last executing test programs: 5.375703583s ago: executing program 0 (id=324): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) readv(r0, &(0x7f0000002800)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 4.433204527s ago: executing program 0 (id=330): recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/24, 0x18}], 0x1}, 0x4}], 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) 4.148731224s ago: executing program 0 (id=333): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 3.12423502s ago: executing program 0 (id=340): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0xf, "cf0d416510d44a33a84085a068b520"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.379082919s ago: executing program 2 (id=349): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x495, &(0x7f0000001380)={0x0, 0x104c55}, &(0x7f0000000000)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x40002101}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) 2.245852853s ago: executing program 2 (id=351): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu '], 0xb) 2.037825428s ago: executing program 2 (id=354): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006080)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x6, 0x5, 0x0, {0xfffffffffffffffc, 0x8a, 0x1, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x4009, 0x6, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) 1.803752314s ago: executing program 1 (id=364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="fe55fc2733656cd94cd632f708d5edc9", 0x10}], 0x1, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 1.730250356s ago: executing program 1 (id=357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) 1.57584032s ago: executing program 1 (id=359): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000ac0)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000b00)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000b40)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000b80)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) 1.545428181s ago: executing program 3 (id=361): r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, &(0x7f00000000c0)) 1.515862622s ago: executing program 1 (id=362): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000340)=0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 1.435680064s ago: executing program 3 (id=363): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) close(0x3) 1.386058845s ago: executing program 3 (id=365): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast1}, 0x2, 0x4, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) 1.342439226s ago: executing program 1 (id=366): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c010) 1.271568318s ago: executing program 3 (id=367): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) 234.035405ms ago: executing program 0 (id=368): unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1f, 0x0, @val=@uprobe_multi={0x0, 0x0, &(0x7f0000000200)=[0x3], 0xfffffffffffffe00, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 233.580774ms ago: executing program 1 (id=369): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x5, 0x4, 0x8, 0x13}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) 233.444105ms ago: executing program 2 (id=370): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 233.356754ms ago: executing program 3 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x0) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0xb0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000900)=ANY=[@ANYBLOB="000000004c90020017000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000005000000cd00000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ff"]) 162.406966ms ago: executing program 3 (id=372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000200)=0xf, 0x4) 71.831758ms ago: executing program 2 (id=373): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x13, 0x10, 0x2}, 0x50) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 56.137579ms ago: executing program 0 (id=374): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e4000044febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) 0s ago: executing program 2 (id=375): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000206030000000000000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. syzkaller login: [ 80.508695][ T5764] cgroup: Unknown subsys name 'net' [ 80.644744][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.333090][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.662137][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.679773][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.688220][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.694511][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.700471][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.706704][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.712872][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.725002][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.732399][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.733481][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.746925][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.765654][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.765682][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.777768][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.791949][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.799467][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.814744][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.824401][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.831860][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.854441][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.864373][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.881944][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.896046][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.907553][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.971551][ T5778] (null): rxe_set_mtu: Set mtu to 1024 [ 85.000238][ T5775] (null): rxe_set_mtu: Set mtu to 1024 [ 85.007158][ T5775] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.007953][ T5777] (null): rxe_set_mtu: Set mtu to 1024 [ 85.019086][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.041742][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.055863][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.067786][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.109720][ T5776] (null): rxe_set_mtu: Set mtu to 1024 [ 85.131583][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.403222][ T5778] infiniband rxe0: set active [ 85.412410][ T5778] infiniband rxe0: added rxe_eth0 [ 85.432060][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.486972][ T5778] RDS/IB: rxe0: added [ 85.491731][ T5778] smc: adding ib device rxe0 with port count 1 [ 85.499141][ T5778] smc: ib device rxe0 port 1 has pnetid [ 85.508340][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.537156][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.603000][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 85.726803][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.795376][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.928329][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.091661][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.105865][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.113356][ T5777] bridge_slave_0: entered allmulticast mode [ 86.128665][ T5777] bridge_slave_0: entered promiscuous mode [ 86.259816][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.275666][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.283059][ T5777] bridge_slave_1: entered allmulticast mode [ 86.305667][ T5777] bridge_slave_1: entered promiscuous mode [ 86.331318][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.339433][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.350439][ T5775] bridge_slave_0: entered allmulticast mode [ 86.358079][ T5775] bridge_slave_0: entered promiscuous mode [ 86.368631][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.375059][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.382684][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.393859][ T5775] bridge_slave_1: entered allmulticast mode [ 86.401829][ T5775] bridge_slave_1: entered promiscuous mode [ 86.438302][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.445685][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.452951][ T5776] bridge_slave_0: entered allmulticast mode [ 86.461038][ T5776] bridge_slave_0: entered promiscuous mode [ 86.521117][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.529643][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.537710][ T5776] bridge_slave_1: entered allmulticast mode [ 86.545219][ T5776] bridge_slave_1: entered promiscuous mode [ 86.556459][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.569248][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.584500][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.608660][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.689285][ T5775] team0: Port device team_slave_0 added [ 86.698963][ T5775] team0: Port device team_slave_1 added [ 86.728797][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.763024][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.770492][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.796632][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.814097][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.821761][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.848598][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.864941][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.899956][ T5777] team0: Port device team_slave_0 added [ 86.906874][ T5779] Bluetooth: hci0: command tx timeout [ 86.912612][ T5779] Bluetooth: hci1: command tx timeout [ 86.922367][ T5785] Bluetooth: hci3: command tx timeout [ 86.929135][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.975091][ T5777] team0: Port device team_slave_1 added [ 86.988225][ T5785] Bluetooth: hci2: command tx timeout [ 86.992638][ T5776] team0: Port device team_slave_0 added [ 87.022501][ T5776] team0: Port device team_slave_1 added [ 87.196156][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.203193][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.268881][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.286960][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.293975][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.335543][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.363097][ T5775] hsr_slave_0: entered promiscuous mode [ 87.371869][ T5775] hsr_slave_1: entered promiscuous mode [ 87.380851][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.388880][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.415211][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.455136][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.462857][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.492763][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.585138][ T5776] hsr_slave_0: entered promiscuous mode [ 87.592052][ T5776] hsr_slave_1: entered promiscuous mode [ 87.599650][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.609744][ T5776] Cannot create hsr debugfs directory [ 87.730361][ T5777] hsr_slave_0: entered promiscuous mode [ 87.739798][ T5777] hsr_slave_1: entered promiscuous mode [ 87.746432][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.754014][ T5777] Cannot create hsr debugfs directory [ 88.166087][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.179270][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.192373][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.202938][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.217145][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.337452][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.344895][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.352753][ T5778] bridge_slave_0: entered allmulticast mode [ 88.360299][ T5778] bridge_slave_0: entered promiscuous mode [ 88.382848][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.390231][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.402076][ T5778] bridge_slave_1: entered allmulticast mode [ 88.410299][ T5778] bridge_slave_1: entered promiscuous mode [ 88.445771][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.458582][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.472908][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.489504][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.501293][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.518411][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.596775][ T5778] team0: Port device team_slave_0 added [ 88.631543][ T5778] team0: Port device team_slave_1 added [ 88.637755][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.653105][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.663397][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.710408][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.731157][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.739664][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.766860][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.780133][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.787495][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.813855][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.907793][ T5778] hsr_slave_0: entered promiscuous mode [ 88.914491][ T5778] hsr_slave_1: entered promiscuous mode [ 88.921061][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.928900][ T5778] Cannot create hsr debugfs directory [ 88.986873][ T5785] Bluetooth: hci3: command tx timeout [ 88.992350][ T5785] Bluetooth: hci1: command tx timeout [ 88.997852][ T5786] Bluetooth: hci0: command tx timeout [ 89.066463][ T5785] Bluetooth: hci2: