last executing test programs: 7.167203346s ago: executing program 3 (id=2138): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffa, [0x92e, 0x746ffec1]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 4.908558731s ago: executing program 1 (id=2160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r3 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x100000002, 0x0, 0x1}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 4.480472911s ago: executing program 3 (id=2161): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554c"], 0xc8) dup3(r3, r2, 0x0) 4.438176002s ago: executing program 1 (id=2162): setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x2, 0x4) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) 4.1352973s ago: executing program 1 (id=2165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 3.914463535s ago: executing program 1 (id=2167): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close(r0) 3.793934538s ago: executing program 0 (id=2168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB="28000000040601080000000000000000010000000500010007000040410000"], 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) 3.667320111s ago: executing program 0 (id=2169): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002940)={'wpan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)={0x190, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x2400c804) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4041004) r12 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r12, 0xc0485661, &(0x7f0000000900)={0x0, 0x1, @raw_data=[0x2000000, 0x0, 0x7, 0x2, 0xa38e5623, 0xf5a, 0x2, 0x1, 0xc90, 0x953, 0xffff, 0x81, 0xcb, 0x46, 0x7, 0x77]}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r17, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r16, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 2.564030258s ago: executing program 2 (id=2172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x8) sendmmsg$unix(r1, 0x0, 0x0, 0x4002104) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RLINK(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x200000000000005, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="776cc98b5ea757a85a633793379b763a26d52aa7bd351820", 0x0, 0x18) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) syz_open_dev$ublk_bdev(&(0x7f0000000000), 0x0, 0x26a900) 2.399977992s ago: executing program 0 (id=2173): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101005, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x2065, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101006, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) 2.179268567s ago: executing program 1 (id=2174): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getrlimit(0x3, &(0x7f0000000180)) r0 = getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6(0xa, 0x2, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r4) 2.139589298s ago: executing program 2 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="38002d800a00000002020202020200000a"], 0x54}}, 0x0) 2.06820524s ago: executing program 0 (id=2176): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000300)="0303ec58000000004500001c00000000402f0000ac14140b7f0000014e214e24", 0xffeb, 0x0, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) dup(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r2, 0x2}}, 0x18) 1.879290854s ago: executing program 3 (id=2177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x78}}, 0x0) 1.879141384s ago: executing program 2 (id=2178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000700), 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0', 0x1) 1.735993058s ago: executing program 0 (id=2179): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004041}, 0x10) 1.705439139s ago: executing program 2 (id=2180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x9d, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0}) 1.579342982s ago: executing program 3 (id=2181): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x282e, &(0x7f0000000240)={0x0, 0x2457, 0x100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) 1.473856634s ago: executing program 2 (id=2182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./export_dir\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='* ./export_dir 32\n', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='* ./export_dir 32\n', 0x12) 1.204711821s ago: executing program 2 (id=2183): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730909000000fd1bd24b7ffc8c1ece85108c1331c774d299a25a70745096cb268cbc6070d680e1be250700f758d02ae11ef24171ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703499d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fadc02f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d1b8186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f95555a5ca6fdf75b86ea6171b046b856168f403b5253a5c0500430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fba0900000000000000f95d242d6d05be2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fc5b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176d31b2db18dba54991a9553cedb7f585786388d400600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a320000000014000000110001000000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0xd) 546.321497ms ago: executing program 0 (id=2184): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd167, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0x0) 391.28484ms ago: executing program 3 (id=2185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(0x0, 0x0, 0x80000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) 18.970159ms ago: executing program 1 (id=2186): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a081", 0x4d}], 0x1}], 0x1, 0x0) listen(r0, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 3 (id=2187): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000300)="0303ec58000000004500001c00000000402f0000ac14140b7f0000014e214e24", 0xffeb, 0x0, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) dup(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r2, 0x2}}, 0x18) kernel console output (not intermixed with test programs): city change from 0 to 256 [ 107.441912][ T6096] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 112.780266][ T6134] PM: suspend entry (deep) [ 113.082602][ T6136] kvm: pic: single mode not supported [ 113.082771][ T6136] kvm: pic: level sensitive irq not supported [ 113.108319][ T6136] kvm: pic: single mode not supported [ 113.114887][ T6136] kvm: pic: level sensitive irq not supported [ 113.158514][ T6136] kvm: pic: level sensitive irq not supported [ 113.190273][ T6136] kvm: pic: level sensitive irq not supported [ 113.222807][ T6136] kvm: pic: non byte read [ 113.244069][ T6136] kvm: pic: non byte read [ 113.272073][ T6136] kvm: pic: non byte read [ 113.287226][ T6134] Filesystems sync: 0.397 seconds [ 113.308902][ T6136] kvm: pic: non byte read [ 113.330006][ T6136] kvm: pic: non byte read [ 113.334801][ T6136] kvm: pic: non byte read [ 113.619507][ T6134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.626445][ T6134] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.868933][ T6134] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.904313][ T6134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.922236][ T6134] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.955100][ T6134] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.986650][ T6134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.005857][ T6134] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.034144][ T6134] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.056641][ T6134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.094379][ T6134] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.121926][ T6134] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.203353][ T6134] Freezing user space processes [ 114.429443][ T6134] Freezing user space processes completed (elapsed 0.198 seconds) [ 114.438284][ T6134] OOM killer disabled. [ 114.442769][ T6134] Freezing remaining freezable tasks [ 114.453084][ T6134] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 114.464089][ T6134] printk: Suspending console(s) (use no_console_suspend to debug) [ 114.592130][ T6134] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 114.634859][ T6134] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 114.673566][ T6134] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 114.711469][ T6134] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 114.752378][ T6134] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 114.794096][ T6134] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 114.831253][ T6134] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 114.881662][ T6134] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 114.921148][ T6134] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 114.962193][ T6134] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 115.001438][ T6134] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 115.041147][ T6134] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 115.082052][ T6134] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 115.124377][ T6134] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 115.161005][ T6134] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 115.225720][ T2925] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 115.449568][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.645928][ T6134] ACPI: PM: Preparing to enter system sleep state S3 [ 115.646888][ T6134] ACPI: PM: Saving platform NVS memory [ 115.648504][ T6134] Disabling non-boot CPUs ... [ 115.675792][ T6134] smpboot: CPU 1 is now offline [ 115.700149][ T6134] ACPI: PM: Low-level resume complete [ 115.700226][ T6134] ACPI: PM: Restoring platform NVS memory [ 115.731135][ T6134] Enabling non-boot CPUs ... [ 115.732178][ T6134] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 115.746050][ T6134] CPU1 is up [ 115.746848][ T6134] ACPI: PM: Waking up from system sleep state S3 [ 115.950733][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.030790][ T5778] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.094791][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.189855][ T6134] OOM killer enabled. [ 116.191126][ T6134] Restarting tasks ... done. [ 116.207213][ T6134] random: crng reseeded on system resumption [ 116.210084][ T6134] PM: suspend exit [ 118.669769][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.671285][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.673790][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.677661][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.806936][ T5083] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.808190][ T5083] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.809486][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.810756][ T5083] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.041990][ T6264] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 126.363393][ T5778] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 126.702415][ T6296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.118'. [ 128.260293][ T6302] Bluetooth: MGMT ver 1.22 [ 128.394560][ T6304] binder: 6299:6304 ioctl 4018620d 0 returned -22 [ 128.400579][ T6304] binder: 6299:6304 ioctl c0306201 0 returned -14 [ 128.412445][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 128.722488][ T6304] syz.3.122 (6304) used greatest stack depth: 20872 bytes left [ 128.924391][ T6311] binder: 6308:6311 ioctl 4018620d 0 returned -22 [ 128.939338][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'. [ 131.888390][ T6327] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 131.890916][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.892550][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.950246][ T6342] loop0: detected capacity change from 0 to 40427 [ 135.974232][ T6342] ======================================================= [ 135.974232][ T6342] WARNING: The mand mount option has been deprecated and [ 135.974232][ T6342] and is ignored by this kernel. Remove the mand [ 135.974232][ T6342] option from the mount to silence this warning. [ 135.974232][ T6342] ======================================================= [ 136.112108][ T6342] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.283069][ T6342] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.583780][ T6358] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 136.883257][ T6358] syz.0.129: attempt to access beyond end of device [ 136.883257][ T6358] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 137.327969][ T5772] syz-executor: attempt to access beyond end of device [ 137.327969][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 137.356577][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 137.366323][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 140.626049][ T6385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.139'. [ 140.638570][ T6392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.140'. [ 140.918137][ T6387] nvme_fabrics: missing parameter 'transport=%s' [ 140.929663][ T6387] nvme_fabrics: missing parameter 'nqn=%s' [ 145.711023][ T5778] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 146.349005][ T6430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.151'. [ 147.122510][ T6432] nvme_fabrics: missing parameter 'transport=%s' [ 147.136111][ T6432] nvme_fabrics: missing parameter 'nqn=%s' [ 153.223050][ T6477] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 155.504656][ C0] sched: RT throttling activated [ 157.056848][ T6507] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 160.183765][ T6513] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 162.084589][ T6521] binder: 6516:6521 ioctl 4018620d 0 returned -22 [ 162.114003][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 162.695796][ T6525] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 163.496805][ T6527] netlink: 'syz.3.179': attribute type 2 has an invalid length. [ 166.190676][ T6548] binder: 6544:6548 ioctl 4018620d 0 returned -22 [ 166.211660][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 168.215699][ T6568] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 168.889876][ T6576] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 172.375058][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.193'. [ 185.114373][ T5778] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 194.481470][ T5836] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 194.612848][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.619502][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.694767][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 194.738534][ T6771] syz.3.249 uses obsolete (PF_INET,SOCK_PACKET) [ 194.765418][ T5836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.795357][ T5836] usb 4-1: no configurations [ 194.801441][ T5836] usb 4-1: can't read configurations, error -22 [ 198.732208][ T6822] loop3: detected capacity change from 0 to 40427 [ 198.845362][ T6822] F2FS-fs (loop3): Found nat_bits in checkpoint [ 199.100036][ T6822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 199.385324][ T6848] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 199.566534][ T6848] syz.3.264: attempt to access beyond end of device [ 199.566534][ T6848] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 200.046176][ T5769] syz-executor: attempt to access beyond end of device [ 200.046176][ T5769] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 200.099754][ T5769] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 200.184281][ T5769] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 204.354840][ T5778] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.767312][ T6930] loop1: detected capacity change from 0 to 40427 [ 206.809853][ T6930] F2FS-fs (loop1): Found nat_bits in checkpoint [ 206.877434][ T6930] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 207.043377][ T6942] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 207.199637][ T6942] syz.1.292: attempt to access beyond end of device [ 207.199637][ T6942] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 207.497885][ T5778] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 207.541055][ T5771] syz-executor: attempt to access beyond end of device [ 207.541055][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 