last executing test programs: 45.200823131s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='tcp\n', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='ipv4\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='4420\n', 0x5) close(r4) symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00') r5 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) close(r5) 45.087949543s ago: executing program 2 (id=3): openat(0xffffffffffffff9c, &(0x7f0000000040)='./lib/firmware/htc_9271.fw\x00', 0x0, 0x0) 45.087124503s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/spi/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000600), 0x1000) 44.987037436s ago: executing program 0 (id=7): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002000904000803ff000000070503020002000705840200020007058801000201"], 0x0) syz_usb_ep_read(r0, 0x3, 0x40, &(0x7f0000000200)) syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000100)) syz_usb_ep_read(r0, 0x3, 0x40, &(0x7f0000000200)) syz_usb_ep_write(r0, 0x84, 0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 44.986929786s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 44.986784596s ago: executing program 4 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x12', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) 44.986744706s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/hid/drivers/nintendo\x00', 0x0, 0x0) 44.949808067s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='- - -\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/scsi_host/host1/scan\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='- - -\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/sda/device/unload_heads\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1000\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/scsi_host/host0/link_power_management_policy\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='max_power\x00', 0xa) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 44.942054147s ago: executing program 4 (id=12): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000400a1150120001010203010902270001010080320904000003ffffff00070581024000000705820240000007050102400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x81, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x81, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x81, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x81, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x81, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x81, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x81, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x81, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000400)="0000000441414141") nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 43.375054836s ago: executing program 1 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1004}, {0x1004}}}]}}]}]}]}}]}, 0x5c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011000001010101010101020000000000080000"], 0x20) 43.228564789s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1f.0/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:1f.2/vendor\x00', 0x0, 0x0) 43.217391579s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='offline\n', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='offline\n', 0x8) 42.811111969s ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/psmouse/parameters/synaptics_intertouch\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='synaptics-smbus', 0xf) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='reconnect\n', 0xa) close(r2) 42.810983139s ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) 42.810861499s ago: executing program 1 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001140)='./proc\x00', &(0x7f0000001180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./dvb-usb-vp702x-02.fw\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000001240)='./proc/self/cwd\x00', &(0x7f0000000100)=""/4096, 0x1000) write(r1, &(0x7f0000000100)='\x00'/4096, 0x1000) close(r1) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040d31307320100010203010902200001010080fa0904000002ff0000000705820200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_disconnect(r2) 42.012772889s ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='freeze\n', 0x7) 41.910267081s ago: executing program 4 (id=35): socket$inet(0x2, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 41.686591157s ago: executing program 3 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100), &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/event_source/devices\x00', 0x10000, 0x0) getdents64(r0, &(0x7f0000000400)=""/1024, 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/event_source/devices/uncore_cha_0/format/filter_state\x00', 0x0, 0x0) read(r1, &(0x7f0000000900)=""/128, 0x80) 41.683033437s ago: executing program 3 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1234', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) 41.668552607s ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='offline\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='offline\n', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='offline\n', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='offline\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='offline\n', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='offline\n', 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='offline\n', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) write(r7, &(0x7f0000000700)='offline\n', 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0) write(r8, &(0x7f0000000700)='offline\n', 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0) write(r9, &(0x7f0000000700)='offline\n', 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0) write(r10, &(0x7f0000000700)='offline\n', 0x8) 41.111399161s ago: executing program 3 (id=42): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1d) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x6f) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x53) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000240)={{}, 0x1, 0x1d, 0x1}, 0x18) write$input_event(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000280)={{}, 0x1, 0x38, 0x1}, 0x18) write$input_event(r0, &(0x7f00000002a0), 0x18) write$input_event(r0, &(0x7f00000002c0)={{}, 0x1, 0x6f, 0x1}, 0x18) write$input_event(r0, &(0x7f00000002e0), 0x18) 41.088444741s ago: executing program 3 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1e) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x3, 0x1234, 0x5678, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) read(0xffffffffffffffff, &(0x7f0000000300)=""/100, 0x64) 41.003793374s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file1\x00', 0x42, 0x1ff) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 18.75286787s ago: executing program 32 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='freeze\n', 0x7) 18.73058066s ago: executing program 33 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001140)='./proc\x00', &(0x7f0000001180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./dvb-usb-vp702x-02.fw\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000001240)='./proc/self/cwd\x00', &(0x7f0000000100)=""/4096, 0x1000) write(r1, &(0x7f0000000100)='\x00'/4096, 0x1000) close(r1) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040d31307320100010203010902200001010080fa0904000002ff0000000705820200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_disconnect(r2) 18.711255981s ago: executing program 34 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='- - -\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/scsi_host/host1/scan\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='- - -\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/sda/device/unload_heads\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1000\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/scsi_host/host0/link_power_management_policy\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='max_power\x00', 0xa) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 18.680631901s ago: executing program 35 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file1\x00', 0x42, 0x1ff) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 18.655199722s ago: executing program 36 (id=35): socket$inet(0x2, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17.463251261s ago: executing program 5 (id=45): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d00060905820200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="9c000000100005000100000000000000000000000000000000000000000000000900030063616e3000000000700012000800010063616e00640002000c00050020020000200200002400010020a10700000000000000000000000000000000000000000000000000000000002400090080841e00000000000000000000000000000000000000000000000000000000000c001000080008000a000000", 0x9c) write(r0, &(0x7f0000000200)="20000000120001030100"/32, 0x20) 17.398603713s ago: executing program 9 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='3\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='offline\n', 0x8) 17.193156938s ago: executing program 8 (id=48): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040090463000001000000010902270001010080320904000003ff000000070581034000010705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) 17.187492488s ago: executing program 7 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\n\x00', 0x2) close(r1) 16.864998086s ago: executing program 9 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1234', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) 16.857589396s ago: executing program 6 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/subsystem\x00', 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/power\x00', 0x0, 0x0) close(r1) 16.794562888s ago: executing program 9 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='offline\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='offline\n', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='offline\n', 0x8) write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='offline\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='offline\n', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='offline\n', 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='offline\n', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) write(r7, &(0x7f0000000700)='offline\n', 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0) write(r8, &(0x7f0000000700)='offline\n', 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0) write(r9, &(0x7f0000000700)='offline\n', 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0) write(r10, &(0x7f0000000700)='offline\n', 0x8) 16.794332637s ago: executing program 6 (id=54): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1d) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x6f) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x53) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000240)={{}, 0x1, 0x1d, 0x1}, 0x18) write$input_event(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000280)={{}, 0x1, 0x38, 0x1}, 0x18) write$input_event(r0, &(0x7f00000002a0), 0x18) write$input_event(r0, &(0x7f00000002c0)={{}, 0x1, 0x6f, 