last executing test programs: 3.966613922s ago: executing program 1 (id=731): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fchdir(r0) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 3.338810674s ago: executing program 1 (id=736): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000005740)={'pimreg0\x00'}) 3.145134151s ago: executing program 1 (id=738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000001700030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c000140000000000000000014000000110001"], 0xa4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0xfffff000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) 3.094216732s ago: executing program 2 (id=740): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x7, 0x0, 0x0, @remote}, 0x10) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/llc/core\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1, 0x7f, 0x8) 2.873779922s ago: executing program 1 (id=741): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0xa}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x2c020400) 2.575712893s ago: executing program 1 (id=746): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 2.489185983s ago: executing program 3 (id=747): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.405660526s ago: executing program 5 (id=749): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000001c0)="2c1e", 0x2}, {&(0x7f0000000580)="06c391891fe7a0aa63998d25b797", 0xe}, {&(0x7f0000000780)="3ad667fc905d682b82dc7bba428fde5aa0384509182fccd7941df43e2cefc3d87ef7ea2406ea992fb1d50cd45454a72a16bf248c51685c6ae23a24", 0x3b}, {&(0x7f0000000640)="f3e2b7ba30713d3a9c2e77ca8580531b76c8a4862bde63a917ca96a6a5318b63c2ccb8face679394af45119f1c121e3a3b37d23dcf90b68220d1d5e212598f023f08edb93f23877d622d2603e68aa36b0d6b438f3cbabdf59552c07c62e699e9af", 0x61}, {&(0x7f00000006c0)="c8b2dc6c8373fb2b0b7df3b0486ba7c686189ef6899654cc87614985f0d5a343c96ec27549a7885cc08fc9334d4cab26c86f857b1983d605a18bdcbe248001ec79f8f29c058688f65c14d8e94d76", 0x4e}], 0x5) 2.227201543s ago: executing program 5 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.22548379s ago: executing program 1 (id=752): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.126838571s ago: executing program 3 (id=753): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x6, @private1, 0xc}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2}, &(0x7f0000000280)=0x8) 2.00043753s ago: executing program 2 (id=754): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x2, 0x0) 1.975127994s ago: executing program 0 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 1.955965846s ago: executing program 5 (id=756): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1.823776982s ago: executing program 5 (id=757): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab5c", 0x2, 0xe61e284085547095, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) 1.737893345s ago: executing program 2 (id=758): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) munlockall() 1.60176705s ago: executing program 0 (id=760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x1, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x9}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x3, "91"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1a, [0x1, 0xfffffffe, 0x3, 0x6, 0x1, 0x10001]}]}}}}}}}}, 0x0) 1.384478068s ago: executing program 0 (id=761): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x6, 0xfffffffe}) socket(0x26, 0x800, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x40430a) 1.210399188s ago: executing program 4 (id=763): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) read(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4002, 0x7, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r1, 0x9) 1.118263771s ago: executing program 0 (id=764): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/xt_recent/syz0\x00', 0x0, 0x0) 1.045448925s ago: executing program 3 (id=765): r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) 954.316723ms ago: executing program 4 (id=766): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000009a40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000001701000004000000010000000000000018000000000000001701000002000000000000000000000010000000000000001701000003"], 0x60, 0x14041}], 0x1, 0x8000) 908.205291ms ago: executing program 3 (id=767): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x2, @auto="d75a87e754e73f09"}) 836.541998ms ago: executing program 4 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x42040400) 811.186173ms ago: executing program 2 (id=769): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103982, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) landlock_restrict_self(0xffffffffffffffff, 0xc) 729.229041ms ago: executing program 0 (id=770): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) poll(&(0x7f0000000000)=[{r1, 0x5}], 0x1, 0x90) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 728.162751ms ago: executing program 5 (id=771): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4a, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 633.346842ms ago: executing program 4 (id=772): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10) 597.71418ms ago: executing program 3 (id=773): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000340), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0xfffffffe, 0x4) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) 491.537002ms ago: executing program 2 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4000}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 213.116368ms ago: executing program 5 (id=775): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x38fa, &(0x7f0000000200)={0x0, 0x9943, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000f4c000/0x1000)=nil, 0x1000}}) 184.008315ms ago: executing program 0 (id=776): r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01"], 0x8, 0x800) 181.987744ms ago: executing program 4 (id=777): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x34, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 137.150684ms ago: executing program 2 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESHEX], 0x1, 0x1aa, &(0x7f00000004c0)="$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") write(r0, &(0x7f00000001c0)='of', 0x8) 114.532642ms ago: executing program 3 (id=779): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) r2 = add_key$keyring(&(0x7f0000001100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 0s ago: executing program 4 (id=780): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x1, 0xc5a, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcVy9S+mYhXOqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeTEojUKpGhgNEXQI9O6QHLxocipJ6KFjaDogSkCBCgQMJjZt+KSIm3ZJCVK/nxs8js7897sezPrGZrgmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Th5Km0xYYDD6AxAMB9cWnsKydPb3X/BwAeWVe2+/9/AAAAAAAAAAAAAABgv0hRxOORYvbSapqoXnfVL3YGbt0eHxndutqhVNU8UJUvv+qnTp85+4Xnhs/18mJn+j3q77ZPxStjVy40Xpy5OTvXnp9vTzbGpzvXZibb97yHndbf7Hh1ABo3X701ef36fOP0s2c2bL499O7gY0eHzg8/feKpXtnxkdHRsfUi9f7ytQ/dkK7tRngcjCJORIpnvvuT1IqIInZ+LOr399xvdqjqxPGqE+Mjo1VHpjqt6YVy4+XegSgiGn2Vmr1jtPW5iNrAfe3D9poRi2XzywYfL7s3Ntuaa12dajcut+YWOgudmenLqdvasj+NKOJciliKiJXBu3c3EEXUIsW3j6ymq/mpH9Vx+Hw1MHj7dhR72Md7ULazMRCxVDwE52wfG4wiXo4UP3vrWFzL15nqWvO5iJfL/H7EG2W+EJHKD8bZiHe2+BzxcKpFEX9Rnv/zq2myuh70risXv9r48vT1mb6yvevKB7w/3HWleED3h0Ob8v7Y59emehTRqq74q+nD/7ADAAAAAAAAAAAAAAAAwG47FEV8MlK89B9/XI0rjmpc+pHzw38w9Kv9Y8affJ/9lGWfjYjF4t7G5B7MAwMvp8spPeCxxB9l9SjiT/L4v2++T1mnCQAAAAAAAAAAAAAAAAAAYC8V8eNI8fzbx9JS9M8p3pm+0bjSujrVnRW2N/dvb870tbW1tUbqZjPnRM7FnEs5l3Ou5Iwi18/ZzDmRczHnUs7lnCs540Cun7OZcyLnYs6lnMs5V3JGLdfP2cw5kXMx51LO5ZwrOWOfzN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAoKaKIX0SKb319NUWKiGbERHRzefBBtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2mIr4XKRp/2LyzrhYRqfq361j57Ww0D5b58WgOl/lCNC/kbFVZa37zAbSfnRlIRfwoUgzW37xzwvP5H+i+uvMxiDe+sf7qU7VuHuhtHHp38LGjR84Pj37mye2W01YNOH6xM33rdmN8ZHR0rG91Lb/7x/vWDeX3LXan60TE/Guvv9qamvqbn0ZUC+25vObeF8qPwAev9TAupNpHpacWqoWo7YtmPJi+b1B/UBco9lR5/38nUvzu2//Zu+F37//1+JXuqzt3+Pj5n67f/5/fvKN7vP/XNtfL9//ynr7V/f/xvnXP559GBmoR9YWbswNHI+rzr71+onOzdaN9oz199uTJLw4Pf/HMyYGDEfXrnal239KuHC4AAAAAAAAAAAAAAACA+ycV8aVI0frRampExO1qvNbQ+eGnTzx1IA5U4602jNt+ZezKhcaLMzdn59rz8+3Jxvh059rMZPte365eDfcaHxndk868r0N73P5D9RdnZl+b69z4o4Uttx+uX7g6vzDXurb15jgURUSzf83xqsHjI6NVo6c6remq6uUtB9N/cAOpiP+KFNfONtJn87o8/n/zCP8N4/8XN+9oF8f/f+bw+vi/j/UVLd8zpSJ+Hil+5y+fjM9W7Twcdx2zXO7vIsXxc5/O5eJgWa7Xhu5zBbojA8uyP40U//SLjWV74yEfXy976gMd3IdAef6PRIrv/fl34jfzuo3Pf9j6/B/evKM9ev7DE33rDq8/r6A9N7/jrpPP/4lI8cLjb8ZvVWv+/z2f/9F79saxbuH153Ps0fn/9b51Q/l9f3u3Og8AAAAAAAAAAPAQG0hF/H2k+MFoLT2X193L3/9Nbt7RHv391yf61k1u+Pu/vVvY8UEFAAAAgH1iIBXx40hxY+HNO2OoN47/7hv/+Xvr4z9H0qat1e/5fq16bsBu/v6v31B+34mddxsAAAAAAAAAAAAAAAAAAAD2lZSKeC7Ppz5Rjeef3HY+9eVI8dL/PJPLpaNlud488EPV9/qlmekTF6amZuqx0Lo61W6Mzbautcu6T0SK1b/9dK77pWp+9d5889053tfnYp+LFKP/0CvbnYu9Nzf5E+tlT5VlPxYp/vsfN5bNU1PnuaOrsqfLsn8dKb72L72ya2vl1l7Zo+tlz5RlvxMpfvi1Rm+/h8v99p6P+on1ss9emyl2/6QAAAAAAAAAAAAAAAAAAADwkTOQivizSPG/N5fujOXP8/8P9L2svPGNvvn+N7ldzfM/VM3/v93yh5n/v3quwOJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mFEW8HilmL62m5cHydVf9Ymf61u3xkdGtqx1KVc0DVfnyq37q9JmzX3hu+Fwv37v+bvtkvDJ25ULjxZmbs3Pt+fn2ZGN8unNtZrJ9z3vYaf3NjlcHoHHz1VuT16/PN04/e2bD5ttD7w4+dnTo/PDTJ55ajIiy7PjI6OhYX5nawId+97ukbdYfjCL+KlI8892fpB8MRhSx82PxPp+dvXao6sTxqhPjI6NVR6Y6remFcuPl3oEoIhp9lZq9Y5TP216eix1pRpSfl6Js8PGye2OzrbnW1al243JrbqGz0JmZvpy6rS3704gizqWIpYhYGbx7dwNRxKuR4ttHVtO/DkYc6B2Hz18a+8rJ09u3o9jDPt6Dsp2NgYil4iE4Z/vYYBTxz5HiZ28di38bjKhF9ys+F/Fymd+PeCO65zuVH4yzEe9s8Tni4VSLIv6vPP/nV9Nbg+X1oHddufjVxpenr8/0le1dVx76+8P9tM+vTfUo4ofVFX81/bv/rgEAAAAAAAAAAAAAAAD2kSJ+I1I8//axVI0PvjOmuDN9o3GldXWqO6yvN/avN2Z6bW1trZG62cw5kXMx51LO5ZwrOaPI9XM2y6yvrU3k14s5l3Iu51zJGQdy/ZzNnBM5F3Mu5VzOuZIzarl+zmbOiZyLOZdyLudcyRn7ZOweAAAAAAAAAAAAAAAAAADwaCmqf1J86+uraW2wO7/0RHRz2Xygj7xfBgAA//8XrPrB") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): apacity change from 0 to 32768 [ 113.172976][ T6221] xfs: Deprecated parameter 'noikeep' [ 113.172996][ T6221] XFS: noikeep mount option is deprecated. [ 113.249037][ T6221] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.325963][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.388826][ T6261] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 113.510941][ T6221] XFS (loop5): Ending clean mount [ 113.558281][ T6221] XFS (loop5): Quotacheck needed: Please wait. [ 113.753139][ T6221] XFS (loop5): Quotacheck: Done. [ 113.819514][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'. [ 113.819544][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'. [ 113.819960][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'. [ 113.819982][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'. [ 113.820140][ T6278] Zero length message leads to an empty skb [ 113.844072][ T5907] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.883164][ T5631] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.999338][ T5907] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 114.000409][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.033018][ T5907] usb 2-1: config 0 descriptor?? [ 114.059126][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 114.459941][ T5907] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 114.460363][ T5907] [drm:udl_init] *ERROR* Selecting channel failed [ 114.518078][ T5907] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 114.518107][ T5907] [drm] Initialized udl on minor 1 [ 114.519598][ T5907] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 114.520036][ T5907] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 114.523085][ T2246] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 114.570585][ T2246] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 114.573377][ T2246] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 114.590441][ T5907] usb 2-1: USB disconnect, device number 2 [ 114.726304][ T2246] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.847361][ T6312] bridge1: entered promiscuous mode [ 114.847395][ T6312] bridge1: entered allmulticast mode [ 114.878251][ T2246] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 114.880492][ T2246] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.880525][ T2246] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.880554][ T2246] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.880590][ T2246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.881214][ T6312] team0: Port device bridge1 added [ 114.892396][ T6315] bridge0: port 3(team0) entered blocking state [ 114.894450][ T6315] bridge0: port 3(team0) entered disabled state [ 114.894686][ T6315] team0: entered allmulticast mode [ 114.894705][ T6315] team_slave_0: entered allmulticast mode [ 114.894734][ T6315] team_slave_1: entered allmulticast mode [ 114.913129][ T6315] team0: entered promiscuous mode [ 114.913154][ T6315] team_slave_0: entered promiscuous mode [ 114.913346][ T6315] team_slave_1: entered promiscuous mode [ 114.920927][ T6315] bridge0: port 3(team0) entered blocking state [ 114.921062][ T6315] bridge0: port 3(team0) entered forwarding state [ 115.002508][ T2246] usb 4-1: config 0 descriptor?? [ 115.264484][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.271112][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.451561][ T6333] device-mapper: ioctl: device name cannot contain '/' [ 115.489719][ T2246] hid-multitouch 0003:0EEF:72C4.0003: collection stack underflow [ 115.489750][ T2246] hid-multitouch 0003:0EEF:72C4.0003: item 0 4 0 12 parsing failed [ 115.492318][ T2246] hid-multitouch 0003:0EEF:72C4.0003: probe with driver hid-multitouch failed with error -22 [ 115.676603][ T6339] loop1: detected capacity change from 0 to 256 [ 115.795190][ T30] usb 4-1: USB disconnect, device number 4 [ 116.469879][ T6363] loop1: detected capacity change from 0 to 1024 [ 116.500774][ T6363] EXT4-fs: Ignoring removed bh option [ 116.500858][ T6363] EXT4-fs: Ignoring removed bh option [ 116.534850][ T6363] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 116.549533][ T6368] loop2: detected capacity change from 0 to 16 [ 116.579618][ T6363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.620003][ T6368] erofs (device loop2): bogus i_mode (0) @ nid 0 [ 116.753705][ T6374] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 7: comm syz.1.190: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 116.812411][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 116.829476][ T6363] overlayfs: cleanup of 'work/#5' failed (-30) [ 116.952880][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.999030][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.086895][ T6383] FAULT_INJECTION: forcing a failure. [ 117.086895][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.086934][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.2.196 Not tainted syzkaller #0 PREEMPT(full) [ 117.086971][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.086986][ T6383] Call Trace: [ 117.086996][ T6383] [ 117.087007][ T6383] dump_stack_lvl+0xe8/0x150 [ 117.087048][ T6383] should_fail_ex+0x410/0x560 [ 117.087086][ T6383] _copy_from_user+0x2d/0xb0 [ 117.087122][ T6383] core_sys_select+0x671/0xb40 [ 117.087174][ T6383] ? __pfx_core_sys_select+0x10/0x10 [ 117.087236][ T6383] ? __pfx_set_user_sigmask+0x10/0x10 [ 117.087273][ T6383] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.087321][ T6383] __se_sys_pselect6+0x267/0x320 [ 117.087362][ T6383] ? __pfx___se_sys_pselect6+0x10/0x10 [ 117.087405][ T6383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.087435][ T6383] ? __x64_sys_pselect6+0x21/0xf0 [ 117.087472][ T6383] do_syscall_64+0x166/0x520 [ 117.087507][ T6383] ? trace_irq_disable+0x3b/0x140 [ 117.087534][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.087566][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.087591][ T6383] RIP: 0033:0x7fdff459e159 [ 117.087613][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.087633][ T6383] RSP: 002b:00007fdff5452028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 117.087659][ T6383] RAX: ffffffffffffffda RBX: 00007fdff4825fa0 RCX: 00007fdff459e159 [ 117.087678][ T6383] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000040 [ 117.087695][ T6383] RBP: 00007fdff463506b R08: 0000200000000340 R09: 00002000000003c0 [ 117.087714][ T6383] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 117.087731][ T6383] R13: 00007fdff4826038 R14: 00007fdff4825fa0 R15: 00007ffd3ede1308 [ 117.087770][ T6383] [ 117.180041][ T30] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 117.184074][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.196443][ T30] usb 5-1: config 0 descriptor?? [ 117.486214][ T30] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 117.716889][ T30] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 117.716920][ T30] [drm] Initialized udl on minor 1 [ 118.233102][ T6406] loop5: detected capacity change from 0 to 4096 [ 118.269990][ T6406] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 118.392781][ T6385] loop0: detected capacity change from 0 to 32768 [ 118.550780][ T6406] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 118.694808][ T6385] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.763374][ T31] audit: type=1800 audit(1790897072.550:5): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.207" name="file1" dev="loop5" ino=34 res=0 errno=0 [ 118.956426][ T6385] syz.0.197 (6385) used greatest stack depth: 19144 bytes left [ 118.985521][ T5631] ntfs3(loop5): ino=1a, ntfs_sync_fs failed, -22. [ 119.021164][ T6417] loop1: detected capacity change from 0 to 1024 [ 119.079758][ T6417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.213848][ T5628] ocfs2: Unmounting device (7,0) on (node local) [ 119.294538][ T6425] loop2: detected capacity change from 0 to 136 [ 119.299645][ T6425] iso9660: Unknown parameter 'õ100000000000007577230765ÿÿ±3eÔ [ 119.299645][ T6425] †”çãü^úH'‚@㟅ž.X&ÇuQ‚x' [ 119.700382][ T6428] loop5: detected capacity change from 0 to 4096 [ 119.793997][ T6428] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 119.862003][ T6428] ntfs3(loop5): Failed to load $Extend (-22). [ 119.862030][ T6428] ntfs3(loop5): Failed to initialize $Extend. [ 119.872213][ T2246] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.905919][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.041596][ T2246] usb 3-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 120.045237][ T2246] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 120.045323][ T2246] usb 3-1: config 0 has no interface number 0 [ 120.045355][ T2246] usb 3-1: too many endpoints for config 0 interface 16 altsetting 5: 66, using maximum allowed: 30 [ 120.045402][ T2246] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.045430][ T2246] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.045455][ T2246] usb 3-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 120.045485][ T2246] usb 3-1: config 0 interface 16 has no altsetting 0 [ 120.045519][ T2246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.134163][ T2246] usb 3-1: config 0 descriptor?? [ 120.162121][ T31] audit: type=1800 audit(1790897073.950:6): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.216" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 120.535220][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 120.535246][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 120.535441][ T6450] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 120.584542][ T2246] hid_parser_main: 2 callbacks suppressed [ 