207.639106][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 207.660403][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 209.788549][ T6970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.296'. [ 211.048651][ T5836] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 211.335393][ T5836] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 211.485823][ T6975] ceph: No mds server is up or the cluster is laggy [ 213.185088][ T5778] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 217.150601][ T5778] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 219.977474][ T5779] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 220.372377][ T5779] usb 2-1: device descriptor read/64, error -71 [ 220.644712][ T5779] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 220.804913][ T5779] usb 2-1: device descriptor read/64, error -71 [ 220.925135][ T5779] usb usb2-port1: attempt power cycle [ 221.344924][ T5779] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 221.375673][ T5779] usb 2-1: device descriptor read/8, error -71 [ 221.644875][ T5779] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 221.685580][ T5779] usb 2-1: device descriptor read/8, error -71 [ 221.819116][ T5779] usb usb2-port1: unable to enumerate USB device [ 226.578951][ T7091] loop2: detected capacity change from 0 to 40427 [ 226.630673][ T7091] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.754463][ T7091] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.999578][ T7108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.343'. [ 227.788110][ T7109] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 227.967971][ T7109] syz.2.340: attempt to access beyond end of device [ 227.967971][ T7109] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 228.568639][ T5770] syz-executor: attempt to access beyond end of device [ 228.568639][ T5770] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 228.585207][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 228.592272][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 232.986921][ T7136] bonding: ùø&û€ô˜ÆE€)—½ is being created... [ 242.129255][ T7177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.359'. [ 244.146278][ T7193] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 244.295287][ T7193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.387994][ T7195] bond1: (slave veth0_to_bond): making interface the new active one [ 246.515745][ T7195] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 246.640683][ T7200] bond1: entered promiscuous mode [ 246.664869][ T7200] veth0_to_bond: entered promiscuous mode [ 246.685138][ T7200] bond1: entered allmulticast mode [ 246.691529][ T7200] veth0_to_bond: entered allmulticast mode [ 246.963937][ T7212] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 253.105923][ T7241] FAULT_INJECTION: forcing a failure. [ 253.105923][ T7241] name failslab, interval 1, probability 0, space 0, times 0 [ 253.151494][ T7241] CPU: 0 PID: 7241 Comm: syz.0.386 Not tainted syzkaller #0 [ 253.158880][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.169046][ T7241] Call Trace: [ 253.172369][ T7241] [ 253.175352][ T7241] dump_stack_lvl+0x18c/0x250 [ 253.180143][ T7241] ? show_regs_print_info+0x20/0x20 [ 253.185408][ T7241] ? load_image+0x420/0x420 [ 253.189960][ T7241] ? __lock_acquire+0x7d80/0x7d80 [ 253.195033][ T7241] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 253.201072][ T7241] ? __lock_acquire+0x7d80/0x7d80 [ 253.206160][ T7241] should_fail_ex+0x394/0x4c0 [ 253.210917][ T7241] should_failslab+0x9/0x20 [ 253.215529][ T7241] slab_pre_alloc_hook+0x59/0x300 [ 253.220605][ T7241] ? copy_net_ns+0x10f/0x5d0 [ 253.225230][ T7241] ? copy_net_ns+0x10f/0x5d0 [ 253.229854][ T7241] __kmem_cache_alloc_node+0x53/0x250 [ 253.235271][ T7241] ? copy_net_ns+0x10f/0x5d0 [ 253.239893][ T7241] __kmalloc+0xa7/0x240 [ 253.244095][ T7241] copy_net_ns+0x10f/0x5d0 [ 253.248571][ T7241] create_new_namespaces+0x3ce/0x700 [ 253.253905][ T7241] unshare_nsproxy_namespaces+0x11a/0x160 [ 253.259668][ T7241] ksys_unshare+0x4fa/0x8f0 [ 253.264225][ T7241] ? sighand_ctor+0x50/0x50 [ 253.268758][ T7241] ? lock_chain_count+0x20/0x20 [ 253.273648][ T7241] ? syscall_enter_from_user_mode+0x25/0x80 [ 253.279587][ T7241] __x64_sys_unshare+0x38/0x40 [ 253.284387][ T7241] do_syscall_64+0x55/0xb0 [ 253.288833][ T7241] ? clear_bhb_loop+0x40/0x90 [ 253.293537][ T7241] ? clear_bhb_loop+0x40/0x90 [ 253.298248][ T7241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.304169][ T7241] RIP: 0033:0x7f29b659e159 [ 253.308638][ T7241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.328278][ T7241] RSP: 002b:00007f29b73c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 253.336728][ T7241] RAX: ffffffffffffffda RBX: 00007f29b6825fa0 RCX: 00007f29b659e159 [ 253.344754][ T7241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 253.352764][ T7241] RBP: 00007f29b6635024 R08: 0000000000000000 R09: 0000000000000000 [ 253.360769][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.368772][ T7241] R13: 00007f29b6826038 R14: 00007f29b6825fa0 R15: 00007ffe7d655098 [ 253.376799][ T7241] [ 253.957984][ T7249] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 254.011827][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 256.049182][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.056689][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.685514][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 257.882415][ T7264] ipvlan2: entered allmulticast mode [ 257.950131][ T7264] syz_tun: entered allmulticast mode [ 259.371494][ T7260] loop0: detected capacity change from 0 to 40427 [ 259.480808][ T7260] F2FS-fs (loop0): Found nat_bits in checkpoint [ 259.812864][ T7260] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.043730][ T7287] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 260.227833][ T7287] syz.0.384: attempt to access beyond end of device [ 260.227833][ T7287] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 260.680551][ T5772] syz-executor: attempt to access beyond end of device [ 260.680551][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 260.749954][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 260.760149][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 264.454974][ T7310] binder: 7306:7310 ioctl 4018620d 0 returned -22 [ 264.477211][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 269.660046][ T7361] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 273.036146][ T7399] FAULT_INJECTION: forcing a failure. [ 273.036146][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 273.093075][ T7399] CPU: 1 PID: 7399 Comm: syz.1.416 Not tainted syzkaller #0 [ 273.100470][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.110591][ T7399] Call Trace: [ 273.113918][ T7399] [ 273.116898][ T7399] dump_stack_lvl+0x18c/0x250 [ 273.121653][ T7399] ? show_regs_print_info+0x20/0x20 [ 273.126972][ T7399] ? load_image+0x420/0x420 [ 273.131538][ T7399] ? __lock_acquire+0x7d80/0x7d80 [ 273.136640][ T7399] ? __asan_memset+0x22/0x40 [ 273.141661][ T7399] should_fail_ex+0x394/0x4c0 [ 273.146432][ T7399] should_failslab+0x9/0x20 [ 273.151099][ T7399] slab_pre_alloc_hook+0x59/0x300 [ 273.156214][ T7399] kmem_cache_alloc+0x5a/0x2c0 [ 273.161059][ T7399] ? security_inode_alloc+0x34/0x110 [ 273.166441][ T7399] security_inode_alloc+0x34/0x110 [ 273.171719][ T7399] inode_init_always+0x914/0xc90 [ 273.176738][ T7399] new_inode_pseudo+0x95/0x1d0 [ 273.181581][ T7399] new_inode+0x22/0x1d0 [ 273.185794][ T7399] ? resv_map_alloc+0x1c4/0x2c0 [ 273.190696][ T7399] hugetlbfs_get_inode+0x78/0x500 [ 273.195765][ T7399] hugetlb_file_setup+0x27f/0x610 [ 273.200836][ T7399] newseg+0x416/0xb10 [ 273.204870][ T7399] ? ksys_shmget+0x140/0x140 [ 273.209558][ T7399] ? file_end_write+0x159/0x250 [ 273.214482][ T7399] ipcget+0x1d1/0xe10 [ 273.218496][ T7399] ? do_futex+0x2ff/0x3e0 [ 273.222851][ T7399] ? __ia32_sys_get_robust_list+0x110/0x110 [ 273.228773][ T7399] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 273.234447][ T7399] __x64_sys_shmget+0x141/0x180 [ 273.239325][ T7399] ? lock_chain_count+0x20/0x20 [ 273.244220][ T7399] ? shm_more_checks+0x80/0x80 [ 273.249015][ T7399] ? lockdep_hardirqs_on+0x98/0x150 [ 273.254241][ T7399] do_syscall_64+0x55/0xb0 [ 273.258771][ T7399] ? clear_bhb_loop+0x40/0x90 [ 273.263469][ T7399] ? clear_bhb_loop+0x40/0x90 [ 273.268169][ T7399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.274258][ T7399] RIP: 0033:0x7fd066f9e159 [ 273.278693][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.299018][ T7399] RSP: 002b:00007fd067ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 273.307980][ T7399] RAX: ffffffffffffffda RBX: 00007fd067225fa0 RCX: 00007fd066f9e159 [ 273.315994][ T7399] RDX: 0000000054003f00 RSI: 0000000000800000 RDI: 0000000000000000 [ 273.323983][ T7399] RBP: 00007fd067035024 R08: 0000000000000000 R09: 0000000000000000 [ 273.331977][ T7399] R10: 0000200000800000 R11: 0000000000000246 R12: 0000000000000000 [ 273.340023][ T7399] R13: 00007fd067226038 R14: 00007fd067225fa0 R15: 00007ffd63cf0c08 [ 273.348031][ T7399] [ 274.643662][ T7404] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 276.291594][ T7415] netlink: 36 bytes leftover after parsing attributes in process `syz.1.419'. [ 281.446412][ T7447] binder: 7442:7447 ioctl 4018620d 0 returned -22 [ 281.467998][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 283.059376][ T7451] loop1: detected capacity change from 0 to 32768 [ 283.148391][ T7451] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.430 (7451) [ 283.209003][ T7451] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 283.220047][ T7451] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 283.230055][ T7451] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 283.240665][ T7451] BTRFS info (device loop1): use zstd compression, level 3 [ 283.250555][ T7451] BTRFS info (device loop1): using free space tree [ 283.406128][ T7451] BTRFS info (device loop1): enabling ssd optimizations [ 283.424701][ T7451] BTRFS info (device loop1): auto enabling async discard [ 284.013368][ T5771] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 287.507381][ T7517] netlink: 'syz.2.444': attribute type 2 has an invalid length. [ 289.069388][ T7514] loop1: detected capacity change from 0 to 40427 [ 289.139653][ T7534] binder: 7526:7534 ioctl 4018620d 0 returned -22 [ 289.164440][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'. [ 289.262220][ T7514] F2FS-fs (loop1): Found nat_bits in checkpoint [ 290.064879][ T7514] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 290.255918][ T7543] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 294.082915][ T7555] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 298.222560][ T7587] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 301.124940][ T7608] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 302.133899][ T7608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.577124][ T7624] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 304.801302][ T7628] binder: 7626:7628 ioctl 4018620d 0 returned -22 [ 304.819872][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 305.758359][ T7630] PM: suspend entry (deep) [ 305.918883][ T7630] Filesystems sync: 0.155 seconds [ 306.751455][ T7630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 306.877874][ T7630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.067499][ T7630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.119266][ T7630] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.179564][ T7630] Freezing user space processes [ 307.192023][ T7630] Freezing user space processes completed (elapsed 0.007 seconds) [ 307.200760][ T7630] OOM killer disabled. [ 307.204909][ T7630] Freezing remaining freezable tasks [ 307.214081][ T7630] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 307.222747][ T7630] printk: Suspending console(s) (use no_console_suspend to debug) [ 307.305869][ T7630] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 307.346684][ T7630] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 307.386881][ T7630] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 307.425884][ T7630] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 307.465929][ T7630] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 307.506010][ T7630] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 307.545847][ T7630] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 307.587647][ T7630] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 307.626330][ T7630] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 307.666025][ T7630] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 307.707118][ T7630] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 307.746253][ T7630] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 307.785837][ T7630] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 307.825779][ T7630] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 307.866074][ T7630] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 307.935961][ T6234] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 308.045551][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 308.285911][ T7630] ACPI: PM: Preparing to enter system sleep state S3 [ 308.286494][ T7630] ACPI: PM: Saving platform NVS memory [ 308.286742][ T7630] Disabling non-boot CPUs ... [ 308.298577][ T7630] smpboot: CPU 1 is now offline [ 308.326309][ T7630] ACPI: PM: Low-level resume complete [ 308.326377][ T7630] ACPI: PM: Restoring platform NVS memory [ 308.357537][ T7630] Enabling non-boot CPUs ... [ 308.358969][ T7630] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 308.369471][ T7630] CPU1 is up [ 308.369732][ T7630] ACPI: PM: Waking up from system sleep state S3 [ 308.800771][ T7630] OOM killer enabled. [ 308.801613][ T7630] Restarting tasks ... done. [ 308.839571][ T7630] random: crng reseeded on system resumption [ 308.841159][ T7630] PM: suspend exit [ 308.929079][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 309.112996][ T5778] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.194297][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.347581][ T7697] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 310.473451][ T7706] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 311.871337][ T7706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.905509][ T7710] fuse: Bad value for 'fd' [ 312.955698][ T7721] binder: 7717:7721 ioctl 4018620d 0 returned -22 [ 312.969757][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 314.881081][ T7734] fuse: Bad value for 'fd' [ 315.691085][ T7738] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 316.070648][ T7745] netlink: 'syz.3.494': attribute type 2 has an invalid length. [ 316.723393][ T7754] netlink: 'syz.1.495': attribute type 2 has an invalid length. [ 316.855769][ T7759] fuse: Bad value for 'fd' [ 317.240589][ T7766] netlink: 'syz.0.497': attribute type 2 has an invalid length. [ 317.516943][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.518947][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.344176][ T7775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.498'. [ 318.636570][ T7778] netlink: 36 bytes leftover after parsing attributes in process `syz.2.499'. [ 319.583003][ T7790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.503'. [ 320.708505][ T7792] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 324.239081][ T7810] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 325.002343][ T7809] binder: 7808:7809 ioctl 4018620d 0 returned -22 [ 325.012080][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 325.941312][ T7829] loop0: detected capacity change from 0 to 128 [ 326.960574][ T7813] loop1: detected capacity change from 0 to 40427 [ 327.006951][ T7813] F2FS-fs (loop1): Found nat_bits in checkpoint [ 328.038525][ T7813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 328.638379][ T7857] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 331.711552][ T7872] binder: 7871:7872 ioctl 4018620d 0 returned -22 [ 331.874514][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 332.974778][ T7886] binder: 7884:7886 ioctl 4018620d 0 returned -22 [ 332.996157][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 333.956959][ T7875] loop2: detected capacity change from 0 to 32768 [ 333.973913][ T7875] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.522 (7875) [ 334.019813][ T7875] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 334.031610][ T7875] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 334.127152][ T7875] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 334.157613][ T7875] BTRFS info (device loop2): use zstd compression, level 3 [ 334.217908][ T7875] BTRFS info (device loop2): using free space tree [ 334.451865][ T7875] BTRFS info (device loop2): enabling ssd optimizations [ 334.472741][ T7875] BTRFS info (device loop2): auto enabling async discard [ 334.690807][ T5770] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 336.392168][ T7923] loop3: detected capacity change from 0 to 128 [ 339.903437][ T7935] loop3: detected capacity change from 0 to 128 [ 342.780340][ T7943] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 345.285738][ T7949] binder: 7947:7949 ioctl 4018620d 0 returned -22 [ 345.303925][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 351.931625][ T7977] loop2: detected capacity change from 0 to 128 [ 356.271221][ T7999] fuse: Bad value for 'fd' [ 356.871120][ T8004] loop2: detected capacity change from 0 to 128 [ 358.032725][ T8014] loop3: detected capacity change from 0 to 128 [ 358.841644][ T8013] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 358.868478][ T8006] nvme_fabrics: missing parameter 'transport=%s' [ 358.908099][ T8006] nvme_fabrics: missing parameter 'nqn=%s' [ 363.501352][ T8034] loop1: detected capacity change from 0 to 256 [ 363.558134][ T8036] fuse: Bad value for 'fd' [ 364.065555][ T8041] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 364.188087][ T8043] nvme_fabrics: missing parameter 'transport=%s' [ 364.208407][ T8043] nvme_fabrics: missing parameter 'nqn=%s' [ 366.646476][ T8062] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 369.844618][ T8066] X25: received unknown 00 with LCI 000 [ 370.045515][ T8074] nvme_fabrics: missing parameter 'transport=%s' [ 370.052163][ T8074] nvme_fabrics: missing parameter 'nqn=%s' [ 370.519087][ T8089] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 373.248862][ T8101] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 378.180091][ T8140] nvme_fabrics: missing parameter 'transport=%s' [ 378.203772][ T8140] nvme_fabrics: missing parameter 'nqn=%s' [ 378.958686][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.974139][ T8163] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 378.998380][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.747480][ T8166] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 383.172640][ T8188] loop1: detected capacity change from 0 to 128 [ 383.586991][ T8196] nvme_fabrics: missing parameter 'transport=%s' [ 383.595670][ T8196] nvme_fabrics: missing parameter 'nqn=%s' [ 384.399381][ T8217] netlink: 'syz.0.610': attribute type 2 has an invalid length. [ 386.053743][ T8234] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 386.810788][ T8248] nvme_fabrics: missing parameter 'transport=%s' [ 386.843153][ T8248] nvme_fabrics: missing parameter 'nqn=%s' [ 387.026707][ T8253] loop0: detected capacity change from 0 to 128 [ 387.133191][ T8258] X25: received unknown 00 with LCI 000 [ 389.719452][ T8288] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 393.021973][ T8305] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 394.858372][ T8326] binder: 8324:8326 ioctl 4018620d 0 returned -22 [ 395.929934][ T8331] netlink: 'syz.2.636': attribute type 2 has an invalid length. [ 395.954211][ T8335] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 397.614521][ T8357] netlink: 'syz.1.643': attribute type 2 has an invalid length. [ 400.940516][ T8378] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 402.286866][ T8399] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 406.937526][ T8425] loop0: detected capacity change from 0 to 128 [ 418.020065][ T8497] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 421.565779][ T8528] netlink: 'syz.3.685': attribute type 2 has an invalid length. [ 422.583651][ T8542] nvme_fabrics: missing parameter 'nqn=%s' [ 423.499210][ T8551] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 428.141124][ T8586] nvme_fabrics: missing parameter 'nqn=%s' [ 431.275142][ T8631] nvme_fabrics: missing parameter 'nqn=%s' [ 431.339484][ T8636] netlink: 'syz.1.710': attribute type 2 has an invalid length. [ 431.489487][ T8641] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 433.853803][ T8664] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 434.199410][ T8679] loop3: detected capacity change from 0 to 128 [ 436.763606][ T8707] nvme_fabrics: missing parameter 'nqn=%s' [ 437.150582][ T8724] fuse: Bad value for 'group_id' [ 437.397024][ T8718] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 437.848539][ T8744] loop0: detected capacity change from 0 to 128 [ 439.751893][ T8764] nvme_fabrics: missing parameter 'nqn=%s' [ 440.397748][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.404313][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.680332][ T8782] fuse: Bad value for 'group_id' [ 445.674084][ T8795] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 446.265242][ T8815] nvme_fabrics: missing parameter 'nqn=%s' [ 446.794353][ T8828] binder: 8826:8828 ioctl 4018620d 0 returned -22 [ 447.808574][ T8834] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 454.267385][ T8869] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 457.515486][ T8886] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 464.570886][ T8920] loop1: detected capacity change from 0 to 128 [ 466.294108][ T8938] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 470.895141][ T8960] loop0: detected capacity change from 0 to 128 [ 481.998179][ T9026] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 490.794322][ T9070] netlink: 'syz.0.823': attribute type 2 has an invalid length. [ 500.925279][ T9138] loop1: detected capacity change from 0 to 128 [ 501.523783][ T9140] fuse: Unknown parameter 'grou00000000000000000000' [ 501.838901][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.845398][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.564861][ T7695] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 507.326286][ T7695] usb 3-1: Using ep0 maxpacket: 32 [ 507.445332][ T7695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.458072][ T7695] usb 3-1: no configurations [ 507.473507][ T7695] usb 3-1: can't read configurations, error -22 [ 507.618215][ T9192] loop0: detected capacity change from 0 to 128 [ 508.512453][ T9195] fuse: Unknown parameter 'grou00000000000000000000' [ 508.833663][ T9204] binder: 9196:9204 ioctl 4018620d 0 returned -22 [ 512.009552][ T9225] fuse: Bad value for 'user_id' [ 513.740760][ T9240] netlink: 'syz.1.862': attribute type 2 has an invalid length. [ 513.843802][ T9244] binder: 9238:9244 ioctl 4018620d 0 returned -22 [ 513.855623][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 514.964751][ T9249] fuse: Unknown parameter 'grou00000000000000000000' [ 517.444601][ T9279] fuse: Bad value for 'user_id' [ 522.797691][ T9310] fuse: Unknown parameter 'group_i00000000000000000000' [ 524.201623][ T9326] fuse: Bad value for 'user_id' [ 524.368146][ T9331] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 530.663062][ T9354] fuse: Unknown parameter 'group_i00000000000000000000' [ 532.922173][ T9378] fuse: Bad value for 'fd' [ 534.145591][ T9395] fuse: Unknown parameter 'group_i00000000000000000000' [ 536.988190][ T9409] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 538.874035][ T9421] fuse: Bad value for 'fd' [ 540.830845][ T9447] fuse: Unknown parameter 'group_id00000000000000000000' [ 543.865811][ T9464] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 546.432144][ T9479] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 550.726772][ T9509] fuse: Unknown parameter 'group_id00000000000000000000' [ 553.680656][ T9531] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 556.586170][ T9547] fuse: Unknown parameter 'group_id00000000000000000000' [ 556.991802][ T9552] netlink: 'syz.3.934': attribute type 2 has an invalid length. [ 563.043558][ T9585] fuse: Bad value for 'user_id' [ 563.361011][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.367459][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.691315][ T9599] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 565.833033][ T5815] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 567.188489][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 567.351280][ T5815] usb 2-1: unable to get BOS descriptor or descriptor too short [ 567.391548][ T5815] usb 2-1: no configurations [ 567.396817][ T5815] usb 2-1: can't read configurations, error -22 [ 567.444567][ T9623] fuse: Bad value for 'user_id' [ 569.092333][ T9638] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 571.377128][ T9642] loop0: detected capacity change from 0 to 128 [ 572.903810][ T9656] fuse: Bad value for 'user_id' [ 572.937998][ T9651] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 573.949646][ T9660] loop0: detected capacity change from 0 to 64 [ 577.935005][ T9692] fuse: Bad value for 'fd' [ 578.246563][ T9697] fuse: Bad value for 'fd' [ 583.692848][ T9745] loop2: detected capacity change from 0 to 128 [ 585.156390][ T9747] fuse: Bad value for 'fd' [ 589.853202][ T9792] loop3: detected capacity change from 0 to 128 [ 590.105260][ T9793] fuse: Bad value for 'fd' [ 590.761721][ T9799] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 594.396034][ T9819] loop2: detected capacity change from 0 to 64 [ 597.572946][ T9863] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 600.315772][ T9890] loop0: detected capacity change from 0 to 256 [ 601.999539][ T9907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1022'. [ 609.236172][ T9948] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 611.350122][ T6233] kworker/dying (6233) used greatest stack depth: 20232 bytes left [ 613.041680][ T9958] loop2: detected capacity change from 0 to 256 [ 618.192972][ T9989] loop3: detected capacity change from 0 to 256 [ 619.471716][ T9998] loop2: detected capacity change from 0 to 128 [ 624.727551][T10014] loop0: detected capacity change from 0 to 128 [ 624.740805][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.747399][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.210087][T10041] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 631.897860][T10045] loop3: detected capacity change from 0 to 128 [ 632.189704][T10051] loop2: detected capacity change from 0 to 128 [ 633.905272][T10062] loop0: detected capacity change from 0 to 256 [ 635.494483][T10070] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 638.842031][T10075] loop0: detected capacity change from 0 to 128 [ 640.032470][T10082] loop3: detected capacity change from 0 to 64 [ 643.901714][T10100] loop0: detected capacity change from 0 to 32768 [ 644.855110][T10117] loop2: detected capacity change from 0 to 128 [ 645.872935][T10109] loop3: detected capacity change from 0 to 32768 [ 650.894369][T10153] loop2: detected capacity change from 0 to 64 [ 651.915709][T10158] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 655.222730][T10176] binder: 10173:10176 ioctl 4018620d 0 returned -22 [ 655.240225][T10176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1100'. [ 656.401499][T10184] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 659.547935][T10199] binder: 10197:10199 ioctl 4018620d 0 returned -22 [ 659.568500][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1104'. [ 661.570139][T10223] loop2: detected capacity change from 0 to 128 [ 664.276843][T10239] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 667.261979][T10249] fuse: Unknown parameter 'user_i00000000000000000000' [ 667.741735][T10259] loop1: detected capacity change from 0 to 64 [ 671.557902][T10279] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 672.012116][T10283] loop1: detected capacity change from 0 to 2048 [ 672.076071][T10283] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 672.257504][T10286] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 674.417023][ T28] audit: type=1800 audit(1788331916.261:3): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1126" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 674.561947][ T28] audit: type=1800 audit(1788331916.401:4): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1126" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 675.253911][T10294] fuse: Unknown parameter 'user_i00000000000000000000' [ 675.396217][T10292] loop0: detected capacity change from 0 to 32768 [ 678.044222][T10315] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 680.505666][ T173] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 680.665460][ T173] usb 3-1: device descriptor read/64, error -71 [ 680.943296][ T173] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 681.113786][ T173] usb 3-1: device descriptor read/64, error -71 [ 681.271920][ T173] usb usb3-port1: attempt power cycle [ 681.519869][T10330] loop2: detected capacity change from 0 to 256 [ 684.164246][T10339] fuse: Unknown parameter 'user_id00000000000000000000' [ 684.276247][T10342] loop0: detected capacity change from 0 to 128 [ 686.157384][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.164307][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.079723][T10379] fuse: Unknown parameter 'user_id00000000000000000000' [ 691.128061][T10380] loop3: detected capacity change from 0 to 128 [ 691.201931][T10376] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 693.689887][T10413] loop0: detected capacity change from 0 to 128 [ 698.069229][T10416] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 698.260036][T10421] fuse: Bad value for 'fd' [ 701.468895][T10453] fuse: Bad value for 'fd' [ 701.719304][T10443] loop0: detected capacity change from 0 to 32768 [ 702.427079][T10458] loop3: detected capacity change from 0 to 256 [ 705.302954][T10465] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 705.916059][T10468] loop0: detected capacity change from 0 to 2048 [ 707.263431][T10468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.867113][ T28] audit: type=1800 audit(1788331949.671:5): pid=10468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1180" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 707.936720][ T28] audit: type=1800 audit(1788331949.731:6): pid=10468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1180" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 708.337670][T10481] fuse: Unknown parameter '0x0000000000000003' [ 711.002185][T10515] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 711.526708][T10490] loop0: detected capacity change from 0 to 32768 [ 714.951470][T10529] fuse: Unknown parameter '0x0000000000000003' [ 715.259305][T10534] netlink: 'syz.3.1197': attribute type 2 has an invalid length. [ 716.755202][T10563] loop1: detected capacity change from 0 to 256 [ 718.025414][T10575] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 720.635574][T10577] fuse: Unknown parameter '0x0000000000000003' [ 720.912888][T10580] X25: received unknown 00 with LCI 000 [ 723.446429][T10598] loop1: detected capacity change from 0 to 32768 [ 725.915274][T10626] loop2: detected capacity change from 0 to 128 [ 726.385886][T10634] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 729.109450][T10645] loop0: detected capacity change from 0 to 256 [ 732.880295][T10665] netlink: 'syz.2.1229': attribute type 2 has an invalid length. [ 735.146260][T10680] netlink: 'syz.3.1233': attribute type 2 has an invalid length. [ 736.414380][T10687] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 740.547622][T10700] loop0: detected capacity change from 0 to 256 [ 742.610807][T10711] binder: 10710:10711 ioctl 4018620d 0 returned -22 [ 742.624886][T10711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1243'. [ 742.634316][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 744.862411][T10729] binder: 10727:10729 ioctl 4018620d 0 returned -22 [ 744.883383][T10729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 744.892499][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 747.603196][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.609585][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.153450][T10744] netlink: 'syz.0.1250': attribute type 2 has an invalid length. [ 749.518278][T10751] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 752.523437][T10756] loop1: detected capacity change from 0 to 128 [ 752.897118][T10759] loop2: detected capacity change from 0 to 128 [ 756.379746][T10777] loop3: detected capacity change from 0 to 256 [ 759.504004][T10798] loop1: detected capacity change from 0 to 128 [ 761.149162][T10809] binder: 10806:10809 ioctl 4018620d 0 returned -22 [ 761.171644][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1272'. [ 766.097060][T10829] loop2: detected capacity change from 0 to 256 [ 766.246310][T10832] loop1: detected capacity change from 0 to 128 [ 768.330262][T10836] loop2: detected capacity change from 0 to 256 [ 770.828372][T10842] loop0: detected capacity change from 0 to 128 [ 772.303738][T10854] netlink: 'syz.2.1285': attribute type 2 has an invalid length. [ 772.368797][T10858] binder: 10856:10858 ioctl 4018620d 0 returned -22 [ 772.390929][T10858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1286'. [ 773.298002][T10861] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 775.704101][T10879] binder: 10876:10879 ioctl 4018620d 0 returned -22 [ 775.722674][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 777.792175][T10894] loop3: detected capacity change from 0 to 128 [ 778.161792][T10881] loop2: detected capacity change from 0 to 32768 [ 780.533482][T10897] loop3: detected capacity change from 0 to 32768 [ 781.713904][T10911] loop2: detected capacity change from 0 to 40427 [ 781.776135][T10911] F2FS-fs (loop2): Found nat_bits in checkpoint [ 781.917875][T10911] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 782.184395][T10919] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 782.954583][ T5770] syz-executor: attempt to access beyond end of device [ 782.954583][ T5770] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 782.980613][T10921] fuse: Unknown parameter 'fd0x0000000000000003' [ 783.020421][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 783.040982][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 783.255886][T10926] loop0: detected capacity change from 0 to 128 [ 783.544375][T10930] loop3: detected capacity change from 0 to 256 [ 784.624522][T10939] binder: 10935:10939 ioctl 4018620d 0 returned -22 [ 784.643231][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1308'. [ 785.549221][T10941] loop0: detected capacity change from 0 to 2048 [ 785.602799][T10941] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 785.689080][T10944] binder: 10942:10944 ioctl 4018620d 0 returned -22 [ 785.709475][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 786.105053][ T28] audit: type=1800 audit(1788332027.951:7): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1310" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 786.665765][T10941] syz.0.1310: attempt to access beyond end of device [ 786.665765][T10941] loop0: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 786.680212][T10941] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 786.689224][T10941] syz.0.1310: attempt to access beyond end of device [ 786.689224][T10941] loop0: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 786.702921][T10941] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 786.711642][T10941] syz.0.1310: attempt to access beyond end of device [ 786.711642][T10941] loop0: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 786.725825][T10941] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 786.734573][T10941] syz.0.1310: attempt to access beyond end of device [ 786.734573][T10941] loop0: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 786.748260][T10941] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 786.757043][T10941] syz.0.1310: attempt to access beyond end of device [ 786.757043][T10941] loop0: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 786.770852][T10941] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 786.779615][T10941] syz.0.1310: attempt to access beyond end of device [ 786.779615][T10941] loop0: rw=2049, sector=2049, nr_sectors = 1 limit=2048 [ 786.793287][T10941] Buffer I/O error on dev loop0, logical block 2049, lost async page write [ 789.946565][T10963] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 791.708223][T10966] loop1: detected capacity change from 0 to 32768 [ 793.053165][T10984] binder: 10980:10984 ioctl 4018620d 0 returned -22 [ 793.062251][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1322'. [ 794.682021][T11004] loop2: detected capacity change from 0 to 64 [ 797.252020][T11000] loop0: detected capacity change from 0 to 32768 [ 798.331317][T11027] Zero length message leads to an empty skb [ 798.840686][T11026] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 801.247042][T11033] loop1: detected capacity change from 0 to 2048 [ 801.264673][T11033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.320209][ T28] audit: type=1800 audit(1788332043.161:8): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1338" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 802.206437][T11033] syz.1.1338: attempt to access beyond end of device [ 802.206437][T11033] loop1: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 802.220238][T11033] Buffer I/O error on dev loop1, logical block 2048, lost async page write [ 802.229025][T11033] syz.1.1338: attempt to access beyond end of device [ 802.229025][T11033] loop1: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 802.242967][T11033] Buffer I/O error on dev loop1, logical block 2048, lost async page write [ 802.251653][T11033] syz.1.1338: attempt to access beyond end of device [ 802.251653][T11033] loop1: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 802.265339][T11033] Buffer I/O error on dev loop1, logical block 2048, lost async page write [ 802.274085][T11033] syz.1.1338: attempt to access beyond end of device [ 802.274085][T11033] loop1: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 802.287792][T11033] Buffer I/O error on dev loop1, logical block 2048, lost async page write [ 802.296507][T11033] syz.1.1338: attempt to access beyond end of device [ 802.296507][T11033] loop1: rw=2049, sector=2048, nr_sectors = 1 limit=2048 [ 802.310178][T11033] Buffer I/O error on dev loop1, logical block 2048, lost async page write [ 802.319139][T11033] syz.1.1338: attempt to access beyond end of device [ 802.319139][T11033] loop1: rw=2049, sector=2049, nr_sectors = 1 limit=2048 [ 802.332788][T11033] Buffer I/O error on dev loop1, logical block 2049, lost async page write [ 802.503559][T11040] loop3: detected capacity change from 0 to 256 [ 804.465093][T11051] loop3: detected capacity change from 0 to 2048 [ 804.642074][T11051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 805.232434][ T28] audit: type=1800 audit(1788332047.071:9): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1344" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 805.513299][ T28] audit: type=1800 audit(1788332047.291:10): pid=11051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1344" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 806.619078][T11064] binder: 11058:11064 ioctl 4018620d 0 returned -22 [ 806.647943][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 807.458756][T11066] loop3: detected capacity change from 0 to 2048 [ 807.472055][T11066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 807.556818][ T28] audit: type=1800 audit(1788332049.401:11): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1348" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 807.588772][ T28] audit: type=1800 audit(1788332049.431:12): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1348" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 809.049503][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.342086][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.845004][T11073] loop1: detected capacity change from 0 to 32768 [ 811.877615][T11095] loop0: detected capacity change from 0 to 32768 [ 812.684877][T11114] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 816.408275][T11145] binder: 11143:11145 ioctl 4018620d 0 returned -22 [ 817.366676][T11146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1370'. [ 817.407686][T11138] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 818.117668][T11159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1374'. [ 818.668545][T11168] loop2: detected capacity change from 0 to 128 [ 822.392448][T11188] loop3: detected capacity change from 0 to 256 [ 822.682815][T11192] loop1: detected capacity change from 0 to 128 [ 827.239594][T11207] loop2: detected capacity change from 0 to 32768 [ 827.539629][T11203] loop3: detected capacity change from 0 to 32768 [ 829.257590][T11210] loop0: detected capacity change from 0 to 40427 [ 829.360747][T11210] F2FS-fs (loop0): Found nat_bits in checkpoint [ 829.532866][T11221] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 829.865035][T11234] netlink: 'syz.1.1397': attribute type 2 has an invalid length. [ 830.899504][T11237] loop0: detected capacity change from 0 to 40427 [ 831.003667][T11245] binder: 11242:11245 ioctl 4018620d 0 returned -22 [ 831.105911][T11237] F2FS-fs (loop0): Found nat_bits in checkpoint [ 832.008831][T11237] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 832.074955][T11252] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1400'. [ 832.379970][T11255] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 832.554854][T11255] syz.0.1398: attempt to access beyond end of device [ 832.554854][T11255] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 832.898557][ T5772] syz-executor: attempt to access beyond end of device [ 832.898557][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 832.928729][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 833.051476][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 833.111313][T11254] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 835.810088][T11276] loop3: detected capacity change from 0 to 256 [ 838.607480][T11278] loop0: detected capacity change from 0 to 32768 [ 840.951348][T11297] loop0: detected capacity change from 0 to 128 [ 841.357404][T11307] netlink: 'syz.0.1418': attribute type 2 has an invalid length. [ 842.333829][T11310] loop2: detected capacity change from 0 to 32768 [ 844.146804][T11316] loop0: detected capacity change from 0 to 256 [ 846.343836][T11321] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 849.167782][T11344] binder: 11342:11344 ioctl 4018620d 0 returned -22 [ 849.187252][T11344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1428'. [ 852.738851][T11360] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 856.097483][T11371] netlink: 'syz.2.1437': attribute type 2 has an invalid length. [ 857.848653][T11376] loop3: detected capacity change from 0 to 256 [ 860.358437][T10662] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 860.636652][T10662] usb 2-1: device descriptor read/64, error -71 [ 860.689469][T11390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1434'. [ 860.932764][T10662] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 861.092640][T10662] usb 2-1: device descriptor read/64, error -71 [ 861.214162][T10662] usb usb2-port1: attempt power cycle [ 861.944109][T10662] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 865.451633][T10662] usb 2-1: device not accepting address 10, error -71 [ 867.149461][T11414] loop2: detected capacity change from 0 to 256 [ 867.451534][T11418] loop2: detected capacity change from 0 to 64 [ 868.164334][T11424] binder: 11421:11424 ioctl 4018620d 0 returned -22 [ 868.181848][T11424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1453'. [ 869.004678][T11416] loop1: detected capacity change from 0 to 32768 [ 870.309019][T11439] loop2: detected capacity change from 0 to 256 [ 870.480048][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.486581][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.364378][T11427] loop0: detected capacity change from 0 to 40427 [ 871.819353][T11427] F2FS-fs (loop0): Found nat_bits in checkpoint [ 872.991116][T11427] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 876.076088][T11466] loop1: detected capacity change from 0 to 128 [ 879.483740][T11476] loop1: detected capacity change from 0 to 256 [ 888.550169][T11513] loop0: detected capacity change from 0 to 256 [ 890.945629][T11521] loop3: detected capacity change from 0 to 64 [ 892.356326][T11524] loop1: detected capacity change from 0 to 256 [ 904.542099][T11568] loop2: detected capacity change from 0 to 256 [ 910.213979][T11590] loop1: detected capacity change from 0 to 256 [ 912.681130][T11612] loop0: detected capacity change from 0 to 256 [ 917.678929][T11632] loop2: detected capacity change from 0 to 128 [ 919.471577][T11643] loop3: detected capacity change from 0 to 256 [ 923.395311][T11657] loop3: detected capacity change from 0 to 256 [ 924.655732][T11661] loop0: detected capacity change from 0 to 32768 [ 924.768852][T11659] loop2: detected capacity change from 0 to 40427 [ 924.779582][T11653] loop1: detected capacity change from 0 to 40427 [ 924.958257][T11659] F2FS-fs (loop2): Found nat_bits in checkpoint [ 924.978061][T11653] F2FS-fs (loop1): Found nat_bits in checkpoint [ 925.202210][T11653] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 925.397943][T11659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 925.744096][T11681] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 925.916777][T11681] syz.2.1517: attempt to access beyond end of device [ 925.916777][T11681] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 926.245272][ T5770] syz-executor: attempt to access beyond end of device [ 926.245272][ T5770] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 926.266060][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 926.277561][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 926.728073][T11678] loop3: detected capacity change from 0 to 32768 [ 932.013326][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.019727][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.478739][T11719] loop2: detected capacity change from 0 to 2048 [ 933.844608][T11719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 933.856422][T11723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1533'. [ 933.973492][ T28] audit: type=1800 audit(1788332175.821:13): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1532" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 934.207370][ T28] audit: type=1800 audit(1788332175.861:14): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1532" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 934.248436][T11726] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1534'. [ 937.929127][T11740] loop2: detected capacity change from 0 to 256 [ 941.955631][T11763] loop1: detected capacity change from 0 to 2048 [ 941.968890][T11763] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 942.048404][ T28] audit: type=1800 audit(1788332183.861:15): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1545" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 942.328918][ T28] audit: type=1800 audit(1788332183.861:16): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1545" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 951.306545][T11803] loop1: detected capacity change from 0 to 2048 [ 951.377350][T11803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 951.462249][ T28] audit: type=1800 audit(1788332193.301:17): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1556" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 951.539036][ T28] audit: type=1800 audit(1788332193.301:18): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1556" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 955.312010][T11815] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 958.762315][T11830] loop3: detected capacity change from 0 to 2048 [ 958.793231][T11832] loop0: detected capacity change from 0 to 2048 [ 958.830903][T11830] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 958.847796][T11832] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 958.952663][ T28] audit: type=1800 audit(1788332200.791:19): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1565" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 959.049381][ T28] audit: type=1800 audit(1788332200.801:20): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1565" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 959.152619][ T28] audit: type=1800 