0x1}, 0x18) write$input_event(r0, &(0x7f00000002e0), 0x18) 16.70561305s ago: executing program 6 (id=55): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000100)=0x58) 16.662717641s ago: executing program 6 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x0, 0x0) 16.477308626s ago: executing program 6 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/software\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/event_source/devices/breakpoint\x00', 0x0, 0x0) 16.185675223s ago: executing program 6 (id=58): close(0xca) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='freeze\n', 0x7) close(r3) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='- - -\n', 0x6) close(r4) 16.161555793s ago: executing program 7 (id=59): syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902200001010080320904000002fe0300000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) getpid() 0s ago: executing program 37 (id=45): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d00060905820200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="9c000000100005000100000000000000000000000000000000000000000000000900030063616e3000000000700012000800010063616e00640002000c00050020020000200200002400010020a10700000000000000000000000000000000000000000000000000000000002400090080841e00000000000000000000000000000000000000000000000000000000000c001000080008000a000000", 0x9c) write(r0, &(0x7f0000000200)="20000000120001030100"/32, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 22.690486][ T24] audit: type=1400 audit(1791128797.460:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.694008][ T271] cgroup: Unknown subsys name 'net' [ 22.713311][ T24] audit: type=1400 audit(1791128797.460:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.740588][ T24] audit: type=1400 audit(1791128797.490:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.741105][ T271] cgroup: Unknown subsys name 'devices' [ 22.947990][ T271] cgroup: Unknown subsys name 'hugetlb' [ 22.953630][ T271] cgroup: Unknown subsys name 'rlimit' [ 23.124388][ T24] audit: type=1400 audit(1791128797.890:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.147791][ T24] audit: type=1400 audit(1791128797.890:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.172640][ T24] audit: type=1400 audit(1791128797.890:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.180748][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.204691][ T24] audit: type=1400 audit(1791128797.970:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.230186][ T24] audit: type=1400 audit(1791128797.970:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.255806][ T24] audit: type=1400 audit(1791128798.000:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.255950][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.281495][ T24] audit: type=1400 audit(1791128798.000:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.848547][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.855623][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.863223][ T280] device bridge_slave_0 entered promiscuous mode [ 23.871355][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.878454][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.885840][ T280] device bridge_slave_1 entered promiscuous mode [ 23.905402][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.912643][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.920128][ T279] device bridge_slave_0 entered promiscuous mode [ 23.929484][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.936642][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.944173][ T279] device bridge_slave_1 entered promiscuous mode [ 24.014018][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.021238][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.028715][ T281] device bridge_slave_0 entered promiscuous mode [ 24.035582][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.042754][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.050382][ T281] device bridge_slave_1 entered promiscuous mode [ 24.086343][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.093409][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.100953][ T283] device bridge_slave_0 entered promiscuous mode [ 24.108660][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.115715][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.123195][ T283] device bridge_slave_1 entered promiscuous mode [ 24.216963][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.224036][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.231680][ T282] device bridge_slave_0 entered promiscuous mode [ 24.241408][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.248527][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.256200][ T282] device bridge_slave_1 entered promiscuous mode [ 24.269647][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.276721][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.322857][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.329950][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.337239][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.344359][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.374490][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.381698][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.389002][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.396034][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.443472][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.450988][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.458361][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.465714][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.473175][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.481359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.488861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.510463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.530305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.538938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.547191][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.554243][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.561844][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.570024][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.577086][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.584442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.592681][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.599734][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.622026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.630220][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.638369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.647970][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.655091][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.663043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.671307][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.678382][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.685709][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.693729][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.701686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.721804][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.729616][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.738104][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.745129][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.752814][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.761544][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.768620][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.776043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.793339][ T279] device veth0_vlan entered promiscuous mode [ 24.806218][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.814785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.822997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.830871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.838735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.846993][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.854018][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.861548][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.870426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.891309][ T279] device veth1_macvtap entered promiscuous mode [ 24.898098][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.907337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.915582][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.924404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.932559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.940808][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.948908][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.956428][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.963812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.972035][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.980271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.988027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.995493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.006344][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.014714][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.023193][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.030273][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.038221][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.046658][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.064419][ T280] device veth0_vlan entered promiscuous mode [ 25.071132][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.078945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.088079][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.096448][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.103476][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.111146][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.119560][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.127954][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.136171][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.153869][ T283] device veth0_vlan entered promiscuous mode [ 25.166984][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.175185][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.183232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.191379][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.199600][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.208118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.216562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.224372][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.232544][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.240778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.249112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.256713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.271425][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.279916][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.290941][ T283] device veth1_macvtap entered promiscuous mode [ 25.301003][ T280] device veth1_macvtap entered promiscuous mode [ 