120.584568][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584593][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584615][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584638][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584660][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584683][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584706][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584728][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584750][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584772][ T2246] saitek 0003:0738:1709.0004: unknown main item tag 0x0 [ 120.584813][ T2246] saitek 0003:0738:1709.0004: unbalanced collection at end of report description [ 120.674429][ T2246] saitek 0003:0738:1709.0004: parse failed [ 120.674546][ T2246] saitek 0003:0738:1709.0004: probe with driver saitek failed with error -22 [ 120.788503][ T2246] usb 3-1: USB disconnect, device number 5 [ 120.865464][ T5348] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.016215][ T5348] usb 1-1: Using ep0 maxpacket: 32 [ 121.017212][ T5348] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.020054][ T5348] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.024691][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.024717][ T5348] usb 1-1: Product: syz [ 121.024735][ T5348] usb 1-1: Manufacturer: syz [ 121.024752][ T5348] usb 1-1: SerialNumber: syz [ 121.036911][ T5348] usb 1-1: config 0 descriptor?? [ 121.038809][ T6453] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 121.042767][ T5348] hub 1-1:0.0: bad descriptor, ignoring hub [ 121.042793][ T5348] hub 1-1:0.0: probe with driver hub failed with error -5 [ 121.387490][ T5348] usb 1-1: USB disconnect, device number 4 [ 121.990536][ T6493] loop3: detected capacity change from 0 to 64 [ 122.022133][ T6493] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop3 [ 122.112606][ T6495] FAULT_INJECTION: forcing a failure. [ 122.112606][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 122.112644][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.0.240 Not tainted syzkaller #0 PREEMPT(full) [ 122.112672][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.112687][ T6495] Call Trace: [ 122.112697][ T6495] [ 122.112708][ T6495] dump_stack_lvl+0xe8/0x150 [ 122.112749][ T6495] should_fail_ex+0x410/0x560 [ 122.112786][ T6495] should_failslab+0xa8/0x100 [ 122.112826][ T6495] __kmalloc_cache_noprof+0xa3/0x600 [ 122.112857][ T6495] ? __se_sys_mincore+0x10a/0x660 [ 122.112884][ T6495] ? __se_sys_mincore+0x10a/0x660 [ 122.112913][ T6495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.112949][ T6495] __se_sys_mincore+0x10a/0x660 [ 122.112986][ T6495] do_syscall_64+0x166/0x520 [ 122.113022][ T6495] ? trace_irq_disable+0x3b/0x140 [ 122.113050][ T6495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.113082][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.113106][ T6495] RIP: 0033:0x7f58f959e159 [ 122.113129][ T6495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.113149][ T6495] RSP: 002b:00007f58fa54c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 122.113175][ T6495] RAX: ffffffffffffffda RBX: 00007f58f9825fa0 RCX: 00007f58f959e159 [ 122.113193][ T6495] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000000ef000 [ 122.113209][ T6495] RBP: 00007f58f963506b R08: 0000000000000000 R09: 0000000000000000 [ 122.113225][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.113240][ T6495] R13: 00007f58f9826038 R14: 00007f58f9825fa0 R15: 00007ffdc660e4a8 [ 122.113279][ T6495] [ 122.372858][ T6501] process 'syz.0.242' launched './file0' with NULL argv: empty string added [ 122.374789][ T6501] Invalid argument reading file caps for ./file0 [ 122.691412][ T6509] netlink: 48 bytes leftover after parsing attributes in process `syz.0.246'. [ 122.735701][ T30] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 122.736141][ T30] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 122.754234][ T5753] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.754975][ T5753] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.755167][ T5753] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 122.761343][ T30] usb 5-1: USB disconnect, device number 6 [ 123.038395][ T6523] syz_tun: entered allmulticast mode [ 123.054030][ T6523] syz_tun: left allmulticast mode [ 123.146310][ T6499] loop5: detected capacity change from 0 to 32768 [ 123.187565][ T6499] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.303092][ T6499] XFS (loop5): Ending clean mount [ 123.330120][ T6499] XFS (loop5): User initiated shutdown received. [ 123.331416][ T6499] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 123.331467][ T6499] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 123.382573][ T6540] loop2: detected capacity change from 0 to 1024 [ 123.441908][ T5631] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.481689][ T6540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.050438][ T6556] bridge1: entered promiscuous mode [ 124.050467][ T6556] bridge1: entered allmulticast mode [ 124.062939][ T6556] team0: Port device bridge1 added [ 124.097707][ T6556] bridge0: port 1(team0) entered blocking state [ 124.097808][ T6556] bridge0: port 1(team0) entered disabled state [ 124.097956][ T6556] team0: entered allmulticast mode [ 124.097971][ T6556] team_slave_0: entered allmulticast mode [ 124.098000][ T6556] team_slave_1: entered allmulticast mode [ 124.115158][ T6556] team0: entered promiscuous mode [ 124.115182][ T6556] team_slave_0: entered promiscuous mode [ 124.117570][ T6556] team_slave_1: entered promiscuous mode [ 124.122107][ T6556] bridge0: port 1(team0) entered blocking state [ 124.122204][ T6556] bridge0: port 1(team0) entered forwarding state [ 124.348896][ T5753] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.413750][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.585992][ T6570] ip_tables: iptables: counters copy to user failed while replacing table [ 124.783160][ T6580] bond0: invalid NS target ff00:: specified for addition [ 124.783194][ T6580] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 125.045832][ T5348] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.828912][ T1413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.925581][ T6602] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 125.970226][ T6607] ip_tables: iptables: counters copy to user failed while replacing table [ 126.049847][ T6609] bond0: option slaves: interface -bond_slave_0 does not exist! [ 126.248803][ T6620] binder: 6616:6620 ioctl c0306201 200000000080 returned -14 [ 126.319385][ T6621] loop3: detected capacity change from 0 to 2048 [ 126.349818][ T6621] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 126.355113][ T6621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.485501][ T5907] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 126.650572][ T5907] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.651792][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.683683][ T5907] usb 6-1: config 0 descriptor?? [ 126.708706][ T5907] cp210x 6-1:0.0: cp210x converter detected [ 126.888306][ T1431] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.888592][ T1431] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.092850][ T6655] syz_tun: entered allmulticast mode [ 127.094325][ T6655] syz_tun: left allmulticast mode [ 127.122762][ T5907] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 127.177767][ T30] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.214089][ T6657] loop4: detected capacity change from 0 to 1024 [ 127.222501][ T6657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.259170][ T6657] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c028, mo2=0102] [ 127.259323][ T6657] System zones: 0-1, 3-12 [ 127.267367][ T6657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.326363][ T5907] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 127.326398][ T5907] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 127.326614][ T30] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 127.333690][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.333716][ T30] usb 3-1: Product: syz [ 127.333733][ T30] usb 3-1: Manufacturer: syz [ 127.333750][ T30] usb 3-1: SerialNumber: syz [ 127.360604][ T5907] usb 6-1: cp210x converter now attached to ttyUSB0 [ 127.382403][ T5907] usb 6-1: USB disconnect, device number 3 [ 127.403664][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.404269][ T5907] cp210x 6-1:0.0: device disconnected [ 127.424081][ T30] usb 3-1: config 0 descriptor?? [ 127.441815][ T6664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.310'. [ 127.451736][ T2246] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.478450][ T30] hub 3-1:0.0: bad descriptor, ignoring hub [ 127.478481][ T30] hub 3-1:0.0: probe with driver hub failed with error -5 [ 127.593403][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.676476][ T30] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 127.698433][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.701042][ T30] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 127.701110][ T30] usb 3-1: media controller created [ 127.762926][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 127.762963][ T6670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.312'. [ 127.762982][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 127.772119][ T6670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.312'. [ 127.783813][ T6643] loop3: detected capacity change from 0 to 32768 [ 127.809971][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.929991][ T30] DVB: Unable to find symbol dib7000p_attach() [ 127.930012][ T30] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 127.949893][ T6643] read_mapping_page failed! [ 127.950155][ T6643] ERROR: (device loop3): txCommit: [ 127.950155][ T6643] [ 127.992796][ T6679] loop4: detected capacity change from 0 to 256 [ 128.058695][ T50] read_mapping_page failed! [ 128.058714][ T50] ERROR: (device loop3): txCommit: [ 128.058714][ T50] [ 128.058779][ T50] jfs_write_inode: jfs_commit_inode failed! [ 128.090356][ T6679] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 128.146347][ T30] rc_core: IR keymap rc-dib0700-rc5 not found [ 128.146370][ T30] Registered IR keymap rc-empty [ 128.146787][ T30] dvb-usb: could not initialize remote control. [ 128.146798][ T30] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 128.160505][ T6679] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 128.192751][ T31] audit: type=1800 audit(1790897081.950:7): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.317" name="file1" dev="loop4" ino=1048617 res=0 errno=0 [ 128.224931][ T30] usb 3-1: USB disconnect, device number 6 [ 128.305040][ T30] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 128.392908][ T6687] FAULT_INJECTION: forcing a failure. [ 128.392908][ T6687] name failslab, interval 1, probability 0, space 0, times 0 [ 128.392942][ T6687] CPU: 1 UID: 0 PID: 6687 Comm: syz.5.321 Not tainted syzkaller #0 PREEMPT(full) [ 128.392964][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.392975][ T6687] Call Trace: [ 128.392984][ T6687] [ 128.392992][ T6687] dump_stack_lvl+0xe8/0x150 [ 128.393046][ T6687] should_fail_ex+0x410/0x560 [ 128.393077][ T6687] should_failslab+0xa8/0x100 [ 128.393108][ T6687] __kmalloc_cache_noprof+0xa3/0x600 [ 128.393134][ T6687] ? smb3_init_fs_context+0xb1/0xc50 [ 128.393167][ T6687] ? smb3_init_fs_context+0xb1/0xc50 [ 128.393207][ T6687] smb3_init_fs_context+0xb1/0xc50 [ 128.393241][ T6687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.393268][ T6687] ? mutex_init_lockdep+0xdf/0x110 [ 128.393300][ T6687] alloc_fs_context+0x9a3/0xd00 [ 128.393334][ T6687] __se_sys_fsopen+0xa5/0x2c0 [ 128.393365][ T6687] do_syscall_64+0x166/0x520 [ 128.393394][ T6687] ? trace_irq_disable+0x3b/0x140 [ 128.393421][ T6687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.393448][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.393468][ T6687] RIP: 0033:0x7fac3299e159 [ 128.393488][ T6687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.393504][ T6687] RSP: 002b:00007fac3391c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 128.393527][ T6687] RAX: ffffffffffffffda RBX: 00007fac32c25fa0 RCX: 00007fac3299e159 [ 128.393543][ T6687] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 128.393556][ T6687] RBP: 00007fac32a3506b R08: 0000000000000000 R09: 0000000000000000 [ 128.393569][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.393581][ T6687] R13: 00007fac32c26038 R14: 00007fac32c25fa0 R15: 00007ffc571a31d8 [ 128.393614][ T6687] [ 129.245902][ T6711] FAULT_INJECTION: forcing a failure. [ 129.245902][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 129.245940][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.0.331 Not tainted syzkaller #0 PREEMPT(full) [ 129.245975][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.245990][ T6711] Call Trace: [ 129.246000][ T6711] [ 129.246010][ T6711] dump_stack_lvl+0xe8/0x150 [ 129.246052][ T6711] should_fail_ex+0x410/0x560 [ 129.246090][ T6711] should_failslab+0xa8/0x100 [ 129.246128][ T6711] __kmalloc_cache_noprof+0xa3/0x600 [ 129.246158][ T6711] ? nfc_allocate_device+0x129/0x560 [ 129.246194][ T6711] ? nfc_allocate_device+0x129/0x560 [ 129.246235][ T6711] ? __pfx_nci_transceive+0x10/0x10 [ 129.246262][ T6711] nfc_allocate_device+0x129/0x560 [ 129.246296][ T6711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.246325][ T6711] ? __init_swait_queue_head+0xa8/0x150 [ 129.246363][ T6711] nci_allocate_device+0x1da/0x380 [ 129.246407][ T6711] virtual_ncidev_open+0x75/0x1a0 [ 129.246444][ T6711] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 129.246477][ T6711] misc_open+0x2d5/0x350 [ 129.246506][ T6711] chrdev_open+0x4d9/0x600 [ 129.246541][ T6711] ? __pfx_chrdev_open+0x10/0x10 [ 129.246571][ T6711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.246600][ T6711] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 129.246637][ T6711] ? __pfx_chrdev_open+0x10/0x10 [ 129.246667][ T6711] do_dentry_open+0x816/0x1380 [ 129.246713][ T6711] vfs_open+0x3b/0x340 [ 129.246742][ T6711] ? path_openat+0x1428/0x1d60 [ 129.246773][ T6711] path_openat+0x1443/0x1d60 [ 129.246827][ T6711] do_file_open+0x23e/0x4a0 [ 129.246861][ T6711] ? __pfx_do_file_open+0x10/0x10 [ 129.246913][ T6711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.246942][ T6711] ? _raw_spin_unlock+0x28/0x50 [ 129.246978][ T6711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.247006][ T6711] ? alloc_fd+0x651/0x6c0 [ 129.247055][ T6711] do_sys_openat2+0x115/0x200 [ 129.247087][ T6711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.247115][ T6711] ? __se_sys_futex+0x3a8/0x450 [ 129.247151][ T6711] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.247192][ T6711] ? rcu_is_watching+0x16/0xb0 [ 129.247223][ T6711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.247257][ T6711] __x64_sys_openat+0x138/0x170 [ 129.247297][ T6711] do_syscall_64+0x166/0x520 [ 129.247331][ T6711] ? trace_irq_disable+0x3b/0x140 [ 129.247358][ T6711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.247389][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.247414][ T6711] RIP: 0033:0x7f58f959e159 [ 129.247435][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.247454][ T6711] RSP: 002b:00007f58fa54c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.247480][ T6711] RAX: ffffffffffffffda RBX: 00007f58f9825fa0 RCX: 00007f58f959e159 [ 129.247498][ T6711] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 129.247515][ T6711] RBP: 00007f58f963506b R08: 0000000000000000 R09: 0000000000000000 [ 129.247531][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.247546][ T6711] R13: 00007f58f9826038 R14: 00007f58f9825fa0 R15: 00007ffdc660e4a8 [ 129.247585][ T6711] [ 129.890382][ T6729] WARNING! power/level is deprecated; use power/control instead [ 130.528963][ T6743] loop1: detected capacity change from 0 to 1024 [ 130.714828][ T6724] loop0: detected capacity change from 0 to 131072 [ 130.721469][ T6724] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 130.721495][ T6724] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 130.721523][ T6724] F2FS-fs (loop0): Test dummy encryption mode enabled [ 130.722866][ T6724] F2FS-fs (loop0): invalid crc value [ 130.773088][ T6743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.836057][ T6724] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 130.837042][ T6724] loop0: lost filesystem error report for type 5 error -117 [ 130.877204][ T6724] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 130.882375][ T6724] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 130.882402][ T6724] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 130.882643][ T6755] loop5: detected capacity change from 0 to 2048 [ 130.882818][ T6724] F2FS-fs (loop0): Start checkpoint disabled! [ 130.899975][ T6724] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 130.907230][ T6724] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 130.907254][ T6724] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 131.010694][ T6755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.172259][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.206092][ T3389] wlan1: Trigger new scan to find an IBSS to join [ 131.207591][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 131.254748][ T6762] loop3: detected capacity change from 0 to 512 [ 131.329790][ T6762] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.350: corrupted in-inode xattr: invalid ea_ino [ 131.329830][ T6762] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.330201][ T6762] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.350: couldn't read orphan inode 15 (err -117) [ 131.330230][ T6762] loop3: lost filesystem error report for type 5 error -117 [ 131.370562][ T6762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.537299][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.353'. [ 132.032837][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.190397][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.190486][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.437746][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 132.669592][ T6796] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 132.715154][ T6789] loop1: detected capacity change from 0 to 32768 [ 132.812679][ T6789] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 132.812703][ T6789] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 132.950560][ T6789] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 132.962410][ T5876] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 132.962429][ T5876] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 133.287469][ T5348] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 133.294256][ T5876] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 331ms [ 133.310284][ T5876] gfs2: fsid=syz:syz.0: jid=0: Done [ 133.310936][ T6789] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 133.333227][ T6811] Illegal XDP return value 4291661824 on prog (id 19) dev N/A, expect packet loss! [ 133.437255][ T5348] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 133.440096][ T5348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.465196][ T5348] usb 6-1: config 0 descriptor?? [ 133.711113][ T5348] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 133.852747][ T31] audit: type=1800 audit(1790897087.640:8): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.362" name="file1" dev="loop1" ino=9378 res=0 errno=0 [ 133.963102][ T5348] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 133.963133][ T5348] [drm] Initialized udl on minor 1 [ 134.411414][ T6840] netlink: 48 bytes leftover after parsing attributes in process `syz.4.383'. [ 134.541128][ T6848] FAULT_INJECTION: forcing a failure. [ 134.541128][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [ 134.541193][ T6848] CPU: 1 UID: 0 PID: 6848 Comm: syz.4.386 Not tainted syzkaller #0 PREEMPT(full) [ 134.541220][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.541235][ T6848] Call Trace: [ 134.541244][ T6848] [ 134.541255][ T6848] dump_stack_lvl+0xe8/0x150 [ 134.541296][ T6848] should_fail_ex+0x410/0x560 [ 134.541335][ T6848] should_failslab+0xa8/0x100 [ 134.541371][ T6848] __kmalloc_cache_noprof+0xa3/0x600 [ 134.541400][ T6848] ? proc_thread_self_get_link+0xfc/0x190 [ 134.541426][ T6848] ? proc_thread_self_get_link+0xfc/0x190 [ 134.541454][ T6848] ? __task_pid_nr_ns+0x399/0x470 [ 134.541485][ T6848] proc_thread_self_get_link+0xfc/0x190 [ 134.541512][ T6848] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 134.541549][ T6848] pick_link+0x72f/0xfe0 [ 134.541599][ T6848] step_into_slowpath+0x58a/0x820 [ 134.541639][ T6848] ? __pfx_step_into_slowpath+0x10/0x10 [ 134.541676][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.541709][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.541747][ T6848] link_path_walk+0xd5e/0x1910 [ 134.541807][ T6848] path_openat+0x1c9/0x1d60 [ 134.541856][ T6848] do_file_open+0x23e/0x4a0 [ 134.541891][ T6848] ? __pfx_do_file_open+0x10/0x10 [ 134.541943][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.541972][ T6848] ? _raw_spin_unlock+0x28/0x50 [ 134.542002][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.542031][ T6848] ? alloc_fd+0x651/0x6c0 [ 134.542078][ T6848] do_sys_openat2+0x115/0x200 [ 134.542112][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.542140][ T6848] ? __se_sys_futex+0x3a8/0x450 [ 134.542176][ T6848] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.542217][ T6848] ? rcu_is_watching+0x16/0xb0 [ 134.542249][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.542283][ T6848] __x64_sys_openat+0x138/0x170 [ 134.542323][ T6848] do_syscall_64+0x166/0x520 [ 134.542358][ T6848] ? trace_irq_disable+0x3b/0x140 [ 134.542386][ T6848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.542418][ T6848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.542443][ T6848] RIP: 0033:0x7fc11355e98e [ 134.542465][ T6848] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.542484][ T6848] RSP: 002b:00007fc11444bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.542511][ T6848] RAX: ffffffffffffffda RBX: 00007fc11444c6c0 RCX: 00007fc11355e98e [ 134.542529][ T6848] RDX: 0000000000000002 RSI: 00007fc11444bf90 RDI: ffffffffffffff9c [ 134.542618][ T6848] RBP: 00007fc11363506b R08: 0000000000000000 R09: 0000000000000000 [ 134.542634][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.542649][ T6848] R13: 00007fc113826038 R14: 00007fc113825fa0 R15: 00007ffef4546548 [ 134.542688][ T6848] [ 134.668655][ T6827] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 135.207199][ T1429] wlan1: Trigger new scan to find an IBSS to join [ 136.210884][ T6860] loop2: detected capacity change from 0 to 131072 [ 136.232330][ T6860] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 136.232385][ T6860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 136.258070][ T6860] F2FS-fs (loop2): invalid crc value [ 136.356793][ T6860] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 136.377132][ T6860] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 136.377160][ T6860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 137.014043][ T6893] loop4: detected capacity change from 0 to 2048 [ 137.023092][ T6893] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 137.027951][ T6893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.208396][ T1429] wlan1: Creating new IBSS network, BSSID 16:79:06:dc:31:8f [ 137.566642][ T6908] veth1_to_bond: entered allmulticast mode [ 137.569864][ T6908] veth1_to_bond: entered promiscuous mode [ 137.570436][ T6907] veth1_to_bond: left promiscuous mode [ 137.572969][ T6907] veth1_to_bond: left allmulticast mode [ 137.694689][ T6911] FAULT_INJECTION: forcing a failure. [ 137.694689][ T6911] name failslab, interval 1, probability 0, space 0, times 0 [ 137.694728][ T6911] CPU: 0 UID: 0 PID: 6911 Comm: syz.0.413 Not tainted syzkaller #0 PREEMPT(full) [ 137.694756][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.694771][ T6911] Call Trace: [ 137.694781][ T6911] [ 137.694792][ T6911] dump_stack_lvl+0xe8/0x150 [ 137.694833][ T6911] should_fail_ex+0x410/0x560 [ 137.694873][ T6911] should_failslab+0xa8/0x100 [ 137.694911][ T6911] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 137.694941][ T6911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.694972][ T6911] ? alloc_vfsmnt+0xe6/0x410 [ 137.694999][ T6911] ? alloc_vfsmnt+0xe6/0x410 [ 137.695043][ T6911] kstrdup+0x42/0x100 [ 137.695075][ T6911] alloc_vfsmnt+0xe6/0x410 [ 137.695108][ T6911] clone_mnt+0x4b/0x9b0 [ 137.695145][ T6911] lock_mount_exact+0x183/0x790 [ 137.695194][ T6911] open_new_namespace+0x2f9/0xd90 [ 137.695239][ T6911] ? __pfx_open_new_namespace+0x10/0x10 [ 137.695279][ T6911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.695309][ T6911] ? do_getname+0x151/0x250 [ 137.695347][ T6911] vfs_open_tree+0x32d/0x3d0 [ 137.695379][ T6911] ? __pfx_vfs_open_tree+0x10/0x10 [ 137.695419][ T6911] __x64_sys_open_tree+0x96/0x110 [ 137.695457][ T6911] do_syscall_64+0x166/0x520 [ 137.695493][ T6911] ? trace_irq_disable+0x3b/0x140 [ 137.695521][ T6911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.695554][ T6911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.695583][ T6911] RIP: 0033:0x7f58f959e159 [ 137.695606][ T6911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.695626][ T6911] RSP: 002b:00007f58fa54c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 137.695652][ T6911] RAX: ffffffffffffffda RBX: 00007f58f9825fa0 RCX: 00007f58f959e159 [ 137.695671][ T6911] RDX: 0000000000081802 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 137.695689][ T6911] RBP: 00007f58f963506b R08: 0000000000000000 R09: 0000000000000000 [ 137.695705][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.695720][ T6911] R13: 00007f58f9826038 R14: 00007f58f9825fa0 R15: 00007ffdc660e4a8 [ 137.695760][ T6911] [ 138.237928][ T6931] loop1: detected capacity change from 0 to 512 [ 138.317157][ T6931] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.422: bg 0: block 13: invalid block bitmap [ 138.317197][ T6931] loop1: lost filesystem error report for type 5 error -117 [ 138.325358][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 138.325383][ C1] EXT4-fs (loop1): initial error at time 1790897092: ext4_validate_block_bitmap:436 [ 138.325411][ C1] EXT4-fs (loop1): last error at time 1790897092: ext4_validate_block_bitmap:436 [ 138.379461][ T6931] EXT4-fs (loop1): Remounting filesystem read-only [ 138.379711][ T6931] EXT4-fs (loop1): 2 truncates cleaned up [ 138.382294][ T6931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.481300][ T6935] FAULT_INJECTION: forcing a failure. [ 138.481300][ T6935] name failslab, interval 1, probability 0, space 0, times 0 [ 138.481341][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.0.424 Not tainted syzkaller #0 PREEMPT(full) [ 138.481369][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.481384][ T6935] Call Trace: [ 138.481394][ T6935] [ 138.481405][ T6935] dump_stack_lvl+0xe8/0x150 [ 138.481448][ T6935] should_fail_ex+0x410/0x560 [ 138.481485][ T6935] should_failslab+0xa8/0x100 [ 138.481523][ T6935] __kmalloc_cache_noprof+0xa3/0x600 [ 138.481552][ T6935] ? __kmalloc_cache_noprof+0x321/0x600 [ 138.481577][ T6935] ? nfs_alloc_fhandle+0x4a/0xa0 [ 138.481607][ T6935] ? nfs_alloc_fhandle+0x4a/0xa0 [ 138.481645][ T6935] nfs_alloc_fhandle+0x4a/0xa0 [ 138.481677][ T6935] nfs_init_fs_context+0x68/0x1300 [ 138.481707][ T6935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.481740][ T6935] ? mutex_init_lockdep+0xdf/0x110 [ 138.481779][ T6935] alloc_fs_context+0x9a3/0xd00 [ 138.481818][ T6935] __se_sys_fsopen+0xa5/0x2c0 [ 138.481852][ T6935] do_syscall_64+0x166/0x520 [ 138.481895][ T6935] ? trace_irq_disable+0x3b/0x140 [ 138.481922][ T6935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.481955][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.481979][ T6935] RIP: 0033:0x7f58f959e159 [ 138.482001][ T6935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.482028][ T6935] RSP: 002b:00007f58fa54c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 138.482053][ T6935] RAX: ffffffffffffffda RBX: 00007f58f9825fa0 RCX: 00007f58f959e159 [ 138.482071][ T6935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 138.482087][ T6935] RBP: 00007f58f963506b R08: 0000000000000000 R09: 0000000000000000 [ 138.482103][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.482118][ T6935] R13: 00007f58f9826038 R14: 00007f58f9825fa0 R15: 00007ffdc660e4a8 [ 138.482157][ T6935] [ 138.622562][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.966308][ T5348] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 138.966754][ T5348] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 138.975065][ T5348] usb 6-1: USB disconnect, device number 4 [ 138.999924][ T30] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 139.157461][ T5788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.309591][ T5788] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 139.314968][ T5788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.315022][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.362827][ T5788] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 139.363075][ T5788] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 139.363150][ T5788] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 139.389980][ T5788] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 139.398802][ T5788] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 139.414384][ T5788] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 139.426461][ T5788] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 139.426551][ T5788] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 139.429700][ T5788] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 139.832671][ T5348] usb 2-1: USB disconnect, device number 3 [ 139.838313][ T5348] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 139.850977][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 139.857421][ T5348] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 139.861195][ T5348] keyspan 2-1:1.0: device disconnected [ 140.109372][ T6977] loop5: detected capacity change from 0 to 128 [ 140.140458][ T6977] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.140500][ T6977] hpfs: filesystem error: improperly stopped [ 140.140517][ T6977] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.140534][ T6977] hpfs: You really don't want any checks? You are crazy... [ 140.140550][ T6977] hpfs: Code page index out of array [ 140.140559][ T6977] hpfs: code page support is disabled [ 140.170231][ T6979] loop4: detected capacity change from 0 to 16 [ 140.187065][ T6977] hpfs: hpfs_map_4sectors(): unaligned read [ 140.187351][ T6977] hpfs: hpfs_map_4sectors(): unaligned read [ 140.187363][ T6977] hpfs: filesystem error: unable to find root dir [ 140.250066][ T6979] erofs (device loop4): mounted with root inode @ nid 36. [ 140.982402][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.456'. [ 140.994863][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.456'. [ 141.069333][ T7009] loop4: detected capacity change from 0 to 512 [ 141.086956][ T7009] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.112372][ T7009] EXT4-fs (loop4): 1 truncate cleaned up [ 141.131786][ T7009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.367662][ T7021] loop0: detected capacity change from 0 to 256 [ 141.380181][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.619355][ T5348] kernel read not supported for file /kmsg (pid: 5348 comm: kworker/1:3) [ 141.714350][ T7004] loop1: detected capacity change from 0 to 32768 [ 141.739778][ T7004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.455 (7004) [ 141.793604][ T7004] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.793642][ T7004] BTRFS info (device loop1): using crc32c checksum algorithm [ 141.830381][ T7031] loop5: detected capacity change from 0 to 256 [ 142.001563][ T7038] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 142.019335][ T7004] BTRFS info (device loop1): enabling ssd optimizations [ 142.019361][ T7004] BTRFS info (device loop1): turning on flush-on-commit [ 142.019380][ T7004] BTRFS info (device loop1): enabling free space tree [ 142.019398][ T7004] BTRFS info (device loop1): enabling auto defrag [ 142.019418][ T7004] BTRFS info (device loop1): use lzo compression, level 1 [ 142.019440][ T7004] BTRFS info (device loop1): max_inline set to 4096 [ 142.557289][ T7062] loop4: detected capacity change from 0 to 1024 [ 142.602135][ T7063] netlink: 32 bytes leftover after parsing attributes in process `syz.3.484'. [ 142.684439][ T7062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.071852][ T7069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 143.072063][ T7069] netlink: 'syz.3.474': attribute type 7 has an invalid length. [ 143.072079][ T7069] netlink: 'syz.3.474': attribute type 8 has an invalid length. [ 143.072093][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 143.293868][ T7057] loop5: detected capacity change from 0 to 131072 [ 143.305129][ T7057] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 143.305160][ T7057] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 143.332010][ T7057] F2FS-fs (loop5): invalid crc value [ 143.340868][ T5619] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.436887][ T7057] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 143.440430][ T7057] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 143.440454][ T7057] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 143.561438][ T7075] loop0: detected capacity change from 0 to 512 [ 143.617684][ T7075] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.653324][ T7075] EXT4-fs (loop0): 1 truncate cleaned up [ 143.664602][ T7075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.702452][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.703334][ T7075] EXT4-fs error (device loop0): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.0.476: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 143.732106][ T7075] EXT4-fs (loop0): Remounting filesystem read-only [ 143.732130][ T7075] EXT4-fs warning (device loop0): ext4_rename_delete:3741: inode #2: comm syz.0.476: Deleting old file: nlink 5, error=-117 [ 143.777619][ T7081] loop3: detected capacity change from 0 to 512 [ 143.920695][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.025425][ T7081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.025543][ T7081] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.127542][ T7081] EXT4-fs (loop3): shut down requested (2) [ 144.410933][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.984510][ T7114] loop4: detected capacity change from 0 to 32768 [ 146.080663][ T7114] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 146.132317][ T7123] loop2: detected capacity change from 0 to 32768 [ 146.159205][ T7123] (syz.2.498,7123,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.173336][ T7123] (syz.2.498,7123,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.231237][ T7123] JBD2: Ignoring recovery information on journal [ 146.537082][ T7123] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 146.660547][ T5620] ocfs2: Unmounting device (7,4) on (node local) [ 146.703390][ T7123] (syz.2.498,7123,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 147.285705][ T7123] (syz.2.498,7123,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 147.285833][ T7123] (syz.2.498,7123,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 147.285866][ T7123] (syz.2.498,7123,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 147.285891][ T7123] (syz.2.498,7123,0):ocfs2_quota_read:201 ERROR: status = -5 [ 147.286084][ T7123] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 147.286166][ T7123] (syz.2.498,7123,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 147.295997][ T7139] loop3: detected capacity change from 0 to 131072 [ 147.301685][ T7139] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 147.301709][ T7139] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 147.304924][ T7139] F2FS-fs (loop3): invalid crc value [ 147.407180][ T7139] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 147.415043][ T7139] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 147.415069][ T7139] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 147.542793][ T7139] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 147.554773][ T7139] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 147.698375][ T5630] ocfs2: Unmounting device (7,2) on (node local) [ 147.796901][ T7143] loop1: detected capacity change from 0 to 32768 [ 147.798012][ T7143] xfs: Deprecated parameter 'noikeep' [ 147.798032][ T7143] XFS: noikeep mount option is deprecated. [ 147.863371][ T7143] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.985344][ T5348] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.122126][ T7143] XFS (loop1): Ending clean mount [ 148.138474][ T5348] usb 1-1: Using ep0 maxpacket: 8 [ 148.142102][ T5348] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.145922][ T5348] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 148.145976][ T5348] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 148.146006][ T5348] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.146041][ T5348] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 148.146070][ T5348] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 148.146097][ T5348] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.146142][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.176111][ T7143] XFS (loop1): Quotacheck needed: Please wait. [ 148.379344][ T5348] usb 1-1: GET_CAPABILITIES returned 0 [ 148.379398][ T5348] usbtmc 1-1:16.0: can't read capabilities [ 148.382059][ T7176] loop2: detected capacity change from 0 to 256 [ 148.613387][ T7143] XFS (loop1): Quotacheck: Done. [ 148.652263][ T5348] usb 1-1: USB disconnect, device number 5 [ 148.726861][ T7178] loop2: detected capacity change from 0 to 256 [ 148.772235][ T7178] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 148.857466][ T7168] loop5: detected capacity change from 0 to 32768 [ 148.866172][ T7168] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.512 (7168) [ 148.929322][ T5619] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.019441][ T7168] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.019479][ T7168] BTRFS info (device loop5): using crc32c checksum algorithm [ 149.310444][ T7168] BTRFS info (device loop5): enabling ssd optimizations [ 149.310474][ T7168] BTRFS info (device loop5): turning on flush-on-commit [ 149.310493][ T7168] BTRFS info (device loop5): enabling free space tree [ 149.310512][ T7168] BTRFS info (device loop5): enabling auto defrag [ 149.310531][ T7168] BTRFS info (device loop5): use lzo compression, level 1 [ 149.310561][ T7168] BTRFS info (device loop5): max_inline set to 4096 [ 149.448232][ T7199] FAULT_INJECTION: forcing a failure. [ 149.448232][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 