ 84.097625][ T5985] ? __pfx_fuse_update_get_attr+0x10/0x10 [ 84.097664][ T5985] ? tomoyo_path_perm+0x251/0x560 [ 84.097726][ T5985] ? __pfx_apparmor_inode_getattr+0x10/0x10 [ 84.097757][ T5985] ? fuse_getattr+0x301/0x600 [ 84.097786][ T5985] vfs_getattr_nosec+0x2e1/0x430 [ 84.097811][ T5985] vfs_statx_path+0x2b/0x230 [ 84.097833][ T5985] ? vfs_statx+0x107/0x200 [ 84.097853][ T5985] vfs_statx+0x12e/0x200 [ 84.097874][ T5985] ? __pfx_vfs_statx+0x10/0x10 [ 84.097899][ T5985] __se_sys_statx+0x1e9/0x2a0 [ 84.097927][ T5985] ? __pfx___se_sys_statx+0x10/0x10 [ 84.097965][ T5985] ? __pfx_ksys_write+0x10/0x10 [ 84.097995][ T5985] ? __x64_sys_statx+0x20/0xc0 [ 84.098020][ T5985] do_syscall_64+0x166/0x520 [ 84.098039][ T5985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.098059][ T5985] ? clear_bhb_loop+0x70/0xc0 [ 84.098083][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.098102][ T5985] RIP: 0033:0x7f754319e159 [ 84.098120][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.098136][ T5985] RSP: 002b:00007f7544092028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 84.098157][ T5985] RAX: ffffffffffffffda RBX: 00007f7543425fa0 RCX: 00007f754319e159 [ 84.098172][ T5985] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 84.098184][ T5985] RBP: 00007f7544092090 R08: 0000000000000000 R09: 0000000000000000 [ 84.098195][ T5985] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 84.098203][ T5985] R13: 00007f7543426038 R14: 00007f7543425fa0 R15: 00007ffe03ee08c8 [ 84.098229][ T5985] [ 84.931257][ T6016] FAULT_INJECTION: forcing a failure. [ 84.931257][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.931288][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.3.67 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.931313][ T6016] Tainted: [L]=SOFTLOCKUP [ 84.931320][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.931330][ T6016] Call Trace: [ 84.931338][ T6016] [ 84.931346][ T6016] dump_stack_lvl+0xe8/0x150 [ 84.931376][ T6016] should_fail_ex+0x3eb/0x540 [ 84.931402][ T6016] _copy_from_user+0x2d/0xb0 [ 84.931426][ T6016] video_usercopy+0x359/0x1430 [ 84.931455][ T6016] ? hook_file_ioctl+0x1f2/0x600 [ 84.931477][ T6016] ? __pfx___video_do_ioctl+0x10/0x10 [ 84.931502][ T6016] ? __pfx_video_usercopy+0x10/0x10 [ 84.931535][ T6016] ? __fget_files+0x2a/0x420 [ 84.931561][ T6016] ? __fget_files+0x2a/0x420 [ 84.931582][ T6016] ? __fget_files+0x3a2/0x420 [ 84.931605][ T6016] v4l2_ioctl+0x18d/0x1e0 [ 84.931628][ T6016] ? __pfx_v4l2_ioctl+0x10/0x10 [ 84.931649][ T6016] __se_sys_ioctl+0xfc/0x170 [ 84.931690][ T6016] do_syscall_64+0x166/0x520 [ 84.931708][ T6016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.931726][ T6016] ? clear_bhb_loop+0x70/0xc0 [ 84.931748][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.931766][ T6016] RIP: 0033:0x7fe4a919e159 [ 84.931784][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.931798][ T6016] RSP: 002b:00007fe4aa131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.931817][ T6016] RAX: ffffffffffffffda RBX: 00007fe4a9425fa0 RCX: 00007fe4a919e159 [ 84.931831][ T6016] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 84.931843][ T6016] RBP: 00007fe4aa131090 R08: 0000000000000000 R09: 0000000000000000 [ 84.931854][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.931864][ T6016] R13: 00007fe4a9426038 R14: 00007fe4a9425fa0 R15: 00007ffcdba90a78 [ 84.931893][ T6016] [ 85.175218][ T6024] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET) [ 85.249210][ T6021] WARNING! power/level is deprecated; use power/control instead [ 85.355433][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72'. [ 85.355511][ T6029] nbd: socks must be embedded in a SOCK_ITEM attr [ 85.599346][ T5622] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.687536][ T5715] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 85.747493][ T5622] usb 2-1: Using ep0 maxpacket: 8 [ 85.748280][ T5622] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 85.749296][ T5622] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 85.749312][ T5622] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 85.749325][ T5622] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 25966, setting to 1024 [ 85.749338][ T5622] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 85.749349][ T5622] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.751231][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.751253][ T5622] usb 2-1: Product: syz [ 85.751266][ T5622] usb 2-1: Manufacturer: syz [ 85.751280][ T5622] usb 2-1: SerialNumber: syz [ 85.756047][ T6029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.756181][ T6029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.763340][ T5622] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 85.764276][ T5622] usbtest 2-1:1.0: Linux user mode ISO test driver [ 85.764293][ T5622] usbtest 2-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 85.888782][ T5715] usb 3-1: not running at top speed; connect to a high speed hub [ 85.888815][ T5715] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.889884][ T5715] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 85.889912][ T5715] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 85.889936][ T5715] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 85.889959][ T5715] usb 3-1: config 1 interface 0 has no altsetting 0 [ 85.892504][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.892527][ T5715] usb 3-1: Product: ސ붵¢䞃見ڧﺮ誶ἃ쐸ⓣｵ탳⿅锦鉚ﮗ꣘잆칚ᳰ퍡絻큮쨤錃帔ᛱ昷뤁㲜洦ᨱ䳎姹᱇ᒞꌒ裎﷿⑝⒔컔빍⨶꼴溎ꑙБ昅쯄宨黈ﷅ䛙处䝗╹砞鵿管粷梘翩쎣쐑촮걼奰⍢쥔븕ꗽ枡㇦ [ 85.892551][ T5715] usb 3-1: Manufacturer: 〉 [ 85.892565][ T5715] usb 3-1: SerialNumber: ꊪ뵽며ᢎ㉽劾ꮉﯭ╝ᖱꩉ饤즿៙䝊썁㹈鷆⸾㾂蜨湣ﻯ誥檕礎砫䘅€䶧မ굟貝嶾굊⵷ᇌ䊨먪斾ሴ레醽ᓸ퇔꓍偁怅雭䗲䲎鹃 [ 85.898016][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.902899][ T6035] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 85.903054][ T6035] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 85.903171][ T6035] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 85.961361][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.961865][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.007100][ T987] usb 2-1: USB disconnect, device number 6 [ 86.029484][ T25] usb 1-1: device descriptor read/64, error -71 [ 86.257481][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.312420][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.313565][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.315719][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.316159][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.346804][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.347333][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.393690][ T5715] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 86.403422][ T5715] usb 3-1: USB disconnect, device number 8 [ 86.407578][ T25] usb 1-1: device descriptor read/64, error -71 [ 86.491438][ T6049] Bluetooth: MGMT ver 1.23 [ 86.508225][ T25] usb usb1-port1: attempt power cycle [ 86.698739][ T6057] FAULT_INJECTION: forcing a failure. [ 86.698739][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 86.698770][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.3.85 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.698793][ T6057] Tainted: [L]=SOFTLOCKUP [ 86.698799][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.698810][ T6057] Call Trace: [ 86.698817][ T6057] [ 86.698828][ T6057] dump_stack_lvl+0xe8/0x150 [ 86.698857][ T6057] should_fail_ex+0x3eb/0x540 [ 86.698883][ T6057] should_failslab+0xa8/0x100 [ 86.698906][ T6057] __kvmalloc_node_noprof+0x171/0x820 [ 86.698935][ T6057] ? __kvmalloc_node_noprof+0x340/0x820 [ 86.698962][ T6057] ? alloc_fdtable+0x169/0x2c0 [ 86.698983][ T6057] ? alloc_fdtable+0x169/0x2c0 [ 86.699010][ T6057] alloc_fdtable+0x169/0x2c0 [ 86.699035][ T6057] dup_fd+0x7fe/0xaf0 [ 86.699068][ T6057] ? _raw_spin_unlock+0x28/0x50 [ 86.699092][ T6057] ? copy_fs_struct+0x1c3/0x270 [ 86.699114][ T6057] ksys_unshare+0x50f/0x950 [ 86.699142][ T6057] ? __pfx_ksys_unshare+0x10/0x10 [ 86.699165][ T6057] ? __pfx_ksys_write+0x10/0x10 [ 86.699199][ T6057] __x64_sys_unshare+0x38/0x50 [ 86.699222][ T6057] do_syscall_64+0x166/0x520 [ 86.699239][ T6057] ? trace_irq_disable+0x3b/0x140 [ 86.699264][ T6057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.699282][ T6057] ? clear_bhb_loop+0x70/0xc0 [ 86.699303][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.699321][ T6057] RIP: 0033:0x7fe4a919e159 [ 86.699339][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.699354][ T6057] RSP: 002b:00007fe4aa131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 86.699376][ T6057] RAX: ffffffffffffffda RBX: 00007fe4a9425fa0 RCX: 00007fe4a919e159 [ 86.699390][ T6057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 86.699403][ T6057] RBP: 00007fe4aa131090 R08: 0000000000000000 R09: 0000000000000000 [ 86.699414][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.699425][ T6057] R13: 00007fe4a9426038 R14: 00007fe4a9425fa0 R15: 00007ffcdba90a78 [ 86.699454][ T6057] [ 86.827760][ T6061] FAULT_INJECTION: forcing a failure. [ 86.827760][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 86.827791][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.3.86 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.827816][ T6061] Tainted: [L]=SOFTLOCKUP [ 86.827823][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.827842][ T6061] Call Trace: [ 86.827849][ T6061] [ 86.827857][ T6061] dump_stack_lvl+0xe8/0x150 [ 86.827886][ T6061] should_fail_ex+0x3eb/0x540 [ 86.827911][ T6061] ? zswap_store+0xc2e/0x2040 [ 86.827932][ T6061] should_failslab+0xa8/0x100 [ 86.827953][ T6061] ? zswap_store+0xc2e/0x2040 [ 86.827972][ T6061] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 86.827998][ T6061] ? percpu_ref_put+0x1e/0x230 [ 86.828021][ T6061] ? percpu_ref_put+0x1e/0x230 [ 86.828041][ T6061] ? zswap_store+0xc2e/0x2040 [ 86.828067][ T6061] zswap_store+0xc2e/0x2040 [ 86.828091][ T6061] ? zswap_store+0x765/0x2040 [ 86.828126][ T6061] ? __pfx_zswap_store+0x10/0x10 [ 86.828148][ T6061] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.828177][ T6061] ? do_raw_spin_unlock+0xf5/0x200 [ 86.828203][ T6061] swap_writeout+0x9bf/0x15d0 [ 86.828231][ T6061] ? try_to_unmap_flush_dirty+0x96/0x100 [ 86.828259][ T6061] shrink_folio_list+0x34ca/0x5270 [ 86.828314][ T6061] ? __pfx_shrink_folio_list+0x10/0x10 [ 86.828380][ T6061] ? __css_rstat_updated+0x237/0x540 [ 86.828428][ T6061] reclaim_folio_list+0x100/0x430 [ 86.828469][ T6061] ? __pfx_reclaim_folio_list+0x10/0x10 [ 86.828513][ T6061] reclaim_pages+0x452/0x530 [ 86.828549][ T6061] ? __pfx_reclaim_pages+0x10/0x10 [ 86.828577][ T6061] ? madvise_cold_or_pageout_pte_range+0x1acd/0x2340 [ 86.828608][ T6061] madvise_cold_or_pageout_pte_range+0x1af6/0x2340 [ 86.828629][ T6061] ? lock_acquire+0x115/0x350 [ 86.828669][ T6061] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 86.828688][ T6061] ? mod_memcg_lruvec_state+0xd5/0x270 [ 86.828715][ T6061] ? lru_gen_update_size+0x718/0xcf0 [ 86.828746][ T6061] ? __mod_zone_page_state+0xd5/0x140 [ 86.828771][ T6061] walk_pgd_range+0x102d/0x1dc0 [ 86.828824][ T6061] ? __pfx_walk_pgd_range+0x10/0x10 [ 86.828845][ T6061] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 86.828874][ T6061] __walk_page_range+0x16d/0x720 [ 86.828912][ T6061] walk_page_range_vma_unsafe+0x309/0x410 [ 86.828940][ T6061] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 86.828965][ T6061] ? mlock_drain_local+0x79/0x490 [ 86.828996][ T6061] ? walk_page_range_vma+0x6b/0x90 [ 86.829019][ T6061] madvise_vma_behavior+0x2831/0x41c0 [ 86.829047][ T6061] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 86.829069][ T6061] ? lock_acquire+0x115/0x350 [ 86.829108][ T6061] ? process_measurement+0x7b2/0x1c10 [ 86.829138][ T6061] ? up_write+0x19d/0x4a0 [ 86.829163][ T6061] ? __lock_acquire+0x747/0x2de0 [ 86.829195][ T6061] ? __lock_acquire+0x747/0x2de0 [ 86.829253][ T6061] ? mas_prev_slot+0xb76/0xbf0 [ 86.829295][ T6061] ? find_vma_prev+0x123/0x1b0 [ 86.829319][ T6061] ? __pfx_find_vma_prev+0x10/0x10 [ 86.829358][ T6061] madvise_walk_vmas+0x576/0xb00 [ 86.829387][ T6061] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 86.829410][ T6061] ? blk_start_plug+0x6e/0x1b0 [ 86.829432][ T6061] madvise_do_behavior+0x385/0x540 [ 86.829456][ T6061] ? __pfx_madvise_do_behavior+0x10/0x10 [ 86.829482][ T6061] ? down_read+0x2b9/0x320 [ 86.829509][ T6061] do_madvise+0x327/0x3a0 [ 86.829538][ T6061] ? __pfx_do_madvise+0x10/0x10 [ 86.829588][ T6061] ? __pfx_ksys_write+0x10/0x10 [ 86.829625][ T6061] __x64_sys_madvise+0xa6/0xc0 [ 86.829645][ T6061] do_syscall_64+0x166/0x520 [ 86.829662][ T6061] ? trace_irq_disable+0x3b/0x140 [ 86.829687][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.829706][ T6061] ? clear_bhb_loop+0x70/0xc0 [ 86.829728][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.829746][ T6061] RIP: 0033:0x7fe4a919e159 [ 86.829764][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.829779][ T6061] RSP: 002b:00007fe4aa131028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 86.829800][ T6061] RAX: ffffffffffffffda RBX: 00007fe4a9425fa0 RCX: 00007fe4a919e159 [ 86.829813][ T6061] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 86.829826][ T6061] RBP: 00007fe4aa131090 R08: 0000000000000000 R09: 0000000000000000 [ 86.829838][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.829849][ T6061] R13: 00007fe4a9426038 R14: 00007fe4a9425fa0 R15: 00007ffcdba90a78 [ 86.829878][ T6061] [ 86.868609][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.900818][ T25] usb 1-1: device descriptor read/8, error -71 [ 87.010562][ T5715] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 87.148061][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.164973][ T1221] cfg80211: failed to load regulatory.db [ 87.179737][ T25] usb 1-1: device descriptor read/8, error -71 [ 87.203416][ T5715] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 87.228782][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 87.228810][ T5715] usb 2-1: Product: syz [ 87.228824][ T5715] usb 2-1: Manufacturer: syz [ 87.299701][ T25] usb usb1-port1: unable to enumerate USB device [ 87.447616][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 87.471064][ T5715] scsi host1: uas [ 87.655977][ C1] usb 2-1: stat urb: no pending cmd for uas-tag 0 [ 87.858354][ C1] usb 2-1: cmd cmplt err -71 [ 87.858823][ T5622] usb 2-1: USB disconnect, device number 7 [ 87.874397][ T5622] scsi 1:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 87.874458][ T5622] scsi 1:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00 [ 88.076228][ T5828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.199512][ T5828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.298126][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.299469][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.300315][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.301612][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.302169][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.347261][ T5828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.472193][ T5828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.812182][ T6094] FAULT_INJECTION: forcing a failure. [ 88.812182][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 88.812214][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.0.97 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.812239][ T6094] Tainted: [L]=SOFTLOCKUP [ 88.812245][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.812256][ T6094] Call Trace: [ 88.812263][ T6094] [ 88.812270][ T6094] dump_stack_lvl+0xe8/0x150 [ 88.812303][ T6094] should_fail_ex+0x3eb/0x540 [ 88.812323][ T6094] ? zswap_store+0xc2e/0x2040 [ 88.812341][ T6094] should_failslab+0xa8/0x100 [ 88.812360][ T6094] ? zswap_store+0xc2e/0x2040 [ 88.812376][ T6094] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 88.812397][ T6094] ? percpu_ref_put+0x1e/0x230 [ 88.812419][ T6094] ? percpu_ref_put+0x1e/0x230 [ 88.812449][ T6094] ? zswap_store+0xc2e/0x2040 [ 88.812473][ T6094] zswap_store+0xc2e/0x2040 [ 88.812495][ T6094] ? zswap_store+0x765/0x2040 [ 88.812526][ T6094] ? __pfx_zswap_store+0x10/0x10 [ 88.812547][ T6094] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 88.812577][ T6094] ? do_raw_spin_unlock+0xf5/0x200 [ 88.812599][ T6094] swap_writeout+0x9bf/0x15d0 [ 88.812624][ T6094] ? try_to_unmap_flush_dirty+0x96/0x100 [ 88.812649][ T6094] shrink_folio_list+0x34ca/0x5270 [ 88.812706][ T6094] ? __pfx_shrink_folio_list+0x10/0x10 [ 88.812768][ T6094] ? __css_rstat_updated+0x237/0x540 [ 88.812813][ T6094] reclaim_folio_list+0x100/0x430 [ 88.812853][ T6094] ? __pfx_reclaim_folio_list+0x10/0x10 [ 88.812893][ T6094] reclaim_pages+0x452/0x530 [ 88.812927][ T6094] ? __pfx_reclaim_pages+0x10/0x10 [ 88.812952][ T6094] ? madvise_cold_or_pageout_pte_range+0x1acd/0x2340 [ 88.812978][ T6094] madvise_cold_or_pageout_pte_range+0x1af6/0x2340 [ 88.812997][ T6094] ? lock_acquire+0x115/0x350 [ 88.813038][ T6094] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 88.813058][ T6094] ? mod_memcg_lruvec_state+0xd5/0x270 [ 88.813085][ T6094] ? lru_gen_update_size+0x718/0xcf0 [ 88.813115][ T6094] ? __mod_zone_page_state+0xd5/0x140 [ 88.813141][ T6094] walk_pgd_range+0x102d/0x1dc0 [ 88.813196][ T6094] ? __pfx_walk_pgd_range+0x10/0x10 [ 88.813217][ T6094] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 88.813247][ T6094] __walk_page_range+0x16d/0x720 [ 88.813287][ T6094] walk_page_range_vma_unsafe+0x309/0x410 [ 88.813315][ T6094] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 88.813342][ T6094] ? mlock_drain_local+0x79/0x490 [ 88.813373][ T6094] ? walk_page_range_vma+0x6b/0x90 [ 88.813395][ T6094] madvise_vma_behavior+0x2831/0x41c0 [ 88.813432][ T6094] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 88.813455][ T6094] ? lock_acquire+0x115/0x350 [ 88.813494][ T6094] ? process_measurement+0x7b2/0x1c10 [ 88.813524][ T6094] ? up_write+0x19d/0x4a0 [ 88.813550][ T6094] ? __lock_acquire+0x747/0x2de0 [ 88.813582][ T6094] ? __lock_acquire+0x747/0x2de0 [ 88.813642][ T6094] ? mas_prev_slot+0xb76/0xbf0 [ 88.813686][ T6094] ? find_vma_prev+0x123/0x1b0 [ 88.813712][ T6094] ? __pfx_find_vma_prev+0x10/0x10 [ 88.813752][ T6094] madvise_walk_vmas+0x576/0xb00 [ 88.813783][ T6094] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 88.813807][ T6094] ? blk_start_plug+0x6e/0x1b0 [ 88.813831][ T6094] madvise_do_behavior+0x385/0x540 [ 88.813855][ T6094] ? __pfx_madvise_do_behavior+0x10/0x10 [ 88.813882][ T6094] ? down_read+0x2b9/0x320 [ 88.813911][ T6094] do_madvise+0x327/0x3a0 [ 88.813942][ T6094] ? __pfx_do_madvise+0x10/0x10 [ 88.813992][ T6094] ? __pfx_ksys_write+0x10/0x10 [ 88.814026][ T6094] __x64_sys_madvise+0xa6/0xc0 [ 88.814046][ T6094] do_syscall_64+0x166/0x520 [ 88.814064][ T6094] ? trace_irq_disable+0x3b/0x140 [ 88.814090][ T6094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.814109][ T6094] ? clear_bhb_loop+0x70/0xc0 [ 88.814132][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.814151][ T6094] RIP: 0033:0x7fe82e99e159 [ 88.814169][ T6094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.814184][ T6094] RSP: 002b:00007fe82f7a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 88.814206][ T6094] RAX: ffffffffffffffda RBX: 00007fe82ec25fa0 RCX: 00007fe82e99e159 [ 88.814220][ T6094] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 88.814233][ T6094] RBP: 00007fe82f7a5090 R08: 0000000000000000 R09: 0000000000000000 [ 88.814246][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.814257][ T6094] R13: 00007fe82ec26038 R14: 00007fe82ec25fa0 R15: 00007ffd901f8c18 [ 88.814287][ T6094] [ 88.841918][ T6092] ======================================================= [ 88.841918][ T6092] WARNING: The mand mount option has been deprecated and [ 88.841918][ T6092] and is ignored by this kernel. Remove the mand [ 88.841918][ T6092] option from the mount to silence this warning. [ 88.841918][ T6092] ======================================================= [ 89.222291][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.98'. [ 89.235480][ T5828] bridge_slave_1: left allmulticast mode [ 89.235534][ T5828] bridge_slave_1: left promiscuous mode [ 89.237493][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.284325][ T6124] overlayfs: overlapping lowerdir path [ 89.328821][ T5828] bridge_slave_0: left allmulticast mode [ 89.328844][ T5828] bridge_slave_0: left promiscuous mode [ 89.329064][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.560309][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.579017][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.580610][ T5828] bond0 (unregistering): Released all slaves [ 90.330464][ T5616] Bluetooth: hci2: command tx timeout [ 90.554176][ T6222] sg_write: data in/out 335836/136 bytes for SCSI command 0x0-- guessing data in; [ 90.554176][ T6222] program syz.2.101 not setting count and/or reply_len properly [ 91.090274][ T5828] hsr_slave_0: left promiscuous mode [ 91.091439][ T5828] hsr_slave_1: left promiscuous mode [ 91.098878][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.098931][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.105853][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.105875][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.166606][ T5828] veth1_macvtap: left promiscuous mode [ 91.166732][ T5828] veth0_macvtap: left promiscuous mode [ 91.166835][ T5828] veth1_vlan: left promiscuous mode [ 91.166917][ T5828] veth0_vlan: left promiscuous mode [ 91.537482][ T5701] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 91.559853][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 91.566372][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 91.669270][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 91.675769][ T6233] syzkaller1: entered promiscuous mode [ 91.675793][ T6233] syzkaller1: entered allmulticast mode [ 91.694519][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.694566][ T5701] usb 2-1: New USB device found, idVendor=051e, idProduct=32d6, bcdDevice= 0.40 [ 91.694600][ T5701] usb 2-1: no configurations [ 91.694611][ T5701] usb 2-1: can't read configurations, error -22 [ 91.822547][ T5701] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.981595][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.981639][ T5701] usb 2-1: New USB device found, idVendor=051e, idProduct=32d6, bcdDevice= 0.40 [ 91.981673][ T5701] usb 2-1: no configurations [ 91.981684][ T5701] usb 2-1: can't read configurations, error -22 [ 91.982119][ T5701] usb usb2-port1: attempt power cycle [ 92.317913][ T5701] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 92.360513][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.360563][ T5701] usb 2-1: New USB device found, idVendor=051e, idProduct=32d6, bcdDevice= 0.40 [ 92.360598][ T5701] usb 2-1: no configurations [ 92.360609][ T5701] usb 2-1: can't read configurations, error -22 [ 92.407485][ T5616] Bluetooth: hci2: command tx timeout [ 92.425481][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.425663][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.425794][ T6076] bridge_slave_0: entered allmulticast mode [ 92.448866][ T6076] bridge_slave_0: entered promiscuous mode [ 92.459886][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.460045][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.460164][ T6076] bridge_slave_1: entered allmulticast mode [ 92.462028][ T6076] bridge_slave_1: entered promiscuous mode [ 92.489100][ T5701] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 92.515282][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.515328][ T5701] usb 2-1: New USB device found, idVendor=051e, idProduct=32d6, bcdDevice= 0.40 [ 92.515366][ T5701] usb 2-1: no configurations [ 92.515377][ T5701] usb 2-1: can't read configurations, error -22 [ 92.518958][ T5701] usb usb2-port1: unable to enumerate USB device [ 92.562095][ T6076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.576832][ T6076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.679209][ T6076] team0: Port device team_slave_0 added [ 92.682326][ T6076] team0: Port device team_slave_1 added [ 92.724672][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.724690][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.724715][ T6076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.774280][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.774298][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.774322][ T6076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.852202][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 92.872534][ T6076] hsr_slave_0: entered promiscuous mode [ 92.873153][ T6076] hsr_slave_1: entered promiscuous mode [ 92.873563][ T6076] debugfs: 'hsr0' already exists in 'hsr' [ 92.873581][ T6076] Cannot create hsr debugfs directory [ 93.174576][ T6290] FAULT_INJECTION: forcing a failure. [ 93.174576][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.174618][ T6290] CPU: 1 UID: 0 PID: 6290 Comm: syz.2.113 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.174644][ T6290] Tainted: [L]=SOFTLOCKUP [ 93.174651][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.174662][ T6290] Call Trace: [ 93.174670][ T6290] [ 93.174679][ T6290] dump_stack_lvl+0xe8/0x150 [ 93.174708][ T6290] should_fail_ex+0x3eb/0x540 [ 93.174735][ T6290] _copy_from_user+0x2d/0xb0 [ 93.174762][ T6290] kstrtouint_from_user+0xd6/0x180 [ 93.174786][ T6290] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 93.174815][ T6290] ? lock_acquire+0x115/0x350 [ 93.174848][ T6290] proc_fail_nth_write+0x8e/0x210 [ 93.174877][ T6290] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.174913][ T6290] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.174941][ T6290] vfs_write+0x296/0xba0 [ 93.174976][ T6290] ? __pfx_vfs_write+0x10/0x10 [ 93.175004][ T6290] ? __fget_files+0x2a/0x420 [ 93.175031][ T6290] ? __fget_files+0x3a2/0x420 [ 93.175049][ T6290] ? __fget_files+0x2a/0x420 [ 93.175075][ T6290] ksys_write+0x150/0x270 [ 93.175097][ T6290] ? __pfx_ksys_write+0x10/0x10 [ 93.175126][ T6290] do_syscall_64+0x166/0x520 [ 93.175140][ T6290] ? trace_irq_disable+0x3b/0x140 [ 93.175161][ T6290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.175175][ T6290] ? clear_bhb_loop+0x70/0xc0 [ 93.175194][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.175209][ T6290] RIP: 0033:0x7fbedc95e98e [ 93.175224][ T6290] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.175236][ T6290] RSP: 002b:00007fbedd820fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.175253][ T6290] RAX: ffffffffffffffda RBX: 00007fbedd8216c0 RCX: 00007fbedc95e98e [ 93.175264][ T6290] RDX: 0000000000000001 RSI: 00007fbedd8210a0 RDI: 0000000000000003 [ 93.175274][ T6290] RBP: 00007fbedd821090 R08: 0000000000000000 R09: 0000000000000000 [ 93.175283][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.175292][ T6290] R13: 00007fbedcc26038 R14: 00007fbedcc25fa0 R15: 00007ffe9c6401e8 [ 93.175317][ T6290] [ 93.257678][ T5701] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.497983][ T5701] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 8.00 [ 93.499919][ T5701] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.499949][ T5701] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 93.499985][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.552376][ T5701] pl2303 1-1:1.0: pl2303 converter detected [ 93.552645][ T5701] pl2303 1-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 93.604687][ T6076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.620941][ T6076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.623554][ T6076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.648140][ T6076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.650496][ T6076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.683218][ T6076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.686300][ T6076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.705660][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.714894][ T6076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.722147][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.723896][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.727284][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.728360][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.735901][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.744493][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.744916][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.755751][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.756191][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.898125][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 94.063877][ T5701] usb 1-1: USB disconnect, device number 6 [ 94.110416][ T6076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.158840][ T6076] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.173796][ T5829] nvmet: connect request for invalid subsystem testsubsys! [ 94.175094][ T6314] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 94.192680][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.192776][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.218581][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.218670][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.490241][ T5616] Bluetooth: hci2: command tx timeout [ 94.506818][ T6328] /dev/nullb0: Can't open blockdev [ 94.825648][ T6340] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58432 [ 94.825676][ T6340] memcg:ffff888035d12a80 [ 94.825686][ T6340] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 94.825710][ T6340] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 94.825728][ T6340] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888035d12a80 [ 94.825739][ T6340] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 94.825767][ T6340] page_owner tracks the page as allocated [ 94.825774][ T6340] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6340, tgid 6334 (syz.1.117), ts 94825596696 [ 94.825805][ T6340] post_alloc_hook+0x1f9/0x250 [ 94.825834][ T6340] get_page_from_freelist+0x2209/0x2280 [ 94.825862][ T6340] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 94.825889][ T6340] alloc_pages_mpol+0x21e/0x390 [ 94.825907][ T6340] alloc_pages_noprof+0xb1/0x2b0 [ 94.825925][ T6340] folio_alloc_noprof+0x1e/0x30 [ 94.825942][ T6340] filemap_alloc_folio_noprof+0x111/0x460 [ 94.825959][ T6340] page_cache_ra_order+0x569/0xee0 [ 94.825978][ T6340] do_sync_mmap_readahead+0x75e/0x990 [ 94.825999][ T6340] filemap_fault+0x7d9/0x13b0 [ 94.826018][ T6340] __do_fault+0x138/0x2a0 [ 94.826041][ T6340] do_pte_missing+0x2215/0x34b0 [ 94.826063][ T6340] handle_mm_fault+0x1a53/0x3750 [ 94.826083][ T6340] __get_user_pages+0x1670/0x2750 [ 94.826101][ T6340] populate_vma_page_range+0x2be/0x3c0 [ 94.826119][ T6340] __mm_populate+0x25f/0x390 [ 94.826136][ T6340] page last free pid 5611 tgid 5611 ts 94734860101 stack trace: [ 94.826150][ T6340] __free_frozen_pages+0xc93/0xd90 [ 94.826174][ T6340] __kasan_populate_vmalloc+0x12d/0x1c0 [ 94.826200][ T6340] alloc_vmap_area+0xd10/0x1410 [ 94.826221][ T6340] __get_vm_area_node+0x200/0x2f0 [ 94.826242][ T6340] __vmalloc_node_range_noprof+0x340/0x1690 [ 94.826264][ T6340] vzalloc_noprof+0xb2/0xe0 [ 94.826287][ T6340] alloc_counters+0x63/0x5d0 [ 94.826312][ T6340] do_ip6t_get_ctl+0xb17/0x12f0 [ 94.826338][ T6340] nf_getsockopt+0x26e/0x290 [ 94.826356][ T6340] ipv6_getsockopt+0x213/0x2c0 [ 94.826376][ T6340] do_sock_getsockopt+0x51d/0x7e0 [ 94.826395][ T6340] __x64_sys_getsockopt+0x1a4/0x240 [ 94.826421][ T6340] do_syscall_64+0x166/0x520 [ 94.826438][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.826627][ T6340] ------------[ cut here ]------------ [ 94.826635][ T6340] kernel BUG at mm/filemap.c:859! [ 94.826668][ T6340] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 95.073790][ T6340] CPU: 0 UID: 0 PID: 6340 Comm: syz.1.117 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.084558][ T6340] Tainted: [L]=SOFTLOCKUP [ 95.088875][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.098930][ T6340] RIP: 0010:__filemap_add_folio+0x128c/0x1400 [ 95.105009][ T6340] Code: ff 4c 89 f7 48 c7 c6 20 0f 19 8c e8 fe 5e 1f ff 90 0f 0b e8 d6 3e bf ff 48 8b 7c 24 20 48 c7 c6 e0 03 19 8c e8 e5 5e 1f ff 90 <0f> 0b e8 bd 3e bf ff 4c 89 f7 48 c7 c6 20 0f 19 8c e8 ce 5e 1f ff [ 95.124611][ T6340] RSP: 0018:ffffc900037171a0 EFLAGS: 00010246 [ 95.130682][ T6340] RAX: f8af554f14664000 RBX: 0000000000000000 RCX: 0000000000000046 [ 95.138739][ T6340] RDX: ffffc9000e5c1000 RSI: ffffffff8e82b24f RDI: ffff88802030be80 [ 95.146704][ T6340] RBP: ffffc90003717338 R08: ffff8880b8424713 R09: 1ffff110170848e2 [ 95.154840][ T6340] R10: dffffc0000000000 R11: ffffed10170848e3 R12: dffffc0000000000 [ 95.162816][ T6340] R13: ffff888023d61fc0 R14: 0000000000000002 R15: ffff888023d620d8 [ 95.170807][ T6340] FS: 00007f75440716c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 95.179729][ T6340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.186309][ T6340] CR2: 00007f1af32df4ac CR3: 00000000799a8000 CR4: 00000000003526f0 [ 95.194274][ T6340] Call Trace: [ 95.197545][ T6340] [ 95.200468][ T6340] ? __pfx_try_charge_memcg+0x10/0x10 [ 95.205833][ T6340] ? lock_acquire+0x115/0x350 [ 95.210510][ T6340] ? lock_acquire+0x115/0x350 [ 95.215202][ T6340] ? __pfx___filemap_add_folio+0x10/0x10 [ 95.220834][ T6340] ? percpu_ref_put+0x19/0x180 [ 95.225617][ T6340] ? percpu_ref_put+0xf9/0x180 [ 95.230393][ T6340] filemap_add_folio+0x251/0x4e0 [ 95.235336][ T6340] page_cache_ra_order+0x6d1/0xee0 [ 95.240452][ T6340] do_sync_mmap_readahead+0x75e/0x990 [ 95.245825][ T6340] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 95.251730][ T6340] ? count_memcg_event_mm+0x1d/0x250 [ 95.257048][ T6340] ? count_memcg_event_mm+0x1d/0x250 [ 95.262335][ T6340] filemap_fault+0x7d9/0x13b0 [ 95.267009][ T6340] ? filemap_map_pages+0x1d1/0x2170 [ 95.272201][ T6340] ? __pfx_filemap_fault+0x10/0x10 [ 95.277331][ T6340] ? __pfx_filemap_map_pages+0x10/0x10 [ 95.282781][ T6340] ? lock_acquire+0x115/0x350 [ 95.287466][ T6340] __do_fault+0x138/0x2a0 [ 95.291809][ T6340] ? do_pte_missing+0x140c/0x34b0 [ 95.296922][ T6340] do_pte_missing+0x2215/0x34b0 [ 95.301778][ T6340] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 95.308110][ T6340] ? mtree_range_walk+0x707/0x8b0 [ 95.313133][ T6340] handle_mm_fault+0x1a53/0x3750 [ 95.318173][ T6340] ? mt_find+0x186/0x630 [ 95.322516][ T6340] ? handle_mm_fault+0xf1/0x3750 [ 95.327458][ T6340] ? __pfx_handle_mm_fault+0x10/0x10 [ 95.332765][ T6340] __get_user_pages+0x1670/0x2750 [ 95.337798][ T6340] populate_vma_page_range+0x2be/0x3c0 [ 95.343255][ T6340] ? __pfx_populate_vma_page_range+0x10/0x10 [ 95.349228][ T6340] ? down_read+0x2b9/0x320 [ 95.353640][ T6340] __mm_populate+0x25f/0x390 [ 95.358253][ T6340] ? __pfx___mm_populate+0x10/0x10 [ 95.363358][ T6340] vm_mmap_pgoff+0x353/0x4e0 [ 95.367941][ T6340] ? lock_acquire+0x115/0x350 [ 95.372615][ T6340] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 95.377717][ T6340] ? __fget_files+0x2a/0x420 [ 95.382311][ T6340] ? __fget_files+0x3a2/0x420 [ 95.386980][ T6340] ? __fget_files+0x2a/0x420 [ 95.391655][ T6340] ksys_mmap_pgoff+0x4dc/0x760 [ 95.396415][ T6340] do_syscall_64+0x166/0x520 [ 95.401001][ T6340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.407060][ T6340] ? clear_bhb_loop+0x70/0xc0 [ 95.411771][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.417667][ T6340] RIP: 0033:0x7f754319e159 [ 95.422078][ T6340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.441673][ T6340] RSP: 002b:00007f7544071028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 95.450085][ T6340] RAX: ffffffffffffffda RBX: 00007f7543426090 RCX: 00007f754319e159 [ 95.458053][ T6340] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 95.466017][ T6340] RBP: 00007f7543235024 R08: 0000000000000005 R09: 000000002c93a000 [ 95.473982][ T6340] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 95.482035][ T6340] R13: 00007f7543426128 R14: 00007f7543426090 R15: 00007ffe03ee08c8 [ 95.490013][ T6340] [ 95.493025][ T6340] Modules linked in: [ 95.498314][ T6340] ---[ end trace 0000000000000000 ]--- [ 95.535294][ T6340] RIP: 0010:__filemap_add_folio+0x128c/0x1400 [ 95.535330][ T6340] Code: ff 4c 89 f7 48 c7 c6 20 0f 19 8c e8 fe 5e 1f ff 90 0f 0b e8 d6 3e bf ff 48 8b 7c 24 20 48 c7 c6 e0 03 19 8c e8 e5 5e 1f ff 90 <0f> 0b e8 bd 3e bf ff 4c 89 f7 48 c7 c6 20 0f 19 8c e8 ce 5e 1f ff [ 95.535348][ T6340] RSP: 0018:ffffc900037171a0 EFLAGS: 00010246 [ 95.535366][ T6340] RAX: f8af554f14664000 RBX: 0000000000000000 RCX: 0000000000000046 [ 95.535380][ T6340] RDX: ffffc9000e5c1000 RSI: ffffffff8e82b24f RDI: ffff88802030be80 [ 95.535396][ T6340] RBP: ffffc90003717338 R08: ffff8880b8424713 R09: 1ffff110170848e2 [ 95.535409][ T6340] R10: dffffc0000000000 R11: ffffed10170848e3 R12: dffffc0000000000 [ 95.535423][ T6340] R13: ffff888023d61fc0 R14: 0000000000000002 R15: ffff888023d620d8 [ 95.535437][ T6340] FS: 00007f75440716c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 95.535453][ T6340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.535465][ T6340] CR2: 00007ffd901f9010 CR3: 00000000799a8000 CR4: 00000000003526f0 [ 95.535493][ T6340] Kernel panic - not syncing: Fatal exception [ 95.636895][ T6340] Kernel Offset: disabled [ 95.641235][ T6340] Rebooting in 86400 seconds..