25.308260][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 25.320599][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.324975][ T281] device veth0_vlan entered promiscuous mode [ 25.341024][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.349247][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.358249][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.367202][ T301] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 25.367607][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.378257][ T301] head:ffffea0004600000 order:3 compound_mapcount:0 compound_pincount:0 [ 25.385927][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.393431][ T301] flags: 0x4000000000010200(slab|head) [ 25.393449][ T301] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810018b680 [ 25.393463][ T301] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 25.393468][ T301] page dumped because: unmovable page [ 25.393482][ T301] page_owner tracks the page as allocated [ 25.403025][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.412383][ T301] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 101, ts 6042458557, free_ts 0 [ 25.417885][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.425773][ T301] prep_new_page+0x176/0x190 [ 25.433993][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.437079][ T301] get_page_from_freelist+0x225f/0x23f0 [ 25.446628][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.463661][ T301] __alloc_pages_nodemask+0x29a/0x640 [ 25.471565][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.475412][ T301] new_slab+0x84/0x3f0 [ 25.501864][ T282] device veth0_vlan entered promiscuous mode [ 25.513786][ T301] ___slab_alloc+0x2f8/0x4c0 [ 25.528043][ T301] __slab_alloc+0x63/0xa0 [ 25.532452][ T301] kmem_cache_alloc+0x1a4/0x2d0 [ 25.537669][ T301] getname_flags+0xba/0x510 [ 25.542213][ T301] getname+0x19/0x20 [ 25.547448][ T301] do_sys_openat2+0xde/0x750 [ 25.548780][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.552101][ T301] __x64_sys_openat+0x136/0x160 [ 25.560829][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.572712][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.581633][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.585851][ T301] do_syscall_64+0x31/0x40 [ 25.591620][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.599830][ T301] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.604209][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.609269][ T301] page_owner free stack trace missing [ 25.618861][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.630210][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.639449][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.648381][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.657128][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.664625][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.673649][ T305] Offlined Pages 32768 [ 25.684990][ T281] device veth1_macvtap entered promiscuous mode [ 25.702974][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.712205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.721041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.729330][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.737916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.739469][ T301] Offlined Pages 32768 [ 25.750617][ T282] device veth1_macvtap entered promiscuous mode [ 25.761829][ T303] page:ffffea0004400000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 25.775868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.783628][ T303] flags: 0x4000000000000200(slab) [ 25.789629][ T303] raw: 4000000000000200 dead000000000100 dead000000000122 ffff88810018a780 [ 25.798280][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.805973][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.811300][ T303] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 25.819262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.824468][ T303] page dumped because: unmovable page [ 25.837756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.846690][ T303] page_owner tracks the page as allocated [ 25.852557][ T303] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x12cd0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 106, ts 5607315256, free_ts 0 [ 25.856362][ T308] input: syz0 as /devices/virtual/input/input4 [ 25.881113][ T303] prep_new_page+0x176/0x190 [ 25.883493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.885812][ T303] get_page_from_freelist+0x225f/0x23f0 [ 25.901967][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.912941][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.922508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.932066][ T303] __alloc_pages_nodemask+0x29a/0x640 [ 25.938176][ T303] new_slab+0x84/0x3f0 [ 25.942441][ T303] ___slab_alloc+0x2f8/0x4c0 [ 25.952202][ T303] __slab_alloc+0x63/0xa0 [ 25.966164][ T303] kmem_cache_alloc+0x1a4/0x2d0 [ 25.971140][ T303] __d_alloc+0x2d/0x690 [ 25.975323][ T303] d_alloc_parallel+0xe2/0x1390 [ 25.982230][ T303] __lookup_slow+0x14c/0x410 [ 25.995476][ T303] lookup_slow+0x57/0x70 [ 26.007690][ T303] walk_component+0x326/0x460 [ 26.021474][ T303] link_path_walk+0x5d8/0xbd0 [ 26.056401][ T303] filename_parentat+0x216/0x600 [ 26.061428][ T303] do_unlinkat+0xde/0x670 [ 26.065845][ T303] __x64_sys_unlink+0x49/0x50 [ 26.080555][ T303] page_owner free stack trace missing [ 26.096021][ T326] udc-core: couldn't find an available UDC or it's busy [ 26.112540][ T318] Offlined Pages 32768 [ 26.155623][ T304] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 26.167168][ T304] flags: 0x4000000000000000() [ 26.172104][ T304] raw: 4000000000000000 dead000000000100 dead000000000122 0000000000000000 [ 26.180963][ T304] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 26.190078][ T304] page dumped because: unmovable page [ 26.195469][ T304] page_owner tracks the page as allocated [ 26.201422][ T304] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, ts 1168673385, free_ts 0 [ 26.213583][ T304] register_early_stack+0x95/0xf0 [ 26.218711][ T304] init_page_owner+0x32/0x800 [ 26.224198][ T304] page_ext_init+0x3c1/0x407 [ 26.229905][ T304] kernel_init_freeable+0x287/0x3c3 [ 26.235169][ T304] page_owner free stack trace missing [ 26.250999][ T328] Offlined Pages 32768 [ 26.270548][ T305] Offlined Pages 32768 [ 26.301005][ T318] Offlined Pages 32768 [ 26.309780][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.330590][ T301] Offlined Pages 32768 [ 26.360789][ T303] Offlined Pages 32768 [ 26.387243][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.406150][ T293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.615750][ T346] udc-core: couldn't find an available UDC or it's busy [ 26.756191][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.766454][ T293] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 26.766463][ T20] usb 1-1: config 1 interface 0 has no altsetting 1 [ 26.783075][ T293] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 26.793203][ T293] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 26.866409][ T312] usb 4-1: New USB device found, idVendor=0cf3, idProduct=7015, bcdDevice= 1.08 [ 26.875640][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.883700][ T312] usb 4-1: Product: syz [ 26.888023][ T312] usb 4-1: Manufacturer: syz [ 26.892629][ T312] usb 4-1: SerialNumber: syz [ 26.926384][ T20] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 26.935485][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.945748][ T20] usb 1-1: Product: syz [ 26.950087][ T20] usb 1-1: Manufacturer: syz [ 26.954702][ T20] usb 1-1: SerialNumber: syz [ 26.956556][ T293] usb 5-1: New USB device found, idVendor=110a, idProduct=1250, bcdDevice= 1.00 [ 26.968834][ T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.979432][ T293] usb 5-1: Product: syz [ 26.983611][ T293] usb 5-1: Manufacturer: syz [ 26.988483][ T293] usb 5-1: SerialNumber: syz [ 27.006229][ T333] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.013536][ T333] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.020927][ T333] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.158206][ T353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 27.420314][ T359] device-mapper: table: 253:0: : unknown target type [ 27.427680][ T359] device-mapper: ioctl: error adding target to table [ 27.444122][ T362] page:ffffea0004400040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110001 [ 27.454683][ T362] flags: 0x4000000000000200(slab) [ 27.459823][ T362] raw: 4000000000000200 ffffea0004400000 0000000a0000000a ffff88810018a780 [ 27.468486][ T362] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 27.477301][ T362] page dumped because: unmovable page [ 27.482754][ T362] page_owner tracks the page as allocated [ 27.488635][ T362] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x12cd0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 98, ts 5611054888, free_ts 0 [ 27.505435][ T362] prep_new_page+0x176/0x190 [ 27.510702][ T362] get_page_from_freelist+0x225f/0x23f0 [ 27.516320][ T362] __alloc_pages_nodemask+0x29a/0x640 [ 27.521719][ T362] new_slab+0x84/0x3f0 [ 27.525798][ T362] ___slab_alloc+0x2f8/0x4c0 [ 27.530641][ T362] __slab_alloc+0x63/0xa0 [ 27.535118][ T362] kmem_cache_alloc+0x1a4/0x2d0 [ 27.540164][ T362] __d_alloc+0x2d/0x690 [ 27.544380][ T362] d_alloc_parallel+0xe2/0x1390 [ 27.549329][ T362] __lookup_slow+0x14c/0x410 [ 27.554027][ T362] lookup_slow+0x57/0x70 [ 27.558439][ T362] walk_component+0x326/0x460 [ 27.563217][ T362] link_path_walk+0x5d8/0xbd0 [ 27.568200][ T362] path_openat+0x290/0x3040 [ 27.572755][ T362] do_filp_open+0x1df/0x400 [ 27.577486][ T362] do_sys_openat2+0x19f/0x750 [ 27.582381][ T362] page_owner free stack trace missing [ 27.599642][ T365] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.905427][ T376] syz.1.29 (376): drop_caches: 2 [ 27.927223][ T376] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 27.937728][ T376] head:ffffea0004600000 order:3 compound_mapcount:0 compound_pincount:0 [ 27.946140][ T376] flags: 0x4000000000010200(slab|head) [ 27.951637][ T376] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810018b680 [ 27.960761][ T376] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 27.969519][ T376] page dumped because: unmovable page [ 27.975069][ T376] page_owner tracks the page as allocated [ 27.981001][ T376] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 101, ts 6042458557, free_ts 0 [ 27.999732][ T376] prep_new_page+0x176/0x190 [ 28.004433][ T376] get_page_from_freelist+0x225f/0x23f0 [ 28.010208][ T376] __alloc_pages_nodemask+0x29a/0x640 [ 28.015987][ T376] new_slab+0x84/0x3f0 [ 28.020161][ T376] ___slab_alloc+0x2f8/0x4c0 [ 28.024794][ T376] __slab_alloc+0x63/0xa0 [ 28.029258][ T376] kmem_cache_alloc+0x1a4/0x2d0 [ 28.034138][ T376] getname_flags+0xba/0x510 [ 28.038759][ T376] getname+0x19/0x20 [ 28.042679][ T376] do_sys_openat2+0xde/0x750 [ 28.047334][ T376] __x64_sys_openat+0x136/0x160 [ 28.052210][ T376] do_syscall_64+0x31/0x40 [ 28.056875][ T376] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.062879][ T376] page_owner free stack trace missing [ 28.076637][ T377] page:ffffea0004400040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110001 [ 