command tx timeout [ 89.098750][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.170930][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.200113][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.232447][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.240036][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.252031][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.272160][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.279543][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.312592][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.319841][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.370259][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.377509][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.397777][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.428753][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.439710][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.455092][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.537980][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.651780][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.709952][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.717233][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.752747][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.759995][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.921109][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.984979][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.041447][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.057200][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.064405][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.095325][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.123490][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.130713][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.269908][ T5775] veth0_vlan: entered promiscuous mode [ 90.312554][ T5775] veth1_vlan: entered promiscuous mode [ 90.369105][ T5776] veth0_vlan: entered promiscuous mode [ 90.400670][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.432719][ T5776] veth1_vlan: entered promiscuous mode [ 90.473974][ T5775] veth0_macvtap: entered promiscuous mode [ 90.540848][ T5775] veth1_macvtap: entered promiscuous mode [ 90.615139][ T5776] veth0_macvtap: entered promiscuous mode [ 90.644828][ T5777] veth0_vlan: entered promiscuous mode [ 90.662080][ T5776] veth1_macvtap: entered promiscuous mode [ 90.676677][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.708224][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.722033][ T5777] veth1_vlan: entered promiscuous mode [ 90.768302][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.778432][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.789048][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.798479][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.812605][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.832067][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.845765][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.856382][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.919686][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.930933][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.942681][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.981015][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.994676][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.004030][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.014268][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.040800][ T5777] veth0_macvtap: entered promiscuous mode [ 91.059141][ T5777] veth1_macvtap: entered promiscuous mode [ 91.068754][ T5785] Bluetooth: hci1: command tx timeout [ 91.074219][ T5785] Bluetooth: hci0: command tx timeout [ 91.080798][ T5779] Bluetooth: hci3: command tx timeout [ 91.146571][ T5785] Bluetooth: hci2: command tx timeout [ 91.194103][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.210868][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.258558][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.271412][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.282080][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.293657][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.306817][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.349682][ T5778] veth0_vlan: entered promiscuous mode [ 91.384642][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.398386][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.409518][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.420172][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.431788][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.447813][ T5778] veth1_vlan: entered promiscuous mode [ 91.456307][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.460060][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.464594][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.484601][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.500618][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.513507][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.523303][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.532376][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.617452][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.625363][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.755101][ T5778] veth0_macvtap: entered promiscuous mode [ 91.784445][ T5778] veth1_macvtap: entered promiscuous mode [ 91.851777][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.862544][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.889653][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.914433][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.934951][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.952859][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.966776][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.005111][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.016284][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.049200][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.063529][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.075233][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.089684][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.102214][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.122408][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.150401][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.202087][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.220868][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.231148][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.244501][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.302962][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.330204][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.520206][ T5880] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 92.692706][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.727062][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.804301][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.823393][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.146379][ T5785] Bluetooth: hci0: command tx timeout [ 93.146477][ T5786] Bluetooth: hci3: command tx timeout [ 93.157896][ T5779] Bluetooth: hci1: command tx timeout [ 93.201522][ T5895] syz.0.12[5895]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.229957][ T5786] Bluetooth: hci2: command tx timeout [ 93.847100][ T5905] process 'syz.3.16' launched './file0' with NULL argv: empty string added [ 93.955088][ T5895] loop0: detected capacity change from 0 to 40427 [ 93.998623][ T5895] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 94.013047][ T5895] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.024991][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.052117][ T5895] F2FS-fs (loop0): invalid crc value [ 94.103527][ T5895] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.245501][ T5895] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 94.252859][ T5895] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.364671][ T28] audit: type=1804 audit(1792161069.691:2): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.12" name="/newroot/1/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 94.465788][ T177] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.663222][ T177] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 94.698784][ T177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.733735][ T177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.745346][ T177] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 94.762349][ T177] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 94.774420][ T177] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 94.782706][ T177] usb 4-1: Manufacturer: syz [ 94.813920][ T177] usb 4-1: config 0 descriptor?? [ 94.838210][ T5778] syz-executor: attempt to access beyond end of device [ 94.838210][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.859955][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 95.298329][ T177] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 95.317890][ T177] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 95.357575][ T177] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 95.505340][ T5919] loop2: detected capacity change from 0 to 32768 [ 95.543021][ T5919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.20 (5919) [ 95.636653][ T5919] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.687138][ T5919] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 95.712836][ T5919] BTRFS info (device loop2): using free space tree [ 95.885741][ T5919] BTRFS info (device loop2): enabling ssd optimizations [ 95.902994][ T5919] BTRFS info (device loop2): auto enabling async discard [ 96.003875][ T5954] FAULT_INJECTION: forcing a failure. [ 96.003875][ T5954] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.032572][ T5842] usb 4-1: USB disconnect, device number 2 [ 96.045898][ T5954] CPU: 1 PID: 5954 Comm: syz.1.27 Not tainted syzkaller #0 [ 96.053202][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.063327][ T5954] Call Trace: [ 96.066669][ T5954] [ 96.069654][ T5954] dump_stack_lvl+0x18c/0x250 [ 96.074445][ T5954] ? show_regs_print_info+0x20/0x20 [ 96.079709][ T5954] ? load_image+0x420/0x420 [ 96.084281][ T5954] ? __might_fault+0xaa/0x120 [ 96.089023][ T5954] ? __lock_acquire+0x7eb0/0x7eb0 [ 96.094103][ T5954] ? __virt_addr_valid+0x10c/0x380 [ 96.099262][ T5954] should_fail_ex+0x394/0x4c0 [ 96.103990][ T5954] _copy_to_user+0x2f/0xa0 [ 96.108460][ T5954] bpf_verifier_vlog+0x4e6/0x840 [ 96.113469][ T5954] __btf_verifier_log+0xe3/0x140 [ 96.118458][ T5954] ? __might_fault+0xc6/0x120 [ 96.123196][ T5954] ? __might_fault+0xaa/0x120 [ 96.127939][ T5954] ? btf_check_sec_info+0x350/0x350 [ 96.133179][ T5954] ? bpf_verifier_vlog+0x539/0x840 [ 96.138344][ T5954] btf_verifier_log_vsi+0x28a/0x3d0 [ 96.143587][ T5954] ? sort_r+0x17f5/0x1810 [ 96.148077][ T5954] ? btf_datasec_show+0x970/0x970 [ 96.153196][ T5954] btf_datasec_check_meta+0x954/0xb50 [ 96.158669][ T5954] btf_check_all_metas+0x371/0xaf0 [ 96.163844][ T5954] btf_parse_type_sec+0xfc/0x1960 [ 96.168908][ T5954] ? btf_check_sec_info+0x350/0x350 [ 96.174152][ T5954] ? __virt_addr_valid+0x10c/0x380 [ 96.179334][ T5954] ? btf_verifier_log+0x1a0/0x1a0 [ 96.184428][ T5954] ? btf_parse_hdr+0x545/0x700 [ 96.189235][ T5954] ? btf_parse_str_sec+0x20d/0x2a0 [ 96.194387][ T5954] btf_new_fd+0x440/0x9e0 [ 96.198785][ T5954] ? bpf_btf_show_fdinfo+0x80/0x80 [ 96.203941][ T5954] ? capable+0x88/0xe0 [ 96.208067][ T5954] __sys_bpf+0x670/0x890 [ 96.212366][ T5954] ? bpf_link_show_fdinfo+0x560/0x560 [ 96.217815][ T5954] ? lock_chain_count+0x20/0x20 [ 96.222718][ T5954] __x64_sys_bpf+0x7c/0x90 [ 96.227179][ T5954] do_syscall_64+0x55/0xb0 [ 96.231629][ T5954] ? clear_bhb_loop+0x40/0x90 [ 96.236338][ T5954] ? clear_bhb_loop+0x40/0x90 [ 96.241057][ T5954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.247016][ T5954] RIP: 0033:0x7eff03b9e559 [ 96.251472][ T5954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.271123][ T5954] RSP: 002b:00007eff04a54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.279582][ T5954] RAX: ffffffffffffffda RBX: 00007eff03e25fa0 RCX: 00007eff03b9e559 [ 96.287596][ T5954] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 96.295605][ T5954] RBP: 00007eff03c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.303611][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.311656][ T5954] R13: 00007eff03e26038 R14: 00007eff03e25fa0 R15: 00007ffd2b0d6b08 [ 96.319686][ T5954] [ 96.523707][ T5957] loop0: detected capacity change from 0 to 2048 [ 96.564858][ T1199] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.614546][ T5957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.797232][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.237931][ T970] cfg80211: failed to load regulatory.db [ 97.296723][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.539609][ T23] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 97.563554][ T23] usb 2-1: config 1 has no interface number 0 [ 97.592698][ T23] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 97.626178][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.655534][ T23] usb 2-1: Product: syz [ 97.664943][ T23] usb 2-1: Manufacturer: syz [ 97.679486][ T23] usb 2-1: SerialNumber: syz [ 97.992754][ T23] usb 2-1: cannot find UAC_HEADER [ 98.126192][ T23] snd-usb-audio: probe of 2-1:1.3 failed with error -22 [ 98.166852][ T23] usb 2-1: USB disconnect, device number 2 [ 98.203593][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.333119][ T5974] loop2: detected capacity change from 0 to 40427 [ 98.351117][ T5974] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 98.363748][ T5974] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 98.388381][ T5974] F2FS-fs (loop2): invalid