149.448272][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz.3.519 Not tainted syzkaller #0 PREEMPT(full) [ 149.448300][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.448314][ T7199] Call Trace: [ 149.448324][ T7199] [ 149.448335][ T7199] dump_stack_lvl+0xe8/0x150 [ 149.448376][ T7199] should_fail_ex+0x410/0x560 [ 149.448414][ T7199] should_failslab+0xa8/0x100 [ 149.448447][ T7199] ? __se_sys_mbind+0x82b/0x10e0 [ 149.448478][ T7199] kmem_cache_alloc_noprof+0xa1/0x600 [ 149.448506][ T7199] ? __se_sys_mbind+0x82b/0x10e0 [ 149.448555][ T7199] __se_sys_mbind+0x82b/0x10e0 [ 149.448588][ T7199] ? __hugetlb_vmemmap_restore_folio+0x104/0x650 [ 149.448624][ T7199] ? __pfx___se_sys_mbind+0x10/0x10 [ 149.448665][ T7199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.448695][ T7199] ? __se_sys_futex+0x3a8/0x450 [ 149.448739][ T7199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.448767][ T7199] ? rcu_is_watching+0x16/0xb0 [ 149.448807][ T7199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.448835][ T7199] ? __x64_sys_mbind+0x21/0xf0 [ 149.448870][ T7199] do_syscall_64+0x166/0x520 [ 149.448905][ T7199] ? trace_irq_disable+0x3b/0x140 [ 149.448932][ T7199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.448964][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.448989][ T7199] RIP: 0033:0x7f3f3ad9e159 [ 149.449011][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.449031][ T7199] RSP: 002b:00007f3f3bbe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 149.449056][ T7199] RAX: ffffffffffffffda RBX: 00007f3f3b025fa0 RCX: 00007f3f3ad9e159 [ 149.449075][ T7199] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000200000ffa000 [ 149.449095][ T7199] RBP: 00007f3f3ae3506b R08: 000000000000000a R09: 0000000000000002 [ 149.449111][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.449126][ T7199] R13: 00007f3f3b026038 R14: 00007f3f3b025fa0 R15: 00007ffdbe730b28 [ 149.449165][ T7199] [ 149.542245][ T7204] loop2: detected capacity change from 0 to 256 [ 149.607181][ T7204] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 149.665973][ T7203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.093250][ T5631] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.450769][ T7219] loop1: detected capacity change from 0 to 4096 [ 151.322862][ T7225] loop2: detected capacity change from 0 to 131072 [ 151.362800][ T7225] F2FS-fs (loop2): invalid crc value [ 151.454275][ T7225] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 151.471567][ T7225] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.562748][ T31] audit: type=1800 audit(1790897105.350:9): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.529" name="file2" dev="loop2" ino=8 res=0 errno=0 [ 151.705302][ T7230] loop0: detected capacity change from 0 to 131072 [ 151.713559][ T7230] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 151.713590][ T7230] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 151.717815][ T7230] F2FS-fs (loop0): invalid crc value [ 151.848278][ T7230] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 151.852585][ T7230] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.852612][ T7230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 151.997390][ T7230] F2FS-fs (loop0): inaccessible inode: 1, run fsck to repair [ 152.241393][ T7245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.012896][ T7252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.142553][ T7236] loop3: detected capacity change from 0 to 32768 [ 153.157829][ T7236] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 153.182586][ T7236] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.531 (7236) [ 153.236790][ T7236] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 153.236827][ T7236] BTRFS info (device loop3): using crc32c checksum algorithm [ 153.364140][ T7236] BTRFS info (device loop3): rebuilding free space tree [ 153.431178][ T7271] loop4: detected capacity change from 0 to 512 [ 153.516711][ T7271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.516813][ T7271] ext4 filesystem being mounted at /87/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.651915][ T7236] BTRFS info (device loop3): disabling free space tree [ 153.652003][ T7236] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.652028][ T7236] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.758407][ T7280] loop1: detected capacity change from 0 to 16 [ 153.772415][ T7236] BTRFS info (device loop3): enabling ssd optimizations [ 153.772446][ T7236] BTRFS info (device loop3): turning on async discard [ 153.772466][ T7236] BTRFS info (device loop3): force clearing of disk cache [ 153.772487][ T7236] BTRFS info (device loop3): use zstd compression, level 3 [ 153.777476][ T7280] erofs (device loop1): mounted with root inode @ nid 36. [ 153.874174][ T7280] syz.1.543: attempt to access beyond end of device [ 153.874174][ T7280] loop1: rw=8912896, sector=36, nr_sectors = 1 limit=16 [ 153.881219][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.925118][ T7280] syz.1.543: attempt to access beyond end of device [ 153.925118][ T7280] loop1: rw=8912896, sector=131156, nr_sectors = 1 limit=16 [ 153.925201][ T7280] syz.1.543: attempt to access beyond end of device [ 153.925201][ T7280] loop1: rw=8912896, sector=36, nr_sectors = 1 limit=16 [ 153.927134][ T7280] syz.1.543: attempt to access beyond end of device [ 153.927134][ T7280] loop1: rw=8912896, sector=131157, nr_sectors = 1 limit=16 [ 153.927193][ T7280] syz.1.543: attempt to access beyond end of device [ 153.927193][ T7280] loop1: rw=8912896, sector=41, nr_sectors = 1 limit=16 [ 153.927314][ T7280] syz.1.543: attempt to access beyond end of device [ 153.927314][ T7280] loop1: rw=8912896, sector=65623, nr_sectors = 1 limit=16 [ 153.927365][ T7280] syz.1.543: attempt to access beyond end of device [ 153.927365][ T7280] loop1: rw=8912896, sector=46, nr_sectors = 1 limit=16 [ 153.927444][ T7280] syz.1.543: attempt to access beyond end of device [ 153.927444][ T7280] loop1: rw=8912896, sector=131168, nr_sectors = 1 limit=16 [ 153.927495][ T7280] syz.1.543: attempt to access beyond end of device [ 153.927495][ T7280] loop1: rw=8912896, sector=86, nr_sectors = 1 limit=16 [ 153.928527][ T7280] syz.1.543: attempt to access beyond end of device [ 153.928527][ T7280] loop1: rw=8912896, sector=65637, nr_sectors = 1 limit=16 [ 153.994743][ T7281] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 154.064608][ T7280] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 154.334620][ T5638] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 154.457268][ T7287] loop4: detected capacity change from 0 to 4096 [ 154.602723][ T7287] ntfs3(loop4): ino=9, mi_enum_attr [ 154.602757][ T7287] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 154.606314][ T7287] ntfs3(loop4): ino=9, mi_enum_attr [ 154.606403][ T7287] ntfs3(loop4): ino=b, mi_enum_attr [ 154.606470][ T7287] ntfs3(loop4): Failed to load $Extend (-22). [ 154.606488][ T7287] ntfs3(loop4): Failed to initialize $Extend. [ 155.713380][ T7324] netlink: 104 bytes leftover after parsing attributes in process `syz.4.556'. [ 155.842369][ T7300] netlink: 'syz.0.536': attribute type 16 has an invalid length. [ 155.842399][ T7300] netlink: 'syz.0.536': attribute type 17 has an invalid length. [ 155.955744][ T5876] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 156.089039][ T7300] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.121239][ T5876] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 156.123938][ T5876] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 156.123988][ T5876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.124019][ T5876] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.124048][ T5876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.124078][ T5876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 156.126796][ T5876] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 156.126843][ T5876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.126873][ T5876] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.126901][ T5876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.126930][ T5876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 156.128176][ T5876] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 156.128222][ T5876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.128252][ T5876] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.128280][ T5876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.128310][ T5876] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 156.155806][ T5876] usb 4-1: string descriptor 0 read error: -22 [ 156.155957][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.319635][ T5876] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 156.649864][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'. [ 156.783095][ T7352] FAULT_INJECTION: forcing a failure. [ 156.783095][ T7352] name failslab, interval 1, probability 0, space 0, times 0 [ 156.783134][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.2.571 Not tainted syzkaller #0 PREEMPT(full) [ 156.783161][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.783176][ T7352] Call Trace: [ 156.783186][ T7352] [ 156.783196][ T7352] dump_stack_lvl+0xe8/0x150 [ 156.783238][ T7352] should_fail_ex+0x410/0x560 [ 156.783275][ T7352] should_failslab+0xa8/0x100 [ 156.783311][ T7352] __kvmalloc_node_noprof+0x176/0x820 [ 156.783340][ T7352] ? __kmalloc_cache_noprof+0x321/0x600 [ 156.783368][ T7352] ? __kmalloc_cache_noprof+0x14d/0x600 [ 156.783401][ T7352] ? percpu_ref_init+0xc5/0x350 [ 156.783427][ T7352] ? io_alloc_cache_init+0x42/0x140 [ 156.783452][ T7352] ? io_alloc_cache_init+0x42/0x140 [ 156.783479][ T7352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.783514][ T7352] io_alloc_cache_init+0x42/0x140 [ 156.783545][ T7352] io_ring_ctx_alloc+0x508/0xb80 [ 156.783594][ T7352] io_uring_create+0x50/0x990 [ 156.783641][ T7352] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 156.783672][ T7352] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.783712][ T7352] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 156.783759][ T7352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.783788][ T7352] ? rcu_is_watching+0x16/0xb0 [ 156.783821][ T7352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.783866][ T7352] do_syscall_64+0x166/0x520 [ 156.783901][ T7352] ? trace_irq_disable+0x3b/0x140 [ 156.783933][ T7352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.783964][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.783990][ T7352] RIP: 0033:0x7fdff459e159 [ 156.784012][ T7352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.784032][ T7352] RSP: 002b:00007fdff5451fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 156.784059][ T7352] RAX: ffffffffffffffda RBX: 0000200000001840 RCX: 00007fdff459e159 [ 156.784078][ T7352] RDX: 0000200000001900 RSI: 0000200000001840 RDI: 0000000000005e86 [ 156.784096][ T7352] RBP: 00007fdff463506b R08: 0000000000000000 R09: 0000000000000000 [ 156.784112][ T7352] R10: 0000200000001940 R11: 0000000000000206 R12: 0000200000001900 [ 156.784130][ T7352] R13: 0000200000001940 R14: 0000200000000000 R15: 00007ffd3ede1308 [ 156.784169][ T7352] [ 156.926649][ T5348] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.086769][ T5348] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 157.089486][ T5348] usb 5-1: config 0 interface 0 has no altsetting 0 [ 157.089526][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.092558][ T5348] usb 5-1: config 0 descriptor?? [ 157.125401][ T5876] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 157.173964][ T5907] hid_parser_main: 4 callbacks suppressed [ 157.173992][ T5907] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 157.224729][ T5907] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.276176][ T5876] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 157.277251][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.286907][ T5876] usb 6-1: config 0 descriptor?? [ 157.431194][ T7368] fido_id[7368]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 157.433958][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 157.520941][ T5348] hid (null): unknown global tag 0xfd [ 157.529635][ T5876] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 157.561292][ T5348] waltop 0003:172F:0034.0006: unexpected long global item [ 157.563269][ T5348] waltop 0003:172F:0034.0006: probe with driver waltop failed with error -22 [ 157.761223][ T5907] usb 5-1: USB disconnect, device number 7 [ 157.765970][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 157.811828][ T5876] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 157.811859][ T5876] [drm] Initialized udl on minor 1 [ 157.873471][ T7381] Process accounting resumed [ 158.204572][ T7398] netlink: 7 bytes leftover after parsing attributes in process `syz.2.589'. [ 158.322534][ T7401] loop0: detected capacity change from 0 to 512 [ 158.352171][ T7401] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.373678][ T7401] EXT4-fs (loop0): 1 truncate cleaned up [ 158.389801][ T7401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.587229][ T9] usb 4-1: USB disconnect, device number 5 [ 158.665175][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.709817][ T7415] loop2: detected capacity change from 0 to 4096 [ 158.724676][ T7415] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 158.768824][ T7419] loop1: detected capacity change from 0 to 64 [ 158.811173][ T7417] loop4: detected capacity change from 0 to 512 [ 158.826835][ T7415] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 158.834603][ T7417] EXT4-fs: Ignoring removed oldalloc option [ 158.840510][ T7417] EXT4-fs (loop4): Test dummy encryption mode enabled [ 158.884468][ T7417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.902718][ T7417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.596'. [ 158.903296][ T7417] netlink: 68 bytes leftover after parsing attributes in process `syz.4.596'. [ 159.029187][ T7424] loop5: detected capacity change from 0 to 7 [ 159.032446][ T7424] Dev loop5: unable to read RDB block 7 [ 159.032483][ T7424] loop5: unable to read partition table [ 159.059544][ T7424] loop5: partition table beyond EOD, truncated [ 159.059594][ T7424] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.116413][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.188390][ T7424] Dev loop5: unable to read RDB block 7 [ 159.188454][ T7424] loop5: unable to read partition table [ 159.188696][ T7424] loop5: partition table beyond EOD, truncated [ 159.188741][ T7424] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.233631][ T7427] syz_tun: entered allmulticast mode [ 159.244667][ T7426] syz_tun: left allmulticast mode [ 159.285582][ T5788] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.436168][ T5788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.437583][ T5788] usb 2-1: config index 0 descriptor too short (expected 4700, got 92) [ 159.437646][ T5788] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 159.440104][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.440133][ T5788] usb 2-1: Product: syz [ 159.440151][ T5788] usb 2-1: Manufacturer: syz [ 159.440168][ T5788] usb 2-1: SerialNumber: syz [ 159.831799][ T7444] loop0: detected capacity change from 0 to 512 [ 159.898541][ T7444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.900464][ T7444] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.987686][ T7448] loop4: detected capacity change from 0 to 1024 [ 160.041821][ T7448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.258345][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.329616][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.566492][ T5788] cdc_ncm 2-1:1.0: bind() failure [ 160.589835][ T5788] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 160.590990][ T5788] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 160.612988][ T5788] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 160.640171][ T5788] usb 2-1: USB disconnect, device number 4 [ 160.810393][ T7459] loop4: detected capacity change from 0 to 32768 [ 160.832564][ T7459] (syz.4.613,7459,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 160.852188][ T7459] (syz.4.613,7459,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 160.899616][ T7459] JBD2: Ignoring recovery information on journal [ 160.962664][ T7459] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 161.338014][ T5620] ocfs2: Unmounting device (7,4) on (node local) [ 161.436223][ T5623] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 161.436253][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 161.436281][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.436298][ T5623] Workqueue: hci5 hci_rx_work [ 161.436332][ T5623] Call Trace: [ 161.436343][ T5623] [ 161.436354][ T5623] dump_stack_lvl+0xe8/0x150 [ 161.436395][ T5623] sysfs_create_dir_ns+0x271/0x2a0 [ 161.436442][ T5623] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 161.436488][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.436518][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 161.436563][ T5623] kobject_add_internal+0x622/0xcd0 [ 161.436600][ T5623] kobject_add+0x163/0x240 [ 161.436622][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.436660][ T5623] ? __pfx_kobject_add+0x10/0x10 [ 161.436682][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.436715][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.436749][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.436779][ T5623] ? get_device_parent+0x366/0x3a0 [ 161.436819][ T5623] device_add+0x3fa/0xb80 [ 161.436853][ T5623] hci_conn_add_sysfs+0xd5/0x210 [ 161.436886][ T5623] le_conn_complete_evt+0xfe3/0x16d0 [ 161.436936][ T5623] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 161.436974][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.437003][ T5623] ? __mutex_unlock_slowpath+0x731/0x900 [ 161.437051][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.437081][ T5623] ? skb_pull_data+0xf0/0x200 [ 161.437113][ T5623] hci_le_enh_conn_complete_evt+0x189/0x490 [ 161.437152][ T5623] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 161.437194][ T5623] hci_event_packet+0x67a/0xf10 [ 161.437233][ T5623] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 161.437267][ T5623] ? __pfx_hci_event_packet+0x10/0x10 [ 161.437304][ T5623] ? audit_filter_rules+0x36b0/0x5d10 [ 161.437343][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.437373][ T5623] ? hci_send_to_monitor+0xe2/0x590 [ 161.437417][ T5623] hci_rx_work+0x3ee/0x1020 [ 161.437457][ T5623] ? process_scheduled_works+0x97a/0x1630 [ 161.437494][ T5623] process_scheduled_works+0xc3d/0x1630 [ 161.437529][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.437596][ T5623] ? __pfx_process_scheduled_works+0x10/0x10 [ 161.437638][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.437667][ T5623] ? assign_work+0x3cf/0x5d0 [ 161.437708][ T5623] worker_thread+0xa47/0xfb0 [ 161.437748][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.437790][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.437820][ T5623] ? __kthread_parkme+0x71/0x1f0 [ 161.437871][ T5623] kthread+0x38b/0x480 [ 161.437897][ T5623] ? __pfx_worker_thread+0x10/0x10 [ 161.437931][ T5623] ? __pfx_kthread+0x10/0x10 [ 161.437958][ T5623] ret_from_fork+0x514/0xb70 [ 161.437988][ T5623] ? __pfx_ret_from_fork+0x10/0x10 [ 161.438012][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.438049][ T5623] ? __switch_to+0xc89/0x1420 [ 161.438089][ T5623] ? __pfx_kthread+0x10/0x10 [ 161.438117][ T5623] ret_from_fork_asm+0x1a/0x30 [ 