28.087351][ T377] flags: 0x4000000000000200(slab) [ 28.092809][ T377] raw: 4000000000000200 ffffea0004400000 0000000a0000000a ffff88810018a780 [ 28.101862][ T377] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 28.110577][ T377] page dumped because: unmovable page [ 28.116213][ T377] page_owner tracks the page as allocated [ 28.122024][ T377] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x12cd0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 98, ts 5611054888, free_ts 0 [ 28.139293][ T377] prep_new_page+0x176/0x190 [ 28.143993][ T377] get_page_from_freelist+0x225f/0x23f0 [ 28.149805][ T377] __alloc_pages_nodemask+0x29a/0x640 [ 28.155232][ T377] new_slab+0x84/0x3f0 [ 28.159398][ T377] ___slab_alloc+0x2f8/0x4c0 [ 28.164048][ T377] __slab_alloc+0x63/0xa0 [ 28.168587][ T377] kmem_cache_alloc+0x1a4/0x2d0 [ 28.173626][ T377] __d_alloc+0x2d/0x690 [ 28.177931][ T377] d_alloc_parallel+0xe2/0x1390 [ 28.182812][ T377] __lookup_slow+0x14c/0x410 [ 28.187516][ T377] lookup_slow+0x57/0x70 [ 28.191831][ T377] walk_component+0x326/0x460 [ 28.196717][ T377] link_path_walk+0x5d8/0xbd0 [ 28.201820][ T377] path_openat+0x290/0x3040 [ 28.206431][ T377] do_filp_open+0x1df/0x400 [ 28.211067][ T377] do_sys_openat2+0x19f/0x750 [ 28.215794][ T377] page_owner free stack trace missing [ 28.526160][ T15] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.044046][ T368] usb 4-1: USB disconnect, device number 2 [ 29.050383][ T15] usb 2-1: New USB device found, idVendor=13d3, idProduct=3207, bcdDevice= 0.01 [ 29.070303][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.078617][ T15] usb 2-1: Product: syz [ 29.082836][ T15] usb 2-1: Manufacturer: syz [ 29.087684][ T15] usb 2-1: SerialNumber: syz [ 29.092773][ T5] usb 1-1: USB disconnect, device number 2 [ 29.144352][ T393] PM: suspend entry (s2idle) [ 29.161341][ T312] usb 5-1: USB disconnect, device number 2 [ 29.389008][ T5] usb 2-1: USB disconnect, device number 2 [ 29.415919][ T409] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 29.427276][ T409] head:ffffea0004600000 order:3 compound_mapcount:0 compound_pincount:0 [ 29.435767][ T409] flags: 0x4000000000010200(slab|head) [ 29.441395][ T409] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810018b680 [ 29.450151][ T409] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 29.459029][ T409] page dumped because: unmovable page [ 29.464495][ T409] page_owner tracks the page as allocated [ 29.470376][ T409] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 101, ts 6042458557, free_ts 0 [ 29.488528][ T409] prep_new_page+0x176/0x190 [ 29.493153][ T409] get_page_from_freelist+0x225f/0x23f0 [ 29.498819][ T409] __alloc_pages_nodemask+0x29a/0x640 [ 29.504197][ T409] new_slab+0x84/0x3f0 [ 29.508756][ T409] ___slab_alloc+0x2f8/0x4c0 [ 29.513370][ T409] __slab_alloc+0x63/0xa0 [ 29.516269][ T312] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.517818][ T409] kmem_cache_alloc+0x1a4/0x2d0 [ 29.530469][ T409] getname_flags+0xba/0x510 [ 29.535082][ T409] getname+0x19/0x20 [ 29.539082][ T409] do_sys_openat2+0xde/0x750 [ 29.543679][ T409] __x64_sys_openat+0x136/0x160 [ 29.548592][ T409] do_syscall_64+0x31/0x40 [ 29.553036][ T409] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.559095][ T409] page_owner free stack trace missing [ 29.586442][ T411] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 29.596868][ T411] flags: 0x4000000000000000() [ 29.601687][ T411] raw: 4000000000000000 dead000000000100 dead000000000122 0000000000000000 [ 29.610999][ T411] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 29.619891][ T411] page dumped because: unmovable page [ 29.625323][ T411] page_owner tracks the page as allocated [ 29.631173][ T411] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, ts 1168673385, free_ts 0 [ 29.642610][ T411] register_early_stack+0x95/0xf0 [ 29.648506][ T411] init_page_owner+0x32/0x800 [ 29.653225][ T411] page_ext_init+0x3c1/0x407 [ 29.657971][ T411] kernel_init_freeable+0x287/0x3c3 [ 29.663180][ T411] page_owner free stack trace missing [ 29.676167][ T368] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.683941][ T410] page:ffffea0004400000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 29.694421][ T410] flags: 0x4000000000000200(slab) [ 29.699648][ T25] android_work: sent uevent USB_STATE=CONNECTED [ 29.703077][ T410] raw: 4000000000000200 dead000000000100 dead000000000122 ffff88810018a780 [ 29.714679][ T410] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 29.723489][ T410] page dumped because: unmovable page [ 29.728981][ T410] page_owner tracks the page as allocated [ 29.734746][ T410] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 381, ts 28236286380, free_ts 27401570260 [ 29.752941][ T410] prep_new_page+0x176/0x190 [ 29.757606][ T410] get_page_from_freelist+0x225f/0x23f0 [ 29.763170][ T410] __alloc_pages_nodemask+0x29a/0x640 [ 29.768624][ T410] new_slab+0x84/0x3f0 [ 29.772711][ T410] ___slab_alloc+0x2f8/0x4c0 [ 29.777426][ T410] __slab_alloc+0x63/0xa0 [ 29.781794][ T410] kmem_cache_alloc+0x1a4/0x2d0 [ 29.786720][ T410] __d_alloc+0x2d/0x690 [ 29.790913][ T410] d_alloc_parallel+0xe2/0x1390 [ 29.795770][ T410] __lookup_slow+0x14c/0x410 [ 29.800409][ T410] lookup_slow+0x57/0x70 [ 29.804686][ T410] walk_component+0x326/0x460 [ 29.809439][ T410] link_path_walk+0x5d8/0xbd0 [ 29.814126][ T410] path_openat+0x290/0x3040 [ 29.818705][ T410] do_filp_open+0x1df/0x400 [ 29.823231][ T410] do_sys_openat2+0x19f/0x750 [ 29.828307][ T410] page last free stack trace: [ 29.833024][ T410] free_unref_page_prepare+0x2b7/0x2d0 [ 29.838642][ T410] __free_pages+0x146/0x390 [ 29.843195][ T410] __free_slab+0xcf/0x190 [ 29.847564][ T410] unfreeze_partials+0x150/0x180 [ 29.852523][ T410] put_cpu_partial+0xc1/0x180 [ 29.857251][ T410] __slab_free+0x2c9/0x3a0 [ 29.861801][ T410] ___cache_free+0x10e/0x130 [ 29.866468][ T410] qlink_free+0x50/0x90 [ 29.870637][ T410] qlist_free_all+0x5f/0xb0 [ 29.875139][ T410] kasan_quarantine_reduce+0x14a/0x160 [ 29.880642][ T410] __kasan_slab_alloc+0x2f/0xe0 [ 29.885530][ T410] slab_post_alloc_hook+0x5d/0x2f0 [ 29.890710][ T410] kmem_cache_alloc+0x15a/0x2d0 [ 29.895678][ T410] getname_flags+0xba/0x510 [ 29.896422][ T312] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 29.900250][ T410] do_mkdirat+0x4b/0x340 [ 29.910543][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.913958][ T410] __x64_sys_mkdirat+0x7b/0x90 [ 29.972881][ T413] input: syz0 as /devices/virtual/input/input5 [ 29.996649][ T415] input: syz0 as /devices/virtual/input/input6 [ 30.042485][ T393] Filesystems sync: 0.893 seconds [ 30.042799][ T24] kauditd_printk_skb: 61 callbacks suppressed [ 30.042831][ T24] audit: type=1400 audit(1791128804.810:135): avc: denied { mount } for pid=416 comm="syz.3.44" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.048965][ T368] usb 1-1: Dual-Role OTG device on HNP port [ 30.054388][ T393] Freezing user space processes ... [ 30.096176][ T368] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 5.10 [ 30.110620][ T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.118633][ T368] usb 1-1: SerialNumber: 1234 [ 30.136200][ C1] configfs-gadget gadget: Using interface 0 [ 30.142235][ T20] android_work: sent uevent USB_STATE=CONFIGURED [ 30.166823][ T368] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x1234 pid 0x5678 [ 35.036260][ T312] net1080: probe of 5-1:1.0 failed with error -110 [ 48.954406][ T393] (elapsed 18.871 seconds) done. [ 48.959416][ T393] OOM killer disabled. [ 48.963495][ T393] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 48.973196][ T393] printk: Suspending console(s) (use no_console_suspend to debug) [ 49.066311][ T7] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 49.230498][ T393] PM: suspend debug: Waiting for 0 second(s). [ 49.596173][ T424] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 49.596182][ T423] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 49.806183][ T423] usb 5-1: device descriptor read/64, error -32 [ 49.896148][ C1] configfs-gadget gadget: Using interface 0 [ 49.896317][ T312] android_work: sent uevent USB_STATE=CONFIGURED [ 49.916786][ T424] usblp0: removed [ 50.136168][ T423] usb 5-1: device descriptor read/64, error -32 [ 50.406170][ T423] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 50.616165][ T423] usb 5-1: device descriptor read/64, error -32 [ 50.946263][ T423] usb 5-1: device descriptor read/64, error -32 [ 51.216175][ T423] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 51.326241][ T423] usb 5-1: device descriptor read/8, error -32 [ 51.536189][ T423] usb 5-1: device descriptor read/8, error -32 [ 51.806197][ T423] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 51.916207][ T423] usb 5-1: device descriptor read/8, error -32 [ 52.126195][ T423] usb 5-1: device descriptor read/8, error -32 [ 52.268559][ T423] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x1234 pid 0x5678 [ 52.268968][ T393] OOM killer enabled. [ 52.297902][ T393] Restarting tasks ... [ 52.298300][ T293] usb 5-1: USB disconnect, device number 3 [ 52.306467][ T393] done. [ 52.307580][ T393] Resume cause unknown [ 52.309189][ T393] PM: suspend exit [ 52.675357][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.678046][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.681071][ T435] device bridge_slave_0 entered promiscuous mode [ 52.683988][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.686987][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.690005][ T435] device bridge_slave_1 entered promiscuous mode [ 52.734904][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.737445][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.740357][ T437] device bridge_slave_0 entered promiscuous mode [ 52.746856][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.749356][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.752364][ T437] device bridge_slave_1 entered promiscuous mode [ 52.757655][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.760243][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.763023][ T439] device bridge_slave_0 entered promiscuous mode [ 52.778376][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.781088][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.783896][ T439] device bridge_slave_1 entered promiscuous mode [ 52.804292][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.807036][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.810004][ T438] device bridge_slave_0 entered promiscuous mode [ 52.815580][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.818575][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.821686][ T438] device bridge_slave_1 entered promiscuous mode [ 52.826972][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.829736][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.832989][ T436] device bridge_slave_0 entered promiscuous mode [ 52.867683][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.870257][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.873383][ T436] device bridge_slave_1 entered promiscuous mode [ 