audit(1788332200.841:21): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1564" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 959.222388][ T28] audit: type=1800 audit(1788332200.861:22): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1564" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 962.598642][T11840] loop3: detected capacity change from 0 to 32768 [ 969.055849][T11882] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 969.096950][T11883] loop2: detected capacity change from 0 to 256 [ 970.432105][T11884] loop0: detected capacity change from 0 to 32768 [ 970.659621][T11900] loop2: detected capacity change from 0 to 256 [ 971.600205][T11891] loop1: detected capacity change from 0 to 32768 [ 971.606334][T11889] loop3: detected capacity change from 0 to 32768 [ 975.157785][T11922] loop2: detected capacity change from 0 to 128 [ 975.905395][T11924] loop1: detected capacity change from 0 to 256 [ 977.005115][T11935] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 977.121814][T11937] loop2: detected capacity change from 0 to 128 [ 979.001794][T11958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1595'. [ 979.435411][T11961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1594'. [ 980.042680][ T5773] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 982.346672][T11971] loop2: detected capacity change from 0 to 128 [ 983.531044][T11974] loop1: detected capacity change from 0 to 2048 [ 983.644172][T11982] loop0: detected capacity change from 0 to 512 [ 983.659837][T11974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.684722][T11982] EXT4-fs (loop0): Test dummy encryption mode enabled [ 983.771379][T11982] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 983.966242][T11982] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 984.200773][ T28] audit: type=1800 audit(1788332226.041:23): pid=11974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1599" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 984.849815][ T28] audit: type=1800 audit(1788332226.141:24): pid=11974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1599" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 984.941100][T11982] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 985.007927][T11982] EXT4-fs (loop0): 1 truncate cleaned up [ 985.030605][T11982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.688264][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.787576][T12010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1605'. [ 988.621629][T12013] loop3: detected capacity change from 0 to 128 [ 991.878124][T12033] loop1: detected capacity change from 0 to 256 [ 993.357861][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.237373][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.030768][T12045] loop1: detected capacity change from 0 to 2048 [ 995.038098][T12047] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 995.100181][T12045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 995.163364][ T28] audit: type=1800 audit(1788332237.001:25): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1617" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 995.261455][ T28] audit: type=1800 audit(1788332237.001:26): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1617" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 997.182846][ T5814] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 997.479039][ T5814] usb 1-1: device descriptor read/64, error -71 [ 997.903090][ T5814] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 997.912262][T12072] loop1: detected capacity change from 0 to 256 [ 998.192904][ T5814] usb 1-1: device descriptor read/64, error -71 [ 998.438141][ T5814] usb usb1-port1: attempt power cycle [ 999.006147][ T5814] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 999.173564][ T5814] usb 1-1: device descriptor read/8, error -71 [ 1000.162823][ T5814] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 1000.604763][ T5814] usb 1-1: device not accepting address 5, error -71 [ 1000.741489][ T5814] usb usb1-port1: unable to enumerate USB device [ 1007.156969][T12115] loop0: detected capacity change from 0 to 512 [ 1008.112733][T12115] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1008.119602][T12115] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1008.217785][T12115] EXT4-fs (loop0): 1 truncate cleaned up [ 1008.247703][T12115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.633042][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.464857][T12150] loop0: detected capacity change from 0 to 128 [ 1014.238901][T12164] loop1: detected capacity change from 0 to 256 [ 1016.456119][T12184] loop2: detected capacity change from 0 to 512 [ 1016.581787][T12184] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1016.589875][T12184] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1017.344451][T12188] loop3: detected capacity change from 0 to 256 [ 1017.371653][T12184] EXT4-fs (loop2): 1 truncate cleaned up [ 1017.417494][T12184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.257750][T12204] loop0: detected capacity change from 0 to 128 [ 1018.310046][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.327169][T12203] loop1: detected capacity change from 0 to 32768 [ 1019.339572][T12212] fuse: Bad value for 'fd' [ 1020.547744][T12218] loop0: detected capacity change from 0 to 32768 [ 1022.970461][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1657'. [ 1026.869815][T12260] netlink: 'syz.3.1668': attribute type 2 has an invalid length. [ 1035.663763][T12317] FAULT_INJECTION: forcing a failure. [ 1035.663763][T12317] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.706992][T12317] CPU: 1 PID: 12317 Comm: syz.1.1684 Not tainted syzkaller #0 [ 1035.714542][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.724831][T12317] Call Trace: [ 1035.728504][T12317] [ 1035.731542][T12317] dump_stack_lvl+0x18c/0x250 [ 1035.736452][T12317] ? show_regs_print_info+0x20/0x20 [ 1035.741741][T12317] ? load_image+0x420/0x420 [ 1035.746385][T12317] ? __might_sleep+0xe0/0xe0 [ 1035.751114][T12317] ? __lock_acquire+0x7d80/0x7d80 [ 1035.756192][T12317] should_fail_ex+0x394/0x4c0 [ 1035.760938][T12317] should_failslab+0x9/0x20 [ 1035.765494][T12317] slab_pre_alloc_hook+0x59/0x300 [ 1035.770594][T12317] ? __rwlock_init+0x150/0x150 [ 1035.775436][T12317] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1035.780609][T12317] ? iget_locked+0x205/0x8c0 [ 1035.785256][T12317] iget_locked+0x205/0x8c0 [ 1035.789736][T12317] kernfs_get_inode+0x4f/0x6e0 [ 1035.794561][T12317] kernfs_iop_lookup+0x263/0x380 [ 1035.799539][T12317] ? kernfs_dop_revalidate+0x570/0x570 [ 1035.805056][T12317] path_openat+0x1110/0x3270 [ 1035.809707][T12317] ? do_filp_open+0x430/0x430 [ 1035.814431][T12317] do_filp_open+0x1f2/0x430 [ 1035.818980][T12317] ? vfs_tmpfile+0x620/0x620 [ 1035.823634][T12317] ? _raw_spin_unlock+0x28/0x40 [ 1035.828664][T12317] ? alloc_fd+0x590/0x640 [ 1035.833038][T12317] do_sys_openat2+0x134/0x1d0 [ 1035.837766][T12317] ? init_peercred+0x263/0x2c0 [ 1035.842646][T12317] ? do_sys_open+0xe0/0xe0 [ 1035.847410][T12317] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1035.853449][T12317] ? lock_chain_count+0x20/0x20 [ 1035.858386][T12317] ? lock_chain_count+0x20/0x20 [ 1035.863278][T12317] __x64_sys_openat+0x139/0x160 [ 1035.868174][T12317] do_syscall_64+0x55/0xb0 [ 1035.872627][T12317] ? clear_bhb_loop+0x40/0x90 [ 1035.877451][T12317] ? clear_bhb_loop+0x40/0x90 [ 1035.882169][T12317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1035.888106][T12317] RIP: 0033:0x7fd066f5e98e [ 1035.892613][T12317] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1035.912296][T12317] RSP: 002b:00007fd067ed09b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1035.920894][T12317] RAX: ffffffffffffffda RBX: 00007fd067ed16c0 RCX: 00007fd066f5e98e [ 1035.928896][T12317] RDX: 0000000000080001 RSI: 00007fd067009070 RDI: ffffffffffffff9c [ 1035.937507][T12317] RBP: 00007fd067009070 R08: 0000000000000000 R09: 0000000000000000 [ 1035.945505][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1035.953683][T12317] R13: 00007fd067ed0a90 R14: 00007fd067225fa0 R15: 00007ffd63cf0c08 [ 1035.963376][T12317] [ 1036.062065][T12319] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1036.069142][T12319] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1036.111156][T12319] vhci_hcd vhci_hcd.0: Device attached [ 1036.135762][T12320] vhci_hcd: connection closed [ 1036.146328][ T7675] vhci_hcd: stop threads [ 1036.173956][ T7675] vhci_hcd: release socket [ 1036.189678][ T7675] vhci_hcd: disconnect device [ 1036.516126][T12316] loop3: detected capacity change from 0 to 40427 [ 1036.570910][T12316] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1036.709243][T12316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1037.736952][T12330] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1037.917969][T12330] syz.3.1683: attempt to access beyond end of device [ 1037.917969][T12330] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1038.428095][ T5769] syz-executor: attempt to access beyond end of device [ 1038.428095][ T5769] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1038.428638][ T5769] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1038.428722][ T5769] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1040.964353][T12347] loop2: detected capacity change from 0 to 512 [ 1041.068147][T12347] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1041.151843][T12347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1041.634348][T12347] EXT4-fs (loop2): 1 truncate cleaned up [ 1041.776808][T12347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.314607][T12347] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1045.415015][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.824452][T12396] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1054.806410][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.812986][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.325966][T12406] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1061.845441][T12458] loop1: detected capacity change from 0 to 512 [ 1061.849182][T12462] loop0: detected capacity change from 0 to 256 [ 1061.862734][T12458] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1061.869720][T12458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1061.959290][T12458] EXT4-fs (loop1): 1 truncate cleaned up [ 1061.967505][T12458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.280117][T12468] FAULT_INJECTION: forcing a failure. [ 1062.280117][T12468] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.581878][T12468] CPU: 1 PID: 12468 Comm: syz.2.1722 Not tainted syzkaller #0 [ 1062.589461][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1062.599566][T12468] Call Trace: [ 1062.602919][T12468] [ 1062.605904][T12468] dump_stack_lvl+0x18c/0x250 [ 1062.610735][T12468] ? show_regs_print_info+0x20/0x20 [ 1062.615998][T12468] ? load_image+0x420/0x420 [ 1062.620582][T12468] ? __might_sleep+0xe0/0xe0 [ 1062.625258][T12468] ? __lock_acquire+0x7d80/0x7d80 [ 1062.630357][T12468] should_fail_ex+0x394/0x4c0 [ 1062.635103][T12468] should_failslab+0x9/0x20 [ 1062.639663][T12468] slab_pre_alloc_hook+0x59/0x300 [ 1062.644772][T12468] ? kernfs_fop_open+0x3d2/0xc60 [ 1062.649782][T12468] __kmem_cache_alloc_node+0x53/0x250 [ 1062.655222][T12468] ? kernfs_fop_open+0x3d2/0xc60 [ 1062.660208][T12468] kmalloc_trace+0x2a/0xe0 [ 1062.664784][T12468] kernfs_fop_open+0x3d2/0xc60 [ 1062.669602][T12468] ? fsnotify_perm+0x271/0x5e0 [ 1062.674498][T12468] do_dentry_open+0x880/0x14b0 [ 1062.679326][T12468] ? kernfs_fop_mmap+0x570/0x570 [ 1062.684325][T12468] path_openat+0x284f/0x3270 [ 1062.689049][T12468] ? verify_lock_unused+0x140/0x140 [ 1062.694303][T12468] ? do_filp_open+0x430/0x430 [ 1062.699036][T12468] ? up_read+0x20/0x20 [ 1062.703178][T12468] do_filp_open+0x1f2/0x430 [ 1062.707843][T12468] ? vfs_tmpfile+0x620/0x620 [ 1062.712514][T12468] ? _raw_spin_unlock+0x28/0x40 [ 1062.717419][T12468] ? alloc_fd+0x590/0x640 [ 1062.721912][T12468] do_sys_openat2+0x134/0x1d0 [ 1062.726650][T12468] ? do_sys_open+0xe0/0xe0 [ 1062.731130][T12468] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1062.737167][T12468] ? lock_chain_count+0x20/0x20 [ 1062.742069][T12468] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1062.748113][T12468] __x64_sys_openat+0x139/0x160 [ 1062.753031][T12468] do_syscall_64+0x55/0xb0 [ 1062.757507][T12468] ? clear_bhb_loop+0x40/0x90 [ 1062.762237][T12468] ? clear_bhb_loop+0x40/0x90 [ 1062.766994][T12468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1062.772945][T12468] RIP: 0033:0x7ff56ef5e98e [ 1062.777413][T12468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1062.797066][T12468] RSP: 002b:00007ff56fe879b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1062.805537][T12468] RAX: ffffffffffffffda RBX: 00007ff56fe886c0 RCX: 00007ff56ef5e98e [ 1062.813565][T12468] RDX: 0000000000080001 RSI: 00007ff56f009070 RDI: ffffffffffffff9c [ 1062.821621][T12468] RBP: 00007ff56f009070 R08: 0000000000000000 R09: 0000000000000000 [ 1062.829652][T12468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1062.838291][T12468] R13: 00007ff56fe87a90 R14: 00007ff56f225fa0 R15: 00007ffd6bf32f28 [ 1062.846380][T12468] [ 1063.109390][T12469] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1063.230735][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.723222][T12465] loop3: detected capacity change from 0 to 40427 [ 1063.776578][T12465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1067.726992][T12507] loop2: detected capacity change from 0 to 256 [ 1069.615358][T12528] FAULT_INJECTION: forcing a failure. [ 1069.615358][T12528] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.672846][T12528] CPU: 0 PID: 12528 Comm: syz.3.1741 Not tainted syzkaller #0 [ 1069.680411][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1069.690528][T12528] Call Trace: [ 1069.693866][T12528] [ 1069.696849][T12528] dump_stack_lvl+0x18c/0x250 [ 1069.701609][T12528] ? show_regs_print_info+0x20/0x20 [ 1069.707046][T12528] ? load_image+0x420/0x420 [ 1069.711614][T12528] ? __might_sleep+0xe0/0xe0 [ 1069.716279][T12528] ? __lock_acquire+0x7d80/0x7d80 [ 1069.721384][T12528] should_fail_ex+0x394/0x4c0 [ 1069.726157][T12528] should_failslab+0x9/0x20 [ 1069.730740][T12528] slab_pre_alloc_hook+0x59/0x300 [ 1069.735864][T12528] ? kernfs_fop_open+0x3d2/0xc60 [ 1069.740877][T12528] __kmem_cache_alloc_node+0x53/0x250 [ 1069.746358][T12528] ? kernfs_fop_open+0x3d2/0xc60 [ 1069.751841][T12528] kmalloc_trace+0x2a/0xe0 [ 1069.756339][T12528] kernfs_fop_open+0x3d2/0xc60 [ 1069.761165][T12528] ? fsnotify_perm+0x271/0x5e0 [ 1069.766025][T12528] do_dentry_open+0x880/0x14b0 [ 1069.770861][T12528] ? kernfs_fop_mmap+0x570/0x570 [ 1069.775855][T12528] path_openat+0x284f/0x3270 [ 1069.780537][T12528] ? verify_lock_unused+0x140/0x140 [ 1069.785812][T12528] ? do_filp_open+0x430/0x430 [ 1069.790555][T12528] ? up_read+0x20/0x20 [ 1069.794696][T12528] do_filp_open+0x1f2/0x430 [ 1069.799271][T12528] ? vfs_tmpfile+0x620/0x620 [ 1069.803945][T12528] ? _raw_spin_unlock+0x28/0x40 [ 1069.808915][T12528] ? alloc_fd+0x590/0x640 [ 1069.813331][T12528] do_sys_openat2+0x134/0x1d0 [ 1069.818076][T12528] ? init_peercred+0x263/0x2c0 [ 1069.822912][T12528] ? do_sys_open+0xe0/0xe0 [ 1069.827405][T12528] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1069.833458][T12528] ? lock_chain_count+0x20/0x20 [ 1069.838392][T12528] ? lock_chain_count+0x20/0x20 [ 1069.843314][T12528] __x64_sys_openat+0x139/0x160 [ 1069.848238][T12528] do_syscall_64+0x55/0xb0 [ 1069.852715][T12528] ? clear_bhb_loop+0x40/0x90 [ 1069.857551][T12528] ? clear_bhb_loop+0x40/0x90 [ 1069.862299][T12528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.868257][T12528] RIP: 0033:0x7f334315e98e [ 1069.872723][T12528] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1069.892385][T12528] RSP: 002b:00007f334402d9b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1069.900896][T12528] RAX: ffffffffffffffda RBX: 00007f334402e6c0 RCX: 00007f334315e98e [ 1069.908929][T12528] RDX: 0000000000080001 RSI: 00007f3343209070 RDI: ffffffffffffff9c [ 1069.916962][T12528] RBP: 00007f3343209070 R08: 0000000000000000 R09: 0000000000000000 [ 1069.924990][T12528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1069.933017][T12528] R13: 00007f334402da90 R14: 00007f3343425fa0 R15: 00007ffdafef7578 [ 