crc value [ 98.419947][ T5974] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.590911][ T5974] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 98.604550][ T6004] ip_tables: iptables: counters copy to user failed while replacing table [ 98.605782][ T5974] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.649790][ T6004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.712310][ T6004] ip_tables: iptables: counters copy to user failed while replacing table [ 98.770458][ T28] audit: type=1804 audit(1792161074.101:3): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.31" name="/newroot/8/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 99.264571][ T5775] syz-executor: attempt to access beyond end of device [ 99.264571][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.301436][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 99.435521][ T970] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 99.641788][ T970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 99.663483][ T970] usb 2-1: not running at top speed; connect to a high speed hub [ 99.687756][ T970] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 99.727979][ T970] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 99.754610][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.774247][ T970] usb 2-1: Product: syz [ 99.784388][ T970] usb 2-1: Manufacturer: syz [ 99.816692][ T970] usb 2-1: SerialNumber: syz [ 100.054399][ T6030] loop0: detected capacity change from 0 to 32768 [ 100.094273][ T970] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 100.184861][ T6030] JBD2: Ignoring recovery information on journal [ 100.244181][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 100.297132][ T970] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 100.360591][ T970] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 100.378773][ T6042] loop2: detected capacity change from 0 to 1024 [ 100.395938][ T6030] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 100.409796][ T6042] ======================================================= [ 100.409796][ T6042] WARNING: The mand mount option has been deprecated and [ 100.409796][ T6042] and is ignored by this kernel. Remove the mand [ 100.409796][ T6042] option from the mount to silence this warning. [ 100.409796][ T6042] ======================================================= [ 100.533920][ T6042] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.637136][ T6042] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.49: Invalid block bitmap block 0 in block_group 0 [ 100.660325][ T6042] EXT4-fs (loop2): Remounting filesystem read-only [ 100.696476][ T6042] Quota error (device loop2): write_blk: dquota write failed [ 100.712066][ T970] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 100.732001][ T6042] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 100.742629][ T970] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 100.765382][ T6042] EXT4-fs (loop2): 1 orphan inode deleted [ 100.809661][ T6042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.839748][ T6037] team0: Port device team_slave_0 removed [ 100.914636][ T970] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 100.961657][ T6030] syz.0.46 (6030) used greatest stack depth: 20616 bytes left [ 101.010936][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.036449][ T970] usb 2-1: USB disconnect, device number 3 [ 101.098575][ T5795] udevd[5795]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 101.132681][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 101.212655][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.279883][ T6050] loop2: detected capacity change from 0 to 16 [ 101.326130][ T6050] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.739096][ T6051] loop3: detected capacity change from 0 to 32768 [ 101.753991][ T6051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.52 (6051) [ 101.771927][ T6051] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.782925][ T6051] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 101.793312][ T6051] BTRFS info (device loop3): using free space tree [ 101.835555][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.858120][ T6051] BTRFS info (device loop3): enabling ssd optimizations [ 101.865217][ T6051] BTRFS info (device loop3): auto enabling async discard [ 102.036236][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.065818][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 102.065848][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.095537][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 102.139131][ T23] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 102.155842][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.635599][ T23] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 102.666049][ T23] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 102.684469][ T23] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 102.704439][ T23] cxacru: probe of 1-1:1.0 failed with error -71 [ 102.742076][ T23] usb 1-1: USB disconnect, device number 2 [ 103.087359][ T6075] loop3: detected capacity change from 0 to 40427 [ 103.104470][ T6075] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 103.133269][ T6075] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.152873][ T6075] F2FS-fs (loop3): invalid crc value [ 103.166107][ T6075] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.309580][ T6075] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 103.318283][ T6075] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.335557][ T970] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.408856][ T28] audit: type=1804 audit(1792161078.731:4): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.53" name="/newroot/16/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 103.581596][ T970] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.594737][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.612342][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.632033][ T970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.649922][ T970] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.674898][ T970] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.683189][ T970] usb 2-1: Manufacturer: syz [ 103.707101][ T970] usb 2-1: config 0 descriptor?? [ 103.851319][ T5776] syz-executor: attempt to access beyond end of device [ 103.851319][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.878860][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 103.962002][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 104.143054][ T970] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 104.167932][ T970] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 104.192929][ T6097] team0: Port device team_slave_0 removed [ 104.225277][ T970] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 104.696807][ T6095] loop0: detected capacity change from 0 to 32768 [ 104.714921][ T6095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.62 (6095) [ 104.743311][ T970] usb 2-1: USB disconnect, device number 4 [ 104.785214][ T6095] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.811792][ T6095] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 104.847942][ T6095] BTRFS info (device loop0): using free space tree [ 104.975757][ T6095] BTRFS info (device loop0): enabling ssd optimizations [ 104.983414][ T6095] BTRFS info (device loop0): auto enabling async discard [ 105.254531][ T5778] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.334680][ T5795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5795) [ 105.735670][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.772718][ T6137] veth1_to_bond: entered allmulticast mode [ 105.784178][ T6137] veth1_to_bond: entered promiscuous mode [ 105.805891][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 105.938556][ T23] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.954663][ T6137] veth1_to_bond (unregistering): left promiscuous mode [ 105.964227][ T23] usb 1-1: config 1 has no interface number 0 [ 105.968210][ T6137] veth1_to_bond (unregistering): left allmulticast mode [ 105.987692][ T23] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 106.003322][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.013136][ T23] usb 1-1: Product: syz [ 106.040958][ T23] usb 1-1: Manufacturer: syz [ 106.052975][ T6137] bond0: (slave bond_slave_1): Releasing backup interface [ 106.056266][ T23] usb 1-1: SerialNumber: syz [ 106.342567][ T23] usb 1-1: cannot find UAC_HEADER [ 106.416072][ T23] snd-usb-audio: probe of 1-1:1.3 failed with error -22 [ 106.458764][ T23] usb 1-1: USB disconnect, device number 3 [ 106.502986][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.763617][ T6139] loop3: detected capacity change from 0 to 40427 [ 106.779792][ T6139] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 106.787745][ T6139] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 106.813771][ T6139] F2FS-fs (loop3): invalid crc value [ 106.852582][ T6139] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.940903][ T6139] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 106.952293][ T6139] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.114225][ T28] audit: type=1804 audit(1792161082.441:5): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.73" name="/newroot/20/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 107.199648][ T6144] loop2: detected capacity change from 0 to 32768 [ 107.250061][ T6144] JBD2: Ignoring recovery information on journal [ 107.390089][ T6144] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.487535][ T5776] syz-executor: attempt to access beyond end of device [ 107.487535][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.509642][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 107.877323][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 107.973954][ T6155] loop1: detected capacity change from 0 to 32768 [ 108.002031][ T6155] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 108.207959][ T5783] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 108.672305][ T6176] loop3: detected capacity change from 0 to 16 [ 108.698629][ T6176] erofs: (device loop3): mounted with root inode @ nid 36. [ 108.933523][ T6180] veth1_to_bond: entered allmulticast mode [ 108.943853][ T6180] veth1_to_bond: entered promiscuous mode [ 108.955071][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 109.045984][ T6180] veth1_to_bond (unregistering): left promiscuous mode [ 109.058142][ T6180] veth1_to_bond (unregistering): left allmulticast mode [ 109.106985][ T6180] bond0: (slave bond_slave_1): Releasing backup interface [ 109.566402][ T6195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.94'. [ 109.622010][ T6184] loop0: detected capacity change from 0 to 40427 [ 109.634477][ T6184] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 109.646896][ T6184] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.672636][ T6184] F2FS-fs (loop0): invalid crc value [ 109.694254][ T6184] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.715755][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.742262][ T5842] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.794887][ T6184] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.803261][ T6184] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.856749][ T28] audit: type=1804 audit(1792161085.191:6): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.89" name="/newroot/20/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 109.923552][ T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 109.935921][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.944647][ T23] usb 3-1: Product: syz [ 109.949581][ T23] usb 3-1: Manufacturer: syz [ 109.954894][ T23] usb 3-1: SerialNumber: syz [ 109.964030][ T5842] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 109.996406][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.017947][ T5842] usb 4-1: config 0 descriptor?? [ 110.215184][ T23] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 110.264723][ T23] usb 3-1: USB disconnect, device number 2 [ 110.277201][ T5778] syz-executor: attempt to access beyond end of device [ 110.277201][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.313711][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.540512][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'. [ 110.550085][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'. [ 110.559782][ T6212] Zero length message leads to an empty skb [ 110.826770][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.040563][ T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 111.055585][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.065676][ T23] usb 3-1: Product: syz [ 111.069918][ T23] usb 3-1: Manufacturer: syz [ 111.074559][ T23] usb 3-1: SerialNumber: syz [ 111.315740][ T5842] usb 4-1: Cannot set autoneg [ 111.321125][ T5842] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 111.347311][ T5842] usb 4-1: USB disconnect, device number 3 [ 111.716288][ T23] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 111.903898][ T6226] loop0: detected capacity change from 0 to 1024 [ 111.923988][ T6226] hfsplus: unable to parse mount options [ 112.023994][ T5842] usb 3-1: USB disconnect, device number 3 [ 112.413615][ T6238] ALSA: seq fatal error: cannot create timer (-16) [ 112.735366][ T6259] ip_tables: iptables: counters copy to user failed while replacing table [ 113.536151][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 114.058071][ T6274] loop3: detected capacity change from 0 to 40427 [ 114.084313][ T6274] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 114.091280][ T6274] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.123540][ T6274] F2FS-fs (loop3): invalid crc value [ 114.140760][ T6274] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.233046][ T6274] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.242599][ T6274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.312682][ T28] audit: type=1804 audit(1792161089.641:7): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.122" name="/newroot/29/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 114.862257][ T5776] syz-executor: attempt to access beyond end of device [ 114.862257][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.900682][ T6309] Illegal XDP return value 4294967274 on prog (id 19) dev syz_tun, expect packet loss! [ 114.913589][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 115.822010][ T6332] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 116.155708][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.178788][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 116.359227][ T5878] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.377933][ T5878] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 116.396848][ T5878] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 116.414656][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.712386][ T5878] usb 2-1: USB disconnect, device number 5 [ 117.814018][ T6403] capability: warning: `syz.2.173' uses deprecated v2 capabilities in a way that may be insecure [ 119.205946][ T6446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.616276][ T6455] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 119.914350][ T28] audit: type=1326 audit(1792161095.241:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 119.947332][ T28] audit: type=1326 audit(1792161095.241:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 119.973826][ T28] audit: type=1326 audit(1792161095.271:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 120.001009][ T6464] loop3: detected capacity change from 0 to 512 [ 120.050975][ T28] audit: type=1326 audit(1792161095.271:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 120.109390][ T28] audit: type=1326 audit(1792161095.271:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 120.140549][ T28] audit: type=1326 audit(1792161095.271:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 120.172898][ T28] audit: type=1326 audit(1792161095.271:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 120.204032][ T28] audit: type=1326 audit(1792161095.271:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 120.234182][ T28] audit: type=1326 audit(1792161095.271:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 120.265180][ T28] audit: type=1326 audit(1792161095.291:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b92f9e559 code=0x7ffc0000 [ 120.676145][ T6486] netlink: 'syz.3.207': attribute type 16 has an invalid length. [ 120.683970][ T6486] netlink: 'syz.3.207': attribute type 17 has an invalid length. [ 120.733711][ T6484] loop1: detected capacity change from 0 to 4096 [ 120.866261][ T6486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.885924][ T6484] ntfs3: loop1: Failed to load $Extend (-22). [ 120.892413][ T6484] ntfs3: loop1: Failed to initialize $Extend. [ 121.142035][ T2908] ntfs3: loop1: ino=5, "/" mi_enum_attr [ 121.167962][ T2923] ntfs3: loop1: ino=5, mi_enum_attr [ 121.175149][ T2923] ntfs3: loop1: ino=1e, "file1" failed to open parent directory r=5 to update [ 121.199313][ T6484] ntfs3: loop1: ino=5, mi_enum_attr [ 121.216355][ T6484] ntfs3: loop1: ino=1e, "file1" failed to open parent directory r=5 to update [ 121.228654][ T6484] ntfs3: loop1: ino=5, mi_enum_attr [ 121.256110][ T6484] ntfs3: loop1: ino=1e, "file1" failed to open parent directory r=5 to write [ 121.292882][ T6484] ntfs3: loop1: ino=5, mi_enum_attr [ 121.377897][ T6500] warning: `syz.2.215' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.173660][ T6526] loop3: detected capacity change from 0 to 2048 [ 122.234564][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.300327][ T6526] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.475125][ T6526] fs-verity: sha512 using implementation "sha512-avx2" [ 122.698200][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.484858][ T6548] loop1: detected capacity change from 0 to 40427 [ 123.516657][ T6548] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 123.523079][ T6548] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 123.533326][ T6548] F2FS-fs (loop1): invalid crc value [ 123.754067][ T6548] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 123.771594][ T6548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.858223][ T6548] syz.1.231: attempt to access beyond end of device [ 123.858223][ T6548] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 123.943541][ T5777] syz-executor: attempt to access beyond end of device [ 123.943541][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.960726][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 124.665568][ T5842] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.747509][ T6556] loop0: detected capacity change from 0 to 40427 [ 124.782534][ T6556] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 124.804992][ T6556] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.845969][ T6556] F2FS-fs (loop0): invalid crc value [ 124.861053][ T5842] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 124.884383][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.920387][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.955548][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 124.987771][ T5842] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 124.997552][ T5842] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 125.015587][ T5842] usb 3-1: Manufacturer: syz [ 125.030526][ T6556] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.038636][ T5842] usb 3-1: config 0 descriptor?? [ 125.261400][ T6556] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.280445][ T6556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.467993][ T5842] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 125.491049][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 125.491064][ T28] audit: type=1804 audit(1792161100.821:48): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.235" name="/newroot/64/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 125.521224][ T5842] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 125.536337][ T5842] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 125.569027][ T6593] tipc: Started in network mode [ 125.574307][ T6593] tipc: Node identity ac1414aa, cluster identity 4711 [ 125.610191][ T6593] tipc: Enabled bearer , priority 10 [ 125.960358][ T5778] syz-executor: attempt to access beyond end of device [ 125.960358][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.001329][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 126.728534][ T970] tipc: Node number set to 2886997162 [ 127.042828][ T6624] netlink: 'syz.3.259': attribute type 3 has an invalid length. [ 127.391281][ T6632] loop0: detected capacity change from 0 to 4096 [ 127.488395][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.530448][ T23] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 127.558304][ T6632] ntfs3: loop0: Failed to load $Extend (-22). [ 127.564486][ T6632] ntfs3: loop0: Failed to initialize $Extend. [ 127.655815][ T5842] usb 3-1: USB disconnect, device number 4 [ 127.783967][ T6640] syz.3.265 uses obsolete (PF_INET,SOCK_PACKET) [ 127.923314][ T6640] loop3: detected capacity change from 0 to 2048 [ 128.016881][ T5783] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.247026][ T6629] loop1: detected capacity change from 0 to 40427 [ 128.265217][ T6629] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 128.293286][ T6629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.320379][ T6629] F2FS-fs (loop1): invalid crc value [ 128.350760][ T6629] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.441803][ T6629] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 128.456640][ T6629] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.568771][ T28] audit: type=1804 audit(1792161103.901:49): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.261" name="/newroot/70/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 128.713334][ T6642] loop0: detected capacity change from 0 to 32768 [ 128.742275][ T6642] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.266 (6642) [ 128.789664][ T6642] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.822620][ T6642] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 128.850470][ T6642] BTRFS info (device loop0): using free space tree [ 128.998651][ T6642] BTRFS info (device loop0): enabling ssd optimizations [ 129.035564][ T6642] BTRFS info (device loop0): auto enabling async discard [ 129.052492][ T5777] syz-executor: attempt to access beyond end of device [ 129.052492][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.077197][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 129.256340][ T5778] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.796775][ T28] audit: type=1804 audit(1792161105.111:50): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.276" name="bus" dev="ramfs" ino=10089 res=1 errno=0 [ 130.697232][ T6708] loop0: detected capacity change from 0 to 2048 [ 130.762571][ T6708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.780994][ T6708] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.820567][ T6708] EXT4-fs (loop0): shut down requested (1) [ 130.891110][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.154546][ T6696] loop3: detected capacity change from 0 to 40427 [ 131.170904][ T6696] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 131.184717][ T6696] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 131.211924][ T6696] F2FS-fs (loop3): invalid crc value [ 131.235994][ T5780] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.256072][ T6696] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.401578][ T6696] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 131.416209][ T6696] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.445471][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 131.452922][ T5780] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.485611][ T5780] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.514929][ T5780] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.547302][ T5780] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 131.569501][ T28] audit: type=1804 audit(1792161106.901:51): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.281" name="/newroot/70/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 131.594405][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.621664][ T5780] hub 2-1:1.0: bad descriptor, ignoring hub [ 131.635564][ T5780] hub: probe of 2-1:1.0 failed with error -5 [ 131.657860][ T5780] cdc_wdm 2-1:1.0: skipping garbage [ 131.676478][ T5780] cdc_wdm 2-1:1.0: skipping garbage [ 131.711981][ T5780] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 131.733177][ T5780] cdc_wdm 2-1:1.0: Unknown control protocol [ 131.814787][ T6736] loop8: detected capacity change from 0 to 8 [ 131.871603][ T6736] Dev loop8: unable to read RDB block 8 [ 131.890675][ T6736] loop8: unable to read partition table [ 131.910397][ T6736] loop8: partition table beyond EOD, truncated [ 131.941300][ T6736] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 132.167724][ T5776] syz-executor: attempt to access beyond end of device [ 132.167724][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.197170][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 132.559685][ T6719] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 133.071483][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.078403][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.864245][ T6766] loop0: detected capacity change from 0 to 40427 [ 133.884998][ T6766] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 133.923070][ T6766] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 133.941085][ T6766] F2FS-fs (loop0): invalid crc value [ 133.978288][ T6766] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.087751][ T5843] usb 2-1: USB disconnect, device number 6 [ 134.160797][ T6766] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.196330][ T6766] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.277486][ T6777] Bluetooth: MGMT ver 1.22 [ 134.313320][ T28] audit: type=1804 audit(1792161109.641:52): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.308" name="/newroot/80/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 134.504432][ T6770] loop3: detected capacity change from 0 to 32768 [ 134.610952][ T6770] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.837828][ T6770] XFS (loop3): Ending clean mount [ 134.872861][ T6770] XFS (loop3): Quotacheck needed: Please wait. [ 134.904437][ T5778] syz-executor: attempt to access beyond end of device [ 134.904437][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.934588][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 135.025993][ T6770] XFS (loop3): Quotacheck: Done. [ 135.154314][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.885927][ T6821] loop2: detected capacity change from 0 to 1024 [ 135.913760][ T6821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.955267][ T6821] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.038542][ T6821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.052740][ T6821] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.103687][ T6821] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.323: bg 0: block 112: padding at end of block bitmap is not set [ 136.127424][ T6821] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 136.145453][ T5878] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 136.158247][ T6821] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.158247][ T6821] [ 136.171201][ T6821] EXT4-fs (loop2): Total free blocks count 0 [ 136.179985][ T6821] EXT4-fs (loop2): Free/Dirty block details [ 136.188627][ T6821] EXT4-fs (loop2): free_blocks=0 [ 136.198738][ T6821] EXT4-fs (loop2): dirty_blocks=64 [ 136.205291][ T6821] EXT4-fs (loop2): Block reservation details [ 136.212982][ T6821] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 136.270854][ T2923] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 136.338597][ T5878] usb 4-1: config index 0 descriptor too short (expected 321, got 124) [ 136.358591][ T5878] usb 4-1: config 103 has too many interfaces: 159, using maximum allowed: 32 [ 136.379199][ T5878] usb 4-1: config 103 contains an unexpected descriptor of type 0x1, skipping [ 136.397721][ T5878] usb 4-1: config 103 has an invalid descriptor of length 0, skipping remainder of the config [ 136.419893][ T5878] usb 4-1: config 103 has 0 interfaces, different from the descriptor's value: 159 [ 136.443400][ T5878] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 136.452926][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.471243][ T5878] usb 4-1: Product: syz [ 136.485507][ T5878] usb 4-1: Manufacturer: syz [ 136.490224][ T5878] usb 4-1: SerialNumber: syz [ 136.600252][ T28] audit: type=1800 audit(1792161111.931:53): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.328" name="console" dev="configfs" ino=10656 res=0 errno=0 [ 136.724647][ T5878] usb 4-1: USB disconnect, device number 4 [ 136.765297][ T6835] loop1: detected capacity change from 0 to 40427 [ 136.817011][ T6835] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 136.823700][ T6835] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 136.858274][ T6835] F2FS-fs (loop1): invalid crc value [ 136.879815][ T6835] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.941380][ T6835] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 136.952266][ T6835] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 136.963362][ T6847] raw_sendmsg: syz.0.330 forgot to set AF_INET. Fix it! [ 137.101412][ T28] audit: type=1804 audit(1792161112.431:54): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.326" name="/newroot/84/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 137.531991][ T5777] syz-executor: attempt to access beyond end of device [ 137.531991][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.568425][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 137.700874][ T6866] loop3: detected capacity change from 0 to 512 [ 137.722284][ T6866] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.761562][ T6866] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.339: corrupted in-inode xattr: e_value size too large [ 137.860462][ T6866] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.339: couldn't read orphan inode 15 (err -117) [ 137.927569][ T6866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.009588][ T6866] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 12: comm syz.3.339: lblock 3 mapped to illegal pblock 12 (length 1) [ 138.138712][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.173136][ T6872] netlink: 'syz.1.338': attribute type 8 has an invalid length. [ 138.193176][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 138.206195][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 138.435960][ T970] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.649076][ T970] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 138.669635][ T970] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 138.686428][ T970] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 138.706755][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.734785][ T970] usb 1-1: probing VID:PID(0424:012C) [ 138.765697][ T970] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 138.781311][ T970] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 138.788406][ T970] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 138.794821][ T970] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 138.812152][ T970] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 139.168009][ T970] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 139.315833][ T6906] netlink: 'syz.3.355': attribute type 4 has an invalid length. [ 139.358622][ T6906] netlink: 'syz.3.355': attribute type 4 has an invalid length. [ 139.378124][ T970] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 139.556859][ T5878] IPVS: starting estimator thread 0... [ 139.650895][ T6917] IPVS: using max 21 ests per chain, 50400 per kthread [ 140.453013][ T970] usb 1-1: USB disconnect, device number 4 [ 140.460759][ T5843] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 140.544447][ T970] USB vub300 remote SDIO host controller[0] now disconnected [ 141.306047][ C0] [ 141.316614][ C0] ============================= [ 141.321515][ C0] WARNING: suspicious RCU usage [ 141.326494][ C0] syzkaller #0 Not tainted [ 141.330974][ C0] ----------------------------- [ 141.335912][ C0] kernel/sched/core.c:10174 Illegal context switch in RCU-sched read-side critical section! [ 141.346081][ C0] [ 141.346081][ C0] other info that might help us debug this: [ 141.346081][ C0] [ 141.356426][ C0] [ 141.356426][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 141.364581][ C0] 9 locks held by syz-executor/5778: [ 141.369961][ C0] #0: ffffffff8dfd44d0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x298/0x1e30 [ 141.378915][ C0] #1: ffff88807655e0a0 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 141.388030][ C0] #2: ffff88801886c420 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 141.397368][ C0] #3: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 141.407017][ C0] #4: ffff888030f24c18 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 141.417806][ C0] #5: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 141.427436][ C0] #6: ffff888030c14918 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 141.437962][ C0] #7: ffffffff8df321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 141.447503][ C0] #8: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 141.458096][ C0] [ 141.458096][ C0] stack backtrace: [ 141.464033][ C0] CPU: 0 PID: 5778 Comm: syz-executor Not tainted syzkaller #0 [ 141.471608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.481723][ C0] Call Trace: [ 141.485020][ C0] [ 141.487896][ C0] dump_stack_lvl+0x18c/0x250 [ 141.492637][ C0] ? show_regs_print_info+0x20/0x20 [ 141.497870][ C0] ? load_image+0x420/0x420 [ 141.502411][ C0] lockdep_rcu_suspicious+0x1e1/0x300 [ 141.507807][ C0] __might_resched+0x123/0x5f0 [ 141.512597][ C0] ? __might_sleep+0xe0/0xe0 [ 141.517231][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 141.523197][ C0] ? _raw_spin_unlock+0x40/0x40 [ 141.528092][ C0] ? kasan_set_track+0x5f/0x70 [ 141.532890][ C0] ? kasan_save_free_info+0x28/0x40 [ 141.538118][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 141.543522][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 141.549200][ C0] __flush_work+0x10f/0xac0 [ 141.553745][ C0] ? flush_work+0x20/0x20 [ 141.558100][ C0] ? __timer_delete+0x6b/0x290 [ 141.562905][ C0] ? mark_lock+0x94/0x320 [ 141.567272][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 141.573287][ C0] ? mod_delayed_work_on+0x1c0/0x1c0 [ 141.578603][ C0] ? lock_chain_count+0x20/0x20 [ 141.583487][ C0] ? __cancel_work_timer+0x36e/0x560 [ 141.588825][ C0] __cancel_work_timer+0x3f8/0x560 [ 141.593972][ C0] ? cancel_work_sync+0x20/0x20 [ 141.598850][ C0] ? kobject_put+0x260/0x450 [ 141.603492][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 141.608567][ C0] ? kobject_put+0x421/0x450 [ 141.613198][ C0] mmc_free_host+0x19/0x40 [ 141.617648][ C0] call_timer_fn+0x189/0x540 [ 141.622263][ C0] ? kref_get+0x70/0x70 [ 141.626450][ C0] ? call_timer_fn+0xd2/0x540 [ 141.631156][ C0] ? __run_timers+0x810/0x810 [ 141.635873][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.641116][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 141.646360][ C0] ? kref_get+0x70/0x70 [ 141.650546][ C0] __run_timers+0x570/0x810 [ 141.655095][ C0] ? detach_timer+0x2b0/0x2b0 [ 141.659826][ C0] ? lock_chain_count+0x20/0x20 [ 141.664735][ C0] run_timer_softirq+0x67/0xf0 [ 141.669529][ C0] handle_softirqs+0x27d/0x820 [ 141.674318][ C0] ? read_tsc+0x9/0x20 [ 141.678506][ C0] ? ktime_get+0x24b/0x280 [ 141.682953][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 141.687747][ C0] ? do_softirq+0x1a0/0x1a0 [ 141.692281][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 141.697520][ C0] __irq_exit_rcu+0xd3/0x190 [ 141.702139][ C0] ? irq_exit_rcu+0x20/0x20 [ 141.706682][ C0] irq_exit_rcu+0x9/0x20 [ 141.710947][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 141.716608][ C0] [ 141.719566][ C0] [ 141.722521][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.728891][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 141.734204][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 141.753845][ C0] RSP: 0018:ffffc90003db73a0 EFLAGS: 00000206 [ 141.759942][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ac72e14981a1b500 [ 141.767976][ C0] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160 [ 141.775981][ C0] RBP: ffffc90003db74a8 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 141.783979][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 1ffff920007b6e80 [ 141.792074][ C0] R13: ffffffff8df321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 141.800095][ C0] ? read_lock_is_recursive+0x20/0x20 [ 141.805520][ C0] ? page_ext_put+0x9c/0xb0 [ 141.810056][ C0] ? pfn_valid+0xcd/0x420 [ 141.814448][ C0] pfn_valid+0xe9/0x420 [ 141.818644][ C0] ? pfn_valid+0xcd/0x420 [ 141.823006][ C0] page_table_check_set+0x25/0x6e0 [ 141.828157][ C0] copy_page_range+0x24fc/0x3700 [ 141.833173][ C0] ? pfn_valid+0x450/0x450 [ 141.837715][ C0] ? copy_mm+0x1705/0x1e30 [ 141.842171][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 141.847264][ C0] ? down_write+0x16e/0x200 [ 141.851804][ C0] ? up_write+0x1be/0x410 [ 141.856171][ C0] copy_mm+0x1751/0x1e30 [ 141.860461][ C0] ? copy_signal+0x640/0x640 [ 141.865098][ C0] ? __init_rwsem+0x122/0x160 [ 141.869805][ C0] ? copy_signal+0x51f/0x640 [ 141.874426][ C0] copy_process+0x16c9/0x3da0 [ 141.879143][ C0] ? copy_process+0x98e/0x3da0 [ 141.883958][ C0] ? __pidfd_prepare+0x140/0x140 [ 141.888931][ C0] kernel_clone+0x24b/0x8a0 [ 141.893465][ C0] ? create_io_thread+0x190/0x190 [ 141.898529][ C0] ? __might_fault+0xaa/0x120 [ 141.903243][ C0] __x64_sys_clone+0x1b7/0x230 [ 141.908045][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 141.913111][ C0] ? lock_chain_count+0x20/0x20 [ 141.918025][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 141.923266][ C0] do_syscall_64+0x55/0xb0 [ 141.927710][ C0] ? clear_bhb_loop+0x40/0x90 [ 141.932442][ C0] ? clear_bhb_loop+0x40/0x90 [ 141.937147][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.943082][ C0] RIP: 0033:0x7f3730bc6fd2 [ 141.947562][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 141.967199][ C0] RSP: 002b:00007ffc2a523bf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 141.975642][ C0] RAX: ffffffffffffffda RBX: 00007ffc2a523bf0 RCX: 00007f3730bc6fd2 [ 141.983641][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 141.991642][ C0] RBP: 00007ffc2a523d7c R08: 0000000000000000 R09: 0000000000000001 [ 141.999643][ C0] R10: 0000555562ceb7d0 R11: 0000000000000246 R12: 0000000000000001 [ 142.007640][ C0] R13: 00000000000927c0 R14: 00000000000227a3 R15: 00007ffc2a523dd0 [ 142.015661][ C0] [ 142.018757][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 142.027881][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5778, name: syz-executor [ 142.037216][ C0] preempt_count: 103, expected: 0 [ 142.042284][ C0] RCU nest depth: 2, expected: 0 [ 142.047314][ C0] 9 locks held by syz-executor/5778: [ 142.052645][ C0] #0: ffffffff8dfd44d0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x298/0x1e30 [ 142.061592][ C0] #1: ffff88807655e0a0 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 142.070709][ C0] #2: ffff88801886c420 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 142.080041][ C0] #3: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 142.089670][ C0] #4: ffff888030f24c18 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 142.100456][ C0] #5: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 142.110122][ C0] #6: ffff888030c14918 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 142.120662][ C0] #7: ffffffff8df321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 142.130216][ C0] #8: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 142.140818][ C0] Preemption disabled at: [ 142.140832][ C0] [<0000000000000000>] 0x0 [ 142.149689][ C0] CPU: 0 PID: 5778 Comm: syz-executor Not tainted syzkaller #0 [ 142.157316][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.167431][ C0] Call Trace: [ 142.170781][ C0] [ 142.173699][ C0] dump_stack_lvl+0x18c/0x250 [ 142.178444][ C0] ? show_regs_print_info+0x20/0x20 [ 142.183699][ C0] ? load_image+0x420/0x420 [ 142.188289][ C0] __might_resched+0x48d/0x5f0 [ 142.193134][ C0] ? __might_sleep+0xe0/0xe0 [ 142.197800][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 142.203757][ C0] ? _raw_spin_unlock+0x40/0x40 [ 142.208676][ C0] ? kasan_set_track+0x5f/0x70 [ 142.213506][ C0] ? kasan_save_free_info+0x28/0x40 [ 142.218771][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 142.224378][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 142.230076][ C0] __flush_work+0x10f/0xac0 [ 142.234638][ C0] ? flush_work+0x20/0x20 [ 142.239016][ C0] ? __timer_delete+0x6b/0x290 [ 142.243838][ C0] ? mark_lock+0x94/0x320 [ 142.248226][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 142.254291][ C0] ? mod_delayed_work_on+0x1c0/0x1c0 [ 142.259628][ C0] ? lock_chain_count+0x20/0x20 [ 142.264545][ C0] ? __cancel_work_timer+0x36e/0x560 [ 142.269887][ C0] __cancel_work_timer+0x3f8/0x560 [ 142.275060][ C0] ? cancel_work_sync+0x20/0x20 [ 142.279977][ C0] ? kobject_put+0x260/0x450 [ 142.284629][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 142.289728][ C0] ? kobject_put+0x421/0x450 [ 142.294385][ C0] mmc_free_host+0x19/0x40 [ 142.298858][ C0] call_timer_fn+0x189/0x540 [ 142.303513][ C0] ? kref_get+0x70/0x70 [ 142.307722][ C0] ? call_timer_fn+0xd2/0x540 [ 142.312459][ C0] ? __run_timers+0x810/0x810 [ 