53.002197][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.004922][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.007750][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.010644][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.020346][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.023062][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.025788][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.028503][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.040194][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.042977][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.045979][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.048583][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.057751][ T423] device bridge_slave_1 left promiscuous mode [ 53.060129][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.063121][ T423] device bridge_slave_0 left promiscuous mode [ 53.065424][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.068991][ T423] device veth1_macvtap left promiscuous mode [ 53.071251][ T423] device veth0_vlan left promiscuous mode [ 53.132632][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.135399][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.138143][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.140696][ T435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.149925][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.152811][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.155725][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.158495][ T439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.196884][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.199764][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.202841][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.206701][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.209649][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.212326][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.215084][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.218791][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.222036][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.224739][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.228211][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.231693][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.239529][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.257477][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.261636][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.264761][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.267488][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.270661][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.273983][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.276756][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.280178][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.284747][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.296224][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.299555][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.304016][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.307346][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.310112][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.318378][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.321873][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.324517][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.334337][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.338058][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.340717][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.343568][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.347249][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.349822][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.367413][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.370922][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.374586][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.377960][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.383893][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.387800][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.390706][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.404542][ T435] device veth0_vlan entered promiscuous mode [ 53.408510][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.411816][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.415070][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.418724][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.421731][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.425655][ T438] device veth0_vlan entered promiscuous mode [ 53.431953][ T436] device veth0_vlan entered promiscuous mode [ 53.442518][ T435] device veth1_macvtap entered promiscuous mode [ 53.447329][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.450798][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.453945][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.456639][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.459566][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.462977][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.466857][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.469439][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.472597][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.475397][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.490678][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.494918][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.498423][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.501701][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.504807][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.512291][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.515512][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.524030][ T436] device veth1_macvtap entered promiscuous mode [ 53.529973][ T438] device veth1_macvtap entered promiscuous mode [ 53.539478][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.542839][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.545991][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.549565][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.552791][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.556007][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.559123][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.562369][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.565543][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.569593][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.581506][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.584754][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.588207][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.591243][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.601176][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.604340][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.612134][ T437] device veth0_vlan entered promiscuous mode [ 53.621950][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.624819][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.628026][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.631321][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.634602][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.638502][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.645675][ T439] device veth0_vlan entered promiscuous mode [ 53.662968][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.665920][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.669721][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.672605][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.682519][ T439] device veth1_macvtap entered promiscuous mode [ 53.689506][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.692938][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.697234][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.704675][ T437] device veth1_macvtap entered promiscuous mode [ 53.713076][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.719527][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.722932][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.757827][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.761108][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.765043][ T462] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 53.769610][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.773016][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.774778][ T462] head:ffffea0004600000 order:3 compound_mapcount:0 compound_pincount:0 [ 53.779605][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.782969][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.784984][ T462] flags: 0x4000000000010200(slab|head) [ 53.788269][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.788930][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.799558][ T462] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 53.803069][ T462] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 53.806828][ T462] page dumped because: unmovable page [ 53.808998][ T462] page_owner tracks the page as allocated [ 53.811274][ T462] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 424, ts 53260567163, free_ts 53254667293 [ 53.821464][ T462] prep_new_page+0x176/0x190 [ 53.823347][ T462] get_page_from_freelist+0x225f/0x23f0 [ 53.827621][ T462] __alloc_pages_nodemask+0x29a/0x640 [ 53.830200][ T462] new_slab+0x84/0x3f0 [ 53.836852][ T462] ___slab_alloc+0x2f8/0x4c0 [ 53.838777][ T462] __slab_alloc+0x63/0xa0 [ 53.840514][ T462] __kmalloc_track_caller+0x1e4/0x310 [ 53.842615][ T462] pskb_expand_head+0x123/0x11c0 [ 53.844580][ T462] netlink_trim+0x193/0x230 [ 53.847519][ T462] netlink_broadcast_filtered+0x75/0x12c0 [ 53.849783][ T462] nlmsg_notify+0xe9/0x1a0 [ 53.851583][ T462] rtmsg_ifinfo+0xea/0x130 [ 53.853344][ T462] netdev_state_change+0x190/0x230 [ 53.855591][ T462] linkwatch_do_dev+0x102/0x140 [ 53.858627][ T462] __linkwatch_run_queue+0x4b1/0x7c0 [ 53.860758][ T462] linkwatch_event+0x4c/0x60 [ 53.862628][ T462] page last free stack trace: [ 53.864566][ T462] __free_pages_ok+0x80b/0x830 [ 53.867750][ T462] __free_pages+0xd8/0x390 [ 53.871568][ T462] __free_slab+0xcf/0x190 [ 53.874409][ T462] unfreeze_partials+0x150/0x180 [ 53.878641][ T462] put_cpu_partial+0xc1/0x180 [ 53.882710][ T462] __slab_free+0x2c9/0x3a0 [ 53.886240][ T293] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.889718][ T462] ___cache_free+0x10e/0x130 [ 53.893741][ T462] qlink_free+0x50/0x90 [ 53.898708][ T462] qlist_free_all+0x5f/0xb0 [ 53.903745][ T462] kasan_quarantine_reduce+0x14a/0x160 [ 53.906018][ T462] __kasan_slab_alloc+0x2f/0xe0 [ 53.911992][ T462] slab_post_alloc_hook+0x5d/0x2f0 [ 53.914111][ T462] __kmalloc_track_caller+0x176/0x310 [ 53.918649][ T462] __alloc_skb+0xdc/0x520 [ 53.920378][ T462] rtmsg_ifinfo_build_skb+0x75/0x180 [ 53.922450][ T462] rtnetlink_event+0xd2/0x1a0 [ 53.942850][ T37] blk_update_request: I/O error, dev sda, sector 1358 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 53.947600][ T460] syz.9.49 (460): drop_caches: 3 [ 53.949965][ T37] blk_update_request: I/O error, dev sda, sector 688438 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 53.954043][ T37] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2035 starting block 