161.438176][ T5623] [ 161.439642][ T5623] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 161.439693][ T5623] Bluetooth: hci5: failed to register connection device [ 161.672780][ T7483] loop0: detected capacity change from 0 to 1024 [ 161.938175][ T31] audit: type=1800 audit(1790897115.730:10): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.621" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 161.942682][ T7476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.942828][ T7476] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.112583][ T7476] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.163766][ T7476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.163892][ T7476] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.197495][ T7476] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.258659][ T7476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.261902][ T7476] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.291962][ T7476] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.322811][ T7476] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.322945][ T7476] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.375021][ T7476] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.389873][ T7476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.389998][ T7476] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.410614][ T7476] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.427968][ T7476] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 162.462614][ T7476] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 162.493416][ T7476] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 162.531214][ T7476] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 162.785455][ T30] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.811106][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 162.891013][ T5876] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 162.892581][ T5876] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 162.925333][ T5876] usb 6-1: USB disconnect, device number 5 [ 162.936111][ T30] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 162.937523][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.937559][ T30] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 162.940329][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.940357][ T30] usb 3-1: Product: syz [ 162.940374][ T30] usb 3-1: Manufacturer: syz [ 162.940391][ T30] usb 3-1: SerialNumber: syz [ 162.956425][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.957000][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 163.187023][ T7504] dummy0: entered promiscuous mode [ 163.227818][ T30] usb 3-1: Limiting number of CPorts to U8_MAX [ 163.277531][ T7504] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 163.323126][ T7504] hsr1: entered allmulticast mode [ 163.323155][ T7504] dummy0: entered allmulticast mode [ 163.323240][ T7504] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 163.578275][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 163.578309][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 163.643405][ C1] usb 3-1: invalid arpc response id received: 1280 [ 163.848159][ T30] usb 3-1: failed to send ARPC request 1: -71 [ 163.848813][ T30] usb 3-1: failed to execute ARPC: -71 [ 163.848835][ T30] usb 3-1: failed to set connected state for cport 0: -71 [ 163.849025][ T30] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 163.851153][ T30] usb 3-1: failed to send ARPC request 3: -71 [ 163.851988][ T30] usb 3-1: failed to execute ARPC: -71 [ 163.852008][ T30] usb 3-1: failed to clear cport 0: -71 [ 163.852028][ T30] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 163.926998][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.956944][ T30] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 163.961391][ T30] usb 3-1: USB disconnect, device number 7 [ 164.147566][ T7530] loop5: detected capacity change from 0 to 512 [ 164.167462][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.172228][ T7530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.255585][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 164.327936][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.327956][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.375671][ T7529] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.642: bg 0: block 67: padding at end of block bitmap is not set [ 164.397712][ T7529] EXT4-fs (loop5): Remounting filesystem read-only [ 164.397946][ T7529] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 164.408041][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.420087][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 164.420123][ T9] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 164.423671][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 164.423714][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.492950][ T9] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 164.517347][ T9] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 164.626438][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.825223][ T5348] usb 4-1: USB disconnect, device number 6 [ 164.888928][ T5348] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 164.909755][ T5348] cyberjack 4-1:1.0: device disconnected [ 165.155588][ T7552] loop1: detected capacity change from 0 to 1024 [ 165.190746][ T7552] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 165.190861][ T7552] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 165.194618][ T7552] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.651: iget: special inode unallocated [ 165.194651][ T7552] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 165.195312][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 165.195333][ C0] EXT4-fs (loop1): initial error at time 1790897118: ext4_get_journal_inode:5927: inode 32 [ 165.195368][ C0] EXT4-fs (loop1): last error at time 1790897118: ext4_get_journal_inode:5927: inode 32 [ 165.195687][ T7552] EXT4-fs (loop1): Remounting filesystem read-only [ 165.195768][ T7552] EXT4-fs (loop1): no journal found [ 165.195781][ T7552] EXT4-fs (loop1): can't get journal size [ 165.221392][ T7552] EXT4-fs (loop1): filesystem is read-only [ 165.235456][ T7552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 165.274511][ T7552] EXT4-fs (loop1): shut down requested (2) [ 165.465335][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.775391][ T2246] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.915560][ T5348] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.966002][ T2246] usb 3-1: Using ep0 maxpacket: 32 [ 165.970481][ T2246] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 165.973463][ T2246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.980578][ T2246] usb 3-1: config 0 descriptor?? [ 166.076984][ T5348] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 166.078328][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.083301][ T5348] usb 5-1: config 0 descriptor?? [ 166.192928][ T2246] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 166.244829][ T2246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.245955][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.252855][ T2246] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 166.252911][ T2246] usb 3-1: media controller created [ 166.310352][ T5348] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 166.348519][ T2246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.406878][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.406927][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.491711][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.598484][ T5348] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 166.598520][ T5348] [drm] Initialized udl on minor 1 [ 166.895404][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.059012][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 167.060087][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.064829][ T9] usb 4-1: config 0 descriptor?? [ 167.115991][ T5788] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 167.176313][ T2246] az6027: usb out operation failed. (-71) [ 167.176337][ T2246] stb0899_attach: Driver disabled by Kconfig [ 167.176350][ T2246] az6027: no front-end attached [ 167.176350][ T2246] [ 167.178067][ T2246] az6027: usb out operation failed. (-71) [ 167.178111][ T2246] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 167.204098][ T2246] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 167.252207][ T2246] dvb-usb: schedule remote query interval to 400 msecs. [ 167.252234][ T2246] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 167.271225][ T2246] usb 3-1: USB disconnect, device number 8 [ 167.287691][ T5788] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 167.289048][ T5788] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.289099][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 167.289154][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 167.289179][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 167.289207][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 167.289235][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 167.289263][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 167.289317][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 167.289345][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 167.289373][ T5788] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.289397][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 167.289430][ T5788] usb 6-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 167.299446][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 167.368161][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.368207][ T5788] usb 6-1: Product: syz [ 167.368265][ T5788] usb 6-1: Manufacturer: syz [ 167.368292][ T5788] usb 6-1: SerialNumber: syz [ 167.432610][ T7598] loop0: detected capacity change from 0 to 4096 [ 167.500610][ T7592] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 167.500764][ T7592] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 167.500909][ T7592] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 167.501093][ T7592] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 167.501242][ T7592] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 167.501388][ T7592] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 167.501527][ T7592] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 167.501669][ T7592] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 167.568467][ T5788] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 167.570193][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 167.594110][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 167.620757][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 167.620790][ T9] [drm] Initialized udl on minor 2 [ 167.625394][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.667000][ T5788] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 167.683030][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 167.683153][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 167.688490][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 167.736870][ T5788] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 167.779397][ T7598] ntfs3(loop0): Failed to load $Extend (-22). [ 167.779454][ T7598] ntfs3(loop0): Failed to initialize $Extend. [ 167.786464][ T30] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.787959][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.787990][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.788041][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.788086][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.825687][ T30] usb 2-1: config 0 descriptor?? [ 167.846437][ T2246] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 168.330415][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.352393][ T5876] usb 6-1: USB disconnect, device number 6 [ 168.388429][ T30] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 168.450515][ T5876] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 168.478429][ T5876] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 168.480187][ T5876] keyspan 6-1:1.0: device disconnected [ 168.485704][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.485749][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.566111][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 168.738751][ T30] usb 2-1: USB disconnect, device number 5 [ 168.824316][ T7604] fido_id[7604]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 169.167677][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 169.608999][ T7612] loop5: detected capacity change from 0 to 32768 [ 169.749251][ T7612] jfs_mkdir: dtInsert returned -EIO [ 169.749276][ T7612] ERROR: (device loop5): jfs_mkdir: [ 169.749276][ T7612] [ 169.762670][ T7612] ERROR: (device loop5): remounting filesystem as read-only [ 169.864549][ T7629] loop2: detected capacity change from 0 to 4096 [ 169.879722][ T7629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.879745][ T7629] EXT4-fs (loop2): Test dummy encryption mode enabled [ 169.919496][ T7629] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 169.919662][ T7629] System zones: 0-5 [ 169.962370][ T7629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.980277][ T7635] loop1: detected capacity change from 0 to 2048 [ 170.011705][ T7635] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.060901][ T7629] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 170.254500][ T7637] FAULT_INJECTION: forcing a failure. [ 170.254500][ T7637] name failslab, interval 1, probability 0, space 0, times 0 [ 170.254542][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.0.688 Not tainted syzkaller #0 PREEMPT(full) [ 170.254571][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.254590][ T7637] Call Trace: [ 170.254600][ T7637] [ 170.254611][ T7637] dump_stack_lvl+0xe8/0x150 [ 170.254656][ T7637] should_fail_ex+0x410/0x560 [ 170.254694][ T7637] should_failslab+0xa8/0x100 [ 170.254732][ T7637] __kmalloc_cache_noprof+0xa3/0x600 [ 170.254760][ T7637] ? __mutex_lock+0x30b/0x1550 [ 170.254799][ T7637] ? alloc_tty_struct+0xa6/0x790 [ 170.254824][ T7637] ? alloc_tty_struct+0xa6/0x790 [ 170.254858][ T7637] alloc_tty_struct+0xa6/0x790 [ 170.254883][ T7637] ? tty_open+0x204/0xcc0 [ 170.254916][ T7637] ? __pfx___mutex_lock+0x10/0x10 [ 170.254955][ T7637] ? __pfx_alloc_tty_struct+0x10/0x10 [ 170.254985][ T7637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.255015][ T7637] ? __kmalloc_cache_noprof+0x321/0x600 [ 170.255050][ T7637] tty_init_dev+0x59/0x4d0 [ 170.255084][ T7637] ? tty_open+0x7ca/0xcc0 [ 170.255119][ T7637] tty_open+0x7d9/0xcc0 [ 170.255167][ T7637] ? __pfx_tty_open+0x10/0x10 [ 170.255197][ T7637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.255232][ T7637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.255262][ T7637] ? do_raw_spin_unlock+0xf5/0x200 [ 170.255308][ T7637] chrdev_open+0x4d9/0x600 [ 170.255344][ T7637] ? __pfx_chrdev_open+0x10/0x10 [ 170.255374][ T7637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.255403][ T7637] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 170.255441][ T7637] ? __pfx_chrdev_open+0x10/0x10 [ 170.255471][ T7637] do_dentry_open+0x816/0x1380 [ 170.255517][ T7637] vfs_open+0x3b/0x340 [ 170.255547][ T7637] ? path_openat+0x1428/0x1d60 [ 170.255578][ T7637] path_openat+0x1443/0x1d60 [ 170.255627][ T7637] do_file_open+0x23e/0x4a0 [ 170.255661][ T7637] ? __pfx_do_file_open+0x10/0x10 [ 170.255715][ T7637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.255745][ T7637] ? _raw_spin_unlock+0x28/0x50 [ 170.255775][ T7637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.255804][ T7637] ? alloc_fd+0x651/0x6c0 [ 170.255857][ T7637] do_sys_openat2+0x115/0x200 [ 170.255893][ T7637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.255925][ T7637] ? __se_sys_futex+0x3a8/0x450 [ 170.255962][ T7637] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.256003][ T7637] ? rcu_is_watching+0x16/0xb0 [ 170.256036][ T7637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.256082][ T7637] __x64_sys_openat+0x138/0x170 [ 170.256123][ T7637] do_syscall_64+0x166/0x520 [ 170.256176][ T7637] ? trace_irq_disable+0x3b/0x140 [ 170.256207][ T7637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.256239][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.256265][ T7637] RIP: 0033:0x7f58f955e98e [ 170.256287][ T7637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.256309][ T7637] RSP: 002b:00007f58fa54bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.256336][ T7637] RAX: ffffffffffffffda RBX: 00007f58fa54c6c0 RCX: 00007f58f955e98e [ 170.256355][ T7637] RDX: 0000000000000002 RSI: 00007f58fa54bc00 RDI: ffffffffffffff9c [ 170.256373][ T7637] RBP: 00007f58f963506b R08: 0000000000000000 R09: 0000000000000000 [ 170.256390][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.256406][ T7637] R13: 00007f58f9826038 R14: 00007f58f9825fa0 R15: 00007ffdc660e4a8 [ 170.256446][ T7637] [ 170.279321][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.983058][ T7646] loop2: detected capacity change from 0 to 64 [ 171.014802][ T7647] loop5: detected capacity change from 0 to 1024 [ 171.066231][ T7643] loop0: detected capacity change from 0 to 40427 [ 171.072931][ T7643] F2FS-fs (loop0): build fault injection rate: 174 [ 171.072957][ T7643] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 171.084415][ T7643] F2FS-fs (loop0): invalid crc value [ 171.147943][ T7647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.194270][ T7643] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 171.210688][ T7643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.246596][ T5788] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.288880][ T7643] bio_check_eod: 50 callbacks suppressed [ 171.288906][ T7643] syz.0.691: attempt to access beyond end of device [ 171.288906][ T7643] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.290192][ T7643] CPU: 1 UID: 0 PID: 7643 Comm: syz.0.691 Not tainted syzkaller #0 PREEMPT(full) [ 171.290232][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.290248][ T7643] Call Trace: [ 171.290258][ T7643] [ 171.290274][ T7643] dump_stack_lvl+0xe8/0x150 [ 171.290321][ T7643] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 171.290368][ T7643] f2fs_write_end_bio+0x1211/0x16e0 [ 171.290401][ T7643] ? blkg_put+0x22/0x240 [ 171.290455][ T7643] __submit_merged_bio+0x258/0x6a0 [ 171.290493][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.290533][ T7643] ? rcu_is_watching+0x16/0xb0 [ 171.290572][ T7643] __submit_merged_write_cond+0x3c9/0x4e0 [ 171.290619][ T7643] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 171.290674][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.290714][ T7643] f2fs_write_data_pages+0x2a27/0x36f0 [ 171.290740][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.290769][ T7643] ? __lock_acquire+0x747/0x2de0 [ 171.290838][ T7643] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 171.290861][ T7643] ? is_bpf_text_address+0x26/0x2b0 [ 171.290906][ T7643] ? arch_stack_walk+0xfb/0x150 [ 171.290968][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.290997][ T7643] ? add_lock_to_list+0xc7/0x100 [ 171.291031][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291059][ T7643] ? __lock_acquire+0x1511/0x2de0 [ 171.291118][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291146][ T7643] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.291190][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291225][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291253][ T7643] ? do_raw_spin_unlock+0xf5/0x200 [ 171.291291][ T7643] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 171.291320][ T7643] do_writepages+0x338/0x560 [ 171.291350][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291382][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291414][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291441][ T7643] ? do_raw_spin_unlock+0xf5/0x200 [ 171.291484][ T7643] filemap_fdatawrite+0x1e9/0x2f0 [ 171.291527][ T7643] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 171.291598][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291630][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291665][ T7643] ? do_raw_spin_unlock+0xf5/0x200 [ 171.291708][ T7643] f2fs_sync_dirty_inodes+0x30e/0x830 [ 171.291752][ T7643] f2fs_write_checkpoint+0xa3d/0x2710 [ 171.291820][ T7643] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 171.291848][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.291921][ T7643] ? __pfx_down_write+0x10/0x10 [ 171.291970][ T7643] ? rcu_is_watching+0x16/0xb0 [ 171.292002][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292044][ T7643] f2fs_issue_checkpoint+0x424/0x6f0 [ 171.292077][ T7643] ? __lock_acquire+0x1511/0x2de0 [ 171.292111][ T7643] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 171.292154][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292183][ T7643] ? rcu_is_watching+0x16/0xb0 [ 171.292215][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292244][ T7643] ? __up_read+0x29c/0x930 [ 171.292330][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292360][ T7643] ? f2fs_sync_fs+0x1f2/0x3c0 [ 171.292400][ T7643] f2fs_do_sync_file+0xcf8/0x1960 [ 171.292438][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292468][ T7643] ? __lock_acquire+0x747/0x2de0 [ 171.292504][ T7643] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 171.292593][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292622][ T7643] ? down_write+0x16b/0x200 [ 171.292646][ T7643] ? __pfx_down_write+0x10/0x10 [ 171.292685][ T7643] ? sb_start_write+0x117/0x1d0 [ 171.292712][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292740][ T7643] ? mnt_want_write_file+0x164/0x200 [ 171.292770][ T7643] __f2fs_ioctl+0x4449/0xd0c0 [ 171.292803][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292831][ T7643] ? lock_acquire+0x115/0x350 [ 171.292866][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292897][ T7643] ? is_bpf_text_address+0x26/0x2b0 [ 171.292935][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.292964][ T7643] ? is_bpf_text_address+0x292/0x2b0 [ 171.292996][ T7643] ? is_bpf_text_address+0x26/0x2b0 [ 171.293027][ T7643] ? __pfx___f2fs_ioctl+0x10/0x10 [ 171.293049][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.293078][ T7643] ? kernel_text_address+0xa5/0xe0 [ 171.293107][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.293135][ T7643] ? __kernel_text_address+0xd/0x30 [ 171.293160][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.293189][ T7643] ? unwind_get_return_address+0x4d/0x90 [ 171.293219][ T7643] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 171.293245][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.293273][ T7643] ? arch_stack_walk+0xfb/0x150 [ 171.293316][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.293344][ T7643] ? stack_trace_save+0xa9/0x100 [ 171.293369][ T7643] ? __pfx_stack_trace_save+0x10/0x10 [ 171.293393][ T7643] ? kasan_save_track+0x4f/0x80 [ 171.293424][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.293453][ T7643] ? stack_depot_save_flags+0x33/0x7f0 [ 171.293480][ T7643] ? __entry_text_end+0x102035/0x102039 [ 171.293505][ T7643] ? __lock_acquire+0x747/0x2de0 [ 171.293538][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.293561][ T7643] ? kasan_save_track+0x4f/0x80 [ 171.293584][ T7643] ? kasan_save_track+0x3e/0x80 [ 171.293605][ T7643] ? kasan_save_free_info+0x40/0x50 [ 171.293635][ T7643] ? __kasan_slab_free+0x5c/0x80 [ 171.293660][ T7643] ? kfree+0x1c5/0x650 [ 171.293689][ T7643] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 171.293715][ T7643] ? security_file_ioctl+0xc3/0x2a0 [ 171.293737][ T7643] ? __se_sys_ioctl+0x47/0x170 [ 171.293760][ T7643] ? do_syscall_64+0x166/0x520 [ 171.293791][ T7643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.293835][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.293861][ T7643] ? file_ioctl+0x253/0x7d0 [ 171.293890][ T7643] ? __pfx_file_ioctl+0x10/0x10 [ 171.293936][ T7643] ? kasan_quarantine_put+0xbb/0x1f0 [ 171.293962][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.293998][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.294030][ T7643] ? tomoyo_path_number_perm+0x219/0x5f0 [ 171.294061][ T7643] ? tomoyo_path_number_perm+0x219/0x5f0 [ 171.294095][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.294123][ T7643] ? do_vfs_ioctl+0x116f/0x1530 [ 171.294160][ T7643] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 171.294204][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.294237][ T7643] ? hook_file_ioctl+0x1f2/0x600 [ 171.294268][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.294321][ T7643] ? __fget_files+0x2a/0x420 [ 171.294362][ T7643] ? __fget_files+0x2a/0x420 [ 171.294398][ T7643] ? __fget_files+0x3a2/0x420 [ 171.294434][ T7643] ? __fget_files+0x2a/0x420 [ 171.294474][ T7643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.294503][ T7643] ? f2fs_ioctl+0x135/0x250 [ 171.294536][ T7643] ? __pfx_f2fs_ioctl+0x10/0x10 [ 171.294576][ T7643] __se_sys_ioctl+0xfc/0x170 [ 171.294609][ T7643] do_syscall_64+0x166/0x520 [ 171.294644][ T7643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.294676][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.294701][ T7643] RIP: 0033:0x7f58f959e159 [ 171.294725][ T7643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.294747][ T7643] RSP: 002b:00007f58fa54c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.294774][ T7643] RAX: ffffffffffffffda RBX: 00007f58f9825fa0 RCX: 00007f58f959e159 [ 171.294793][ T7643] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000004 [ 171.294809][ T7643] RBP: 00007f58f963506b R08: 0000000000000000 R09: 0000000000000000 [ 171.294826][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.294841][ T7643] R13: 00007f58f9826038 R14: 00007f58f9825fa0 R15: 00007ffdc660e4a8 [ 171.294882][ T7643] [ 171.294934][ T7643] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 171.398310][ T5788] usb 2-1: Using ep0 maxpacket: 32 [ 171.400745][ T5788] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 171.403815][ T5788] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 171.403865][ T5788] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 171.403927][ T5788] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.403957][ T5788] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 171.416843][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.416875][ T5788] usb 2-1: Product: syz [ 171.416892][ T5788] usb 2-1: Manufacturer: syz [ 171.416910][ T5788] usb 2-1: SerialNumber: syz [ 171.613114][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 171.614673][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.618161][ T5348] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 171.618600][ T5348] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 171.631930][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 171.636060][ T5752] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 171.636637][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 171.641015][ T5752] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 171.641252][ T5752] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 171.709929][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 171.710360][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 171.844579][ T2246] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 171.914663][ T5348] usb 5-1: USB disconnect, device number 8 [ 172.002662][ T5788] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input12 [ 172.166489][ T5788] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 172.166513][ T5788] (id 0x00) [ 172.172832][ T9] usb 4-1: USB disconnect, device number 7 [ 172.337364][ T7662] ip6gretap1: entered allmulticast mode [ 172.370539][ T7662] batman_adv: batadv0: Adding interface: ip6gretap1 [ 172.370562][ T7662] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.370598][ T7662] batman_adv: batadv0: Interface activated: ip6gretap1 [ 172.538842][ T5788] rc_core: IR keymap rc-imon-pad not found [ 172.538864][ T5788] Registered IR keymap rc-empty [ 172.538947][ T5788] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 172.538968][ T5788] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 172.657260][ T5788] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 172.679807][ T5788] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input13 [ 172.740225][ T5788] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:6> initialized [ 172.799671][ T5788] usb 2-1: USB disconnect, device number 6 [ 172.886869][ T5348] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 173.037465][ T5348] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 173.038986][ T5348] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 173.039021][ T5348] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 173.039060][ T5348] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 173.042068][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.042095][ T5348] usb 5-1: Product: syz [ 173.042112][ T5348] usb 5-1: Manufacturer: syz [ 173.042129][ T5348] usb 5-1: SerialNumber: syz [ 173.049912][ T7663] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.050064][ T7663] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.055131][ T5348] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 173.055154][ T5348] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 173.055199][ T5348] usbserial_generic 5-1:1.0: generic converter detected [ 173.075984][ T5348] usb 5-1: generic converter now attached to ttyUSB0 [ 173.328684][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 173.328822][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 173.367462][ T2246] usb 5-1: USB disconnect, device number 9 [ 173.408038][ T2246] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 173.408838][ T2246] usbserial_generic 5-1:1.0: device disconnected [ 173.619108][ T7704] loop5: detected capacity change from 0 to 512 [ 173.623822][ T7704] EXT4-fs (loop5): Test dummy encryption mode enabled [ 173.646983][ T7704] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.713: inode has both inline data and extents flags [ 173.647019][ T7704] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 173.647411][ T7704] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.713: couldn't read orphan inode 15 (err -117) [ 173.647444][ T7704] loop5: lost filesystem error report for type 5 error -117 [ 173.651755][ T7704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.702833][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.803766][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.112849][ T7711] loop1: detected capacity change from 0 to 32768 [ 174.113951][ T7711] xfs: Deprecated parameter 'noikeep' [ 174.113969][ T7711] XFS: noikeep mount option is deprecated. [ 174.140466][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 174.142475][ T7711] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.144421][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 174.151256][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 174.151284][ T9] usb 4-1: config 0 has no interface number 0 [ 174.151327][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.151355][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 174.219033][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.219067][ T9] usb 4-1: Product: syz [ 174.219084][ T9] usb 4-1: Manufacturer: syz [ 174.219102][ T9] usb 4-1: SerialNumber: syz [ 174.280053][ T9] usb 4-1: config 0 descriptor?? [ 174.306970][ T7711] XFS (loop1): Ending clean mount [ 174.309645][ T7711] XFS (loop1): Quotacheck needed: Please wait. [ 174.517491][ T7711] XFS (loop1): Quotacheck: Done. [ 174.541934][ T7732] loop5: detected capacity change from 0 to 128 [ 174.618147][ T5619] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.619308][ T7732] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 174.619338][ T7732] hpfs: filesystem error: improperly stopped [ 174.619353][ T7732] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 174.619367][ T7732] hpfs: You really don't want any checks? You are crazy... [ 174.619404][ T7732] hpfs: Code page index out of array [ 174.619412][ T7732] hpfs: code page support is disabled [ 174.621433][ T7732] hpfs: hpfs_map_4sectors(): unaligned read [ 174.621512][ T7732] hpfs: hpfs_map_4sectors(): unaligned read [ 174.621524][ T7732] hpfs: filesystem error: unable to find root dir [ 174.864092][ T7737] FAULT_INJECTION: forcing a failure. [ 174.864092][ T7737] name fail_futex, interval 1, probability 0, space 0, times 1 [ 174.864133][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.5.725 Not tainted syzkaller #0 PREEMPT(full) [ 174.864161][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.864176][ T7737] Call Trace: [ 174.864186][ T7737] [ 174.864197][ T7737] dump_stack_lvl+0xe8/0x150 [ 174.864243][ T7737] should_fail_ex+0x410/0x560 [ 174.864281][ T7737] get_futex_key+0x1b4/0x1580 [ 174.864313][ T7737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.864355][ T7737] ? __pfx_get_futex_key+0x10/0x10 [ 174.864402][ T7737] futex_wake+0x119/0x5f0 [ 174.864448][ T7737] ? __pfx_futex_wake+0x10/0x10 [ 174.864490][ T7737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.864543][ T7737] do_futex+0x458/0x4e0 [ 174.864584][ T7737] ? __pfx_do_futex+0x10/0x10 [ 174.864629][ T7737] __se_sys_futex+0x3a8/0x450 [ 174.864672][ T7737] ? __pfx___se_sys_futex+0x10/0x10 [ 174.864706][ T7737] ? __pfx___se_sys_mount_setattr+0x10/0x10 [ 174.864753][ T7737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.864782][ T7737] ? __x64_sys_futex+0x21/0xf0 [ 174.864821][ T7737] do_syscall_64+0x166/0x520 [ 174.864857][ T7737] ? trace_irq_disable+0x3b/0x140 [ 174.864884][ T7737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.864915][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.864941][ T7737] RIP: 0033:0x7fac3299e159 [ 174.864963][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.864984][ T7737] RSP: 002b:00007fac3391c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 174.865011][ T7737] RAX: ffffffffffffffda RBX: 00007fac32c25fa8 RCX: 00007fac3299e159 [ 174.865030][ T7737] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fac32c25fac [ 174.865047][ T7737] RBP: 00007fac32c25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 174.865065][ T7737] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 174.865082][ T7737] R13: 00007fac32c26038 R14: 00007ffc571a30f0 R15: 00007ffc571a31d8 [ 174.865121][ T7737] [ 174.983703][ T9] appletouch 4-1:0.85: Geyser mode initialized. [ 175.035513][ T7739] FAULT_INJECTION: forcing a failure. [ 175.035513][ T7739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.035560][ T7739] CPU: 1 UID: 0 PID: 7739 Comm: syz.0.724 Not tainted syzkaller #0 PREEMPT(full) [ 175.035587][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 175.035602][ T7739] Call Trace: [ 175.035613][ T7739] [ 175.035623][ T7739] dump_stack_lvl+0xe8/0x150 [ 175.035666][ T7739] should_fail_ex+0x410/0x560 [ 175.035704][ T7739] _copy_to_user+0x31/0xb0 [ 175.035744][ T7739] __se_sys_newuname+0x199/0x420 [ 175.035787][ T7739] ? __pfx___se_sys_newuname+0x10/0x10 [ 175.035840][ T7739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.035918][ T7739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.035948][ T7739] ? rcu_is_watching+0x16/0xb0 [ 175.035980][ T7739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.036024][ T7739] do_syscall_64+0x166/0x520 [ 175.036059][ T7739] ? trace_irq_disable+0x3b/0x140 [ 175.036086][ T7739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.036119][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.036144][ T7739] RIP: 0033:0x7f58f959e159 [ 175.036167][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.036192][ T7739] RSP: 002b:00007f58fa54c028 EFLAGS: 00000246 ORIG_RAX: 000000000000003f [ 175.036218][ T7739] RAX: ffffffffffffffda RBX: 00007f58f9825fa0 RCX: 00007f58f959e159 [ 175.036237][ T7739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.036252][ T7739] RBP: 00007f58f963506b R08: 0000000000000000 R09: 0000000000000000 [ 175.036268][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.036283][ T7739] R13: 00007f58f9826038 R14: 00007f58f9825fa0 R15: 00007ffdc660e4a8 [ 175.036323][ T7739] [ 175.112946][ T7728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.113162][ T7728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.113327][ T7728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.113490][ T7728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.113679][ T7728] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 175.263022][ T7746] netlink: 'syz.2.730': attribute type 34 has an invalid length. [ 175.400781][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input14 [ 175.517662][ T9] usb 4-1: USB disconnect, device number 8 [ 175.517662][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 175.650009][ T9] appletouch 4-1:0.85: input: appletouch disconnected [ 175.954224][ T7764] capability: warning: `syz.1.736' uses deprecated v2 capabilities in a way that may be insecure [ 176.256972][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 176.381741][ T7759] loop4: detected capacity change from 0 to 32768 [ 176.409723][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.465359][ T7759] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 176.574436][ T7759] XFS (loop4): Ending clean mount [ 176.694871][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 176.803906][ T7759] XFS (loop4): User initiated shutdown received. [ 176.803976][ T7759] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458). Shutting down filesystem. [ 176.804028][ T7759] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 176.893797][ T5620] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 176.956182][ T7801] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.126442][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout [ 177.126495][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.126525][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.126556][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.130386][ T7803] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 177.241282][ T7809] loop4: detected capacity change from 0 to 1024 [ 177.333272][ T7809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.435526][ T5788] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.562348][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.600318][ T5788] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 177.603634][ T5788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 177.603664][ T5788] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 177.603707][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.669918][ T5788] usb 2-1: probing VID:PID(0424:012C) [ 177.697021][ T5788] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 177.697053][ T5788] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 177.697076][ T5788] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 177.697098][ T5788] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 177.697120][ T5788] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 177.804042][ T7830] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.941813][ T7833] loop0: detected capacity change from 0 to 512 [ 177.955772][ T7833] EXT4-fs: Ignoring removed i_version option [ 177.994297][ T7833] EXT4-fs (loop0): 1 orphan inode deleted [ 178.022475][ T7833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.061958][ T5788] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 178.161391][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.268563][ T5788] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 178.354537][ T7844] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.543495][ T7849] loop3: detected capacity change from 0 to 512 [ 178.577442][ T7854] FAULT_INJECTION: forcing a failure. [ 178.577442][ T7854] name failslab, interval 1, probability 0, space 0, times 0 [ 178.577485][ T7854] CPU: 0 UID: 0 PID: 7854 Comm: syz.4.768 Not tainted syzkaller #0 PREEMPT(full) [ 178.577512][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 178.577528][ T7854] Call Trace: [ 178.577538][ T7854] [ 178.577549][ T7854] dump_stack_lvl+0xe8/0x150 [ 178.577592][ T7854] should_fail_ex+0x410/0x560 [ 178.577629][ T7854] should_failslab+0xa8/0x100 [ 178.577664][ T7854] ? dup_fd+0x56/0xaf0 [ 178.577697][ T7854] kmem_cache_alloc_noprof+0xa1/0x600 [ 178.577727][ T7854] ? dup_fd+0x56/0xaf0 [ 178.577766][ T7854] ? do_futex+0x3e7/0x4e0 [ 178.577805][ T7854] dup_fd+0x56/0xaf0 [ 178.577839][ T7854] ? __pfx_do_futex+0x10/0x10 [ 178.577873][ T7854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.577921][ T7854] ksys_unshare+0x50f/0x950 [ 178.577966][ T7854] ? __pfx_ksys_unshare+0x10/0x10 [ 178.578004][ T7854] ? rcu_is_watching+0x16/0xb0 [ 178.578050][ T7854] __x64_sys_unshare+0x38/0x50 [ 178.578096][ T7854] do_syscall_64+0x166/0x520 [ 178.578132][ T7854] ? trace_irq_disable+0x3b/0x140 [ 178.578159][ T7854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.578190][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.578214][ T7854] RIP: 0033:0x7fc11359e159 [ 178.578237][ T7854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.578257][ T7854] RSP: 002b:00007fc11444c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 178.578283][ T7854] RAX: ffffffffffffffda RBX: 00007fc113825fa0 RCX: 00007fc11359e159 [ 178.578303][ T7854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042040400 [ 178.578319][ T7854] RBP: 00007fc11363506b R08: 0000000000000000 R09: 0000000000000000 [ 178.578334][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.578350][ T7854] R13: 00007fc113826038 R14: 00007fc113825fa0 R15: 00007ffef4546548 [ 178.578390][ T7854] [ 178.602365][ T7849] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 178.602394][ T7849] loop3: lost filesystem error report for type 5 error -12 [ 178.609856][ T7849] EXT4-fs (loop3): 2 truncates cleaned up [ 178.614331][ T7849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.873658][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.089370][ T5788] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 179.123540][ T5788] usb 2-1: USB disconnect, device number 7 [ 179.149093][ T5788] USB vub300 remote SDIO host controller[0] now disconnected [ 179.206173][ T5635] Bluetooth: hci5: command 0x0c1a tx timeout [ 179.256247][ T7880] loop2: detected capacity change from 0 to 16 [ 179.268587][ T7880] erofs (device loop2): mounted with root inode @ nid 36. [ 179.285733][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 179.285758][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5620, name: syz-executor [ 179.285780][ C1] preempt_count: 102, expected: 0 [ 179.285794][ C1] RCU nest depth: 2, expected: 0 [ 179.285807][ C1] locks held by syz-executor/5620: 8, last CPU#1: [ 179.285826][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 179.285911][ C1] #1: ffff88807efef180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 179.285977][ C1] #2: ffff88807931ccc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 179.286051][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 179.286128][ C1] #4: ffff88804fa6a5b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 179.286215][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 179.286290][ C1] #6: ffff8880586a3c78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 179.286385][ C1] #7: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 179.286462][ C1] Preemption disabled at: [ 179.286469][ C1] [<0000000000000000>] 0x0 [ 179.286499][ C1] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 179.286527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 179.286543][ C1] Call Trace: [ 179.286553][ C1] [ 179.286572][ C1] dump_stack_lvl+0xe8/0x150 [ 179.286613][ C1] __might_resched+0x36a/0x4c0 [ 179.286661][ C1] __cancel_work_sync+0x6d/0x110 [ 179.286705][ C1] mmc_free_host+0x19/0x40 [ 179.286737][ C1] call_timer_fn+0x18d/0x5f0 [ 179.286771][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 179.286814][ C1] ? call_timer_fn+0xd5/0x5f0 [ 179.286847][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 179.286894][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 179.286927][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 179.286974][ C1] __run_timer_base+0x652/0x8b0 [ 179.287004][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.287052][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 179.287089][ C1] ? ktime_get+0x1f5/0x220 [ 179.287118][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.287150][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.287188][ C1] run_timer_softirq+0xb7/0x170 [ 179.287221][ C1] handle_softirqs+0x226/0x860 [ 179.287261][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 179.287305][ C1] __irq_exit_rcu+0xcb/0x220 [ 179.287341][ C1] irq_exit_rcu+0x9/0x30 [ 179.287373][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 179.287414][ C1] [ 179.287423][ C1] [ 179.287434][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.287463][ C1] RIP: 0010:vm_normal_page+0xab/0x2b0 [ 179.287492][ C1] Code: 00 31 ff e8 37 66 ab ff 49 81 e5 00 02 00 00 0f 85 f9 00 00 00 4c 8b 2d 13 dc 5d 0e 48 89 df 4c 89 ee e8 28 63 ab ff 4c 39 eb <0f> 87 29 01 00 00 49 bc 00 00 00 00 00 fc ff df 48 c7 c0 48 a1 6e [ 179.287514][ C1] RSP: 0018:ffffc9000416f298 EFLAGS: 00000293 [ 179.287536][ C1] RAX: ffffffff821c8db8 RBX: 0000000000063fbb RCX: ffff8880363d5dc0 [ 179.287555][ C1] RDX: 0000000000000000 RSI: 000000000023ffff RDI: 0000000000063fbb [ 179.287579][ C1] RBP: 000000fffffffe00 R08: ffff88801e53ea6f R09: 1ffff11003ca7d4d [ 179.287599][ C1] R10: dffffc0000000000 R11: ffffed1003ca7d4e R12: ffff8880661c5500 [ 179.287618][ C1] R13: 000000000023ffff R14: 00007fc112bb6000 R15: 0008000000063fbb [ 179.287647][ C1] ? vm_normal_page+0xa8/0x2b0 [ 179.287681][ C1] ? vm_normal_page+0xa8/0x2b0 [ 179.287714][ C1] copy_pmd_range+0x8dd/0x5c10 [ 179.287775][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 179.287815][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.287853][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 179.287892][ C1] ? do_syscall_64+0x166/0x520 [ 179.287936][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.287967][ C1] ? __lock_acquire+0x747/0x2de0 [ 179.288001][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 179.288045][ C1] copy_page_range+0xc82/0x1290 [ 179.288101][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 179.288139][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.288170][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.288200][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 179.288237][ C1] dup_mmap+0xf17/0x1dc0 [ 179.288283][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 179.288308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.288339][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.288394][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.288424][ C1] ? lock_acquire+0x115/0x350 [ 179.288454][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.288503][ C1] copy_mm+0x115/0x480 [ 179.288541][ C1] copy_process+0x1e79/0x4400 [ 179.288582][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.288612][ C1] ? __lock_acquire+0x747/0x2de0 [ 179.288653][ C1] ? copy_process+0xd16/0x4400 [ 179.288709][ C1] ? __pfx_copy_process+0x10/0x10 [ 179.288758][ C1] kernel_clone+0x2d7/0x940 [ 179.288803][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 179.288863][ C1] __x64_sys_clone+0x1b6/0x230 [ 179.288905][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 179.288964][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.288994][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 179.289034][ C1] do_syscall_64+0x166/0x520 [ 179.289069][ C1] ? trace_irq_disable+0x3b/0x140 [ 179.289099][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.289131][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.289157][ C1] RIP: 0033:0x7fc1135c6bd2 [ 179.289180][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 179.289201][ C1] RSP: 002b:00007ffef4546760 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 179.289227][ C1] RAX: ffffffffffffffda RBX: 00007ffef4546760 RCX: 00007fc1135c6bd2 [ 179.289247][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 179.289263][ C1] RBP: 00007ffef45468ec R08: 0000000000000000 R09: 0000000000000001 [ 179.289281][ C1] R10: 000055558eb667d0 R11: 0000000000000246 R12: 0000000000000001 [ 179.289298][ C1] R13: 00000000000927c0 R14: 000000000002bc04 R15: 00007ffef4546940 [ 179.289338][ C1] [ 179.290277][ C1] [ 179.633631][ T7885] loop1: detected capacity change from 0 to 512 [ 179.644263][ T7885] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 179.921914][ T7885] EXT4-fs (loop1): 1 truncate cleaned up [ 179.925946][ T7885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.945486][ C1] ============================= [ 179.950342][ C1] WARNING: suspicious RCU usage [ 179.955214][ C1] syzkaller #0 Tainted: G W [ 179.959262][ T7885] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.784: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 179.965372][ T7885] EXT4-fs (loop1): Remounting filesystem read-only [ 179.965396][ T7885] EXT4-fs warning (device loop1): ext4_rename_delete:3741: inode #2: comm syz.1.784: Deleting old file: nlink 5, error=-117 [ 180.000781][ C1] ----------------------------- [ 180.005679][ C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 180.017691][ C1] [ 180.017691][ C1] other info that might help us debug this: [ 180.017691][ C1] [ 180.027984][ C1] [ 180.027984][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 180.036189][ C1] locks held by syz-executor/5620: 8, last CPU#1: [ 180.042617][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 180.051570][ C1] #1: ffff88807efef180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 180.060738][ C1] #2: ffff88807931ccc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 180.070099][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 180.079697][ C1] #4: ffff88804fa6a5b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 180.090308][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 180.099920][ C1] #6: ffff8880586a3c78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 180.110378][ C1] #7: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 180.120916][ C1] [ 180.120916][ C1] stack backtrace: [ 180.126961][ C1] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 180.138034][ C1] Tainted: [W]=WARN [ 180.141849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.151927][ C1] Call Trace: [ 180.155270][ C1] [ 180.158117][ C1] dump_stack_lvl+0xe8/0x150 [ 180.162821][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 180.168218][ C1] __synchronize_srcu+0x157/0x2f0 [ 180.173263][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 180.178818][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 180.183958][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.189647][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.195297][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 180.200859][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.206530][ C1] ? synchronize_srcu+0x20a/0x260 [ 180.211650][ C1] wakeup_source_unregister+0x129/0x3f0 [ 180.217323][ C1] mmc_host_classdev_release+0x47/0x100 [ 180.223014][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 180.229186][ C1] device_release+0xc4/0x1f0 [ 180.233811][ C1] kobject_put+0x222/0x550 [ 180.238271][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 180.243064][ C1] call_timer_fn+0x18d/0x5f0 [ 180.247661][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 180.254436][ C1] ? call_timer_fn+0xd5/0x5f0 [ 180.259131][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 180.264301][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.269514][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 180.276381][ C1] __run_timer_base+0x652/0x8b0 [ 180.281272][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.286935][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 180.292330][ C1] ? ktime_get+0x1f5/0x220 [ 180.296756][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.302387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.308233][ C1] run_timer_softirq+0xb7/0x170 [ 180.313094][ C1] handle_softirqs+0x226/0x860 [ 180.317879][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 180.323039][ C1] __irq_exit_rcu+0xcb/0x220 [ 180.327645][ C1] irq_exit_rcu+0x9/0x30 [ 180.331888][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 180.337527][ C1] [ 180.340458][ C1] [ 180.343387][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 180.349370][ C1] RIP: 0010:vm_normal_page+0xab/0x2b0 [ 180.354755][ C1] Code: 00 31 ff e8 37 66 ab ff 49 81 e5 00 02 00 00 0f 85 f9 00 00 00 4c 8b 2d 13 dc 5d 0e 48 89 df 4c 89 ee e8 28 63 ab ff 4c 39 eb <0f> 87 29 01 00 00 49 bc 00 00 00 00 00 fc ff df 48 c7 c0 48 a1 6e [ 180.374371][ C1] RSP: 0018:ffffc9000416f298 EFLAGS: 00000293 [ 180.380457][ C1] RAX: ffffffff821c8db8 RBX: 0000000000063fbb RCX: ffff8880363d5dc0 [ 180.388434][ C1] RDX: 0000000000000000 RSI: 000000000023ffff RDI: 0000000000063fbb [ 180.396408][ C1] RBP: 000000fffffffe00 R08: ffff88801e53ea6f R09: 1ffff11003ca7d4d [ 180.404386][ C1] R10: dffffc0000000000 R11: ffffed1003ca7d4e R12: ffff8880661c5500 [ 180.412521][ C1] R13: 000000000023ffff R14: 00007fc112bb6000 R15: 0008000000063fbb [ 180.419017][ T7891] loop0: detected capacity change from 0 to 32768 [ 180.426906][ C1] ? vm_normal_page+0xa8/0x2b0 [ 180.431690][ C1] ? vm_normal_page+0xa8/0x2b0 [ 180.436476][ C1] copy_pmd_range+0x8dd/0x5c10 [ 180.439822][ T7891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.785 (7891) [ 180.453929][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 180.459404][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.465052][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 180.470271][ C1] ? do_syscall_64+0x166/0x520 [ 180.475073][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.480738][ C1] ? __lock_acquire+0x747/0x2de0 [ 180.485688][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 180.490924][ C1] copy_page_range+0xc82/0x1290 [ 180.495801][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 180.501105][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.506737][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.512365][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 180.519299][ C1] dup_mmap+0xf17/0x1dc0 [ 180.523582][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 180.528250][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.533880][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 180.538920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.544569][ C1] ? lock_acquire+0x115/0x350 [ 180.549241][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.554889][ C1] copy_mm+0x115/0x480 [ 180.558988][ C1] copy_process+0x1e79/0x4400 [ 180.563770][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.569427][ C1] ? __lock_acquire+0x747/0x2de0 [ 180.574378][ C1] ? copy_process+0xd16/0x4400 [ 180.579165][ C1] ? __pfx_copy_process+0x10/0x10 [ 180.584226][ C1] kernel_clone+0x2d7/0x940 [ 180.588736][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 180.593783][ C1] __x64_sys_clone+0x1b6/0x230 [ 180.598553][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 180.603857][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.609576][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 180.614864][ C1] do_syscall_64+0x166/0x520 [ 180.619629][ C1] ? trace_irq_disable+0x3b/0x140 [ 180.624645][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.630754][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.636732][ C1] RIP: 0033:0x7fc1135c6bd2 [ 180.641777][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 180.662399][ C1] RSP: 002b:00007ffef4546760 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 180.671017][ C1] RAX: ffffffffffffffda RBX: 00007ffef4546760 RCX: 00007fc1135c6bd2 [ 180.679361][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 180.687363][ C1] RBP: 00007ffef45468ec R08: 0000000000000000 R09: 0000000000000001 [ 180.695334][ C1] R10: 000055558eb667d0 R11: 0000000000000246 R12: 0000000000000001 [ 180.703390][ C1] R13: 00000000000927c0 R14: 000000000002bc04 R15: 00007ffef4546940 [ 180.711464][ C1] [ 180.714564][ C1] BUG: sleeping function called from invali ** replaying previous printk message ** [ 180.714564][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 180.714583][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5620, name: syz-executor [ 180.714603][ C1] preempt_count: 102, expected: 0 [ 180.714617][ C1] RCU nest depth: 2, expected: 0 [ 180.714630][ C1] locks held by syz-executor/5620: 8, last CPU#1: [ 180.714649][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 180.714730][ C1] #1: ffff88807efef180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 180.714795][ C1] #2: ffff88807931ccc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 180.714865][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 180.714942][ C1] #4: ffff88804fa6a5b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 180.715026][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 180.715101][ C1] #6: ffff8880586a3c78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 180.715195][ C1] #7: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 180.715311][ C1] Preemption disabled at: [ 180.715319][ C1] [<0000000000000000>] 0x0 [ 180.715351][ C1] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 180.715385][ C1] Tainted: [W]=WARN [ 180.715394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.715410][ C1] Call Trace: [ 180.715423][ C1] [ 180.715434][ C1] dump_stack_lvl+0xe8/0x150 [ 180.715473][ C1] __might_resched+0x36a/0x4c0 [ 180.715527][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 180.715561][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 180.715587][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 180.715640][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.715671][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 180.715702][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.715732][ C1] ? synchronize_srcu+0x20a/0x260 [ 180.715764][ C1] wakeup_source_unregister+0x129/0x3f0 [ 180.715803][ C1] mmc_host_classdev_release+0x47/0x100 [ 180.715842][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 180.715874][ C1] device_release+0xc4/0x1f0 [ 180.715916][ C1] kobject_put+0x222/0x550 [ 180.715943][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 180.715983][ C1] call_timer_fn+0x18d/0x5f0 [ 