142.317248][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.322510][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 142.327799][ C0] ? kref_get+0x70/0x70 [ 142.332014][ C0] __run_timers+0x570/0x810 [ 142.336589][ C0] ? detach_timer+0x2b0/0x2b0 [ 142.341336][ C0] ? lock_chain_count+0x20/0x20 [ 142.346249][ C0] run_timer_softirq+0x67/0xf0 [ 142.351066][ C0] handle_softirqs+0x27d/0x820 [ 142.355894][ C0] ? read_tsc+0x9/0x20 [ 142.360021][ C0] ? ktime_get+0x24b/0x280 [ 142.364505][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 142.369325][ C0] ? do_softirq+0x1a0/0x1a0 [ 142.373885][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 142.379157][ C0] __irq_exit_rcu+0xd3/0x190 [ 142.383817][ C0] ? irq_exit_rcu+0x20/0x20 [ 142.388378][ C0] irq_exit_rcu+0x9/0x20 [ 142.392767][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 142.398459][ C0] [ 142.401438][ C0] [ 142.404422][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.410496][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 142.415835][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 142.435496][ C0] RSP: 0018:ffffc90003db73a0 EFLAGS: 00000206 [ 142.441625][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ac72e14981a1b500 [ 142.449810][ C0] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160 [ 142.457814][ C0] RBP: ffffc90003db74a8 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 142.465822][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 1ffff920007b6e80 [ 142.473830][ C0] R13: ffffffff8df321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 142.481862][ C0] ? read_lock_is_recursive+0x20/0x20 [ 142.487275][ C0] ? page_ext_put+0x9c/0xb0 [ 142.491813][ C0] ? pfn_valid+0xcd/0x420 [ 142.496193][ C0] pfn_valid+0xe9/0x420 [ 142.500385][ C0] ? pfn_valid+0xcd/0x420 [ 142.504749][ C0] page_table_check_set+0x25/0x6e0 [ 142.509896][ C0] copy_page_range+0x24fc/0x3700 [ 142.514928][ C0] ? pfn_valid+0x450/0x450 [ 142.519382][ C0] ? copy_mm+0x1705/0x1e30 [ 142.523825][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 142.528882][ C0] ? down_write+0x16e/0x200 [ 142.533424][ C0] ? up_write+0x1be/0x410 [ 142.537808][ C0] copy_mm+0x1751/0x1e30 [ 142.542093][ C0] ? copy_signal+0x640/0x640 [ 142.546755][ C0] ? __init_rwsem+0x122/0x160 [ 142.551484][ C0] ? copy_signal+0x51f/0x640 [ 142.556102][ C0] copy_process+0x16c9/0x3da0 [ 142.560819][ C0] ? copy_process+0x98e/0x3da0 [ 142.565627][ C0] ? __pidfd_prepare+0x140/0x140 [ 142.570608][ C0] kernel_clone+0x24b/0x8a0 [ 142.575144][ C0] ? create_io_thread+0x190/0x190 [ 142.580234][ C0] ? __might_fault+0xaa/0x120 [ 142.584968][ C0] __x64_sys_clone+0x1b7/0x230 [ 142.589792][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 142.594855][ C0] ? lock_chain_count+0x20/0x20 [ 142.599764][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 142.604994][ C0] do_syscall_64+0x55/0xb0 [ 142.609458][ C0] ? clear_bhb_loop+0x40/0x90 [ 142.614189][ C0] ? clear_bhb_loop+0x40/0x90 [ 142.618892][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.624830][ C0] RIP: 0033:0x7f3730bc6fd2 [ 142.629270][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 142.648952][ C0] RSP: 002b:00007ffc2a523bf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 142.657412][ C0] RAX: ffffffffffffffda RBX: 00007ffc2a523bf0 RCX: 00007f3730bc6fd2 [ 142.665435][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 142.673466][ C0] RBP: 00007ffc2a523d7c R08: 0000000000000000 R09: 0000000000000001 [ 142.681508][ C0] R10: 0000555562ceb7d0 R11: 0000000000000246 R12: 0000000000000001 [ 142.689523][ C0] R13: 00000000000927c0 R14: 00000000000227a3 R15: 00007ffc2a523dd0 [ 142.697541][ C0] [ 142.700925][ C0] [ 142.703313][ C0] ============================= [ 142.708249][ C0] WARNING: suspicious RCU usage [ 142.713147][ C0] syzkaller #0 Tainted: G W [ 142.719142][ C0] ----------------------------- [ 142.724033][ C0] kernel/rcu/srcutree.c:1377 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 142.736133][ C0] [ 142.736133][ C0] other info that might help us debug this: [ 142.736133][ C0] [ 142.746454][ C0] [ 142.746454][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 142.754561][ C0] 9 locks held by syz-executor/5778: [ 142.759916][ C0] #0: ffffffff8dfd44d0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x298/0x1e30 [ 142.768794][ C0] #1: ffff88807655e0a0 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 142.777862][ C0] #2: ffff88801886c420 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 142.787171][ C0] #3: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 142.796789][ C0] #4: ffff888030f24c18 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 142.807517][ C0] #5: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 142.817153][ C0] #6: ffff888030c14918 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 142.827695][ C0] #7: ffffffff8df321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 142.837286][ C0] #8: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 142.847882][ C0] [ 142.847882][ C0] stack backtrace: [ 142.853821][ C0] CPU: 0 PID: 5778 Comm: syz-executor Tainted: G W syzkaller #0 [ 142.862932][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.873046][ C0] Call Trace: [ 142.876388][ C0] [ 142.879290][ C0] dump_stack_lvl+0x18c/0x250 [ 142.884028][ C0] ? show_regs_print_info+0x20/0x20 [ 142.889293][ C0] ? load_image+0x420/0x420 [ 142.893862][ C0] lockdep_rcu_suspicious+0x1e1/0x300 [ 142.899302][ C0] __synchronize_srcu+0x150/0x3d0 [ 142.904395][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 142.910366][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 142.916123][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 142.922058][ C0] ? _raw_spin_unlock+0x40/0x40 [ 142.926964][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 142.932888][ C0] ? read_tsc+0x9/0x20 [ 142.936984][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 142.942650][ C0] ? synchronize_srcu+0x25a/0x280 [ 142.947889][ C0] wakeup_source_unregister+0x116/0x190 [ 142.953513][ C0] mmc_host_classdev_release+0x47/0x100 [ 142.959098][ C0] ? mmc_free_host+0x40/0x40 [ 142.963717][ C0] device_release+0xbc/0x1e0 [ 142.968347][ C0] kobject_put+0x21b/0x450 [ 142.972807][ C0] call_timer_fn+0x189/0x540 [ 142.977426][ C0] ? kref_get+0x70/0x70 [ 142.981608][ C0] ? call_timer_fn+0xd2/0x540 [ 142.986329][ C0] ? __run_timers+0x810/0x810 [ 142.991036][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.996272][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 143.001494][ C0] ? kref_get+0x70/0x70 [ 143.005680][ C0] __run_timers+0x570/0x810 [ 143.010222][ C0] ? detach_timer+0x2b0/0x2b0 [ 143.014940][ C0] ? lock_chain_count+0x20/0x20 [ 143.019824][ C0] run_timer_softirq+0x67/0xf0 [ 143.024619][ C0] handle_softirqs+0x27d/0x820 [ 143.029411][ C0] ? read_tsc+0x9/0x20 [ 143.033508][ C0] ? ktime_get+0x24b/0x280 [ 143.037962][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 143.042772][ C0] ? do_softirq+0x1a0/0x1a0 [ 143.047305][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 143.052538][ C0] __irq_exit_rcu+0xd3/0x190 [ 143.057245][ C0] ? irq_exit_rcu+0x20/0x20 [ 143.061813][ C0] irq_exit_rcu+0x9/0x20 [ 143.066079][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 143.071760][ C0] [ 143.074755][ C0] [ 143.077732][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 143.083737][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 143.089054][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 143.108692][ C0] RSP: 0018:ffffc90003db73a0 EFLAGS: 00000206 [ 143.114787][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ac72e14981a1b500 [ 143.122785][ C0] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160 [ 143.130784][ C0] RBP: ffffc90003db74a8 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 143.138784][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 1ffff920007b6e80 [ 143.146791][ C0] R13: ffffffff8df321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 143.154809][ C0] ? read_lock_is_recursive+0x20/0x20 [ 143.160223][ C0] ? page_ext_put+0x9c/0xb0 [ 143.164758][ C0] ? pfn_valid+0xcd/0x420 [ 143.169117][ C0] pfn_valid+0xe9/0x420 [ 143.173304][ C0] ? pfn_valid+0xcd/0x420 [ 143.177681][ C0] page_table_check_set+0x25/0x6e0 [ 143.182838][ C0] copy_page_range+0x24fc/0x3700 [ 143.187860][ C0] ? pfn_valid+0x450/0x450 [ 143.192324][ C0] ? copy_mm+0x1705/0x1e30 [ 143.196776][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 143.201842][ C0] ? down_write+0x16e/0x200 [ 143.206386][ C0] ? up_write+0x1be/0x410 [ 143.210758][ C0] copy_mm+0x1751/0x1e30 [ 143.215051][ C0] ? copy_signal+0x640/0x640 [ 143.219692][ C0] ? __init_rwsem+0x122/0x160 [ 143.224401][ C0] ? copy_signal+0x51f/0x640 [ 143.229018][ C0] copy_process+0x16c9/0x3da0 [ 143.233731][ C0] ? copy_process+0x98e/0x3da0 [ 143.238529][ C0] ? __pidfd_prepare+0x140/0x140 [ 143.243500][ C0] kernel_clone+0x24b/0x8a0 [ 143.248042][ C0] ? create_io_thread+0x190/0x190 [ 143.253117][ C0] ? __might_fault+0xaa/0x120 [ 143.257832][ C0] __x64_sys_clone+0x1b7/0x230 [ 143.262635][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 143.267702][ C0] ? lock_chain_count+0x20/0x20 [ 143.272587][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 143.277909][ C0] do_syscall_64+0x55/0xb0 [ 143.282350][ C0] ? clear_bhb_loop+0x40/0x90 [ 143.287052][ C0] ? clear_bhb_loop+0x40/0x90 [ 143.291785][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.297712][ C0] RIP: 0033:0x7f3730bc6fd2 [ 143.302154][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 143.321797][ C0] RSP: 002b:00007ffc2a523bf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 143.330246][ C0] RAX: ffffffffffffffda RBX: 00007ffc2a523bf0 RCX: 00007f3730bc6fd2 [ 143.338246][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 143.346242][ C0] RBP: 00007ffc2a523d7c R08: 0000000000000000 R09: 0000000000000001 [ 143.354236][ C0] R10: 0000555562ceb7d0 R11: 0000000000000246 R12: 0000000000000001 [ 143.362234][ C0] R13: 00000000000927c0 R14: 00000000000227a3 R15: 00007ffc2a523dd0 [ 143.370248][ C0] [ 143.373381][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1381 [ 143.382766][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5778, name: syz-executor [ 143.392071][ C0] preempt_count: 103, expected: 0 [ 143.397219][ C0] RCU nest depth: 2, expected: 0 [ 143.402208][ C0] 9 locks held by syz-executor/5778: [ 143.407582][ C0] #0: ffffffff8dfd44d0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x298/0x1e30 [ 143.416529][ C0] #1: ffff88807655e0a0 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 143.425723][ C0] #2: ffff88801886c420 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 143.434991][ C0] #3: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 143.444650][ C0] #4: ffff888030f24c18 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 143.455455][ C0] #5: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 143.465038][ C0] #6: ffff888030c14918 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 143.475577][ C0] #7: ffffffff8df321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 143.485086][ C0] #8: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 143.495711][ C0] Preemption disabled at: [ 143.495727][ C0] [<0000000000000000>] 0x0 [ 143.504562][ C0] CPU: 0 PID: 5778 Comm: syz-executor Tainted: G W syzkaller #0 [ 143.513630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.523731][ C0] Call Trace: [ 143.527086][ C0] [ 143.529972][ C0] dump_stack_lvl+0x18c/0x250 [ 143.534702][ C0] ? show_regs_print_info+0x20/0x20 [ 143.540039][ C0] ? load_image+0x420/0x420 [ 143.544616][ C0] __might_resched+0x48d/0x5f0 [ 143.549438][ C0] ? show_regs_print_info+0x20/0x20 [ 143.554683][ C0] ? __might_sleep+0xe0/0xe0 [ 143.559333][ C0] __synchronize_srcu+0x197/0x3d0 [ 143.564392][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 143.570317][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 143.576084][ C0] ? read_tsc+0x9/0x20 [ 143.580181][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 143.585760][ C0] ? synchronize_srcu+0x25a/0x280 [ 143.590823][ C0] wakeup_source_unregister+0x116/0x190 [ 143.596401][ C0] mmc_host_classdev_release+0x47/0x100 [ 143.601996][ C0] ? mmc_free_host+0x40/0x40 [ 143.606612][ C0] device_release+0xbc/0x1e0 [ 143.611244][ C0] kobject_put+0x21b/0x450 [ 143.615695][ C0] call_timer_fn+0x189/0x540 [ 143.620310][ C0] ? kref_get+0x70/0x70 [ 143.624493][ C0] ? call_timer_fn+0xd2/0x540 [ 143.629196][ C0] ? __run_timers+0x810/0x810 [ 143.633903][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.639135][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 143.644361][ C0] ? kref_get+0x70/0x70 [ 143.648552][ C0] __run_timers+0x570/0x810 [ 143.653099][ C0] ? detach_timer+0x2b0/0x2b0 [ 143.657899][ C0] ? lock_chain_count+0x20/0x20 [ 143.662802][ C0] run_timer_softirq+0x67/0xf0 [ 143.667617][ C0] handle_softirqs+0x27d/0x820 [ 143.672428][ C0] ? read_tsc+0x9/0x20 [ 143.676531][ C0] ? ktime_get+0x24b/0x280 [ 143.680991][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 143.685796][ C0] ? do_softirq+0x1a0/0x1a0 [ 143.690432][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 143.695676][ C0] __irq_exit_rcu+0xd3/0x190 [ 143.700296][ C0] ? irq_exit_rcu+0x20/0x20 [ 143.704841][ C0] irq_exit_rcu+0x9/0x20 [ 143.709111][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 143.714782][ C0] [ 143.717740][ C0] [ 143.720717][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 143.726724][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 143.732044][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 143.751670][ C0] RSP: 0018:ffffc90003db73a0 EFLAGS: 00000206 [ 143.757785][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ac72e14981a1b500 [ 143.765785][ C0] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160 [ 143.773784][ C0] RBP: ffffc90003db74a8 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 143.781778][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 1ffff920007b6e80 [ 143.789780][ C0] R13: ffffffff8df321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 143.797802][ C0] ? read_lock_is_recursive+0x20/0x20 [ 143.803240][ C0] ? page_ext_put+0x9c/0xb0 [ 143.807817][ C0] ? pfn_valid+0xcd/0x420 [ 143.812185][ C0] pfn_valid+0xe9/0x420 [ 143.816369][ C0] ? pfn_valid+0xcd/0x420 [ 143.820733][ C0] page_table_check_set+0x25/0x6e0 [ 143.825908][ C0] copy_page_range+0x24fc/0x3700 [ 143.830920][ C0] ? pfn_valid+0x450/0x450 [ 143.835381][ C0] ? copy_mm+0x1705/0x1e30 [ 143.839843][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 143.844899][ C0] ? down_write+0x16e/0x200 [ 143.849466][ C0] ? up_write+0x1be/0x410 [ 143.853828][ C0] copy_mm+0x1751/0x1e30 [ 143.858131][ C0] ? copy_signal+0x640/0x640 [ 143.862762][ C0] ? __init_rwsem+0x122/0x160 [ 143.867467][ C0] ? copy_signal+0x51f/0x640 [ 143.872084][ C0] copy_process+0x16c9/0x3da0 [ 143.876805][ C0] ? copy_process+0x98e/0x3da0 [ 143.881632][ C0] ? __pidfd_prepare+0x140/0x140 [ 143.886610][ C0] kernel_clone+0x24b/0x8a0 [ 143.891175][ C0] ? create_io_thread+0x190/0x190 [ 143.896262][ C0] ? __might_fault+0xaa/0x120 [ 143.900994][ C0] __x64_sys_clone+0x1b7/0x230 [ 143.905804][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 143.910886][ C0] ? lock_chain_count+0x20/0x20 [ 143.915793][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 143.921035][ C0] do_syscall_64+0x55/0xb0 [ 143.925489][ C0] ? clear_bhb_loop+0x40/0x90 [ 143.930289][ C0] ? clear_bhb_loop+0x40/0x90 [ 143.935000][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.940937][ C0] RIP: 0033:0x7f3730bc6fd2 [ 143.945390][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 143.965039][ C0] RSP: 002b:00007ffc2a523bf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 143.973491][ C0] RAX: ffffffffffffffda RBX: 00007ffc2a523bf0 RCX: 00007f3730bc6fd2 [ 143.981509][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 143.989594][ C0] RBP: 00007ffc2a523d7c R08: 0000000000000000 R09: 0000000000000001 [ 143.997678][ C0] R10: 0000555562ceb7d0 R11: 0000000000000246 R12: 0000000000000001 [ 144.005676][ C0] R13: 00000000000927c0 R14: 00000000000227a3 R15: 00007ffc2a523dd0 [ 144.013703][ C0] [ 144.016848][ C0] ODEBUG: object ffffc900000079c0 is NOT on stack ffffc90003db0000, but annotated. [ 144.018944][ C0] [ 144.018950][ C0] ====================================================== [ 144.018955][ C0] WARNING: possible circular locking dependency detected [ 144.018963][ C0] syzkaller #0 Tainted: G W [ 144.018973][ C0] ------------------------------------------------------ [ 144.018978][ C0] syz-executor/5778 is trying to acquire lock: [ 144.018989][ C0] ffffffff8df263e0 (console_owner){..-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 144.019047][ C0] [ 144.019047][ C0] but task is already holding lock: [ 144.019052][ C0] ffffffff98350bf0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 144.019103][ C0] [ 144.019103][ C0] which lock already depends on the new lock. [ 144.019103][ C0] [ 144.019108][ C0] [ 144.019108][ C0] the existing dependency chain (in reverse order) is: [ 144.019114][ C0] [ 144.019114][ C0] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 144.019139][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 144.019167][ C0] debug_object_activate+0x6c/0x500 [ 144.019194][ C0] insert_work+0x35/0x310 [ 144.019215][ C0] __queue_work+0xbfd/0xfd0 [ 144.019233][ C0] queue_work_on+0x128/0x1f0 [ 144.019251][ C0] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 144.019283][ C0] rcu_init+0x10d/0x160 [ 144.019304][ C0] start_kernel+0x1fd/0x4e0 [ 144.019325][ C0] x86_64_start_reservations+0x2a/0x30 [ 144.019343][ C0] copy_bootdata+0x0/0xd0 [ 144.019359][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 144.019384][ C0] [ 144.019384][ C0] -> #3 (&pool->lock){-.-.}-{2:2}: [ 144.019409][ C0] _raw_spin_lock+0x2e/0x40 [ 144.019433][ C0] __queue_work+0x72f/0xfd0 [ 144.019459][ C0] queue_work_on+0x128/0x1f0 [ 144.019476][ C0] rpm_suspend+0x1133/0x1b60 [ 144.019493][ C0] __pm_runtime_idle+0x12f/0x1a0 [ 144.019509][ C0] __device_attach+0x352/0x420 [ 144.019527][ C0] bus_probe_device+0x180/0x260 [ 144.019554][ C0] device_add+0x87c/0xc40 [ 144.019575][ C0] serial_base_port_add+0x2f6/0x430 [ 144.019598][ C0] serial_core_register_port+0x378/0x20b0 [ 144.019617][ C0] serial8250_register_8250_port+0x15fd/0x1f40 [ 144.019642][ C0] serial_pnp_probe+0x577/0x750 [ 144.019666][ C0] pnp_device_probe+0x305/0x4b0 [ 144.019691][ C0] really_probe+0x247/0xae0 [ 144.019710][ C0] __driver_probe_device+0x1f5/0x390 [ 144.019729][ C0] driver_probe_device+0x4f/0x420 [ 144.019748][ C0] __driver_attach+0x444/0x6d0 [ 144.019766][ C0] bus_for_each_dev+0x235/0x2b0 [ 144.019793][ C0] bus_add_driver+0x340/0x630 [ 144.019820][ C0] driver_register+0x23a/0x310 [ 144.019839][ C0] serial8250_init+0x9a/0x170 [ 144.019858][ C0] do_one_initcall+0x242/0x790 [ 144.019881][ C0] do_initcall_level+0x13d/0x1f0 [ 144.019903][ C0] do_initcalls+0x69/0xd0 [ 144.019922][ C0] kernel_init_freeable+0x3d9/0x560 [ 144.019944][ C0] kernel_init+0x1d/0x1c0 [ 144.019967][ C0] ret_from_fork+0x48/0x80 [ 144.019989][ C0] ret_from_fork_asm+0x11/0x20 [ 144.020013][ C0] [ 144.020013][ C0] -> #2 (&dev->power.lock){-...}-{2:2}: [ 144.020039][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 144.020064][ C0] __pm_runtime_resume+0x10f/0x170 [ 144.020081][ C0] __uart_start+0x171/0x3e0 [ 144.020099][ C0] uart_write+0x449/0x5d0 [ 144.020117][ C0] n_tty_write+0xd3d/0x11e0 [ 144.020144][ C0] file_tty_write+0x529/0x960 [ 144.020166][ C0] vfs_write+0x474/0x9a0 [ 144.020192][ C0] ksys_write+0x151/0x260 [ 144.020217][ C0] do_syscall_64+0x55/0xb0 [ 144.020232][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.020261][ C0] [ 144.020261][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 144.020287][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 144.020313][ C0] serial8250_console_write+0x181/0x18b0 [ 144.020340][ C0] console_flush_all+0x6ad/0xcf0 [ 144.020363][ C0] console_unlock+0xad/0x350 [ 144.020385][ C0] vprintk_emit+0x497/0x610 [ 144.020406][ C0] _printk+0xde/0x130 [ 144.020429][ C0] register_console+0xb96/0xf00 [ 144.020458][ C0] univ8250_console_init+0x45/0x50 [ 144.020477][ C0] console_init+0x17b/0x5d0 [ 144.020497][ C0] start_kernel+0x2c8/0x4e0 [ 144.020517][ C0] x86_64_start_reservations+0x2a/0x30 [ 144.020535][ C0] copy_bootdata+0x0/0xd0 [ 144.020551][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 144.020576][ C0] [ 144.020576][ C0] -> #0 (console_owner){..-.}-{0:0}: [ 144.020600][ C0] __lock_acquire+0x3a07/0x7eb0 [ 144.020621][ C0] lock_acquire+0x19e/0x420 [ 144.020642][ C0] console_flush_all+0x676/0xcf0 [ 144.020665][ C0] console_unlock+0xad/0x350 [ 144.020685][ C0] vprintk_emit+0x497/0x610 [ 144.020706][ C0] _printk+0xde/0x130 [ 144.020729][ C0] __debug_object_init+0x18d/0x450 [ 144.020754][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 144.020778][ C0] wakeup_source_unregister+0x116/0x190 [ 144.020800][ C0] mmc_host_classdev_release+0x47/0x100 [ 144.020819][ C0] device_release+0xbc/0x1e0 [ 144.020845][ C0] kobject_put+0x21b/0x450 [ 144.020867][ C0] call_timer_fn+0x189/0x540 [ 144.020885][ C0] __run_timers+0x570/0x810 [ 144.020902][ C0] run_timer_softirq+0x67/0xf0 [ 144.020920][ C0] handle_softirqs+0x27d/0x820 [ 144.020938][ C0] __irq_exit_rcu+0xd3/0x190 [ 144.020956][ C0] irq_exit_rcu+0x9/0x20 [ 144.020973][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 144.020995][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.021013][ C0] lock_acquire+0x208/0x420 [ 144.021033][ C0] pfn_valid+0xe9/0x420 [ 144.021056][ C0] page_table_check_set+0x25/0x6e0 [ 144.021079][ C0] copy_page_range+0x24fc/0x3700 [ 144.021108][ C0] copy_mm+0x1751/0x1e30 [ 144.021126][ C0] copy_process+0x16c9/0x3da0 [ 144.021145][ C0] kernel_clone+0x24b/0x8a0 [ 144.021164][ C0] __x64_sys_clone+0x1b7/0x230 [ 144.021185][ C0] do_syscall_64+0x55/0xb0 [ 144.021200][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.021230][ C0] [ 144.021230][ C0] other info that might help us debug this: [ 144.021230][ C0] [ 144.021235][ C0] Chain exists of: [ 144.021235][ C0] console_owner --> &pool->lock --> &obj_hash[i].lock [ 144.021235][ C0] [ 144.021264][ C0] Possible unsafe locking scenario: [ 144.021264][ C0] [ 144.021268][ C0] CPU0 CPU1 [ 144.021273][ C0] ---- ---- [ 144.021277][ C0] lock(&obj_hash[i].lock); [ 144.021288][ C0] lock(&pool->lock); [ 144.021301][ C0] lock(&obj_hash[i].lock); [ 144.021313][ C0] lock(console_owner); [ 144.021324][ C0] [ 144.021324][ C0] *** DEADLOCK *** [ 144.021324][ C0] [ 144.021328][ C0] 12 locks held by syz-executor/5778: [ 144.021338][ C0] #0: ffffffff8dfd44d0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x298/0x1e30 [ 144.021385][ C0] #1: ffff88807655e0a0 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 144.021431][ C0] #2: ffff88801886c420 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 144.021487][ C0] #3: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 144.021533][ C0] #4: ffff888030f24c18 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 144.021582][ C0] #5: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 144.021627][ C0] #6: ffff888030c14918 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 144.021690][ C0] #7: ffffffff8df321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 144.021740][ C0] #8: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 144.021785][ C0] #9: ffffffff98350bf0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 144.021837][ C0] #10: ffffffff8df264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 144.021887][ C0] #11: ffffffff8de0dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 144.021936][ C0] [ 144.021936][ C0] stack backtrace: [ 144.021943][ C0] CPU: 0 PID: 5778 Comm: syz-executor Tainted: G W syzkaller #0 [ 144.021963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.021974][ C0] Call Trace: [ 144.021981][ C0] [ 144.021989][ C0] dump_stack_lvl+0x18c/0x250 [ 144.022009][ C0] ? load_image+0x420/0x420 [ 144.022034][ C0] ? show_regs_print_info+0x20/0x20 [ 144.022058][ C0] ? print_circular_bug+0x12b/0x1a0 [ 144.022086][ C0] check_noncircular+0x2fc/0x400 [ 144.022115][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 144.022138][ C0] ? lockdep_lock+0xf5/0x230 [ 144.022168][ C0] __lock_acquire+0x3a07/0x7eb0 [ 144.022205][ C0] ? verify_lock_unused+0x140/0x140 [ 144.022242][ C0] lock_acquire+0x19e/0x420 [ 144.022264][ C0] ? console_flush_all+0x10b/0xcf0 [ 144.022294][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 144.022315][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 144.022342][ C0] ? read_lock_is_recursive+0x20/0x20 [ 144.022366][ C0] ? __rwlock_init+0x150/0x150 [ 144.022394][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 144.022423][ C0] console_flush_all+0x676/0xcf0 [ 144.022454][ C0] ? console_flush_all+0x10b/0xcf0 [ 144.022480][ C0] ? console_flush_all+0x10b/0xcf0 [ 144.022511][ C0] ? is_console_locked+0x20/0x20 [ 144.022543][ C0] console_unlock+0xad/0x350 [ 144.022568][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 144.022600][ C0] vprintk_emit+0x497/0x610 [ 144.022625][ C0] ? printk_sprint+0x460/0x460 [ 144.022653][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 144.022683][ C0] _printk+0xde/0x130 [ 144.022712][ C0] ? load_image+0x420/0x420 [ 144.022738][ C0] ? alloc_object+0x1c/0x640 [ 144.022771][ C0] __debug_object_init+0x18d/0x450 [ 144.022802][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 144.022829][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 144.022857][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 144.022890][ C0] ? read_tsc+0x9/0x20 [ 144.022911][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 144.022952][ C0] ? synchronize_srcu+0x25a/0x280 [ 144.022980][ C0] wakeup_source_unregister+0x116/0x190 [ 144.023007][ C0] mmc_host_classdev_release+0x47/0x100 [ 144.023029][ C0] ? mmc_free_host+0x40/0x40 [ 144.023048][ C0] device_release+0xbc/0x1e0 [ 144.023076][ C0] kobject_put+0x21b/0x450 [ 144.023103][ C0] call_timer_fn+0x189/0x540 [ 144.023123][ C0] ? kref_get+0x70/0x70 [ 144.023143][ C0] ? call_timer_fn+0xd2/0x540 [ 144.023163][ C0] ? __run_timers+0x810/0x810 [ 144.023188][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.023215][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 144.023238][ C0] ? kref_get+0x70/0x70 [ 144.023259][ C0] __run_timers+0x570/0x810 [ 144.023288][ C0] ? detach_timer+0x2b0/0x2b0 [ 144.023311][ C0] ? lock_chain_count+0x20/0x20 [ 144.023337][ C0] run_timer_softirq+0x67/0xf0 [ 144.023357][ C0] handle_softirqs+0x27d/0x820 [ 144.023377][ C0] ? read_tsc+0x9/0x20 [ 144.023398][ C0] ? ktime_get+0x24b/0x280 [ 144.023422][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 144.023450][ C0] ? do_softirq+0x1a0/0x1a0 [ 144.023473][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 144.023501][ C0] __irq_exit_rcu+0xd3/0x190 [ 144.023522][ C0] ? irq_exit_rcu+0x20/0x20 [ 144.023546][ C0] irq_exit_rcu+0x9/0x20 [ 144.023565][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 144.023589][ C0] [ 144.023594][ C0] [ 144.023601][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.023622][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 144.023647][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 144.023663][ C0] RSP: 0018:ffffc90003db73a0 EFLAGS: 00000206 [ 144.023679][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ac72e14981a1b500 [ 144.023692][ C0] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160 [ 144.023706][ C0] RBP: ffffc90003db74a8 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 144.023721][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 1ffff920007b6e80 [ 144.023735][ C0] R13: ffffffff8df321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 144.023764][ C0] ? read_lock_is_recursive+0x20/0x20 [ 144.023791][ C0] ? page_ext_put+0x9c/0xb0 [ 144.023816][ C0] ? pfn_valid+0xcd/0x420 [ 144.023842][ C0] pfn_valid+0xe9/0x420 [ 144.023866][ C0] ? pfn_valid+0xcd/0x420 [ 144.023892][ C0] page_table_check_set+0x25/0x6e0 [ 144.023921][ C0] copy_page_range+0x24fc/0x3700 [ 144.023973][ C0] ? pfn_valid+0x450/0x450 [ 144.024005][ C0] ? copy_mm+0x1705/0x1e30 [ 144.024027][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 144.024051][ C0] ? down_write+0x16e/0x200 [ 144.024076][ C0] ? up_write+0x1be/0x410 [ 144.024094][ C0] copy_mm+0x1751/0x1e30 [ 144.024122][ C0] ? copy_signal+0x640/0x640 [ 144.024154][ C0] ? __init_rwsem+0x122/0x160 [ 144.024174][ C0] ? copy_signal+0x51f/0x640 [ 144.024198][ C0] copy_process+0x16c9/0x3da0 [ 144.024228][ C0] ? copy_process+0x98e/0x3da0 [ 144.024256][ C0] ? __pidfd_prepare+0x140/0x140 [ 144.024286][ C0] kernel_clone+0x24b/0x8a0 [ 144.024311][ C0] ? create_io_thread+0x190/0x190 [ 144.024339][ C0] ? __might_fault+0xaa/0x120 [ 144.024363][ C0] __x64_sys_clone+0x1b7/0x230 [ 144.024386][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 144.024416][ C0] ? lock_chain_count+0x20/0x20 [ 144.024449][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 144.024475][ C0] do_syscall_64+0x55/0xb0 [ 144.024493][ C0] ? clear_bhb_loop+0x40/0x90 [ 144.024512][ C0] ? clear_bhb_loop+0x40/0x90 [ 144.024532][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.024564][ C0] RIP: 0033:0x7f3730bc6fd2 [ 144.024581][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 144.024597][ C0] RSP: 002b:00007ffc2a523bf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 144.024617][ C0] RAX: ffffffffffffffda RBX: 00007ffc2a523bf0 RCX: 00007f3730bc6fd2 [ 144.024632][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 144.024644][ C0] RBP: 00007ffc2a523d7c R08: 0000000000000000 R09: 0000000000000001 [ 144.024656][ C0] R10: 0000555562ceb7d0 R11: 0000000000000246 R12: 0000000000000001 [ 144.024668][ C0] R13: 00000000000927c0 R14: 00000000000227a3 R15: 00007ffc2a523dd0 [ 144.024690][ C0] [ 145.467809][ C0] ------------[ cut here ]------------ [ 145.473292][ C0] WARNING: CPU: 0 PID: 5778 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 145.482880][ C0] Modules linked in: [ 145.486797][ C0] CPU: 0 PID: 5778 Comm: syz-executor Tainted: G W syzkaller #0 [ 145.495834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.505902][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 145.511829][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 af 1b 05 14 48 c7 c1 00 5a 1d 8b 48 c7 c7 60 5a 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 73 bf 4b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 145.531540][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010046 [ 145.537634][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: ac72e14981a1b500 [ 145.545627][ C0] RDX: 0000000000000100 RSI: 0000000000000104 RDI: 0000000000000000 [ 145.553615][ C0] RBP: dffffc0000000000 R08: ffffc90000007527 R09: 1ffff92000000ea4 [ 145.561605][ C0] R10: dffffc0000000000 R11: fffff52000000ea5 R12: ffff8880313f9e20 [ 145.569593][ C0] R13: ffff888030b59b60 R14: 0000000000000001 R15: ffffffff8acbe300 [ 145.577585][ C0] FS: 0000555562ceb500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 145.586539][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.593142][ C0] CR2: 00007f37319556c8 CR3: 000000006118b000 CR4: 00000000003506f0 [ 145.601139][ C0] Call Trace: [ 145.604436][ C0] [ 145.607301][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 145.612353][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 145.618277][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 145.624034][ C0] ? read_tsc+0x9/0x20 [ 145.628126][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 145.633705][ C0] ? synchronize_srcu+0x25a/0x280 [ 145.638772][ C0] wakeup_source_unregister+0x116/0x190 [ 145.644347][ C0] mmc_host_classdev_release+0x47/0x100 [ 145.649917][ C0] ? mmc_free_host+0x40/0x40 [ 145.654563][ C0] device_release+0xbc/0x1e0 [ 145.659201][ C0] kobject_put+0x21b/0x450 [ 145.663645][ C0] call_timer_fn+0x189/0x540 [ 145.668273][ C0] ? kref_get+0x70/0x70 [ 145.672450][ C0] ? call_timer_fn+0xd2/0x540 [ 145.677145][ C0] ? __run_timers+0x810/0x810 [ 145.681845][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.687077][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 145.692295][ C0] ? kref_get+0x70/0x70 [ 145.696469][ C0] __run_timers+0x570/0x810 [ 145.701000][ C0] ? detach_timer+0x2b0/0x2b0 [ 145.705698][ C0] ? lock_chain_count+0x20/0x20 [ 145.710574][ C0] run_timer_softirq+0x67/0xf0 [ 145.715358][ C0] handle_softirqs+0x27d/0x820 [ 145.720145][ C0] ? read_tsc+0x9/0x20 [ 145.724231][ C0] ? ktime_get+0x24b/0x280 [ 145.728673][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 145.733467][ C0] ? do_softirq+0x1a0/0x1a0 [ 145.738003][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 145.743234][ C0] __irq_exit_rcu+0xd3/0x190 [ 145.747864][ C0] ? irq_exit_rcu+0x20/0x20 [ 145.752394][ C0] irq_exit_rcu+0x9/0x20 [ 145.756682][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 145.762344][ C0] [ 145.765290][ C0] [ 145.768243][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.774516][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 145.779836][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 145.799547][ C0] RSP: 0018:ffffc90003db73a0 EFLAGS: 00000206 [ 145.805639][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ac72e14981a1b500 [ 145.813715][ C0] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160 [ 145.821792][ C0] RBP: ffffc90003db74a8 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 145.829792][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 1ffff920007b6e80 [ 145.837894][ C0] R13: ffffffff8df321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 145.845927][ C0] ? read_lock_is_recursive+0x20/0x20 [ 145.851358][ C0] ? page_ext_put+0x9c/0xb0 [ 145.855902][ C0] ? pfn_valid+0xcd/0x420 [ 145.860281][ C0] pfn_valid+0xe9/0x420 [ 145.864477][ C0] ? pfn_valid+0xcd/0x420 [ 145.868840][ C0] page_table_check_set+0x25/0x6e0 [ 145.873984][ C0] copy_page_range+0x24fc/0x3700 [ 145.878988][ C0] ? pfn_valid+0x450/0x450 [ 145.883461][ C0] ? copy_mm+0x1705/0x1e30 [ 145.887909][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 145.892966][ C0] ? down_write+0x16e/0x200 [ 145.897498][ C0] ? up_write+0x1be/0x410 [ 145.901852][ C0] copy_mm+0x1751/0x1e30 [ 145.906225][ C0] ? copy_signal+0x640/0x640 [ 145.910851][ C0] ? __init_rwsem+0x122/0x160 [ 145.915551][ C0] ? copy_signal+0x51f/0x640 [ 145.920169][ C0] copy_process+0x16c9/0x3da0 [ 145.924881][ C0] ? copy_process+0x98e/0x3da0 [ 145.929675][ C0] ? __pidfd_prepare+0x140/0x140 [ 145.934640][ C0] kernel_clone+0x24b/0x8a0 [ 145.939176][ C0] ? create_io_thread+0x190/0x190 [ 145.944227][ C0] ? __might_fault+0xaa/0x120 [ 145.948933][ C0] __x64_sys_clone+0x1b7/0x230 [ 145.953723][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 145.958805][ C0] ? lock_chain_count+0x20/0x20 [ 145.963684][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 145.968927][ C0] do_syscall_64+0x55/0xb0 [ 145.973367][ C0] ? clear_bhb_loop+0x40/0x90 [ 145.978072][ C0] ? clear_bhb_loop+0x40/0x90 [ 145.982779][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.988796][ C0] RIP: 0033:0x7f3730bc6fd2 [ 145.993229][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 146.012868][ C0] RSP: 002b:00007ffc2a523bf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 146.021324][ C0] RAX: ffffffffffffffda RBX: 00007ffc2a523bf0 RCX: 00007f3730bc6fd2 [ 146.029327][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 146.037340][ C0] RBP: 00007ffc2a523d7c R08: 0000000000000000 R09: 0000000000000001 [ 146.045336][ C0] R10: 0000555562ceb7d0 R11: 0000000000000246 R12: 0000000000000001 [ 146.053336][ C0] R13: 00000000000927c0 R14: 00000000000227a3 R15: 00007ffc2a523dd0 [ 146.061340][ C0] [ 146.064383][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.071767][ C0] CPU: 0 PID: 5778 Comm: syz-executor Tainted: G W syzkaller #0 [ 146.080816][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.090906][ C0] Call Trace: [ 146.094222][ C0] [ 146.097090][ C0] dump_stack_lvl+0x18c/0x250 [ 146.101802][ C0] ? show_regs_print_info+0x20/0x20 [ 146.107026][ C0] ? load_image+0x420/0x420 [ 146.111562][ C0] panic+0x2ca/0x720 [ 146.115485][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 146.120024][ C0] __warn+0x2e0/0x470 [ 146.124029][ C0] ? __debug_object_init+0x18d/0x450 [ 146.129342][ C0] ? __debug_object_init+0x18d/0x450 [ 146.134656][ C0] report_bug+0x2be/0x4f0 [ 146.139006][ C0] ? __debug_object_init+0x18d/0x450 [ 146.144315][ C0] ? __debug_object_init+0x18d/0x450 [ 146.149626][ C0] ? __debug_object_init+0x18f/0x450 [ 146.154941][ C0] handle_bug+0xcf/0x120 [ 146.159208][ C0] exc_invalid_op+0x1a/0x50 [ 146.163728][ C0] asm_exc_invalid_op+0x1a/0x20 [ 146.168596][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 146.174521][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 af 1b 05 14 48 c7 c1 00 5a 1d 8b 48 c7 c7 60 5a 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 73 bf 4b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 146.194189][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010046 [ 146.200296][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: ac72e14981a1b500 [ 146.208304][ C0] RDX: 0000000000000100 RSI: 0000000000000104 RDI: 0000000000000000 [ 146.216321][ C0] RBP: dffffc0000000000 R08: ffffc90000007527 R09: 1ffff92000000ea4 [ 146.224324][ C0] R10: dffffc0000000000 R11: fffff52000000ea5 R12: ffff8880313f9e20 [ 146.232329][ C0] R13: ffff888030b59b60 R14: 0000000000000001 R15: ffffffff8acbe300 [ 146.240330][ C0] ? __debug_object_init+0x18d/0x450 [ 146.245654][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 146.250722][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 146.256651][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 146.262428][ C0] ? read_tsc+0x9/0x20 [ 146.266532][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 146.272116][ C0] ? synchronize_srcu+0x25a/0x280 [ 146.277173][ C0] wakeup_source_unregister+0x116/0x190 [ 146.282769][ C0] mmc_host_classdev_release+0x47/0x100 [ 146.288349][ C0] ? mmc_free_host+0x40/0x40 [ 146.292972][ C0] device_release+0xbc/0x1e0 [ 146.297592][ C0] kobject_put+0x21b/0x450 [ 146.302042][ C0] call_timer_fn+0x189/0x540 [ 146.306660][ C0] ? kref_get+0x70/0x70 [ 146.310837][ C0] ? call_timer_fn+0xd2/0x540 [ 146.315537][ C0] ? __run_timers+0x810/0x810 [ 146.320239][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.325484][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 146.330709][ C0] ? kref_get+0x70/0x70 [ 146.334895][ C0] __run_timers+0x570/0x810 [ 146.339428][ C0] ? detach_timer+0x2b0/0x2b0 [ 146.344129][ C0] ? lock_chain_count+0x20/0x20 [ 146.349004][ C0] run_timer_softirq+0x67/0xf0 [ 146.353792][ C0] handle_softirqs+0x27d/0x820 [ 146.358585][ C0] ? read_tsc+0x9/0x20 [ 146.362675][ C0] ? ktime_get+0x24b/0x280 [ 146.367128][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 146.372038][ C0] ? do_softirq+0x1a0/0x1a0 [ 146.376620][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 146.381868][ C0] __irq_exit_rcu+0xd3/0x190 [ 146.386486][ C0] ? irq_exit_rcu+0x20/0x20 [ 146.391016][ C0] irq_exit_rcu+0x9/0x20 [ 146.395288][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 146.400996][ C0] [ 146.403949][ C0] [ 146.406901][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 146.412923][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 146.418250][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 146.437972][ C0] RSP: 0018:ffffc90003db73a0 EFLAGS: 00000206 [ 146.444064][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ac72e14981a1b500 [ 146.452060][ C0] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160 [ 146.460054][ C0] RBP: ffffc90003db74a8 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 146.468060][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 1ffff920007b6e80 [ 146.476063][ C0] R13: ffffffff8df321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 146.484096][ C0] ? read_lock_is_recursive+0x20/0x20 [ 146.489512][ C0] ? page_ext_put+0x9c/0xb0 [ 146.494051][ C0] ? pfn_valid+0xcd/0x420 [ 146.498427][ C0] pfn_valid+0xe9/0x420 [ 146.502625][ C0] ? pfn_valid+0xcd/0x420 [ 146.506988][ C0] page_table_check_set+0x25/0x6e0 [ 146.512149][ C0] copy_page_range+0x24fc/0x3700 [ 146.517140][ C0] ? pfn_valid+0x450/0x450 [ 146.521583][ C0] ? copy_mm+0x1705/0x1e30 [ 146.526019][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 146.531067][ C0] ? down_write+0x16e/0x200 [ 146.535609][ C0] ? up_write+0x1be/0x410 [ 146.539962][ C0] copy_mm+0x1751/0x1e30 [ 146.544233][ C0] ? copy_signal+0x640/0x640 [ 146.548876][ C0] ? __init_rwsem+0x122/0x160 [ 146.553571][ C0] ? copy_signal+0x51f/0x640 [ 146.558184][ C0] copy_process+0x16c9/0x3da0 [ 146.562908][ C0] ? copy_process+0x98e/0x3da0 [ 146.567703][ C0] ? __pidfd_prepare+0x140/0x140 [ 146.572665][ C0] kernel_clone+0x24b/0x8a0 [ 146.577197][ C0] ? create_io_thread+0x190/0x190 [ 146.582248][ C0] ? __might_fault+0xaa/0x120 [ 146.586952][ C0] __x64_sys_clone+0x1b7/0x230 [ 146.591737][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 146.596788][ C0] ? lock_chain_count+0x20/0x20 [ 146.601687][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 146.606910][ C0] do_syscall_64+0x55/0xb0 [ 146.611342][ C0] ? clear_bhb_loop+0x40/0x90 [ 146.616049][ C0] ? clear_bhb_loop+0x40/0x90 [ 146.620749][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.626686][ C0] RIP: 0033:0x7f3730bc6fd2 [ 146.631126][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 146.650751][ C0] RSP: 002b:00007ffc2a523bf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 146.659191][ C0] RAX: ffffffffffffffda RBX: 00007ffc2a523bf0 RCX: 00007f3730bc6fd2 [ 146.667187][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 146.675178][ C0] RBP: 00007ffc2a523d7c R08: 0000000000000000 R09: 0000000000000001 [ 146.683171][ C0] R10: 0000555562ceb7d0 R11: 0000000000000246 R12: 0000000000000001 [ 146.691166][ C0] R13: 00000000000927c0 R14: 00000000000227a3 R15: 00007ffc2a523dd0 [ 146.699170][ C0] [ 146.702777][ C0] Kernel Offset: disabled [ 146.707126][ C0] Rebooting in 86400 seconds..