86055) [ 53.958032][ T7] EXT4-fs error (device sda1): ext4_wait_block_bitmap:572: comm kworker/u4:0: Cannot read block bitmap - block_group = 2, block_bitmap = 131 [ 53.964438][ T48] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 53.968995][ T48] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 53.973485][ T48] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 53.977672][ T37] Buffer I/O error on device sda1, logical block 86016 [ 53.980462][ T37] blk_update_request: I/O error, dev sda, sector 696622 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 53.984852][ T37] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2035 starting block 87078) [ 53.989957][ T37] Buffer I/O error on device sda1, logical block 87039 [ 53.991558][ T7] EXT4-fs (sda1): I/O error while writing superblock [ 54.003358][ T459] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz.9.49: Error while async write back metadata [ 54.007356][ T7] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1527 with max blocks 9 with error 5 [ 54.010280][ T37] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 54.017819][ T37] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 54.022102][ T37] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 54.025409][ T7] EXT4-fs (sda1): This should not happen!! Data will be lost [ 54.025409][ T7] [ 54.025655][ T459] EXT4-fs (sda1): I/O error while writing superblock [ 54.036919][ T48] blk_update_request: I/O error, dev sda, sector 1358 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 54.041314][ T48] blk_update_request: I/O error, dev sda, sector 635190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 54.045684][ T48] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2034 starting block 79399) [ 54.050217][ T48] Buffer I/O error on device sda1, logical block 79360 [ 54.052862][ T48] blk_update_request: I/O error, dev sda, sector 639286 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 54.057472][ T465] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz.7.47: Error while async write back metadata [ 54.058693][ T48] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2028 starting block 79911) [ 54.062540][ T37] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 54.069064][ T48] Buffer I/O error on device sda1, logical block 79872 [ 54.071830][ T48] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2028 starting block 80934) [ 54.076478][ T48] Buffer I/O error on device sda1, logical block 80895 [ 54.079429][ T48] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2030 starting block 81959) [ 54.083943][ T48] Buffer I/O error on device sda1, logical block 81920 [ 54.086752][ T48] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2030 starting block 82982) [ 54.087175][ T7] EXT4-fs error (device sda1): ext4_wait_block_bitmap:572: comm kworker/u4:0: Cannot read block bitmap - block_group = 2, block_bitmap = 131 [ 54.091004][ T48] Buffer I/O error on device sda1, logical block 82943 [ 54.091113][ T48] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2032 starting block 84007) [ 54.103340][ T48] Buffer I/O error on device sda1, logical block 83968 [ 54.105972][ T48] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2032 starting block 85030) [ 54.106971][ T471] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz.6.50: Error while async write back metadata [ 54.110224][ T48] Buffer I/O error on device sda1, logical block 84991 [ 54.115872][ T465] EXT4-fs (sda1): I/O error while writing superblock [ 54.117401][ T48] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2022 starting block 75938) [ 54.117415][ T48] Buffer I/O error on device sda1, logical block 75899 [ 54.120110][ T7] EXT4-fs (sda1): previous I/O error to superblock detected [ 54.129950][ T48] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 54.133135][ T471] EXT4-fs (sda1): previous I/O error to superblock detected [ 54.136760][ T293] usb 6-1: Using ep0 maxpacket: 32 [ 54.142574][ T37] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 54.145803][ T471] EXT4-fs (sda1): I/O error while writing superblock [ 54.150827][ T459] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz.9.49: Error while async write back metadata [ 54.152882][ T7] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1532 with max blocks 4 with error 5 [ 54.155770][ T48] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 54.163333][ T459] EXT4-fs (sda1): I/O error while writing superblock [ 54.166798][ T7] EXT4-fs error (device sda1): ext4_wait_block_bitmap:572: comm kworker/u4:0: Cannot read block bitmap - block_group = 2, block_bitmap = 131 [ 54.169143][ T471] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz.6.50: Error while async write back metadata [ 54.172384][ T48] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 54.180608][ T466] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 54.184012][ T466] Buffer I/O error on dev sda1, logical block 4241, lost async page write [ 54.187445][ T53] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 54.190971][ T48] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 54.194272][ T471] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz.6.50: Error while async write back metadata [ 54.197347][ T58] Aborting journal on device sda1-8. [ 54.201055][ T293] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 54.204641][ T58] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 54.208270][ T271] EXT4-fs error (device sda1): ext4_journal_check_start:83: Detected aborted journal [ 54.232847][ T466] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 54.244168][ T478] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 54.249337][ T478] head:ffffea0004600000 order:3 compound_mapcount:0 compound_pincount:0 [ 54.253100][ T478] flags: 0x4000000000010200(slab|head) [ 54.260289][ T480] input: syz0 as /devices/virtual/input/input8 [ 54.263044][ T478] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 54.268134][ T478] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 54.271440][ T478] page dumped because: unmovable page [ 54.273629][ T349] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 54.275573][ T478] page_owner tracks the page as allocated [ 54.279028][ T293] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 Oct 4 15:47:09 syzkaller kern.alert kernel: [ 54.275573][ T478] page_owner tracks the page as allocated[ 54.285577][ T293] usb 6-1: config 0 has no interface number 0 [ 54.288823][ T293] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.296689][ T293] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 54.300657][ T478] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 424, ts 53260567163, free_ts 53254667293 Oct 4 15:47:09 syzkaller kern.alert kernel: [ 54.300657][ T478] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 424, ts 53260567163, free_ [ 54.332013][ T478] prep_new_page+0x176/0x190 [ 54.363682][ T478] get_page_from_freelist+0x225f/0x23f0 [ 54.378001][ T24] audit: type=1400 audit(1791128829.150:136): avc: denied { create } for pid=483 comm="syz.6.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.388760][ T478] __alloc_pages_nodemask+0x29a/0x640 [ 54.390948][ T478] new_slab+0x84/0x3f0 [ 54.393084][ T24] audit: type=1400 audit(1791128829.150:137): avc: denied { getopt } for pid=483 comm="syz.6.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.395255][ T478] ___slab_alloc+0x2f8/0x4c0 [ 54.416095][ T478] __slab_alloc+0x63/0xa0 [ 54.416198][ T293] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 54.417790][ T478] __kmalloc_track_caller+0x1e4/0x310 [ 54.420653][ T293] usb 6-1: config 0 has no interface number 0 [ 54.422660][ T478] pskb_expand_head+0x123/0x11c0 [ 54.425831][ T293] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.435742][ T24] audit: type=1400 audit(1791128829.200:138): avc: denied { mount } for pid=485 comm="syz.6.56" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 54.444765][ T293] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 54.446774][ T478] netlink_trim+0x193/0x230 [ 54.451316][ T469] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 54.458554][ T478] netlink_broadcast_filtered+0x75/0x12c0 [ 54.460943][ T478] nlmsg_notify+0xe9/0x1a0 [ 54.462739][ T478] rtmsg_ifinfo+0xea/0x130 [ 54.479557][ T469] pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc03f] [ 54.489285][ T478] netdev_state_change+0x190/0x230 [ 54.491311][ T478] linkwatch_do_dev+0x102/0x140 [ 54.493125][ T478] __linkwatch_run_queue+0x4b1/0x7c0 [ 54.495122][ T478] linkwatch_event+0x4c/0x60 [ 54.505917][ T469] pci 0000:00:03.0: reg 0x14: [mem 0xfe800000-0xfe80007f] [ 54.515125][ T24] audit: type=1400 audit(1791128829.280:139): avc: denied { unmount } for pid=436 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 54.515348][ T478] page last free stack trace: Oct 4 15:47:09 syzkaller kern.alert kernel: [ 54.515348][ T478] page last free stack trace: [ 54.537755][ T293] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 54.537847][ T478] __free_pages_ok+0x80b/0x830 [ 54.540788][ T293] usb 6-1: config 0 has no interface number 0 [ 54.540836][ T293] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.556864][ T293] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 54.557233][ T53] usb 9-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice= 1.00 [ 54.602128][ T271] ------------[ cut here ]------------ [ 54.602296][ T478] __free_pages+0xd8/0x390 [ 54.604147][ T271] bdi-(unknown) not registered [ 54.605758][ T478] __free_slab+0xcf/0x190 [ 54.605768][ T478] unfreeze_partials+0x150/0x180 [ 54.605778][ T478] put_cpu_partial+0xc1/0x180 [ 54.605812][ T478] __slab_free+0x2c9/0x3a0 [ 54.608014][ T271] WARNING: CPU: 0 PID: 271 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 54.610408][ T478] ___cache_free+0x10e/0x130 [ 54.611103][ T271] Modules linked in: [ 54.613052][ T478] qlink_free+0x50/0x90 [ 54.614642][ T271] [ 54.618212][ T478] qlist_free_all+0x5f/0xb0 [ 54.619904][ T271] CPU: 0 PID: 271 Comm: syz-executor Not tainted syzkaller #0 [ 54.621321][ T478] kasan_quarantine_reduce+0x14a/0x160 [ 54.622713][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 54.623721][ T478] __kasan_slab_alloc+0x2f/0xe0 [ 54.625378][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 54.628362][ T478] slab_post_alloc_hook+0x5d/0x2f0 [ 54.630270][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 27 ec ec ff 49 8b 3f e8 ef a5 de ff 48 c7 c7 e0 68 29 85 48 89 c6 e8 90 5d c7 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 54.634181][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.635819][ T271] RSP: 0000:ffffc90000b277d8 EFLAGS: 00010246 [ 54.640897][ T478] __kmalloc_track_caller+0x176/0x310 [ 54.647211][ T271] [ 54.650185][ T478] __alloc_skb+0xdc/0x520 [ 54.652378][ T271] RAX: bead8b0ebd5b9c00 RBX: 1ffff1102390a865 RCX: ffff88811e1fd000 [ 54.652385][ T271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 54.652393][ T271] RBP: ffffc90000b27820 R08: 0000000000000003 R09: fffff52000164e60 [ 54.652433][ T271] R10: dffffc0000000000 R11: fffff52000164e40 R12: ffff88810aaa8068 [ 54.654511][ T478] rtmsg_ifinfo_build_skb+0x75/0x180 [ 54.655276][ T271] R13: 1ffff1102155500c R14: 0000000000000000 R15: ffff88810aaa8060 [ 54.675724][ T478] rtnetlink_event+0xd2/0x1a0 [ 54.678020][ T271] FS: 000055556dd78500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.678028][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.678035][ T271] CR2: 00007f2c42a0f8ea CR3: 000000011e167000 CR4: 00000000003506b0 [ 54.678045][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.678051][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.678055][ T271] Call Trace: [ 54.678073][ T271] mark_buffer_dirty+0x21b/0x330 [ 54.678084][ T271] __block_commit_write+0x1ab/0x240 [ 54.678095][ T271] block_page_mkwrite+0x239/0x270 [ 54.678109][ T271] ? ext4_da_release_space+0x420/0x420 [ 54.678119][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 54.678132][ T271] ? memcpy+0x56/0x70 [ 54.678144][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 54.678158][ T271] wp_page_shared+0x45f/0x740 [ 54.678170][ T271] do_wp_page+0xb68/0xd00 [ 54.678213][ T271] handle_pte_fault+0xbc3/0x3910 [ 54.725132][ T271] handle_mm_fault+0xf86/0x1720 [ 54.727069][ T271] ? kernel_sock_ip_overhead+0x240/0x240 [ 54.729328][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 54.731488][ T271] ? __kasan_check_write+0x14/0x20 [ 54.733484][ T271] ? down_read_trylock+0x106/0x160 [ 54.735638][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 54.737386][ T271] ? vmacache_update+0xb7/0x120 [ 54.739176][ T271] ? find_vma+0x13b/0x150 [ 54.740851][ T271] do_user_addr_fault+0x576/0xe20 [ 54.742803][ T271] ? do_kern_addr_fault+0x80/0x80 [ 54.744793][ T271] ? debug_smp_processor_id+0x17/0x20 [ 54.746903][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 54.749301][ T271] exc_page_fault+0x5a/0xc0 [ 54.751086][ T271] ? asm_exc_page_fault+0x8/0x30 [ 54.753087][ T271] asm_exc_page_fault+0x1e/0x30 [ 54.754917][ T271] RIP: 0033:0x7f2c44a866e2 [ 54.756722][ T271] Code: 48 83 e8 01 48 89 ca 48 c1 e0 0e 48 83 c6 08 48 c1 ea 06 48 c1 e9 03 48 01 f8 bf 01 00 00 00 81 e2 ff 3f 00 00 83 e1 07 d3 e7 <40> 08 bc 02 40 40 00 00 49 39 f0 0f 85 e7 fe ff ff 48 8b 44 24 10 [ 54.764400][ T271] RSP: 002b:00007ffc21cea5f0 EFLAGS: 00010202 [ 54.766879][ T271] RAX: 00007f2c42a0a000 RBX: 000055556dd8c230 RCX: 0000000000000004 [ 54.768012][ T469] virtio-pci 0000:00:03.0: can't enable device: BAR 0 [io 0xc000-0xc03f] not claimed [ 54.769943][ T271] RDX: 00000000000018aa RSI: 000055556dd8c1a8 RDI: 0000000000000010 [ 54.776928][ T271] RBP: 00007ffc21ceaaf0 R08: 000055556dd8c1b8 R09: 0000000000000038 [ 54.780069][ T271] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc21cea930 [ 54.783166][ T271] R13: 00007ffc21cea720 R14: 585858582e7a7973 R15: 00007ffc21cea670 [ 54.786645][ T271] ---[ end trace 178b736e8f8d70e3 ]--- [ 54.788711][ T95] udevd[95]: worker [306] terminated by signal 7 (Bus error) [ 54.791721][ T95] udevd[95]: worker [306] failed while handling '/devices/pci0000:00/0000:00:03.0' [ 54.805761][ T469] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 54.809780][ T482] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 54.814304][ T423] device bridge_slave_1 left promiscuous mode [ 54.817252][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.820146][ T482] flags: 0x4000000000000000() [ 54.822372][ T423] device bridge_slave_0 left promiscuous mode [ 54.824792][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.828009][ T482] raw: 4000000000000000 dead000000000100 dead000000000122 0000000000000000 [ 54.831822][ T95] udevd[95]: worker [349] terminated by signal 7 (Bus error) [ 54.834856][ T95] udevd[95]: worker [349] failed while handling '/devices/platform/dummy_hcd.8/usb9/9-1' [ 54.838945][ T423] device bridge_slave_1 left promiscuous mode [ 54.841408][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.847322][ T482] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 54.852458][ T293] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 54.855638][ T293] usb 6-1: config 0 has no interface number 0 [ 54.858046][ T482] page dumped because: unmovable page [ 54.858052][ T482] page_owner tracks the page as allocated [ 54.858067][ T482] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, ts 1168673385, free_ts 0 [ 54.858083][ T482] register_early_stack+0x95/0xf0 [ 54.858094][ T482] init_page_owner+0x32/0x800 [ 54.866564][ T293] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.874412][ T293] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 Oct 4 15:47:09 syzkaller kern.alert kernel: [ 54.858052][ T482] page_owner tracks the page as allocated Oct 4 15:47:09 syzkaller kern.alert kernel: [ 54.858067][ T482] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, ts 1168673385, free_ts 0 [ 54.886972][ T482] page_ext_init+0x3c1/0x407 [ 54.892232][ T95] udevd[95]: worker [428] terminated by signal 7 (Bus error) [ 54.895463][ T95] udevd[95]: worker [428] failed while handling '/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0' [ 54.899907][ T482] kernel_init_freeable+0x287/0x3c3 [ 54.901965][ T482] page_owner free stack trace missing [ 54.904803][ T423] device bridge_slave_0 left promiscuous mode Oct 4 15:47:09 syzkaller kern.alert kernel: [ 54.901965][ T4[ 54.908053][ T423] bridge0: port 1(bridge_slave_0) entered disabled state 82] page_owner free stack trace missing [ 54.915413][ T271] ------------[ cut here ]------------ [ 54.917643][ T271] bdi-(unknown) not registered [ 54.919645][ T271] WARNING: CPU: 0 PID: 271 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 54.923357][ T271] Modules linked in: [ 54.924915][ T271] CPU: 0 PID: 271 Comm: syz-executor Tainted: G W syzkaller #0 [ 54.927444][ T494] PM: suspend entry (s2idle) [ 54.929536][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 54.932250][ T494] Filesystems sync: 0.000 seconds [ 54.934101][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 54.934141][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 27 ec ec ff 49 8b 3f e8 ef a5 de ff 48 c7 c7 e0 68 29 85 48 89 c6 e8 90 5d c7 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 54.936856][ T494] Freezing user space processes ... [ 54.938964][ T271] RSP: 0000:ffffc90000b277d8 EFLAGS: 00010246 [ 54.949216][ T24] audit: type=1400 audit(1791128829.720:140): avc: denied { mount } for pid=467 comm="syz.8.48" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.950452][ T271] RAX: bead8b0ebd5b9c00 RBX: 1ffff1102390a9df RCX: ffff88811e1fd000 [ 54.961743][ T271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 54.965023][ T271] RBP: ffffc90000b27820 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 54.965667][ T423] device bridge_slave_1 left promiscuous mode [ 54.968155][ T271] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: ffff88810aaa8068 [ 54.968163][ T271] R13: 1ffff1102155500c R14: 0000000000000000 R15: ffff88810aaa8060 [ 54.968173][ T271] FS: 000055556dd78500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.968180][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.968188][ T271] CR2: 00007f2c4020a000 CR3: 000000011e167000 CR4: 00000000003506b0 [ 54.968198][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.968205][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.968208][ T271] Call Trace: [ 54.968228][ T271] mark_buffer_dirty+0x21b/0x330 [ 54.968239][ T271] __block_commit_write+0x1ab/0x240 [ 54.968249][ T271] block_page_mkwrite+0x239/0x270 [ 54.968263][ T271] ? ext4_da_release_space+0x420/0x420 [ 54.968273][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 54.968286][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 54.968299][ T271] wp_page_shared+0x45f/0x740 [ 54.968311][ T271] do_wp_page+0xb68/0xd00 [ 54.968323][ T271] handle_pte_fault+0xbc3/0x3910 [ 54.968367][ T271] handle_mm_fault+0xf86/0x1720 [ 54.972102][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.973886][ T271] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 54.973937][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 55.020860][ T271] ? vfs_write+0xaeb/0xd70 [ 55.022510][ T271] ? __kasan_check_write+0x14/0x20 [ 55.024476][ T271] ? down_read_trylock+0x106/0x160 [ 55.026628][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 55.028475][ T271] ? vmacache_update+0xb7/0x120 [ 55.030402][ T271] ? find_vma+0x13b/0x150 [ 55.032021][ T271] do_user_addr_fault+0x576/0xe20 [ 55.033911][ T271] ? do_kern_addr_fault+0x80/0x80 [ 55.035830][ T271] ? debug_smp_processor_id+0x17/0x20 [ 55.037978][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 55.040282][ T271] exc_page_fault+0x5a/0xc0 [ 55.042013][ T271] ? asm_exc_page_fault+0x8/0x30 [ 55.043941][ T271] asm_exc_page_fault+0x1e/0x30 [ 55.045765][ T271] RIP: 0033:0x7f2c44b7702d [ 55.047435][ T271] Code: 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 48 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 fe 7f 07 c5 fe 7f 4f 20 c5 fe 7f 54 17 e0 c5 fe 7f 5c 17 c0 e9 [ 55.055037][ T271] RSP: 002b:00007ffc21cea4b8 EFLAGS: 00010283 [ 55.057430][ T271] RAX: 00007f2c4020a000 RBX: 000055556dd97c30 RCX: fffffffffffffbf0 [ 55.060496][ T271] RDX: 0000000000000071 RSI: 000055556dd8c790 RDI: 00007f2c4020a000 [ 55.063420][ T271] RBP: 00007ffc21cea4d0 R08: 00007f2c44dfce20 R09: 0000000000000000 [ 55.066630][ T271] R10: 0000000000000000 R11: 0000000000000202 R12: 000055556dd8d190 [ 55.069653][ T271] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 55.072819][ T271] ---[ end trace 178b736e8f8d70e4 ]--- [ 55.075338][ T423] device bridge_slave_0 left promiscuous mode [ 55.076737][ T494] (elapsed 0.097 seconds) done. [ 55.077999][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.079536][ T494] OOM killer disabled. [ 55.083564][ T494] Freezing remaining freezable tasks ... [ 55.084241][ T423] device bridge_slave_1 left promiscuous mode [ 55.089096][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.092136][ T423] device bridge_slave_0 left promiscuous mode [ 55.094676][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.099186][ T423] device veth1_macvtap left promiscuous mode [ 55.101705][ T423] device veth0_vlan left promiscuous mode [ 55.104013][ T423] device veth1_macvtap left promiscuous mode [ 55.107028][ T423] device veth0_vlan left promiscuous mode [ 55.109209][ T423] device veth1_macvtap left promiscuous mode [ 55.111437][ T423] device veth0_vlan left promiscuous mode [ 55.113689][ T423] device veth1_macvtap left promiscuous mode [ 55.116113][ T423] device veth0_vlan left promiscuous mode [ 60.166209][ T293] usb 6-1: unable to read config index 4 descriptor/all [ 60.168905][ T293] usb 6-1: can't read configurations, error -110 [ 60.316177][ T293] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.526169][ T293] usb 6-1: device descriptor read/64, error -32 [ 60.856160][ T293] usb 6-1: device descriptor read/64, error -32 [ 60.976211][ T293] usb usb6-port1: attempt power cycle [ 61.386166][ T293] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.496168][ T293] usb 6-1: device descriptor read/8, error -32 [ 61.706188][ T293] usb 6-1: device descriptor read/8, error -32 [ 61.976163][ T293] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.086161][ T293] usb 6-1: device descriptor read/8, error -32 [ 62.296167][ T293] usb 6-1: device descriptor read/8, error -32 [ 62.416197][ T293] usb usb6-port1: unable to enumerate USB device [ 62.420671][ T494] (elapsed 7.337 seconds) done. [ 62.422564][ T494] printk: Suspending