180.716017][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 180.716059][ C1] ? call_timer_fn+0xd5/0x5f0 [ 180.716091][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 180.716138][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.716171][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 180.716218][ C1] __run_timer_base+0x652/0x8b0 [ 180.716249][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.716297][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 180.716334][ C1] ? ktime_get+0x1f5/0x220 [ 180.716363][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.716392][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.716431][ C1] run_timer_softirq+0xb7/0x170 [ 180.716463][ C1] handle_softirqs+0x226/0x860 [ 180.716509][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 180.716552][ C1] __irq_exit_rcu+0xcb/0x220 [ 180.716589][ C1] irq_exit_rcu+0x9/0x30 [ 180.716620][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 180.716657][ C1] [ 180.716666][ C1] [ 180.716677][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 180.716706][ C1] RIP: 0010:vm_normal_page+0xab/0x2b0 [ 180.716735][ C1] Code: 00 31 ff e8 37 66 ab ff 49 81 e5 00 02 00 00 0f 85 f9 00 00 00 4c 8b 2d 13 dc 5d 0e 48 89 df 4c 89 ee e8 28 63 ab ff 4c 39 eb <0f> 87 29 01 00 00 49 bc 00 00 00 00 00 fc ff df 48 c7 c0 48 a1 6e [ 180.716756][ C1] RSP: 0018:ffffc9000416f298 EFLAGS: 00000293 [ 180.716779][ C1] RAX: ffffffff821c8db8 RBX: 0000000000063fbb RCX: ffff8880363d5dc0 [ 180.716798][ C1] RDX: 0000000000000000 RSI: 000000000023ffff RDI: 0000000000063fbb [ 180.716814][ C1] RBP: 000000fffffffe00 R08: ffff88801e53ea6f R09: 1ffff11003ca7d4d [ 180.716833][ C1] R10: dffffc0000000000 R11: ffffed1003ca7d4e R12: ffff8880661c5500 [ 180.716853][ C1] R13: 000000000023ffff R14: 00007fc112bb6000 R15: 0008000000063fbb [ 180.716881][ C1] ? vm_normal_page+0xa8/0x2b0 [ 180.716918][ C1] ? vm_normal_page+0xa8/0x2b0 [ 180.716952][ C1] copy_pmd_range+0x8dd/0x5c10 [ 180.717014][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 180.717054][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717092][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 180.717130][ C1] ? do_syscall_64+0x166/0x520 [ 180.717174][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717204][ C1] ? __lock_acquire+0x747/0x2de0 [ 180.717240][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 180.717285][ C1] copy_page_range+0xc82/0x1290 [ 180.717342][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 180.717380][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717411][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717441][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 180.717478][ C1] dup_mmap+0xf17/0x1dc0 [ 180.717530][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 180.717556][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717586][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 180.717641][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717671][ C1] ? lock_acquire+0x115/0x350 [ 180.717700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717750][ C1] copy_mm+0x115/0x480 [ 180.717788][ C1] copy_process+0x1e79/0x4400 [ 180.717822][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717852][ C1] ? __lock_acquire+0x747/0x2de0 [ 180.717894][ C1] ? copy_process+0xd16/0x4400 [ 180.717950][ C1] ? __pfx_copy_process+0x10/0x10 [ 180.718000][ C1] kernel_clone+0x2d7/0x940 [ 180.718045][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 180.718106][ C1] __x64_sys_clone+0x1b6/0x230 [ 180.718148][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 180.718207][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.718236][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 180.718277][ C1] do_syscall_64+0x166/0x520 [ 180.718312][ C1] ? trace_irq_disable+0x3b/0x140 [ 180.718340][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.718374][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.718399][ C1] RIP: 0033:0x7fc1135c6bd2 [ 180.718430][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 180.718452][ C1] RSP: 002b:00007ffef4546760 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 180.718477][ C1] RAX: ffffffffffffffda RBX: 00007ffef4546760 RCX: 00007fc1135c6bd2 [ 180.718501][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 180.718517][ C1] RBP: 00007ffef45468ec R08: 0000000000000000 R09: 0000000000000001 [ 180.718534][ C1] R10: 000055558eb667d0 R11: 0000000000000246 R12: 0000000000000001 [ 180.718551][ C1] R13: 00000000000927c0 R14: 000000000002bc04 R15: 00007ffef4546940 [ 180.718590][ C1] [ 180.718604][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90004168000, but annotated. [ 180.719406][ C1] ------------[ cut here ]------------ [ 180.719415][ C1] 1 [ 180.719422][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/5620 [ 181.427829][ C1] Modules linked in: [ 181.431734][ C1] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 181.442758][ C1] Tainted: [W]=WARN [ 181.446553][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.456645][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 181.462561][ C1] Code: 25 fc cc 41 ff c7 44 89 3d 89 3e e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd a0 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 a9 6d 0a 3b 05 9f [ 181.482164][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 181.488241][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 7c8bec26bee19900 [ 181.496285][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 181.504266][ C1] RBP: ffff8880363d5de0 R08: 0000000000000100 R09: 0000000000000001 [ 181.512244][ C1] R10: dffffc0000000000 R11: fffff520001430b9 R12: 1ffff9200014314c [ 181.520218][ C1] R13: ffff88807dee2888 R14: dffffc0000000000 R15: 0000000000000001 [ 181.528204][ C1] FS: 000055558eb66500(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 181.537192][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.543809][ C1] CR2: 00007fc1143556c8 CR3: 000000005add5000 CR4: 0000000000350ef0 [ 181.551894][ C1] Call Trace: [ 181.555282][ C1] [ 181.558164][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.563802][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 181.569389][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 181.574599][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 181.580233][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.585318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.590969][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 181.596553][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.602670][ C1] ? synchronize_srcu+0x20a/0x260 [ 181.607728][ C1] wakeup_source_unregister+0x129/0x3f0 [ 181.613282][ C1] mmc_host_classdev_release+0x47/0x100 [ 181.618834][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 181.624996][ C1] device_release+0xc4/0x1f0 [ 181.629597][ C1] kobject_put+0x222/0x550 [ 181.634010][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 181.638785][ C1] call_timer_fn+0x18d/0x5f0 [ 181.643395][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 181.650192][ C1] ? call_timer_fn+0xd5/0x5f0 [ 181.654894][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 181.660410][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 181.665618][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 181.672312][ C1] __run_timer_base+0x652/0x8b0 [ 181.677602][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.683256][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 181.688909][ C1] ? ktime_get+0x1f5/0x220 [ 181.693326][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.698962][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.705222][ C1] run_timer_softirq+0xb7/0x170 [ 181.710180][ C1] handle_softirqs+0x226/0x860 [ 181.715039][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 181.719817][ C1] __irq_exit_rcu+0xcb/0x220 [ 181.724423][ C1] irq_exit_rcu+0x9/0x30 [ 181.728851][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 181.734518][ C1] [ 181.737473][ C1] [ 181.740437][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.746418][ C1] RIP: 0010:vm_normal_page+0xab/0x2b0 [ 181.751800][ C1] Code: 00 31 ff e8 37 66 ab ff 49 81 e5 00 02 00 00 0f 85 f9 00 00 00 4c 8b 2d 13 dc 5d 0e 48 89 df 4c 89 ee e8 28 63 ab ff 4c 39 eb <0f> 87 29 01 00 00 49 bc 00 00 00 00 00 fc ff df 48 c7 c0 48 a1 6e [ 181.771404][ C1] RSP: 0018:ffffc9000416f298 EFLAGS: 00000293 [ 181.777481][ C1] RAX: ffffffff821c8db8 RBX: 0000000000063fbb RCX: ffff8880363d5dc0 [ 181.785450][ C1] RDX: 0000000000000000 RSI: 000000000023ffff RDI: 0000000000063fbb [ 181.793419][ C1] RBP: 000000fffffffe00 R08: ffff88801e53ea6f R09: 1ffff11003ca7d4d [ 181.801391][ C1] R10: dffffc0000000000 R11: ffffed1003ca7d4e R12: ffff8880661c5500 [ 181.809374][ C1] R13: 000000000023ffff R14: 00007fc112bb6000 R15: 0008000000063fbb [ 181.817389][ C1] ? vm_normal_page+0xa8/0x2b0 [ 181.822187][ C1] ? vm_normal_page+0xa8/0x2b0 [ 181.826953][ C1] copy_pmd_range+0x8dd/0x5c10 [ 181.831746][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 181.837216][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.842861][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 181.848154][ C1] ? do_syscall_64+0x166/0x520 [ 181.852939][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.858599][ C1] ? __lock_acquire+0x747/0x2de0 [ 181.863633][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 181.868844][ C1] copy_page_range+0xc82/0x1290 [ 181.873723][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 181.879107][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.884741][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.890395][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 181.897344][ C1] dup_mmap+0xf17/0x1dc0 [ 181.901628][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 181.906312][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.911970][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.917018][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.922690][ C1] ? lock_acquire+0x115/0x350 [ 181.927406][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.933076][ C1] copy_mm+0x115/0x480 [ 181.937267][ C1] copy_process+0x1e79/0x4400 [ 181.942047][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.947716][ C1] ? __lock_acquire+0x747/0x2de0 [ 181.952680][ C1] ? copy_process+0xd16/0x4400 [ 181.957503][ C1] ? __pfx_copy_process+0x10/0x10 [ 181.962815][ C1] kernel_clone+0x2d7/0x940 [ 181.967434][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 181.972495][ C1] __x64_sys_clone+0x1b6/0x230 [ 181.977285][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 181.982629][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.988296][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 181.993694][ C1] do_syscall_64+0x166/0x520 [ 181.998306][ C1] ? trace_irq_disable+0x3b/0x140 [ 182.003339][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.009413][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.015339][ C1] RIP: 0033:0x7fc1135c6bd2 [ 182.019758][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 182.039652][ C1] RSP: 002b:00007ffef4546760 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 182.048162][ C1] RAX: ffffffffffffffda RBX: 00007ffef4546760 RCX: 00007fc1135c6bd2 [ 182.056233][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 182.064204][ C1] RBP: 00007ffef45468ec R08: 0000000000000000 R09: 0000000000000001 [ 182.072177][ C1] R10: 000055558eb667d0 R11: 0000000000000246 R12: 0000000000000001 [ 182.080145][ C1] R13: 00000000000927c0 R14: 000000000002bc04 R15: 00007ffef4546940 [ 182.088166][ C1] [ 182.091182][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.098462][ C1] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 182.109499][ C1] Tainted: [W]=WARN [ 182.113322][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.123409][ C1] Call Trace: [ 182.126691][ C1] [ 182.129536][ C1] vpanic+0x56d/0xa60 [ 182.133559][ C1] ? __pfx__printk+0x10/0x10 [ 182.138153][ C1] ? __pfx_vpanic+0x10/0x10 [ 182.142663][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 182.147958][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 182.153223][ C1] panic+0xc5/0xd0 [ 182.156959][ C1] ? __pfx_panic+0x10/0x10 [ 182.161405][ C1] __warn+0x315/0x4c0 [ 182.165388][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 182.170708][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 182.176017][ C1] __report_bug+0x276/0x570 [ 182.180543][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 182.185922][ C1] ? __pfx___report_bug+0x10/0x10 [ 182.191040][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.196676][ C1] ? __wake_up_klogd+0xf0/0x130 [ 182.201535][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.207456][ C1] ? vprintk_emit+0x4ee/0x560 [ 182.212160][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 182.217213][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 182.222500][ C1] report_bug+0x16b/0x220 [ 182.226838][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 182.232121][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 182.237405][ C1] handle_bug+0x9c/0x200 [ 182.241642][ C1] exc_invalid_op+0x1a/0x50 [ 182.246138][ C1] asm_exc_invalid_op+0x1a/0x20 [ 182.250981][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 182.256901][ C1] Code: 25 fc cc 41 ff c7 44 89 3d 89 3e e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd a0 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 a9 6d 0a 3b 05 9f [ 182.276593][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 182.282667][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 7c8bec26bee19900 [ 182.290644][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 182.298608][ C1] RBP: ffff8880363d5de0 R08: 0000000000000100 R09: 0000000000000001 [ 182.306571][ C1] R10: dffffc0000000000 R11: fffff520001430b9 R12: 1ffff9200014314c [ 182.314542][ C1] R13: ffff88807dee2888 R14: dffffc0000000000 R15: 0000000000000001 [ 182.322557][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 182.327971][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.333607][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 182.339166][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 182.344190][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 182.349730][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.354776][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.360402][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 182.365947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.371573][ C1] ? synchronize_srcu+0x20a/0x260 [ 182.376876][ C1] wakeup_source_unregister+0x129/0x3f0 [ 182.382431][ C1] mmc_host_classdev_release+0x47/0x100 [ 182.387978][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 182.394161][ C1] device_release+0xc4/0x1f0 [ 182.398758][ C1] kobject_put+0x222/0x550 [ 182.403174][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 182.407944][ C1] call_timer_fn+0x18d/0x5f0 [ 182.412535][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 182.419216][ C1] ? call_timer_fn+0xd5/0x5f0 [ 182.423893][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 182.429015][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.434303][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 182.440983][ C1] __run_timer_base+0x652/0x8b0 [ 182.446281][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.451925][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 182.457299][ C1] ? ktime_get+0x1f5/0x220 [ 182.461708][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.467334][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.472970][ C1] run_timer_softirq+0xb7/0x170 [ 182.477820][ C1] handle_softirqs+0x226/0x860 [ 182.482602][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 182.487371][ C1] __irq_exit_rcu+0xcb/0x220 [ 182.491963][ C1] irq_exit_rcu+0x9/0x30 [ 182.496204][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 182.501893][ C1] [ 182.504814][ C1] [ 182.507821][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 182.513837][ C1] RIP: 0010:vm_normal_page+0xab/0x2b0 [ 182.519205][ C1] Code: 00 31 ff e8 37 66 ab ff 49 81 e5 00 02 00 00 0f 85 f9 00 00 00 4c 8b 2d 13 dc 5d 0e 48 89 df 4c 89 ee e8 28 63 ab ff 4c 39 eb <0f> 87 29 01 00 00 49 bc 00 00 00 00 00 fc ff df 48 c7 c0 48 a1 6e [ 182.538804][ C1] RSP: 0018:ffffc9000416f298 EFLAGS: 00000293 [ 182.544872][ C1] RAX: ffffffff821c8db8 RBX: 0000000000063fbb RCX: ffff8880363d5dc0 [ 182.552836][ C1] RDX: 0000000000000000 RSI: 000000000023ffff RDI: 0000000000063fbb [ 182.560798][ C1] RBP: 000000fffffffe00 R08: ffff88801e53ea6f R09: 1ffff11003ca7d4d [ 182.568871][ C1] R10: dffffc0000000000 R11: ffffed1003ca7d4e R12: ffff8880661c5500 [ 182.576864][ C1] R13: 000000000023ffff R14: 00007fc112bb6000 R15: 0008000000063fbb [ 182.584955][ C1] ? vm_normal_page+0xa8/0x2b0 [ 182.589819][ C1] ? vm_normal_page+0xa8/0x2b0 [ 182.594587][ C1] copy_pmd_range+0x8dd/0x5c10 [ 182.599378][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 182.604852][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.610498][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 182.615706][ C1] ? do_syscall_64+0x166/0x520 [ 182.620489][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.626124][ C1] ? __lock_acquire+0x747/0x2de0 [ 182.631079][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 182.636284][ C1] copy_page_range+0xc82/0x1290 [ 182.641159][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 182.646449][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.652101][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.657728][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 182.664666][ C1] dup_mmap+0xf17/0x1dc0 [ 182.668931][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 182.673602][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.679228][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.684273][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.689923][ C1] ? lock_acquire+0x115/0x350 [ 182.694596][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.700245][ C1] copy_mm+0x115/0x480 [ 182.704326][ C1] copy_process+0x1e79/0x4400 [ 182.709006][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.714648][ C1] ? __lock_acquire+0x747/0x2de0 [ 182.719597][ C1] ? copy_process+0xd16/0x4400 [ 182.724383][ C1] ? __pfx_copy_process+0x10/0x10 [ 182.729429][ C1] kernel_clone+0x2d7/0x940 [ 182.734499][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 182.739642][ C1] __x64_sys_clone+0x1b6/0x230 [ 182.744436][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 182.749839][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.755554][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 182.760883][ C1] do_syscall_64+0x166/0x520 [ 182.765487][ C1] ? trace_irq_disable+0x3b/0x140 [ 182.770511][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.776583][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.782490][ C1] RIP: 0033:0x7fc1135c6bd2 [ 182.786899][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 182.806509][ C1] RSP: 002b:00007ffef4546760 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 182.814944][ C1] RAX: ffffffffffffffda RBX: 00007ffef4546760 RCX: 00007fc1135c6bd2 [ 182.822917][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 182.830978][ C1] RBP: 00007ffef45468ec R08: 0000000000000000 R09: 0000000000000001 [ 182.838985][ C1] R10: 000055558eb667d0 R11: 0000000000000246 R12: 0000000000000001 [ 182.846953][ C1] R13: 00000000000927c0 R14: 000000000002bc04 R15: 00007ffef4546940 [ 182.854961][ C1] [ 182.858306][ C1] Kernel Offset: disabled [ 182.862803][ C1] Rebooting in 86400 seconds..