1069.941074][T12528] [ 1070.932962][T12549] loop0: detected capacity change from 0 to 256 [ 1073.390775][T12575] loop2: detected capacity change from 0 to 512 [ 1073.484528][T12575] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1073.491404][T12575] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1074.298392][T12575] EXT4-fs (loop2): 1 truncate cleaned up [ 1074.534016][T12575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.719569][T12589] loop3: detected capacity change from 0 to 2048 [ 1075.070991][T12593] loop1: detected capacity change from 0 to 256 [ 1075.161246][T12589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1075.277378][T12591] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1075.353187][ T28] audit: type=1800 audit(1788332317.191:27): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1758" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 1075.469458][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.800128][T12609] loop2: detected capacity change from 0 to 512 [ 1075.827862][T12609] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1075.854040][T12609] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1075.987968][T12609] EXT4-fs (loop2): 1 truncate cleaned up [ 1076.020101][T12609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.568483][T12609] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1078.842254][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.037738][T12642] loop3: detected capacity change from 0 to 256 [ 1079.411307][T12648] fuse: Bad value for 'fd' [ 1079.545532][T12652] loop1: detected capacity change from 0 to 512 [ 1079.587368][T12652] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1079.609404][T12652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1079.687055][T12652] EXT4-fs (loop1): 1 truncate cleaned up [ 1079.704866][T12652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.648520][T12661] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1081.145834][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.310667][T12639] loop0: detected capacity change from 0 to 40427 [ 1081.384472][T12645] loop2: detected capacity change from 0 to 32768 [ 1081.515174][T12639] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1083.098964][T12692] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1778'. [ 1084.686889][T12700] loop3: detected capacity change from 0 to 256 [ 1090.881565][T12737] binder_alloc: 12735: binder_alloc_buf, no vma [ 1090.899764][T12741] loop2: detected capacity change from 0 to 256 [ 1091.117726][T12742] loop1: detected capacity change from 0 to 2048 [ 1091.330746][T10662] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1091.788375][T12742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1091.999404][T10662] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1092.019580][T10662] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.176802][T10662] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1092.311176][T10662] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.695872][T10662] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1092.766544][ T28] audit: type=1800 audit(1788332334.451:28): pid=12759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1789" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 1092.798568][T10662] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1092.884863][T10662] usb 4-1: Product: syz [ 1092.931674][T10662] usb 4-1: Manufacturer: syz [ 1093.083897][T10662] cdc_wdm 4-1:1.0: skipping garbage [ 1093.089449][T10662] cdc_wdm 4-1:1.0: skipping garbage [ 1093.097182][T10662] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1096.074785][ T173] usb 4-1: USB disconnect, device number 4 [ 1096.201250][T12774] loop0: detected capacity change from 0 to 512 [ 1097.157388][T12774] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1097.164406][T12774] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1097.228813][T12774] EXT4-fs (loop0): 1 truncate cleaned up [ 1097.255093][T12774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1098.658382][T12792] loop1: detected capacity change from 0 to 256 [ 1099.665642][T12787] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1099.804759][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.662758][T12838] loop2: detected capacity change from 0 to 256 [ 1108.000065][T12843] binder_alloc: 12842: binder_alloc_buf, no vma [ 1108.259217][T12851] loop2: detected capacity change from 0 to 256 [ 1110.441479][T12867] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1820'. [ 1110.732918][ T173] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1111.721114][ T173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.753083][ T173] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1111.893972][ T173] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1111.983142][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.117465][ T173] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 1114.433295][ T173] usb 1-1: USB disconnect, device number 6 [ 1114.493452][T12891] loop2: detected capacity change from 0 to 256 [ 1116.273699][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.699749][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.864859][T12925] loop3: detected capacity change from 0 to 256 [ 1122.367090][T12940] loop3: detected capacity change from 0 to 256 [ 1125.637778][T12951] loop0: detected capacity change from 0 to 512 [ 1125.772963][T12951] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1127.186684][T12951] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1127.238013][T12951] EXT4-fs (loop0): 1 truncate cleaned up [ 1127.255138][T12951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1127.993479][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.618174][T12986] loop3: detected capacity change from 0 to 256 [ 1132.006738][T12992] loop1: detected capacity change from 0 to 256 [ 1135.279161][T13007] loop1: detected capacity change from 0 to 256 [ 1136.615773][T13013] loop1: detected capacity change from 0 to 256 [ 1137.505851][T13018] loop0: detected capacity change from 0 to 512 [ 1137.522895][T13018] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1137.563631][T13018] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1137.662154][T13018] EXT4-fs (loop0): 1 truncate cleaned up [ 1137.816838][T13018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1139.442041][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.636122][T13034] loop2: detected capacity change from 0 to 256 [ 1139.885215][T13038] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1139.891856][T13038] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1139.935644][T13038] vhci_hcd vhci_hcd.0: Device attached [ 1139.951608][T13041] vhci_hcd: connection closed [ 1139.956001][ T7678] vhci_hcd: stop threads [ 1139.982726][ T7678] vhci_hcd: release socket [ 1139.987227][ T7678] vhci_hcd: disconnect device [ 1140.102232][T13049] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1143.019293][T13055] loop0: detected capacity change from 0 to 256 [ 1147.341164][T13078] loop3: detected capacity change from 0 to 256 [ 1149.662763][T13083] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1149.669333][T13083] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1149.700685][T13083] vhci_hcd vhci_hcd.0: Device attached [ 1149.719016][T13084] vhci_hcd: connection closed [ 1149.720587][ T7672] vhci_hcd: stop threads [ 1149.732777][ T7672] vhci_hcd: release socket [ 1149.740716][ T7672] vhci_hcd: disconnect device [ 1150.852113][T13095] loop2: detected capacity change from 0 to 256 [ 1150.872284][T13092] loop3: detected capacity change from 0 to 512 [ 1150.918985][T13092] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1150.971853][T13092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1151.145578][T13092] EXT4-fs (loop3): 1 truncate cleaned up [ 1153.234512][T13092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1153.720951][T13104] loop2: detected capacity change from 0 to 512 [ 1153.732735][T13104] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1153.739582][T13104] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1153.830075][T13104] EXT4-fs (loop2): 1 truncate cleaned up [ 1153.837819][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.860489][T13104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.312713][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.369231][T13121] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1157.375831][T13121] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1157.599683][T13121] vhci_hcd vhci_hcd.0: Device attached [ 1157.796887][T13122] vhci_hcd: connection closed [ 1157.878823][ T7678] vhci_hcd: stop threads [ 1157.962256][T10151] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1157.995794][ T7678] vhci_hcd: release socket [ 1158.712648][ T7678] vhci_hcd: disconnect device [ 1163.752639][T10151] vhci_hcd: vhci_device speed not set [ 1164.344606][T13146] loop3: detected capacity change from 0 to 512 [ 1164.378158][T13146] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1164.600305][T13146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1165.141848][T13146] EXT4-fs (loop3): 1 truncate cleaned up [ 1166.190750][T13146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.312309][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.327114][T13164] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1167.333726][T13164] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1167.431124][T13164] vhci_hcd vhci_hcd.0: Device attached [ 1167.488043][T13165] vhci_hcd: connection closed [ 1167.495614][ T7669] vhci_hcd: stop threads [ 1167.579518][ T7669] vhci_hcd: release socket [ 1167.618500][ T7669] vhci_hcd: disconnect device [ 1169.951668][T13178] loop0: detected capacity change from 0 to 22 [ 1170.075433][T13178] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1170.262307][T13178] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1172.177729][T13193] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1174.032786][T13205] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1174.039390][T13205] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1174.065382][T13205] vhci_hcd vhci_hcd.0: Device attached [ 1174.085038][T13206] vhci_hcd: connection closed [ 1174.129663][ T7673] vhci_hcd: stop threads [ 1174.214041][ T7673] vhci_hcd: release socket [ 1174.260323][ T7673] vhci_hcd: disconnect device [ 1177.677426][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.683983][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.245934][T13251] FAULT_INJECTION: forcing a failure. [ 1181.245934][T13251] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.280746][T13251] CPU: 1 PID: 13251 Comm: syz.2.1928 Not tainted syzkaller #0 [ 1181.288309][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1181.298419][T13251] Call Trace: [ 1181.301748][T13251] [ 1181.304782][T13251] dump_stack_lvl+0x18c/0x250 [ 1181.309528][T13251] ? show_regs_print_info+0x20/0x20 [ 1181.314797][T13251] ? load_image+0x420/0x420 [ 1181.319360][T13251] ? __might_sleep+0xe0/0xe0 [ 1181.324009][T13251] ? __lock_acquire+0x7d80/0x7d80 [ 1181.329099][T13251] should_fail_ex+0x394/0x4c0 [ 1181.333888][T13251] should_failslab+0x9/0x20 [ 1181.338455][T13251] slab_pre_alloc_hook+0x59/0x300 [ 1181.343546][T13251] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1181.349417][T13251] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1181.355209][T13251] __kmem_cache_alloc_node+0x53/0x250 [ 1181.360661][T13251] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1181.366470][T13251] __kmalloc+0xa7/0x240 [ 1181.370712][T13251] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1181.376333][T13251] ? tomoyo_domain+0xd6/0x120 [ 1181.381124][T13251] tomoyo_path_number_perm+0x248/0x5e0 [ 1181.386687][T13251] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1181.392927][T13251] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1181.398538][T13251] ? __fget_files+0x28/0x460 [ 1181.403228][T13251] security_file_ioctl+0x70/0xa0 [ 1181.408259][T13251] __se_sys_ioctl+0x48/0x170 [ 1181.413105][T13251] do_syscall_64+0x55/0xb0 [ 1181.417591][T13251] ? clear_bhb_loop+0x40/0x90 [ 1181.422346][T13251] ? clear_bhb_loop+0x40/0x90 [ 1181.427096][T13251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1181.433085][T13251] RIP: 0033:0x7ff56ef9e159 [ 1181.437561][T13251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.457237][T13251] RSP: 002b:00007ff56fe88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1181.465756][T13251] RAX: ffffffffffffffda RBX: 00007ff56f225fa0 RCX: 00007ff56ef9e159 [ 1181.473801][T13251] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000003 [ 1181.481917][T13251] RBP: 00007ff56f035024 R08: 0000000000000000 R09: 0000000000000000 [ 1181.489949][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.497974][T13251] R13: 00007ff56f226038 R14: 00007ff56f225fa0 R15: 00007ffd6bf32f28 [ 1181.506024][T13251] [ 1181.528329][T13251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1181.544381][T13251] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1181.551019][T13251] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1181.560532][T13251] vhci_hcd vhci_hcd.0: Device attached [ 1181.716872][T13254] vhci_hcd: connection closed [ 1181.722812][ T7673] vhci_hcd: stop threads [ 1181.732311][ T7673] vhci_hcd: release socket [ 1181.762621][ T7673] vhci_hcd: disconnect device [ 1181.832922][ T5815] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 1181.867794][ T5815] usb 37-1: enqueue for inactive port 0 [ 1182.005571][ T5815] vhci_hcd: vhci_device speed not set [ 1186.602606][T13297] FAULT_INJECTION: forcing a failure. [ 1186.602606][T13297] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.666145][T13297] CPU: 1 PID: 13297 Comm: syz.2.1941 Not tainted syzkaller #0 [ 1186.673730][T13297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1186.683847][T13297] Call Trace: [ 1186.687181][T13297] [ 1186.690156][T13297] dump_stack_lvl+0x18c/0x250 [ 1186.694899][T13297] ? show_regs_print_info+0x20/0x20 [ 1186.700175][T13297] ? load_image+0x420/0x420 [ 1186.704832][T13297] ? __might_sleep+0xe0/0xe0 [ 1186.709508][T13297] ? __lock_acquire+0x7d80/0x7d80 [ 1186.714638][T13297] should_fail_ex+0x394/0x4c0 [ 1186.719420][T13297] should_failslab+0x9/0x20 [ 1186.723980][T13297] slab_pre_alloc_hook+0x59/0x300 [ 1186.729073][T13297] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1186.734840][T13297] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1186.740613][T13297] __kmem_cache_alloc_node+0x53/0x250 [ 1186.746080][T13297] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1186.751846][T13297] __kmalloc+0xa7/0x240 [ 1186.756085][T13297] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1186.761683][T13297] ? tomoyo_domain+0xd6/0x120 [ 1186.766448][T13297] tomoyo_path_number_perm+0x248/0x5e0 [ 1186.771947][T13297] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1186.777622][T13297] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1186.783147][T13297] ? __fget_files+0x28/0x460 [ 1186.787792][T13297] security_file_ioctl+0x70/0xa0 [ 1186.792784][T13297] __se_sys_ioctl+0x48/0x170 [ 1186.797425][T13297] do_syscall_64+0x55/0xb0 [ 1186.801871][T13297] ? clear_bhb_loop+0x40/0x90 [ 1186.806577][T13297] ? clear_bhb_loop+0x40/0x90 [ 1186.811285][T13297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1186.817215][T13297] RIP: 0033:0x7ff56ef9e159 [ 1186.821656][T13297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.841295][T13297] RSP: 002b:00007ff56fe88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.849749][T13297] RAX: ffffffffffffffda RBX: 00007ff56f225fa0 RCX: 00007ff56ef9e159 [ 1186.857759][T13297] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000003 [ 1186.865760][T13297] RBP: 00007ff56f035024 R08: 0000000000000000 R09: 0000000000000000 [ 1186.873760][T13297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.881755][T13297] R13: 00007ff56f226038 R14: 00007ff56f225fa0 R15: 00007ffd6bf32f28 [ 1186.889805][T13297] [ 1187.738124][T13297] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1187.793066][T13300] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1187.799699][T13300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1187.822217][T13300] vhci_hcd vhci_hcd.0: Device attached [ 1187.932887][T13307] vhci_hcd: connection closed [ 1187.933281][ T7673] vhci_hcd: stop threads [ 1187.942855][ T7673] vhci_hcd: release socket [ 1187.947386][ T7673] vhci_hcd: disconnect device [ 1188.022715][ T7695] vhci_hcd: vhci_device speed not set [ 1192.493427][T13347] loop1: detected capacity change from 0 to 1024 [ 1192.588830][T13347] EXT4-fs: Ignoring removed bh option [ 1192.834678][T13347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1196.540330][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.635480][T13381] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1962'. [ 1198.175383][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1966'. [ 1201.453741][T13411] kvm: kvm [13407]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 1203.075596][T13441] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1980'. [ 1203.175192][T13444] loop0: detected capacity change from 0 to 1024 [ 1203.230812][T13444] EXT4-fs: Ignoring removed bh option [ 1203.493704][T13444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.513068][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.514039][T13471] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1987'. [ 1211.757253][T13497] FAULT_INJECTION: forcing a failure. [ 1211.757253][T13497] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.830675][T13497] CPU: 1 PID: 13497 Comm: syz.3.1993 Not tainted syzkaller #0 [ 1211.838240][T13497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1211.848525][T13497] Call Trace: [ 1211.851852][T13497] [ 1211.854832][T13497] dump_stack_lvl+0x18c/0x250 [ 1211.859575][T13497] ? show_regs_print_info+0x20/0x20 [ 1211.864834][T13497] ? load_image+0x420/0x420 [ 1211.869488][T13497] ? __might_sleep+0xe0/0xe0 [ 1211.874147][T13497] ? __lock_acquire+0x7d80/0x7d80 [ 1211.879330][T13497] should_fail_ex+0x394/0x4c0 [ 1211.884087][T13497] should_failslab+0x9/0x20 [ 1211.888657][T13497] slab_pre_alloc_hook+0x59/0x300 [ 1211.893753][T13497] ? tomoyo_encode+0x2ad/0x570 [ 1211.898758][T13497] ? tomoyo_encode+0x2ad/0x570 [ 1211.903609][T13497] __kmem_cache_alloc_node+0x53/0x250 [ 1211.909057][T13497] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 1211.914935][T13497] ? tomoyo_encode+0x2ad/0x570 [ 1211.919760][T13497] __kmalloc+0xa7/0x240 [ 1211.924033][T13497] tomoyo_encode+0x2ad/0x570 [ 1211.928702][T13497] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1211.934398][T13497] ? tomoyo_domain+0xd6/0x120 [ 1211.939148][T13497] tomoyo_path_number_perm+0x248/0x5e0 [ 1211.944678][T13497] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1211.950379][T13497] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1211.955900][T13497] ? futex_wake_mark+0x150/0x150 [ 1211.960938][T13497] ? __fget_files+0x28/0x460 [ 1211.965612][T13497] security_file_ioctl+0x70/0xa0 [ 1211.970618][T13497] __se_sys_ioctl+0x48/0x170 [ 1211.975292][T13497] do_syscall_64+0x55/0xb0 [ 1211.979767][T13497] ? clear_bhb_loop+0x40/0x90 [ 1211.984497][T13497] ? clear_bhb_loop+0x40/0x90 [ 1211.989231][T13497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1211.995184][T13497] RIP: 0033:0x7f334319e159 [ 1211.999661][T13497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.019331][T13497] RSP: 002b:00007f334402e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1212.027808][T13497] RAX: ffffffffffffffda RBX: 00007f3343425fa0 RCX: 00007f334319e159 [ 1212.035841][T13497] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000003 [ 1212.043860][T13497] RBP: 00007f3343235024 R08: 0000000000000000 R09: 0000000000000000 [ 1212.051887][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.059907][T13497] R13: 00007f3343426038 R14: 00007f3343425fa0 R15: 00007ffdafef7578 [ 1212.067950][T13497] [ 1212.853326][T13497] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1213.039790][T13504] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1213.046401][T13504] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1213.257127][T13504] vhci_hcd vhci_hcd.0: Device attached [ 1213.437345][T13515] loop2: detected capacity change from 0 to 512 [ 1213.479247][T13505] vhci_hcd: connection closed [ 1213.480642][ T7672] vhci_hcd: stop threads [ 1213.488687][T13515] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1213.493135][ T7672] vhci_hcd: release socket [ 1213.532674][T13315] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 1213.533553][T13515] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1213.550296][ T7672] vhci_hcd: disconnect device [ 1213.562563][T13315] usb 39-1: enqueue for inactive port 0 [ 1213.779424][T13315] vhci_hcd: vhci_device speed not set [ 1213.811677][T13515] EXT4-fs (loop2): 1 truncate cleaned up [ 1213.871908][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1213.932648][T13515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1214.752332][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.021949][T13528] kvm: kvm [13525]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 1216.055158][T13547] loop3: detected capacity change from 0 to 1024 [ 1216.068967][T13547] EXT4-fs: Ignoring removed bh option [ 1216.125538][T13547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.316504][T13552] loop0: detected capacity change from 0 to 40427 [ 1218.347656][T13579] loop1: detected capacity change from 0 to 1024 [ 1218.355298][T13579] EXT4-fs: Ignoring removed bh option [ 1218.413593][T13552] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1218.438939][T13579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.562533][T13552] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1219.711154][T13592] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1219.814535][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.003426][T13596] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1220.024669][T13592] syz.0.2006: attempt to access beyond end of device [ 1220.024669][T13592] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1220.153974][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.236312][ T5772] syz-executor: attempt to access beyond end of device [ 1220.236312][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1220.268234][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1220.288684][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1221.733421][T13612] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2019'. [ 1222.733692][T13606] Bluetooth: hci0: command 0x0c1a tx timeout [ 1223.635663][T13626] loop1: detected capacity change from 0 to 1024 [ 1223.656568][T13626] EXT4-fs: Ignoring removed bh option [ 1223.818417][T13626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.880600][T13632] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1226.031608][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.888151][T13672] loop2: detected capacity change from 0 to 1024 [ 1229.897068][T13672] EXT4-fs: Ignoring removed bh option [ 1230.052115][T13672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1230.145694][T13676] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2032'. [ 1232.995937][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 1235.613239][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.957395][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2046'. [ 1236.925549][T13722] loop2: detected capacity change from 0 to 1024 [ 1236.948169][T13722] EXT4-fs: Ignoring removed bh option [ 1237.073890][T13722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1237.159246][T13715] loop0: detected capacity change from 0 to 32768 [ 1238.220622][T13738] loop1: detected capacity change from 0 to 1024 [ 1238.242905][T13738] EXT4-fs: Ignoring removed bh option [ 1238.299126][T13738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1238.430067][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.707359][T13747] FAULT_INJECTION: forcing a failure. [ 1238.707359][T13747] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.748527][T13747] CPU: 1 PID: 13747 Comm: syz.3.2054 Not tainted syzkaller #0 [ 1238.756087][T13747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1238.766200][T13747] Call Trace: [ 1238.769530][T13747] [ 1238.772508][T13747] dump_stack_lvl+0x18c/0x250 [ 1238.777244][T13747] ? show_regs_print_info+0x20/0x20 [ 1238.782493][T13747] ? load_image+0x420/0x420 [ 1238.787056][T13747] ? __might_sleep+0xe0/0xe0 [ 1238.791757][T13747] ? __lock_acquire+0x7d80/0x7d80 [ 1238.796845][T13747] should_fail_ex+0x394/0x4c0 [ 1238.801591][T13747] should_failslab+0x9/0x20 [ 1238.806154][T13747] slab_pre_alloc_hook+0x59/0x300 [ 1238.811248][T13747] ? tomoyo_encode+0x2ad/0x570 [ 1238.816094][T13747] ? tomoyo_encode+0x2ad/0x570 [ 1238.820919][T13747] __kmem_cache_alloc_node+0x53/0x250 [ 1238.826377][T13747] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 1238.832247][T13747] ? tomoyo_encode+0x2ad/0x570 [ 1238.837134][T13747] __kmalloc+0xa7/0x240 [ 1238.841337][T13747] tomoyo_encode+0x2ad/0x570 [ 1238.845975][T13747] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1238.851652][T13747] ? tomoyo_domain+0xd6/0x120 [ 1238.856386][T13747] tomoyo_path_number_perm+0x248/0x5e0 [ 1238.861890][T13747] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1238.867585][T13747] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1238.873080][T13747] ? futex_wake_mark+0x150/0x150 [ 1238.878074][T13747] ? __fget_files+0x28/0x460 [ 1238.882723][T13747] security_file_ioctl+0x70/0xa0 [ 1238.887706][T13747] __se_sys_ioctl+0x48/0x170 [ 1238.892346][T13747] do_syscall_64+0x55/0xb0 [ 1238.896803][T13747] ? clear_bhb_loop+0x40/0x90 [ 1238.901522][T13747] ? clear_bhb_loop+0x40/0x90 [ 1238.906321][T13747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1238.912260][T13747] RIP: 0033:0x7f334319e159 [ 1238.916715][T13747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.936358][T13747] RSP: 002b:00007f334402e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.944806][T13747] RAX: ffffffffffffffda RBX: 00007f3343425fa0 RCX: 00007f334319e159 [ 1238.952810][T13747] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000003 [ 1238.960816][T13747] RBP: 00007f3343235024 R08: 0000000000000000 R09: 0000000000000000 [ 1238.968914][T13747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1238.976919][T13747] R13: 00007f3343426038 R14: 00007f3343425fa0 R15: 00007ffdafef7578 [ 1238.984934][T13747] [ 1239.065631][T13747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1239.117883][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.147438][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.264234][T13747] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1239.270868][T13747] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1239.300770][T13747] vhci_hcd vhci_hcd.0: Device attached [ 1239.460942][T13753] vhci_hcd: connection closed [ 1239.462660][ T7675] vhci_hcd: stop threads [ 1239.562686][ T6245] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 1239.606983][ T7675] vhci_hcd: release socket [ 1239.663695][ T7675] vhci_hcd: disconnect device [ 1240.253613][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.291499][T13756] loop3: detected capacity change from 0 to 512 [ 1240.306394][T13756] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1240.328200][T13756] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1240.387975][T13756] EXT4-fs (loop3): 1 truncate cleaned up [ 1240.425362][T13756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1240.540259][T13761] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2058'. [ 1241.580280][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.644538][T13751] loop1: detected capacity change from 0 to 40427 [ 1241.713908][T13751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1241.964559][T13751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1242.174866][T13784] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1242.320527][T13784] syz.1.2055: attempt to access beyond end of device [ 1242.320527][T13784] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1242.868550][ T5771] syz-executor: attempt to access beyond end of device [ 1242.868550][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1244.278237][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1244.288177][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1246.072942][ T6245] vhci_hcd: vhci_device speed not set [ 1246.426529][T13808] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2067'. [ 1247.752894][T10151] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1247.819920][T13820] FAULT_INJECTION: forcing a failure. [ 1247.819920][T13820] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.846005][T13820] CPU: 1 PID: 13820 Comm: syz.1.2066 Not tainted syzkaller #0 [ 1247.853570][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1247.863684][T13820] Call Trace: [ 1247.867007][T13820] [ 1247.869982][T13820] dump_stack_lvl+0x18c/0x250 [ 1247.874731][T13820] ? show_regs_print_info+0x20/0x20 [ 1247.879993][T13820] ? load_image+0x420/0x420 [ 1247.884553][T13820] ? __might_sleep+0xe0/0xe0 [ 1247.889201][T13820] ? __lock_acquire+0x7d80/0x7d80 [ 1247.894288][T13820] should_fail_ex+0x394/0x4c0 [ 1247.899027][T13820] should_failslab+0x9/0x20 [ 1247.903576][T13820] slab_pre_alloc_hook+0x59/0x300 [ 1247.908639][T13820] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1247.914408][T13820] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1247.920161][T13820] __kmem_cache_alloc_node+0x53/0x250 [ 1247.925582][T13820] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1247.931342][T13820] __kmalloc+0xa7/0x240 [ 1247.935544][T13820] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1247.941140][T13820] ? tomoyo_domain+0xd6/0x120 [ 1247.945866][T13820] tomoyo_path_number_perm+0x248/0x5e0 [ 1247.951359][T13820] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1247.957029][T13820] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1247.962555][T13820] ? __fget_files+0x28/0x460 [ 1247.967191][T13820] security_file_ioctl+0x70/0xa0 [ 1247.972166][T13820] __se_sys_ioctl+0x48/0x170 [ 1247.976793][T13820] do_syscall_64+0x55/0xb0 [ 1247.981238][T13820] ? clear_bhb_loop+0x40/0x90 [ 1247.985948][T13820] ? clear_bhb_loop+0x40/0x90 [ 1247.990664][T13820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.996595][T13820] RIP: 0033:0x7fd066f9e159 [ 1248.001045][T13820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1248.020689][T13820] RSP: 002b:00007fd067ed1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.029137][T13820] RAX: ffffffffffffffda RBX: 00007fd067225fa0 RCX: 00007fd066f9e159 [ 1248.037140][T13820] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000003 [ 1248.045145][T13820] RBP: 00007fd067035024 R08: 0000000000000000 R09: 0000000000000000 [ 1248.053145][T13820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.061147][T13820] R13: 00007fd067226038 R14: 00007fd067225fa0 R15: 00007ffd63cf0c08 [ 1248.069165][T13820] [ 1248.110367][T13820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1248.129233][T13824] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1248.135853][T13824] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1248.152684][T10151] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.165560][T10151] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1248.175383][T13824] vhci_hcd vhci_hcd.0: Device attached [ 1248.185874][T10151] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1248.196641][T13825] vhci_hcd: connection closed [ 1248.202780][ T7672] vhci_hcd: stop threads [ 1248.211290][T10151] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1248.218353][ T7672] vhci_hcd: release socket [ 1248.221728][T10151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.229204][ T7672] vhci_hcd: disconnect device [ 1248.366968][T13832] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1249.400704][T13606] Bluetooth: hci0: command 0x0c1a tx timeout [ 1251.138585][T10151] usb 1-1: can't set config #1, error -71 [ 1251.153955][T10151] usb 1-1: USB disconnect, device number 7 [ 1252.013703][T13841] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2076'. [ 1254.107135][T13857] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1258.083324][T13876] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2088'. [ 1262.772027][T13907] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2095'. [ 1263.565679][T13914] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2098'. [ 1263.673159][T13915] loop2: detected capacity change from 0 to 1024 [ 1263.703871][T13915] EXT4-fs: Ignoring removed bh option [ 1263.857468][T13915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1264.097227][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.186346][T10151] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1264.210744][T13929] syzkaller0: entered promiscuous mode [ 1264.217944][T13929] syzkaller0: entered allmulticast mode [ 1264.386598][T10151] usb 4-1: Using ep0 maxpacket: 32 [ 1264.404741][T10151] usb 4-1: config 0 has no interfaces? [ 1264.418381][T10151] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1264.428225][T10151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.462541][T10151] usb 4-1: config 0 descriptor?? [ 1264.709981][T13936] overlayfs: overlapping lowerdir path [ 1264.805171][T13315] usb 4-1: USB disconnect, device number 5 [ 1268.546873][T13978] netlink: 'syz.3.2119': attribute type 10 has an invalid length. [ 1268.577151][T13978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2119'. [ 1268.599101][T13978] dummy0: entered promiscuous mode [ 1268.603099][ T28] audit: type=1326 audit(1788332510.441:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b659e159 code=0x7ffc0000 [ 1268.629778][T13978] bridge0: port 3(dummy0) entered blocking state [ 1268.666805][ T28] audit: type=1326 audit(1788332510.441:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b659e159 code=0x7ffc0000 [ 1268.673267][T13978] bridge0: port 3(dummy0) entered disabled state [ 1268.703786][T13983] process 'syz.0.2118' launched './file2' with NULL argv: empty string added [ 1268.741788][ T28] audit: type=1326 audit(1788332510.541:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f29b659e159 code=0x7ffc0000 [ 1268.802710][T13978] dummy0: entered allmulticast mode [ 1268.812569][T13978] bridge0: port 3(dummy0) entered blocking state [ 1268.819522][T13978] bridge0: port 3(dummy0) entered forwarding state [ 1268.863634][ T28] audit: type=1326 audit(1788332510.551:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b659e159 code=0x7ffc0000 [ 1268.901765][T13989] bonding: unable to delete non-existent b [ 1268.908538][ T28] audit: type=1326 audit(1788332510.551:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b659e159 code=0x7ffc0000 [ 1269.020641][ T28] audit: type=1326 audit(1788332510.551:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f29b659e159 code=0x7ffc0000 [ 1269.989368][T14006] FAULT_INJECTION: forcing a failure. [ 1269.989368][T14006] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.039812][T14006] CPU: 1 PID: 14006 Comm: syz.1.2128 Not tainted syzkaller #0 [ 1270.047382][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1270.057503][T14006] Call Trace: [ 1270.060827][T14006] [ 1270.063837][T14006] dump_stack_lvl+0x18c/0x250 [ 1270.068588][T14006] ? show_regs_print_info+0x20/0x20 [ 1270.073868][T14006] ? load_image+0x420/0x420 [ 1270.078443][T14006] ? __might_sleep+0xe0/0xe0 [ 1270.083100][T14006] ? __lock_acquire+0x7d80/0x7d80 [ 1270.088234][T14006] should_fail_ex+0x394/0x4c0 [ 1270.092981][T14006] should_failslab+0x9/0x20 [ 1270.097559][T14006] slab_pre_alloc_hook+0x59/0x300 [ 1270.102681][T14006] ? assoc_array_insert+0x445/0x3080 [ 1270.108030][T14006] __kmem_cache_alloc_node+0x53/0x250 [ 1270.113459][T14006] ? assoc_array_insert+0x445/0x3080 [ 1270.118784][T14006] kmalloc_trace+0x2a/0xe0 [ 1270.123248][T14006] assoc_array_insert+0x445/0x3080 [ 1270.128401][T14006] ? key_set_index_key+0x385/0x550 [ 1270.133557][T14006] ? __key_link_lock+0x9b/0xb0 [ 1270.138370][T14006] ? __asan_memcpy+0x40/0x70 [ 1270.143009][T14006] ? mutex_lock_nested+0x20/0x20 [ 1270.148089][T14006] ? down_read_killable+0x340/0x340 [ 1270.153333][T14006] __key_link_begin+0xd6/0x1e0 [ 1270.158148][T14006] __key_create_or_update+0x44b/0xa60 [ 1270.163582][T14006] ? key_validate+0xf0/0xf0 [ 1270.168137][T14006] ? key_create_or_update+0x60/0x60 [ 1270.173374][T14006] ? bpf_lsm_key_permission+0x9/0x10 [ 1270.178734][T14006] ? lookup_user_key+0xb66/0x1140 [ 1270.183816][T14006] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 1270.189846][T14006] key_create_or_update+0x42/0x60 [ 1270.194914][T14006] __se_sys_add_key+0x34f/0x410 [ 1270.199805][T14006] ? __x64_sys_add_key+0xc0/0xc0 [ 1270.204783][T14006] ? lockdep_hardirqs_on+0x98/0x150 [ 1270.210027][T14006] ? __x64_sys_add_key+0x20/0xc0 [ 1270.215013][T14006] do_syscall_64+0x55/0xb0 [ 1270.219466][T14006] ? clear_bhb_loop+0x40/0x90 [ 1270.224185][T14006] ? clear_bhb_loop+0x40/0x90 [ 1270.228918][T14006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1270.234881][T14006] RIP: 0033:0x7fd066f9e159 [ 1270.239328][T14006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.258971][T14006] RSP: 002b:00007fd067ed1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1270.267445][T14006] RAX: ffffffffffffffda RBX: 00007fd067225fa0 RCX: 00007fd066f9e159 [ 1270.275449][T14006] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 1270.283448][T14006] RBP: 00007fd067035024 R08: fffffffffffffffc R09: 0000000000000000 [ 1270.291451][T14006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.299487][T14006] R13: 00007fd067226038 R14: 00007fd067225fa0 R15: 00007ffd63cf0c08 [ 1270.307503][T14006] [ 1270.584361][T14015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1270.669662][T14017] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 1270.755039][T14022] binder: 14021:14022 unknown command 0 [ 1270.760880][T14022] binder: 14021:14022 ioctl c0306201 2000000004c0 returned -22 [ 1270.915607][ T7674] Bluetooth: hci4: Frame reassembly failed (-84) [ 1271.378443][T14044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2145'. [ 1271.513220][T14046] autofs4:pid:14046:autofs_fill_super: called with bogus options [ 1271.731317][T14054] binder: 14053:14054 unknown command 0 [ 1271.737426][T14054] binder: 14053:14054 ioctl c0306201 2000000004c0 returned -22 [ 1272.171667][ T28] audit: type=1800 audit(1788332514.011:35): pid=14067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2153" name="idVendor" dev="configfs" ino=40704 res=0 errno=0 [ 1272.215399][ T28] audit: type=1800 audit(1788332514.041:36): pid=14067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2153" name="idProduct" dev="configfs" ino=40705 res=0 errno=0 [ 1272.952511][T13606] Bluetooth: hci4: command 0x1003 tx timeout [ 1273.119186][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1273.447381][T14083] binder: 14082:14083 unknown command 0 [ 1273.483875][T14083] binder: 14082:14083 ioctl c0306201 2000000004c0 returned -22 [ 1273.810504][T14090] 9pnet_virtio: no channels available for device syz [ 1273.934747][T14090] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2163'. [ 1273.977448][T14090] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2163'. [ 1274.247551][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 1274.443943][T13315] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1274.675715][T13315] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1274.713612][T13315] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1274.748149][T13315] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1274.762053][T14114] Cannot find set identified by id 0 to match [ 1274.769691][T13315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.812024][T14099] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1274.849182][T13315] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1275.108405][T14116] binder: 14115:14116 unknown command 0 [ 1275.215938][T14116] binder: 14115:14116 ioctl c0306201 2000000004c0 returned -22 [ 1275.692184][ T7695] usb 2-1: USB disconnect, device number 13 [ 1275.800276][T14123] syz_tun: entered allmulticast mode [ 1275.840414][T14122] syz_tun: left allmulticast mode [ 1276.443930][T14136] binder: 14135:14136 unknown command 0 [ 1276.460319][T14136] binder: 14135:14136 ioctl c0306201 2000000004c0 returned -22 [ 1276.623882][T14143] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1278.251779][T14147] ================================================================== [ 1278.251796][T14147] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0 [ 1278.251941][T14147] Write of size 4 at addr ffffc90003e31fb4 by task syz.2.2183/14147 [ 1278.251962][T14147] [ 1278.252003][T14147] CPU: 0 PID: 14147 Comm: syz.2.2183 Not tainted syzkaller #0 [ 1278.252026][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1278.252039][T14147] Call Trace: [ 1278.252048][T14147] [ 1278.252057][T14147] dump_stack_lvl+0x18c/0x250 [ 1278.252084][T14147] ? sys_imageblit+0x1bac/0x25d0 [ 1278.252106][T14147] ? show_regs_print_info+0x20/0x20 [ 1278.252132][T14147] ? load_image+0x420/0x420 [ 1278.252159][T14147] print_report+0xa8/0x210 [ 1278.252189][T14147] ? sys_imageblit+0x1bac/0x25d0 [ 1278.252208][T14147] kasan_report+0x117/0x150 [ 1278.252237][T14147] ? sys_imageblit+0x1bac/0x25d0 [ 1278.252261][T14147] sys_imageblit+0x1bac/0x25d0 [ 1278.252290][T14147] ? sys_copyarea+0x2530/0x2530 [ 1278.252314][T14147] ? try_to_wake_up+0x6c3/0x10e0 [ 1278.252340][T14147] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 1278.252389][T14147] cw_putcs+0x15f3/0x18a0 [ 1278.252439][T14147] ? cw_clear+0x250/0x250 [ 1278.252470][T14147] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 1278.252499][T14147] ? fb_get_color_depth+0x162/0x280 [ 1278.252526][T14147] fbcon_putcs+0x35c/0x520 [ 1278.252557][T14147] ? cw_clear+0x250/0x250 [ 1278.252587][T14147] do_update_region+0x4e9/0x640 [ 1278.252624][T14147] ? __asan_memcpy+0x40/0x70 [ 1278.252659][T14147] ? hide_cursor+0x320/0x320 [ 1278.252688][T14147] redraw_screen+0xa30/0x1000 [ 1278.252713][T14147] ? _raw_spin_unlock+0x40/0x40 [ 1278.252738][T14147] ? slab_free_freelist_hook+0x130/0x1a0 [ 1278.252761][T14147] ? clear_buffer_attributes+0x320/0x320 [ 1278.252790][T14147] ? tty_do_resize+0xe1/0x120 [ 1278.252818][T14147] vc_do_resize+0x1256/0x17f0 [ 1278.252858][T14147] ? vc_resize+0x50/0x50 [ 1278.252881][T14147] ? __mod_lruvec_page_state+0xa5/0x410 [ 1278.252908][T14147] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1278.252937][T14147] fbcon_do_set_font+0xb5c/0x1ae0 [ 1278.252986][T14147] ? fbcon_blank+0xb40/0xb40 [ 1278.253014][T14147] con_font_op+0xc3c/0xf60 [ 1278.253046][T14147] ? reset_palette+0xdd0/0xdd0 [ 1278.253073][T14147] ? lock_chain_count+0x20/0x20 [ 1278.253101][T14147] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1278.253128][T14147] ? lockdep_hardirqs_on+0x98/0x150 [ 1278.253159][T14147] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1278.253189][T14147] ? vt_ioctl+0x171d/0x1f20 [ 1278.253222][T14147] vt_ioctl+0x1a21/0x1f20 [ 1278.253255][T14147] ? __vt_event_wait+0x260/0x260 [ 1278.253292][T14147] ? __fget_files+0x28/0x460 [ 1278.253324][T14147] ? tty_jobctrl_ioctl+0x378/0xba0 [ 1278.253351][T14147] tty_ioctl+0x91e/0xdc0 [ 1278.253378][T14147] ? tty_get_icount+0xb0/0xb0 [ 1278.253404][T14147] __se_sys_ioctl+0xfd/0x170 [ 1278.253434][T14147] do_syscall_64+0x55/0xb0 [ 1278.253458][T14147] ? clear_bhb_loop+0x40/0x90 [ 1278.253484][T14147] ? clear_bhb_loop+0x40/0x90 [ 1278.253509][T14147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1278.253535][T14147] RIP: 0033:0x7ff56ef9e159 [ 1278.253555][T14147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.253574][T14147] RSP: 002b:00007ff56fe88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.253599][T14147] RAX: ffffffffffffffda RBX: 00007ff56f225fa0 RCX: 00007ff56ef9e159 [ 1278.253616][T14147] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1278.253630][T14147] RBP: 00007ff56f035024 R08: 0000000000000000 R09: 0000000000000000 [ 1278.253645][T14147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.253659][T14147] R13: 00007ff56f226038 R14: 00007ff56f225fa0 R15: 00007ffd6bf32f28 [ 1278.253683][T14147] [ 1278.253691][T14147] [ 1278.253696][T14147] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003e32000 allocated at drm_gem_shmem_vmap+0x3c4/0x650 [ 1278.253737][T14147] Memory state around the buggy address: [ 1278.253750][T14147] ffffc90003e31e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1278.253764][T14147] ffffc90003e31f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1278.253779][T14147] >ffffc90003e31f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1278.253790][T14147] ^ [ 1278.253802][T14147] ffffc90003e32000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1278.253816][T14147] ffffc90003e32080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1278.253827][T14147] ================================================================== [ 1278.256026][T14147] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1278.256040][T14147] CPU: 0 PID: 14147 Comm: syz.2.2183 Not tainted syzkaller #0 [ 1278.256063][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1278.256075][T14147] Call Trace: [ 1278.256083][T14147] [ 1278.256091][T14147] dump_stack_lvl+0x18c/0x250 [ 1278.256122][T14147] ? show_regs_print_info+0x20/0x20 [ 1278.256148][T14147] ? load_image+0x420/0x420 [ 1278.256175][T14147] panic+0x2ca/0x720 [ 1278.256208][T14147] ? bpf_jit_dump+0xd0/0xd0 [ 1278.256240][T14147] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1278.256262][T14147] ? _raw_spin_unlock+0x40/0x40 [ 1278.256280][T14147] ? print_memory_metadata+0x314/0x400 [ 1278.256305][T14147] ? sys_imageblit+0x1bac/0x25d0 [ 1278.256324][T14147] check_panic_on_warn+0x84/0xa0 [ 1278.256351][T14147] ? sys_imageblit+0x1bac/0x25d0 [ 1278.256370][T14147] end_report+0x6f/0x130 [ 1278.256400][T14147] kasan_report+0x128/0x150 [ 1278.256427][T14147] ? sys_imageblit+0x1bac/0x25d0 [ 1278.256450][T14147] sys_imageblit+0x1bac/0x25d0 [ 1278.256477][T14147] ? sys_copyarea+0x2530/0x2530 [ 1278.256500][T14147] ? try_to_wake_up+0x6c3/0x10e0 [ 1278.256525][T14147] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 1278.256555][T14147] cw_putcs+0x15f3/0x18a0 [ 1278.256603][T14147] ? cw_clear+0x250/0x250 [ 1278.256635][T14147] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 1278.256664][T14147] ? fb_get_color_depth+0x162/0x280 [ 1278.256690][T14147] fbcon_putcs+0x35c/0x520 [ 1278.256719][T14147] ? cw_clear+0x250/0x250 [ 1278.256748][T14147] do_update_region+0x4e9/0x640 [ 1278.256772][T14147] ? __asan_memcpy+0x40/0x70 [ 1278.256807][T14147] ? hide_cursor+0x320/0x320 [ 1278.256836][T14147] redraw_screen+0xa30/0x1000 [ 1278.256860][T14147] ? _raw_spin_unlock+0x40/0x40 [ 1278.256882][T14147] ? slab_free_freelist_hook+0x130/0x1a0 [ 1278.256904][T14147] ? clear_buffer_attributes+0x320/0x320 [ 1278.256931][T14147] ? tty_do_resize+0xe1/0x120 [ 1278.256958][T14147] vc_do_resize+0x1256/0x17f0 [ 1278.257006][T14147] ? vc_resize+0x50/0x50 [ 1278.257029][T14147] ? __mod_lruvec_page_state+0xa5/0x410 [ 1278.257055][T14147] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1278.257082][T14147] fbcon_do_set_font+0xb5c/0x1ae0 [ 1278.257123][T14147] ? fbcon_blank+0xb40/0xb40 [ 1278.257150][T14147] con_font_op+0xc3c/0xf60 [ 1278.257180][T14147] ? reset_palette+0xdd0/0xdd0 [ 1278.257205][T14147] ? lock_chain_count+0x20/0x20 [ 1278.257231][T14147] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1278.257258][T14147] ? lockdep_hardirqs_on+0x98/0x150 [ 1278.257288][T14147] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1278.257317][T14147] ? vt_ioctl+0x171d/0x1f20 [ 1278.257349][T14147] vt_ioctl+0x1a21/0x1f20 [ 1278.257381][T14147] ? __vt_event_wait+0x260/0x260 [ 1278.257417][T14147] ? __fget_files+0x28/0x460 [ 1278.257447][T14147] ? tty_jobctrl_ioctl+0x378/0xba0 [ 1278.257474][T14147] tty_ioctl+0x91e/0xdc0 [ 1278.257499][T14147] ? tty_get_icount+0xb0/0xb0 [ 1278.257524][T14147] __se_sys_ioctl+0xfd/0x170 [ 1278.257552][T14147] do_syscall_64+0x55/0xb0 [ 1278.257575][T14147] ? clear_bhb_loop+0x40/0x90 [ 1278.257599][T14147] ? clear_bhb_loop+0x40/0x90 [ 1278.257624][T14147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1278.257648][T14147] RIP: 0033:0x7ff56ef9e159 [ 1278.257667][T14147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.257685][T14147] RSP: 002b:00007ff56fe88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.257708][T14147] RAX: ffffffffffffffda RBX: 00007ff56f225fa0 RCX: 00007ff56ef9e159 [ 1278.257723][T14147] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1278.257738][T14147] RBP: 00007ff56f035024 R08: 0000000000000000 R09: 0000000000000000 [ 1278.257752][T14147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.257765][T14147] R13: 00007ff56f226038 R14: 00007ff56f225fa0 R15: 00007ffd6bf32f28 [ 1278.257789][T14147] [ 1278.258366][T14147] Kernel Offset: disabled