console(s) (use no_console_suspend to debug) [ 62.593006][ T494] PM: suspend debug: Waiting for 0 second(s). [ 62.916186][ T505] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 62.926154][ T506] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 63.216151][ C0] configfs-gadget gadget: Using interface 0 [ 63.216343][ T302] android_work: sent uevent USB_STATE=CONFIGURED [ 63.236806][ T505] usblp0: removed [ 68.156183][ T506] usb 9-1: device descriptor read/64, error -110 [ 68.486164][ T506] usb 9-1: device descriptor read/64, error -32 [ 68.756188][ T506] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 68.966157][ T506] usb 9-1: device descriptor read/64, error -32 [ 69.296174][ T506] usb 9-1: device descriptor read/64, error -32 [ 69.566201][ T506] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 69.676183][ T506] usb 9-1: device descriptor read/8, error -32 [ 69.886190][ T506] usb 9-1: device descriptor read/8, error -32 [ 70.156169][ T506] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 70.266180][ T506] usb 9-1: device descriptor read/8, error -32 [ 70.476166][ T506] usb 9-1: device descriptor read/8, error -32 [ 70.618476][ T506] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x1234 pid 0x5678 [ 70.622906][ T494] OOM killer enabled. [ 70.689817][ T494] Restarting tasks ... [ 70.690963][ T95] EXT4-fs error: 8 callbacks suppressed [ 70.690979][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #259: comm udevd: reading directory lblock 0 [ 70.702993][ T494] done. [ 70.716648][ T302] usb 9-1: USB disconnect, device number 2 [ 70.723856][ T481] page:ffffea0004400000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 70.737556][ T494] Resume cause unknown [ 70.741731][ T481] flags: 0x4000000000000200(slab) [ 70.749757][ T494] PM: suspend exit [ 70.754998][ T481] raw: 4000000000000200 dead000000000100 dead000000000122 ffff88810018a780 [ 70.764320][ T271] ------------[ cut here ]------------ [ 70.769894][ T271] bdi-(unknown) not registered [ 70.774770][ T271] WARNING: CPU: 0 PID: 271 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 70.784223][ T271] Modules linked in: [ 70.786781][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 70.788203][ T271] CPU: 0 PID: 271 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.808331][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.810722][ T481] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 70.818502][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 70.832888][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 27 ec ec ff 49 8b 3f e8 ef a5 de ff 48 c7 c7 e0 68 29 85 48 89 c6 e8 90 5d c7 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 70.849910][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 70.852606][ T271] RSP: 0000:ffffc90000b27758 EFLAGS: 00010246 [ 70.869925][ T271] RAX: bead8b0ebd5b9c00 RBX: 1ffff1102390a62e RCX: ffff88811e1fd000 [ 70.877936][ T271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 70.881751][ T481] page dumped because: unmovable page [ 70.885959][ T271] RBP: ffffc90000b277a0 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a [ 70.885967][ T271] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: ffff88810aaa8068 [ 70.885996][ T271] R13: 1ffff1102155500c R14: 0000000000000000 R15: ffff88810aaa8060 [ 70.915403][ T271] FS: 000055556dd78500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 70.917577][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 70.924474][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.938977][ T481] page_owner tracks the page as allocated [ 70.942432][ T271] CR2: 00007f2c41e09ffc CR3: 000000011e167000 CR4: 00000000003506b0 [ 70.951867][ T77] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #2: comm syslogd: reading directory lblock 0 [ 70.956248][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.956276][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.977269][ T481] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 381, ts 28236286380, free_ts 27401570260 [ 70.983673][ T271] Call Trace: [ 71.004638][ T271] mark_buffer_dirty+0x21b/0x330 [ 71.009648][ T271] __block_write_begin_int+0xc11/0x15a0 [ 71.009661][ T271] ? ktime_get_coarse_real_ts64+0xda/0xf0 [ 71.009682][ T271] ? ext4_da_release_space+0x420/0x420 [ 71.009697][ T271] ? page_zero_new_buffers+0x500/0x500 [ 71.009714][ T271] ? file_update_time+0x325/0x440 [ 71.009730][ T271] ? ext4_inline_data_truncate+0xb40/0xb40 [ 71.009753][ T271] block_page_mkwrite+0x200/0x270 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 71.009769][ T271] ? ext4_da_release_space+0x420/0x420 [ 71.009784][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 71.009802][ T271] ? clear_zone_contiguous+0x50/0x50 [ 71.009818][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 71.009835][ T271] handle_pte_fault+0x1dde/0x3910 Oct 4 15:47:25 [ 71.009851][ T271] handle_mm_fault+0xf86/0x1720 syzkaller kern.a[ 71.009868][ T271] ? __kasan_check_write+0x14/0x20 lert kernel: [ [ 71.009884][ T271] ? can_reuse_spf_vma+0xe0/0xe0 70.938977][ T4[ 71.009900][ T271] ? __kasan_check_write+0x14/0x20 81] page_owner t[ 71.009916][ T271] ? down_read_trylock+0x106/0x160 [ 71.009931][ T271] ? __init_rwsem+0x1c0/0x1c0 racks the page a[ 71.009947][ T271] ? find_vma+0x30/0x150 s allocated[ 71.009960][ T271] do_user_addr_fault+0x576/0xe20 [ 71.009973][ T271] ? do_kern_addr_fault+0x80/0x80 [ 71.009986][ T271] ? debug_smp_processor_id+0x17/0x20 [ 71.009999][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 71.010010][ T271] exc_page_fault+0x5a/0xc0 [ 71.010050][ T271] ? asm_exc_page_fault+0x8/0x30 [ 71.016358][ T24] audit: type=1400 audit(1791128845.790:141): avc: denied { unmount } for pid=439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 71.021372][ T271] asm_exc_page_fault+0x1e/0x30 [ 71.027344][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #1642: comm udevd: reading directory lblock 0 [ 71.032274][ T271] RIP: 0033:0x7f2c44a7a1e3 [ 71.048716][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #1480: comm udevd: reading directory lblock 0 [ 71.053669][ T271] Code: 85 0e 01 00 00 be 04 00 00 00 48 89 df e8 45 b8 fe ff 48 8b 43 40 83 43 30 04 48 89 df be 08 00 00 00 48 8d 50 fc 48 89 53 40 <89> 68 fc 8b 6b 30 e8 22 b8 fe ff 48 8b 43 48 be 06 00 00 00 89 28 [ 71.070512][ T501] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.075360][ T271] RSP: 002b:00007ffc21cea2b0 EFLAGS: 00010202 [ 71.075408][ T271] RAX: 00007f2c41e0a000 RBX: 00007ffc21cea3e0 RCX: 00000000005ffde8 [ 71.075438][ T271] RDX: 00007f2c41e09ffc RSI: 0000000000000008 RDI: 00007ffc21cea3e0 [ 71.075466][ T271] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 71.075499][ T271] R10: 00007ffc21cea3c0 R11: 0000000000000000 R12: 0000000000000000 [ 71.075520][ T271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.075551][ T271] ---[ end trace 178b736e8f8d70e5 ]--- [ 71.081620][ T513] EXT4-fs error (device sda1): ext4_get_inode_loc:4587: inode #2021: block 271: comm syz-executor: unable to read itable block [ 71.106301][ T24] audit: type=1400 audit(1791128845.850:142): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[14354]" dev="pipefs" ino=14354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 71.201278][ T77] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #2: comm syslogd: reading directory lblock 0 [ 71.202436][ T481] prep_new_page+0x176/0x190 [ 71.284765][ T271] EXT4-fs error (device sda1): ext4_wait_block_bitmap:572: comm syz-executor: Cannot read block bitmap - block_group = 2, block_bitmap = 131 [ 71.294537][ T481] get_page_from_freelist+0x225f/0x23f0 Oct 4 15:47:25 syzkaller kern.alert kernel: [ 70.977269][ T481] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAI[ 71.365824][ T481] __alloc_pages_nodemask+0x29a/0x640 MABLE), pid 381,[ 71.375878][ T481] new_slab+0x84/0x3f0 ts 28236286380,[ 71.381600][ T481] ___slab_alloc+0x2f8/0x4c0 free_ts 2740157[ 71.388561][ T481] __slab_alloc+0x63/0xa0 0260 [ 71.396262][ T481] kmem_cache_alloc+0x1a4/0x2d0 [ 71.432746][ T481] __d_alloc+0x2d/0x690 [ 71.457493][ T481] d_alloc_parallel+0xe2/0x1390 [ 71.462393][ T481] __lookup_slow+0x14c/0x410 [ 71.469081][ T481] lookup_slow+0x57/0x70 [ 71.475491][ T481] walk_component+0x326/0x460 [ 71.480241][ T481] link_path_walk+0x5d8/0xbd0 [ 71.484944][ T481] path_openat+0x290/0x3040 [ 71.489573][ T481] do_filp_open+0x1df/0x400 [ 71.494098][ T481] do_sys_openat2+0x19f/0x750 [ 71.498955][ T481] page last free stack trace: [ 71.503662][ T481] free_unref_page_prepare+0x2b7/0x2d0 Oct 4 15:47:26 syzkaller kern.alert kernel: [ 71.498955][ T481] page last free stack trace: [ 71.529783][ T481] __free_pages+0x146/0x390 [ 71.534330][ T481] __free_slab+0xcf/0x190 [ 71.538870][ T481] unfreeze_partials+0x150/0x180 [ 71.543842][ T481] put_cpu_partial+0xc1/0x180 [ 71.548619][ T481] __slab_free+0x2c9/0x3a0 [ 71.553066][ T481] ___cache_free+0x10e/0x130 [ 71.557758][ T481] qlink_free+0x50/0x90 [ 71.561935][ T481] qlist_free_all+0x5f/0xb0 [ 71.566483][ T481] kasan_quarantine_reduce+0x14a/0x160 [ 71.571983][ T481] __kasan_slab_alloc+0x2f/0xe0 [ 71.576891][ T481] slab_post_alloc_hook+0x5d/0x2f0 [ 71.582021][ T481] kmem_cache_alloc+0x15a/0x2d0 [ 71.587104][ T481] getname_flags+0xba/0x510 [ 71.591647][ T481] do_mkdirat+0x4b/0x340 [ 71.595980][ T481] __x64_sys_mkdirat+0x7b/0x90 [ 71.716659][ T501] usb 8-1: device descriptor read/all, error -71 [ 72.116636][ T425] device bridge_slave_1 left promiscuous mode [ 72.122782][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.130331][ T425] device bridge_slave_0 left promiscuous mode [ 72.136553][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.144373][ T425] device veth1_macvtap left promiscuous mode [ 72.150473][ T425] device veth0_vlan left promiscuous mode [ 73.147230][ T425] device bridge_slave_1 left promiscuous mode [ 73.153683][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.161213][ T425] device bridge_slave_0 left promiscuous mode [ 73.167576][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.175313][ T425] device bridge_slave_1 left promiscuous mode [ 73.181570][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.189204][ T425] device bridge_slave_0 left promiscuous mode [ 73.195324][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.203219][ T425] device bridge_slave_1 left promiscuous mode [ 73.209493][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.216966][ T425] device bridge_slave_0 left promiscuous mode [ 73.223077][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.230984][ T425] device bridge_slave_1 left promiscuous mode [ 73.237116][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.244568][ T425] device bridge_slave_0 left promiscuous mode [ 73.250833][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.259293][ T425] device veth1_macvtap left promiscuous mode [ 73.265300][ T425] device veth0_vlan left promiscuous mode [ 73.271334][ T425] device veth1_macvtap left promiscuous mode [ 73.277376][ T425] device veth0_vlan left promiscuous mode [ 73.283257][ T425] device veth1_macvtap left promiscuous mode [ 73.289362][ T425] device veth0_vlan left promiscuous mode [ 73.295270][ T425] device veth1_macvtap left promiscuous mode [ 73.301450][ T425] device veth0_vlan left promiscuous mode